quidproquo-actionprocessor-node 0.1.11 → 0.1.12

package/lib/commonjs/index.d.ts

@@ -1,3 +1,4 @@
 export * from './actionProcessor';
 export * from './dynamicActionProcessor';
+export * from './logic';
 export * from './traceStoryExecution';

package/lib/commonjs/index.js

@@ -16,5 +16,6 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./actionProcessor"), exports);
 __exportStar(require("./dynamicActionProcessor"), exports);
+__exportStar(require("./logic"), exports);
 __exportStar(require("./traceStoryExecution"), exports);
 //# sourceMappingURL=index.js.map

package/lib/commonjs/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,oDAAkC;AAClC,2DAAyC;AACzC,wDAAsC","sourcesContent":["export * from './actionProcessor';\nexport * from './dynamicActionProcessor';\nexport * from './traceStoryExecution';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,oDAAkC;AAClC,2DAAyC;AACzC,0CAAwB;AACxB,wDAAsC","sourcesContent":["export * from './actionProcessor';\nexport * from './dynamicActionProcessor';\nexport * from './logic';\nexport * from './traceStoryExecution';\n"]}

package/lib/commonjs/logic/cryptoEnvelope/CryptoBlob.d.ts

@@ -0,0 +1,7 @@
+export type CryptoBlob = {
+    wrappedKey: Buffer;
+    iv: Buffer;
+    authTag: Buffer;
+    ciphertext: Buffer;
+    contextHash: string;
+};

package/lib/commonjs/logic/cryptoEnvelope/CryptoBlob.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=CryptoBlob.js.map

package/lib/commonjs/logic/cryptoEnvelope/CryptoBlob.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CryptoBlob.js","sourceRoot":"","sources":["../../../../src/logic/cryptoEnvelope/CryptoBlob.ts"],"names":[],"mappings":"","sourcesContent":["// Decoded form of a qpqcrypto:v1 ciphertext blob.\nexport type CryptoBlob = {\n  wrappedKey: Buffer;\n  iv: Buffer;\n  authTag: Buffer;\n  ciphertext: Buffer;\n  contextHash: string;\n};\n"]}

package/lib/commonjs/logic/cryptoEnvelope/CryptoContextMismatchError.d.ts

@@ -0,0 +1,4 @@
+export declare class CryptoContextMismatchError extends Error {
+    readonly code = "QpqCryptoContextMismatch";
+    constructor(message: string);
+}

package/lib/commonjs/logic/cryptoEnvelope/CryptoContextMismatchError.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CryptoContextMismatchError = void 0;
+// Thrown when the context supplied at decrypt differs from the context the
+// blob was encrypted under. The `code` is what actionResultErrorFromCaughtError
+// keys on, so processors can map this to a distinguishable action error.
+class CryptoContextMismatchError extends Error {
+    constructor(message) {
+        super(message);
+        this.code = 'QpqCryptoContextMismatch';
+        this.name = 'CryptoContextMismatchError';
+    }
+}
+exports.CryptoContextMismatchError = CryptoContextMismatchError;
+//# sourceMappingURL=CryptoContextMismatchError.js.map

package/lib/commonjs/logic/cryptoEnvelope/CryptoContextMismatchError.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CryptoContextMismatchError.js","sourceRoot":"","sources":["../../../../src/logic/cryptoEnvelope/CryptoContextMismatchError.ts"],"names":[],"mappings":";;;AAAA,2EAA2E;AAC3E,gFAAgF;AAChF,yEAAyE;AACzE,MAAa,0BAA2B,SAAQ,KAAK;IAGnD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QAHR,SAAI,GAAG,0BAA0B,CAAC;QAIzC,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF;AAPD,gEAOC","sourcesContent":["// Thrown when the context supplied at decrypt differs from the context the\n// blob was encrypted under. The `code` is what actionResultErrorFromCaughtError\n// keys on, so processors can map this to a distinguishable action error.\nexport class CryptoContextMismatchError extends Error {\n  readonly code = 'QpqCryptoContextMismatch';\n\n  constructor(message: string) {\n    super(message);\n    this.name = 'CryptoContextMismatchError';\n  }\n}\n"]}

package/lib/commonjs/logic/cryptoEnvelope/CryptoMalformedCiphertextError.d.ts

@@ -0,0 +1,4 @@
+export declare class CryptoMalformedCiphertextError extends Error {
+    readonly code = "QpqCryptoMalformedCiphertext";
+    constructor(message: string);
+}

package/lib/commonjs/logic/cryptoEnvelope/CryptoMalformedCiphertextError.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CryptoMalformedCiphertextError = void 0;
+// Thrown when a ciphertext is not a valid qpq crypto blob, or fails
+// authenticated decryption with the correct context (i.e. corruption or
+// truncation). The `code` is what actionResultErrorFromCaughtError keys on.
+class CryptoMalformedCiphertextError extends Error {
+    constructor(message) {
+        super(message);
+        this.code = 'QpqCryptoMalformedCiphertext';
+        this.name = 'CryptoMalformedCiphertextError';
+    }
+}
+exports.CryptoMalformedCiphertextError = CryptoMalformedCiphertextError;
+//# sourceMappingURL=CryptoMalformedCiphertextError.js.map

package/lib/commonjs/logic/cryptoEnvelope/CryptoMalformedCiphertextError.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CryptoMalformedCiphertextError.js","sourceRoot":"","sources":["../../../../src/logic/cryptoEnvelope/CryptoMalformedCiphertextError.ts"],"names":[],"mappings":";;;AAAA,oEAAoE;AACpE,wEAAwE;AACxE,4EAA4E;AAC5E,MAAa,8BAA+B,SAAQ,KAAK;IAGvD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QAHR,SAAI,GAAG,8BAA8B,CAAC;QAI7C,IAAI,CAAC,IAAI,GAAG,gCAAgC,CAAC;IAC/C,CAAC;CACF;AAPD,wEAOC","sourcesContent":["// Thrown when a ciphertext is not a valid qpq crypto blob, or fails\n// authenticated decryption with the correct context (i.e. corruption or\n// truncation). The `code` is what actionResultErrorFromCaughtError keys on.\nexport class CryptoMalformedCiphertextError extends Error {\n  readonly code = 'QpqCryptoMalformedCiphertext';\n\n  constructor(message: string) {\n    super(message);\n    this.name = 'CryptoMalformedCiphertextError';\n  }\n}\n"]}

package/lib/commonjs/logic/cryptoEnvelope/DataKeyProvider.d.ts

@@ -0,0 +1,9 @@
+import { CryptoContext } from 'quidproquo-core';
+export type GeneratedDataKey = {
+    plaintextKey: Buffer;
+    wrappedKey: Buffer;
+};
+export type DataKeyProvider = {
+    generateDataKey: (context: CryptoContext) => Promise<GeneratedDataKey>;
+    unwrapDataKey: (wrappedKey: Buffer, context: CryptoContext) => Promise<Buffer>;
+};

package/lib/commonjs/logic/cryptoEnvelope/DataKeyProvider.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=DataKeyProvider.js.map

package/lib/commonjs/logic/cryptoEnvelope/DataKeyProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DataKeyProvider.js","sourceRoot":"","sources":["../../../../src/logic/cryptoEnvelope/DataKeyProvider.ts"],"names":[],"mappings":"","sourcesContent":["import { CryptoContext } from 'quidproquo-core';\n\nexport type GeneratedDataKey = {\n  plaintextKey: Buffer;\n  wrappedKey: Buffer;\n};\n\n// The only part of envelope encryption that differs per runtime: how a\n// one-off data key is created and wrapped (KMS in prod, a local master key in\n// the dev server). The context is passed through so the wrapping layer can\n// bind it too (KMS EncryptionContext, which also lands in CloudTrail).\nexport type DataKeyProvider = {\n  generateDataKey: (context: CryptoContext) => Promise<GeneratedDataKey>;\n  unwrapDataKey: (wrappedKey: Buffer, context: CryptoContext) => Promise<Buffer>;\n};\n"]}

package/lib/commonjs/logic/cryptoEnvelope/canonicalizeCryptoContext.d.ts

@@ -0,0 +1,2 @@
+import { CryptoContext } from 'quidproquo-core';
+export declare const canonicalizeCryptoContext: (context?: CryptoContext) => string;

package/lib/commonjs/logic/cryptoEnvelope/canonicalizeCryptoContext.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.canonicalizeCryptoContext = void 0;
+// Netstring-style encoding (byteLength:value) so { ab: 'c' } and { a: 'bc' }
+// cannot canonicalize to the same bytes.
+const encodePart = (part) => `${Buffer.byteLength(part, 'utf8')}:${part}`;
+// Deterministic byte encoding of a crypto context, used as the AAD for
+// envelope encryption. Keys are sorted by code unit (NOT localeCompare, which
+// varies by environment). undefined and {} are equivalent: both canonicalize
+// to the empty string. Every runtime (prod KMS, dev stub) MUST canonicalize
+// through this one function, or dev and prod disagree about what a valid
+// context is and it only surfaces after deploy.
+const canonicalizeCryptoContext = (context) => {
+    const sortedEntries = Object.entries(context || {}).sort(([keyA], [keyB]) => (keyA < keyB ? -1 : keyA > keyB ? 1 : 0));
+    return sortedEntries.map(([key, value]) => encodePart(key) + encodePart(value)).join('');
+};
+exports.canonicalizeCryptoContext = canonicalizeCryptoContext;
+//# sourceMappingURL=canonicalizeCryptoContext.js.map

package/lib/commonjs/logic/cryptoEnvelope/canonicalizeCryptoContext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonicalizeCryptoContext.js","sourceRoot":"","sources":["../../../../src/logic/cryptoEnvelope/canonicalizeCryptoContext.ts"],"names":[],"mappings":";;;AAEA,6EAA6E;AAC7E,yCAAyC;AACzC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;AAE1F,uEAAuE;AACvE,8EAA8E;AAC9E,6EAA6E;AAC7E,4EAA4E;AAC5E,yEAAyE;AACzE,gDAAgD;AACzC,MAAM,yBAAyB,GAAG,CAAC,OAAuB,EAAU,EAAE;IAC3E,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEvH,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC3F,CAAC,CAAC;AAJW,QAAA,yBAAyB,6BAIpC","sourcesContent":["import { CryptoContext } from 'quidproquo-core';\n\n// Netstring-style encoding (byteLength:value) so { ab: 'c' } and { a: 'bc' }\n// cannot canonicalize to the same bytes.\nconst encodePart = (part: string): string => `${Buffer.byteLength(part, 'utf8')}:${part}`;\n\n// Deterministic byte encoding of a crypto context, used as the AAD for\n// envelope encryption. Keys are sorted by code unit (NOT localeCompare, which\n// varies by environment). undefined and {} are equivalent: both canonicalize\n// to the empty string. Every runtime (prod KMS, dev stub) MUST canonicalize\n// through this one function, or dev and prod disagree about what a valid\n// context is and it only surfaces after deploy.\nexport const canonicalizeCryptoContext = (context?: CryptoContext): string => {\n  const sortedEntries = Object.entries(context || {}).sort(([keyA], [keyB]) => (keyA < keyB ? -1 : keyA > keyB ? 1 : 0));\n\n  return sortedEntries.map(([key, value]) => encodePart(key) + encodePart(value)).join('');\n};\n"]}

package/lib/commonjs/logic/cryptoEnvelope/createLocalMasterKeyDataKeyProvider.d.ts

