ts-mls 1.0.1

package/dist/crypto/kdf.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.makeKdfImpl = makeKdfImpl;
+exports.makeKdf = makeKdf;
+exports.expandWithLabel = expandWithLabel;
+exports.deriveSecret = deriveSecret;
+exports.deriveTreeSecret = deriveTreeSecret;
+const utils_1 = require("@noble/ciphers/utils");
+const core_1 = require("@hpke/core");
+const variableLength_1 = require("../codec/variableLength");
+const number_1 = require("../codec/number");
+const byteArray_1 = require("../util/byteArray");
+function makeKdfImpl(k) {
+    return {
+        async extract(salt, ikm) {
+            const result = await k.extract((0, byteArray_1.bytesToBuffer)(salt), (0, byteArray_1.bytesToBuffer)(ikm));
+            return new Uint8Array(result);
+        },
+        async expand(prk, info, len) {
+            const result = await k.expand((0, byteArray_1.bytesToBuffer)(prk), (0, byteArray_1.bytesToBuffer)(info), len);
+            return new Uint8Array(result);
+        },
+        size: k.hashSize,
+    };
+}
+function makeKdf(kdfAlg) {
+    switch (kdfAlg) {
+        case "HKDF-SHA256":
+            return new core_1.HkdfSha256();
+        case "HKDF-SHA384":
+            return new core_1.HkdfSha384();
+        case "HKDF-SHA512":
+            return new core_1.HkdfSha512();
+    }
+}
+function expandWithLabel(secret, label, context, length, kdf) {
+    return kdf.expand(secret, new Uint8Array([
+        ...(0, number_1.encodeUint16)(length),
+        ...(0, variableLength_1.encodeVarLenData)((0, utils_1.utf8ToBytes)(`MLS 1.0 ${label}`)),
+        ...(0, variableLength_1.encodeVarLenData)(context),
+    ]), length);
+}
+async function deriveSecret(secret, label, kdf) {
+    return expandWithLabel(secret, label, new Uint8Array(), kdf.size, kdf);
+}
+async function deriveTreeSecret(secret, label, generation, length, kdf) {
+    return expandWithLabel(secret, label, (0, number_1.encodeUint32)(generation), length, kdf);
+}
+//# sourceMappingURL=kdf.js.map

package/dist/crypto/kdf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kdf.js","sourceRoot":"","sources":["../../src/crypto/kdf.ts"],"names":[],"mappings":";;AAeA,kCAYC;AAED,0BASC;AAED,0CAgBC;AAED,oCAEC;AAED,4CAQC;AArED,gDAAkD;AAClD,qCAA+D;AAC/D,4DAA0D;AAC1D,4CAA4D;AAC5D,iDAAiD;AAUjD,SAAgB,WAAW,CAAC,CAAe;IACzC,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,IAAgB,EAAE,GAAe;YAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,IAAA,yBAAa,EAAC,IAAI,CAAC,EAAE,IAAA,yBAAa,EAAC,GAAG,CAAC,CAAC,CAAA;YACvE,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,CAAA;QAC/B,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,GAAe,EAAE,IAAgB,EAAE,GAAW;YACzD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,IAAA,yBAAa,EAAC,GAAG,CAAC,EAAE,IAAA,yBAAa,EAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAA;YAC3E,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,CAAA;QAC/B,CAAC;QACD,IAAI,EAAE,CAAC,CAAC,QAAQ;KACjB,CAAA;AACH,CAAC;AAED,SAAgB,OAAO,CAAC,MAAoB;IAC1C,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,aAAa;YAChB,OAAO,IAAI,iBAAU,EAAE,CAAA;QACzB,KAAK,aAAa;YAChB,OAAO,IAAI,iBAAU,EAAE,CAAA;QACzB,KAAK,aAAa;YAChB,OAAO,IAAI,iBAAU,EAAE,CAAA;IAC3B,CAAC;AACH,CAAC;AAED,SAAgB,eAAe,CAC7B,MAAkB,EAClB,KAAa,EACb,OAAmB,EACnB,MAAc,EACd,GAAQ;IAER,OAAO,GAAG,CAAC,MAAM,CACf,MAAM,EACN,IAAI,UAAU,CAAC;QACb,GAAG,IAAA,qBAAY,EAAC,MAAM,CAAC;QACvB,GAAG,IAAA,iCAAgB,EAAC,IAAA,mBAAW,EAAC,WAAW,KAAK,EAAE,CAAC,CAAC;QACpD,GAAG,IAAA,iCAAgB,EAAC,OAAO,CAAC;KAC7B,CAAC,EACF,MAAM,CACP,CAAA;AACH,CAAC;AAEM,KAAK,UAAU,YAAY,CAAC,MAAkB,EAAE,KAAa,EAAE,GAAQ;IAC5E,OAAO,eAAe,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,UAAU,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;AACxE,CAAC;AAEM,KAAK,UAAU,gBAAgB,CACpC,MAAkB,EAClB,KAAa,EACb,UAAkB,EAClB,MAAc,EACd,GAAQ;IAER,OAAO,eAAe,CAAC,MAAM,EAAE,KAAK,EAAE,IAAA,qBAAY,EAAC,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAA;AAC9E,CAAC"}

package/dist/crypto/kem.d.ts

@@ -0,0 +1,3 @@
+import { KemInterface } from "@hpke/core";
+export type KemAlgorithm = "DHKEM-P256-HKDF-SHA256" | "DHKEM-X25519-HKDF-SHA256" | "DHKEM-X448-HKDF-SHA512" | "DHKEM-P521-HKDF-SHA512" | "DHKEM-P384-HKDF-SHA384" | "ML-KEM-512" | "ML-KEM-768" | "ML-KEM-1024" | "X-Wing";
+export declare function makeDhKem(kemAlg: KemAlgorithm): KemInterface;

package/dist/crypto/kem.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.makeDhKem = makeDhKem;
+const core_1 = require("@hpke/core");
+const hybridkem_x_wing_1 = require("@hpke/hybridkem-x-wing");
+const ml_kem_1 = require("@hpke/ml-kem");
+function makeDhKem(kemAlg) {
+    switch (kemAlg) {
+        case "DHKEM-P256-HKDF-SHA256":
+            return new core_1.DhkemP256HkdfSha256();
+        case "DHKEM-X25519-HKDF-SHA256":
+            return new core_1.DhkemX25519HkdfSha256();
+        case "DHKEM-X448-HKDF-SHA512":
+            return new core_1.DhkemX448HkdfSha512();
+        case "DHKEM-P521-HKDF-SHA512":
+            return new core_1.DhkemP521HkdfSha512();
+        case "DHKEM-P384-HKDF-SHA384":
+            return new core_1.DhkemP384HkdfSha384();
+        case "ML-KEM-512":
+            return new ml_kem_1.MlKem512();
+        case "ML-KEM-768":
+            return new ml_kem_1.MlKem768();
+        case "ML-KEM-1024":
+            return new ml_kem_1.MlKem1024();
+        case "X-Wing":
+            return new hybridkem_x_wing_1.XWing();
+    }
+}
+//# sourceMappingURL=kem.js.map

