Sterister
80c410f518
Ships the Prism FR (encrypted-profile-storage-v4.9.md) as a generic relay-side encrypted blob primitive: deterministically-located, AEAD-sealed blobs keyed by a 32-byte slotId derived client-side via HKDF from the user's master key. Unlocks credential-only bootstrap of new devices into existing E2EE state — no QR, no physical access. Server: BlobStore interface + Memory/Sqlite/Postgres impls, createBlobRoutes for GET/PUT/DELETE /v1/blob/:slotId with TOFU pubkey auth and If-Match CAS (409/412 semantics). Mounted on the same Hono app as the inbox; SHADE_BLOB_PG_URL / SHADE_BLOB_DB_PATH / SHADE_DISABLE_BLOB env-var plumbing in standalone. SDK: createProfileNamespace high-level wrapper (HKDF derivation, random-nonce AEAD seal, slotId-bound AAD) + low-level BlobClient. Cross-platform test vectors in test-vectors/blob-storage.json. New errors: ConflictError (409), PreconditionFailedError (412). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
26 lines
804 B
TypeScript
26 lines
804 B
TypeScript
export { SubtleCryptoProvider } from './provider.js';
|
|
export { MemoryStorage } from './memory-storage.js';
|
|
export { ed25519PublicKeyFromSeed } from './ed25519-derive.js';
|
|
|
|
// ─── Web Workers crypto (V3.8) ────────────────────────────
|
|
export {
|
|
createWorkerCryptoProvider,
|
|
WorkerCryptoProvider,
|
|
WorkerStreamSender,
|
|
WorkerStreamReceiver,
|
|
} from './worker-client.js';
|
|
export type {
|
|
WorkerCryptoProviderOptions,
|
|
WorkerLike,
|
|
} from './worker-client.js';
|
|
export {
|
|
createEncryptStream,
|
|
createDecryptStream,
|
|
DEFAULT_STREAM_CHUNK_SIZE,
|
|
} from './worker-streams.js';
|
|
export type {
|
|
CreateEncryptStreamOptions,
|
|
CreateDecryptStreamOptions,
|
|
} from './worker-streams.js';
|
|
export { WORKER_PROTOCOL_VERSION } from './worker-protocol.js';
|