@@ -0,0 +1,2 @@
+import { DataKeyProvider } from './DataKeyProvider';
+export declare const createLocalMasterKeyDataKeyProvider: (masterKey: Buffer) => DataKeyProvider;

package/lib/commonjs/logic/cryptoEnvelope/createLocalMasterKeyDataKeyProvider.js

@@ -0,0 +1,48 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createLocalMasterKeyDataKeyProvider = void 0;
+const crypto_1 = require("crypto");
+const canonicalizeCryptoContext_1 = require("./canonicalizeCryptoContext");
+const CryptoMalformedCiphertextError_1 = require("./CryptoMalformedCiphertextError");
+// A DataKeyProvider that wraps data keys with AES-256-GCM under a local
+// 32-byte master key, with the canonical context as AAD (mirroring KMS
+// EncryptionContext binding). Used by the dev server so envelope encryption
+// runs the identical code path offline. Wrapped key layout: iv(12) tag(16) key.
+const createLocalMasterKeyDataKeyProvider = (masterKey) => ({
+    generateDataKey: (context) => __awaiter(void 0, void 0, void 0, function* () {
+        const plaintextKey = (0, crypto_1.randomBytes)(32);
+        const iv = (0, crypto_1.randomBytes)(12);
+        const cipher = (0, crypto_1.createCipheriv)('aes-256-gcm', masterKey, iv);
+        cipher.setAAD(Buffer.from((0, canonicalizeCryptoContext_1.canonicalizeCryptoContext)(context), 'utf8'));
+        const wrappedKeyBytes = Buffer.concat([cipher.update(plaintextKey), cipher.final()]);
+        return {
+            plaintextKey,
+            wrappedKey: Buffer.concat([iv, cipher.getAuthTag(), wrappedKeyBytes]),
+        };
+    }),
+    unwrapDataKey: (wrappedKey, context) => __awaiter(void 0, void 0, void 0, function* () {
+        if (wrappedKey.length < 28) {
+            throw new CryptoMalformedCiphertextError_1.CryptoMalformedCiphertextError('Wrapped data key is truncated');
+        }
+        const decipher = (0, crypto_1.createDecipheriv)('aes-256-gcm', masterKey, wrappedKey.subarray(0, 12));
+        decipher.setAAD(Buffer.from((0, canonicalizeCryptoContext_1.canonicalizeCryptoContext)(context), 'utf8'));
+        decipher.setAuthTag(wrappedKey.subarray(12, 28));
+        try {
+            return Buffer.concat([decipher.update(wrappedKey.subarray(28)), decipher.final()]);
+        }
+        catch (_a) {
+            throw new CryptoMalformedCiphertextError_1.CryptoMalformedCiphertextError('Wrapped data key failed authenticated decryption');
+        }
+    }),
+});
+exports.createLocalMasterKeyDataKeyProvider = createLocalMasterKeyDataKeyProvider;
+//# sourceMappingURL=createLocalMasterKeyDataKeyProvider.js.map

package/lib/commonjs/logic/cryptoEnvelope/createLocalMasterKeyDataKeyProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createLocalMasterKeyDataKeyProvider.js","sourceRoot":"","sources":["../../../../src/logic/cryptoEnvelope/createLocalMasterKeyDataKeyProvider.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,mCAAuE;AAEvE,2EAAwE;AACxE,qFAAkF;AAGlF,wEAAwE;AACxE,uEAAuE;AACvE,4EAA4E;AAC5E,gFAAgF;AACzE,MAAM,mCAAmC,GAAG,CAAC,SAAiB,EAAmB,EAAE,CAAC,CAAC;IAC1F,eAAe,EAAE,CAAO,OAAO,EAAE,EAAE;QACjC,MAAM,YAAY,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC;QAErC,MAAM,EAAE,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC;QAC3B,MAAM,MAAM,GAAG,IAAA,uBAAc,EAAC,aAAa,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAA,qDAAyB,EAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QAEvE,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAErF,OAAO;YACL,YAAY;YACZ,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,eAAe,CAAC,CAAC;SACtE,CAAC;IACJ,CAAC,CAAA;IAED,aAAa,EAAE,CAAO,UAAU,EAAE,OAAO,EAAE,EAAE;QAC3C,IAAI,UAAU,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC3B,MAAM,IAAI,+DAA8B,CAAC,+BAA+B,CAAC,CAAC;QAC5E,CAAC;QAED,MAAM,QAAQ,GAAG,IAAA,yBAAgB,EAAC,aAAa,EAAE,SAAS,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACxF,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAA,qDAAyB,EAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACzE,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAEjD,IAAI,CAAC;YACH,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACrF,CAAC;QAAC,WAAM,CAAC;YACP,MAAM,IAAI,+DAA8B,CAAC,kDAAkD,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC,CAAA;CACF,CAAC,CAAC;AA/BU,QAAA,mCAAmC,uCA+B7C","sourcesContent":["import { createCipheriv, createDecipheriv, randomBytes } from 'crypto';\n\nimport { canonicalizeCryptoContext } from './canonicalizeCryptoContext';\nimport { CryptoMalformedCiphertextError } from './CryptoMalformedCiphertextError';\nimport { DataKeyProvider } from './DataKeyProvider';\n\n// A DataKeyProvider that wraps data keys with AES-256-GCM under a local\n// 32-byte master key, with the canonical context as AAD (mirroring KMS\n// EncryptionContext binding). Used by the dev server so envelope encryption\n// runs the identical code path offline. Wrapped key layout: iv(12) tag(16) key.\nexport const createLocalMasterKeyDataKeyProvider = (masterKey: Buffer): DataKeyProvider => ({\n  generateDataKey: async (context) => {\n    const plaintextKey = randomBytes(32);\n\n    const iv = randomBytes(12);\n    const cipher = createCipheriv('aes-256-gcm', masterKey, iv);\n    cipher.setAAD(Buffer.from(canonicalizeCryptoContext(context), 'utf8'));\n\n    const wrappedKeyBytes = Buffer.concat([cipher.update(plaintextKey), cipher.final()]);\n\n    return {\n      plaintextKey,\n      wrappedKey: Buffer.concat([iv, cipher.getAuthTag(), wrappedKeyBytes]),\n    };\n  },\n\n  unwrapDataKey: async (wrappedKey, context) => {\n    if (wrappedKey.length < 28) {\n      throw new CryptoMalformedCiphertextError('Wrapped data key is truncated');\n    }\n\n    const decipher = createDecipheriv('aes-256-gcm', masterKey, wrappedKey.subarray(0, 12));\n    decipher.setAAD(Buffer.from(canonicalizeCryptoContext(context), 'utf8'));\n    decipher.setAuthTag(wrappedKey.subarray(12, 28));\n\n    try {\n      return Buffer.concat([decipher.update(wrappedKey.subarray(28)), decipher.final()]);\n    } catch {\n      throw new CryptoMalformedCiphertextError('Wrapped data key failed authenticated decryption');\n    }\n  },\n});\n"]}

package/lib/commonjs/logic/cryptoEnvelope/cryptoBlobPrefix.d.ts

@@ -0,0 +1 @@
+export declare const CRYPTO_BLOB_PREFIX_V1 = "qpqcrypto:v1:";

package/lib/commonjs/logic/cryptoEnvelope/cryptoBlobPrefix.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CRYPTO_BLOB_PREFIX_V1 = void 0;
+// Version prefix on every ciphertext this capability produces. Bump the
+// version (qpqcrypto:v2:...) to change the blob format; decrypt dispatches on
+// the prefix, so old blobs keep working without a data migration.
+exports.CRYPTO_BLOB_PREFIX_V1 = 'qpqcrypto:v1:';
+//# sourceMappingURL=cryptoBlobPrefix.js.map

package/lib/commonjs/logic/cryptoEnvelope/cryptoBlobPrefix.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoBlobPrefix.js","sourceRoot":"","sources":["../../../../src/logic/cryptoEnvelope/cryptoBlobPrefix.ts"],"names":[],"mappings":";;;AAAA,wEAAwE;AACxE,8EAA8E;AAC9E,kEAAkE;AACrD,QAAA,qBAAqB,GAAG,eAAe,CAAC","sourcesContent":["// Version prefix on every ciphertext this capability produces. Bump the\n// version (qpqcrypto:v2:...) to change the blob format; decrypt dispatches on\n// the prefix, so old blobs keep working without a data migration.\nexport const CRYPTO_BLOB_PREFIX_V1 = 'qpqcrypto:v1:';\n"]}

package/lib/commonjs/logic/cryptoEnvelope/cryptoContextHash.d.ts

@@ -0,0 +1 @@
+export declare const cryptoContextHash: (canonicalContext: string) => string;

package/lib/commonjs/logic/cryptoEnvelope/cryptoContextHash.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.cryptoContextHash = void 0;
+const crypto_1 = require("crypto");
+// Hash of the canonical context stored inside the crypto blob. Lets decrypt
+// distinguish "wrong context supplied" (hash differs) from "corrupt
+// ciphertext" (hash matches, GCM tag fails). The context is not secret, so
+// storing its hash leaks nothing new.
+const cryptoContextHash = (canonicalContext) => {
+    return (0, crypto_1.createHash)('sha256').update(canonicalContext, 'utf8').digest('base64');
+};
+exports.cryptoContextHash = cryptoContextHash;
+//# sourceMappingURL=cryptoContextHash.js.map

