feat: add Marmot Phase 2 — encryption, group state, and lifecycle helpers
Implements encryption/decryption, gift-wrap flows, and utility logic for
the Marmot MLS-over-Nostr protocol, building on the Phase 1 event defs.
New files:
- ChaCha20Poly1305: standard AEAD (12-byte nonce) for MIP-03 outer layer
- GroupEventEncryption: encrypt/decrypt GroupEvent content with MLS key
- WelcomeGiftWrap: NIP-59 gift-wrap pipeline for Welcome messages
- KeyPackageUtils: selection policy, rotation, migration helpers
- CommitOrdering: deterministic conflict resolution for MLS commits
- MarmotFilters: relay subscription filter builders for all Marmot events
- TokenEncryption: ECDH + HKDF + ChaCha20 token encryption for MIP-05
https://claude.ai/code/session_01Ee5wmBAXwN46AJYUGYA9RQ
Claude
6cbd56c53d