@agentunion/fastaun-browser 0.4.5 → 0.4.6

package/dist/keystore/indexeddb-token-store.d.ts

@@ -0,0 +1,119 @@
+import type { ModuleLogger } from '../logger.js';
+import type { AgentMdCacheRecord, AgentMdCacheUpsert, TokenStore, GroupStateRecord } from './index.js';
+import { type GroupSecretRecord, type MetadataRecord, type PrekeyMap, type PrekeyRecord, type SessionRecord } from './indexeddb-shared.js';
+/**
+ * 基于 IndexedDB 的 TokenStore 实现（不含私钥操作）。
+ *
+ * 设计语义：
+ * - metadata 只保存普通 metadata 字段；
+ * - e2ee_prekeys / group_secrets 只保存到结构化 store；
+ * - 若检测到旧版本把结构化数据写进了 metadata，会自动迁移到结构化 store。
+ */
+export declare class IndexedDBTokenStore implements TokenStore {
+    private _log;
+    setLogger(log: ModuleLogger): void;
+    private static _aidTails;
+    private _withAidLock;
+    loadCert(aid: string, certFingerprint?: string): Promise<string | null>;
+    saveCert(aid: string, certPem: string, certFingerprint?: string, opts?: {
+        makeActive?: boolean;
+    }): Promise<void>;
+    loadInstanceState(aid: string, deviceId: string, slotId?: string): Promise<MetadataRecord | null>;
+    saveInstanceState(aid: string, deviceId: string, slotId: string, state: MetadataRecord): Promise<void>;
+    updateInstanceState(aid: string, deviceId: string, slotId: string, updater: (state: MetadataRecord) => MetadataRecord | void): Promise<MetadataRecord>;
+    loadE2EEPrekeys(aid: string, deviceId?: string): Promise<PrekeyMap>;
+    /**
+     * 按 prekey_id 单点查询本地 prekey（O(log N) IndexedDB primary-key 查找）。
+     *
+     * 解密入站消息时，envelope 里只带 prekey_id，没有 device_id。优先用 IndexedDB
+     * 主键直查；命中则 O(log N)，未命中再回退到前缀扫描，保证跨 device_id 也能找到。
+     */
+    loadE2EEPrekeyById(aid: string, prekeyId: string): Promise<Record<string, unknown> | null>;
+    saveE2EEPrekey(aid: string, prekeyId: string, prekeyData: PrekeyRecord, deviceId?: string): Promise<void>;
+    cleanupE2EEPrekeys(aid: string, cutoffMs: number, keepLatest?: number, deviceId?: string): Promise<string[]>;
+    listGroupSecretIds(aid: string): Promise<string[]>;
+    cleanupGroupOldEpochsState(aid: string, groupId: string, cutoffMs: number): Promise<number>;
+    loadGroupSecretEpoch(aid: string, groupId: string, epoch?: number | null): Promise<GroupSecretRecord | null>;
+    loadGroupSecretEpochs(aid: string, groupId: string): Promise<GroupSecretRecord[]>;
+    storeGroupSecretTransition(aid: string, groupId: string, opts: {
+        epoch: number;
+        secret: string;
+        commitment: string;
+        memberAids: string[];
+        epochChain?: string;
+        pendingRotationId?: string;
+        epochChainUnverified?: boolean | null;
+        epochChainUnverifiedReason?: string | null;
+        oldEpochRetentionMs: number;
+    }): Promise<boolean>;
+    storeGroupSecretEpoch(aid: string, groupId: string, opts: {
+        epoch: number;
+        secret: string;
+        commitment: string;
+        memberAids: string[];
+        epochChain?: string;
+        pendingRotationId?: string;
+        epochChainUnverified?: boolean | null;
+        epochChainUnverifiedReason?: string | null;
+        oldEpochRetentionMs: number;
+    }): Promise<boolean>;
+    discardPendingGroupSecretState(aid: string, groupId: string, epoch: number, rotationId: string): Promise<boolean>;
+    deleteGroupSecretState(aid: string, groupId: string): Promise<void>;
+    loadE2EESessions(aid: string): Promise<SessionRecord[]>;
+    saveE2EESession(aid: string, sessionId: string, data: SessionRecord): Promise<void>;
+    /**
+     * 读取单个 metadata KV（如 gateway_url 等跨进程缓存项）。
+     * 不存在时返回空字符串，与 Python keystore 的 get_metadata 语义保持一致。
+     */
+    getMetadata(aid: string, key: string): Promise<string>;
+    /**
+     * 写入单个 metadata KV。空字符串视为删除该字段。
+     * 与 _saveMetadataOnlyUnlocked 不同，本方法只更新指定 key，不影响其他字段。
+     */
+    setMetadata(aid: string, key: string, value: string): Promise<void>;
+    saveSeq(aid: string, deviceId: string, slotId: string, namespace: string, contiguousSeq: number): Promise<void>;
+    loadSeq(aid: string, deviceId: string, slotId: string, namespace: string): Promise<number>;
+    loadAllSeqs(aid: string, deviceId: string, slotId: string): Promise<Record<string, number>>;
+    deleteSeq(aid: string, deviceId: string, slotId: string, namespace: string): Promise<void>;
+    loadAgentMdCache(ownerAid: string, targetAid: string): Promise<AgentMdCacheRecord | null>;
+    upsertAgentMdCache(ownerAid: string, targetAid: string, fields: AgentMdCacheUpsert): Promise<AgentMdCacheRecord>;
+    listAgentMdContentAids(agentMdPath: string): Promise<string[]>;
+    saveGroupState(groupId: string, state: GroupStateRecord): Promise<void>;
+    loadGroupState(groupId: string): Promise<GroupStateRecord | null>;
+    private static readonly _TRUST_LIST_KEY;
+    private static readonly _TRUST_BUNDLE_KEY;
+    private static readonly _TRUST_CERT_PREFIX;
+    private static readonly _TRUST_ISSUER_PREFIX;
+    /** 计算 PEM 证书的 SHA-256 指纹（hex，无冒号） */
+    private _pemFingerprint;
+    /** 拆分 bundle PEM 文本为单个 PEM 证书数组 */
+    private _splitPemBundle;
+    saveTrustRoots(trustList: Record<string, unknown>, rootCerts: Array<{
+        id?: string;
+        cert_pem: string;
+        fingerprint_sha256?: string;
+    }>): Promise<string>;
+    saveIssuerRootCert(issuer: string, certPem: string, fingerprintSha256?: string): Promise<[string, string]>;
+    loadTrustRoots(): Promise<Record<string, unknown> | null>;
+    private _loadMetadataOnlyUnlocked;
+    private _saveMetadataOnlyUnlocked;
+    private _migrateLegacyStructuredStateUnlocked;
+    private _loadPrekeysUnlocked;
+    private _loadPrekeyByIdUnlocked;
+    private _replacePrekeysUnlocked;
+    private _loadGroupEntriesUnlocked;
+    private _replaceGroupEntriesUnlocked;
+    private _saveSingleGroupEntryUnlocked;
+    private _storeGroupSecretTransitionUnlocked;
+    private _storeGroupSecretEpochUnlocked;
+    private _discardPendingGroupSecretUnlocked;
+    private _buildGroupCurrentRecord;
+    private _mergeGroupEntryFromLegacy;
+    private _preferNewerGroupEpochRecord;
+    private _isUnexpiredRecord;
+    private _isPrekeyRecoverable;
+    private _isGroupEpochRecoverable;
+    private _loadSessionsUnlocked;
+    private _migrateLegacySessionsUnlocked;
+}
+//# sourceMappingURL=indexeddb-token-store.d.ts.map