package/lib/commonjs/logic/cryptoEnvelope/cryptoContextHash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoContextHash.js","sourceRoot":"","sources":["../../../../src/logic/cryptoEnvelope/cryptoContextHash.ts"],"names":[],"mappings":";;;AAAA,mCAAoC;AAEpC,4EAA4E;AAC5E,oEAAoE;AACpE,2EAA2E;AAC3E,sCAAsC;AAC/B,MAAM,iBAAiB,GAAG,CAAC,gBAAwB,EAAU,EAAE;IACpE,OAAO,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAChF,CAAC,CAAC;AAFW,QAAA,iBAAiB,qBAE5B","sourcesContent":["import { createHash } from 'crypto';\n\n// Hash of the canonical context stored inside the crypto blob. Lets decrypt\n// distinguish \"wrong context supplied\" (hash differs) from \"corrupt\n// ciphertext\" (hash matches, GCM tag fails). The context is not secret, so\n// storing its hash leaks nothing new.\nexport const cryptoContextHash = (canonicalContext: string): string => {\n  return createHash('sha256').update(canonicalContext, 'utf8').digest('base64');\n};\n"]}

package/lib/commonjs/logic/cryptoEnvelope/decodeCryptoBlob.d.ts

@@ -0,0 +1,2 @@
+import { CryptoBlob } from './CryptoBlob';
+export declare const decodeCryptoBlob: (ciphertext: string) => CryptoBlob;

package/lib/commonjs/logic/cryptoEnvelope/decodeCryptoBlob.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decodeCryptoBlob = void 0;
+const cryptoBlobPrefix_1 = require("./cryptoBlobPrefix");
+const CryptoMalformedCiphertextError_1 = require("./CryptoMalformedCiphertextError");
+// Parsing failures all collapse to CryptoMalformedCiphertextError: anything
+// that is not a well-formed v1 blob is corruption as far as the caller cares.
+const decodeCryptoBlob = (ciphertext) => {
+    if (!ciphertext.startsWith(cryptoBlobPrefix_1.CRYPTO_BLOB_PREFIX_V1)) {
+        throw new CryptoMalformedCiphertextError_1.CryptoMalformedCiphertextError('Ciphertext is not a qpq crypto blob (missing/unknown version prefix)');
+    }
+    let fields;
+    try {
+        fields = JSON.parse(Buffer.from(ciphertext.slice(cryptoBlobPrefix_1.CRYPTO_BLOB_PREFIX_V1.length), 'base64').toString('utf8'));
+    }
+    catch (_a) {
+        throw new CryptoMalformedCiphertextError_1.CryptoMalformedCiphertextError('Ciphertext blob payload is not decodable');
+    }
+    const { k, iv, tg, ct, ch } = fields;
+    if (typeof k !== 'string' || typeof iv !== 'string' || typeof tg !== 'string' || typeof ct !== 'string' || typeof ch !== 'string') {
+        throw new CryptoMalformedCiphertextError_1.CryptoMalformedCiphertextError('Ciphertext blob is missing required fields');
+    }
+    return {
+        wrappedKey: Buffer.from(k, 'base64'),
+        iv: Buffer.from(iv, 'base64'),
+        authTag: Buffer.from(tg, 'base64'),
+        ciphertext: Buffer.from(ct, 'base64'),
+        contextHash: ch,
+    };
+};
+exports.decodeCryptoBlob = decodeCryptoBlob;
+//# sourceMappingURL=decodeCryptoBlob.js.map

package/lib/commonjs/logic/cryptoEnvelope/decodeCryptoBlob.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decodeCryptoBlob.js","sourceRoot":"","sources":["../../../../src/logic/cryptoEnvelope/decodeCryptoBlob.ts"],"names":[],"mappings":";;;AACA,yDAA2D;AAC3D,qFAAkF;AAElF,4EAA4E;AAC5E,8EAA8E;AACvE,MAAM,gBAAgB,GAAG,CAAC,UAAkB,EAAc,EAAE;IACjE,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,wCAAqB,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,+DAA8B,CAAC,sEAAsE,CAAC,CAAC;IACnH,CAAC;IAED,IAAI,MAA+B,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,wCAAqB,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9G,CAAC;IAAC,WAAM,CAAC;QACP,MAAM,IAAI,+DAA8B,CAAC,0CAA0C,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,MAAM,CAAC;IACrC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;QAClI,MAAM,IAAI,+DAA8B,CAAC,4CAA4C,CAAC,CAAC;IACzF,CAAC;IAED,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC;QACpC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC;QAC7B,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC;QAClC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC;QACrC,WAAW,EAAE,EAAE;KAChB,CAAC;AACJ,CAAC,CAAC;AAxBW,QAAA,gBAAgB,oBAwB3B","sourcesContent":["import { CryptoBlob } from './CryptoBlob';\nimport { CRYPTO_BLOB_PREFIX_V1 } from './cryptoBlobPrefix';\nimport { CryptoMalformedCiphertextError } from './CryptoMalformedCiphertextError';\n\n// Parsing failures all collapse to CryptoMalformedCiphertextError: anything\n// that is not a well-formed v1 blob is corruption as far as the caller cares.\nexport const decodeCryptoBlob = (ciphertext: string): CryptoBlob => {\n  if (!ciphertext.startsWith(CRYPTO_BLOB_PREFIX_V1)) {\n    throw new CryptoMalformedCiphertextError('Ciphertext is not a qpq crypto blob (missing/unknown version prefix)');\n  }\n\n  let fields: Record<string, unknown>;\n  try {\n    fields = JSON.parse(Buffer.from(ciphertext.slice(CRYPTO_BLOB_PREFIX_V1.length), 'base64').toString('utf8'));\n  } catch {\n    throw new CryptoMalformedCiphertextError('Ciphertext blob payload is not decodable');\n  }\n\n  const { k, iv, tg, ct, ch } = fields;\n  if (typeof k !== 'string' || typeof iv !== 'string' || typeof tg !== 'string' || typeof ct !== 'string' || typeof ch !== 'string') {\n    throw new CryptoMalformedCiphertextError('Ciphertext blob is missing required fields');\n  }\n\n  return {\n    wrappedKey: Buffer.from(k, 'base64'),\n    iv: Buffer.from(iv, 'base64'),\n    authTag: Buffer.from(tg, 'base64'),\n    ciphertext: Buffer.from(ct, 'base64'),\n    contextHash: ch,\n  };\n};\n"]}

package/lib/commonjs/logic/cryptoEnvelope/encodeCryptoBlob.d.ts

@@ -0,0 +1,2 @@
+import { CryptoBlob } from './CryptoBlob';
+export declare const encodeCryptoBlob: (blob: CryptoBlob) => string;

package/lib/commonjs/logic/cryptoEnvelope/encodeCryptoBlob.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.encodeCryptoBlob = void 0;
+const cryptoBlobPrefix_1 = require("./cryptoBlobPrefix");
+const encodeCryptoBlob = (blob) => {
+    const json = JSON.stringify({
+        k: blob.wrappedKey.toString('base64'),
+        iv: blob.iv.toString('base64'),
+        tg: blob.authTag.toString('base64'),
+        ct: blob.ciphertext.toString('base64'),
+        ch: blob.contextHash,
+    });
+    return `${cryptoBlobPrefix_1.CRYPTO_BLOB_PREFIX_V1}${Buffer.from(json, 'utf8').toString('base64')}`;
+};
+exports.encodeCryptoBlob = encodeCryptoBlob;
+//# sourceMappingURL=encodeCryptoBlob.js.map

package/lib/commonjs/logic/cryptoEnvelope/encodeCryptoBlob.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encodeCryptoBlob.js","sourceRoot":"","sources":["../../../../src/logic/cryptoEnvelope/encodeCryptoBlob.ts"],"names":[],"mappings":";;;AACA,yDAA2D;AAEpD,MAAM,gBAAgB,GAAG,CAAC,IAAgB,EAAU,EAAE;IAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1B,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACrC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC9B,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACnC,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACtC,EAAE,EAAE,IAAI,CAAC,WAAW;KACrB,CAAC,CAAC;IAEH,OAAO,GAAG,wCAAqB,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;AACnF,CAAC,CAAC;AAVW,QAAA,gBAAgB,oBAU3B","sourcesContent":["import { CryptoBlob } from './CryptoBlob';\nimport { CRYPTO_BLOB_PREFIX_V1 } from './cryptoBlobPrefix';\n\nexport const encodeCryptoBlob = (blob: CryptoBlob): string => {\n  const json = JSON.stringify({\n    k: blob.wrappedKey.toString('base64'),\n    iv: blob.iv.toString('base64'),\n    tg: blob.authTag.toString('base64'),\n    ct: blob.ciphertext.toString('base64'),\n    ch: blob.contextHash,\n  });\n\n  return `${CRYPTO_BLOB_PREFIX_V1}${Buffer.from(json, 'utf8').toString('base64')}`;\n};\n"]}

package/lib/commonjs/logic/cryptoEnvelope/envelopeDecrypt.d.ts

@@ -0,0 +1,3 @@
+import { CryptoContext } from 'quidproquo-core';
+import { DataKeyProvider } from './DataKeyProvider';
+export declare const envelopeDecrypt: (ciphertext: string, context: CryptoContext | undefined, dataKeyProvider: DataKeyProvider) => Promise<string>;

package/lib/commonjs/logic/cryptoEnvelope/envelopeDecrypt.js

@@ -0,0 +1,42 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.envelopeDecrypt = void 0;
+const crypto_1 = require("crypto");
+const canonicalizeCryptoContext_1 = require("./canonicalizeCryptoContext");
+const cryptoContextHash_1 = require("./cryptoContextHash");
+const CryptoContextMismatchError_1 = require("./CryptoContextMismatchError");
+const CryptoMalformedCiphertextError_1 = require("./CryptoMalformedCiphertextError");
+const decodeCryptoBlob_1 = require("./decodeCryptoBlob");
+const envelopeDecrypt = (ciphertext, context, dataKeyProvider) => __awaiter(void 0, void 0, void 0, function* () {
+    const blob = (0, decodeCryptoBlob_1.decodeCryptoBlob)(ciphertext);
+    // Context is checked against the stored hash BEFORE any key unwrap or GCM
+    // work: a mismatch fails as ContextMismatch (probable scoping bug) rather
+    // than a bare tag failure that reads as corruption.
+    const canonicalContext = (0, canonicalizeCryptoContext_1.canonicalizeCryptoContext)(context);
+    if (blob.contextHash !== (0, cryptoContextHash_1.cryptoContextHash)(canonicalContext)) {
+        throw new CryptoContextMismatchError_1.CryptoContextMismatchError('Supplied crypto context does not match the context this value was encrypted under');
+    }
+    const plaintextKey = yield dataKeyProvider.unwrapDataKey(blob.wrappedKey, context || {});
+    const decipher = (0, crypto_1.createDecipheriv)('aes-256-gcm', plaintextKey, blob.iv);
+    decipher.setAAD(Buffer.from(canonicalContext, 'utf8'));
+    decipher.setAuthTag(blob.authTag);
+    // Context hash already matched, so a GCM auth failure here means the
+    // ciphertext bytes themselves are corrupt or truncated.
+    try {
+        return Buffer.concat([decipher.update(blob.ciphertext), decipher.final()]).toString('utf8');
+    }
+    catch (_a) {
+        throw new CryptoMalformedCiphertextError_1.CryptoMalformedCiphertextError('Ciphertext failed authenticated decryption; the stored value is corrupt or truncated');
+    }
+});
+exports.envelopeDecrypt = envelopeDecrypt;
+//# sourceMappingURL=envelopeDecrypt.js.map

