@agentunion/fastaun-browser 0.4.5 → 0.4.6

package/dist/index.d.ts

@@ -10,8 +10,9 @@ export { EventDispatcher, Subscription, type EventHandler } from './events.js';
 export { CryptoProvider } from './crypto.js';
 export { RPCTransport } from './transport.js';
 export { GatewayDiscovery } from './discovery.js';
-export type { KeyStore } from './keystore/index.js';
-export { IndexedDBKeyStore, SeedMigrationError, type SeedChangeResult } from './keystore/indexeddb.js';
+export type { KeyStore, TokenStore } from './keystore/index.js';
+export { IndexedDBIdentityStore, SeedMigrationError, type SeedChangeResult } from './keystore/indexeddb-identity-store.js';
+export { IndexedDBTokenStore } from './keystore/indexeddb-token-store.js';
 export type { SecretStore } from './secret-store/index.js';
 export { createDefaultSecretStore } from './secret-store/index.js';
 export { IndexedDBSecretStore } from './secret-store/indexeddb-store.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,cAAc,CAAC;AAGtD,OAAO,EAAE,SAAS,EAAE,KAAK,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,GAAG,EAAE,KAAK,YAAY,EAAE,MAAM,UAAU,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,KAAK,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,KAAK,MAAM,EAAE,KAAK,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAG/E,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AAGxE,OAAO,EACL,QAAQ,EACR,eAAe,EACf,YAAY,EACZ,SAAS,EACT,qBAAqB,EACrB,eAAe,EACf,eAAe,EACf,aAAa,EACb,cAAc,EACd,UAAU,EACV,kBAAkB,EAClB,YAAY,EACZ,UAAU,EACV,kBAAkB,EAClB,eAAe,EACf,SAAS,EACT,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,+BAA+B,EAC/B,uBAAuB,EACvB,2BAA2B,EAC3B,uBAAuB,EACvB,iBAAiB,EACjB,oBAAoB,EACpB,cAAc,GACf,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,eAAe,EACf,KAAK,SAAS,EACd,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,KAAK,wBAAwB,EAC7B,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,SAAS,EACd,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,OAAO,EACZ,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,UAAU,EACf,YAAY,GACb,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAG/E,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAG7C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAG9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAGlD,YAAY,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,KAAK,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAGvG,YAAY,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAGzE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,KAAK,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAGvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,YAAY,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,cAAc,GACf,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,MAAM,EACN,MAAM,EACN,SAAS,EACT,cAAc,EACd,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAC9D,YAAY,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAG3E,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,cAAc,CAAC;AAGtD,OAAO,EAAE,SAAS,EAAE,KAAK,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,GAAG,EAAE,KAAK,YAAY,EAAE,MAAM,UAAU,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,KAAK,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,KAAK,MAAM,EAAE,KAAK,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAG/E,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,SAAS,EAAE,MAAM,aAAa,CAAC;AAGxE,OAAO,EACL,QAAQ,EACR,eAAe,EACf,YAAY,EACZ,SAAS,EACT,qBAAqB,EACrB,eAAe,EACf,eAAe,EACf,aAAa,EACb,cAAc,EACd,UAAU,EACV,kBAAkB,EAClB,YAAY,EACZ,UAAU,EACV,kBAAkB,EAClB,eAAe,EACf,SAAS,EACT,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,+BAA+B,EAC/B,uBAAuB,EACvB,2BAA2B,EAC3B,uBAAuB,EACvB,iBAAiB,EACjB,oBAAoB,EACpB,cAAc,GACf,MAAM,aAAa,CAAC;AAGrB,OAAO,EACL,eAAe,EACf,KAAK,SAAS,EACd,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,UAAU,EACf,KAAK,YAAY,EACjB,KAAK,wBAAwB,EAC7B,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,SAAS,EACd,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,OAAO,EACZ,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,UAAU,EACf,YAAY,GACb,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAG/E,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAG7C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAG9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAGlD,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,KAAK,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAC3H,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAG1E,YAAY,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAGzE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,YAAY,EAAE,KAAK,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAGvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,YAAY,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,cAAc,GACf,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EACV,MAAM,EACN,MAAM,EACN,SAAS,EACT,cAAc,EACd,kBAAkB,GACnB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAC9D,YAAY,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAG3E,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/index.js

@@ -19,7 +19,8 @@ export { CryptoProvider } from './crypto.js';
 export { RPCTransport } from './transport.js';
 // 发现
 export { GatewayDiscovery } from './discovery.js';
-export { IndexedDBKeyStore, SeedMigrationError } from './keystore/indexeddb.js';
+export { IndexedDBIdentityStore, SeedMigrationError } from './keystore/indexeddb-identity-store.js';
+export { IndexedDBTokenStore } from './keystore/indexeddb-token-store.js';
 export { createDefaultSecretStore } from './secret-store/index.js';
 export { IndexedDBSecretStore } from './secret-store/indexeddb-store.js';
 // 认证

