ts-mls 1.1.0 → 1.2.0

package/dist/crypto/kdf.js

@@ -0,0 +1,16 @@
+import { encodeVarLenData } from "../codec/variableLength";
+import { encodeUint16, encodeUint32 } from "../codec/number";
+export function expandWithLabel(secret, label, context, length, kdf) {
+    return kdf.expand(secret, new Uint8Array([
+        ...encodeUint16(length),
+        ...encodeVarLenData(new TextEncoder().encode(`MLS 1.0 ${label}`)),
+        ...encodeVarLenData(context),
+    ]), length);
+}
+export async function deriveSecret(secret, label, kdf) {
+    return expandWithLabel(secret, label, new Uint8Array(), kdf.size, kdf);
+}
+export async function deriveTreeSecret(secret, label, generation, length, kdf) {
+    return expandWithLabel(secret, label, encodeUint32(generation), length, kdf);
+}
+//# sourceMappingURL=kdf.js.map

package/dist/crypto/kdf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kdf.js","sourceRoot":"","sources":["../../src/crypto/kdf.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAU5D,MAAM,UAAU,eAAe,CAC7B,MAAkB,EAClB,KAAa,EACb,OAAmB,EACnB,MAAc,EACd,GAAQ;IAER,OAAO,GAAG,CAAC,MAAM,CACf,MAAM,EACN,IAAI,UAAU,CAAC;QACb,GAAG,YAAY,CAAC,MAAM,CAAC;QACvB,GAAG,gBAAgB,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC;QACjE,GAAG,gBAAgB,CAAC,OAAO,CAAC;KAC7B,CAAC,EACF,MAAM,CACP,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAkB,EAAE,KAAa,EAAE,GAAQ;IAC5E,OAAO,eAAe,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,UAAU,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;AACxE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAkB,EAClB,KAAa,EACb,UAAkB,EAClB,MAAc,EACd,GAAQ;IAER,OAAO,eAAe,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,CAAC,UAAU,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,CAAA;AAC9E,CAAC"}

package/dist/crypto/kem.d.ts

@@ -0,0 +1 @@
+export type KemAlgorithm = "DHKEM-P256-HKDF-SHA256" | "DHKEM-X25519-HKDF-SHA256" | "DHKEM-X448-HKDF-SHA512" | "DHKEM-P521-HKDF-SHA512" | "DHKEM-P384-HKDF-SHA384" | "ML-KEM-512" | "ML-KEM-768" | "ML-KEM-1024" | "X-Wing";

package/dist/crypto/kem.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=kem.js.map

package/dist/crypto/kem.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kem.js","sourceRoot":"","sources":["../../src/crypto/kem.ts"],"names":[],"mappings":""}

package/dist/crypto/provider.d.ts

@@ -0,0 +1,4 @@
+import { Ciphersuite, CiphersuiteImpl } from "./ciphersuite.js";
+export interface CryptoProvider {
+    getCiphersuiteImpl(cs: Ciphersuite): Promise<CiphersuiteImpl>;
+}

package/dist/crypto/provider.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=provider.js.map

package/dist/crypto/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../src/crypto/provider.ts"],"names":[],"mappings":""}

package/dist/crypto/rng.d.ts

@@ -0,0 +1,3 @@
+export interface Rng {
+    randomBytes(n: number): Uint8Array;
+}

package/dist/crypto/rng.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=rng.js.map

package/dist/crypto/rng.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rng.js","sourceRoot":"","sources":["../../src/crypto/rng.ts"],"names":[],"mappings":""}

package/dist/crypto/signature.d.ts

@@ -0,0 +1,11 @@
+export interface Signature {
+    sign(signKey: Uint8Array, message: Uint8Array): Promise<Uint8Array>;
+    verify(publicKey: Uint8Array, message: Uint8Array, signature: Uint8Array): Promise<boolean>;
+    keygen(): Promise<{
+        publicKey: Uint8Array;
+        signKey: Uint8Array;
+    }>;
+}
+export type SignatureAlgorithm = "Ed25519" | "Ed448" | "P256" | "P384" | "P521" | "ML-DSA-87";
+export declare function signWithLabel(signKey: Uint8Array, label: string, content: Uint8Array, s: Signature): Promise<Uint8Array>;
+export declare function verifyWithLabel(publicKey: Uint8Array, label: string, content: Uint8Array, signature: Uint8Array, s: Signature): Promise<boolean>;

package/dist/crypto/signature.js

@@ -0,0 +1,9 @@
+import { encodeVarLenData } from "../codec/variableLength";
+import { concatUint8Arrays } from "../util/byteArray";
+export async function signWithLabel(signKey, label, content, s) {
+    return s.sign(signKey, concatUint8Arrays(encodeVarLenData(new TextEncoder().encode(`MLS 1.0 ${label}`)), encodeVarLenData(content)));
+}
+export async function verifyWithLabel(publicKey, label, content, signature, s) {
+    return s.verify(publicKey, concatUint8Arrays(encodeVarLenData(new TextEncoder().encode(`MLS 1.0 ${label}`)), encodeVarLenData(content)), signature);
+}
+//# sourceMappingURL=signature.js.map

package/dist/crypto/signature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.js","sourceRoot":"","sources":["../../src/crypto/signature.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAUrD,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAmB,EACnB,KAAa,EACb,OAAmB,EACnB,CAAY;IAEZ,OAAO,CAAC,CAAC,IAAI,CACX,OAAO,EACP,iBAAiB,CAAC,gBAAgB,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAC7G,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,SAAqB,EACrB,KAAa,EACb,OAAmB,EACnB,SAAqB,EACrB,CAAY;IAEZ,OAAO,CAAC,CAAC,MAAM,CACb,SAAS,EACT,iBAAiB,CAAC,gBAAgB,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,WAAW,KAAK,EAAE,CAAC,CAAC,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAC,EAC5G,SAAS,CACV,CAAA;AACH,CAAC"}

package/dist/customCredential.d.ts

@@ -0,0 +1,2 @@
+import { Credential } from "./credential.js";
+export declare function createCustomCredential(credentialId: number, data: Uint8Array): Credential;

package/dist/customCredential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"customCredential.js","sourceRoot":"","sources":["../src/customCredential.ts"],"names":[],"mappings":"AAGA,SAAS,0BAA0B,CAAC,YAAoB;IACtD,OAAO,YAAY,CAAC,QAAQ,EAAwB,CAAA;AACtD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,YAAoB,EAAE,IAAgB;IAC3E,MAAM,MAAM,GAAqB;QAC/B,cAAc,EAAE,0BAA0B,CAAC,YAAY,CAAC;QACxD,IAAI;KACL,CAAA;IACD,OAAO,MAA+B,CAAA;AACxC,CAAC"}