package/lib/commonjs/logic/cryptoEnvelope/envelopeDecrypt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelopeDecrypt.js","sourceRoot":"","sources":["../../../../src/logic/cryptoEnvelope/envelopeDecrypt.ts"],"names":[],"mappings":";;;;;;;;;;;;AAEA,mCAA0C;AAE1C,2EAAwE;AACxE,2DAAwD;AACxD,6EAA0E;AAC1E,qFAAkF;AAElF,yDAAsD;AAE/C,MAAM,eAAe,GAAG,CAAO,UAAkB,EAAE,OAAkC,EAAE,eAAgC,EAAmB,EAAE;IACjJ,MAAM,IAAI,GAAG,IAAA,mCAAgB,EAAC,UAAU,CAAC,CAAC;IAE1C,0EAA0E;IAC1E,0EAA0E;IAC1E,oDAAoD;IACpD,MAAM,gBAAgB,GAAG,IAAA,qDAAyB,EAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,IAAI,CAAC,WAAW,KAAK,IAAA,qCAAiB,EAAC,gBAAgB,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,uDAA0B,CAAC,mFAAmF,CAAC,CAAC;IAC5H,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,eAAe,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;IAEzF,MAAM,QAAQ,GAAG,IAAA,yBAAgB,EAAC,aAAa,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACxE,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC;IACvD,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAElC,qEAAqE;IACrE,wDAAwD;IACxD,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9F,CAAC;IAAC,WAAM,CAAC;QACP,MAAM,IAAI,+DAA8B,CAAC,sFAAsF,CAAC,CAAC;IACnI,CAAC;AACH,CAAC,CAAA,CAAC;AAxBW,QAAA,eAAe,mBAwB1B","sourcesContent":["import { CryptoContext } from 'quidproquo-core';\n\nimport { createDecipheriv } from 'crypto';\n\nimport { canonicalizeCryptoContext } from './canonicalizeCryptoContext';\nimport { cryptoContextHash } from './cryptoContextHash';\nimport { CryptoContextMismatchError } from './CryptoContextMismatchError';\nimport { CryptoMalformedCiphertextError } from './CryptoMalformedCiphertextError';\nimport { DataKeyProvider } from './DataKeyProvider';\nimport { decodeCryptoBlob } from './decodeCryptoBlob';\n\nexport const envelopeDecrypt = async (ciphertext: string, context: CryptoContext | undefined, dataKeyProvider: DataKeyProvider): Promise<string> => {\n  const blob = decodeCryptoBlob(ciphertext);\n\n  // Context is checked against the stored hash BEFORE any key unwrap or GCM\n  // work: a mismatch fails as ContextMismatch (probable scoping bug) rather\n  // than a bare tag failure that reads as corruption.\n  const canonicalContext = canonicalizeCryptoContext(context);\n  if (blob.contextHash !== cryptoContextHash(canonicalContext)) {\n    throw new CryptoContextMismatchError('Supplied crypto context does not match the context this value was encrypted under');\n  }\n\n  const plaintextKey = await dataKeyProvider.unwrapDataKey(blob.wrappedKey, context || {});\n\n  const decipher = createDecipheriv('aes-256-gcm', plaintextKey, blob.iv);\n  decipher.setAAD(Buffer.from(canonicalContext, 'utf8'));\n  decipher.setAuthTag(blob.authTag);\n\n  // Context hash already matched, so a GCM auth failure here means the\n  // ciphertext bytes themselves are corrupt or truncated.\n  try {\n    return Buffer.concat([decipher.update(blob.ciphertext), decipher.final()]).toString('utf8');\n  } catch {\n    throw new CryptoMalformedCiphertextError('Ciphertext failed authenticated decryption; the stored value is corrupt or truncated');\n  }\n};\n"]}

package/lib/commonjs/logic/cryptoEnvelope/envelopeEncrypt.d.ts

@@ -0,0 +1,3 @@
+import { CryptoContext } from 'quidproquo-core';
+import { DataKeyProvider } from './DataKeyProvider';
+export declare const envelopeEncrypt: (plaintext: string, context: CryptoContext | undefined, dataKeyProvider: DataKeyProvider) => Promise<string>;

package/lib/commonjs/logic/cryptoEnvelope/envelopeEncrypt.js

@@ -0,0 +1,35 @@
+"use strict";
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.envelopeEncrypt = void 0;
+const crypto_1 = require("crypto");
+const canonicalizeCryptoContext_1 = require("./canonicalizeCryptoContext");
+const cryptoContextHash_1 = require("./cryptoContextHash");
+const encodeCryptoBlob_1 = require("./encodeCryptoBlob");
+// Envelope encryption: a fresh data key from the provider, AES-256-GCM locally
+// with the canonical context as AAD, wrapped key stored inside the blob.
+const envelopeEncrypt = (plaintext, context, dataKeyProvider) => __awaiter(void 0, void 0, void 0, function* () {
+    const canonicalContext = (0, canonicalizeCryptoContext_1.canonicalizeCryptoContext)(context);
+    const { plaintextKey, wrappedKey } = yield dataKeyProvider.generateDataKey(context || {});
+    const iv = (0, crypto_1.randomBytes)(12);
+    const cipher = (0, crypto_1.createCipheriv)('aes-256-gcm', plaintextKey, iv);
+    cipher.setAAD(Buffer.from(canonicalContext, 'utf8'));
+    const ciphertext = Buffer.concat([cipher.update(plaintext, 'utf8'), cipher.final()]);
+    return (0, encodeCryptoBlob_1.encodeCryptoBlob)({
+        wrappedKey,
+        iv,
+        authTag: cipher.getAuthTag(),
+        ciphertext,
+        contextHash: (0, cryptoContextHash_1.cryptoContextHash)(canonicalContext),
+    });
+});
+exports.envelopeEncrypt = envelopeEncrypt;
+//# sourceMappingURL=envelopeEncrypt.js.map

package/lib/commonjs/logic/cryptoEnvelope/envelopeEncrypt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelopeEncrypt.js","sourceRoot":"","sources":["../../../../src/logic/cryptoEnvelope/envelopeEncrypt.ts"],"names":[],"mappings":";;;;;;;;;;;;AAEA,mCAAqD;AAErD,2EAAwE;AACxE,2DAAwD;AAExD,yDAAsD;AAEtD,+EAA+E;AAC/E,yEAAyE;AAClE,MAAM,eAAe,GAAG,CAAO,SAAiB,EAAE,OAAkC,EAAE,eAAgC,EAAmB,EAAE;IAChJ,MAAM,gBAAgB,GAAG,IAAA,qDAAyB,EAAC,OAAO,CAAC,CAAC;IAE5D,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,MAAM,eAAe,CAAC,eAAe,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAE1F,MAAM,EAAE,GAAG,IAAA,oBAAW,EAAC,EAAE,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,IAAA,uBAAc,EAAC,aAAa,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;IAC/D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC;IAErD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAErF,OAAO,IAAA,mCAAgB,EAAC;QACtB,UAAU;QACV,EAAE;QACF,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE;QAC5B,UAAU;QACV,WAAW,EAAE,IAAA,qCAAiB,EAAC,gBAAgB,CAAC;KACjD,CAAC,CAAC;AACL,CAAC,CAAA,CAAC;AAlBW,QAAA,eAAe,mBAkB1B","sourcesContent":["import { CryptoContext } from 'quidproquo-core';\n\nimport { createCipheriv, randomBytes } from 'crypto';\n\nimport { canonicalizeCryptoContext } from './canonicalizeCryptoContext';\nimport { cryptoContextHash } from './cryptoContextHash';\nimport { DataKeyProvider } from './DataKeyProvider';\nimport { encodeCryptoBlob } from './encodeCryptoBlob';\n\n// Envelope encryption: a fresh data key from the provider, AES-256-GCM locally\n// with the canonical context as AAD, wrapped key stored inside the blob.\nexport const envelopeEncrypt = async (plaintext: string, context: CryptoContext | undefined, dataKeyProvider: DataKeyProvider): Promise<string> => {\n  const canonicalContext = canonicalizeCryptoContext(context);\n\n  const { plaintextKey, wrappedKey } = await dataKeyProvider.generateDataKey(context || {});\n\n  const iv = randomBytes(12);\n  const cipher = createCipheriv('aes-256-gcm', plaintextKey, iv);\n  cipher.setAAD(Buffer.from(canonicalContext, 'utf8'));\n\n  const ciphertext = Buffer.concat([cipher.update(plaintext, 'utf8'), cipher.final()]);\n\n  return encodeCryptoBlob({\n    wrappedKey,\n    iv,\n    authTag: cipher.getAuthTag(),\n    ciphertext,\n    contextHash: cryptoContextHash(canonicalContext),\n  });\n};\n"]}

package/lib/commonjs/logic/cryptoEnvelope/index.d.ts

@@ -0,0 +1,12 @@
+export * from './canonicalizeCryptoContext';
+export * from './createLocalMasterKeyDataKeyProvider';
+export * from './CryptoBlob';
+export * from './cryptoBlobPrefix';
+export * from './cryptoContextHash';
+export * from './CryptoContextMismatchError';
+export * from './CryptoMalformedCiphertextError';
+export * from './DataKeyProvider';
+export * from './decodeCryptoBlob';
+export * from './encodeCryptoBlob';
+export * from './envelopeDecrypt';
+export * from './envelopeEncrypt';