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,oEAAoE;AAEpE,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,cAAc,CAAC;AAEtD,MAAM;AACN,OAAO,EAAE,SAAS,EAA0B,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,GAAG,EAAqB,MAAM,UAAU,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAgB,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAA+B,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE/E,KAAK;AACL,OAAO,EAAE,WAAW,EAAE,YAAY,EAAkB,MAAM,aAAa,CAAC;AAExE,OAAO;AACP,OAAO,EACL,QAAQ,EACR,eAAe,EACf,YAAY,EACZ,SAAS,EACT,qBAAqB,EACrB,eAAe,EACf,eAAe,EACf,aAAa,EACb,cAAc,EACd,UAAU,EACV,kBAAkB,EAClB,YAAY,EACZ,UAAU,EACV,kBAAkB,EAClB,eAAe,EACf,SAAS,EACT,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,+BAA+B,EAC/B,uBAAuB,EACvB,2BAA2B,EAC3B,uBAAuB,EACvB,iBAAiB,EACjB,oBAAoB,EACpB,cAAc,GACf,MAAM,aAAa,CAAC;AAErB,KAAK;AACL,OAAO,EACL,eAAe,EAqBf,YAAY,GACb,MAAM,YAAY,CAAC;AAEpB,KAAK;AACL,OAAO,EAAE,eAAe,EAAE,YAAY,EAAqB,MAAM,aAAa,CAAC;AAE/E,MAAM;AACN,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,MAAM;AACN,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,KAAK;AACL,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAIlD,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAyB,MAAM,yBAAyB,CAAC;AAIvG,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAEzE,KAAK;AACL,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,YAAY,EAAuB,MAAM,oBAAoB,CAAC;AAEvE,sBAAsB;AACtB,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,cAAc,GACf,MAAM,oBAAoB,CAAC;AAQ5B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAE9D,OAAO,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAE3E,MAAM;AACN,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,oEAAoE;AAEpE,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,MAAM,cAAc,CAAC;AAEtD,MAAM;AACN,OAAO,EAAE,SAAS,EAA0B,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,GAAG,EAAqB,MAAM,UAAU,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAgB,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAA+B,QAAQ,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE/E,KAAK;AACL,OAAO,EAAE,WAAW,EAAE,YAAY,EAAkB,MAAM,aAAa,CAAC;AAExE,OAAO;AACP,OAAO,EACL,QAAQ,EACR,eAAe,EACf,YAAY,EACZ,SAAS,EACT,qBAAqB,EACrB,eAAe,EACf,eAAe,EACf,aAAa,EACb,cAAc,EACd,UAAU,EACV,kBAAkB,EAClB,YAAY,EACZ,UAAU,EACV,kBAAkB,EAClB,eAAe,EACf,SAAS,EACT,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,EAC3B,+BAA+B,EAC/B,uBAAuB,EACvB,2BAA2B,EAC3B,uBAAuB,EACvB,iBAAiB,EACjB,oBAAoB,EACpB,cAAc,GACf,MAAM,aAAa,CAAC;AAErB,KAAK;AACL,OAAO,EACL,eAAe,EAqBf,YAAY,GACb,MAAM,YAAY,CAAC;AAEpB,KAAK;AACL,OAAO,EAAE,eAAe,EAAE,YAAY,EAAqB,MAAM,aAAa,CAAC;AAE/E,MAAM;AACN,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,MAAM;AACN,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C,KAAK;AACL,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAIlD,OAAO,EAAE,sBAAsB,EAAE,kBAAkB,EAAyB,MAAM,wCAAwC,CAAC;AAC3H,OAAO,EAAE,mBAAmB,EAAE,MAAM,qCAAqC,CAAC;AAI1E,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AACnE,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAEzE,KAAK;AACL,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,YAAY,EAAuB,MAAM,oBAAoB,CAAC;AAEvE,sBAAsB;AACtB,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAE1D,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,cAAc,GACf,MAAM,oBAAoB,CAAC;AAQ5B,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAE9D,OAAO,EAAE,sBAAsB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAE3E,MAAM;AACN,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/keystore/index.d.ts

@@ -138,6 +138,12 @@ export interface GroupStateRecord {
 }
 /** 私钥/完整身份存储接口，仅 AIDStore / RegisterFlow 持有。 */
 export interface KeyStore {
+    /** 加载证书 PEM */
+    loadCert(aid: string, certFingerprint?: string): Promise<string | null>;
+    /** 保存证书 PEM */
+    saveCert(aid: string, certPem: string, certFingerprint?: string, opts?: {
+        makeActive?: boolean;
+    }): Promise<void>;
     /** 加载密钥对 */
     loadKeyPair(aid: string): Promise<KeyPairRecord | null>;
     /** 保存密钥对 */
@@ -170,6 +176,4 @@ export interface KeyStore {
         privateKeysMigrated: number;
     }>;
 }
-/** 物理实现通常同时实现 TokenStore 与 KeyStore；注册流程显式要求组合类型。 */
-export type FullKeyStore = TokenStore & KeyStore;
 //# sourceMappingURL=index.d.ts.map

package/dist/keystore/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/keystore/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EACV,iBAAiB,EACjB,cAAc,EACd,aAAa,EACb,cAAc,EACd,SAAS,EACT,YAAY,EACZ,aAAa,EACd,MAAM,aAAa,CAAC;AACrB,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC;AAEzF;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,eAAe;IACf,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACxE,eAAe;IACf,QAAQ,CACN,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,eAAe,CAAC,EAAE,MAAM,EACxB,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GAC9B,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,cAAc;IACd,iBAAiB,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IACnG,cAAc;IACd,iBAAiB,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxG,gBAAgB;IAChB,mBAAmB,CAAC,CAClB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,cAAc,GAAG,IAAI,GACxD,OAAO,CAAC,cAAc,CAAC,CAAC;IAE3B,mDAAmD;IACnD,eAAe,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACrE;;;;;OAKG;IACH,kBAAkB,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IAC5F,iDAAiD;IACjD,cAAc,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3G,kDAAkD;IAClD,kBAAkB,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAE9G,4BAA4B;IAC5B,kBAAkB,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACpD,0BAA0B;IAC1B,0BAA0B,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7F,gCAAgC;IAChC,oBAAoB,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;IAC9G,kCAAkC;IAClC,qBAAqB,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACnF,oBAAoB;IACpB,0BAA0B,CAAC,CACzB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,EAAE,CAAC;QACrB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,oBAAoB,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;QACtC,0BAA0B,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3C,mBAAmB,EAAE,MAAM,CAAC;KAC7B,GACA,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,oDAAoD;IACpD,qBAAqB,CAAC,CACpB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,EAAE,CAAC;QACrB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,oBAAoB,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;QACtC,0BAA0B,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3C,mBAAmB,EAAE,MAAM,CAAC;KAC7B,GACA,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,+BAA+B;IAC/B,8BAA8B,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACnH,6BAA6B;IAC7B,sBAAsB,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAErE,yBAAyB;IACzB,gBAAgB,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IACzD,wBAAwB;IACxB,eAAe,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAErF,sCAAsC;IACtC,OAAO,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjH,sCAAsC;IACtC,OAAO,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5F,qDAAqD;IACrD,WAAW,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7F,wCAAwC;IACxC,SAAS,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5F,kBAAkB;IAClB,YAAY,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IACpE,2BAA2B;IAC3B,WAAW,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxD,kCAAkC;IAClC,WAAW,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAErE,+BAA+B;IAC/B,cAAc,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvJ,oDAAoD;IACpD,kBAAkB,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5G,uBAAuB;IACvB,cAAc,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IAE3D,oCAAoC;IACpC,gBAAgB,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IAC3F,oCAAoC;IACpC,kBAAkB,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAClH,oCAAoC;IACpC,sBAAsB,CAAC,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAChE,eAAe;IACf,cAAc,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE,eAAe;IACf,cAAc,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;CACpE;AAED,aAAa;AACb,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,gDAAgD;AAChD,MAAM,WAAW,QAAQ;IACvB,YAAY;IACZ,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IACxD,YAAY;IACZ,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,2CAA2C;IAC3C,kBAAkB,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAClD,8BAA8B;IAC9B,uBAAuB,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACzD,gCAAgC;IAChC,kBAAkB,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxF,kCAAkC;IAClC,kBAAkB,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IAChF,oBAAoB;IACpB,eAAe,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE,qBAAqB;IACrB,sBAAsB,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACtE,sBAAsB;IACtB,sBAAsB,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,sBAAsB;IACtB,kBAAkB,CAAC,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxD,oBAAoB;IACpB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IAC1D,yBAAyB;IACzB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,mBAAmB;IACnB,cAAc,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACrC,iCAAiC;IACjC,UAAU,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,mBAAmB,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC3G;AAED,qDAAqD;AACrD,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG,QAAQ,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/keystore/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EACV,iBAAiB,EACjB,cAAc,EACd,aAAa,EACb,cAAc,EACd,SAAS,EACT,YAAY,EACZ,aAAa,EACd,MAAM,aAAa,CAAC;AACrB,MAAM,WAAW,kBAAkB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC;AAEzF;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,eAAe;IACf,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACxE,eAAe;IACf,QAAQ,CACN,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,eAAe,CAAC,EAAE,MAAM,EACxB,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GAC9B,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,cAAc;IACd,iBAAiB,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IACnG,cAAc;IACd,iBAAiB,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxG,gBAAgB;IAChB,mBAAmB,CAAC,CAClB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,cAAc,GAAG,IAAI,GACxD,OAAO,CAAC,cAAc,CAAC,CAAC;IAE3B,mDAAmD;IACnD,eAAe,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACrE;;;;;OAKG;IACH,kBAAkB,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IAC5F,iDAAiD;IACjD,cAAc,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3G,kDAAkD;IAClD,kBAAkB,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAE9G,4BAA4B;IAC5B,kBAAkB,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACpD,0BAA0B;IAC1B,0BAA0B,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7F,gCAAgC;IAChC,oBAAoB,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;IAC9G,kCAAkC;IAClC,qBAAqB,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;IACnF,oBAAoB;IACpB,0BAA0B,CAAC,CACzB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,EAAE,CAAC;QACrB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,oBAAoB,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;QACtC,0BAA0B,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3C,mBAAmB,EAAE,MAAM,CAAC;KAC7B,GACA,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,oDAAoD;IACpD,qBAAqB,CAAC,CACpB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,EAAE,CAAC;QACrB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,oBAAoB,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;QACtC,0BAA0B,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3C,mBAAmB,EAAE,MAAM,CAAC;KAC7B,GACA,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB,+BAA+B;IAC/B,8BAA8B,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACnH,6BAA6B;IAC7B,sBAAsB,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAErE,yBAAyB;IACzB,gBAAgB,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IACzD,wBAAwB;IACxB,eAAe,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAErF,sCAAsC;IACtC,OAAO,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjH,sCAAsC;IACtC,OAAO,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5F,qDAAqD;IACrD,WAAW,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