Changes: Add an isolated Stanza 12.22.1 SASL feature replacement using existing SCRAM crypto, exact dependency lock and MIT notices, 44 integrated fixture checks, proposed ADR and review handoff. Leave production adapters and the original library experiment unchanged. Validation: Fresh-cache npm ci and npm test passed on Node 24.21.0/npm 11.19.0; 44 tests cover RFC SHA-1/SHA-256 proofs and verified finals, stock defect reproduction, invalid/premature finals and async cleanup. make check passed 72 tooling tests. Pins/licenses/notices, unchanged vendor source and whitespace verified. Browser/WSS/server interoperability and constant-time assurance remain unverified; independent security review is pending. Task: S00-017 Agent: auto-protocol-599343cd9e3f Role: protocol Action: claim Status: review Task title: Establish fail-closed SCRAM server-final validation
100 lines
3.3 KiB
JSON
100 lines
3.3 KiB
JSON
{
|
|
"name": "luma-scram-server-final-experiment",
|
|
"version": "0.0.0",
|
|
"lockfileVersion": 3,
|
|
"requires": true,
|
|
"packages": {
|
|
"": {
|
|
"name": "luma-scram-server-final-experiment",
|
|
"version": "0.0.0",
|
|
"dependencies": {
|
|
"stanza": "12.22.1"
|
|
},
|
|
"engines": {
|
|
"node": "24.21.0",
|
|
"npm": "11.19.0"
|
|
}
|
|
},
|
|
"node_modules/@types/node": {
|
|
"version": "22.20.5",
|
|
"resolved": "https://registry.npmjs.org/@types/node/-/node-22.20.5.tgz",
|
|
"integrity": "sha512-U2+DNr+wSjpsTS/wZGYHq7GcwfuSmKiKvoPvK22zwTlRhU91yOniN4qRR5KhIjvif7ysw/dz/hKmfDH0Ris4aA==",
|
|
"license": "MIT",
|
|
"dependencies": {
|
|
"undici-types": "~6.21.0"
|
|
}
|
|
},
|
|
"node_modules/@types/punycode": {
|
|
"version": "2.1.4",
|
|
"resolved": "https://registry.npmjs.org/@types/punycode/-/punycode-2.1.4.tgz",
|
|
"integrity": "sha512-trzh6NzBnq8yw5e35f8xe8VTYjqM3NE7bohBtvDVf/dtUer3zYTLK1Ka3DG3p7bdtoaOHZucma6FfVKlQ134pQ==",
|
|
"license": "MIT"
|
|
},
|
|
"node_modules/@types/ws": {
|
|
"version": "8.18.2",
|
|
"resolved": "https://registry.npmjs.org/@types/ws/-/ws-8.18.2.tgz",
|
|
"integrity": "sha512-67MQl+fpWKVTT1NYdnmo3U4sc/xPo/zQBncVnI74qmQa0z/b+1g6iYqNmGCPbxO+zz2aklb08a0oHfegiVd0/w==",
|
|
"license": "MIT",
|
|
"dependencies": {
|
|
"@types/node": "*"
|
|
}
|
|
},
|
|
"node_modules/punycode": {
|
|
"version": "2.3.1",
|
|
"resolved": "https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz",
|
|
"integrity": "sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg==",
|
|
"license": "MIT",
|
|
"engines": {
|
|
"node": ">=6"
|
|
}
|
|
},
|
|
"node_modules/sdp": {
|
|
"version": "3.2.2",
|
|
"resolved": "https://registry.npmjs.org/sdp/-/sdp-3.2.2.tgz",
|
|
"integrity": "sha512-xZocWwfyp4hkbN4hLWxMjmv2Q8aNa9MhmOZ7L9aCZPT+dZsgRr6wZRrSYE3HTdyk/2pZKPSgqI7ns7Een1xMSA==",
|
|
"license": "MIT"
|
|
},
|
|
"node_modules/stanza": {
|
|
"version": "12.22.1",
|
|
"resolved": "https://registry.npmjs.org/stanza/-/stanza-12.22.1.tgz",
|
|
"integrity": "sha512-WwoSl3u5cCEAbed5ao+yt8ByH6AsBJcPDY0gax3JGQkBX/7wEZ2oxu9nMJ7O1tm8slDyH4FBYIpeluHrT+g/LA==",
|
|
"license": "MIT",
|
|
"dependencies": {
|
|
"@types/node": "^22.0.0",
|
|
"@types/punycode": "^2.1.0",
|
|
"@types/ws": "^8.18.1",
|
|
"punycode": "^2.1.1",
|
|
"sdp": "^3.0.2",
|
|
"ws": "^8.18.2"
|
|
}
|
|
},
|
|
"node_modules/undici-types": {
|
|
"version": "6.21.0",
|
|
"resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.21.0.tgz",
|
|
"integrity": "sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==",
|
|
"license": "MIT"
|
|
},
|
|
"node_modules/ws": {
|
|
"version": "8.22.0",
|
|
"resolved": "https://registry.npmjs.org/ws/-/ws-8.22.0.tgz",
|
|
"integrity": "sha512-Ydggc987+RO0AnWtZ/7Wq9FtNvcrL1b/RO0ud9mWjUPgDrsAAwQSF51sm2hm1XofbU/4jkpGEsLFsZZxU+1DOg==",
|
|
"license": "MIT",
|
|
"engines": {
|
|
"node": ">=10.0.0"
|
|
},
|
|
"peerDependencies": {
|
|
"bufferutil": "^4.0.1",
|
|
"utf-8-validate": ">=5.0.2"
|
|
},
|
|
"peerDependenciesMeta": {
|
|
"bufferutil": {
|
|
"optional": true
|
|
},
|
|
"utf-8-validate": {
|
|
"optional": true
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|