devchain-cli 0.14.1 → 0.16.0

package/dist/node_modules/@devchain/shared/__fixtures__/phase2-frames.js

@@ -0,0 +1,77 @@
+export const PHASE2_FIXTURE_IDS = Object.freeze({
+    userId: 'user-fixture-1',
+    instanceId: 'inst-fixture-1',
+    sessionId: 'sess-fixture-1',
+    agentId: 'agent-fixture-1',
+    projectId: 'proj-fixture-1',
+    toolUseId: 'tool-use-fixture-1',
+    threadId: 'thread-fixture-1',
+});
+export const TRANSCRIPT_UPDATED_ENVELOPE = Object.freeze({
+    type: 'push',
+    v: 2,
+    topic: `session/${PHASE2_FIXTURE_IDS.sessionId}/transcript`,
+    eventType: 'updated',
+    payload: { newMessageCount: 1 },
+});
+export const AUQ_PENDING_ENVELOPE = Object.freeze({
+    type: 'push',
+    v: 2,
+    topic: `session/${PHASE2_FIXTURE_IDS.sessionId}`,
+    eventType: 'ask_user_question.pending',
+    payload: { toolUseId: PHASE2_FIXTURE_IDS.toolUseId },
+});
+export const AUQ_RESOLVED_ENVELOPE = Object.freeze({
+    type: 'push',
+    v: 2,
+    topic: `session/${PHASE2_FIXTURE_IDS.sessionId}`,
+    eventType: 'ask_user_question.resolved',
+    payload: { toolUseId: PHASE2_FIXTURE_IDS.toolUseId },
+});
+export const PRESENCE_CHANGED_ENVELOPE = Object.freeze({
+    type: 'push',
+    v: 2,
+    topic: `agent/${PHASE2_FIXTURE_IDS.agentId}`,
+    eventType: 'presence',
+    payload: { online: true },
+});
+export const ACTIVITY_CHANGED_ENVELOPE = Object.freeze({
+    type: 'push',
+    v: 2,
+    topic: `session/${PHASE2_FIXTURE_IDS.sessionId}`,
+    eventType: 'activity',
+    payload: { state: 'busy', lastActivityAt: 1, busySince: 0 },
+});
+export const UNKNOWN_TOPIC_ENVELOPE = Object.freeze({
+    type: 'push',
+    v: 2,
+    topic: `session/${PHASE2_FIXTURE_IDS.sessionId}/frobnicate`,
+    eventType: 'updated',
+    payload: {},
+});
+export const WRONG_EVENT_TYPE_ENVELOPE = Object.freeze({
+    type: 'push',
+    v: 2,
+    topic: `session/${PHASE2_FIXTURE_IDS.sessionId}/transcript`,
+    eventType: 'ask_user_question.pending',
+    payload: {},
+});
+export const SMUGGLED_EVENT_ID_FRAME = Object.freeze({
+    type: 'push',
+    v: 2,
+    topic: `session/${PHASE2_FIXTURE_IDS.sessionId}/transcript`,
+    eventType: 'updated',
+    eventId: 'client-smuggled-999',
+    payload: { trap: true },
+});
+export const ALLOWLISTED_TOPIC_PAIRS = Object.freeze([
+    [`session/${PHASE2_FIXTURE_IDS.sessionId}/transcript`, 'updated'],
+    [`session/${PHASE2_FIXTURE_IDS.sessionId}`, 'ask_user_question.pending'],
+    [`session/${PHASE2_FIXTURE_IDS.sessionId}`, 'ask_user_question.resolved'],
+    [`session/${PHASE2_FIXTURE_IDS.sessionId}`, 'activity'],
+    [`agent/${PHASE2_FIXTURE_IDS.agentId}`, 'presence'],
+    [`project/${PHASE2_FIXTURE_IDS.projectId}/state`, 'agent.created'],
+    [`project/${PHASE2_FIXTURE_IDS.projectId}/state`, 'agent.deleted'],
+    [`chat/${PHASE2_FIXTURE_IDS.threadId}`, 'message.created'],
+]);
+//# sourceMappingURL=phase2-frames.js.map

package/dist/node_modules/@devchain/shared/__fixtures__/phase2-frames.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"phase2-frames.js","sourceRoot":"","sources":["../../src/__fixtures__/phase2-frames.ts"],"names":[],"mappings":"AAWA,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC;IAC9C,MAAM,EAAE,gBAAgB;IACxB,UAAU,EAAE,gBAAgB;IAC5B,SAAS,EAAE,gBAAgB;IAC3B,OAAO,EAAE,iBAAiB;IAC1B,SAAS,EAAE,gBAAgB;IAC3B,SAAS,EAAE,oBAAoB;IAC/B,QAAQ,EAAE,kBAAkB;CAC7B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,2BAA2B,GAAuB,MAAM,CAAC,MAAM,CAAC;IAC3E,IAAI,EAAE,MAAM;IACZ,CAAC,EAAE,CAAC;IACJ,KAAK,EAAE,WAAW,kBAAkB,CAAC,SAAS,aAAa;IAC3D,SAAS,EAAE,SAAS;IACpB,OAAO,EAAE,EAAE,eAAe,EAAE,CAAC,EAAE;CAChC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,oBAAoB,GAAuB,MAAM,CAAC,MAAM,CAAC;IACpE,IAAI,EAAE,MAAM;IACZ,CAAC,EAAE,CAAC;IACJ,KAAK,EAAE,WAAW,kBAAkB,CAAC,SAAS,EAAE;IAChD,SAAS,EAAE,2BAA2B;IACtC,OAAO,EAAE,EAAE,SAAS,EAAE,kBAAkB,CAAC,SAAS,EAAE;CACrD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,qBAAqB,GAAuB,MAAM,CAAC,MAAM,CAAC;IACrE,IAAI,EAAE,MAAM;IACZ,CAAC,EAAE,CAAC;IACJ,KAAK,EAAE,WAAW,kBAAkB,CAAC,SAAS,EAAE;IAChD,SAAS,EAAE,4BAA4B;IACvC,OAAO,EAAE,EAAE,SAAS,EAAE,kBAAkB,CAAC,SAAS,EAAE;CACrD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,yBAAyB,GAAuB,MAAM,CAAC,MAAM,CAAC;IACzE,IAAI,EAAE,MAAM;IACZ,CAAC,EAAE,CAAC;IACJ,KAAK,EAAE,SAAS,kBAAkB,CAAC,OAAO,EAAE;IAC5C,SAAS,EAAE,UAAU;IACrB,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE;CAC1B,CAAC,CAAC;AAMH,MAAM,CAAC,MAAM,yBAAyB,GAAuB,MAAM,CAAC,MAAM,CAAC;IACzE,IAAI,EAAE,MAAM;IACZ,CAAC,EAAE,CAAC;IACJ,KAAK,EAAE,WAAW,kBAAkB,CAAC,SAAS,EAAE;IAChD,SAAS,EAAE,UAAU;IACrB,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE;CAC5D,CAAC,CAAC;AAOH,MAAM,CAAC,MAAM,sBAAsB,GAAuB,MAAM,CAAC,MAAM,CAAC;IACtE,IAAI,EAAE,MAAM;IACZ,CAAC,EAAE,CAAC;IACJ,KAAK,EAAE,WAAW,kBAAkB,CAAC,SAAS,aAAa;IAC3D,SAAS,EAAE,SAAS;IACpB,OAAO,EAAE,EAAE;CACZ,CAAC,CAAC;AAOH,MAAM,CAAC,MAAM,yBAAyB,GAAuB,MAAM,CAAC,MAAM,CAAC;IACzE,IAAI,EAAE,MAAM;IACZ,CAAC,EAAE,CAAC;IACJ,KAAK,EAAE,WAAW,kBAAkB,CAAC,SAAS,aAAa;IAC3D,SAAS,EAAE,2BAA2B;IACtC,OAAO,EAAE,EAAE;CACZ,CAAC,CAAC;AAQH,MAAM,CAAC,MAAM,uBAAuB,GAAoB,MAAM,CAAC,MAAM,CAAC;IACpE,IAAI,EAAE,MAAM;IACZ,CAAC,EAAE,CAAC;IACJ,KAAK,EAAE,WAAW,kBAAkB,CAAC,SAAS,aAAa;IAC3D,SAAS,EAAE,SAAS;IACpB,OAAO,EAAE,qBAAqB;IAC9B,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE;CACxB,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,uBAAuB,GAA6C,MAAM,CAAC,MAAM,CAAC;IAC7F,CAAC,WAAW,kBAAkB,CAAC,SAAS,aAAa,EAAE,SAAS,CAAC;IACjE,CAAC,WAAW,kBAAkB,CAAC,SAAS,EAAE,EAAE,2BAA2B,CAAC;IACxE,CAAC,WAAW,kBAAkB,CAAC,SAAS,EAAE,EAAE,4BAA4B,CAAC;IACzE,CAAC,WAAW,kBAAkB,CAAC,SAAS,EAAE,EAAE,UAAU,CAAC;IACvD,CAAC,SAAS,kBAAkB,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC;IAEnD,CAAC,WAAW,kBAAkB,CAAC,SAAS,QAAQ,EAAE,eAAe,CAAC;IAClE,CAAC,WAAW,kBAAkB,CAAC,SAAS,QAAQ,EAAE,eAAe,CAAC;IAClE,CAAC,QAAQ,kBAAkB,CAAC,QAAQ,EAAE,EAAE,iBAAiB,CAAC;CAC3D,CAAC,CAAC"}

