@agentunion/fastaun-browser 0.5.0 → 0.5.1

package/dist/keystore/indexeddb-token-store.js

@@ -1,18 +1,38 @@
 // ── IndexedDB TokenStore 实现 ──────────────────────────────
-// 不含私钥操作：证书、实例态、seq、prekeys、群组密钥、sessions、信任根、metadata。
+// 不含私钥操作：证书、实例态、seq、信任根、metadata、agent.md 缓存和群组状态。
 // AUNClient / AuthFlow 持有此类型。
 //
 // 与 IndexedDBIdentityStore 共用同一 IndexedDB 数据库（aun-keystore），
 // 但二者之间无任何代码依赖——共享基础设施集中在 indexeddb-shared.ts。
 import { pemToArrayBuffer } from '../crypto.js';
-import { _noopLog, STORE_CERTS, STORE_METADATA, STORE_INSTANCE_STATE, STORE_PREKEYS, STORE_GROUP_CURRENT, STORE_GROUP_OLD_EPOCHS, STORE_SESSIONS, STORE_GROUP_STATE, STORE_AGENT_MD_CACHE, STRUCTURED_RECOVERY_RETENTION_MS, safeAid, encodePart, deepClone, isRecord, sameJson, metadataStoreKey, normalizeCertFingerprint, fingerprintFromCertPem, certStoreKey, instanceStateStoreKey, prekeyPrefix, prekeyStoreKey, groupCurrentPrefix, groupCurrentStoreKey, groupOldPrefix, groupOldStoreKey, sessionPrefix, sessionStoreKey, seqTrackerPrefix, seqTrackerStoreKey, agentMdCachePrefix, agentMdCacheStoreKey, stripStructuredFields, normalizeAgentMdCacheRecord, mergeAgentMdCacheRecord, idbGet, idbGetAllByPrefix, idbPut, idbDelete, } from './indexeddb-shared.js';
+import { convertToGroupAid } from '../group-id.js';
+import { _noopLog, STORE_CERTS, STORE_METADATA, STORE_INSTANCE_STATE, STORE_GROUP_STATE, STORE_AGENT_MD_CACHE, safeAid, encodePart, deepClone, isRecord, metadataStoreKey, normalizeCertFingerprint, fingerprintFromCertPem, certStoreKey, instanceStateStoreKey, seqTrackerPrefix, seqTrackerStoreKey, agentMdCachePrefix, agentMdCacheStoreKey, stripStructuredFields, normalizeAgentMdCacheRecord, mergeAgentMdCacheRecord, idbGet, idbGetAllByPrefix, idbPut, idbDelete, } from './indexeddb-shared.js';
+function groupLookupCandidates(groupId, localIssuer = '') {
+    const raw = String(groupId ?? '').trim();
+    if (!raw)
+        return [];
+    const normalized = convertToGroupAid(raw, { localIssuer });
+    const candidates = [];
+    const add = (value) => {
+        const trimmed = String(value ?? '').trim();
+        if (trimmed && !candidates.includes(trimmed))
+            candidates.push(trimmed);
+    };
+    add(raw);
+    add(normalized);
+    const dotIdx = normalized.indexOf('.');
+    if (dotIdx > 0 && dotIdx < normalized.length - 1) {
+        const base = normalized.slice(0, dotIdx);
+        const issuer = normalized.slice(dotIdx + 1);
+        add(`group.${issuer}/${base}`);
+        add(`${base}@${issuer}`);
+        if (localIssuer && issuer === localIssuer.replace(/^\.+|\.+$/g, '').toLowerCase())
+            add(base);
+    }
+    return candidates;
+}
 /**
  * 基于 IndexedDB 的 TokenStore 实现（不含私钥操作）。
- *
- * 设计语义：
- * - metadata 只保存普通 metadata 字段；
- * - e2ee_prekeys / group_secrets 只保存到结构化 store；
- * - 若检测到旧版本把结构化数据写进了 metadata，会自动迁移到结构化 store。
  */
 export class IndexedDBTokenStore {
     _log = _noopLog;
@@ -111,204 +131,6 @@ export class IndexedDBTokenStore {
             return deepClone(updated);
         });
     }
-    // ── 结构化 prekeys ───────────────────────────────────
-    async loadE2EEPrekeys(aid, deviceId) {
-        return this._withAidLock(aid, async () => {
-            await this._migrateLegacyStructuredStateUnlocked(aid);
-            return this._loadPrekeysUnlocked(aid, String(deviceId ?? '').trim());
-        });
-    }
-    /**
-     * 按 prekey_id 单点查询本地 prekey（O(log N) IndexedDB primary-key 查找）。
-     *
-     * 解密入站消息时，envelope 里只带 prekey_id，没有 device_id。优先用 IndexedDB
-     * 主键直查；命中则 O(log N)，未命中再回退到前缀扫描，保证跨 device_id 也能找到。
-     */
-    async loadE2EEPrekeyById(aid, prekeyId) {
-        return this._withAidLock(aid, async () => {
-            await this._migrateLegacyStructuredStateUnlocked(aid);
-            return this._loadPrekeyByIdUnlocked(aid, prekeyId);