7F,wCAAwC;IACxC,SAAS,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5F,kBAAkB;IAClB,YAAY,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IACpE,2BAA2B;IAC3B,WAAW,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxD,kCAAkC;IAClC,WAAW,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAErE,+BAA+B;IAC/B,cAAc,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvJ,oDAAoD;IACpD,kBAAkB,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC5G,uBAAuB;IACvB,cAAc,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IAE3D,oCAAoC;IACpC,gBAAgB,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IAC3F,oCAAoC;IACpC,kBAAkB,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAClH,oCAAoC;IACpC,sBAAsB,CAAC,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAChE,eAAe;IACf,cAAc,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzE,eAAe;IACf,cAAc,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;CACpE;AAED,aAAa;AACb,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,gDAAgD;AAChD,MAAM,WAAW,QAAQ;IACvB,eAAe;IACf,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACxE,eAAe;IACf,QAAQ,CACN,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,eAAe,CAAC,EAAE,MAAM,EACxB,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GAC9B,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,YAAY;IACZ,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IACxD,YAAY;IACZ,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE,2CAA2C;IAC3C,kBAAkB,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAClD,8BAA8B;IAC9B,uBAAuB,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACzD,gCAAgC;IAChC,kBAAkB,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxF,kCAAkC;IAClC,kBAAkB,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IAChF,oBAAoB;IACpB,eAAe,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE,qBAAqB;IACrB,sBAAsB,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACtE,sBAAsB;IACtB,sBAAsB,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD,sBAAsB;IACtB,kBAAkB,CAAC,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACxD,oBAAoB;IACpB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IAC1D,yBAAyB;IACzB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,mBAAmB;IACnB,cAAc,CAAC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACrC,iCAAiC;IACjC,UAAU,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,mBAAmB,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC3G"}

package/dist/keystore/indexeddb-identity-store.d.ts

@@ -0,0 +1,59 @@
+import type { ModuleLogger } from '../logger.js';
+import type { KeyStore } from './index.js';
+import { type KeyPairRecord } from './indexeddb-shared.js';
+import type { IdentityRecord } from '../types.js';
+export declare class SeedMigrationError extends Error {
+    constructor(message: string);
+}
+export interface SeedChangeResult {
+    migrated: number;
+    skipped: number;
+    errors: number;
+    privateKeysVerified: number;
+    privateKeysMigrated: number;
+}
+/**
+ * 基于 IndexedDB 的身份存储实现（含私钥）。
+ * AIDStore / RegisterFlow 持有此类型。
+ */
+export declare class IndexedDBIdentityStore implements KeyStore {
+    private _log;
+    setLogger(log: ModuleLogger): void;
+    private static _aidTails;
+    /** 私钥加密种子；空字符串也是有效 seed，默认不再写入明文私钥。 */
+    private _encryptionSeed;
+    constructor(opts?: {
+        encryptionSeed?: string;
+    });
+    static changeSeed(oldSeed: string, newSeed: string): Promise<SeedChangeResult>;
+    changeSeed(oldSeed: string, newSeed: string): Promise<SeedChangeResult>;
+    private _withAidLock;
+    listIdentities(): Promise<string[]>;
+    loadKeyPair(aid: string): Promise<KeyPairRecord | null>;
+    saveKeyPair(aid: string, keyPair: KeyPairRecord): Promise<void>;
+    pendingIdentityDir(aid: string): Promise<string>;
+    listPendingIdentityDirs(aid: string): Promise<string[]>;
+    savePendingKeyPair(handle: string, aid: string, keyPair: KeyPairRecord): Promise<void>;
+    loadPendingKeyPair(handle: string, aid: string): Promise<KeyPairRecord | null>;
+    savePendingCert(handle: string, certPem: string): Promise<void>;
+    promotePendingIdentity(handle: string, aid: string): Promise<string>;
+    discardPendingIdentity(handle: string): Promise<void>;
+    cleanupPendingDirs(maxAgeMs?: number): Promise<number>;
+    loadCert(aid: string, certFingerprint?: string): Promise<string | null>;
+    saveCert(aid: string, certPem: string, certFingerprint?: string, opts?: {
+        makeActive?: boolean;
+    }): Promise<void>;
+    loadIdentity(aid: string): Promise<IdentityRecord | null>;
+    saveIdentity(aid: string, identity: IdentityRecord): Promise<void>;
+    getMetadata(aid: string, key: string): Promise<string>;
+    setMetadata(aid: string, key: string, value: string): Promise<void>;
+    private _loadPendingRecord;
+    private _protectedPendingKeyPair;
+    private _loadKeyPairUnlocked;
+    private _saveKeyPairUnlocked;
+    private _loadCertUnlocked;
+    private _saveCertUnlocked;
+    private _loadMetadataOnlyUnlocked;
+    private _saveMetadataOnlyUnlocked;
+}
+//# sourceMappingURL=indexeddb-identity-store.d.ts.map