package/dist/defaultCapabilities.d.ts

@@ -0,0 +1,2 @@
+import { Capabilities } from "./capabilities.js";
+export declare function defaultCapabilities(): Capabilities;

package/dist/defaultCapabilities.js

@@ -0,0 +1,12 @@
+import { ciphersuites } from "./crypto/ciphersuite.js";
+import { greaseCapabilities, defaultGreaseConfig } from "./grease.js";
+export function defaultCapabilities() {
+    return greaseCapabilities(defaultGreaseConfig, {
+        versions: ["mls10"],
+        ciphersuites: Object.keys(ciphersuites),
+        extensions: [],
+        proposals: [],
+        credentials: ["basic", "x509"],
+    });
+}
+//# sourceMappingURL=defaultCapabilities.js.map

package/dist/defaultCapabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaultCapabilities.js","sourceRoot":"","sources":["../src/defaultCapabilities.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAmB,MAAM,yBAAyB,CAAA;AACvE,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAErE,MAAM,UAAU,mBAAmB;IACjC,OAAO,kBAAkB,CAAC,mBAAmB,EAAE;QAC7C,QAAQ,EAAE,CAAC,OAAO,CAAC;QACnB,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY,CAAsB;QAC5D,UAAU,EAAE,EAAE;QACd,SAAS,EAAE,EAAE;QACb,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC;KAC/B,CAAC,CAAA;AACJ,CAAC"}

package/dist/defaultExtensionType.d.ts

@@ -0,0 +1,13 @@
+import { Decoder } from "./codec/tlsDecoder.js";
+import { Encoder } from "./codec/tlsEncoder.js";
+export declare const defaultExtensionTypes: {
+    readonly application_id: 1;
+    readonly ratchet_tree: 2;
+    readonly required_capabilities: 3;
+    readonly external_pub: 4;
+    readonly external_senders: 5;
+};
+export type DefaultExtensionTypeName = keyof typeof defaultExtensionTypes;
+export type DefaultExtensionTypeValue = (typeof defaultExtensionTypes)[DefaultExtensionTypeName];
+export declare const encodeDefaultExtensionType: Encoder<DefaultExtensionTypeName>;
+export declare const decodeDefaultExtensionType: Decoder<DefaultExtensionTypeName>;

package/dist/defaultExtensionType.js

@@ -0,0 +1,14 @@
+import { decodeUint16, encodeUint16 } from "./codec/number.js";
+import { mapDecoderOption } from "./codec/tlsDecoder.js";
+import { contramapEncoder } from "./codec/tlsEncoder.js";
+import { enumNumberToKey } from "./util/enumHelpers.js";
+export const defaultExtensionTypes = {
+    application_id: 1,
+    ratchet_tree: 2,
+    required_capabilities: 3,
+    external_pub: 4,
+    external_senders: 5,
+};
+export const encodeDefaultExtensionType = contramapEncoder(encodeUint16, (n) => defaultExtensionTypes[n]);
+export const decodeDefaultExtensionType = mapDecoderOption(decodeUint16, enumNumberToKey(defaultExtensionTypes));
+//# sourceMappingURL=defaultExtensionType.js.map

package/dist/defaultExtensionType.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaultExtensionType.js","sourceRoot":"","sources":["../src/defaultExtensionType.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAC9D,OAAO,EAAW,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AACjE,OAAO,EAAE,gBAAgB,EAAW,MAAM,uBAAuB,CAAA;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAEvD,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,cAAc,EAAE,CAAC;IACjB,YAAY,EAAE,CAAC;IACf,qBAAqB,EAAE,CAAC;IACxB,YAAY,EAAE,CAAC;IACf,gBAAgB,EAAE,CAAC;CACX,CAAA;AAKV,MAAM,CAAC,MAAM,0BAA0B,GAAsC,gBAAgB,CAC3F,YAAY,EACZ,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAChC,CAAA;AAED,MAAM,CAAC,MAAM,0BAA0B,GAAsC,gBAAgB,CAC3F,YAAY,EACZ,eAAe,CAAC,qBAAqB,CAAC,CACvC,CAAA"}

package/dist/defaultProposalType.d.ts

@@ -0,0 +1,15 @@
+import { Decoder } from "./codec/tlsDecoder.js";
+import { Encoder } from "./codec/tlsEncoder.js";
+export declare const defaultProposalTypes: {
+    readonly add: 1;
+    readonly update: 2;
+    readonly remove: 3;
+    readonly psk: 4;
+    readonly reinit: 5;
+    readonly external_init: 6;
+    readonly group_context_extensions: 7;
+};
+export type DefaultProposalTypeName = keyof typeof defaultProposalTypes;
+export type DefaultProposalTypeValue = (typeof defaultProposalTypes)[DefaultProposalTypeName];
+export declare const encodeDefaultProposalType: Encoder<DefaultProposalTypeName>;
+export declare const decodeDefaultProposalType: Decoder<DefaultProposalTypeName>;

package/dist/defaultProposalType.js

@@ -0,0 +1,16 @@
+import { decodeUint16, encodeUint16 } from "./codec/number.js";
+import { mapDecoderOption } from "./codec/tlsDecoder.js";
+import { contramapEncoder } from "./codec/tlsEncoder.js";
+import { enumNumberToKey } from "./util/enumHelpers.js";
+export const defaultProposalTypes = {
+    add: 1,
+    update: 2,
+    remove: 3,
+    psk: 4,
+    reinit: 5,
+    external_init: 6,
+    group_context_extensions: 7,
+};
+export const encodeDefaultProposalType = contramapEncoder(encodeUint16, (n) => defaultProposalTypes[n]);
+export const decodeDefaultProposalType = mapDecoderOption(decodeUint16, enumNumberToKey(defaultProposalTypes));
+//# sourceMappingURL=defaultProposalType.js.map