package/dist/crypto/kem.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kem.js","sourceRoot":"","sources":["../../src/crypto/kem.ts"],"names":[],"mappings":";;AAwBA,8BAqBC;AA7CD,qCAOmB;AACnB,6DAA+C;AAE/C,yCAA6D;AAc7D,SAAgB,SAAS,CAAC,MAAoB;IAC5C,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,wBAAwB;YAC3B,OAAO,IAAI,0BAAmB,EAAE,CAAA;QAClC,KAAK,0BAA0B;YAC7B,OAAO,IAAI,4BAAqB,EAAE,CAAA;QACpC,KAAK,wBAAwB;YAC3B,OAAO,IAAI,0BAAmB,EAAE,CAAA;QAClC,KAAK,wBAAwB;YAC3B,OAAO,IAAI,0BAAmB,EAAE,CAAA;QAClC,KAAK,wBAAwB;YAC3B,OAAO,IAAI,0BAAmB,EAAE,CAAA;QAClC,KAAK,YAAY;YACf,OAAO,IAAI,iBAAQ,EAAE,CAAA;QACvB,KAAK,YAAY;YACf,OAAO,IAAI,iBAAQ,EAAE,CAAA;QACvB,KAAK,aAAa;YAChB,OAAO,IAAI,kBAAS,EAAE,CAAA;QACxB,KAAK,QAAQ;YACX,OAAO,IAAI,wBAAK,EAAE,CAAA;IACtB,CAAC;AACH,CAAC"}

package/dist/crypto/rng.d.ts

@@ -0,0 +1,4 @@
+export interface Rng {
+    randomBytes(n: number): Uint8Array;
+}
+export declare const webCryptoRng: Rng;

package/dist/crypto/rng.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.webCryptoRng = void 0;
+exports.webCryptoRng = {
+    randomBytes(n) {
+        return crypto.getRandomValues(new Uint8Array(n));
+    },
+};
+//# sourceMappingURL=rng.js.map

package/dist/crypto/rng.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rng.js","sourceRoot":"","sources":["../../src/crypto/rng.ts"],"names":[],"mappings":";;;AAIa,QAAA,YAAY,GAAQ;IAC/B,WAAW,CAAC,CAAC;QACX,OAAO,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAA;IAClD,CAAC;CACF,CAAA"}

package/dist/crypto/signature.d.ts

@@ -0,0 +1,12 @@
+export interface Signature {
+    sign(signKey: Uint8Array, message: Uint8Array): Uint8Array;
+    verify(publicKey: Uint8Array, message: Uint8Array, signature: Uint8Array): boolean;
+    keygen(): {
+        publicKey: Uint8Array;
+        signKey: Uint8Array;
+    };
+}
+export type SignatureAlgorithm = "Ed25519" | "Ed448" | "P256" | "P384" | "P521";
+export declare function signWithLabel(signKey: Uint8Array, label: string, content: Uint8Array, s: Signature): Uint8Array;
+export declare function verifyWithLabel(publicKey: Uint8Array, label: string, content: Uint8Array, signature: Uint8Array, s: Signature): boolean;
+export declare function makeNobleSignatureImpl(alg: SignatureAlgorithm): Signature;

package/dist/crypto/signature.js

@@ -0,0 +1,73 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.signWithLabel = signWithLabel;
+exports.verifyWithLabel = verifyWithLabel;
+exports.makeNobleSignatureImpl = makeNobleSignatureImpl;
+const ed25519_1 = require("@noble/curves/ed25519");
+const ed448_1 = require("@noble/curves/ed448");
+const nist_1 = require("@noble/curves/nist");
+const utils_1 = require("@noble/ciphers/utils");
+const variableLength_1 = require("../codec/variableLength");
+function signWithLabel(signKey, label, content, s) {
+    return s.sign(signKey, new Uint8Array([...(0, variableLength_1.encodeVarLenData)((0, utils_1.utf8ToBytes)(`MLS 1.0 ${label}`)), ...(0, variableLength_1.encodeVarLenData)(content)]));
+}
+function verifyWithLabel(publicKey, label, content, signature, s) {
+    return s.verify(publicKey, new Uint8Array([...(0, variableLength_1.encodeVarLenData)((0, utils_1.utf8ToBytes)(`MLS 1.0 ${label}`)), ...(0, variableLength_1.encodeVarLenData)(content)]), signature);
+}
+function makeNobleSignatureImpl(alg) {
+    return {
+        sign(signKey, message) {
+            switch (alg) {
+                case "Ed25519":
+                    return ed25519_1.ed25519.sign(message, signKey);
+                case "Ed448":
+                    return ed448_1.ed448.sign(message, signKey);
+                case "P256":
+                    return nist_1.p256.sign(message, signKey, { prehash: true }).toCompactRawBytes();
+                case "P384":
+                    return nist_1.p384.sign(message, signKey, { prehash: true }).toCompactRawBytes();
+                case "P521":
+                    return nist_1.p521.sign(message, signKey, { prehash: true }).toCompactRawBytes();
+            }
+        },
+        verify(publicKey, message, signature) {
+            switch (alg) {
+                case "Ed25519":
+                    return ed25519_1.ed25519.verify(signature, message, publicKey);
+                case "Ed448":
+                    return ed448_1.ed448.verify(signature, message, publicKey);
+                case "P256":
+                    return nist_1.p256.verify(signature, message, publicKey, { prehash: true });
+                case "P384":
+                    return nist_1.p384.verify(signature, message, publicKey, { prehash: true });
+                case "P521":
+                    return nist_1.p521.verify(signature, message, publicKey, { prehash: true });
+            }
+        },
+        keygen() {
+            switch (alg) {
+                case "Ed25519": {
+                    const signKey = ed25519_1.ed25519.utils.randomPrivateKey();
+                    return { signKey, publicKey: ed25519_1.ed25519.getPublicKey(signKey) };
+                }
+                case "Ed448": {
+                    const signKey = ed448_1.ed448.utils.randomPrivateKey();
+                    return { signKey, publicKey: ed25519_1.ed25519.getPublicKey(signKey) };
+                }
+                case "P256": {
+                    const signKey = nist_1.p256.utils.randomPrivateKey();
+                    return { signKey, publicKey: nist_1.p256.getPublicKey(signKey) };
+                }
+                case "P384": {
+                    const signKey = nist_1.p384.utils.randomPrivateKey();
+                    return { signKey, publicKey: nist_1.p384.getPublicKey(signKey) };
+                }
+                case "P521": {
+                    const signKey = nist_1.p521.utils.randomPrivateKey();
+                    return { signKey, publicKey: nist_1.p521.getPublicKey(signKey) };
+                }
+            }
+        },
+    };
+}
+//# sourceMappingURL=signature.js.map