package/dist/node_modules/@devchain/shared/device-key/index.d.ts

@@ -0,0 +1,2 @@
+export { ED25519_PRIVATE_KEY_BYTES, ED25519_PUBLIC_KEY_BYTES, ED25519_SIGNATURE_BYTES, DEVICE_KEY_KTY, DEVICE_KEY_CRV, fromEd25519PrivateKey, generateEd25519KeyPair, publicKeyToJwk, canonicalJwk, computeJwkThumbprint, signMessage, verifySignature, type Ed25519KeyPair, type Ed25519PublicJwk, } from './keypair.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/node_modules/@devchain/shared/device-key/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/device-key/index.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,uBAAuB,EACvB,cAAc,EACd,cAAc,EACd,qBAAqB,EACrB,sBAAsB,EACtB,cAAc,EACd,YAAY,EACZ,oBAAoB,EACpB,WAAW,EACX,eAAe,EACf,KAAK,cAAc,EACnB,KAAK,gBAAgB,GACtB,MAAM,cAAc,CAAC"}

package/dist/node_modules/@devchain/shared/device-key/index.js

@@ -0,0 +1,2 @@
+export { ED25519_PRIVATE_KEY_BYTES, ED25519_PUBLIC_KEY_BYTES, ED25519_SIGNATURE_BYTES, DEVICE_KEY_KTY, DEVICE_KEY_CRV, fromEd25519PrivateKey, generateEd25519KeyPair, publicKeyToJwk, canonicalJwk, computeJwkThumbprint, signMessage, verifySignature, } from './keypair.js';
+//# sourceMappingURL=index.js.map

package/dist/node_modules/@devchain/shared/device-key/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/device-key/index.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,yBAAyB,EACzB,wBAAwB,EACxB,uBAAuB,EACvB,cAAc,EACd,cAAc,EACd,qBAAqB,EACrB,sBAAsB,EACtB,cAAc,EACd,YAAY,EACZ,oBAAoB,EACpB,WAAW,EACX,eAAe,GAGhB,MAAM,cAAc,CAAC"}

package/dist/node_modules/@devchain/shared/device-key/keypair.d.ts

@@ -0,0 +1,23 @@
+import type { RandomBytes } from '../e2ee/envelope.js';
+export declare const ED25519_PRIVATE_KEY_BYTES = 32;
+export declare const ED25519_PUBLIC_KEY_BYTES = 32;
+export declare const ED25519_SIGNATURE_BYTES = 64;
+export declare const DEVICE_KEY_KTY = "OKP";
+export declare const DEVICE_KEY_CRV = "Ed25519";
+export interface Ed25519KeyPair {
+    privateKey: Uint8Array;
+    publicKey: Uint8Array;
+}
+export interface Ed25519PublicJwk {
+    kty: typeof DEVICE_KEY_KTY;
+    crv: typeof DEVICE_KEY_CRV;
+    x: string;
+}
+export declare function fromEd25519PrivateKey(privateKey: Uint8Array): Ed25519KeyPair;
+export declare function generateEd25519KeyPair(randomBytes: RandomBytes): Ed25519KeyPair;
+export declare function publicKeyToJwk(publicKey: Uint8Array): Ed25519PublicJwk;
+export declare function canonicalJwk(publicKey: Uint8Array): string;
+export declare function computeJwkThumbprint(publicKey: Uint8Array): string;
+export declare function signMessage(privateKey: Uint8Array, message: Uint8Array): Uint8Array;
+export declare function verifySignature(publicKey: Uint8Array, message: Uint8Array, signature: Uint8Array): boolean;
+//# sourceMappingURL=keypair.d.ts.map

package/dist/node_modules/@devchain/shared/device-key/keypair.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keypair.d.ts","sourceRoot":"","sources":["../../src/device-key/keypair.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGvD,eAAO,MAAM,yBAAyB,KAAK,CAAC;AAE5C,eAAO,MAAM,wBAAwB,KAAK,CAAC;AAE3C,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAG1C,eAAO,MAAM,cAAc,QAAQ,CAAC;AAEpC,eAAO,MAAM,cAAc,YAAY,CAAC;AAExC,MAAM,WAAW,cAAc;IAE7B,UAAU,EAAE,UAAU,CAAC;IAEvB,SAAS,EAAE,UAAU,CAAC;CACvB;AAGD,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,OAAO,cAAc,CAAC;IAC3B,GAAG,EAAE,OAAO,cAAc,CAAC;IAE3B,CAAC,EAAE,MAAM,CAAC;CACX;AAOD,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,UAAU,GAAG,cAAc,CAQ5E;AAOD,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,WAAW,GAAG,cAAc,CAQ/E;AAGD,wBAAgB,cAAc,CAAC,SAAS,EAAE,UAAU,GAAG,gBAAgB,CAOtE;AAQD,wBAAgB,YAAY,CAAC,SAAS,EAAE,UAAU,GAAG,MAAM,CAG1D;AAOD,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,UAAU,GAAG,MAAM,CAQlE;AAOD,wBAAgB,WAAW,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,GAAG,UAAU,CAEnF;AAQD,wBAAgB,eAAe,CAC7B,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,UAAU,GACpB,OAAO,CAMT"}