package/dist/defaultProposalType.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaultProposalType.js","sourceRoot":"","sources":["../src/defaultProposalType.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAC9D,OAAO,EAAW,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AACjE,OAAO,EAAE,gBAAgB,EAAW,MAAM,uBAAuB,CAAA;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAEvD,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,GAAG,EAAE,CAAC;IACN,MAAM,EAAE,CAAC;IACT,MAAM,EAAE,CAAC;IACT,GAAG,EAAE,CAAC;IACN,MAAM,EAAE,CAAC;IACT,aAAa,EAAE,CAAC;IAChB,wBAAwB,EAAE,CAAC;CACnB,CAAA;AAKV,MAAM,CAAC,MAAM,yBAAyB,GAAqC,gBAAgB,CACzF,YAAY,EACZ,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAC/B,CAAA;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAqC,gBAAgB,CACzF,YAAY,EACZ,eAAe,CAAC,oBAAoB,CAAC,CACtC,CAAA"}

package/dist/extension.d.ts

@@ -0,0 +1,18 @@
+import { Decoder } from "./codec/tlsDecoder.js";
+import { Encoder } from "./codec/tlsEncoder.js";
+import { DefaultExtensionTypeName } from "./defaultExtensionType.js";
+export type ExtensionType = DefaultExtensionTypeName | number;
+export declare const encodeExtensionType: Encoder<ExtensionType>;
+export declare const decodeExtensionType: Decoder<ExtensionType>;
+export interface Extension {
+    extensionType: ExtensionType;
+    extensionData: Uint8Array;
+}
+export declare const encodeExtension: Encoder<Extension>;
+export declare const decodeExtension: Decoder<Extension>;
+export declare function extensionEqual(a: Extension, b: Extension): boolean;
+export declare function extensionsEqual(a: Extension[], b: Extension[]): boolean;
+export declare function extensionsSupportedByCapabilities(requiredExtensions: Extension[], capabilities: {
+    extensions: number[];
+}): boolean;
+export declare function extensionTypeToNumber(t: ExtensionType): number;

package/dist/extension.js

@@ -0,0 +1,30 @@
+import { decodeUint16, encodeUint16 } from "./codec/number.js";
+import { mapDecoders, orDecoder } from "./codec/tlsDecoder.js";
+import { contramapEncoders } from "./codec/tlsEncoder.js";
+import { decodeVarLenData, encodeVarLenData } from "./codec/variableLength.js";
+import { decodeDefaultExtensionType, encodeDefaultExtensionType, defaultExtensionTypes, } from "./defaultExtensionType.js";
+import { constantTimeEqual } from "./util/constantTimeCompare.js";
+export const encodeExtensionType = (t) => typeof t === "number" ? encodeUint16(t) : encodeDefaultExtensionType(t);
+export const decodeExtensionType = orDecoder(decodeDefaultExtensionType, decodeUint16);
+export const encodeExtension = contramapEncoders([encodeExtensionType, encodeVarLenData], (e) => [e.extensionType, e.extensionData]);
+export const decodeExtension = mapDecoders([decodeExtensionType, decodeVarLenData], (extensionType, extensionData) => ({ extensionType, extensionData }));
+export function extensionEqual(a, b) {
+    return a.extensionType === b.extensionType && constantTimeEqual(a.extensionData, b.extensionData);
+}
+export function extensionsEqual(a, b) {
+    if (a.length !== b.length)
+        return false;
+    return a.every((val, i) => extensionEqual(val, b[i]));
+}
+export function extensionsSupportedByCapabilities(requiredExtensions, capabilities) {
+    return requiredExtensions
+        .filter((ex) => !isDefaultExtension(ex.extensionType))
+        .every((ex) => capabilities.extensions.includes(extensionTypeToNumber(ex.extensionType)));
+}
+function isDefaultExtension(t) {
+    return typeof t !== "number";
+}
+export function extensionTypeToNumber(t) {
+    return typeof t === "number" ? t : defaultExtensionTypes[t];
+}
+//# sourceMappingURL=extension.js.map

package/dist/extension.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension.js","sourceRoot":"","sources":["../src/extension.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAC9D,OAAO,EAAW,WAAW,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AACvE,OAAO,EAAE,iBAAiB,EAAW,MAAM,uBAAuB,CAAA;AAClE,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AAC9E,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,EAE1B,qBAAqB,GACtB,MAAM,2BAA2B,CAAA;AAClC,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAA;AAIjE,MAAM,CAAC,MAAM,mBAAmB,GAA2B,CAAC,CAAC,EAAE,EAAE,CAC/D,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,CAAA;AAEzE,MAAM,CAAC,MAAM,mBAAmB,GAA2B,SAAS,CAAC,0BAA0B,EAAE,YAAY,CAAC,CAAA;AAO9G,MAAM,CAAC,MAAM,eAAe,GAAuB,iBAAiB,CAClE,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,EACvC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,aAAa,CAAU,CACnD,CAAA;AAED,MAAM,CAAC,MAAM,eAAe,GAAuB,WAAW,CAC5D,CAAC,mBAAmB,EAAE,gBAAgB,CAAC,EACvC,CAAC,aAAa,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,aAAa,EAAE,CAAC,CACrE,CAAA;AAED,MAAM,UAAU,cAAc,CAAC,CAAY,EAAE,CAAY;IACvD,OAAO,CAAC,CAAC,aAAa,KAAK,CAAC,CAAC,aAAa,IAAI,iBAAiB,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,aAAa,CAAC,CAAA;AACnG,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,CAAc,EAAE,CAAc;IAC5D,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAA;IACvC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC,CAAA;AACxD,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,kBAA+B,EAC/B,YAAsC;IAEtC,OAAO,kBAAkB;SACtB,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;SACrD,KAAK,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,UAAU,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,CAAA;AAC7F,CAAC;AAED,SAAS,kBAAkB,CAAC,CAAgB;IAC1C,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAA;AAC9B,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,CAAgB;IACpD,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;AAC7D,CAAC"}

package/dist/externalProposal.d.ts

@@ -0,0 +1,7 @@
+import { CiphersuiteImpl } from "./crypto/ciphersuite.js";
+import { GroupInfo } from "./groupInfo.js";
+import { KeyPackage, PrivateKeyPackage } from "./keyPackage.js";
+import { MLSMessage } from "./message.js";
+import { Proposal } from "./proposal.js";
+export declare function proposeAddExternal(groupInfo: GroupInfo, keyPackage: KeyPackage, privateKeyPackage: PrivateKeyPackage, cs: CiphersuiteImpl, authenticatedData?: Uint8Array): Promise<MLSMessage>;
+export declare function proposeExternal(groupInfo: GroupInfo, proposal: Proposal, signaturePublicKey: Uint8Array, signaturePrivateKey: Uint8Array, cs: CiphersuiteImpl, authenticatedData?: Uint8Array): Promise<MLSMessage>;