package/dist/crypto/signature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.js","sourceRoot":"","sources":["../../src/crypto/signature.ts"],"names":[],"mappings":";;AAcA,sCAKC;AAED,0CAYC;AAED,wDAuDC;AA1FD,mDAA+C;AAC/C,+CAA2C;AAC3C,6CAAqD;AACrD,gDAAkD;AAClD,4DAA0D;AAU1D,SAAgB,aAAa,CAAC,OAAmB,EAAE,KAAa,EAAE,OAAmB,EAAE,CAAY;IACjG,OAAO,CAAC,CAAC,IAAI,CACX,OAAO,EACP,IAAI,UAAU,CAAC,CAAC,GAAG,IAAA,iCAAgB,EAAC,IAAA,mBAAW,EAAC,WAAW,KAAK,EAAE,CAAC,CAAC,EAAE,GAAG,IAAA,iCAAgB,EAAC,OAAO,CAAC,CAAC,CAAC,CACrG,CAAA;AACH,CAAC;AAED,SAAgB,eAAe,CAC7B,SAAqB,EACrB,KAAa,EACb,OAAmB,EACnB,SAAqB,EACrB,CAAY;IAEZ,OAAO,CAAC,CAAC,MAAM,CACb,SAAS,EACT,IAAI,UAAU,CAAC,CAAC,GAAG,IAAA,iCAAgB,EAAC,IAAA,mBAAW,EAAC,WAAW,KAAK,EAAE,CAAC,CAAC,EAAE,GAAG,IAAA,iCAAgB,EAAC,OAAO,CAAC,CAAC,CAAC,EACpG,SAAS,CACV,CAAA;AACH,CAAC;AAED,SAAgB,sBAAsB,CAAC,GAAuB;IAC5D,OAAO;QACL,IAAI,CAAC,OAAO,EAAE,OAAO;YACnB,QAAQ,GAAG,EAAE,CAAC;gBACZ,KAAK,SAAS;oBACZ,OAAO,iBAAO,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;gBACvC,KAAK,OAAO;oBACV,OAAO,aAAK,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;gBACrC,KAAK,MAAM;oBACT,OAAO,WAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAA;gBAC3E,KAAK,MAAM;oBACT,OAAO,WAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAA;gBAC3E,KAAK,MAAM;oBACT,OAAO,WAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,iBAAiB,EAAE,CAAA;YAC7E,CAAC;QACH,CAAC;QACD,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS;YAClC,QAAQ,GAAG,EAAE,CAAC;gBACZ,KAAK,SAAS;oBACZ,OAAO,iBAAO,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;gBACtD,KAAK,OAAO;oBACV,OAAO,aAAK,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,CAAC,CAAA;gBACpD,KAAK,MAAM;oBACT,OAAO,WAAI,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;gBACtE,KAAK,MAAM;oBACT,OAAO,WAAI,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;gBACtE,KAAK,MAAM;oBACT,OAAO,WAAI,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAA;YACxE,CAAC;QACH,CAAC;QACD,MAAM;YACJ,QAAQ,GAAG,EAAE,CAAC;gBACZ,KAAK,SAAS,CAAC,CAAC,CAAC;oBACf,MAAM,OAAO,GAAG,iBAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAA;oBAChD,OAAO,EAAE,OAAO,EAAG,SAAS,EAAE,iBAAO,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAA;gBAC/D,CAAC;gBACD,KAAK,OAAO,CAAC,CAAC,CAAC;oBACb,MAAM,OAAO,GAAG,aAAK,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAA;oBAC9C,OAAO,EAAE,OAAO,EAAG,SAAS,EAAE,iBAAO,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAA;gBAC/D,CAAC;gBACD,KAAK,MAAM,CAAC,CAAA,CAAC;oBACX,MAAM,OAAO,GAAG,WAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAA;oBAC7C,OAAO,EAAE,OAAO,EAAG,SAAS,EAAE,WAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAA;gBAC5D,CAAC;gBACD,KAAK,MAAM,CAAC,CAAC,CAAC;oBACZ,MAAM,OAAO,GAAG,WAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAA;oBAC7C,OAAO,EAAE,OAAO,EAAG,SAAS,EAAE,WAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAA;gBAC5D,CAAC;gBACD,KAAK,MAAM,CAAC,CAAC,CAAC;oBACZ,MAAM,OAAO,GAAG,WAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAA;oBAC7C,OAAO,EAAE,OAAO,EAAG,SAAS,EAAE,WAAI,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAA;gBAC5D,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/src/AuthenticationService.d.ts

@@ -0,0 +1,7 @@
+import { Credential } from "./credential";
+export interface AuthenticationService {
+    validateCredential(credential: Credential, signaturePublicKey: Uint8Array): Promise<boolean>;
+}
+export declare const defaultAuthenticationService: {
+    validateCredential(_credential: Credential, _signaturePublicKey: Uint8Array): Promise<boolean>;
+};

package/dist/src/AuthenticationService.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.defaultAuthenticationService = void 0;
+exports.defaultAuthenticationService = {
+    async validateCredential(_credential, _signaturePublicKey) {
+        return true;
+    },
+};
+//# sourceMappingURL=authenticationService.js.map

package/dist/src/AuthenticationService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticationService.js","sourceRoot":"","sources":["../../src/authenticationService.ts"],"names":[],"mappings":";;;AAMa,QAAA,4BAA4B,GAAG;IAC1C,KAAK,CAAC,kBAAkB,CAAC,WAAuB,EAAE,mBAA+B;QAC/E,OAAO,IAAI,CAAA;IACb,CAAC;CACF,CAAA"}

package/dist/src/IncomingMessageAction.d.ts

@@ -0,0 +1,10 @@
+import { ProposalWithSender } from "./unappliedProposals";
+export type IncomingMessageAction = "accept" | "reject";
+export type IncomingMessageCallback = (incoming: {
+    kind: "commit";
+    proposals: ProposalWithSender[];
+} | {
+    kind: "proposal";
+    proposal: ProposalWithSender;
+}) => IncomingMessageAction;
+export declare const acceptAll: IncomingMessageCallback;

package/dist/src/IncomingMessageAction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"IncomingMessageAction.d.ts","sourceRoot":"","sources":["../../src/IncomingMessageAction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AAEzD,MAAM,MAAM,qBAAqB,GAAG,QAAQ,GAAG,QAAQ,CAAA;AAEvD,MAAM,MAAM,uBAAuB,GAAG,CACpC,QAAQ,EAAE;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,kBAAkB,EAAE,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,kBAAkB,CAAA;CAAE,KAC/G,qBAAqB,CAAA;AAE1B,eAAO,MAAM,SAAS,EAAE,uBAAwC,CAAA"}

package/dist/src/IncomingMessageAction.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.acceptAll = void 0;
+const acceptAll = () => "accept";
+exports.acceptAll = acceptAll;
+//# sourceMappingURL=IncomingMessageAction.js.map

package/dist/src/IncomingMessageAction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"IncomingMessageAction.js","sourceRoot":"","sources":["../../src/IncomingMessageAction.ts"],"names":[],"mappings":";;;AAQO,MAAM,SAAS,GAA4B,GAAG,EAAE,CAAC,QAAQ,CAAA;AAAnD,QAAA,SAAS,aAA0C"}

package/dist/src/PaddingConfig.d.ts

@@ -0,0 +1,9 @@
+export type PaddingConfig = {
+    kind: "padUntilLength";
+    padUntilLength: number;
+} | {
+    kind: "alwaysPad";
+    paddingLength: number;
+};
+export declare const defaultPaddingConfig: PaddingConfig;
+export declare function byteLengthToPad(encodedLength: number, config: PaddingConfig): number;

