raz-encrypt 0.1.0

package/dist/store.d.ts

@@ -0,0 +1,28 @@
+import type { Identity } from "./identity.js";
+export interface LogEntry {
+    action: "sign" | "verify" | "encrypt" | "decrypt";
+    documentHash?: string;
+    counterpartAlias?: string;
+    result?: string;
+    at: string;
+}
+/**
+ * Appends one entry to the local, append-only audit log (public metadata
+ * only — no secrets). Each entry is chained to the previous one's hash
+ * (see verifyLogIntegrity) so tampering or deleting past entries is
+ * detectable, not just theoretically append-only.
+ */
+export declare function appendLogEntry(identity: Identity, entry: Omit<LogEntry, "at">): Promise<void>;
+export declare function readLog(identity: Identity): Promise<LogEntry[]>;
+export type LogIntegrityResult = {
+    intact: true;
+} | {
+    intact: false;
+    brokenAtIndex: number;
+};
+/**
+ * Walks the hash chain and reports whether it's intact. If an entry was
+ * edited or deleted, `brokenAtIndex` is the (0-based) index of the first
+ * entry whose chain link no longer matches.
+ */
+export declare function verifyLogIntegrity(identity: Identity): Promise<LogIntegrityResult>;

package/dist/store.js

@@ -0,0 +1,62 @@
+import { sha384 } from "@noble/hashes/sha2.js";
+import { bytesToHex, utf8ToBytes } from "@noble/hashes/utils.js";
+import { appendFile, mkdir, readFile } from "node:fs/promises";
+import { join } from "node:path";
+import { canonicalize } from "./canonicalJson.js";
+const GENESIS_HASH = "GENESIS";
+function logFilePath(storageDir) {
+    return join(storageDir, "log.jsonl");
+}
+function computeHash(entry) {
+    return bytesToHex(sha384(utf8ToBytes(canonicalize(entry))));
+}
+async function readStoredEntries(storageDir) {
+    try {
+        const raw = await readFile(logFilePath(storageDir), "utf8");
+        return raw
+            .split("\n")
+            .filter((line) => line.trim().length > 0)
+            .map((line) => JSON.parse(line));
+    }
+    catch (err) {
+        if (err.code === "ENOENT")
+            return [];
+        throw err;
+    }
+}
+/**
+ * Appends one entry to the local, append-only audit log (public metadata
+ * only — no secrets). Each entry is chained to the previous one's hash
+ * (see verifyLogIntegrity) so tampering or deleting past entries is
+ * detectable, not just theoretically append-only.
+ */
+export async function appendLogEntry(identity, entry) {
+    const full = { ...entry, at: new Date().toISOString() };
+    const existing = await readStoredEntries(identity.storageDir);
+    const prevHash = existing.length > 0 ? existing[existing.length - 1].hash : GENESIS_HASH;
+    const withPrev = { ...full, prevHash };
+    const stored = { ...withPrev, hash: computeHash(withPrev) };
+    await mkdir(identity.storageDir, { recursive: true });
+    await appendFile(logFilePath(identity.storageDir), JSON.stringify(stored) + "\n", { mode: 0o600 });
+}
+export async function readLog(identity) {
+    return (await readStoredEntries(identity.storageDir)).map(({ prevHash: _prevHash, hash: _hash, ...entry }) => entry);
+}
+/**
+ * Walks the hash chain and reports whether it's intact. If an entry was
+ * edited or deleted, `brokenAtIndex` is the (0-based) index of the first
+ * entry whose chain link no longer matches.
+ */
+export async function verifyLogIntegrity(identity) {
+    const entries = await readStoredEntries(identity.storageDir);
+    let expectedPrevHash = GENESIS_HASH;
+    for (let i = 0; i < entries.length; i++) {
+        const { prevHash, hash, ...rest } = entries[i];
+        if (prevHash !== expectedPrevHash || hash !== computeHash({ ...rest, prevHash })) {
+            return { intact: false, brokenAtIndex: i };
+        }
+        expectedPrevHash = hash;
+    }
+    return { intact: true };
+}
+//# sourceMappingURL=store.js.map

package/dist/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../src/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAiBlD,MAAM,YAAY,GAAG,SAAS,CAAC;AAE/B,SAAS,WAAW,CAAC,UAAkB;IACrC,OAAO,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,WAAW,CAAC,KAAmC;IACtD,OAAO,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,UAAkB;IACjD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;QAC5D,OAAO,GAAG;aACP,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;aACxC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmB,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAChE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAkB,EAAE,KAA2B;IAClF,MAAM,IAAI,GAAa,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IAClE,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC;IACzF,MAAM,QAAQ,GAAG,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAC;IACvC,MAAM,MAAM,GAAmB,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;IAE5E,MAAM,KAAK,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,UAAU,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACrG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,QAAkB;IAC9C,OAAO,CAAC,MAAM,iBAAiB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;AACvH,CAAC;AAID;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,QAAkB;IACzD,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC7D,IAAI,gBAAgB,GAAG,YAAY,CAAC;IAEpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAI,QAAQ,KAAK,gBAAgB,IAAI,IAAI,KAAK,WAAW,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;YACjF,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;QAC7C,CAAC;QACD,gBAAgB,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC1B,CAAC"}