-        });
-    }
-    async saveE2EEPrekey(aid, prekeyId, prekeyData, deviceId) {
-        await this._withAidLock(aid, async () => {
-            await this._migrateLegacyStructuredStateUnlocked(aid);
-            const record = deepClone(prekeyData);
-            record.prekey_id = prekeyId;
-            const normalizedDeviceId = String(deviceId ?? '').trim();
-            if (normalizedDeviceId) {
-                record.device_id = normalizedDeviceId;
-            }
-            else {
-                delete record.device_id;
-            }
-            const targetKey = prekeyStoreKey(aid, prekeyId, normalizedDeviceId);
-            for (const item of await idbGetAllByPrefix(STORE_PREKEYS, prekeyPrefix(aid))) {
-                if (!isRecord(item.value))
-                    continue;
-                const existingPrekeyId = typeof item.value.prekey_id === 'string'
-                    ? item.value.prekey_id
-                    : '';
-                const existingDeviceId = String(item.value.device_id ?? '').trim();
-                if (existingPrekeyId === prekeyId && existingDeviceId === normalizedDeviceId && item.key !== targetKey) {
-                    await idbDelete(STORE_PREKEYS, item.key);
-                }
-            }
-            await idbPut(STORE_PREKEYS, targetKey, record);
-        });
-    }
-    async cleanupE2EEPrekeys(aid, cutoffMs, keepLatest = 7, deviceId) {
-        return this._withAidLock(aid, async () => {
-            await this._migrateLegacyStructuredStateUnlocked(aid);
-            const normalizedDeviceId = String(deviceId ?? '').trim();
-            const prekeys = await this._loadPrekeysUnlocked(aid, normalizedDeviceId);
-            const retainedIds = new Set(Object.entries(prekeys)
-                .sort((left, right) => {
-                const leftMarker = Number(left[1].created_at ?? left[1].updated_at ?? left[1].expires_at ?? 0);
-                const rightMarker = Number(right[1].created_at ?? right[1].updated_at ?? right[1].expires_at ?? 0);
-                if (rightMarker !== leftMarker)
-                    return rightMarker - leftMarker;
-                return right[0].localeCompare(left[0]);
-            })
-                .slice(0, keepLatest)
-                .map(([prekeyId]) => prekeyId));
-            const removed = Object.entries(prekeys)
-                .filter(([prekeyId, data]) => Number(data.created_at ?? data.updated_at ?? data.expires_at ?? 0) < cutoffMs
-                && !retainedIds.has(prekeyId))
-                .map(([prekeyId]) => prekeyId);
-            const removedIds = new Set(removed);
-            for (const item of await idbGetAllByPrefix(STORE_PREKEYS, prekeyPrefix(aid))) {
-                if (!isRecord(item.value))
-                    continue;
-                const recordDeviceId = String(item.value.device_id ?? '').trim();
-                if (recordDeviceId !== normalizedDeviceId)
-                    continue;
-                const prekeyId = typeof item.value.prekey_id === 'string' ? item.value.prekey_id : '';
-                if (removedIds.has(prekeyId))
-                    await idbDelete(STORE_PREKEYS, item.key);
-            }
-            return removed;
-        });
-    }
-    // ── 结构化群组密钥 ─────────────────────────────────
-    async listGroupSecretIds(aid) {
-        return this._withAidLock(aid, async () => {
-            await this._migrateLegacyStructuredStateUnlocked(aid);
-            const ids = new Set();
-            for (const item of await idbGetAllByPrefix(STORE_GROUP_CURRENT, groupCurrentPrefix(aid))) {
-                const [, encodedGroupId] = item.key.split('|');
-                if (encodedGroupId)
-                    ids.add(decodeURIComponent(encodedGroupId));
