sealed-lattice 0.0.4 → 0.0.6

package/README.md

@@ -22,7 +22,7 @@ The current implementation ships:
 
 - a real `sha256Hex` helper on the safe root package
 - a typed `UnsupportedRuntimeError` for missing Web Crypto support
-- the same repo, docs, testing, and publish workflow shape used by `threshold-elgamal`
+- a hardened repo, docs, testing, and publish workflow around that narrow surface
 - a deliberately narrow public surface while the lattice-native architecture is still being proven
 
 This repository is a hardened research prototype. It is not audited production voting software.
@@ -31,7 +31,7 @@ This repository is a hardened research prototype. It is not audited production v
 
 This repository currently tracks the initial public `sealed-lattice` surface.
 
-The public surface is intentionally narrow while the repo, CI, docs, tests, coverage, and packaging experience are brought up to parity with the existing classical baseline. Lattice cryptography, threshold flows, transport payloads, proofs, protocol types, and any future subpath structure are still being designed and are not frozen yet.
+The public surface is intentionally narrow while the repo, CI, docs, tests, coverage, and packaging experience are stabilized. Lattice cryptography, threshold flows, transport payloads, proofs, protocol types, and any future subpath structure are still being designed and are not frozen yet.
 
 ## Installation
 
@@ -43,6 +43,7 @@ pnpm add sealed-lattice
 
 - Use ESM imports such as `import { sha256Hex } from 'sealed-lattice'`. The published package does not expose CommonJS `require()` entry points.
 - Browsers need `globalThis.crypto.subtle` and `TextEncoder`.
+- CI validates Chromium, Firefox, and WebKit on desktop, plus Chromium and WebKit in mobile emulation.
 - Node requires version `24.14.1` or newer with `globalThis.crypto`.
 
 ## Safe quickstart
@@ -67,6 +68,7 @@ No additional public subpaths are promised yet. Future capability areas such as
 
 - Hosted documentation site: [tenemo.github.io/sealed-lattice](https://tenemo.github.io/sealed-lattice/)
 - Get started: [tenemo.github.io/sealed-lattice/guides/getting-started](https://tenemo.github.io/sealed-lattice/guides/getting-started/)
+- Browser and worker usage: [tenemo.github.io/sealed-lattice/guides/browser-and-worker-usage](https://tenemo.github.io/sealed-lattice/guides/browser-and-worker-usage/)
 - Runtime and compatibility: [tenemo.github.io/sealed-lattice/guides/runtime-and-compatibility](https://tenemo.github.io/sealed-lattice/guides/runtime-and-compatibility/)
 - Security and non-goals: [tenemo.github.io/sealed-lattice/guides/security-and-non-goals](https://tenemo.github.io/sealed-lattice/guides/security-and-non-goals/)
 - API reference: [tenemo.github.io/sealed-lattice/api](https://tenemo.github.io/sealed-lattice/api/)
@@ -74,15 +76,11 @@ No additional public subpaths are promised yet. Future capability areas such as
 ## Development
 
 ```bash
-pnpm install --frozen-lockfile
-pnpm run vectors:core
-pnpm run ci
-```
-
-For the current digest microbenchmark, run:
-
-```bash
-pnpm run bench:micro
+pnpm install
+pnpm run lint
+pnpm run tsc
+pnpm run test
+pnpm run build
 ```
 
 ## License

package/dist/core/{sha256.d.ts → crypto.d.ts}

@@ -1,5 +1,10 @@
+type SupportedCrypto = Crypto & {
+    subtle: SubtleCrypto;
+};
+export declare const getWebCrypto: () => SupportedCrypto;
 /**
  * Returns the lowercase hexadecimal SHA-256 digest of the provided text or
  * byte input.
  */
 export declare const sha256Hex: (input: string | Uint8Array) => Promise<string>;
+export {};

package/dist/core/crypto.js

@@ -0,0 +1,18 @@
+import { bytesToHex, normalizeInputToBytes } from './bytes.js';
+import { UnsupportedRuntimeError } from './errors.js';
+const hasDigest = (value) => typeof value?.subtle?.digest === 'function';
+export const getWebCrypto = () => {
+    const cryptoApi = globalThis.crypto;
+    if (!hasDigest(cryptoApi)) {
+        throw new UnsupportedRuntimeError();
+    }
+    return cryptoApi;
+};
+/**
+ * Returns the lowercase hexadecimal SHA-256 digest of the provided text or
+ * byte input.
+ */
+export const sha256Hex = async (input) => {
+    const digest = await getWebCrypto().subtle.digest('SHA-256', normalizeInputToBytes(input));
+    return bytesToHex(new Uint8Array(digest));
+};