package/dist/keystore/indexeddb-identity-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"indexeddb-identity-store.d.ts","sourceRoot":"","sources":["../../src/keystore/indexeddb-identity-store.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EA2BL,KAAK,aAAa,EAGnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD,qBAAa,kBAAmB,SAAQ,KAAK;gBAC/B,OAAO,EAAE,MAAM;CAI5B;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,mBAAmB,EAAE,MAAM,CAAC;IAC5B,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED;;;GAGG;AACH,qBAAa,sBAAuB,YAAW,QAAQ;IACrD,OAAO,CAAC,IAAI,CAA0B;IACtC,SAAS,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI;IAElC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAoC;IAE5D,uCAAuC;IACvC,OAAO,CAAC,eAAe,CAAqB;gBAEhC,IAAI,CAAC,EAAE;QAAE,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE;WAIjC,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAiD9E,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;YAM/D,YAAY;IAmBpB,cAAc,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAiCnC,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAoBvD,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAW/D,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAWhD,uBAAuB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IASvD,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAkBtF,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAuB9E,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU/D,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAwBpE,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIrD,kBAAkB,CAAC,QAAQ,GAAE,MAAgB,GAAG,OAAO,CAAC,MAAM,CAAC;IAgB/D,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAavE,QAAQ,CACZ,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,eAAe,CAAC,EAAE,MAAM,EACxB,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GAC9B,OAAO,CAAC,IAAI,CAAC;IAcV,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAwCzD,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IA2ClE,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAWtD,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAgB3D,kBAAkB;YAalB,wBAAwB;YAexB,oBAAoB;YAmBpB,oBAAoB;YASpB,iBAAiB;YAKjB,iBAAiB;YAIjB,yBAAyB;YAKzB,yBAAyB;CAIxC"}

package/dist/keystore/indexeddb-identity-store.js

@@ -0,0 +1,489 @@
+// ── IndexedDBIdentityStore — 含私钥操作的 KeyStore 实现 ──────────
+//
+// 持有方：AIDStore / RegisterFlow。
+// 负责：密钥对、完整身份、pending 注册、证书、metadata KV、信任根。
+//
+// 不含 prekeys/群组密钥/sessions/seq/agent.md 缓存等会话侧操作。
+import { _noopLog, STORE_KEY_PAIRS, STORE_CERTS, STORE_METADATA, STORE_PENDING_IDENTITIES, safeAid, deepClone, isRecord, metadataStoreKey, normalizeCertFingerprint, fingerprintFromCertPem, certStoreKey, stripStructuredFields, pendingIdentityPrefix, randomHex, extractSpkiB64FromCertPem, encryptPEM, decryptPEM, hasEncryptionSeed, idbGet, idbGetAll, idbGetAllByPrefix, idbPut, idbDelete, } from './indexeddb-shared.js';
+export class SeedMigrationError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'SeedMigrationError';
+    }
+}
+/**
+ * 基于 IndexedDB 的身份存储实现（含私钥）。
+ * AIDStore / RegisterFlow 持有此类型。
+ */
+export class IndexedDBIdentityStore {
+    _log = _noopLog;
+    setLogger(log) { this._log = log; }
+    static _aidTails = new Map();
+    /** 私钥加密种子；空字符串也是有效 seed，默认不再写入明文私钥。 */
+    _encryptionSeed;
+    constructor(opts) {
+        this._encryptionSeed = opts?.encryptionSeed ?? '';
+    }
+    static async changeSeed(oldSeed, newSeed) {
+        if (oldSeed === '.seed') {
+            throw new SeedMigrationError('JS IndexedDB keystore does not support file .seed migration');
+        }
+        const rows = await idbGetAll(STORE_KEY_PAIRS);
+        const migrations = [];
+        for (const row of rows) {
+            if (!isRecord(row.value))
+                continue;
+            const envelope = row.value._encrypted_pk;
+            if (!isRecord(envelope)) {
+                const plain = row.value.private_key_pem;
+                if (typeof plain === 'string' && plain) {
+                    migrations.push({ key: row.key, value: deepClone(row.value), privateKeyPem: plain });
+                }
+                continue;
+            }
+            try {
+                const privateKeyPem = await decryptPEM(envelope, oldSeed);
+                migrations.push({ key: row.key, value: deepClone(row.value), privateKeyPem });
+            }
+            catch {
+                throw new SeedMigrationError(`seed migration refused: private key is not encrypted by old seed: aid=${row.key}`);
+            }
+        }
+        if (migrations.length === 0) {
+            throw new SeedMigrationError('seed migration refused: no encrypted private key verified with old seed');
+        }
+        const result = {
+            migrated: 0,
+            skipped: 0,
+            errors: 0,
+            privateKeysVerified: migrations.length,
+            privateKeysMigrated: 0,
+        };
+        for (const item of migrations) {
+            const next = deepClone(item.value);
+            next._encrypted_pk = await encryptPEM(item.privateKeyPem, newSeed);
+            const verified = await decryptPEM(next._encrypted_pk, newSeed);
+            if (verified !== item.privateKeyPem) {
+                throw new SeedMigrationError(`new seed verification failed for private key: aid=${item.key}`);
+            }
+            delete next.private_key_pem;
+            await idbPut(STORE_KEY_PAIRS, item.key, next);
+            result.migrated += 1;
+            result.privateKeysMigrated += 1;
+        }
+        return result;
+    }
+    async changeSeed(oldSeed, newSeed) {
+        const result = await IndexedDBIdentityStore.changeSeed(oldSeed, newSeed);
+        this._encryptionSeed = newSeed;
+        return result;
+    }
+    async _withAidLock(aid, fn) {
+        const key = safeAid(aid);
+        const previous = IndexedDBIdentityStore._aidTails.get(key) ?? Promise.resolve();
+        let release;
+        const current = new Promise((resolve) => { release = resolve; });
+        const tail = previous.catch(() => undefined).then(() => current);
+        IndexedDBIdentityStore._aidTails.set(key, tail);
+        await previous.catch(() => undefined);
+        try {
+            return await fn();
+        }
+        finally {
+            release();
+            if (IndexedDBIdentityStore._aidTails.get(key) === tail) {
+                IndexedDBIdentityStore._aidTails.delete(key);
+            }
+        }
+    }
+    async listIdentities() {
+        const tStart = Date.now();
+        this._log.debug('listIdentities enter');
+        try {
+            const records = await idbGetAll(STORE_METADATA);
+            const aids = new Set();