package/lib/commonjs/logic/cryptoEnvelope/index.js

@@ -0,0 +1,29 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./canonicalizeCryptoContext"), exports);
+__exportStar(require("./createLocalMasterKeyDataKeyProvider"), exports);
+__exportStar(require("./CryptoBlob"), exports);
+__exportStar(require("./cryptoBlobPrefix"), exports);
+__exportStar(require("./cryptoContextHash"), exports);
+__exportStar(require("./CryptoContextMismatchError"), exports);
+__exportStar(require("./CryptoMalformedCiphertextError"), exports);
+__exportStar(require("./DataKeyProvider"), exports);
+__exportStar(require("./decodeCryptoBlob"), exports);
+__exportStar(require("./encodeCryptoBlob"), exports);
+__exportStar(require("./envelopeDecrypt"), exports);
+__exportStar(require("./envelopeEncrypt"), exports);
+//# sourceMappingURL=index.js.map

package/lib/commonjs/logic/cryptoEnvelope/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/logic/cryptoEnvelope/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,8DAA4C;AAC5C,wEAAsD;AACtD,+CAA6B;AAC7B,qDAAmC;AACnC,sDAAoC;AACpC,+DAA6C;AAC7C,mEAAiD;AACjD,oDAAkC;AAClC,qDAAmC;AACnC,qDAAmC;AACnC,oDAAkC;AAClC,oDAAkC","sourcesContent":["export * from './canonicalizeCryptoContext';\nexport * from './createLocalMasterKeyDataKeyProvider';\nexport * from './CryptoBlob';\nexport * from './cryptoBlobPrefix';\nexport * from './cryptoContextHash';\nexport * from './CryptoContextMismatchError';\nexport * from './CryptoMalformedCiphertextError';\nexport * from './DataKeyProvider';\nexport * from './decodeCryptoBlob';\nexport * from './encodeCryptoBlob';\nexport * from './envelopeDecrypt';\nexport * from './envelopeEncrypt';\n"]}

package/lib/commonjs/logic/index.d.ts

@@ -0,0 +1 @@
+export * from './cryptoEnvelope';

package/lib/commonjs/logic/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./cryptoEnvelope"), exports);
+//# sourceMappingURL=index.js.map

package/lib/commonjs/logic/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/logic/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,mDAAiC","sourcesContent":["export * from './cryptoEnvelope';\n"]}

package/lib/esm/index.d.ts

@@ -1,3 +1,4 @@
 export * from './actionProcessor';
 export * from './dynamicActionProcessor';
+export * from './logic';
 export * from './traceStoryExecution';

package/lib/esm/index.js

@@ -1,4 +1,5 @@
 export * from './actionProcessor';
 export * from './dynamicActionProcessor';
+export * from './logic';
 export * from './traceStoryExecution';
 //# sourceMappingURL=index.js.map

package/lib/esm/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,0BAA0B,CAAC;AACzC,cAAc,uBAAuB,CAAC","sourcesContent":["export * from './actionProcessor';\nexport * from './dynamicActionProcessor';\nexport * from './traceStoryExecution';\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,mBAAmB,CAAC;AAClC,cAAc,0BAA0B,CAAC;AACzC,cAAc,SAAS,CAAC;AACxB,cAAc,uBAAuB,CAAC","sourcesContent":["export * from './actionProcessor';\nexport * from './dynamicActionProcessor';\nexport * from './logic';\nexport * from './traceStoryExecution';\n"]}

package/lib/esm/logic/cryptoEnvelope/CryptoBlob.d.ts

@@ -0,0 +1,7 @@
+export type CryptoBlob = {
+    wrappedKey: Buffer;
+    iv: Buffer;
+    authTag: Buffer;
+    ciphertext: Buffer;
+    contextHash: string;
+};

package/lib/esm/logic/cryptoEnvelope/CryptoBlob.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=CryptoBlob.js.map

package/lib/esm/logic/cryptoEnvelope/CryptoBlob.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CryptoBlob.js","sourceRoot":"","sources":["../../../../src/logic/cryptoEnvelope/CryptoBlob.ts"],"names":[],"mappings":"","sourcesContent":["// Decoded form of a qpqcrypto:v1 ciphertext blob.\nexport type CryptoBlob = {\n  wrappedKey: Buffer;\n  iv: Buffer;\n  authTag: Buffer;\n  ciphertext: Buffer;\n  contextHash: string;\n};\n"]}

package/lib/esm/logic/cryptoEnvelope/CryptoContextMismatchError.d.ts

@@ -0,0 +1,4 @@
+export declare class CryptoContextMismatchError extends Error {
+    readonly code = "QpqCryptoContextMismatch";
+    constructor(message: string);
+}

package/lib/esm/logic/cryptoEnvelope/CryptoContextMismatchError.js

@@ -0,0 +1,11 @@
+// Thrown when the context supplied at decrypt differs from the context the
+// blob was encrypted under. The `code` is what actionResultErrorFromCaughtError
+// keys on, so processors can map this to a distinguishable action error.
+export class CryptoContextMismatchError extends Error {
+    code = 'QpqCryptoContextMismatch';
+    constructor(message) {
+        super(message);
+        this.name = 'CryptoContextMismatchError';
+    }
+}
+//# sourceMappingURL=CryptoContextMismatchError.js.map

package/lib/esm/logic/cryptoEnvelope/CryptoContextMismatchError.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CryptoContextMismatchError.js","sourceRoot":"","sources":["../../../../src/logic/cryptoEnvelope/CryptoContextMismatchError.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,gFAAgF;AAChF,yEAAyE;AACzE,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAC1C,IAAI,GAAG,0BAA0B,CAAC;IAE3C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IAC3C,CAAC;CACF","sourcesContent":["// Thrown when the context supplied at decrypt differs from the context the\n// blob was encrypted under. The `code` is what actionResultErrorFromCaughtError\n// keys on, so processors can map this to a distinguishable action error.\nexport class CryptoContextMismatchError extends Error {\n  readonly code = 'QpqCryptoContextMismatch';\n\n  constructor(message: string) {\n    super(message);\n    this.name = 'CryptoContextMismatchError';\n  }\n}\n"]}

package/lib/esm/logic/cryptoEnvelope/CryptoMalformedCiphertextError.d.ts

@@ -0,0 +1,4 @@
+export declare class CryptoMalformedCiphertextError extends Error {
+    readonly code = "QpqCryptoMalformedCiphertext";
+    constructor(message: string);
+}

package/lib/esm/logic/cryptoEnvelope/CryptoMalformedCiphertextError.js

@@ -0,0 +1,11 @@
+// Thrown when a ciphertext is not a valid qpq crypto blob, or fails
+// authenticated decryption with the correct context (i.e. corruption or
+// truncation). The `code` is what actionResultErrorFromCaughtError keys on.
+export class CryptoMalformedCiphertextError extends Error {
+    code = 'QpqCryptoMalformedCiphertext';
+    constructor(message) {
+        super(message);
+        this.name = 'CryptoMalformedCiphertextError';
+    }
+}
+//# sourceMappingURL=CryptoMalformedCiphertextError.js.map

package/lib/esm/logic/cryptoEnvelope/CryptoMalformedCiphertextError.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CryptoMalformedCiphertextError.js","sourceRoot":"","sources":["../../../../src/logic/cryptoEnvelope/CryptoMalformedCiphertextError.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,wEAAwE;AACxE,4EAA4E;AAC5E,MAAM,OAAO,8BAA+B,SAAQ,KAAK;IAC9C,IAAI,GAAG,8BAA8B,CAAC;IAE/C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gCAAgC,CAAC;IAC/C,CAAC;CACF","sourcesContent":["// Thrown when a ciphertext is not a valid qpq crypto blob, or fails\n// authenticated decryption with the correct context (i.e. corruption or\n// truncation). The `code` is what actionResultErrorFromCaughtError keys on.\nexport class CryptoMalformedCiphertextError extends Error {\n  readonly code = 'QpqCryptoMalformedCiphertext';\n\n  constructor(message: string) {\n    super(message);\n    this.name = 'CryptoMalformedCiphertextError';\n  }\n}\n"]}

package/lib/esm/logic/cryptoEnvelope/DataKeyProvider.d.ts

@@ -0,0 +1,9 @@
+import { CryptoContext } from 'quidproquo-core';
+export type GeneratedDataKey = {
+    plaintextKey: Buffer;
+    wrappedKey: Buffer;
+};
+export type DataKeyProvider = {
+    generateDataKey: (context: CryptoContext) => Promise<GeneratedDataKey>;
+    unwrapDataKey: (wrappedKey: Buffer, context: CryptoContext) => Promise<Buffer>;
+};

package/lib/esm/logic/cryptoEnvelope/DataKeyProvider.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=DataKeyProvider.js.map

package/lib/esm/logic/cryptoEnvelope/DataKeyProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DataKeyProvider.js","sourceRoot":"","sources":["../../../../src/logic/cryptoEnvelope/DataKeyProvider.ts"],"names":[],"mappings":"","sourcesContent":["import { CryptoContext } from 'quidproquo-core';\n\nexport type GeneratedDataKey = {\n  plaintextKey: Buffer;\n  wrappedKey: Buffer;\n};\n\n// The only part of envelope encryption that differs per runtime: how a\n// one-off data key is created and wrapped (KMS in prod, a local master key in\n// the dev server). The context is passed through so the wrapping layer can\n// bind it too (KMS EncryptionContext, which also lands in CloudTrail).\nexport type DataKeyProvider = {\n  generateDataKey: (context: CryptoContext) => Promise<GeneratedDataKey>;\n  unwrapDataKey: (wrappedKey: Buffer, context: CryptoContext) => Promise<Buffer>;\n};\n"]}

package/lib/esm/logic/cryptoEnvelope/canonicalizeCryptoContext.d.ts

@@ -0,0 +1,2 @@
+import { CryptoContext } from 'quidproquo-core';
+export declare const canonicalizeCryptoContext: (context?: CryptoContext) => string;

package/lib/esm/logic/cryptoEnvelope/canonicalizeCryptoContext.js

@@ -0,0 +1,14 @@
+// Netstring-style encoding (byteLength:value) so { ab: 'c' } and { a: 'bc' }
+// cannot canonicalize to the same bytes.
+const encodePart = (part) => `${Buffer.byteLength(part, 'utf8')}:${part}`;
+// Deterministic byte encoding of a crypto context, used as the AAD for
+// envelope encryption. Keys are sorted by code unit (NOT localeCompare, which
+// varies by environment). undefined and {} are equivalent: both canonicalize
+// to the empty string. Every runtime (prod KMS, dev stub) MUST canonicalize
+// through this one function, or dev and prod disagree about what a valid
+// context is and it only surfaces after deploy.
+export const canonicalizeCryptoContext = (context) => {
+    const sortedEntries = Object.entries(context || {}).sort(([keyA], [keyB]) => (keyA < keyB ? -1 : keyA > keyB ? 1 : 0));
+    return sortedEntries.map(([key, value]) => encodePart(key) + encodePart(value)).join('');
+};
+//# sourceMappingURL=canonicalizeCryptoContext.js.map