package/dist/node_modules/@devchain/shared/device-key/keypair.js

@@ -0,0 +1,54 @@
+import { ed25519 } from '@noble/curves/ed25519';
+import { sha256 } from '@noble/hashes/sha2';
+import { bytesToBase64 } from '../e2ee/base64.js';
+export const ED25519_PRIVATE_KEY_BYTES = 32;
+export const ED25519_PUBLIC_KEY_BYTES = 32;
+export const ED25519_SIGNATURE_BYTES = 64;
+export const DEVICE_KEY_KTY = 'OKP';
+export const DEVICE_KEY_CRV = 'Ed25519';
+export function fromEd25519PrivateKey(privateKey) {
+    if (privateKey.length !== ED25519_PRIVATE_KEY_BYTES) {
+        throw new TypeError(`fromEd25519PrivateKey: privateKey must be ${ED25519_PRIVATE_KEY_BYTES} bytes, got ${privateKey.length}`);
+    }
+    const publicKey = ed25519.getPublicKey(privateKey);
+    return { privateKey, publicKey };
+}
+export function generateEd25519KeyPair(randomBytes) {
+    const privateKey = randomBytes(ED25519_PRIVATE_KEY_BYTES);
+    if (privateKey.length !== ED25519_PRIVATE_KEY_BYTES) {
+        throw new Error(`generateEd25519KeyPair: RNG returned ${privateKey.length} bytes, expected ${ED25519_PRIVATE_KEY_BYTES}`);
+    }
+    return fromEd25519PrivateKey(privateKey);
+}
+export function publicKeyToJwk(publicKey) {
+    if (publicKey.length !== ED25519_PUBLIC_KEY_BYTES) {
+        throw new TypeError(`publicKeyToJwk: publicKey must be ${ED25519_PUBLIC_KEY_BYTES} bytes, got ${publicKey.length}`);
+    }
+    return { kty: DEVICE_KEY_KTY, crv: DEVICE_KEY_CRV, x: bytesToBase64Url(publicKey) };
+}
+export function canonicalJwk(publicKey) {
+    const jwk = publicKeyToJwk(publicKey);
+    return `{"crv":"${jwk.crv}","kty":"${jwk.kty}","x":"${jwk.x}"}`;
+}
+export function computeJwkThumbprint(publicKey) {
+    if (publicKey.length !== ED25519_PUBLIC_KEY_BYTES) {
+        throw new TypeError(`computeJwkThumbprint: publicKey must be ${ED25519_PUBLIC_KEY_BYTES} bytes, got ${publicKey.length}`);
+    }
+    const digest = sha256(new TextEncoder().encode(canonicalJwk(publicKey)));
+    return bytesToBase64Url(digest);
+}
+export function signMessage(privateKey, message) {
+    return ed25519.sign(message, privateKey);
+}
+export function verifySignature(publicKey, message, signature) {
+    try {
+        return ed25519.verify(signature, message, publicKey);
+    }
+    catch {
+        return false;
+    }
+}
+function bytesToBase64Url(bytes) {
+    return bytesToBase64(bytes).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+}
+//# sourceMappingURL=keypair.js.map

package/dist/node_modules/@devchain/shared/device-key/keypair.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keypair.js","sourceRoot":"","sources":["../../src/device-key/keypair.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAIlD,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAE5C,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,CAAC;AAE3C,MAAM,CAAC,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAG1C,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,CAAC;AAEpC,MAAM,CAAC,MAAM,cAAc,GAAG,SAAS,CAAC;AAsBxC,MAAM,UAAU,qBAAqB,CAAC,UAAsB;IAC1D,IAAI,UAAU,CAAC,MAAM,KAAK,yBAAyB,EAAE,CAAC;QACpD,MAAM,IAAI,SAAS,CACjB,6CAA6C,yBAAyB,eAAe,UAAU,CAAC,MAAM,EAAE,CACzG,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IACnD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;AACnC,CAAC;AAOD,MAAM,UAAU,sBAAsB,CAAC,WAAwB;IAC7D,MAAM,UAAU,GAAG,WAAW,CAAC,yBAAyB,CAAC,CAAC;IAC1D,IAAI,UAAU,CAAC,MAAM,KAAK,yBAAyB,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CACb,wCAAwC,UAAU,CAAC,MAAM,oBAAoB,yBAAyB,EAAE,CACzG,CAAC;IACJ,CAAC;IACD,OAAO,qBAAqB,CAAC,UAAU,CAAC,CAAC;AAC3C,CAAC;AAGD,MAAM,UAAU,cAAc,CAAC,SAAqB;IAClD,IAAI,SAAS,CAAC,MAAM,KAAK,wBAAwB,EAAE,CAAC;QAClD,MAAM,IAAI,SAAS,CACjB,qCAAqC,wBAAwB,eAAe,SAAS,CAAC,MAAM,EAAE,CAC/F,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC,EAAE,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;AACtF,CAAC;AAQD,MAAM,UAAU,YAAY,CAAC,SAAqB;IAChD,MAAM,GAAG,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IACtC,OAAO,WAAW,GAAG,CAAC,GAAG,YAAY,GAAG,CAAC,GAAG,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC;AAClE,CAAC;AAOD,MAAM,UAAU,oBAAoB,CAAC,SAAqB;IACxD,IAAI,SAAS,CAAC,MAAM,KAAK,wBAAwB,EAAE,CAAC;QAClD,MAAM,IAAI,SAAS,CACjB,2CAA2C,wBAAwB,eAAe,SAAS,CAAC,MAAM,EAAE,CACrG,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACzE,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC;AAOD,MAAM,UAAU,WAAW,CAAC,UAAsB,EAAE,OAAmB;IACrE,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;AAC3C,CAAC;AAQD,MAAM,UAAU,eAAe,CAC7B,SAAqB,EACrB,OAAmB,EACnB,SAAqB;IAErB,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAID,SAAS,gBAAgB,CAAC,KAAiB;IACzC,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACzF,CAAC"}

package/dist/node_modules/@devchain/shared/e2ee/aad.d.ts

@@ -0,0 +1,3 @@
+import type { E2eeAlg, E2eeContext, E2eeEnvelopeVersion } from './envelope.js';
+export declare function buildAad(ctx: E2eeContext, kid: string, version: E2eeEnvelopeVersion, alg: E2eeAlg): Uint8Array;
+//# sourceMappingURL=aad.d.ts.map

package/dist/node_modules/@devchain/shared/e2ee/aad.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"aad.d.ts","sourceRoot":"","sources":["../../src/e2ee/aad.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAwB/E,wBAAgB,QAAQ,CACtB,GAAG,EAAE,WAAW,EAChB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,mBAAmB,EAC5B,GAAG,EAAE,OAAO,GACX,UAAU,CAYZ"}