-            }
-            for (const item of await idbGetAllByPrefix(STORE_GROUP_OLD_EPOCHS, groupOldPrefix(aid))) {
-                const [, encodedGroupId] = item.key.split('|');
-                if (encodedGroupId)
-                    ids.add(decodeURIComponent(encodedGroupId));
-            }
-            return [...ids].sort();
-        });
-    }
-    async cleanupGroupOldEpochsState(aid, groupId, cutoffMs) {
-        return this._withAidLock(aid, async () => {
-            await this._migrateLegacyStructuredStateUnlocked(aid);
-            let removed = 0;
-            for (const item of await idbGetAllByPrefix(STORE_GROUP_OLD_EPOCHS, groupOldPrefix(aid, groupId))) {
-                if (!isRecord(item.value))
-                    continue;
-                if (Number(item.value.updated_at ?? 0) <= cutoffMs) {
-                    await idbDelete(STORE_GROUP_OLD_EPOCHS, item.key);
-                    removed += 1;
-                }
-            }
-            return removed;
-        });
-    }
-    async loadGroupSecretEpoch(aid, groupId, epoch) {
-        return this._withAidLock(aid, async () => {
-            await this._migrateLegacyStructuredStateUnlocked(aid);
-            const current = await idbGet(STORE_GROUP_CURRENT, groupCurrentStoreKey(aid, groupId));
-            if (isRecord(current)) {
-                const record = deepClone(current);
-                delete record.group_id;
-                if (epoch === undefined || epoch === null || Number(record.epoch ?? 0) === Number(epoch)) {
-                    return record;
-                }
-            }
-            else if (epoch === undefined || epoch === null) {
-                return null;
-            }
-            const old = await idbGet(STORE_GROUP_OLD_EPOCHS, groupOldStoreKey(aid, groupId, Number(epoch)));
-            if (!isRecord(old))
-                return null;
-            const record = deepClone(old);
-            delete record.group_id;
-            return record;
-        });
-    }
-    async loadGroupSecretEpochs(aid, groupId) {
-        return this._withAidLock(aid, async () => {
-            await this._migrateLegacyStructuredStateUnlocked(aid);
-            const result = [];
-            const current = await idbGet(STORE_GROUP_CURRENT, groupCurrentStoreKey(aid, groupId));
-            if (isRecord(current)) {
-                const record = deepClone(current);
-                delete record.group_id;
-                result.push(record);
-            }
-            for (const item of await idbGetAllByPrefix(STORE_GROUP_OLD_EPOCHS, groupOldPrefix(aid, groupId))) {
-                if (!isRecord(item.value))
-                    continue;
-                const record = deepClone(item.value);
-                delete record.group_id;
-                result.push(record);
-            }
-            return result;
-        });
-    }
-    async storeGroupSecretTransition(aid, groupId, opts) {
-        return this._withAidLock(aid, async () => {
-            await this._migrateLegacyStructuredStateUnlocked(aid);
-            return this._storeGroupSecretTransitionUnlocked(aid, groupId, opts);
-        });
-    }
-    async storeGroupSecretEpoch(aid, groupId, opts) {
-        return this._withAidLock(aid, async () => {
-            await this._migrateLegacyStructuredStateUnlocked(aid);
-            return this._storeGroupSecretEpochUnlocked(aid, groupId, opts);
-        });
-    }
-    async discardPendingGroupSecretState(aid, groupId, epoch, rotationId) {
-        return this._withAidLock(aid, async () => {
-            const rid = String(rotationId ?? '').trim();
-            if (!rid)
-                return false;
-            await this._migrateLegacyStructuredStateUnlocked(aid);