package/dist/src/PaddingConfig.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.defaultPaddingConfig = void 0;
+exports.byteLengthToPad = byteLengthToPad;
+exports.defaultPaddingConfig = { kind: "padUntilLength", padUntilLength: 256 };
+function byteLengthToPad(encodedLength, config) {
+    if (config.kind === "alwaysPad")
+        return config.paddingLength;
+    else
+        return encodedLength >= config.padUntilLength ? 0 : config.padUntilLength - encodedLength;
+}
+//# sourceMappingURL=paddingConfig.js.map

package/dist/src/PaddingConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paddingConfig.js","sourceRoot":"","sources":["../../src/paddingConfig.ts"],"names":[],"mappings":";;;AAMA,0CAGC;AALY,QAAA,oBAAoB,GAAkB,EAAE,IAAI,EAAE,gBAAgB,EAAE,cAAc,EAAE,GAAG,EAAE,CAAA;AAElG,SAAgB,eAAe,CAAC,aAAqB,EAAE,MAAqB;IAC1E,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW;QAAE,OAAO,MAAM,CAAC,aAAa,CAAA;;QACvD,OAAO,aAAa,IAAI,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,GAAG,aAAa,CAAA;AAChG,CAAC"}

package/dist/src/authenticatedContent.d.ts

@@ -0,0 +1,32 @@
+import { Decoder } from "./codec/tlsDecoder";
+import { Encoder } from "./codec/tlsEncoder";
+import { Hash } from "./crypto/hash";
+import { FramedContent, FramedContentApplicationData, FramedContentAuthData, FramedContentCommitData, FramedContentData, FramedContentProposalData, FramedContentTBS } from "./framedContent";
+import { WireformatName } from "./wireformat";
+export type AuthenticatedContent = {
+    wireformat: WireformatName;
+    content: FramedContent;
+    auth: FramedContentAuthData;
+};
+export type AuthenticatedContentApplication = AuthenticatedContent & {
+    content: FramedContentApplicationData & FramedContentData;
+};
+export type AuthenticatedContentCommit = AuthenticatedContent & {
+    content: FramedContentCommitData & FramedContentData;
+};
+export type AuthenticatedContentProposal = AuthenticatedContent & {
+    content: FramedContentProposalData & FramedContentData;
+};
+export type AuthenticatedContentProposalOrCommit = AuthenticatedContent & {
+    content: (FramedContentProposalData | FramedContentCommitData) & FramedContentData;
+};
+export declare const encodeAuthenticatedContent: Encoder<AuthenticatedContent>;
+export declare const decodeAuthenticatedContent: Decoder<AuthenticatedContent>;
+export type AuthenticatedContentTBM = {
+    contentTbs: FramedContentTBS;
+    auth: FramedContentAuthData;
+};
+export declare const encodeAuthenticatedContentTBM: Encoder<AuthenticatedContentTBM>;
+export declare function createMembershipTag(membershipKey: Uint8Array, tbm: AuthenticatedContentTBM, h: Hash): Promise<Uint8Array>;
+export declare function verifyMembershipTag(membershipKey: Uint8Array, tbm: AuthenticatedContentTBM, tag: Uint8Array, h: Hash): Promise<boolean>;
+export declare function makeProposalRef(proposal: AuthenticatedContent, h: Hash): Promise<Uint8Array>;

package/dist/src/authenticatedContent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticatedContent.d.ts","sourceRoot":"","sources":["../../src/authenticatedContent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAA2C,MAAM,oBAAoB,CAAA;AACrF,OAAO,EAAqB,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAC/D,OAAO,EAAE,IAAI,EAAW,MAAM,eAAe,CAAA;AAC7C,OAAO,EAML,aAAa,EACb,4BAA4B,EAC5B,qBAAqB,EACrB,uBAAuB,EACvB,iBAAiB,EACjB,yBAAyB,EACzB,gBAAgB,EACjB,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAsC,cAAc,EAAE,MAAM,cAAc,CAAA;AAEjF,MAAM,MAAM,oBAAoB,GAAG;IACjC,UAAU,EAAE,cAAc,CAAA;IAC1B,OAAO,EAAE,aAAa,CAAA;IACtB,IAAI,EAAE,qBAAqB,CAAA;CAC5B,CAAA;AAED,MAAM,MAAM,+BAA+B,GAAG,oBAAoB,GAAG;IACnE,OAAO,EAAE,4BAA4B,GAAG,iBAAiB,CAAA;CAC1D,CAAA;AAED,MAAM,MAAM,0BAA0B,GAAG,oBAAoB,GAAG;IAC9D,OAAO,EAAE,uBAAuB,GAAG,iBAAiB,CAAA;CACrD,CAAA;AAED,MAAM,MAAM,4BAA4B,GAAG,oBAAoB,GAAG;IAChE,OAAO,EAAE,yBAAyB,GAAG,iBAAiB,CAAA;CACvD,CAAA;AAED,MAAM,MAAM,oCAAoC,GAAG,oBAAoB,GAAG;IACxE,OAAO,EAAE,CAAC,yBAAyB,GAAG,uBAAuB,CAAC,GAAG,iBAAiB,CAAA;CACnF,CAAA;AACD,eAAO,MAAM,0BAA0B,EAAE,OAAO,CAAC,oBAAoB,CAGpE,CAAA;AAED,eAAO,MAAM,0BAA0B,EAAE,OAAO,CAAC,oBAAoB,CAWpE,CAAA;AAED,MAAM,MAAM,uBAAuB,GAAG;IACpC,UAAU,EAAE,gBAAgB,CAAA;IAC5B,IAAI,EAAE,qBAAqB,CAAA;CAC5B,CAAA;AAED,eAAO,MAAM,6BAA6B,EAAE,OAAO,CAAC,uBAAuB,CAG1E,CAAA;AAED,wBAAgB,mBAAmB,CACjC,aAAa,EAAE,UAAU,EACzB,GAAG,EAAE,uBAAuB,EAC5B,CAAC,EAAE,IAAI,GACN,OAAO,CAAC,UAAU,CAAC,CAErB;AAED,wBAAgB,mBAAmB,CACjC,aAAa,EAAE,UAAU,EACzB,GAAG,EAAE,uBAAuB,EAC5B,GAAG,EAAE,UAAU,EACf,CAAC,EAAE,IAAI,GACN,OAAO,CAAC,OAAO,CAAC,CAElB;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE,oBAAoB,EAAE,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,CAE5F"}