package/dist/node_modules/@devchain/shared/e2ee/aad.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aad.js","sourceRoot":"","sources":["../../src/e2ee/aad.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAI/D,MAAM,UAAU,GAAG,sBAAsB,CAAC;AAG1C,SAAS,KAAK,CAAC,KAAa;IAC1B,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAEjC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC;IACxC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC;IACxC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC;IACvC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IAC/B,OAAO,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AACnC,CAAC;AASD,MAAM,UAAU,QAAQ,CACtB,GAAgB,EAChB,GAAW,EACX,OAA4B,EAC5B,GAAY;IAEZ,OAAO,WAAW,CAChB,KAAK,CAAC,UAAU,CAAC,EACjB,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,EACtB,KAAK,CAAC,GAAG,CAAC,EACV,KAAK,CAAC,GAAG,CAAC,EACV,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EACf,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EACpB,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EACrB,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EACnB,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CACzD,CAAC;AACJ,CAAC"}

package/dist/node_modules/@devchain/shared/e2ee/base64.d.ts

@@ -0,0 +1,6 @@
+export declare function bytesToBase64(bytes: Uint8Array): string;
+export declare function base64ToBytes(b64: string): Uint8Array;
+export declare class InvalidBase64Error extends Error {
+    constructor(reason: string);
+}
+//# sourceMappingURL=base64.d.ts.map

package/dist/node_modules/@devchain/shared/e2ee/base64.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base64.d.ts","sourceRoot":"","sources":["../../src/e2ee/base64.ts"],"names":[],"mappings":"AAiBA,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAoBvD;AAOD,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CA0BrD;AAED,qBAAa,kBAAmB,SAAQ,KAAK;gBAC/B,MAAM,EAAE,MAAM;CAI3B"}

package/dist/node_modules/@devchain/shared/e2ee/base64.js

@@ -0,0 +1,69 @@
+const ALPHABET = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/';
+const LOOKUP = (() => {
+    const table = new Int8Array(256).fill(-1);
+    for (let i = 0; i < ALPHABET.length; i++)
+        table[ALPHABET.charCodeAt(i)] = i;
+    return table;
+})();
+export function bytesToBase64(bytes) {
+    let out = '';
+    let i = 0;
+    for (; i + 2 < bytes.length; i += 3) {
+        const n = (bytes[i] << 16) | (bytes[i + 1] << 8) | bytes[i + 2];
+        out +=
+            ALPHABET[(n >> 18) & 63] +
+                ALPHABET[(n >> 12) & 63] +
+                ALPHABET[(n >> 6) & 63] +
+                ALPHABET[n & 63];
+    }
+    const rem = bytes.length - i;
+    if (rem === 1) {
+        const n = bytes[i] << 16;
+        out += ALPHABET[(n >> 18) & 63] + ALPHABET[(n >> 12) & 63] + '==';
+    }
+    else if (rem === 2) {
+        const n = (bytes[i] << 16) | (bytes[i + 1] << 8);
+        out += ALPHABET[(n >> 18) & 63] + ALPHABET[(n >> 12) & 63] + ALPHABET[(n >> 6) & 63] + '=';
+    }
+    return out;
+}
+export function base64ToBytes(b64) {
+    let len = b64.length;
+    if (len % 4 !== 0)
+        throw new InvalidBase64Error('length is not a multiple of 4');
+    let pad = 0;
+    if (len > 0 && b64.charCodeAt(len - 1) === 61) {
+        pad++;
+        if (b64.charCodeAt(len - 2) === 61)
+            pad++;
+    }
+    const outLen = (len / 4) * 3 - pad;
+    const out = new Uint8Array(outLen);
+    let o = 0;
+    for (let i = 0; i < len; i += 4) {
+        const c0 = LOOKUP[b64.charCodeAt(i)];
+        const c1 = LOOKUP[b64.charCodeAt(i + 1)];
+        const isLast = i + 4 >= len;
+        const ch2 = b64.charCodeAt(i + 2);
+        const ch3 = b64.charCodeAt(i + 3);
+        const c2 = ch2 === 61 && isLast ? 0 : LOOKUP[ch2];
+        const c3 = ch3 === 61 && isLast ? 0 : LOOKUP[ch3];
+        if (c0 < 0 || c1 < 0 || c2 < 0 || c3 < 0)
+            throw new InvalidBase64Error('illegal character');
+        const n = (c0 << 18) | (c1 << 12) | (c2 << 6) | c3;
+        if (o < outLen)
+            out[o++] = (n >> 16) & 0xff;
+        if (o < outLen)
+            out[o++] = (n >> 8) & 0xff;
+        if (o < outLen)
+            out[o++] = n & 0xff;
+    }
+    return out;
+}
+export class InvalidBase64Error extends Error {
+    constructor(reason) {
+        super(`invalid base64: ${reason}`);
+        this.name = 'InvalidBase64Error';
+    }
+}
+//# sourceMappingURL=base64.js.map

package/dist/node_modules/@devchain/shared/e2ee/base64.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base64.js","sourceRoot":"","sources":["../../src/e2ee/base64.ts"],"names":[],"mappings":"AAQA,MAAM,QAAQ,GAAG,kEAAkE,CAAC;AAGpF,MAAM,MAAM,GAAc,CAAC,GAAG,EAAE;IAC9B,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC5E,OAAO,KAAK,CAAC;AACf,CAAC,CAAC,EAAE,CAAC;AAEL,MAAM,UAAU,aAAa,CAAC,KAAiB;IAC7C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAChE,GAAG;YACD,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC;gBACxB,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC;gBACxB,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;gBACvB,QAAQ,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACrB,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IAC7B,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC;QACd,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACzB,GAAG,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,IAAI,CAAC;IACpE,CAAC;SAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACjD,GAAG,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC;IAC7F,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAOD,MAAM,UAAU,aAAa,CAAC,GAAW;IACvC,IAAI,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC;IACrB,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,kBAAkB,CAAC,+BAA+B,CAAC,CAAC;IACjF,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE,EAAU,CAAC;QACtD,GAAG,EAAE,CAAC;QACN,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,EAAE;YAAE,GAAG,EAAE,CAAC;IAC5C,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACnC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QACrC,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC;QAC5B,MAAM,GAAG,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAClC,MAAM,EAAE,GAAG,GAAG,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClD,MAAM,EAAE,GAAG,GAAG,KAAK,EAAE,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClD,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC;YAAE,MAAM,IAAI,kBAAkB,CAAC,mBAAmB,CAAC,CAAC;QAC5F,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;QACnD,IAAI,CAAC,GAAG,MAAM;YAAE,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;QAC5C,IAAI,CAAC,GAAG,MAAM;YAAE,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;QAC3C,IAAI,CAAC,GAAG,MAAM;YAAE,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IACtC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,MAAc;QACxB,KAAK,CAAC,mBAAmB,MAAM,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF"}