-            return this._discardPendingGroupSecretUnlocked(aid, groupId, epoch, rid);
-        });
-    }
-    async deleteGroupSecretState(aid, groupId) {
-        await this._withAidLock(aid, async () => {
-            await idbDelete(STORE_GROUP_CURRENT, groupCurrentStoreKey(aid, groupId));
-            for (const item of await idbGetAllByPrefix(STORE_GROUP_OLD_EPOCHS, groupOldPrefix(aid, groupId))) {
-                await idbDelete(STORE_GROUP_OLD_EPOCHS, item.key);
-            }
-        });
-    }
-    // ── E2EE Sessions ─────────────────────────────────────
-    async loadE2EESessions(aid) {
-        return this._withAidLock(aid, async () => {
-            await this._migrateLegacySessionsUnlocked(aid);
-            return this._loadSessionsUnlocked(aid);
-        });
-    }
-    async saveE2EESession(aid, sessionId, data) {
-        await this._withAidLock(aid, async () => {
-            await this._migrateLegacySessionsUnlocked(aid);
-            const record = deepClone(data);
-            record.session_id = sessionId;
-            await idbPut(STORE_SESSIONS, sessionStoreKey(aid, sessionId), record);
-        });
-    }
     /**
      * 读取单个 metadata KV（如 gateway_url 等跨进程缓存项）。
      * 不存在时返回空字符串，与 Python keystore 的 get_metadata 语义保持一致。
@@ -432,19 +254,24 @@ export class IndexedDBTokenStore {
         });
     }
     async loadGroupState(groupId) {
-        const key = encodePart(groupId);
-        const data = await idbGet(STORE_GROUP_STATE, key);
-        if (!data || typeof data.state_version !== 'number')
-            return null;
-        return {
-            group_id: groupId,
-            state_version: data.state_version,
-            state_hash: data.state_hash ?? '',
-            key_epoch: data.key_epoch ?? 0,
-            membership_json: data.membership_json ?? '[]',
-            policy_json: data.policy_json ?? '{}',
-            updated_at: data.updated_at ?? 0,
-        };
+        for (const candidate of groupLookupCandidates(groupId)) {
+            const key = encodePart(candidate);
+            const data = await idbGet(STORE_GROUP_STATE, key);
+            if (!data || typeof data.state_version !== 'number')
+                continue;
+            const storedGroupId = typeof data.group_id === 'string' ? data.group_id : candidate;
+            return {
+                group_id: storedGroupId,
+                group_aid: convertToGroupAid(storedGroupId),
+                state_version: data.state_version,
+                state_hash: data.state_hash ?? '',
+                key_epoch: data.key_epoch ?? 0,
+                membership_json: data.membership_json ?? '[]',
+                policy_json: data.policy_json ?? '{}',
+                updated_at: data.updated_at ?? 0,
+            };
+        }
+        return null;
     }
     // ── Trust Root Storage（信任根证书存储） ─────────────────
     // 浏览器环境无文件系统，统一存入 STORE_INSTANCE_STATE 并以特定前缀的 key 区分。
@@ -526,561 +353,5 @@ export class IndexedDBTokenStore {
         const plain = stripStructuredFields(metadata);
         await idbPut(STORE_METADATA, metadataStoreKey(aid), plain);
     }
-    async _migrateLegacyStructuredStateUnlocked(aid) {
-        const metadataOnly = (await this._loadMetadataOnlyUnlocked(aid)) ?? {};
-        const hasLegacyPrekeys = isRecord(metadataOnly.e2ee_prekeys);
-        const hasLegacyGroups = isRecord(metadataOnly.group_secrets);
-        const hasLegacySessions = Array.isArray(metadataOnly.e2ee_sessions) && metadataOnly.e2ee_sessions.length > 0;
-        if (!hasLegacyPrekeys && !hasLegacyGroups && !hasLegacySessions) {
-            return metadataOnly;
-        }
-        const cleaned = deepClone(metadataOnly);
-        if (hasLegacyPrekeys) {
-            const legacyPrekeys = metadataOnly.e2ee_prekeys;
-            const structuredPrekeys = await this._loadPrekeysUnlocked(aid);