package/dist/trust.d.ts

@@ -0,0 +1,41 @@
+import type { Identity, PublicCard } from "./identity.js";
+export interface TrustRecord {
+    card: PublicCard;
+    trustedAt: string;
+    /** Set when this party was later revoked (see untrustParty). Absent = still trusted. */
+    revokedAt?: string;
+}
+/**
+ * Records another party's public card as trusted, keyed by the card's
+ * fingerprint (not alias — two different real parties could otherwise pick
+ * the same alias and silently overwrite each other). Public keys are not
+ * secret, so this file is plain JSON (unlike identity.enc.json), though it's
+ * still permission-restricted to the owning user.
+ *
+ * Trusting a card again after it was revoked reinstates it (clears revokedAt).
+ */
+export declare function trustParty(identity: Identity, card: PublicCard): Promise<void>;
+/**
+ * Revokes every currently-trusted card recorded under `alias` — e.g. after a
+ * suspected key compromise. Records are tombstoned (kept, marked revokedAt),
+ * not deleted, so the history "this party was trusted, then revoked" isn't
+ * lost, and so verify() can report "revoked-signer" distinctly from
+ * "untrusted-signer" (never trusted at all).
+ */
+export declare function untrustParty(identity: Identity, alias: string): Promise<void>;
+/** Every currently-trusted (non-revoked) card. */
+export declare function listTrustedParties(identity: Identity): Promise<PublicCard[]>;
+/** Every trust record ever made, revoked or not — for audit/history purposes. */
+export declare function listTrustRecords(identity: Identity): Promise<TrustRecord[]>;
+/** The first currently-trusted (non-revoked) card recorded under this alias, if any. */
+export declare function getTrustedParty(identity: Identity, alias: string): Promise<PublicCard | undefined>;
+/**
+ * All currently-trusted (non-revoked) cards recorded under this alias. Alias
+ * is a non-unique display label (see ticket 02): two different real parties
+ * can legitimately share one, so callers that need to confirm a SPECIFIC
+ * card is trusted (not just "some card under this alias") should check every
+ * entry this returns.
+ */
+export declare function getTrustedPartiesByAlias(identity: Identity, alias: string): Promise<PublicCard[]>;
+/** All trust records (revoked or not) recorded under this alias. */
+export declare function getTrustRecordsByAlias(identity: Identity, alias: string): Promise<TrustRecord[]>;

package/dist/trust.js

@@ -0,0 +1,98 @@
+import { mkdir, readFile, writeFile } from "node:fs/promises";
+import { join } from "node:path";
+import { fingerprint } from "./fingerprint.js";
+function trustFilePath(storageDir) {
+    return join(storageDir, "trust.json");
+}
+function isV2(data) {
+    return typeof data === "object" && data !== null && data.version === 2;
+}
+/** Migrates a legacy alias-keyed store to the fingerprint-keyed v2 shape. */
+function migrateLegacy(legacy) {
+    const entries = {};
+    for (const card of Object.values(legacy)) {
+        entries[fingerprint(card)] = { card, trustedAt: new Date().toISOString() };
+    }
+    return { version: 2, entries };
+}
+async function readTrustStore(storageDir) {
+    let raw;
+    try {
+        raw = await readFile(trustFilePath(storageDir), "utf8");
+    }
+    catch (err) {
+        if (err.code === "ENOENT")
+            return { version: 2, entries: {} };
+        throw err;
+    }
+    const data = JSON.parse(raw);
+    return isV2(data) ? data : migrateLegacy(data);
+}
+async function writeTrustStore(storageDir, store) {
+    await mkdir(storageDir, { recursive: true });
+    await writeFile(trustFilePath(storageDir), JSON.stringify(store, null, 2), { mode: 0o600 });
+}
+/**
+ * Records another party's public card as trusted, keyed by the card's
+ * fingerprint (not alias — two different real parties could otherwise pick
+ * the same alias and silently overwrite each other). Public keys are not
+ * secret, so this file is plain JSON (unlike identity.enc.json), though it's
+ * still permission-restricted to the owning user.
+ *
+ * Trusting a card again after it was revoked reinstates it (clears revokedAt).
+ */
+export async function trustParty(identity, card) {
+    const store = await readTrustStore(identity.storageDir);
+    store.entries[fingerprint(card)] = { card, trustedAt: new Date().toISOString() };
+    await writeTrustStore(identity.storageDir, store);
+}
+/**
+ * Revokes every currently-trusted card recorded under `alias` — e.g. after a
+ * suspected key compromise. Records are tombstoned (kept, marked revokedAt),
+ * not deleted, so the history "this party was trusted, then revoked" isn't
+ * lost, and so verify() can report "revoked-signer" distinctly from
+ * "untrusted-signer" (never trusted at all).
+ */
+export async function untrustParty(identity, alias) {
+    const store = await readTrustStore(identity.storageDir);
+    const revokedAt = new Date().toISOString();
+    for (const record of Object.values(store.entries)) {
+        if (record.card.alias === alias && !record.revokedAt)
+            record.revokedAt = revokedAt;
+    }
+    await writeTrustStore(identity.storageDir, store);
+}
+/** Every currently-trusted (non-revoked) card. */
+export async function listTrustedParties(identity) {
+    const store = await readTrustStore(identity.storageDir);
+    return Object.values(store.entries)
+        .filter((record) => !record.revokedAt)
+        .map((record) => record.card);
+}
+/** Every trust record ever made, revoked or not — for audit/history purposes. */
+export async function listTrustRecords(identity) {
+    const store = await readTrustStore(identity.storageDir);
+    return Object.values(store.entries);
+}
+/** The first currently-trusted (non-revoked) card recorded under this alias, if any. */
+export async function getTrustedParty(identity, alias) {
+    return (await getTrustedPartiesByAlias(identity, alias))[0];
+}
+/**
+ * All currently-trusted (non-revoked) cards recorded under this alias. Alias
+ * is a non-unique display label (see ticket 02): two different real parties
+ * can legitimately share one, so callers that need to confirm a SPECIFIC
+ * card is trusted (not just "some card under this alias") should check every
+ * entry this returns.
+ */
+export async function getTrustedPartiesByAlias(identity, alias) {
+    return (await getTrustRecordsByAlias(identity, alias))
+        .filter((record) => !record.revokedAt)
+        .map((record) => record.card);
+}
+/** All trust records (revoked or not) recorded under this alias. */
+export async function getTrustRecordsByAlias(identity, alias) {
+    const store = await readTrustStore(identity.storageDir);
+    return Object.values(store.entries).filter((record) => record.card.alias === alias);
+}
+//# sourceMappingURL=trust.js.map