package/dist/node_modules/@devchain/shared/e2ee/crypto-envelope.service.d.ts

@@ -0,0 +1,9 @@
+import { type E2eeContext, type E2eeEnvelope, type E2eeKeyProvider, type RandomBytes } from './envelope.js';
+export declare class CryptoEnvelopeService {
+    private readonly keys;
+    private readonly randomBytes;
+    constructor(keys: E2eeKeyProvider, randomBytes: RandomBytes);
+    seal<T>(plaintext: T, ctx: E2eeContext): Promise<E2eeEnvelope>;
+    open<T = unknown>(envelope: unknown, ctx: E2eeContext): Promise<T>;
+}
+//# sourceMappingURL=crypto-envelope.service.d.ts.map

package/dist/node_modules/@devchain/shared/e2ee/crypto-envelope.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto-envelope.service.d.ts","sourceRoot":"","sources":["../../src/e2ee/crypto-envelope.service.ts"],"names":[],"mappings":"AAYA,OAAO,EAaL,KAAK,WAAW,EAChB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,WAAW,EACjB,MAAM,eAAe,CAAC;AAEvB,qBAAa,qBAAqB;IAE9B,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,WAAW;gBADX,IAAI,EAAE,eAAe,EACrB,WAAW,EAAE,WAAW;IAQrC,IAAI,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;IA8B9D,IAAI,CAAC,CAAC,GAAG,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC;CAsDzE"}

package/dist/node_modules/@devchain/shared/e2ee/crypto-envelope.service.js

@@ -0,0 +1,78 @@
+import { xchacha20poly1305 } from '@noble/ciphers/chacha';
+import { utf8ToBytes, bytesToUtf8 } from '@noble/hashes/utils';
+import { buildAad } from './aad.js';
+import { base64ToBytes, bytesToBase64, InvalidBase64Error } from './base64.js';
+import { E2EE_ALG_XCHACHA20POLY1305, E2EE_ENVELOPE_VERSION, E2EE_KEY_BYTES, E2EE_NONCE_BYTES, E2eeAuthenticationError, E2eeError, E2eeInvalidKeyError, E2eeMalformedEnvelopeError, E2eeUnknownKeyError, E2eeUnsupportedAlgError, E2eeUnsupportedVersionError, isE2eeEnvelope, } from './envelope.js';
+export class CryptoEnvelopeService {
+    constructor(keys, randomBytes) {
+        this.keys = keys;
+        this.randomBytes = randomBytes;
+    }
+    async seal(plaintext, ctx) {
+        const { kid, key } = await this.keys.resolveSealKey();
+        assertKeyLength(key);
+        const nonce = this.randomBytes(E2EE_NONCE_BYTES);
+        if (nonce.length !== E2EE_NONCE_BYTES) {
+            throw new E2eeError(`RNG returned ${nonce.length} bytes, expected ${E2EE_NONCE_BYTES}`);
+        }
+        const aad = buildAad(ctx, kid, E2EE_ENVELOPE_VERSION, E2EE_ALG_XCHACHA20POLY1305);
+        const pt = utf8ToBytes(JSON.stringify(plaintext));
+        const ct = xchacha20poly1305(key, nonce, aad).encrypt(pt);
+        return {
+            v: E2EE_ENVELOPE_VERSION,
+            kid,
+            alg: E2EE_ALG_XCHACHA20POLY1305,
+            nonce: bytesToBase64(nonce),
+            ct: bytesToBase64(ct),
+        };
+    }
+    async open(envelope, ctx) {
+        if (!isE2eeEnvelope(envelope)) {
+            throw new E2eeMalformedEnvelopeError('shape failed structural validation');
+        }
+        if (envelope.v !== E2EE_ENVELOPE_VERSION) {
+            throw new E2eeUnsupportedVersionError(envelope.v);
+        }
+        if (envelope.alg !== E2EE_ALG_XCHACHA20POLY1305) {
+            throw new E2eeUnsupportedAlgError(envelope.alg);
+        }
+        const key = (await this.keys.getKeyById(envelope.kid)) ?? undefined;
+        if (!key)
+            throw new E2eeUnknownKeyError(envelope.kid);
+        assertKeyLength(key);
+        let nonce;
+        let ct;
+        try {
+            nonce = base64ToBytes(envelope.nonce);
+            ct = base64ToBytes(envelope.ct);
+        }
+        catch (err) {
+            if (err instanceof InvalidBase64Error) {
+                throw new E2eeMalformedEnvelopeError(err.message);
+            }
+            throw err;
+        }
+        if (nonce.length !== E2EE_NONCE_BYTES) {
+            throw new E2eeMalformedEnvelopeError(`nonce must be ${E2EE_NONCE_BYTES} bytes, got ${nonce.length}`);
+        }
+        const aad = buildAad(ctx, envelope.kid, envelope.v, envelope.alg);
+        let pt;
+        try {
+            pt = xchacha20poly1305(key, nonce, aad).decrypt(ct);
+        }
+        catch {
+            throw new E2eeAuthenticationError();
+        }
+        try {
+            return JSON.parse(bytesToUtf8(pt));
+        }
+        catch {
+            throw new E2eeMalformedEnvelopeError('decrypted plaintext is not valid JSON');
+        }
+    }
+}
+function assertKeyLength(key) {
+    if (key.length !== E2EE_KEY_BYTES)
+        throw new E2eeInvalidKeyError(key.length);
+}
+//# sourceMappingURL=crypto-envelope.service.js.map

package/dist/node_modules/@devchain/shared/e2ee/crypto-envelope.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto-envelope.service.js","sourceRoot":"","sources":["../../src/e2ee/crypto-envelope.service.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAC/E,OAAO,EACL,0BAA0B,EAC1B,qBAAqB,EACrB,cAAc,EACd,gBAAgB,EAChB,uBAAuB,EACvB,SAAS,EACT,mBAAmB,EACnB,0BAA0B,EAC1B,mBAAmB,EACnB,uBAAuB,EACvB,2BAA2B,EAC3B,cAAc,GAKf,MAAM,eAAe,CAAC;AAEvB,MAAM,OAAO,qBAAqB;IAChC,YACmB,IAAqB,EACrB,WAAwB;QADxB,SAAI,GAAJ,IAAI,CAAiB;QACrB,gBAAW,GAAX,WAAW,CAAa;IACxC,CAAC;IAOJ,KAAK,CAAC,IAAI,CAAI,SAAY,EAAE,GAAgB;QAC1C,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;QACtD,eAAe,CAAC,GAAG,CAAC,CAAC;QAErB,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;QACjD,IAAI,KAAK,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;YAEtC,MAAM,IAAI,SAAS,CAAC,gBAAgB,KAAK,CAAC,MAAM,oBAAoB,gBAAgB,EAAE,CAAC,CAAC;QAC1F,CAAC;QAED,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,qBAAqB,EAAE,0BAA0B,CAAC,CAAC;QAClF,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;QAClD,MAAM,EAAE,GAAG,iBAAiB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAE1D,OAAO;YACL,CAAC,EAAE,qBAAqB;YACxB,GAAG;YACH,GAAG,EAAE,0BAA0B;YAC/B,KAAK,EAAE,aAAa,CAAC,KAAK,CAAC;YAC3B,EAAE,EAAE,aAAa,CAAC,EAAE,CAAC;SACtB,CAAC;IACJ,CAAC;IASD,KAAK,CAAC,IAAI,CAAc,QAAiB,EAAE,GAAgB;QACzD,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,0BAA0B,CAAC,oCAAoC,CAAC,CAAC;QAC7E,CAAC;QAGD,IAAI,QAAQ,CAAC,CAAC,KAAK,qBAAqB,EAAE,CAAC;YACzC,MAAM,IAAI,2BAA2B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,QAAQ,CAAC,GAAG,KAAK,0BAA0B,EAAE,CAAC;YAChD,MAAM,IAAI,uBAAuB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,SAAS,CAAC;QACpE,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACtD,eAAe,CAAC,GAAG,CAAC,CAAC;QAErB,IAAI,KAAiB,CAAC;QACtB,IAAI,EAAc,CAAC;QACnB,IAAI,CAAC;YACH,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACtC,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,kBAAkB,EAAE,CAAC;gBACtC,MAAM,IAAI,0BAA0B,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACpD,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;YACtC,MAAM,IAAI,0BAA0B,CAClC,iBAAiB,gBAAgB,eAAe,KAAK,CAAC,MAAM,EAAE,CAC/D,CAAC;QACJ,CAAC;QAID,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;QAElE,IAAI,EAAc,CAAC;QACnB,IAAI,CAAC;YACH,EAAE,GAAG,iBAAiB,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YAGP,MAAM,IAAI,uBAAuB,EAAE,CAAC;QACtC,CAAC;QAED,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC,CAAM,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YAEP,MAAM,IAAI,0BAA0B,CAAC,uCAAuC,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;CACF;AAED,SAAS,eAAe,CAAC,GAAe;IACtC,IAAI,GAAG,CAAC,MAAM,KAAK,cAAc;QAAE,MAAM,IAAI,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC/E,CAAC"}