-            let changed = false;
-            if (isRecord(legacyPrekeys)) {
-                for (const [prekeyId, rawData] of Object.entries(legacyPrekeys)) {
-                    if (!isRecord(rawData) || structuredPrekeys[prekeyId])
-                        continue;
-                    if (!this._isPrekeyRecoverable(rawData))
-                        continue;
-                    structuredPrekeys[prekeyId] = deepClone(rawData);
-                    changed = true;
-                }
-            }
-            if (changed) {
-                await this._replacePrekeysUnlocked(aid, structuredPrekeys);
-            }
-            delete cleaned.e2ee_prekeys;
-        }
-        if (hasLegacyGroups) {
-            const legacyGroups = metadataOnly.group_secrets;
-            const structuredGroups = await this._loadGroupEntriesUnlocked(aid);
-            let changed = false;
-            if (isRecord(legacyGroups)) {
-                for (const [groupId, rawEntry] of Object.entries(legacyGroups)) {
-                    if (!isRecord(rawEntry))
-                        continue;
-                    const merged = this._mergeGroupEntryFromLegacy(structuredGroups[groupId], rawEntry);
-                    if (!sameJson(structuredGroups[groupId] ?? null, merged)) {
-                        if (Object.keys(merged).length > 0) {
-                            structuredGroups[groupId] = merged;
-                            changed = true;
-                        }
-                    }
-                }
-            }
-            if (changed) {
-                await this._replaceGroupEntriesUnlocked(aid, structuredGroups);
-            }
-            delete cleaned.group_secrets;
-        }
-        if (hasLegacySessions) {
-            const legacySessions = metadataOnly.e2ee_sessions;
-            for (const session of legacySessions) {
-                const sid = typeof session.session_id === 'string' ? session.session_id : '';
-                if (!sid)
-                    continue;
-                const record = deepClone(session);
-                record.session_id = sid;
-                await idbPut(STORE_SESSIONS, sessionStoreKey(aid, sid), record);
-            }
-            delete cleaned.e2ee_sessions;
-        }
-        await this._saveMetadataOnlyUnlocked(aid, cleaned);
-        return cleaned;
-    }
-    async _loadPrekeysUnlocked(aid, deviceId = '') {
-        const items = await idbGetAllByPrefix(STORE_PREKEYS, prekeyPrefix(aid));
-        const prefix = prekeyPrefix(aid);
-        const result = {};
-        const normalizedDeviceId = String(deviceId ?? '').trim();
-        for (const item of items) {
-            if (!item.key.startsWith(prefix) || !isRecord(item.value))
-                continue;
-            const recordDeviceId = String(item.value.device_id ?? '').trim();
-            if (recordDeviceId !== normalizedDeviceId)
-                continue;
-            const prekeyId = typeof item.value.prekey_id === 'string'
-                ? item.value.prekey_id
-                : item.key.slice(prefix.length);
-            const record = deepClone(item.value);
-            delete record.prekey_id;
-            delete record.device_id;
-            const canonicalKey = prekeyStoreKey(aid, prekeyId, normalizedDeviceId);
-            if (!(prekeyId in result) || item.key === canonicalKey) {
-                result[prekeyId] = record;
-            }
-        }
-        return result;
-    }
-    async _loadPrekeyByIdUnlocked(aid, prekeyId) {
-        if (!prekeyId)
-            return null;
-        const directKey = prekeyStoreKey(aid, prekeyId, '');
-        const direct = await idbGet(STORE_PREKEYS, directKey);
-        if (isRecord(direct)) {