package/lib/esm/logic/cryptoEnvelope/canonicalizeCryptoContext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonicalizeCryptoContext.js","sourceRoot":"","sources":["../../../../src/logic/cryptoEnvelope/canonicalizeCryptoContext.ts"],"names":[],"mappings":"AAEA,6EAA6E;AAC7E,yCAAyC;AACzC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;AAE1F,uEAAuE;AACvE,8EAA8E;AAC9E,6EAA6E;AAC7E,4EAA4E;AAC5E,yEAAyE;AACzE,gDAAgD;AAChD,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,OAAuB,EAAU,EAAE;IAC3E,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEvH,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC3F,CAAC,CAAC","sourcesContent":["import { CryptoContext } from 'quidproquo-core';\n\n// Netstring-style encoding (byteLength:value) so { ab: 'c' } and { a: 'bc' }\n// cannot canonicalize to the same bytes.\nconst encodePart = (part: string): string => `${Buffer.byteLength(part, 'utf8')}:${part}`;\n\n// Deterministic byte encoding of a crypto context, used as the AAD for\n// envelope encryption. Keys are sorted by code unit (NOT localeCompare, which\n// varies by environment). undefined and {} are equivalent: both canonicalize\n// to the empty string. Every runtime (prod KMS, dev stub) MUST canonicalize\n// through this one function, or dev and prod disagree about what a valid\n// context is and it only surfaces after deploy.\nexport const canonicalizeCryptoContext = (context?: CryptoContext): string => {\n  const sortedEntries = Object.entries(context || {}).sort(([keyA], [keyB]) => (keyA < keyB ? -1 : keyA > keyB ? 1 : 0));\n\n  return sortedEntries.map(([key, value]) => encodePart(key) + encodePart(value)).join('');\n};\n"]}

package/lib/esm/logic/cryptoEnvelope/createLocalMasterKeyDataKeyProvider.d.ts

@@ -0,0 +1,2 @@
+import { DataKeyProvider } from './DataKeyProvider';
+export declare const createLocalMasterKeyDataKeyProvider: (masterKey: Buffer) => DataKeyProvider;

package/lib/esm/logic/cryptoEnvelope/createLocalMasterKeyDataKeyProvider.js

@@ -0,0 +1,35 @@
+import { createCipheriv, createDecipheriv, randomBytes } from 'crypto';
+import { canonicalizeCryptoContext } from './canonicalizeCryptoContext';
+import { CryptoMalformedCiphertextError } from './CryptoMalformedCiphertextError';
+// A DataKeyProvider that wraps data keys with AES-256-GCM under a local
+// 32-byte master key, with the canonical context as AAD (mirroring KMS
+// EncryptionContext binding). Used by the dev server so envelope encryption
+// runs the identical code path offline. Wrapped key layout: iv(12) tag(16) key.
+export const createLocalMasterKeyDataKeyProvider = (masterKey) => ({
+    generateDataKey: async (context) => {
+        const plaintextKey = randomBytes(32);
+        const iv = randomBytes(12);
+        const cipher = createCipheriv('aes-256-gcm', masterKey, iv);
+        cipher.setAAD(Buffer.from(canonicalizeCryptoContext(context), 'utf8'));
+        const wrappedKeyBytes = Buffer.concat([cipher.update(plaintextKey), cipher.final()]);
+        return {
+            plaintextKey,
+            wrappedKey: Buffer.concat([iv, cipher.getAuthTag(), wrappedKeyBytes]),
+        };
+    },
+    unwrapDataKey: async (wrappedKey, context) => {
+        if (wrappedKey.length < 28) {
+            throw new CryptoMalformedCiphertextError('Wrapped data key is truncated');
+        }
+        const decipher = createDecipheriv('aes-256-gcm', masterKey, wrappedKey.subarray(0, 12));
+        decipher.setAAD(Buffer.from(canonicalizeCryptoContext(context), 'utf8'));
+        decipher.setAuthTag(wrappedKey.subarray(12, 28));
+        try {
+            return Buffer.concat([decipher.update(wrappedKey.subarray(28)), decipher.final()]);
+        }
+        catch {
+            throw new CryptoMalformedCiphertextError('Wrapped data key failed authenticated decryption');
+        }
+    },
+});
+//# sourceMappingURL=createLocalMasterKeyDataKeyProvider.js.map

package/lib/esm/logic/cryptoEnvelope/createLocalMasterKeyDataKeyProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createLocalMasterKeyDataKeyProvider.js","sourceRoot":"","sources":["../../../../src/logic/cryptoEnvelope/createLocalMasterKeyDataKeyProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAEvE,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EAAE,8BAA8B,EAAE,MAAM,kCAAkC,CAAC;AAGlF,wEAAwE;AACxE,uEAAuE;AACvE,4EAA4E;AAC5E,gFAAgF;AAChF,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,SAAiB,EAAmB,EAAE,CAAC,CAAC;IAC1F,eAAe,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACjC,MAAM,YAAY,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QAErC,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;QAC3B,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAC5D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QAEvE,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAErF,OAAO;YACL,YAAY;YACZ,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,eAAe,CAAC,CAAC;SACtE,CAAC;IACJ,CAAC;IAED,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE;QAC3C,IAAI,UAAU,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;YAC3B,MAAM,IAAI,8BAA8B,CAAC,+BAA+B,CAAC,CAAC;QAC5E,CAAC;QAED,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,SAAS,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACxF,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACzE,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAEjD,IAAI,CAAC;YACH,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QACrF,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,8BAA8B,CAAC,kDAAkD,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;CACF,CAAC,CAAC","sourcesContent":["import { createCipheriv, createDecipheriv, randomBytes } from 'crypto';\n\nimport { canonicalizeCryptoContext } from './canonicalizeCryptoContext';\nimport { CryptoMalformedCiphertextError } from './CryptoMalformedCiphertextError';\nimport { DataKeyProvider } from './DataKeyProvider';\n\n// A DataKeyProvider that wraps data keys with AES-256-GCM under a local\n// 32-byte master key, with the canonical context as AAD (mirroring KMS\n// EncryptionContext binding). Used by the dev server so envelope encryption\n// runs the identical code path offline. Wrapped key layout: iv(12) tag(16) key.\nexport const createLocalMasterKeyDataKeyProvider = (masterKey: Buffer): DataKeyProvider => ({\n  generateDataKey: async (context) => {\n    const plaintextKey = randomBytes(32);\n\n    const iv = randomBytes(12);\n    const cipher = createCipheriv('aes-256-gcm', masterKey, iv);\n    cipher.setAAD(Buffer.from(canonicalizeCryptoContext(context), 'utf8'));\n\n    const wrappedKeyBytes = Buffer.concat([cipher.update(plaintextKey), cipher.final()]);\n\n    return {\n      plaintextKey,\n      wrappedKey: Buffer.concat([iv, cipher.getAuthTag(), wrappedKeyBytes]),\n    };\n  },\n\n  unwrapDataKey: async (wrappedKey, context) => {\n    if (wrappedKey.length < 28) {\n      throw new CryptoMalformedCiphertextError('Wrapped data key is truncated');\n    }\n\n    const decipher = createDecipheriv('aes-256-gcm', masterKey, wrappedKey.subarray(0, 12));\n    decipher.setAAD(Buffer.from(canonicalizeCryptoContext(context), 'utf8'));\n    decipher.setAuthTag(wrappedKey.subarray(12, 28));\n\n    try {\n      return Buffer.concat([decipher.update(wrappedKey.subarray(28)), decipher.final()]);\n    } catch {\n      throw new CryptoMalformedCiphertextError('Wrapped data key failed authenticated decryption');\n    }\n  },\n});\n"]}

package/lib/esm/logic/cryptoEnvelope/cryptoBlobPrefix.d.ts

@@ -0,0 +1 @@
+export declare const CRYPTO_BLOB_PREFIX_V1 = "qpqcrypto:v1:";

package/lib/esm/logic/cryptoEnvelope/cryptoBlobPrefix.js

@@ -0,0 +1,5 @@
+// Version prefix on every ciphertext this capability produces. Bump the
+// version (qpqcrypto:v2:...) to change the blob format; decrypt dispatches on
+// the prefix, so old blobs keep working without a data migration.
+export const CRYPTO_BLOB_PREFIX_V1 = 'qpqcrypto:v1:';
+//# sourceMappingURL=cryptoBlobPrefix.js.map

package/lib/esm/logic/cryptoEnvelope/cryptoBlobPrefix.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoBlobPrefix.js","sourceRoot":"","sources":["../../../../src/logic/cryptoEnvelope/cryptoBlobPrefix.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,8EAA8E;AAC9E,kEAAkE;AAClE,MAAM,CAAC,MAAM,qBAAqB,GAAG,eAAe,CAAC","sourcesContent":["// Version prefix on every ciphertext this capability produces. Bump the\n// version (qpqcrypto:v2:...) to change the blob format; decrypt dispatches on\n// the prefix, so old blobs keep working without a data migration.\nexport const CRYPTO_BLOB_PREFIX_V1 = 'qpqcrypto:v1:';\n"]}

package/lib/esm/logic/cryptoEnvelope/cryptoContextHash.d.ts

@@ -0,0 +1 @@
+export declare const cryptoContextHash: (canonicalContext: string) => string;

package/lib/esm/logic/cryptoEnvelope/cryptoContextHash.js

@@ -0,0 +1,9 @@
+import { createHash } from 'crypto';
+// Hash of the canonical context stored inside the crypto blob. Lets decrypt
+// distinguish "wrong context supplied" (hash differs) from "corrupt
+// ciphertext" (hash matches, GCM tag fails). The context is not secret, so
+// storing its hash leaks nothing new.
+export const cryptoContextHash = (canonicalContext) => {
+    return createHash('sha256').update(canonicalContext, 'utf8').digest('base64');
+};
+//# sourceMappingURL=cryptoContextHash.js.map

package/lib/esm/logic/cryptoEnvelope/cryptoContextHash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cryptoContextHash.js","sourceRoot":"","sources":["../../../../src/logic/cryptoEnvelope/cryptoContextHash.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC,4EAA4E;AAC5E,oEAAoE;AACpE,2EAA2E;AAC3E,sCAAsC;AACtC,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,gBAAwB,EAAU,EAAE;IACpE,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAChF,CAAC,CAAC","sourcesContent":["import { createHash } from 'crypto';\n\n// Hash of the canonical context stored inside the crypto blob. Lets decrypt\n// distinguish \"wrong context supplied\" (hash differs) from \"corrupt\n// ciphertext\" (hash matches, GCM tag fails). The context is not secret, so\n// storing its hash leaks nothing new.\nexport const cryptoContextHash = (canonicalContext: string): string => {\n  return createHash('sha256').update(canonicalContext, 'utf8').digest('base64');\n};\n"]}