package/dist/node_modules/@devchain/shared/e2ee/envelope.d.ts

@@ -0,0 +1,63 @@
+export declare const E2EE_KEY_BYTES = 32;
+export declare const E2EE_NONCE_BYTES = 24;
+export declare const E2EE_ENVELOPE_VERSION = 1;
+export type E2eeEnvelopeVersion = typeof E2EE_ENVELOPE_VERSION;
+export declare const E2EE_ALG_XCHACHA20POLY1305 = "XC20P";
+export type E2eeAlg = typeof E2EE_ALG_XCHACHA20POLY1305;
+export interface E2eeRecipient {
+    kid: string;
+    wrappedKey: string;
+}
+export interface E2eeEnvelope {
+    v: E2eeEnvelopeVersion;
+    kid: string;
+    alg: E2eeAlg;
+    nonce: string;
+    ct: string;
+    recipients?: E2eeRecipient[];
+}
+export type E2eeLane = 'rpc' | 'push' | 'viewport';
+export type E2eeDirection = 'pc-to-mobile' | 'mobile-to-pc';
+export interface E2eeContext {
+    lane: E2eeLane;
+    direction: E2eeDirection;
+    instanceId: string;
+    routeKey: string;
+    seq?: number;
+}
+export interface E2eeKeyProvider {
+    resolveSealKey(): SealKey | Promise<SealKey>;
+    getKeyById(kid: string): KeyLookup | Promise<KeyLookup>;
+}
+export interface SealKey {
+    kid: string;
+    key: Uint8Array;
+}
+export type KeyLookup = Uint8Array | undefined | null;
+export type RandomBytes = (n: number) => Uint8Array;
+export declare class E2eeError extends Error {
+    constructor(message: string);
+}
+export declare class E2eeMalformedEnvelopeError extends E2eeError {
+    constructor(reason: string);
+}
+export declare class E2eeUnsupportedVersionError extends E2eeError {
+    readonly version: unknown;
+    constructor(version: unknown);
+}
+export declare class E2eeUnsupportedAlgError extends E2eeError {
+    readonly alg: unknown;
+    constructor(alg: unknown);
+}
+export declare class E2eeUnknownKeyError extends E2eeError {
+    readonly kid: string;
+    constructor(kid: string);
+}
+export declare class E2eeAuthenticationError extends E2eeError {
+    constructor();
+}
+export declare class E2eeInvalidKeyError extends E2eeError {
+    constructor(actual: number);
+}
+export declare function isE2eeEnvelope(value: unknown): value is E2eeEnvelope;
+//# sourceMappingURL=envelope.d.ts.map

package/dist/node_modules/@devchain/shared/e2ee/envelope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.d.ts","sourceRoot":"","sources":["../../src/e2ee/envelope.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,cAAc,KAAK,CAAC;AAGjC,eAAO,MAAM,gBAAgB,KAAK,CAAC;AAGnC,eAAO,MAAM,qBAAqB,IAAI,CAAC;AACvC,MAAM,MAAM,mBAAmB,GAAG,OAAO,qBAAqB,CAAC;AAG/D,eAAO,MAAM,0BAA0B,UAAU,CAAC;AAClD,MAAM,MAAM,OAAO,GAAG,OAAO,0BAA0B,CAAC;AAOxD,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IAEZ,UAAU,EAAE,MAAM,CAAC;CACpB;AAOD,MAAM,WAAW,YAAY;IAE3B,CAAC,EAAE,mBAAmB,CAAC;IAEvB,GAAG,EAAE,MAAM,CAAC;IAEZ,GAAG,EAAE,OAAO,CAAC;IAEb,KAAK,EAAE,MAAM,CAAC;IAEd,EAAE,EAAE,MAAM,CAAC;IAEX,UAAU,CAAC,EAAE,aAAa,EAAE,CAAC;CAC9B;AAGD,MAAM,MAAM,QAAQ,GAAG,KAAK,GAAG,MAAM,GAAG,UAAU,CAAC;AAGnD,MAAM,MAAM,aAAa,GAAG,cAAc,GAAG,cAAc,CAAC;AAa5D,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,QAAQ,CAAC;IACf,SAAS,EAAE,aAAa,CAAC;IAEzB,UAAU,EAAE,MAAM,CAAC;IAEnB,QAAQ,EAAE,MAAM,CAAC;IAEjB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAOD,MAAM,WAAW,eAAe;IAE9B,cAAc,IAAI,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAE7C,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;CACzD;AAED,MAAM,WAAW,OAAO;IACtB,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,UAAU,CAAC;CACjB;AACD,MAAM,MAAM,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,IAAI,CAAC;AAGtD,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,EAAE,MAAM,KAAK,UAAU,CAAC;AAIpD,qBAAa,SAAU,SAAQ,KAAK;gBACtB,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,0BAA2B,SAAQ,SAAS;gBAC3C,MAAM,EAAE,MAAM;CAI3B;AAED,qBAAa,2BAA4B,SAAQ,SAAS;aAC5B,OAAO,EAAE,OAAO;gBAAhB,OAAO,EAAE,OAAO;CAI7C;AAED,qBAAa,uBAAwB,SAAQ,SAAS;aACxB,GAAG,EAAE,OAAO;gBAAZ,GAAG,EAAE,OAAO;CAIzC;AAED,qBAAa,mBAAoB,SAAQ,SAAS;aACpB,GAAG,EAAE,MAAM;gBAAX,GAAG,EAAE,MAAM;CAIxC;AAED,qBAAa,uBAAwB,SAAQ,SAAS;;CAKrD;AAED,qBAAa,mBAAoB,SAAQ,SAAS;gBACpC,MAAM,EAAE,MAAM;CAI3B;AAQD,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,YAAY,CAcpE"}