-            const record = deepClone(direct);
-            delete record.prekey_id;
-            delete record.device_id;
-            return record;
-        }
-        for (const item of await idbGetAllByPrefix(STORE_PREKEYS, prekeyPrefix(aid))) {
-            if (!isRecord(item.value))
-                continue;
-            const itemPrekeyId = typeof item.value.prekey_id === 'string' ? item.value.prekey_id : '';
-            if (itemPrekeyId !== prekeyId)
-                continue;
-            const record = deepClone(item.value);
-            delete record.prekey_id;
-            delete record.device_id;
-            return record;
-        }
-        return null;
-    }
-    async _replacePrekeysUnlocked(aid, prekeys, deviceId = '') {
-        const desired = new Set(Object.keys(prekeys));
-        const normalizedDeviceId = String(deviceId ?? '').trim();
-        for (const item of await idbGetAllByPrefix(STORE_PREKEYS, prekeyPrefix(aid))) {
-            if (!isRecord(item.value))
-                continue;
-            const recordDeviceId = String(item.value.device_id ?? '').trim();
-            if (recordDeviceId !== normalizedDeviceId)
-                continue;
-            const prekeyId = typeof item.value.prekey_id === 'string' ? item.value.prekey_id : '';
-            const canonicalKey = prekeyStoreKey(aid, prekeyId, normalizedDeviceId);
-            if (!desired.has(prekeyId) || item.key !== canonicalKey) {
-                await idbDelete(STORE_PREKEYS, item.key);
-            }
-        }
-        for (const [prekeyId, prekeyData] of Object.entries(prekeys)) {
-            const record = deepClone(prekeyData);
-            if (normalizedDeviceId) {
-                record.device_id = normalizedDeviceId;
-            }
-            else {
-                delete record.device_id;
-            }
-            await idbPut(STORE_PREKEYS, prekeyStoreKey(aid, prekeyId, normalizedDeviceId), { ...record, prekey_id: prekeyId });
-        }
-    }
-    async _loadGroupEntriesUnlocked(aid) {
-        const result = {};
-        for (const item of await idbGetAllByPrefix(STORE_GROUP_CURRENT, groupCurrentPrefix(aid))) {
-            if (!isRecord(item.value))
-                continue;
-            const groupId = typeof item.value.group_id === 'string'
-                ? item.value.group_id
-                : item.key.slice(groupCurrentPrefix(aid).length);
-            const record = deepClone(item.value);
-            delete record.group_id;
-            result[groupId] = record;
-        }
-        for (const item of await idbGetAllByPrefix(STORE_GROUP_OLD_EPOCHS, groupOldPrefix(aid))) {
-            if (!isRecord(item.value))
-                continue;
-            const groupId = typeof item.value.group_id === 'string' ? item.value.group_id : '';
-            if (!groupId)
-                continue;
-            const record = deepClone(item.value);
-            delete record.group_id;
-            const entry = result[groupId] ?? {};
-            const oldEpochs = Array.isArray(entry.old_epochs) ? entry.old_epochs : [];
-            oldEpochs.push(record);
-            oldEpochs.sort((a, b) => Number(a.epoch ?? 0) - Number(b.epoch ?? 0));
-            entry.old_epochs = oldEpochs;
-            result[groupId] = entry;
-        }
-        return result;
-    }
-    async _replaceGroupEntriesUnlocked(aid, groups) {
-        const desiredGroups = new Set(Object.keys(groups));
-        for (const item of await idbGetAllByPrefix(STORE_GROUP_CURRENT, groupCurrentPrefix(aid))) {
-            const groupId = isRecord(item.value) && typeof item.value.group_id === 'string'
-                ? item.value.group_id
-                : item.key.slice(groupCurrentPrefix(aid).length);
-            if (!desiredGroups.has(groupId))