package/dist/src/authenticatedContent.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.encodeAuthenticatedContentTBM = exports.decodeAuthenticatedContent = exports.encodeAuthenticatedContent = void 0;
+exports.createMembershipTag = createMembershipTag;
+exports.verifyMembershipTag = verifyMembershipTag;
+exports.makeProposalRef = makeProposalRef;
+const tlsDecoder_1 = require("./codec/tlsDecoder");
+const tlsEncoder_1 = require("./codec/tlsEncoder");
+const hash_1 = require("./crypto/hash");
+const framedContent_1 = require("./framedContent");
+const wireformat_1 = require("./wireformat");
+exports.encodeAuthenticatedContent = (0, tlsEncoder_1.contramapEncoders)([wireformat_1.encodeWireformat, framedContent_1.encodeFramedContent, framedContent_1.encodeFramedContentAuthData], (a) => [a.wireformat, a.content, a.auth]);
+exports.decodeAuthenticatedContent = (0, tlsDecoder_1.mapDecoders)([
+    wireformat_1.decodeWireformat,
+    (0, tlsDecoder_1.flatMapDecoder)(framedContent_1.decodeFramedContent, (content) => {
+        return (0, tlsDecoder_1.mapDecoder)((0, framedContent_1.decodeFramedContentAuthData)(content.contentType), (auth) => ({ content, auth }));
+    }),
+], (wireformat, contentAuth) => ({
+    wireformat,
+    ...contentAuth,
+}));
+exports.encodeAuthenticatedContentTBM = (0, tlsEncoder_1.contramapEncoders)([framedContent_1.encodeFramedContentTBS, framedContent_1.encodeFramedContentAuthData], (t) => [t.contentTbs, t.auth]);
+function createMembershipTag(membershipKey, tbm, h) {
+    return h.mac(membershipKey, (0, exports.encodeAuthenticatedContentTBM)(tbm));
+}
+function verifyMembershipTag(membershipKey, tbm, tag, h) {
+    return h.verifyMac(membershipKey, tag, (0, exports.encodeAuthenticatedContentTBM)(tbm));
+}
+function makeProposalRef(proposal, h) {
+    return (0, hash_1.refhash)("MLS 1.0 Proposal Reference", (0, exports.encodeAuthenticatedContent)(proposal), h);
+}
+//# sourceMappingURL=authenticatedContent.js.map

package/dist/src/authenticatedContent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticatedContent.js","sourceRoot":"","sources":["../../src/authenticatedContent.ts"],"names":[],"mappings":";;;AAoEA,kDAMC;AAED,kDAOC;AAED,0CAEC;AAvFD,mDAAqF;AACrF,mDAA+D;AAC/D,wCAA6C;AAC7C,mDAawB;AACxB,6CAAiF;AAuBpE,QAAA,0BAA0B,GAAkC,IAAA,8BAAiB,EACxF,CAAC,6BAAgB,EAAE,mCAAmB,EAAE,2CAA2B,CAAC,EACpE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAU,CAClD,CAAA;AAEY,QAAA,0BAA0B,GAAkC,IAAA,wBAAW,EAClF;IACE,6BAAgB;IAChB,IAAA,2BAAc,EAAC,mCAAmB,EAAE,CAAC,OAAO,EAAE,EAAE;QAC9C,OAAO,IAAA,uBAAU,EAAC,IAAA,2CAA2B,EAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IACpG,CAAC,CAAC;CACH,EACD,CAAC,UAAU,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;IAC5B,UAAU;IACV,GAAG,WAAW;CACf,CAAC,CACH,CAAA;AAOY,QAAA,6BAA6B,GAAqC,IAAA,8BAAiB,EAC9F,CAAC,sCAAsB,EAAE,2CAA2B,CAAC,EACrD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAU,CACvC,CAAA;AAED,SAAgB,mBAAmB,CACjC,aAAyB,EACzB,GAA4B,EAC5B,CAAO;IAEP,OAAO,CAAC,CAAC,GAAG,CAAC,aAAa,EAAE,IAAA,qCAA6B,EAAC,GAAG,CAAC,CAAC,CAAA;AACjE,CAAC;AAED,SAAgB,mBAAmB,CACjC,aAAyB,EACzB,GAA4B,EAC5B,GAAe,EACf,CAAO;IAEP,OAAO,CAAC,CAAC,SAAS,CAAC,aAAa,EAAE,GAAG,EAAE,IAAA,qCAA6B,EAAC,GAAG,CAAC,CAAC,CAAA;AAC5E,CAAC;AAED,SAAgB,eAAe,CAAC,QAA8B,EAAE,CAAO;IACrE,OAAO,IAAA,cAAO,EAAC,4BAA4B,EAAE,IAAA,kCAA0B,EAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;AACvF,CAAC"}

package/dist/src/authenticationService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticationService.d.ts","sourceRoot":"","sources":["../../src/authenticationService.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AAEzC,MAAM,WAAW,qBAAqB;IACpC,kBAAkB,CAAC,UAAU,EAAE,UAAU,EAAE,kBAAkB,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CAC7F;AAED,eAAO,MAAM,4BAA4B;oCACD,UAAU,uBAAuB,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC;CAGrG,CAAA"}

package/dist/src/capabilities.d.ts

@@ -0,0 +1,14 @@
+import { CredentialTypeName } from "./credentialType";
+import { CiphersuiteName } from "./crypto/ciphersuite";
+import { ProtocolVersionName } from "./protocolVersion";
+import { Encoder } from "./codec/tlsEncoder";
+import { Decoder } from "./codec/tlsDecoder";
+export type Capabilities = {
+    versions: ProtocolVersionName[];
+    ciphersuites: CiphersuiteName[];
+    extensions: number[];
+    proposals: number[];
+    credentials: CredentialTypeName[];
+};
+export declare const encodeCapabilities: Encoder<Capabilities>;
+export declare const decodeCapabilities: Decoder<Capabilities>;

package/dist/src/capabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.d.ts","sourceRoot":"","sources":["../../src/capabilities.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAA8C,MAAM,kBAAkB,CAAA;AACjG,OAAO,EAAE,eAAe,EAAwC,MAAM,sBAAsB,CAAA;AAC5F,OAAO,EAAgD,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AACrG,OAAO,EAAE,OAAO,EAAqB,MAAM,oBAAoB,CAAA;AAC/D,OAAO,EAAE,OAAO,EAAe,MAAM,oBAAoB,CAAA;AAIzD,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,EAAE,mBAAmB,EAAE,CAAA;IAC/B,YAAY,EAAE,eAAe,EAAE,CAAA;IAC/B,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,WAAW,EAAE,kBAAkB,EAAE,CAAA;CAClC,CAAA;AAED,eAAO,MAAM,kBAAkB,EAAE,OAAO,CAAC,YAAY,CASpD,CAAA;AAED,eAAO,MAAM,kBAAkB,EAAE,OAAO,CAAC,YAAY,CAepD,CAAA"}