package/dist/node_modules/@devchain/shared/e2ee/envelope.js

@@ -0,0 +1,64 @@
+export const E2EE_KEY_BYTES = 32;
+export const E2EE_NONCE_BYTES = 24;
+export const E2EE_ENVELOPE_VERSION = 1;
+export const E2EE_ALG_XCHACHA20POLY1305 = 'XC20P';
+export class E2eeError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'E2eeError';
+    }
+}
+export class E2eeMalformedEnvelopeError extends E2eeError {
+    constructor(reason) {
+        super(`malformed e2ee envelope: ${reason}`);
+        this.name = 'E2eeMalformedEnvelopeError';
+    }
+}
+export class E2eeUnsupportedVersionError extends E2eeError {
+    constructor(version) {
+        super(`unsupported e2ee envelope version: ${String(version)}`);
+        this.version = version;
+        this.name = 'E2eeUnsupportedVersionError';
+    }
+}
+export class E2eeUnsupportedAlgError extends E2eeError {
+    constructor(alg) {
+        super(`unsupported e2ee alg: ${String(alg)}`);
+        this.alg = alg;
+        this.name = 'E2eeUnsupportedAlgError';
+    }
+}
+export class E2eeUnknownKeyError extends E2eeError {
+    constructor(kid) {
+        super(`no e2ee key for kid: ${kid}`);
+        this.kid = kid;
+        this.name = 'E2eeUnknownKeyError';
+    }
+}
+export class E2eeAuthenticationError extends E2eeError {
+    constructor() {
+        super('e2ee authentication failed');
+        this.name = 'E2eeAuthenticationError';
+    }
+}
+export class E2eeInvalidKeyError extends E2eeError {
+    constructor(actual) {
+        super(`e2ee key must be ${E2EE_KEY_BYTES} bytes, got ${actual}`);
+        this.name = 'E2eeInvalidKeyError';
+    }
+}
+export function isE2eeEnvelope(value) {
+    if (typeof value !== 'object' || value === null)
+        return false;
+    const e = value;
+    return (typeof e.v === 'number' &&
+        typeof e.kid === 'string' &&
+        e.kid.length > 0 &&
+        typeof e.alg === 'string' &&
+        typeof e.nonce === 'string' &&
+        e.nonce.length > 0 &&
+        typeof e.ct === 'string' &&
+        e.ct.length > 0 &&
+        (e.recipients === undefined || Array.isArray(e.recipients)));
+}
+//# sourceMappingURL=envelope.js.map

package/dist/node_modules/@devchain/shared/e2ee/envelope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.js","sourceRoot":"","sources":["../../src/e2ee/envelope.ts"],"names":[],"mappings":"AASA,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAC;AAGjC,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAGnC,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAIvC,MAAM,CAAC,MAAM,0BAA0B,GAAG,OAAO,CAAC;AAqFlD,MAAM,OAAO,SAAU,SAAQ,KAAK;IAClC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;IAC1B,CAAC;CACF;AAED,MAAM,OAAO,0BAA2B,SAAQ,SAAS;IACvD,YAAY,MAAc;QACxB,KAAK,CAAC,4BAA4B,MAAM,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAED,MAAM,OAAO,2BAA4B,SAAQ,SAAS;IACxD,YAA4B,OAAgB;QAC1C,KAAK,CAAC,sCAAsC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QADrC,YAAO,GAAP,OAAO,CAAS;QAE1C,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAED,MAAM,OAAO,uBAAwB,SAAQ,SAAS;IACpD,YAA4B,GAAY;QACtC,KAAK,CAAC,yBAAyB,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QADpB,QAAG,GAAH,GAAG,CAAS;QAEtC,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED,MAAM,OAAO,mBAAoB,SAAQ,SAAS;IAChD,YAA4B,GAAW;QACrC,KAAK,CAAC,wBAAwB,GAAG,EAAE,CAAC,CAAC;QADX,QAAG,GAAH,GAAG,CAAQ;QAErC,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAED,MAAM,OAAO,uBAAwB,SAAQ,SAAS;IACpD;QACE,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED,MAAM,OAAO,mBAAoB,SAAQ,SAAS;IAChD,YAAY,MAAc;QACxB,KAAK,CAAC,oBAAoB,cAAc,eAAe,MAAM,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AAQD,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,OAAO,CACL,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ;QACvB,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ;QACzB,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC;QAChB,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ;QACzB,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;QAC3B,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAClB,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;QACxB,CAAC,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC;QACf,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAC5D,CAAC;AACJ,CAAC"}

package/dist/node_modules/@devchain/shared/e2ee/index.d.ts

@@ -0,0 +1,10 @@
+export { E2EE_KEY_BYTES, E2EE_NONCE_BYTES, E2EE_ENVELOPE_VERSION, E2EE_ALG_XCHACHA20POLY1305, E2eeError, E2eeMalformedEnvelopeError, E2eeUnsupportedVersionError, E2eeUnsupportedAlgError, E2eeUnknownKeyError, E2eeAuthenticationError, E2eeInvalidKeyError, isE2eeEnvelope, type E2eeEnvelope, type E2eeEnvelopeVersion, type E2eeAlg, type E2eeRecipient, type E2eeLane, type E2eeDirection, type E2eeContext, type E2eeKeyProvider, type SealKey, type KeyLookup, type RandomBytes, } from './envelope.js';
+export { buildAad } from './aad.js';
+export { bytesToBase64, base64ToBytes, InvalidBase64Error } from './base64.js';
+export { CryptoEnvelopeService } from './crypto-envelope.service.js';
+export { X25519_PRIVATE_KEY_BYTES, X25519_PUBLIC_KEY_BYTES, E2EE_KID_BYTES, deriveKid, generateX25519KeyPair, fromX25519PrivateKey, type E2eeKeyPair, } from './keypair.js';
+export { E2EE_SHARED_KEY_BYTES, E2EE_HKDF_INFO, E2EE_HKDF_SALT, PAIRING_SECRET_BYTES, PAIRING_MAC_BYTES, deriveSharedKey, buildPairingTranscript, computePairingMac, verifyPairingMac, type PairingTranscriptInput, } from './key-exchange.js';
+export { isE2eeVerified, reconcilePeerKey, markVerifiedViaSafetyNumber, type E2eeTrustStatus, type E2eeVerificationMethod, type E2eeAdoptionMethod, type E2eeTrustRecord, type IncomingPeerKey, } from './trust.js';
+export { E2EE_SAFETY_NUMBER_GROUPS, deriveSafetyNumber } from './safety-number.js';
+export { E2EE_NEGOTIATION_VERSION, isE2eeCapability, isCapable, negotiateE2ee, buildE2eeCapability, type E2eeCapability, type E2eeNegotiationMode, type E2eeNegotiationReason, type E2eeNegotiationResult, } from './negotiation.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/node_modules/@devchain/shared/e2ee/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/e2ee/index.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,qBAAqB,EACrB,0BAA0B,EAC1B,SAAS,EACT,0BAA0B,EAC1B,2BAA2B,EAC3B,uBAAuB,EACvB,mBAAmB,EACnB,uBAAuB,EACvB,mBAAmB,EACnB,cAAc,EACd,KAAK,YAAY,EACjB,KAAK,mBAAmB,EACxB,KAAK,OAAO,EACZ,KAAK,aAAa,EAClB,KAAK,QAAQ,EACb,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,OAAO,EACZ,KAAK,SAAS,EACd,KAAK,WAAW,GACjB,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAC/E,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,cAAc,EACd,SAAS,EACT,qBAAqB,EACrB,oBAAoB,EACpB,KAAK,WAAW,GACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,qBAAqB,EACrB,cAAc,EACd,cAAc,EACd,oBAAoB,EACpB,iBAAiB,EACjB,eAAe,EACf,sBAAsB,EACtB,iBAAiB,EACjB,gBAAgB,EAChB,KAAK,sBAAsB,GAC5B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,2BAA2B,EAC3B,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,eAAe,GACrB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,yBAAyB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACnF,OAAO,EACL,wBAAwB,EACxB,gBAAgB,EAChB,SAAS,EACT,aAAa,EACb,mBAAmB,EACnB,KAAK,cAAc,EACnB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,GAC3B,MAAM,kBAAkB,CAAC"}