package/lib/esm/logic/cryptoEnvelope/decodeCryptoBlob.d.ts

@@ -0,0 +1,2 @@
+import { CryptoBlob } from './CryptoBlob';
+export declare const decodeCryptoBlob: (ciphertext: string) => CryptoBlob;

package/lib/esm/logic/cryptoEnvelope/decodeCryptoBlob.js

@@ -0,0 +1,28 @@
+import { CRYPTO_BLOB_PREFIX_V1 } from './cryptoBlobPrefix';
+import { CryptoMalformedCiphertextError } from './CryptoMalformedCiphertextError';
+// Parsing failures all collapse to CryptoMalformedCiphertextError: anything
+// that is not a well-formed v1 blob is corruption as far as the caller cares.
+export const decodeCryptoBlob = (ciphertext) => {
+    if (!ciphertext.startsWith(CRYPTO_BLOB_PREFIX_V1)) {
+        throw new CryptoMalformedCiphertextError('Ciphertext is not a qpq crypto blob (missing/unknown version prefix)');
+    }
+    let fields;
+    try {
+        fields = JSON.parse(Buffer.from(ciphertext.slice(CRYPTO_BLOB_PREFIX_V1.length), 'base64').toString('utf8'));
+    }
+    catch {
+        throw new CryptoMalformedCiphertextError('Ciphertext blob payload is not decodable');
+    }
+    const { k, iv, tg, ct, ch } = fields;
+    if (typeof k !== 'string' || typeof iv !== 'string' || typeof tg !== 'string' || typeof ct !== 'string' || typeof ch !== 'string') {
+        throw new CryptoMalformedCiphertextError('Ciphertext blob is missing required fields');
+    }
+    return {
+        wrappedKey: Buffer.from(k, 'base64'),
+        iv: Buffer.from(iv, 'base64'),
+        authTag: Buffer.from(tg, 'base64'),
+        ciphertext: Buffer.from(ct, 'base64'),
+        contextHash: ch,
+    };
+};
+//# sourceMappingURL=decodeCryptoBlob.js.map

package/lib/esm/logic/cryptoEnvelope/decodeCryptoBlob.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decodeCryptoBlob.js","sourceRoot":"","sources":["../../../../src/logic/cryptoEnvelope/decodeCryptoBlob.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,8BAA8B,EAAE,MAAM,kCAAkC,CAAC;AAElF,4EAA4E;AAC5E,8EAA8E;AAC9E,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,UAAkB,EAAc,EAAE;IACjE,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,qBAAqB,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,8BAA8B,CAAC,sEAAsE,CAAC,CAAC;IACnH,CAAC;IAED,IAAI,MAA+B,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9G,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,8BAA8B,CAAC,0CAA0C,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,MAAM,CAAC;IACrC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;QAClI,MAAM,IAAI,8BAA8B,CAAC,4CAA4C,CAAC,CAAC;IACzF,CAAC;IAED,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC;QACpC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC;QAC7B,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC;QAClC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC;QACrC,WAAW,EAAE,EAAE;KAChB,CAAC;AACJ,CAAC,CAAC","sourcesContent":["import { CryptoBlob } from './CryptoBlob';\nimport { CRYPTO_BLOB_PREFIX_V1 } from './cryptoBlobPrefix';\nimport { CryptoMalformedCiphertextError } from './CryptoMalformedCiphertextError';\n\n// Parsing failures all collapse to CryptoMalformedCiphertextError: anything\n// that is not a well-formed v1 blob is corruption as far as the caller cares.\nexport const decodeCryptoBlob = (ciphertext: string): CryptoBlob => {\n  if (!ciphertext.startsWith(CRYPTO_BLOB_PREFIX_V1)) {\n    throw new CryptoMalformedCiphertextError('Ciphertext is not a qpq crypto blob (missing/unknown version prefix)');\n  }\n\n  let fields: Record<string, unknown>;\n  try {\n    fields = JSON.parse(Buffer.from(ciphertext.slice(CRYPTO_BLOB_PREFIX_V1.length), 'base64').toString('utf8'));\n  } catch {\n    throw new CryptoMalformedCiphertextError('Ciphertext blob payload is not decodable');\n  }\n\n  const { k, iv, tg, ct, ch } = fields;\n  if (typeof k !== 'string' || typeof iv !== 'string' || typeof tg !== 'string' || typeof ct !== 'string' || typeof ch !== 'string') {\n    throw new CryptoMalformedCiphertextError('Ciphertext blob is missing required fields');\n  }\n\n  return {\n    wrappedKey: Buffer.from(k, 'base64'),\n    iv: Buffer.from(iv, 'base64'),\n    authTag: Buffer.from(tg, 'base64'),\n    ciphertext: Buffer.from(ct, 'base64'),\n    contextHash: ch,\n  };\n};\n"]}

package/lib/esm/logic/cryptoEnvelope/encodeCryptoBlob.d.ts

@@ -0,0 +1,2 @@
+import { CryptoBlob } from './CryptoBlob';
+export declare const encodeCryptoBlob: (blob: CryptoBlob) => string;

package/lib/esm/logic/cryptoEnvelope/encodeCryptoBlob.js

@@ -0,0 +1,12 @@
+import { CRYPTO_BLOB_PREFIX_V1 } from './cryptoBlobPrefix';
+export const encodeCryptoBlob = (blob) => {
+    const json = JSON.stringify({
+        k: blob.wrappedKey.toString('base64'),
+        iv: blob.iv.toString('base64'),
+        tg: blob.authTag.toString('base64'),
+        ct: blob.ciphertext.toString('base64'),
+        ch: blob.contextHash,
+    });
+    return `${CRYPTO_BLOB_PREFIX_V1}${Buffer.from(json, 'utf8').toString('base64')}`;
+};
+//# sourceMappingURL=encodeCryptoBlob.js.map

package/lib/esm/logic/cryptoEnvelope/encodeCryptoBlob.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encodeCryptoBlob.js","sourceRoot":"","sources":["../../../../src/logic/cryptoEnvelope/encodeCryptoBlob.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAAgB,EAAU,EAAE;IAC3D,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1B,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACrC,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC9B,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACnC,EAAE,EAAE,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACtC,EAAE,EAAE,IAAI,CAAC,WAAW;KACrB,CAAC,CAAC;IAEH,OAAO,GAAG,qBAAqB,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;AACnF,CAAC,CAAC","sourcesContent":["import { CryptoBlob } from './CryptoBlob';\nimport { CRYPTO_BLOB_PREFIX_V1 } from './cryptoBlobPrefix';\n\nexport const encodeCryptoBlob = (blob: CryptoBlob): string => {\n  const json = JSON.stringify({\n    k: blob.wrappedKey.toString('base64'),\n    iv: blob.iv.toString('base64'),\n    tg: blob.authTag.toString('base64'),\n    ct: blob.ciphertext.toString('base64'),\n    ch: blob.contextHash,\n  });\n\n  return `${CRYPTO_BLOB_PREFIX_V1}${Buffer.from(json, 'utf8').toString('base64')}`;\n};\n"]}

package/lib/esm/logic/cryptoEnvelope/envelopeDecrypt.d.ts

@@ -0,0 +1,3 @@
+import { CryptoContext } from 'quidproquo-core';
+import { DataKeyProvider } from './DataKeyProvider';
+export declare const envelopeDecrypt: (ciphertext: string, context: CryptoContext | undefined, dataKeyProvider: DataKeyProvider) => Promise<string>;

package/lib/esm/logic/cryptoEnvelope/envelopeDecrypt.js

@@ -0,0 +1,29 @@
+import { createDecipheriv } from 'crypto';
+import { canonicalizeCryptoContext } from './canonicalizeCryptoContext';
+import { cryptoContextHash } from './cryptoContextHash';
+import { CryptoContextMismatchError } from './CryptoContextMismatchError';
+import { CryptoMalformedCiphertextError } from './CryptoMalformedCiphertextError';
+import { decodeCryptoBlob } from './decodeCryptoBlob';
+export const envelopeDecrypt = async (ciphertext, context, dataKeyProvider) => {
+    const blob = decodeCryptoBlob(ciphertext);
+    // Context is checked against the stored hash BEFORE any key unwrap or GCM
+    // work: a mismatch fails as ContextMismatch (probable scoping bug) rather
+    // than a bare tag failure that reads as corruption.
+    const canonicalContext = canonicalizeCryptoContext(context);
+    if (blob.contextHash !== cryptoContextHash(canonicalContext)) {
+        throw new CryptoContextMismatchError('Supplied crypto context does not match the context this value was encrypted under');
+    }
+    const plaintextKey = await dataKeyProvider.unwrapDataKey(blob.wrappedKey, context || {});
+    const decipher = createDecipheriv('aes-256-gcm', plaintextKey, blob.iv);
+    decipher.setAAD(Buffer.from(canonicalContext, 'utf8'));
+    decipher.setAuthTag(blob.authTag);
+    // Context hash already matched, so a GCM auth failure here means the
+    // ciphertext bytes themselves are corrupt or truncated.
+    try {
+        return Buffer.concat([decipher.update(blob.ciphertext), decipher.final()]).toString('utf8');
+    }
+    catch {
+        throw new CryptoMalformedCiphertextError('Ciphertext failed authenticated decryption; the stored value is corrupt or truncated');
+    }
+};
+//# sourceMappingURL=envelopeDecrypt.js.map