package/dist/core/errors.js

@@ -5,6 +5,7 @@
 export class UnsupportedRuntimeError extends Error {
     constructor(message = 'sealed-lattice requires globalThis.crypto.subtle.digest.') {
         super(message);
-        this.name = 'UnsupportedRuntimeError';
+        this.name = new.target.name;
+        Object.setPrototypeOf(this, new.target.prototype);
     }
 }

package/dist/core/index.d.ts

@@ -1,2 +1,3 @@
+export { bytesToHex, normalizeInputToBytes } from './bytes.js';
+export { getWebCrypto, sha256Hex } from './crypto.js';
 export { UnsupportedRuntimeError } from './errors.js';
-export { sha256Hex } from './sha256.js';

package/dist/core/index.js

@@ -1,2 +1,3 @@
+export { bytesToHex, normalizeInputToBytes } from './bytes.js';
+export { getWebCrypto, sha256Hex } from './crypto.js';
 export { UnsupportedRuntimeError } from './errors.js';
-export { sha256Hex } from './sha256.js';

package/dist/index.d.ts

@@ -1 +1 @@
-export * from './core/index.js';
+export { UnsupportedRuntimeError, sha256Hex } from './core/index.js';

package/dist/index.js

@@ -1 +1 @@
-export * from './core/index.js';
+export { UnsupportedRuntimeError, sha256Hex } from './core/index.js';