package/dist/node_modules/@devchain/shared/e2ee/index.js

@@ -0,0 +1,10 @@
+export { E2EE_KEY_BYTES, E2EE_NONCE_BYTES, E2EE_ENVELOPE_VERSION, E2EE_ALG_XCHACHA20POLY1305, E2eeError, E2eeMalformedEnvelopeError, E2eeUnsupportedVersionError, E2eeUnsupportedAlgError, E2eeUnknownKeyError, E2eeAuthenticationError, E2eeInvalidKeyError, isE2eeEnvelope, } from './envelope.js';
+export { buildAad } from './aad.js';
+export { bytesToBase64, base64ToBytes, InvalidBase64Error } from './base64.js';
+export { CryptoEnvelopeService } from './crypto-envelope.service.js';
+export { X25519_PRIVATE_KEY_BYTES, X25519_PUBLIC_KEY_BYTES, E2EE_KID_BYTES, deriveKid, generateX25519KeyPair, fromX25519PrivateKey, } from './keypair.js';
+export { E2EE_SHARED_KEY_BYTES, E2EE_HKDF_INFO, E2EE_HKDF_SALT, PAIRING_SECRET_BYTES, PAIRING_MAC_BYTES, deriveSharedKey, buildPairingTranscript, computePairingMac, verifyPairingMac, } from './key-exchange.js';
+export { isE2eeVerified, reconcilePeerKey, markVerifiedViaSafetyNumber, } from './trust.js';
+export { E2EE_SAFETY_NUMBER_GROUPS, deriveSafetyNumber } from './safety-number.js';
+export { E2EE_NEGOTIATION_VERSION, isE2eeCapability, isCapable, negotiateE2ee, buildE2eeCapability, } from './negotiation.js';
+//# sourceMappingURL=index.js.map

package/dist/node_modules/@devchain/shared/e2ee/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/e2ee/index.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,qBAAqB,EACrB,0BAA0B,EAC1B,SAAS,EACT,0BAA0B,EAC1B,2BAA2B,EAC3B,uBAAuB,EACvB,mBAAmB,EACnB,uBAAuB,EACvB,mBAAmB,EACnB,cAAc,GAYf,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAC/E,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EACL,wBAAwB,EACxB,uBAAuB,EACvB,cAAc,EACd,SAAS,EACT,qBAAqB,EACrB,oBAAoB,GAErB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,qBAAqB,EACrB,cAAc,EACd,cAAc,EACd,oBAAoB,EACpB,iBAAiB,EACjB,eAAe,EACf,sBAAsB,EACtB,iBAAiB,EACjB,gBAAgB,GAEjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,2BAA2B,GAM5B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,yBAAyB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACnF,OAAO,EACL,wBAAwB,EACxB,gBAAgB,EAChB,SAAS,EACT,aAAa,EACb,mBAAmB,GAKpB,MAAM,kBAAkB,CAAC"}

package/dist/node_modules/@devchain/shared/e2ee/key-exchange.d.ts

@@ -0,0 +1,17 @@
+export declare const E2EE_SHARED_KEY_BYTES = 32;
+export declare const E2EE_HKDF_INFO = "devchain-e2ee-v1";
+export declare const E2EE_HKDF_SALT = "devchain/e2ee/hkdf/salt/v1";
+export declare const PAIRING_SECRET_BYTES = 32;
+export declare const PAIRING_MAC_BYTES = 32;
+export declare function deriveSharedKey(privateKey: Uint8Array, peerPublicKey: Uint8Array): Uint8Array;
+export interface PairingTranscriptInput {
+    pcPublicKey: Uint8Array;
+    pcKid: string;
+    mobilePublicKey: Uint8Array;
+    mobileKid: string;
+    channelId: string;
+}
+export declare function buildPairingTranscript(input: PairingTranscriptInput): Uint8Array;
+export declare function computePairingMac(pairingSecret: Uint8Array, transcript: Uint8Array): Uint8Array;
+export declare function verifyPairingMac(pairingSecret: Uint8Array, transcript: Uint8Array, mac: Uint8Array): boolean;
+//# sourceMappingURL=key-exchange.d.ts.map

package/dist/node_modules/@devchain/shared/e2ee/key-exchange.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"key-exchange.d.ts","sourceRoot":"","sources":["../../src/e2ee/key-exchange.ts"],"names":[],"mappings":"AAgCA,eAAO,MAAM,qBAAqB,KAAK,CAAC;AAMxC,eAAO,MAAM,cAAc,qBAAqB,CAAC;AAOjD,eAAO,MAAM,cAAc,+BAA+B,CAAC;AAG3D,eAAO,MAAM,oBAAoB,KAAK,CAAC;AAGvC,eAAO,MAAM,iBAAiB,KAAK,CAAC;AAYpC,wBAAgB,eAAe,CAAC,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU,GAAG,UAAU,CAmB7F;AAGD,MAAM,WAAW,sBAAsB;IAErC,WAAW,EAAE,UAAU,CAAC;IAExB,KAAK,EAAE,MAAM,CAAC;IAEd,eAAe,EAAE,UAAU,CAAC;IAE5B,SAAS,EAAE,MAAM,CAAC;IAElB,SAAS,EAAE,MAAM,CAAC;CACnB;AASD,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,sBAAsB,GAAG,UAAU,CAShF;AAOD,wBAAgB,iBAAiB,CAAC,aAAa,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,GAAG,UAAU,CAK/F;AAQD,wBAAgB,gBAAgB,CAC9B,aAAa,EAAE,UAAU,EACzB,UAAU,EAAE,UAAU,EACtB,GAAG,EAAE,UAAU,GACd,OAAO,CAQT"}