+            for (const item of records) {
+                if (item.key.startsWith('_seq_|'))
+                    continue;
+                const value = item.value;
+                const aid = typeof value === 'object' && value !== null && isRecord(value) && typeof value.aid === 'string' && value.aid
+                    ? value.aid
+                    : item.key;
+                aids.add(String(aid));
+            }
+            for (const item of await idbGetAll(STORE_KEY_PAIRS)) {
+                if (!item.key.startsWith('_seq_|'))
+                    aids.add(item.key);
+            }
+            for (const item of await idbGetAll(STORE_CERTS)) {
+                if (item.key.startsWith('_seq_|'))
+                    continue;
+                const [safe] = item.key.split('|', 1);
+                if (safe)
+                    aids.add(safe);
+            }
+            const result = [...aids].sort();
+            this._log.debug(`listIdentities exit: elapsed=${Date.now() - tStart}ms count=${result.length}`);
+            return result;
+        }
+        catch (err) {
+            this._log.debug(`listIdentities exit (error): elapsed=${Date.now() - tStart}ms err=${err instanceof Error ? err.message : String(err)}`);
+            throw err;
+        }
+    }
+    // ── 密钥对 ──────────────────────────────────────────
+    async loadKeyPair(aid) {
+        const data = await idbGet(STORE_KEY_PAIRS, metadataStoreKey(aid));
+        if (!isRecord(data))
+            return null;
+        const result = deepClone(data);
+        const epk = result._encrypted_pk;
+        if (epk && typeof epk === 'object' && !Array.isArray(epk) && hasEncryptionSeed(this._encryptionSeed)) {
+            try {
+                const envelope = epk;
+                result.private_key_pem = await decryptPEM(envelope, this._encryptionSeed);
+                delete result._encrypted_pk;
+            }
+            catch {
+                this._log.error(`[keystore] decrypt ${aid} private key failed, maybe encryptionSeed mismatch`);
+                throw new Error(`private key decrypt failed for aid ${aid}: seed_password mismatch or IndexedDB record corrupted`);
+            }
+        }
+        else if (!epk && typeof result.private_key_pem === 'string' && hasEncryptionSeed(this._encryptionSeed)) {
+            await this.saveKeyPair(aid, result);
+        }
+        return result;
+    }
+    async saveKeyPair(aid, keyPair) {
+        const record = deepClone(keyPair);
+        if (hasEncryptionSeed(this._encryptionSeed) && typeof record.private_key_pem === 'string') {
+            record._encrypted_pk = await encryptPEM(record.private_key_pem, this._encryptionSeed);
+            delete record.private_key_pem;
+        }
+        await idbPut(STORE_KEY_PAIRS, metadataStoreKey(aid), record);
+    }
+    // ── RegisterAID pending 身份 ─────────────────────────
+    async pendingIdentityDir(aid) {
+        const handle = `${pendingIdentityPrefix(aid)}${randomHex(4)}-${Math.floor(Date.now() / 1000)}`;
+        const now = Date.now();
+        await idbPut(STORE_PENDING_IDENTITIES, handle, {
+            aid,
+            created_at: now,
+            updated_at: now,
+        });
+        return handle;
+    }
+    async listPendingIdentityDirs(aid) {
+        const prefix = pendingIdentityPrefix(aid);
+        const rows = await idbGetAllByPrefix(STORE_PENDING_IDENTITIES, prefix);
+        return rows
+            .filter((row) => row.key.startsWith(prefix) && isRecord(row.value) && String(row.value.aid ?? '') === aid)
+            .sort((a, b) => Number(b.value.updated_at ?? 0) - Number(a.value.updated_at ?? 0))
+            .map((row) => row.key);
+    }
+    async savePendingKeyPair(handle, aid, keyPair) {
+        const current = await this._loadPendingRecord(handle, aid);
+        if (!current)
+            throw new Error(`pending identity not found: ${handle}`);
+        const record = deepClone(keyPair);
+        const privateKeyPem = record.private_key_pem;
+        if (typeof privateKeyPem !== 'string' || !privateKeyPem) {
+            throw new Error('savePendingKeyPair requires private_key_pem');
+        }
+        record._encrypted_pk = await encryptPEM(privateKeyPem, this._encryptionSeed ?? '');
+        delete record.private_key_pem;
+        await idbPut(STORE_PENDING_IDENTITIES, handle, {
+            ...current,
+            aid,
+            key_pair: record,
+            updated_at: Date.now(),
+        });
+    }
+    async loadPendingKeyPair(handle, aid) {
+        const current = await this._loadPendingRecord(handle, aid, false);
+        if (!current || !isRecord(current.key_pair))
+            return null;
+        const result = deepClone(current.key_pair);
+        const encrypted = result._encrypted_pk;
+        if (isRecord(encrypted)) {
+            try {
+                const envelope = encrypted;
+                result.private_key_pem = await decryptPEM(envelope, this._encryptionSeed ?? '');
+                delete result._encrypted_pk;
+                return result;
+            }
+            catch {
+                this._log.error(`[keystore] decrypt pending ${aid} private key failed, maybe encryptionSeed mismatch`);
+                throw new Error(`pending identity private key decrypt failed for aid ${aid}: seed_password mismatch or IndexedDB record corrupted`);
+            }
+        }
+        if (typeof result.private_key_pem === 'string' && result.private_key_pem) {
+            await this.savePendingKeyPair(handle, aid, result);
+            return result;
+        }
+        return result;
+    }
+    async savePendingCert(handle, certPem) {
+        const current = await this._loadPendingRecord(handle, undefined);
+        if (!current)
+            throw new Error(`pending identity not found: ${handle}`);
