{
  "generatedBy": "agent/cmd/msa-vectors",
  "note": "Deterministic cross-language vectors. The Node relay (test/wire.test.js) and the Swift app recompute these from this file; a mismatch means the envelope encoding drifted, not that one side is broken.",
  "suite": "X25519-ED25519-AES256GCM-HKDFSHA256",
  "version": 1,
  "canonical": {
    "comment": "Length-prefixed canonical bytes, then the deterministic Ed25519 signature over them. ek and p are raw decoded bytes, never their base64 text.",
    "input": {
      "v": 1,
      "node": "nd_7f3a9c2e",
      "req": "3f2504e0-4f89-41d3-9a0c-0305e82c3301",
      "app": "ap_5b1d",
      "ts": 1727289600,
      "ek": "hSDwCYkwp1R0i33ctD73Wg2/Og0mOBr066SpjqqbTmo=",
      "alg": "X25519-ED25519-AES256GCM-HKDFSHA256",
      "p": "AAEC/v8="
    },
    "bytes": {
      "request": "6d73612d72656c61792d76312d726571000000000800000000000000010000000b6e645f37663361396332650000002433663235303465302d346638392d343164332d396130632d3033303565383263333330310000000761705f35623164000000080000000066f45900000000208520f0098930a754748b7ddcb43ef75a0dbf3a0d26381af4eba4a98eaa9b4e6a00000005000102feff",
      "response": "6d73612d72656c61792d76312d72657370000000000800000000000000010000000b6e645f37663361396332650000002433663235303465302d346638392d343164332d396130632d303330356538326333333031000000080000000066f45900000000208520f0098930a754748b7ddcb43ef75a0dbf3a0d26381af4eba4a98eaa9b4e6a00000005000102feff"
    },
    "signature": {
      "request": "f91fc4a40c4cb19643515894dba14a1baae602d0b307feafcf441a2d64690b94ac10e20982f8f3e8d2b48c74db11d250344256af92f7c22fa1b2c2fb6975fb0f",
      "response": "3977dc4ad544ed83d9921be9929c49f5b38cd618583d99d10d096d3997237c02110da17ffebd45656453d94cd07044d2b1348e0c45381fa193bf5fb08b30b50e"
    },
    "publicKey": "d75a980182b10ab7d54bfed3c964073a0ee172f3daa62325af021a68f707511a",
    "responsePublicKey": "3d4017c3e843895a92b70aa74d1b7ebc9c982ccf2ec4968cc0cd55f12af4660c"
  },
  "hkdf": {
    "comment": "RFC 5869 test case 1, pinning the KDF itself rather than only its callers.",
    "secret": "0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b",
    "salt": "000102030405060708090a0b0c",
    "info": "f0f1f2f3f4f5f6f7f8f9",
    "length": 42,
    "output": "3cb25f25faacd57a90434f64d0362f2a2d2d0a90cf1a5a4c5db02d56ecc4c5bf34007208d5b887185865"
  },
  "x25519": {
    "comment": "RFC 7748 section 6.1, then the derived per-direction key and IV for the envelope above. The IV is bound to the request id and the direction, so a key that is ever reused still cannot reuse a nonce.",
    "appPrivate": "77076d0a7318a57d3c16c17251b26645df4c2f87ebc0992ab177fba51db92c2a",
    "agentPublic": "de9edb7d7b7dc1b4d35b61c2ece435373f8343c85b78674dadfc7e146f882b4f",
    "sharedSecret": "4a5d9d5ba4ce2de1728e3bf480350f25e07e21c947d19e3376f09b3c1e161742",
    "requestKey": "14f4f1823bd68aabccf326e5a4ee69891428491477bfc6949a25dd69bff1b1e9",
    "requestIV": "e5be943a5b8ea89e34bbcb02",
    "responseKey": "e350511cf24be4045c770180276146ec647283695394dec608f1695b5f07524e",
    "responseIV": "44c5c0499337c5da62b463ad"
  },
  "aead": {
    "comment": "AES-256-GCM under the request key above; the 16-byte tag is appended.",
    "key": "14f4f1823bd68aabccf326e5a4ee69891428491477bfc6949a25dd69bff1b1e9",
    "iv": "e5be943a5b8ea89e34bbcb02",
    "plaintext": "7b226d223a22474554222c2270223a222f6170692f6865616c7468227d",
    "ciphertext": "6601340c304905a8308894ab9d050d5e2ea083ee7ad43df01b9c3e79daead5321099e7203abd5985cf2ef12114"
  },
  "intent": {
    "comment": "sha256(method | path | canonical body). The agent recomputes it from the request it is about to forward, so a relay cannot edit a confirmed write.",
    "method": "POST",
    "path": "/api/sms/send",
    "body": "{\"phone_number\":\"+8613800000000\",\"content\":\"hello\"}",
    "digest": "d0f584d844cf6e25d5b233a65e86fd80b82a396836cb80522e528b0f6ea5ac00"
  },
  "canonicalJson": [
    {
      "input": "{\"b\":1,\"a\":2}",
      "output": "{\"a\":2,\"b\":1}"
    },
    {
      "input": "[3,1,2]",
      "output": "[3,1,2]"
    },
    {
      "input": "  null ",
      "output": "null"
    },
    {
      "input": "true",
      "output": "true"
    },
    {
      "input": "\"\u003c\u0026\u003e\"",
      "output": "\"\u003c\u0026\u003e\""
    },
    {
      "input": "{\"x\":100}",
      "output": "{\"x\":100}"
    },
    {
      "input": "{\"a\":{\"c\":[1,{\"b\":2,\"a\":1}],\"b\":0},\"A\":9}",
      "output": "{\"A\":9,\"a\":{\"b\":0,\"c\":[1,{\"a\":1,\"b\":2}]}}"
    },
    {
      "input": "{\"phone_number\":\"+8613800000000\",\"content\":\"hello\"}",
      "output": "{\"content\":\"hello\",\"phone_number\":\"+8613800000000\"}"
    },
    {
      "input": "{\"content\":\"a\u2028b\"}",
      "output": "{\"content\":\"a\u2028b\"}"
    },
    {
      "input": "{\"content\":\"a\u2029b\"}",
      "output": "{\"content\":\"a\u2029b\"}"
    },
    {
      "input": "{\"content\":\"😀\"}",
      "output": "{\"content\":\"😀\"}"
    },
    {
      "input": "{\"content\":\"\\b\\f\\u0001\"}",
      "output": "{\"content\":\"\\b\\f\\u0001\"}"
    },
    {
      "input": "{\"content\":\"\\\\u2028\"}",
      "output": "{\"content\":\"\\\\u2028\"}"
    },
    {
      "input": "{\"é\":1,\"z\":2}",
      "output": "{\"z\":2,\"é\":1}"
    },
    {
      "input": "{\"𐀀\":1,\"�\":2}",
      "output": "{\"�\":2,\"𐀀\":1}"
    }
  ],
  "canonicalJsonRejected": [
    "{\"content\":\"\\ud800\"}",
    "{\"content\":\"\\udc00\"}",
    "{\"content\":\"\\ud800\\ud800\"}",
    "{\"content\":\"\\ud800x\"}"
  ]
}