package/dist/src/capabilities.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decodeCapabilities = exports.encodeCapabilities = void 0;
+const credentialType_1 = require("./credentialType");
+const ciphersuite_1 = require("./crypto/ciphersuite");
+const protocolVersion_1 = require("./protocolVersion");
+const tlsEncoder_1 = require("./codec/tlsEncoder");
+const tlsDecoder_1 = require("./codec/tlsDecoder");
+const variableLength_1 = require("./codec/variableLength");
+const number_1 = require("./codec/number");
+exports.encodeCapabilities = (0, tlsEncoder_1.contramapEncoders)([
+    (0, variableLength_1.encodeVarLenType)(protocolVersion_1.encodeProtocolVersion),
+    (0, variableLength_1.encodeVarLenType)(ciphersuite_1.encodeCiphersuite),
+    (0, variableLength_1.encodeVarLenType)(number_1.encodeUint16),
+    (0, variableLength_1.encodeVarLenType)(number_1.encodeUint16),
+    (0, variableLength_1.encodeVarLenType)(credentialType_1.encodeCredentialType),
+], (cap) => [cap.versions, cap.ciphersuites, cap.extensions, cap.proposals, cap.credentials]);
+exports.decodeCapabilities = (0, tlsDecoder_1.mapDecoders)([
+    (0, variableLength_1.decodeVarLenType)(protocolVersion_1.decodeProtocolVersion),
+    (0, variableLength_1.decodeVarLenType)(ciphersuite_1.decodeCiphersuite),
+    (0, variableLength_1.decodeVarLenType)(number_1.decodeUint16),
+    (0, variableLength_1.decodeVarLenType)(number_1.decodeUint16),
+    (0, variableLength_1.decodeVarLenType)(credentialType_1.decodeCredentialType),
+], (versions, ciphersuites, extensions, proposals, credentials) => ({
+    versions,
+    ciphersuites,
+    extensions,
+    proposals,
+    credentials,
+}));
+//# sourceMappingURL=capabilities.js.map

package/dist/src/capabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../../src/capabilities.ts"],"names":[],"mappings":";;;AAAA,qDAAiG;AACjG,sDAA4F;AAC5F,uDAAqG;AACrG,mDAA+D;AAC/D,mDAAyD;AACzD,2DAA2E;AAC3E,2CAA2D;AAU9C,QAAA,kBAAkB,GAA0B,IAAA,8BAAiB,EACxE;IACE,IAAA,iCAAgB,EAAC,uCAAqB,CAAC;IACvC,IAAA,iCAAgB,EAAC,+BAAiB,CAAC;IACnC,IAAA,iCAAgB,EAAC,qBAAY,CAAC;IAC9B,IAAA,iCAAgB,EAAC,qBAAY,CAAC;IAC9B,IAAA,iCAAgB,EAAC,qCAAoB,CAAC;CACvC,EACD,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,WAAW,CAAU,CACnG,CAAA;AAEY,QAAA,kBAAkB,GAA0B,IAAA,wBAAW,EAClE;IACE,IAAA,iCAAgB,EAAC,uCAAqB,CAAC;IACvC,IAAA,iCAAgB,EAAC,+BAAiB,CAAC;IACnC,IAAA,iCAAgB,EAAC,qBAAY,CAAC;IAC9B,IAAA,iCAAgB,EAAC,qBAAY,CAAC;IAC9B,IAAA,iCAAgB,EAAC,qCAAoB,CAAC;CACvC,EACD,CAAC,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;IAC/D,QAAQ;IACR,YAAY;IACZ,UAAU;IACV,SAAS;IACT,WAAW;CACZ,CAAC,CACH,CAAA"}

package/dist/src/clientConfig.d.ts

@@ -0,0 +1,21 @@
+import { AuthenticationService } from "./authenticationService";
+import { KeyPackageEqualityConfig } from "./keyPackageEqualityConfig";
+import { KeyRetentionConfig } from "./keyRetentionConfig";
+import { LifetimeConfig } from "./lifetimeConfig";
+import { PaddingConfig } from "./paddingConfig";
+export type ClientConfig = {
+    keyRetentionConfig: KeyRetentionConfig;
+    lifetimeConfig: LifetimeConfig;
+    keyPackageEqualityConfig: KeyPackageEqualityConfig;
+    paddingConfig: PaddingConfig;
+    authService: AuthenticationService;
+};
+export declare const defaultClientConfig: {
+    keyRetentionConfig: KeyRetentionConfig;
+    lifetimeConfig: LifetimeConfig;
+    keyPackageEqualityConfig: KeyPackageEqualityConfig;
+    paddingConfig: PaddingConfig;
+    authService: {
+        validateCredential(_credential: import("./credential").Credential, _signaturePublicKey: Uint8Array): Promise<boolean>;
+    };
+};

package/dist/src/clientConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clientConfig.d.ts","sourceRoot":"","sources":["../../src/clientConfig.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAgC,MAAM,yBAAyB,CAAA;AAC7F,OAAO,EAAmC,wBAAwB,EAAE,MAAM,4BAA4B,CAAA;AACtG,OAAO,EAA6B,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AACpF,OAAO,EAAyB,cAAc,EAAE,MAAM,kBAAkB,CAAA;AACxE,OAAO,EAAwB,aAAa,EAAE,MAAM,iBAAiB,CAAA;AAErE,MAAM,MAAM,YAAY,GAAG;IACzB,kBAAkB,EAAE,kBAAkB,CAAA;IACtC,cAAc,EAAE,cAAc,CAAA;IAC9B,wBAAwB,EAAE,wBAAwB,CAAA;IAClD,aAAa,EAAE,aAAa,CAAA;IAC5B,WAAW,EAAE,qBAAqB,CAAA;CACnC,CAAA;AAED,eAAO,MAAM,mBAAmB;;;;;;;;CAM/B,CAAA"}

package/dist/src/clientConfig.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.defaultClientConfig = void 0;
+const authenticationService_1 = require("./authenticationService");
+const keyPackageEqualityConfig_1 = require("./keyPackageEqualityConfig");
+const keyRetentionConfig_1 = require("./keyRetentionConfig");
+const lifetimeConfig_1 = require("./lifetimeConfig");
+const paddingConfig_1 = require("./paddingConfig");
+exports.defaultClientConfig = {
+    keyRetentionConfig: keyRetentionConfig_1.defaultKeyRetentionConfig,
+    lifetimeConfig: lifetimeConfig_1.defaultLifetimeConfig,
+    keyPackageEqualityConfig: keyPackageEqualityConfig_1.defaultKeyPackageEqualityConfig,
+    paddingConfig: paddingConfig_1.defaultPaddingConfig,
+    authService: authenticationService_1.defaultAuthenticationService,
+};
+//# sourceMappingURL=clientConfig.js.map

package/dist/src/clientConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clientConfig.js","sourceRoot":"","sources":["../../src/clientConfig.ts"],"names":[],"mappings":";;;AAAA,mEAA6F;AAC7F,yEAAsG;AACtG,6DAAoF;AACpF,qDAAwE;AACxE,mDAAqE;AAUxD,QAAA,mBAAmB,GAAG;IACjC,kBAAkB,EAAE,8CAAyB;IAC7C,cAAc,EAAE,sCAAqB;IACrC,wBAAwB,EAAE,0DAA+B;IACzD,aAAa,EAAE,oCAAoB;IACnC,WAAW,EAAE,oDAA4B;CAC1C,CAAA"}