+        await idbPut(STORE_PENDING_IDENTITIES, handle, {
+            ...current,
+            cert: certPem,
+            updated_at: Date.now(),
+        });
+    }
+    async promotePendingIdentity(handle, aid) {
+        const current = await this._loadPendingRecord(handle, aid);
+        if (!current)
+            throw new Error(`pending identity not found: ${handle}`);
+        if (!isRecord(current.key_pair)) {
+            throw new Error(`promotePendingIdentity: missing pending key pair: ${handle}`);
+        }
+        const targetKey = metadataStoreKey(aid);
+        const [existingKeyPair, existingCert, existingMetadata] = await Promise.all([
+            idbGet(STORE_KEY_PAIRS, targetKey),
+            idbGet(STORE_CERTS, certStoreKey(aid)),
+            idbGet(STORE_METADATA, targetKey),
+        ]);
+        if (existingKeyPair || existingCert || existingMetadata) {
+            throw new Error(`promotePendingIdentity: target exists: ${targetKey}`);
+        }
+        const keyPair = await this._protectedPendingKeyPair(current, aid);
+        await idbPut(STORE_KEY_PAIRS, targetKey, keyPair);
+        if (typeof current.cert === 'string' && current.cert) {
+            await idbPut(STORE_CERTS, certStoreKey(aid), current.cert);
+        }
+        await idbDelete(STORE_PENDING_IDENTITIES, handle);
+        return targetKey;
+    }
+    async discardPendingIdentity(handle) {
+        await idbDelete(STORE_PENDING_IDENTITIES, handle);
+    }
+    async cleanupPendingDirs(maxAgeMs = 600_000) {
+        const rows = await idbGetAll(STORE_PENDING_IDENTITIES);
+        const now = Date.now();
+        let removed = 0;
+        for (const row of rows) {
+            if (!isRecord(row.value))
+                continue;
+            const updatedAt = Number(row.value.updated_at ?? row.value.created_at ?? 0);
+            if (updatedAt && now - updatedAt < maxAgeMs)
+                continue;
+            await idbDelete(STORE_PENDING_IDENTITIES, row.key);
+            removed++;
+        }
+        return removed;
+    }
+    // ── 证书 ──────────────────────────────────────────
+    async loadCert(aid, certFingerprint) {
+        const normalized = normalizeCertFingerprint(certFingerprint);
+        if (normalized) {
+            const versioned = await idbGet(STORE_CERTS, certStoreKey(aid, normalized));
+            if (typeof versioned === 'string')
+                return versioned;
+            const active = await idbGet(STORE_CERTS, certStoreKey(aid));
+            if (typeof active === 'string' && await fingerprintFromCertPem(active) === normalized)
+                return active;
+            return null;
+        }
+        const data = await idbGet(STORE_CERTS, certStoreKey(aid));
+        return typeof data === 'string' ? data : null;
+    }
+    async saveCert(aid, certPem, certFingerprint, opts) {
+        const normalized = normalizeCertFingerprint(certFingerprint);
+        if (normalized) {
+            await idbPut(STORE_CERTS, certStoreKey(aid, normalized), certPem);
+            if (opts?.makeActive) {
+                await idbPut(STORE_CERTS, certStoreKey(aid), certPem);
+            }
+            return;
+        }
+        await idbPut(STORE_CERTS, certStoreKey(aid), certPem);
+    }
+    // ── 身份信息（组合操作） ──────────────────────────
+    async loadIdentity(aid) {
+        const tStart = Date.now();
+        this._log.debug(`loadIdentity enter: aid=${aid}`);
+        try {
+            const result = await this._withAidLock(aid, async () => {
+                const [keyPair, cert] = await Promise.all([
+                    this._loadKeyPairUnlocked(aid),
+                    this._loadCertUnlocked(aid),
+                ]);
+                const metadataOnly = await this._loadMetadataOnlyUnlocked(aid) ?? {};
+                const hasMeta = Object.keys(metadataOnly).length > 0;
+                if (!keyPair && !cert && !hasMeta)
+                    return null;
+                const identity = {};
+                if (hasMeta)
+                    Object.assign(identity, metadataOnly);
+                if (keyPair)
+                    Object.assign(identity, keyPair);
+                if (cert) {
+                    const localPubB64 = keyPair?.public_key_der_b64;
+                    if (typeof localPubB64 === 'string' && localPubB64) {
+                        const certSpkiB64 = extractSpkiB64FromCertPem(cert);
+                        if (certSpkiB64 && certSpkiB64 !== localPubB64) {
+                            this._log.error(`[keystore] identity ${aid} key public key mismatches cert public key, discard cert`);
+                        }
+                        else {
+                            identity.cert = cert;
+                        }
+                    }
+                    else {
+                        identity.cert = cert;
+                    }
+                }
+                return identity;
+            });
+            this._log.debug(`loadIdentity exit: elapsed=${Date.now() - tStart}ms aid=${aid} found=${result !== null}`);
+            return result;
+        }
+        catch (err) {
+            this._log.debug(`loadIdentity exit (error): elapsed=${Date.now() - tStart}ms aid=${aid} err=${err instanceof Error ? err.message : String(err)}`);
+            throw err;
+        }
+    }
+    async saveIdentity(aid, identity) {
+        const tStart = Date.now();
+        this._log.debug(`saveIdentity enter: aid=${aid} has_cert=${!!identity.cert}`);
+        try {
+            await this._withAidLock(aid, async () => {
+                const keyPairFields = {};
+                for (const key of ['private_key_pem', 'public_key_der_b64', 'curve']) {
+                    if (key in identity)
+                        keyPairFields[key] = identity[key];
+                }
+                if (Object.keys(keyPairFields).length > 0) {