package/dist/externalProposal.js

@@ -0,0 +1,41 @@
+import { extensionsSupportedByCapabilities } from "./extension.js";
+import { decodeExternalSender } from "./externalSender.js";
+import { protectExternalProposalPublic } from "./messageProtectionPublic.js";
+import { UsageError, ValidationError } from "./mlsError.js";
+import { constantTimeEqual } from "./util/constantTimeCompare.js";
+export async function proposeAddExternal(groupInfo, keyPackage, privateKeyPackage, cs, authenticatedData = new Uint8Array()) {
+    const allExtensionsSupported = extensionsSupportedByCapabilities(groupInfo.groupContext.extensions, keyPackage.leafNode.capabilities);
+    if (!allExtensionsSupported)
+        throw new UsageError("client does not support every extension in the GroupContext");
+    const proposal = {
+        proposalType: "add",
+        add: {
+            keyPackage,
+        },
+    };
+    const result = await protectExternalProposalPublic(privateKeyPackage.signaturePrivateKey, groupInfo.groupContext, authenticatedData, proposal, { senderType: "new_member_proposal" }, cs);
+    return {
+        wireformat: "mls_public_message",
+        version: groupInfo.groupContext.version,
+        publicMessage: result.publicMessage,
+    };
+}
+export async function proposeExternal(groupInfo, proposal, signaturePublicKey, signaturePrivateKey, cs, authenticatedData = new Uint8Array()) {
+    const externalSenderExtensionIndex = groupInfo.groupContext.extensions.findIndex((ex) => {
+        if (ex.extensionType !== "external_senders")
+            return false;
+        const decoded = decodeExternalSender(ex.extensionData, 0);
+        if (decoded === undefined)
+            throw new ValidationError("Could not decode external_sender extension");
+        return constantTimeEqual(decoded[0].signaturePublicKey, signaturePublicKey);
+    });
+    if (externalSenderExtensionIndex === -1)
+        throw new ValidationError("Could not find external_sender extension in groupContext.extensions");
+    const result = await protectExternalProposalPublic(signaturePrivateKey, groupInfo.groupContext, authenticatedData, proposal, { senderType: "external", senderIndex: externalSenderExtensionIndex }, cs);
+    return {
+        wireformat: "mls_public_message",
+        version: groupInfo.groupContext.version,
+        publicMessage: result.publicMessage,
+    };
+}
+//# sourceMappingURL=externalProposal.js.map

package/dist/externalProposal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"externalProposal.js","sourceRoot":"","sources":["../src/externalProposal.ts"],"names":[],"mappings":"AACA,OAAO,EAAa,iCAAiC,EAAE,MAAM,gBAAgB,CAAA;AAC7E,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AAI1D,OAAO,EAAE,6BAA6B,EAAE,MAAM,8BAA8B,CAAA;AAC5E,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAE3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAA;AAEjE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,SAAoB,EACpB,UAAsB,EACtB,iBAAoC,EACpC,EAAmB,EACnB,oBAAgC,IAAI,UAAU,EAAE;IAEhD,MAAM,sBAAsB,GAAG,iCAAiC,CAC9D,SAAS,CAAC,YAAY,CAAC,UAAU,EACjC,UAAU,CAAC,QAAQ,CAAC,YAAY,CACjC,CAAA;IACD,IAAI,CAAC,sBAAsB;QAAE,MAAM,IAAI,UAAU,CAAC,6DAA6D,CAAC,CAAA;IAEhH,MAAM,QAAQ,GAAa;QACzB,YAAY,EAAE,KAAK;QACnB,GAAG,EAAE;YACH,UAAU;SACX;KACF,CAAA;IAED,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAChD,iBAAiB,CAAC,mBAAmB,EACrC,SAAS,CAAC,YAAY,EACtB,iBAAiB,EACjB,QAAQ,EACR,EAAE,UAAU,EAAE,qBAAqB,EAAE,EACrC,EAAE,CACH,CAAA;IAED,OAAO;QACL,UAAU,EAAE,oBAAoB;QAChC,OAAO,EAAE,SAAS,CAAC,YAAY,CAAC,OAAO;QACvC,aAAa,EAAE,MAAM,CAAC,aAAa;KACpC,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,SAAoB,EACpB,QAAkB,EAClB,kBAA8B,EAC9B,mBAA+B,EAC/B,EAAmB,EACnB,oBAAgC,IAAI,UAAU,EAAE;IAEhD,MAAM,4BAA4B,GAAG,SAAS,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,EAAa,EAAW,EAAE;QAC1G,IAAI,EAAE,CAAC,aAAa,KAAK,kBAAkB;YAAE,OAAO,KAAK,CAAA;QACzD,MAAM,OAAO,GAAG,oBAAoB,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC,CAAA;QAEzD,IAAI,OAAO,KAAK,SAAS;YAAE,MAAM,IAAI,eAAe,CAAC,4CAA4C,CAAC,CAAA;QAElG,OAAO,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,CAAA;IAC7E,CAAC,CAAC,CAAA;IAEF,IAAI,4BAA4B,KAAK,CAAC,CAAC;QACrC,MAAM,IAAI,eAAe,CAAC,qEAAqE,CAAC,CAAA;IAElG,MAAM,MAAM,GAAG,MAAM,6BAA6B,CAChD,mBAAmB,EACnB,SAAS,CAAC,YAAY,EACtB,iBAAiB,EACjB,QAAQ,EACR,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,4BAA4B,EAAE,EACrE,EAAE,CACH,CAAA;IAED,OAAO;QACL,UAAU,EAAE,oBAAoB;QAChC,OAAO,EAAE,SAAS,CAAC,YAAY,CAAC,OAAO;QACvC,aAAa,EAAE,MAAM,CAAC,aAAa;KACpC,CAAA;AACH,CAAC"}

package/dist/externalSender.d.ts

@@ -0,0 +1,9 @@
+import { Decoder } from "./codec/tlsDecoder.js";
+import { Encoder } from "./codec/tlsEncoder.js";
+import { Credential } from "./credential.js";
+export interface ExternalSender {
+    signaturePublicKey: Uint8Array;
+    credential: Credential;
+}
+export declare const encodeExternalSender: Encoder<ExternalSender>;
+export declare const decodeExternalSender: Decoder<ExternalSender>;