package/dist/src/clientState.d.ts

@@ -0,0 +1,122 @@
+import { AuthenticatedContent } from "./authenticatedContent";
+import { CiphersuiteImpl } from "./crypto/ciphersuite";
+import { Hash } from "./crypto/hash";
+import { Extension } from "./extension";
+import { FramedContentCommit } from "./framedContent";
+import { GroupContext } from "./groupContext";
+import { KeyPackage, PrivateKeyPackage } from "./keyPackage";
+import { KeySchedule } from "./keySchedule";
+import { PreSharedKeyID } from "./presharedkey";
+import { RatchetTree } from "./ratchetTree";
+import { SecretTree } from "./secretTree";
+import { Welcome } from "./welcome";
+import { WireformatName } from "./wireformat";
+import { ProposalOrRef } from "./proposalOrRefType";
+import { Proposal, ProposalAdd, ProposalExternalInit, ProposalGroupContextExtensions, ProposalPSK, ProposalReinit, ProposalRemove, ProposalUpdate, Reinit } from "./proposal";
+import { PrivateKeyPath } from "./privateKeyPath";
+import { UnappliedProposals, ProposalWithSender } from "./unappliedProposals";
+import { PskIndex } from "./pskIndex";
+import { MlsError } from "./mlsError";
+import { Signature } from "./crypto/signature";
+import { LeafNodeCommit, LeafNodeUpdate } from "./leafNode";
+import { AuthenticationService } from "./authenticationService";
+import { LifetimeConfig } from "./lifetimeConfig";
+import { ClientConfig } from "./clientConfig";
+export type ClientState = {
+    groupContext: GroupContext;
+    keySchedule: KeySchedule;
+    secretTree: SecretTree;
+    ratchetTree: RatchetTree;
+    privatePath: PrivateKeyPath;
+    signaturePrivateKey: Uint8Array;
+    unappliedProposals: UnappliedProposals;
+    confirmationTag: Uint8Array;
+    historicalReceiverData: Map<bigint, EpochReceiverData>;
+    groupActiveState: GroupActiveState;
+    clientConfig: ClientConfig;
+};
+export type GroupActiveState = {
+    kind: "active";
+} | {
+    kind: "suspendedPendingReinit";
+    reinit: Reinit;
+} | {
+    kind: "removedFromGroup";
+};
+/**
+ * This type contains everything necessary to receieve application messages for an earlier epoch
+ */
+export type EpochReceiverData = {
+    resumptionPsk: Uint8Array;
+    secretTree: SecretTree;
+    ratchetTree: RatchetTree;
+    senderDataSecret: Uint8Array;
+    groupContext: GroupContext;
+};
+export declare function checkCanSendApplicationMessages(state: ClientState): void;
+export declare function checkCanSendHandshakeMessages(state: ClientState): void;
+export type Proposals = {
+    add: {
+        senderLeafIndex: number | undefined;
+        proposal: ProposalAdd;
+    }[];
+    update: {
+        senderLeafIndex: number | undefined;
+        proposal: ProposalUpdate;
+    }[];
+    remove: {
+        senderLeafIndex: number | undefined;
+        proposal: ProposalRemove;
+    }[];
+    psk: {
+        senderLeafIndex: number | undefined;
+        proposal: ProposalPSK;
+    }[];
+    reinit: {
+        senderLeafIndex: number | undefined;
+        proposal: ProposalReinit;
+    }[];
+    external_init: {
+        senderLeafIndex: number | undefined;
+        proposal: ProposalExternalInit;
+    }[];
+    group_context_extensions: {
+        senderLeafIndex: number | undefined;
+        proposal: ProposalGroupContextExtensions;
+    }[];
+};
+export declare function validateRatchetTree(tree: RatchetTree, groupContext: GroupContext, config: LifetimeConfig, authService: AuthenticationService, treeHash: Uint8Array, cs: CiphersuiteImpl): Promise<MlsError | undefined>;
+export declare function validateLeafNodeUpdateOrCommit(leafNode: LeafNodeCommit | LeafNodeUpdate, leafIndex: number, groupContext: GroupContext, tree: RatchetTree, authService: AuthenticationService, s: Signature): Promise<MlsError | undefined>;
+export declare function throwIfDefined(err: MlsError | undefined): void;
+export type ApplyProposalsResult = {
+    tree: RatchetTree;
+    pskSecret: Uint8Array;
+    pskIds: PreSharedKeyID[];
+    needsUpdatePath: boolean;
+    additionalResult: ApplyProposalsData;
+    selfRemoved: boolean;
+    allProposals: ProposalWithSender[];
+};
+export type ApplyProposalsData = {
+    kind: "memberCommit";
+    addedLeafNodes: [number, KeyPackage][];
+    extensions: Extension[];
+} | {
+    kind: "externalCommit";
+    externalInitSecret: Uint8Array;
+    newMemberLeafIndex: number;
+} | {
+    kind: "reinit";
+    reinit: Reinit;
+};
+export declare function applyProposals(state: ClientState, proposals: ProposalOrRef[], committerLeafIndex: number | undefined, pskSearch: PskIndex, sentByClient: boolean, cs: CiphersuiteImpl): Promise<ApplyProposalsResult>;
+export declare function makePskIndex(state: ClientState | undefined, externalPsks: Record<string, Uint8Array>): PskIndex;
+export declare function nextEpochContext(groupContext: GroupContext, wireformat: WireformatName, content: FramedContentCommit, signature: Uint8Array, updatedTreeHash: Uint8Array, confirmationTag: Uint8Array, h: Hash): Promise<GroupContext>;
+export declare function joinGroup(welcome: Welcome, keyPackage: KeyPackage, privateKeys: PrivateKeyPackage, pskSearch: PskIndex, cs: CiphersuiteImpl, ratchetTree?: RatchetTree, resumingFromState?: ClientState, clientConfig?: ClientConfig): Promise<ClientState>;
+export declare function createGroup(groupId: Uint8Array, keyPackage: KeyPackage, privateKeyPackage: PrivateKeyPackage, extensions: Extension[], cs: CiphersuiteImpl, clientConfig?: ClientConfig): Promise<ClientState>;
+export declare function exportSecret(publicKey: Uint8Array, cs: CiphersuiteImpl): Promise<{
+    enc: Uint8Array;
+    secret: Uint8Array;
+}>;
+export declare function processProposal(state: ClientState, content: AuthenticatedContent, proposal: Proposal, h: Hash): Promise<ClientState>;
+export declare function addHistoricalReceiverData(state: ClientState): Map<bigint, EpochReceiverData>;