package/package.json

@@ -1,11 +1,14 @@
 {
     "name": "sealed-lattice",
-    "version": "0.0.4",
+    "version": "0.0.6",
     "description": "A browser-native TypeScript package for sealed-lattice research prototypes, currently shipping a narrow SHA-256 helper while the post-quantum architecture remains intentionally unfrozen.",
     "author": "Piotr Piech <piotr@piech.dev>",
     "license": "MPL-2.0",
     "main": "dist/index.js",
     "types": "dist/index.d.ts",
+    "files": [
+        "dist"
+    ],
     "imports": {
         "#root": "./src/index.ts",
         "#core": "./src/core/index.ts"
@@ -27,36 +30,28 @@
     "packageManager": "pnpm@10.33.0",
     "scripts": {
         "lint": "eslint . -c eslint.config.js",
-        "eslint": "pnpm run lint",
         "eslint:fix": "eslint . --fix -c eslint.config.js",
-        "typecheck": "tsc",
-        "tsc": "pnpm run typecheck",
-        "guard:no-math-random": "tsx ./tests/guards/check-no-math-random.ts",
-        "verify:package-surface": "tsx ./tools/verify-package-surface.ts",
-        "package:smoke": "tsx ./tools/verify-package-tarball.ts",
-        "vectors:core": "tsx ./tools/generate-core-vectors.ts",
-        "bench:micro": "tsx ./tools/benchmarks/microbench.ts",
-        "check": "pnpm run lint && pnpm run typecheck && pnpm run guard:no-math-random && pnpm run verify:package-surface && pnpm run test",
-        "prebuild": "pnpm run check && pnpm exec del-cli dist",
-        "build": "tsc --project tsconfig.build.json",
-        "build:skip": "pnpm exec del-cli dist && tsc --project tsconfig.build.json",
+        "tsc": "tsc",
         "test:node": "vitest --project node --run",
-        "test:browser": "vitest --project browser --run",
+        "test:browser": "vitest --project browser-desktop --project browser-mobile --run",
         "test": "pnpm run test:node && pnpm run test:browser",
         "test:watch": "vitest --project node --watch",
         "coverage:node": "vitest --project node --run --coverage",
         "coverage:badge": "pnpm run coverage:node && tsx ./tools/generate-coverage-badge.ts",
-        "verify:docs:build": "tsx ./tools/verify-docs-build.ts",
-        "docs:ci": "pnpm run docs:api && pnpm run verify:docs && pnpm run coverage:badge && pnpm run docs:build:site && pnpm run verify:docs:build",
-        "ci": "pnpm run check && pnpm run build:skip && pnpm run package:smoke && pnpm run docs:ci",
+        "smoke:pack": "tsx ./tools/ci/verify-packed-package.ts",
+        "smoke:pack:npm": "tsx ./tools/ci/verify-packed-package.ts --package-manager npm",
+        "check:node": "pnpm run lint && tsc && knip && tsx ./tools/ci/verify-vectors.ts && pnpm run test:node",
+        "prebuild": "pnpm run lint && tsc && knip && tsx ./tools/ci/verify-vectors.ts && pnpm run test",
+        "build:dist": "pnpm exec del-cli dist && tsc --project tsconfig.build.json && tsx ./tools/build/rewrite-dist-relative-imports.ts",
+        "build:ci": "pnpm run check:node && pnpm run build:dist",
+        "build": "pnpm run build:dist",
+        "vectors:core": "tsx ./tools/generate-core-vectors.ts",
         "docs:api": "pnpm exec del-cli docs/src/content/docs/api/reference && tsx ./node_modules/typedoc/bin/typedoc --options typedoc.config.mjs && tsx ./typedoc/postprocess-site-docs.ts",
         "docs:dev": "pnpm run docs:api && astro dev --root docs",
-        "docs:build": "pnpm run docs:api && pnpm run docs:build:site",
-        "docs:build:site": "astro build --root docs",
+        "docs:build:site": "pnpm exec del-cli docs/dist && astro build --root docs --silent",
         "docs:preview": "astro preview --root docs",
-        "verify:docs": "tsx ./typedoc/verify-docs.ts",
-        "prepublish:public": "pnpm run ci",
-        "publish:public": "pnpm publish --access public",
+        "verify:docs": "pnpm run docs:api && tsx ./typedoc/verify-docs.ts",
+        "bench:micro": "tsx ./tools/benchmarks/microbench.ts",
         "prepare": "husky"
     },
     "devDependencies": {
@@ -66,30 +61,29 @@
         "@eslint/js": "^10.0.1",
         "@fontsource/ibm-plex-sans": "^5.2.8",
         "@fontsource/jetbrains-mono": "^5.2.8",
-        "@fontsource/space-grotesk": "^5.2.10",
         "@types/node": "^25.5.2",
         "@typescript-eslint/eslint-plugin": "^8.58.1",
         "@typescript-eslint/parser": "^8.58.1",
-        "@vitest/browser-playwright": "^4.1.3",
-        "@vitest/coverage-v8": "^4.1.3",
+        "@vitest/browser-playwright": "^4.1.4",
+        "@vitest/coverage-v8": "^4.1.4",
         "astro": "^6.1.5",
         "del-cli": "^7.0.0",
         "eslint": "^10.2.0",
         "eslint-config-prettier": "^10.1.8",
-        "eslint-import-resolver-typescript": "^4.4.4",
-        "eslint-plugin-import": "^2.32.0",
+        "eslint-plugin-import-x": "^4.16.2",
         "eslint-plugin-only-error": "^1.0.2",
         "eslint-plugin-prettier": "^5.5.5",
         "globals": "^17.4.0",
         "husky": "^9.1.7",
+        "knip": "^5.67.0",
         "playwright": "^1.59.1",
         "prettier": "^3.8.1",
         "tsx": "^4.21.0",
         "typedoc": "^0.28.18",
         "typedoc-plugin-markdown": "^4.11.0",
         "typescript": "^6.0.2",
-        "vite": "^8.0.7",
-        "vitest": "^4.1.3"
+        "vite": "^8.0.8",
+        "vitest": "^4.1.4"
     },
     "engines": {
         "node": ">=24.14.1"

package/dist/core/runtime.d.ts

@@ -1,5 +0,0 @@
-type SupportedCrypto = Crypto & {
-    subtle: SubtleCrypto;
-};
-export declare const requireWebCrypto: () => SupportedCrypto;
-export {};

package/dist/core/runtime.js

@@ -1,9 +0,0 @@
-import { UnsupportedRuntimeError } from './errors.js';
-const hasDigest = (value) => typeof value?.subtle?.digest === 'function';
-export const requireWebCrypto = () => {
-    const cryptoApi = globalThis.crypto;
-    if (!hasDigest(cryptoApi)) {
-        throw new UnsupportedRuntimeError();
-    }
-    return cryptoApi;
-};

package/dist/core/sha256.js

@@ -1,11 +0,0 @@
-import { bytesToHex, normalizeInputToBytes } from './bytes.js';
-import { requireWebCrypto } from './runtime.js';
-/**
- * Returns the lowercase hexadecimal SHA-256 digest of the provided text or
- * byte input.
- */
-export const sha256Hex = async (input) => {
-    const cryptoApi = requireWebCrypto();
-    const digest = await cryptoApi.subtle.digest('SHA-256', normalizeInputToBytes(input));
-    return bytesToHex(new Uint8Array(digest));
-};