package/dist/externalSender.js

@@ -0,0 +1,7 @@
+import { mapDecoders } from "./codec/tlsDecoder.js";
+import { contramapEncoders } from "./codec/tlsEncoder.js";
+import { decodeVarLenData, encodeVarLenData } from "./codec/variableLength.js";
+import { decodeCredential, encodeCredential } from "./credential.js";
+export const encodeExternalSender = contramapEncoders([encodeVarLenData, encodeCredential], (e) => [e.signaturePublicKey, e.credential]);
+export const decodeExternalSender = mapDecoders([decodeVarLenData, decodeCredential], (signaturePublicKey, credential) => ({ signaturePublicKey, credential }));
+//# sourceMappingURL=externalSender.js.map

package/dist/externalSender.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"externalSender.js","sourceRoot":"","sources":["../src/externalSender.ts"],"names":[],"mappings":"AAAA,OAAO,EAAW,WAAW,EAAE,MAAM,uBAAuB,CAAA;AAC5D,OAAO,EAAE,iBAAiB,EAAW,MAAM,uBAAuB,CAAA;AAClE,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AAC9E,OAAO,EAAc,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAOhF,MAAM,CAAC,MAAM,oBAAoB,GAA4B,iBAAiB,CAC5E,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,EACpC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC,UAAU,CAAU,CACrD,CAAA;AAED,MAAM,CAAC,MAAM,oBAAoB,GAA4B,WAAW,CACtE,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,EACpC,CAAC,kBAAkB,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,EAAE,kBAAkB,EAAE,UAAU,EAAE,CAAC,CACzE,CAAA"}

package/dist/framedContent.d.ts

@@ -0,0 +1,113 @@
+import { Decoder } from "./codec/tlsDecoder.js";
+import { Encoder } from "./codec/tlsEncoder.js";
+import { Commit } from "./commit.js";
+import { ContentTypeName } from "./contentType.js";
+import { CiphersuiteImpl } from "./crypto/ciphersuite.js";
+import { Hash } from "./crypto/hash.js";
+import { Signature } from "./crypto/signature.js";
+import { GroupContext } from "./groupContext.js";
+import { WireformatName } from "./wireformat.js";
+import { Proposal } from "./proposal.js";
+import { ProtocolVersionName } from "./protocolVersion.js";
+import { Sender, SenderExternal, SenderMember, SenderNewMemberCommit, SenderNewMemberProposal } from "./sender.js";
+export type FramedContentInfo = FramedContentApplicationData | FramedContentProposalData | FramedContentCommitData;
+export interface FramedContentApplicationData {
+    contentType: "application";
+    applicationData: Uint8Array;
+}
+export interface FramedContentProposalData {
+    contentType: "proposal";
+    proposal: Proposal;
+}
+export interface FramedContentCommitData {
+    contentType: "commit";
+    commit: Commit;
+}
+export declare const encodeFramedContentApplicationData: Encoder<FramedContentApplicationData>;
+export declare const encodeFramedContentProposalData: Encoder<FramedContentProposalData>;
+export declare const encodeFramedContentCommitData: Encoder<FramedContentCommitData>;
+export declare const encodeFramedContentInfo: Encoder<FramedContentInfo>;
+export declare const decodeFramedContentApplicationData: Decoder<FramedContentApplicationData>;
+export declare const decodeFramedContentProposalData: Decoder<FramedContentProposalData>;
+export declare const decodeFramedContentCommitData: Decoder<FramedContentCommitData>;
+export declare const decodeFramedContentInfo: Decoder<FramedContentInfo>;
+export declare function toTbs(content: FramedContent, wireformat: WireformatName, context: GroupContext): FramedContentTBS;
+export type FramedContent = FramedContentData & FramedContentInfo;
+export interface FramedContentData {
+    groupId: Uint8Array;
+    epoch: bigint;
+    sender: Sender;
+    authenticatedData: Uint8Array;
+}
+export type FramedContentMember = FramedContent & {
+    sender: SenderMember;
+};
+export type FramedContentNewMemberCommit = FramedContent & {
+    sender: SenderNewMemberCommit;
+};
+export type FramedContentExternal = FramedContent & {
+    sender: SenderExternal;
+};
+export type FramedContentNewMemberProposal = FramedContent & {
+    sender: SenderNewMemberProposal;
+};
+export type FramedContentCommit = FramedContentData & FramedContentCommitData;
+export type FramedContentApplicationOrProposal = FramedContentData & (FramedContentApplicationData | FramedContentProposalData);
+export declare const encodeFramedContent: Encoder<FramedContent>;
+export declare const decodeFramedContent: Decoder<FramedContent>;
+type SenderInfo = SenderInfoMember | SenderInfoNewMemberCommit | SenderInfoExternal | SenderInfoNewMemberProposal;
+type SenderInfoMember = {
+    senderType: "member";
+    context: GroupContext;
+};
+type SenderInfoNewMemberCommit = {
+    senderType: "new_member_commit";
+    context: GroupContext;
+};
+type SenderInfoExternal = {
+    senderType: "external";
+};
+type SenderInfoNewMemberProposal = {
+    senderType: "new_member_proposal";
+};
+export declare const encodeSenderInfo: Encoder<SenderInfo>;
+export type FramedContentTBS = {
+    protocolVersion: ProtocolVersionName;
+    wireformat: WireformatName;
+    content: FramedContent;
+} & SenderInfo;
+export type FramedContentTBSCommit = FramedContentTBS & {
+    content: FramedContentCommit;
+};
+export type FramedContentTBSApplicationOrProposal = FramedContentTBS & {
+    content: FramedContentApplicationOrProposal;
+};
+export type FramedContentTBSExternal = FramedContentTBS & (SenderInfoExternal | SenderInfoNewMemberCommit | SenderInfoNewMemberProposal);
+export declare const encodeFramedContentTBS: Encoder<FramedContentTBS>;
+export type FramedContentAuthData = FramedContentAuthDataCommit | FramedContentAuthDataApplicationOrProposal;
+export type FramedContentAuthDataCommit = {
+    signature: Uint8Array;
+} & FramedContentAuthDataContentCommit;
+export type FramedContentAuthDataApplicationOrProposal = {
+    signature: Uint8Array;
+} & FramedContentAuthDataContentApplicationOrProposal;
+type FramedContentAuthDataContentCommit = {
+    contentType: "commit";
+    confirmationTag: Uint8Array;
+};
+type FramedContentAuthDataContentApplicationOrProposal = {
+    contentType: Exclude<ContentTypeName, "commit">;
+};
+export declare const encodeFramedContentAuthData: Encoder<FramedContentAuthData>;
+export declare const decodeFramedContentAuthDataCommit: Decoder<FramedContentAuthDataContentCommit>;
+export declare function decodeFramedContentAuthData(contentType: ContentTypeName): Decoder<FramedContentAuthData>;
+export declare function verifyFramedContentSignature(signKey: Uint8Array, wireformat: WireformatName, content: FramedContent, auth: FramedContentAuthData, context: GroupContext, s: Signature): Promise<boolean>;
+export declare function signFramedContentTBS(signKey: Uint8Array, tbs: FramedContentTBS, s: Signature): Promise<Uint8Array>;
+export declare function signFramedContentApplicationOrProposal(signKey: Uint8Array, tbs: FramedContentTBSApplicationOrProposal, cs: CiphersuiteImpl): Promise<FramedContentAuthDataApplicationOrProposal>;
+export declare function createConfirmationTag(confirmationKey: Uint8Array, confirmedTranscriptHash: Uint8Array, h: Hash): Promise<Uint8Array>;
+export declare function verifyConfirmationTag(confirmationKey: Uint8Array, tag: Uint8Array, confirmedTranscriptHash: Uint8Array, h: Hash): Promise<boolean>;
+export declare function createContentCommitSignature(groupContext: GroupContext, wireformat: WireformatName, c: Commit, sender: Sender, authenticatedData: Uint8Array, signKey: Uint8Array, s: Signature): Promise<{
+    framedContent: FramedContentCommit;
+    signature: Uint8Array;
+}>;
+export {};