+                    await this._saveKeyPairUnlocked(aid, keyPairFields);
+                }
+                const cert = identity.cert;
+                if (typeof cert === 'string' && cert) {
+                    await this._saveCertUnlocked(aid, cert);
+                }
+                const metadataFields = {};
+                for (const [key, value] of Object.entries(identity)) {
+                    if (!['private_key_pem', 'public_key_der_b64', 'curve', 'cert'].includes(key)) {
+                        metadataFields[key] = value;
+                    }
+                }
+                if (Object.keys(metadataFields).length > 0) {
+                    const plain = stripStructuredFields(metadataFields);
+                    if (Object.keys(plain).length > 0) {
+                        const current = (await this._loadMetadataOnlyUnlocked(aid)) ?? {};
+                        Object.assign(current, plain);
+                        await this._saveMetadataOnlyUnlocked(aid, current);
+                    }
+                }
+            });
+            this._log.debug(`saveIdentity exit: elapsed=${Date.now() - tStart}ms aid=${aid}`);
+        }
+        catch (err) {
+            this._log.debug(`saveIdentity exit (error): elapsed=${Date.now() - tStart}ms aid=${aid} err=${err instanceof Error ? err.message : String(err)}`);
+            throw err;
+        }
+    }
+    // ── Metadata KV（gateway_url 等）────────────────────────
+    async getMetadata(aid, key) {
+        if (!key)
+            return '';
+        return this._withAidLock(aid, async () => {
+            const md = (await this._loadMetadataOnlyUnlocked(aid)) ?? {};
+            const value = md[key];
+            if (typeof value === 'string')
+                return value;
+            if (value === null || value === undefined)
+                return '';
+            return String(value);
+        });
+    }
+    async setMetadata(aid, key, value) {
+        if (!key)
+            return;
+        await this._withAidLock(aid, async () => {
+            const current = (await this._loadMetadataOnlyUnlocked(aid)) ?? {};
+            const next = deepClone(current);
+            if (value === '' || value === undefined || value === null) {
+                delete next[key];
+            }
+            else {
+                next[key] = value;
+            }
+            await this._saveMetadataOnlyUnlocked(aid, next);
+        });
+    }
+    // ── 内部辅助 ─────────────────────────────────────────
+    async _loadPendingRecord(handle, aid, required = true) {
+        const data = await idbGet(STORE_PENDING_IDENTITIES, handle);
+        if (!isRecord(data)) {
+            if (required)
+                throw new Error(`pending identity not found: ${handle}`);
+            return null;
+        }
+        const record = deepClone(data);
+        if (aid !== undefined && String(record.aid ?? '') !== aid) {
+            throw new Error(`pending identity aid mismatch: ${handle}`);
+        }
+        return record;
+    }
+    async _protectedPendingKeyPair(current, aid) {
+        if (!isRecord(current.key_pair)) {
+            throw new Error(`pending identity missing key pair for ${aid}`);
+        }
+        const keyPair = deepClone(current.key_pair);
+        const privateKeyPem = keyPair.private_key_pem;
+        if (typeof privateKeyPem === 'string' && privateKeyPem) {
+            throw new Error(`pending identity private key is plaintext for ${aid}`);
+        }
+        if (!isRecord(keyPair._encrypted_pk)) {
+            throw new Error(`pending identity private key is not encrypted for ${aid}`);
+        }
+        return keyPair;
+    }
+    async _loadKeyPairUnlocked(aid) {
+        const data = await idbGet(STORE_KEY_PAIRS, metadataStoreKey(aid));
+        if (!isRecord(data))
+            return null;
+        const result = deepClone(data);
+        if (isRecord(result._encrypted_pk) && hasEncryptionSeed(this._encryptionSeed)) {
+            try {
+                const envelope = result._encrypted_pk;
+                result.private_key_pem = await decryptPEM(envelope, this._encryptionSeed);
+                delete result._encrypted_pk;
+            }
+            catch {
+                this._log.error(`[keystore] decrypt ${aid} private key failed, maybe encryptionSeed mismatch`);
+                throw new Error(`private key decrypt failed for aid ${aid}: seed_password mismatch or IndexedDB record corrupted`);
+            }
+        }
+        else if (!isRecord(result._encrypted_pk) && typeof result.private_key_pem === 'string' && hasEncryptionSeed(this._encryptionSeed)) {
+            await this._saveKeyPairUnlocked(aid, result);
+        }
+        return result;
+    }
+    async _saveKeyPairUnlocked(aid, keyPair) {
+        const record = deepClone(keyPair);
+        if (hasEncryptionSeed(this._encryptionSeed) && typeof record.private_key_pem === 'string') {
+            record._encrypted_pk = await encryptPEM(record.private_key_pem, this._encryptionSeed);
+            delete record.private_key_pem;
+        }
+        await idbPut(STORE_KEY_PAIRS, metadataStoreKey(aid), record);
+    }
+    async _loadCertUnlocked(aid) {
+        const data = await idbGet(STORE_CERTS, certStoreKey(aid));
+        return typeof data === 'string' ? data : null;
+    }
+    async _saveCertUnlocked(aid, certPem) {
+        await idbPut(STORE_CERTS, certStoreKey(aid), certPem);
+    }
+    async _loadMetadataOnlyUnlocked(aid) {
+        const data = await idbGet(STORE_METADATA, metadataStoreKey(aid));
+        return isRecord(data) ? deepClone(data) : null;
+    }
+    async _saveMetadataOnlyUnlocked(aid, metadata) {
+        const plain = stripStructuredFields(metadata);
+        await idbPut(STORE_METADATA, metadataStoreKey(aid), plain);
+    }
+}
+//# sourceMappingURL=indexeddb-identity-store.js.map