package/dist/trust.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust.js","sourceRoot":"","sources":["../src/trust.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAkB/C,SAAS,aAAa,CAAC,UAAkB;IACvC,OAAO,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,IAAI,CAAC,IAAa;IACzB,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAK,IAA8B,CAAC,OAAO,KAAK,CAAC,CAAC;AACpG,CAAC;AAED,6EAA6E;AAC7E,SAAS,aAAa,CAAC,MAAwB;IAC7C,MAAM,OAAO,GAAgC,EAAE,CAAC;IAChD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACzC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IAC7E,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,UAAkB;IAC9C,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QACzF,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,MAAM,IAAI,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,IAAwB,CAAC,CAAC;AACrE,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,UAAkB,EAAE,KAAmB;IACpE,MAAM,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,MAAM,SAAS,CAAC,aAAa,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC9F,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,QAAkB,EAAE,IAAgB;IACnE,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACxD,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IACjF,MAAM,eAAe,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;AACpD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAkB,EAAE,KAAa;IAClE,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACxD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAClD,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,MAAM,CAAC,SAAS,GAAG,SAAS,CAAC;IACrF,CAAC;IACD,MAAM,eAAe,CAAC,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;AACpD,CAAC;AAED,kDAAkD;AAClD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,QAAkB;IACzD,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;SAChC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;SACrC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,QAAkB;IACvD,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AACtC,CAAC;AAED,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,QAAkB,EAAE,KAAa;IACrE,OAAO,CAAC,MAAM,wBAAwB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,QAAkB,EAAE,KAAa;IAC9E,OAAO,CAAC,MAAM,sBAAsB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;SACnD,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;SACrC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AAClC,CAAC;AAED,oEAAoE;AACpE,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,QAAkB,EAAE,KAAa;IAC5E,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IACxD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;AACtF,CAAC"}

package/package.json

@@ -0,0 +1,48 @@
+{
+  "name": "raz-encrypt",
+  "version": "0.1.0",
+  "description": "Local-first, hybrid classical+post-quantum signing and verification for two consenting parties. No server, no database required.",
+  "license": "MIT",
+  "type": "module",
+  "engines": {
+    "node": ">=20"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./core": {
+      "types": "./dist/core.d.ts",
+      "import": "./dist/core.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "demo:setup": "tsx demo/alice.ts && tsx demo/bob.ts && tsx demo/exchange.ts",
+    "demo:sign": "tsx demo/sign-as-alice.ts",
+    "demo:verify": "tsx demo/verify-as-bob.ts",
+    "demo:tamper": "tsx demo/verify-as-bob.ts --tamper",
+    "demo:clean": "rm -rf demo/.alice-store demo/.bob-store demo/alice-card.json demo/bob-card.json demo/signed-doc.json"
+  },
+  "dependencies": {
+    "@noble/ciphers": "^2.4.0",
+    "@noble/curves": "^2.4.0",
+    "@noble/hashes": "^2.4.0",
+    "@noble/post-quantum": "^0.7.1"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.2",
+    "tsx": "^4.19.2",
+    "typescript": "^5.7.2",
+    "vitest": "^5.0.0"
+  }
+}