package/dist/framedContent.js

@@ -0,0 +1,131 @@
+import { decodeUint64, encodeUint64 } from "./codec/number.js";
+import { flatMapDecoder, mapDecoder, mapDecoders } from "./codec/tlsDecoder.js";
+import { contramapEncoder, contramapEncoders } from "./codec/tlsEncoder.js";
+import { decodeVarLenData, encodeVarLenData } from "./codec/variableLength.js";
+import { decodeCommit, encodeCommit } from "./commit.js";
+import { decodeContentType, encodeContentType } from "./contentType.js";
+import { signWithLabel, verifyWithLabel } from "./crypto/signature.js";
+import { encodeGroupContext } from "./groupContext.js";
+import { encodeWireformat } from "./wireformat.js";
+import { decodeProposal, encodeProposal } from "./proposal.js";
+import { encodeProtocolVersion } from "./protocolVersion.js";
+import { decodeSender, encodeSender, } from "./sender.js";
+export const encodeFramedContentApplicationData = contramapEncoders([encodeContentType, encodeVarLenData], (f) => [f.contentType, f.applicationData]);
+export const encodeFramedContentProposalData = contramapEncoders([encodeContentType, encodeProposal], (f) => [f.contentType, f.proposal]);
+export const encodeFramedContentCommitData = contramapEncoders([encodeContentType, encodeCommit], (f) => [f.contentType, f.commit]);
+export const encodeFramedContentInfo = (fc) => {
+    switch (fc.contentType) {
+        case "application":
+            return encodeFramedContentApplicationData(fc);
+        case "proposal":
+            return encodeFramedContentProposalData(fc);
+        case "commit":
+            return encodeFramedContentCommitData(fc);
+    }
+};
+export const decodeFramedContentApplicationData = mapDecoder(decodeVarLenData, (applicationData) => ({ contentType: "application", applicationData }));
+export const decodeFramedContentProposalData = mapDecoder(decodeProposal, (proposal) => ({ contentType: "proposal", proposal }));
+export const decodeFramedContentCommitData = mapDecoder(decodeCommit, (commit) => ({
+    contentType: "commit",
+    commit,
+}));
+export const decodeFramedContentInfo = flatMapDecoder(decodeContentType, (contentType) => {
+    switch (contentType) {
+        case "application":
+            return decodeFramedContentApplicationData;
+        case "proposal":
+            return decodeFramedContentProposalData;
+        case "commit":
+            return decodeFramedContentCommitData;
+    }
+});
+export function toTbs(content, wireformat, context) {
+    return { protocolVersion: context.version, wireformat, content, senderType: content.sender.senderType, context };
+}
+export const encodeFramedContent = contramapEncoders([encodeVarLenData, encodeUint64, encodeSender, encodeVarLenData, encodeFramedContentInfo], (fc) => [fc.groupId, fc.epoch, fc.sender, fc.authenticatedData, fc]);
+export const decodeFramedContent = mapDecoders([decodeVarLenData, decodeUint64, decodeSender, decodeVarLenData, decodeFramedContentInfo], (groupId, epoch, sender, authenticatedData, info) => ({
+    groupId,
+    epoch,
+    sender,
+    authenticatedData,
+    ...info,
+}));
+export const encodeSenderInfo = (info) => {
+    switch (info.senderType) {
+        case "member":
+        case "new_member_commit":
+            return encodeGroupContext(info.context);
+        case "external":
+        case "new_member_proposal":
+            return new Uint8Array();
+    }
+};
+export const encodeFramedContentTBS = contramapEncoders([encodeProtocolVersion, encodeWireformat, encodeFramedContent, encodeSenderInfo], (f) => [f.protocolVersion, f.wireformat, f.content, f]);
+const encodeFramedContentAuthDataContent = (authData) => {
+    switch (authData.contentType) {
+        case "commit":
+            return encodeFramedContentAuthDataCommit(authData);
+        case "application":
+        case "proposal":
+            return new Uint8Array();
+    }
+};
+const encodeFramedContentAuthDataCommit = contramapEncoder(encodeVarLenData, (data) => data.confirmationTag);
+export const encodeFramedContentAuthData = contramapEncoders([encodeVarLenData, encodeFramedContentAuthDataContent], (d) => [d.signature, d]);
+export const decodeFramedContentAuthDataCommit = mapDecoder(decodeVarLenData, (confirmationTag) => ({
+    contentType: "commit",
+    confirmationTag,
+}));
+export function decodeFramedContentAuthData(contentType) {
+    switch (contentType) {
+        case "commit":
+            return mapDecoders([decodeVarLenData, decodeFramedContentAuthDataCommit], (signature, commitData) => ({
+                signature,
+                ...commitData,
+            }));
+        case "application":
+        case "proposal":
+            return mapDecoder(decodeVarLenData, (signature) => ({
+                signature,
+                contentType,
+            }));
+    }
+}
+export async function verifyFramedContentSignature(signKey, wireformat, content, auth, context, s) {
+    return verifyWithLabel(signKey, "FramedContentTBS", encodeFramedContentTBS(toTbs(content, wireformat, context)), auth.signature, s);
+}
+export function signFramedContentTBS(signKey, tbs, s) {
+    return signWithLabel(signKey, "FramedContentTBS", encodeFramedContentTBS(tbs), s);
+}
+export async function signFramedContentApplicationOrProposal(signKey, tbs, cs) {
+    const signature = await signFramedContentTBS(signKey, tbs, cs.signature);
+    return {
+        contentType: tbs.content.contentType,
+        signature,
+    };
+}
+export function createConfirmationTag(confirmationKey, confirmedTranscriptHash, h) {
+    return h.mac(confirmationKey, confirmedTranscriptHash);
+}
+export function verifyConfirmationTag(confirmationKey, tag, confirmedTranscriptHash, h) {
+    return h.verifyMac(confirmationKey, tag, confirmedTranscriptHash);
+}
+export async function createContentCommitSignature(groupContext, wireformat, c, sender, authenticatedData, signKey, s) {
+    const tbs = {
+        protocolVersion: groupContext.version,
+        wireformat,
+        content: {
+            contentType: "commit",
+            commit: c,
+            groupId: groupContext.groupId,
+            epoch: groupContext.epoch,
+            sender,
+            authenticatedData,
+        },
+        senderType: "member",
+        context: groupContext,
+    };
+    const signature = await signFramedContentTBS(signKey, tbs, s);
+    return { framedContent: tbs.content, signature };
+}
+//# sourceMappingURL=framedContent.js.map