package/dist/src/clientState.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clientState.d.ts","sourceRoot":"","sources":["../../src/clientState.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAmB,MAAM,wBAAwB,CAAA;AAC9E,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAA;AACpC,OAAO,EAAE,SAAS,EAAsD,MAAM,aAAa,CAAA;AAC3F,OAAO,EAAyB,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAE7C,OAAO,EAAE,UAAU,EAAqB,iBAAiB,EAAoB,MAAM,cAAc,CAAA;AACjG,OAAO,EAA4C,WAAW,EAAE,MAAM,eAAe,CAAA;AACrF,OAAO,EAAe,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAU5D,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAC3C,OAAO,EAAoB,UAAU,EAAE,MAAM,cAAc,CAAA;AAO3D,OAAO,EAAyC,OAAO,EAAE,MAAM,WAAW,CAAA;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EACL,QAAQ,EACR,WAAW,EACX,oBAAoB,EACpB,8BAA8B,EAC9B,WAAW,EACX,cAAc,EACd,cAAc,EACd,cAAc,EACd,MAAM,EAEP,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,cAAc,EAA0C,MAAM,kBAAkB,CAAA;AACzF,OAAO,EAAE,kBAAkB,EAAwB,kBAAkB,EAAE,MAAM,sBAAsB,CAAA;AACnG,OAAO,EAAuB,QAAQ,EAAE,MAAM,YAAY,CAAA;AAG1D,OAAO,EAAmF,QAAQ,EAAE,MAAM,YAAY,CAAA;AACtH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC9C,OAAO,EAEL,cAAc,EAEd,cAAc,EAGf,MAAM,YAAY,CAAA;AAKnB,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAA;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAEjD,OAAO,EAAE,YAAY,EAAuB,MAAM,gBAAgB,CAAA;AAIlE,MAAM,MAAM,WAAW,GAAG;IACxB,YAAY,EAAE,YAAY,CAAA;IAC1B,WAAW,EAAE,WAAW,CAAA;IACxB,UAAU,EAAE,UAAU,CAAA;IACtB,WAAW,EAAE,WAAW,CAAA;IACxB,WAAW,EAAE,cAAc,CAAA;IAC3B,mBAAmB,EAAE,UAAU,CAAA;IAC/B,kBAAkB,EAAE,kBAAkB,CAAA;IACtC,eAAe,EAAE,UAAU,CAAA;IAC3B,sBAAsB,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAA;IACtD,gBAAgB,EAAE,gBAAgB,CAAA;IAClC,YAAY,EAAE,YAAY,CAAA;CAC3B,CAAA;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,wBAAwB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAClD;IAAE,IAAI,EAAE,kBAAkB,CAAA;CAAE,CAAA;AAEhC;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B,aAAa,EAAE,UAAU,CAAA;IACzB,UAAU,EAAE,UAAU,CAAA;IACtB,WAAW,EAAE,WAAW,CAAA;IACxB,gBAAgB,EAAE,UAAU,CAAA;IAC5B,YAAY,EAAE,YAAY,CAAA;CAC3B,CAAA;AAED,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,CAKxE;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI,CAKtE;AAED,MAAM,MAAM,SAAS,GAAG;IACtB,GAAG,EAAE;QAAE,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,QAAQ,EAAE,WAAW,CAAA;KAAE,EAAE,CAAA;IACrE,MAAM,EAAE;QAAE,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,QAAQ,EAAE,cAAc,CAAA;KAAE,EAAE,CAAA;IAC3E,MAAM,EAAE;QAAE,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,QAAQ,EAAE,cAAc,CAAA;KAAE,EAAE,CAAA;IAC3E,GAAG,EAAE;QAAE,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,QAAQ,EAAE,WAAW,CAAA;KAAE,EAAE,CAAA;IACrE,MAAM,EAAE;QAAE,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,QAAQ,EAAE,cAAc,CAAA;KAAE,EAAE,CAAA;IAC3E,aAAa,EAAE;QAAE,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,QAAQ,EAAE,oBAAoB,CAAA;KAAE,EAAE,CAAA;IACxF,wBAAwB,EAAE;QAAE,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,QAAQ,EAAE,8BAA8B,CAAA;KAAE,EAAE,CAAA;CAC9G,CAAA;AAuJD,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,WAAW,EACjB,YAAY,EAAE,YAAY,EAC1B,MAAM,EAAE,cAAc,EACtB,WAAW,EAAE,qBAAqB,EAClC,QAAQ,EAAE,UAAU,EACpB,EAAE,EAAE,eAAe,GAClB,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CAuE/B;AAkBD,wBAAsB,8BAA8B,CAClD,QAAQ,EAAE,cAAc,GAAG,cAAc,EACzC,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,YAAY,EAC1B,IAAI,EAAE,WAAW,EACjB,WAAW,EAAE,qBAAqB,EAClC,CAAC,EAAE,SAAS,GACX,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC,CAQ/B;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,QAAQ,GAAG,SAAS,GAAG,IAAI,CAE9D;AA2ID,MAAM,MAAM,oBAAoB,GAAG;IACjC,IAAI,EAAE,WAAW,CAAA;IACjB,SAAS,EAAE,UAAU,CAAA;IACrB,MAAM,EAAE,cAAc,EAAE,CAAA;IACxB,eAAe,EAAE,OAAO,CAAA;IACxB,gBAAgB,EAAE,kBAAkB,CAAA;IACpC,WAAW,EAAE,OAAO,CAAA;IACpB,YAAY,EAAE,kBAAkB,EAAE,CAAA;CACnC,CAAA;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,cAAc,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC;IAAC,UAAU,EAAE,SAAS,EAAE,CAAA;CAAE,GACzF;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,kBAAkB,EAAE,UAAU,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAA;CAAE,GACtF;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAEtC,wBAAsB,cAAc,CAClC,KAAK,EAAE,WAAW,EAClB,SAAS,EAAE,aAAa,EAAE,EAC1B,kBAAkB,EAAE,MAAM,GAAG,SAAS,EACtC,SAAS,EAAE,QAAQ,EACnB,YAAY,EAAE,OAAO,EACrB,EAAE,EAAE,eAAe,GAClB,OAAO,CAAC,oBAAoB,CAAC,CAiI/B;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,WAAW,GAAG,SAAS,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,QAAQ,CAa/G;AAED,wBAAsB,gBAAgB,CACpC,YAAY,EAAE,YAAY,EAC1B,UAAU,EAAE,cAAc,EAC1B,OAAO,EAAE,mBAAmB,EAC5B,SAAS,EAAE,UAAU,EACrB,eAAe,EAAE,UAAU,EAC3B,eAAe,EAAE,UAAU,EAC3B,CAAC,EAAE,IAAI,GACN,OAAO,CAAC,YAAY,CAAC,CAUvB;AAED,wBAAsB,SAAS,CAC7B,OAAO,EAAE,OAAO,EAChB,UAAU,EAAE,UAAU,EACtB,WAAW,EAAE,iBAAiB,EAC9B,SAAS,EAAE,QAAQ,EACnB,EAAE,EAAE,eAAe,EACnB,WAAW,CAAC,EAAE,WAAW,EACzB,iBAAiB,CAAC,EAAE,WAAW,EAC/B,YAAY,GAAE,YAAkC,GAC/C,OAAO,CAAC,WAAW,CAAC,CAiItB;AAED,wBAAsB,WAAW,CAC/B,OAAO,EAAE,UAAU,EACnB,UAAU,EAAE,UAAU,EACtB,iBAAiB,EAAE,iBAAiB,EACpC,UAAU,EAAE,SAAS,EAAE,EACvB,EAAE,EAAE,eAAe,EACnB,YAAY,GAAE,YAAkC,GAC/C,OAAO,CAAC,WAAW,CAAC,CA2CtB;AAED,wBAAsB,YAAY,CAChC,SAAS,EAAE,UAAU,EACrB,EAAE,EAAE,eAAe,GAClB,OAAO,CAAC;IAAE,GAAG,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE,CAAC,CAOlD;AA4DD,wBAAsB,eAAe,CACnC,KAAK,EAAE,WAAW,EAClB,OAAO,EAAE,oBAAoB,EAC7B,QAAQ,EAAE,QAAQ,EAClB,CAAC,EAAE,IAAI,GACN,OAAO,CAAC,WAAW,CAAC,CAWtB;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,WAAW,GAAG,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAiB5F"}