package/dist/keystore/indexeddb-token-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"indexeddb-token-store.d.ts","sourceRoot":"","sources":["../../src/keystore/indexeddb-token-store.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACvG,OAAO,EA2CL,KAAK,iBAAiB,EAEtB,KAAK,cAAc,EACnB,KAAK,SAAS,EACd,KAAK,YAAY,EACjB,KAAK,aAAa,EACnB,MAAM,uBAAuB,CAAC;AAE/B;;;;;;;GAOG;AACH,qBAAa,mBAAoB,YAAW,UAAU;IACpD,OAAO,CAAC,IAAI,CAA0B;IACtC,SAAS,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI;IAElC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAoC;YAE9C,YAAY;IAuBpB,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IA6BvE,QAAQ,CACZ,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,eAAe,CAAC,EAAE,MAAM,EACxB,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GAC9B,OAAO,CAAC,IAAI,CAAC;IAuBV,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,SAAK,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAO7F,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAMtG,mBAAmB,CACvB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,cAAc,GAAG,IAAI,GACxD,OAAO,CAAC,cAAc,CAAC;IAapB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;IAOzE;;;;;OAKG;IACG,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAO1F,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA0BzG,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,SAAI,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAqCvG,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAgBlD,0BAA0B,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAe3F,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAqB5G,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAoBjF,0BAA0B,CAC9B,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,EAAE,CAAC;QACrB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,oBAAoB,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;QACtC,0BAA0B,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3C,mBAAmB,EAAE,MAAM,CAAC;KAC7B,GACA,OAAO,CAAC,OAAO,CAAC;IAOb,qBAAqB,CACzB,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,EAAE,CAAC;QACrB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,oBAAoB,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;QACtC,0BAA0B,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3C,mBAAmB,EAAE,MAAM,CAAC;KAC7B,GACA,OAAO,CAAC,OAAO,CAAC;IAOb,8BAA8B,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IASjH,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWnE,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAOvD,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IASzF;;;OAGG;IACG,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAW5D;;;OAGG;IACG,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBnE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK/G,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAM1F,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAc3F,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAO1F,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC;IASzF,kBAAkB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAYhH,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAuB9D,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAavE,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAmBvE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,CAAwB;IAC/D,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,iBAAiB,CAA0B;IACnE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAyB;IACnE,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAA2B;IAEvE,qCAAqC;YACvB,eAAe;IAgB7B,mCAAmC;IACnC,OAAO,CAAC,eAAe;IAOjB,cAAc,CAClB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAClC,SAAS,EAAE,KAAK,CAAC;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,GAC/E,OAAO,CAAC,MAAM,CAAC;IAgBZ,kBAAkB,CACtB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,iBAAiB,GAAE,MAAW,GAC7B,OAAO,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IA4BtB,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;YAQjD,yBAAyB;YAKzB,yBAAyB;YAKzB,qCAAqC;YAoErC,oBAAoB;YAuBpB,uBAAuB;YAsBvB,uBAAuB;YAoBvB,yBAAyB;YA2BzB,4BAA4B;YAoB5B,6BAA6B;YAuB7B,mCAAmC;YA+GnC,8BAA8B;YAwG9B,kCAAkC;IAuChD,OAAO,CAAC,wBAAwB;IAmChC,OAAO,CAAC,0BAA0B;IAwDlC,OAAO,CAAC,4BAA4B;IAUpC,OAAO,CAAC,kBAAkB;IAO1B,OAAO,CAAC,oBAAoB;IAI5B,OAAO,CAAC,wBAAwB;YAQlB,qBAAqB;YAUrB,8BAA8B;CAgB7C"}