package/dist/framedContent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"framedContent.js","sourceRoot":"","sources":["../src/framedContent.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAC9D,OAAO,EAAW,cAAc,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACxF,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAW,MAAM,uBAAuB,CAAA;AACpF,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AAC9E,OAAO,EAAU,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAChE,OAAO,EAAmB,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAGxF,OAAO,EAAa,aAAa,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACjF,OAAO,EAAE,kBAAkB,EAAgB,MAAM,mBAAmB,CAAA;AACpE,OAAO,EAAE,gBAAgB,EAAkB,MAAM,iBAAiB,CAAA;AAClE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAY,MAAM,eAAe,CAAA;AACxE,OAAO,EAAE,qBAAqB,EAAuB,MAAM,sBAAsB,CAAA;AACjF,OAAO,EACL,YAAY,EACZ,YAAY,GAMb,MAAM,aAAa,CAAA;AAiBpB,MAAM,CAAC,MAAM,kCAAkC,GAA0C,iBAAiB,CACxG,CAAC,iBAAiB,EAAE,gBAAgB,CAAC,EACrC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,eAAe,CAAU,CACnD,CAAA;AAED,MAAM,CAAC,MAAM,+BAA+B,GAAuC,iBAAiB,CAClG,CAAC,iBAAiB,EAAE,cAAc,CAAC,EACnC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAU,CAC5C,CAAA;AAED,MAAM,CAAC,MAAM,6BAA6B,GAAqC,iBAAiB,CAC9F,CAAC,iBAAiB,EAAE,YAAY,CAAC,EACjC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAU,CAC1C,CAAA;AAED,MAAM,CAAC,MAAM,uBAAuB,GAA+B,CAAC,EAAE,EAAE,EAAE;IACxE,QAAQ,EAAE,CAAC,WAAW,EAAE,CAAC;QACvB,KAAK,aAAa;YAChB,OAAO,kCAAkC,CAAC,EAAE,CAAC,CAAA;QAC/C,KAAK,UAAU;YACb,OAAO,+BAA+B,CAAC,EAAE,CAAC,CAAA;QAC5C,KAAK,QAAQ;YACX,OAAO,6BAA6B,CAAC,EAAE,CAAC,CAAA;IAC5C,CAAC;AACH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,kCAAkC,GAA0C,UAAU,CACjG,gBAAgB,EAChB,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC,CACvE,CAAA;AAED,MAAM,CAAC,MAAM,+BAA+B,GAAuC,UAAU,CAC3F,cAAc,EACd,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CACtD,CAAA;AAED,MAAM,CAAC,MAAM,6BAA6B,GAAqC,UAAU,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnH,WAAW,EAAE,QAAQ;IACrB,MAAM;CACP,CAAC,CAAC,CAAA;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAA+B,cAAc,CAC/E,iBAAiB,EACjB,CAAC,WAAW,EAA8B,EAAE;IAC1C,QAAQ,WAAW,EAAE,CAAC;QACpB,KAAK,aAAa;YAChB,OAAO,kCAAkC,CAAA;QAC3C,KAAK,UAAU;YACb,OAAO,+BAA+B,CAAA;QACxC,KAAK,QAAQ;YACX,OAAO,6BAA6B,CAAA;IACxC,CAAC;AACH,CAAC,CACF,CAAA;AAED,MAAM,UAAU,KAAK,CAAC,OAAsB,EAAE,UAA0B,EAAE,OAAqB;IAC7F,OAAO,EAAE,eAAe,EAAE,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,CAAA;AAClH,CAAC;AAoBD,MAAM,CAAC,MAAM,mBAAmB,GAA2B,iBAAiB,CAC1E,CAAC,gBAAgB,EAAE,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,uBAAuB,CAAC,EACzF,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,iBAAiB,EAAE,EAAE,CAAU,CAC7E,CAAA;AAED,MAAM,CAAC,MAAM,mBAAmB,GAA2B,WAAW,CACpE,CAAC,gBAAgB,EAAE,YAAY,EAAE,YAAY,EAAE,gBAAgB,EAAE,uBAAuB,CAAC,EACzF,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACpD,OAAO;IACP,KAAK;IACL,MAAM;IACN,iBAAiB;IACjB,GAAG,IAAI;CACR,CAAC,CACH,CAAA;AAQD,MAAM,CAAC,MAAM,gBAAgB,GAAwB,CAAC,IAAI,EAAE,EAAE;IAC5D,QAAQ,IAAI,CAAC,UAAU,EAAE,CAAC;QACxB,KAAK,QAAQ,CAAC;QACd,KAAK,mBAAmB;YACtB,OAAO,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QACzC,KAAK,UAAU,CAAC;QAChB,KAAK,qBAAqB;YACxB,OAAO,IAAI,UAAU,EAAE,CAAA;IAC3B,CAAC;AACH,CAAC,CAAA;AAaD,MAAM,CAAC,MAAM,sBAAsB,GAA8B,iBAAiB,CAChF,CAAC,qBAAqB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,gBAAgB,CAAC,EAChF,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAU,CAChE,CAAA;AAaD,MAAM,kCAAkC,GAA0C,CAAC,QAAQ,EAAE,EAAE;IAC7F,QAAQ,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC7B,KAAK,QAAQ;YACX,OAAO,iCAAiC,CAAC,QAAQ,CAAC,CAAA;QACpD,KAAK,aAAa,CAAC;QACnB,KAAK,UAAU;YACb,OAAO,IAAI,UAAU,EAAE,CAAA;IAC3B,CAAC;AACH,CAAC,CAAA;AAED,MAAM,iCAAiC,GAAgD,gBAAgB,CACrG,gBAAgB,EAChB,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,eAAe,CAC/B,CAAA;AAED,MAAM,CAAC,MAAM,2BAA2B,GAAmC,iBAAiB,CAC1F,CAAC,gBAAgB,EAAE,kCAAkC,CAAC,EACtD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAU,CACjC,CAAA;AAED,MAAM,CAAC,MAAM,iCAAiC,GAAgD,UAAU,CACtG,gBAAgB,EAChB,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IACpB,WAAW,EAAE,QAAQ;IACrB,eAAe;CAChB,CAAC,CACH,CAAA;AAED,MAAM,UAAU,2BAA2B,CAAC,WAA4B;IACtE,QAAQ,WAAW,EAAE,CAAC;QACpB,KAAK,QAAQ;YACX,OAAO,WAAW,CAAC,CAAC,gBAAgB,EAAE,iCAAiC,CAAC,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;gBACpG,SAAS;gBACT,GAAG,UAAU;aACd,CAAC,CAAC,CAAA;QACL,KAAK,aAAa,CAAC;QACnB,KAAK,UAAU;YACb,OAAO,UAAU,CAAC,gBAAgB,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;gBAClD,SAAS;gBACT,WAAW;aACZ,CAAC,CAAC,CAAA;IACP,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,OAAmB,EACnB,UAA0B,EAC1B,OAAsB,EACtB,IAA2B,EAC3B,OAAqB,EACrB,CAAY;IAEZ,OAAO,eAAe,CACpB,OAAO,EACP,kBAAkB,EAClB,sBAAsB,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,EAC3D,IAAI,CAAC,SAAS,EACd,CAAC,CACF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAmB,EAAE,GAAqB,EAAE,CAAY;IAC3F,OAAO,aAAa,CAAC,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;AACnF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sCAAsC,CAC1D,OAAmB,EACnB,GAA0C,EAC1C,EAAmB;IAEnB,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,CAAA;IACxE,OAAO;QACL,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,WAAW;QACpC,SAAS;KACV,CAAA;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,eAA2B,EAC3B,uBAAmC,EACnC,CAAO;IAEP,OAAO,CAAC,CAAC,GAAG,CAAC,eAAe,EAAE,uBAAuB,CAAC,CAAA;AACxD,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,eAA2B,EAC3B,GAAe,EACf,uBAAmC,EACnC,CAAO;IAEP,OAAO,CAAC,CAAC,SAAS,CAAC,eAAe,EAAE,GAAG,EAAE,uBAAuB,CAAC,CAAA;AACnE,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,YAA0B,EAC1B,UAA0B,EAC1B,CAAS,EACT,MAAc,EACd,iBAA6B,EAC7B,OAAmB,EACnB,CAAY;IAEZ,MAAM,GAAG,GAA2B;QAClC,eAAe,EAAE,YAAY,CAAC,OAAO;QACrC,UAAU;QACV,OAAO,EAAE;YACP,WAAW,EAAE,QAAQ;YACrB,MAAM,EAAE,CAAC;YACT,OAAO,EAAE,YAAY,CAAC,OAAO;YAC7B,KAAK,EAAE,YAAY,CAAC,KAAK;YACzB,MAAM;YACN,iBAAiB;SAClB;QACD,UAAU,EAAE,QAAQ;QACpB,OAAO,EAAE,YAAY;KACtB,CAAA;IAED,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;IAC7D,OAAO,EAAE,aAAa,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,CAAA;AAClD,CAAC"}

