wt
07c9967d02
Changes: Add an isolated pinned mechanism wrapper using Stanza's public constructor and factory APIs, preserve the SCRAM-SHA-512 wire name and fail-closed final guard, and document the proposed ADR, browser bundle evidence, independent Scramp vectors, notices and limits. Leave parent selection, dependency experiments, specs and shared contracts unchanged. Validation: Fresh-cache npm ci and Vite browser build pass; 87 focused tests pass, including RFC HMAC vectors, original defect reproduction, independent full SHA-512 exchanges and rejected invalid finals/order/reset paths. Hashed Scramp oracle fixture comparison passes. Dependency check verifies 49 locked entries, 25 installed pins/licenses and 340 unmodified Stanza files. make check passes 72 tooling tests. Native browsers, WSS/live server interoperability and production readiness are untested; independent security review remains pending. Task: S00-019 Agent: auto-crypto-c68801170fa4 Role: crypto Action: claim Status: review Task title: Validate browser-compatible SCRAM-SHA-512 through a public mechanism API
23 lines
439 B
JSON
23 lines
439 B
JSON
{
|
|
"name": "luma-browser-scram-sha512-experiment",
|
|
"version": "0.0.0",
|
|
"private": true,
|
|
"type": "module",
|
|
"engines": {
|
|
"node": "24.21.0",
|
|
"npm": "11.19.0"
|
|
},
|
|
"packageManager": "npm@11.19.0",
|
|
"scripts": {
|
|
"build": "vite build",
|
|
"test": "npm run build && node --test test/*.test.mjs"
|
|
},
|
|
"dependencies": {
|
|
"stanza": "12.22.1",
|
|
"events": "3.3.0"
|
|
},
|
|
"devDependencies": {
|
|
"vite": "8.3.4"
|
|
}
|
|
}
|