package/lib/esm/logic/cryptoEnvelope/envelopeDecrypt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelopeDecrypt.js","sourceRoot":"","sources":["../../../../src/logic/cryptoEnvelope/envelopeDecrypt.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,QAAQ,CAAC;AAE1C,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,8BAA8B,EAAE,MAAM,kCAAkC,CAAC;AAElF,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtD,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAAE,UAAkB,EAAE,OAAkC,EAAE,eAAgC,EAAmB,EAAE;IACjJ,MAAM,IAAI,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAE1C,0EAA0E;IAC1E,0EAA0E;IAC1E,oDAAoD;IACpD,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,IAAI,CAAC,WAAW,KAAK,iBAAiB,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,0BAA0B,CAAC,mFAAmF,CAAC,CAAC;IAC5H,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,eAAe,CAAC,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC;IAEzF,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACxE,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC;IACvD,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAElC,qEAAqE;IACrE,wDAAwD;IACxD,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9F,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,8BAA8B,CAAC,sFAAsF,CAAC,CAAC;IACnI,CAAC;AACH,CAAC,CAAC","sourcesContent":["import { CryptoContext } from 'quidproquo-core';\n\nimport { createDecipheriv } from 'crypto';\n\nimport { canonicalizeCryptoContext } from './canonicalizeCryptoContext';\nimport { cryptoContextHash } from './cryptoContextHash';\nimport { CryptoContextMismatchError } from './CryptoContextMismatchError';\nimport { CryptoMalformedCiphertextError } from './CryptoMalformedCiphertextError';\nimport { DataKeyProvider } from './DataKeyProvider';\nimport { decodeCryptoBlob } from './decodeCryptoBlob';\n\nexport const envelopeDecrypt = async (ciphertext: string, context: CryptoContext | undefined, dataKeyProvider: DataKeyProvider): Promise<string> => {\n  const blob = decodeCryptoBlob(ciphertext);\n\n  // Context is checked against the stored hash BEFORE any key unwrap or GCM\n  // work: a mismatch fails as ContextMismatch (probable scoping bug) rather\n  // than a bare tag failure that reads as corruption.\n  const canonicalContext = canonicalizeCryptoContext(context);\n  if (blob.contextHash !== cryptoContextHash(canonicalContext)) {\n    throw new CryptoContextMismatchError('Supplied crypto context does not match the context this value was encrypted under');\n  }\n\n  const plaintextKey = await dataKeyProvider.unwrapDataKey(blob.wrappedKey, context || {});\n\n  const decipher = createDecipheriv('aes-256-gcm', plaintextKey, blob.iv);\n  decipher.setAAD(Buffer.from(canonicalContext, 'utf8'));\n  decipher.setAuthTag(blob.authTag);\n\n  // Context hash already matched, so a GCM auth failure here means the\n  // ciphertext bytes themselves are corrupt or truncated.\n  try {\n    return Buffer.concat([decipher.update(blob.ciphertext), decipher.final()]).toString('utf8');\n  } catch {\n    throw new CryptoMalformedCiphertextError('Ciphertext failed authenticated decryption; the stored value is corrupt or truncated');\n  }\n};\n"]}

package/lib/esm/logic/cryptoEnvelope/envelopeEncrypt.d.ts

@@ -0,0 +1,3 @@
+import { CryptoContext } from 'quidproquo-core';
+import { DataKeyProvider } from './DataKeyProvider';
+export declare const envelopeEncrypt: (plaintext: string, context: CryptoContext | undefined, dataKeyProvider: DataKeyProvider) => Promise<string>;

package/lib/esm/logic/cryptoEnvelope/envelopeEncrypt.js

@@ -0,0 +1,22 @@
+import { createCipheriv, randomBytes } from 'crypto';
+import { canonicalizeCryptoContext } from './canonicalizeCryptoContext';
+import { cryptoContextHash } from './cryptoContextHash';
+import { encodeCryptoBlob } from './encodeCryptoBlob';
+// Envelope encryption: a fresh data key from the provider, AES-256-GCM locally
+// with the canonical context as AAD, wrapped key stored inside the blob.
+export const envelopeEncrypt = async (plaintext, context, dataKeyProvider) => {
+    const canonicalContext = canonicalizeCryptoContext(context);
+    const { plaintextKey, wrappedKey } = await dataKeyProvider.generateDataKey(context || {});
+    const iv = randomBytes(12);
+    const cipher = createCipheriv('aes-256-gcm', plaintextKey, iv);
+    cipher.setAAD(Buffer.from(canonicalContext, 'utf8'));
+    const ciphertext = Buffer.concat([cipher.update(plaintext, 'utf8'), cipher.final()]);
+    return encodeCryptoBlob({
+        wrappedKey,
+        iv,
+        authTag: cipher.getAuthTag(),
+        ciphertext,
+        contextHash: cryptoContextHash(canonicalContext),
+    });
+};
+//# sourceMappingURL=envelopeEncrypt.js.map

package/lib/esm/logic/cryptoEnvelope/envelopeEncrypt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelopeEncrypt.js","sourceRoot":"","sources":["../../../../src/logic/cryptoEnvelope/envelopeEncrypt.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAErD,OAAO,EAAE,yBAAyB,EAAE,MAAM,6BAA6B,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAExD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAEtD,+EAA+E;AAC/E,yEAAyE;AACzE,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAAE,SAAiB,EAAE,OAAkC,EAAE,eAAgC,EAAmB,EAAE;IAChJ,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,OAAO,CAAC,CAAC;IAE5D,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,MAAM,eAAe,CAAC,eAAe,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAE1F,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;IAC/D,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC,CAAC;IAErD,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAErF,OAAO,gBAAgB,CAAC;QACtB,UAAU;QACV,EAAE;QACF,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE;QAC5B,UAAU;QACV,WAAW,EAAE,iBAAiB,CAAC,gBAAgB,CAAC;KACjD,CAAC,CAAC;AACL,CAAC,CAAC","sourcesContent":["import { CryptoContext } from 'quidproquo-core';\n\nimport { createCipheriv, randomBytes } from 'crypto';\n\nimport { canonicalizeCryptoContext } from './canonicalizeCryptoContext';\nimport { cryptoContextHash } from './cryptoContextHash';\nimport { DataKeyProvider } from './DataKeyProvider';\nimport { encodeCryptoBlob } from './encodeCryptoBlob';\n\n// Envelope encryption: a fresh data key from the provider, AES-256-GCM locally\n// with the canonical context as AAD, wrapped key stored inside the blob.\nexport const envelopeEncrypt = async (plaintext: string, context: CryptoContext | undefined, dataKeyProvider: DataKeyProvider): Promise<string> => {\n  const canonicalContext = canonicalizeCryptoContext(context);\n\n  const { plaintextKey, wrappedKey } = await dataKeyProvider.generateDataKey(context || {});\n\n  const iv = randomBytes(12);\n  const cipher = createCipheriv('aes-256-gcm', plaintextKey, iv);\n  cipher.setAAD(Buffer.from(canonicalContext, 'utf8'));\n\n  const ciphertext = Buffer.concat([cipher.update(plaintext, 'utf8'), cipher.final()]);\n\n  return encodeCryptoBlob({\n    wrappedKey,\n    iv,\n    authTag: cipher.getAuthTag(),\n    ciphertext,\n    contextHash: cryptoContextHash(canonicalContext),\n  });\n};\n"]}

package/lib/esm/logic/cryptoEnvelope/index.d.ts

@@ -0,0 +1,12 @@
+export * from './canonicalizeCryptoContext';
+export * from './createLocalMasterKeyDataKeyProvider';
+export * from './CryptoBlob';
+export * from './cryptoBlobPrefix';
+export * from './cryptoContextHash';
+export * from './CryptoContextMismatchError';
+export * from './CryptoMalformedCiphertextError';
+export * from './DataKeyProvider';
+export * from './decodeCryptoBlob';
+export * from './encodeCryptoBlob';
+export * from './envelopeDecrypt';
+export * from './envelopeEncrypt';

package/lib/esm/logic/cryptoEnvelope/index.js

@@ -0,0 +1,13 @@
+export * from './canonicalizeCryptoContext';
+export * from './createLocalMasterKeyDataKeyProvider';
+export * from './CryptoBlob';
+export * from './cryptoBlobPrefix';
+export * from './cryptoContextHash';
+export * from './CryptoContextMismatchError';
+export * from './CryptoMalformedCiphertextError';
+export * from './DataKeyProvider';
+export * from './decodeCryptoBlob';
+export * from './encodeCryptoBlob';
+export * from './envelopeDecrypt';
+export * from './envelopeEncrypt';
+//# sourceMappingURL=index.js.map

package/lib/esm/logic/cryptoEnvelope/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/logic/cryptoEnvelope/index.ts"],"names":[],"mappings":"AAAA,cAAc,6BAA6B,CAAC;AAC5C,cAAc,uCAAuC,CAAC;AACtD,cAAc,cAAc,CAAC;AAC7B,cAAc,oBAAoB,CAAC;AACnC,cAAc,qBAAqB,CAAC;AACpC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,kCAAkC,CAAC;AACjD,cAAc,mBAAmB,CAAC;AAClC,cAAc,oBAAoB,CAAC;AACnC,cAAc,oBAAoB,CAAC;AACnC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC","sourcesContent":["export * from './canonicalizeCryptoContext';\nexport * from './createLocalMasterKeyDataKeyProvider';\nexport * from './CryptoBlob';\nexport * from './cryptoBlobPrefix';\nexport * from './cryptoContextHash';\nexport * from './CryptoContextMismatchError';\nexport * from './CryptoMalformedCiphertextError';\nexport * from './DataKeyProvider';\nexport * from './decodeCryptoBlob';\nexport * from './encodeCryptoBlob';\nexport * from './envelopeDecrypt';\nexport * from './envelopeEncrypt';\n"]}

package/lib/esm/logic/index.d.ts

@@ -0,0 +1 @@
+export * from './cryptoEnvelope';

package/lib/esm/logic/index.js

@@ -0,0 +1,2 @@
+export * from './cryptoEnvelope';
+//# sourceMappingURL=index.js.map

package/lib/esm/logic/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/logic/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC","sourcesContent":["export * from './cryptoEnvelope';\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "quidproquo-actionprocessor-node",
-  "version": "0.1.11",
+  "version": "0.1.12",
   "description": "",
   "main": "./lib/commonjs/index.js",
   "module": "./lib/esm/index.js",
@@ -34,15 +34,15 @@
   "dependencies": {
     "@anthropic-ai/sdk": "^0.19.1",
     "@jridgewell/trace-mapping": "^0.3.25",
-    "quidproquo-actionprocessor-js": "0.1.11",
-    "quidproquo-core": "0.1.11",
-    "quidproquo-webserver": "0.1.11",
+    "quidproquo-actionprocessor-js": "0.1.12",
+    "quidproquo-core": "0.1.12",
+    "quidproquo-webserver": "0.1.12",
     "uuidv7": "^1.0.1"
   },
   "devDependencies": {
     "@jridgewell/gen-mapping": "^0.3.13",
     "@types/node": "^22.13.13",
-    "quidproquo-tsconfig": "0.1.11",
+    "quidproquo-tsconfig": "0.1.12",
     "typescript": "^5.8.2"
   }
 }