package/dist/grease.d.ts

@@ -0,0 +1,16 @@
+import { Capabilities } from "./capabilities.js";
+import { CredentialTypeName } from "./credentialType.js";
+import { CiphersuiteName } from "./crypto/ciphersuite.js";
+import { Extension } from "./extension.js";
+export declare const greaseValues: number[];
+export interface GreaseConfig {
+    probabilityPerGreaseValue: number;
+}
+export declare const defaultGreaseConfig: {
+    probabilityPerGreaseValue: number;
+};
+export declare function grease(greaseConfig: GreaseConfig): number[];
+export declare function greaseCiphersuites(greaseConfig: GreaseConfig): CiphersuiteName[];
+export declare function greaseCredentials(greaseConfig: GreaseConfig): CredentialTypeName[];
+export declare function greaseExtensions(greaseConfig: GreaseConfig): Extension[];
+export declare function greaseCapabilities(config: GreaseConfig, capabilities: Capabilities): Capabilities;

package/dist/grease.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"grease.js","sourceRoot":"","sources":["../src/grease.ts"],"names":[],"mappings":"AAKA,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;IAC9G,MAAM;CACP,CAAA;AAMD,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,yBAAyB,EAAE,GAAG;CAC/B,CAAA;AAED,MAAM,UAAU,MAAM,CAAC,YAA0B;IAC/C,OAAO,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,yBAAyB,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAA;AAC1F,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,YAA0B;IAC3D,OAAO,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAqB,CAAC,CAAA;AACzE,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,YAA0B;IAC1D,OAAO,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAwB,CAAC,CAAA;AAC5E,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,YAA0B;IACzD,OAAO,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,aAAa,EAAE,IAAI,UAAU,EAAE,EAAE,CAAC,CAAC,CAAA;AACjG,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAoB,EAAE,YAA0B;IACjF,OAAO;QACL,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC,YAAY,EAAE,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;QAC3E,WAAW,EAAE,CAAC,GAAG,YAAY,CAAC,WAAW,EAAE,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACxE,UAAU,EAAE,CAAC,GAAG,YAAY,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3D,SAAS,EAAE,CAAC,GAAG,YAAY,CAAC,SAAS,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QACzD,QAAQ,EAAE,YAAY,CAAC,QAAQ;KAChC,CAAA;AACH,CAAC"}