-                await idbDelete(STORE_GROUP_CURRENT, item.key);
-        }
-        for (const item of await idbGetAllByPrefix(STORE_GROUP_OLD_EPOCHS, groupOldPrefix(aid))) {
-            if (!isRecord(item.value))
-                continue;
-            const groupId = typeof item.value.group_id === 'string' ? item.value.group_id : '';
-            if (!groupId || desiredGroups.has(groupId))
-                continue;
-            await idbDelete(STORE_GROUP_OLD_EPOCHS, item.key);
-        }
-        for (const [groupId, rawEntry] of Object.entries(groups)) {
-            if (!isRecord(rawEntry))
-                continue;
-            await this._saveSingleGroupEntryUnlocked(aid, groupId, rawEntry);
-        }
-    }
-    async _saveSingleGroupEntryUnlocked(aid, groupId, entry) {
-        for (const item of await idbGetAllByPrefix(STORE_GROUP_OLD_EPOCHS, groupOldPrefix(aid, groupId))) {
-            if (!isRecord(item.value))
-                continue;
-            if (typeof item.value.group_id === 'string' && item.value.group_id === groupId) {
-                await idbDelete(STORE_GROUP_OLD_EPOCHS, item.key);
-            }
-        }
-        const current = deepClone(entry);
-        const oldEpochs = Array.isArray(current.old_epochs) ? current.old_epochs : [];
-        delete current.old_epochs;
-        if (typeof current.epoch === 'number') {
-            await idbPut(STORE_GROUP_CURRENT, groupCurrentStoreKey(aid, groupId), { ...current, group_id: groupId });
-        }
-        else {
-            await idbDelete(STORE_GROUP_CURRENT, groupCurrentStoreKey(aid, groupId));
-        }
-        for (const oldEpoch of oldEpochs) {
-            if (!isRecord(oldEpoch) || typeof oldEpoch.epoch !== 'number')
-                continue;
-            await idbPut(STORE_GROUP_OLD_EPOCHS, groupOldStoreKey(aid, groupId, oldEpoch.epoch), {
-                ...deepClone(oldEpoch), group_id: groupId,
-            });
-        }
-    }
-    async _storeGroupSecretTransitionUnlocked(aid, groupId, opts) {
-        const currentKey = groupCurrentStoreKey(aid, groupId);
-        const currentRaw = await idbGet(STORE_GROUP_CURRENT, currentKey);
-        const now = Date.now();
-        const epoch = Number(opts.epoch);
-        const members = [...(opts.memberAids ?? [])].map((item) => String(item)).sort();
-        const pendingRotationId = String(opts.pendingRotationId ?? '').trim();
-        if (isRecord(currentRaw)) {
-            const current = deepClone(currentRaw);
-            delete current.group_id;
-            const localEpoch = Number(current.epoch ?? 0);
-            if (epoch < localEpoch)
-                return false;
-            if (epoch === localEpoch && typeof current.secret === 'string') {
-                if (current.secret !== opts.secret) {
-                    if (String(current.pending_rotation_id ?? '').trim()) {
-                        await idbPut(STORE_GROUP_CURRENT, currentKey, {
-                            ...this._buildGroupCurrentRecord(groupId, opts, members, now),
-                        });
-                        return true;
-                    }
-                    return false;
-                }
-                const updated = { ...current };
-                let changed = false;
-                const oldMembers = Array.isArray(updated.member_aids) ? updated.member_aids.map(String).sort() : [];
-                if (members.length > 0 && JSON.stringify(oldMembers) !== JSON.stringify(members)) {
-                    updated.member_aids = members;
-                    updated.commitment = opts.commitment;
-                    updated.updated_at = now;
-                    changed = true;
-                }
-                if (opts.epochChain !== undefined && updated.epoch_chain !== opts.epochChain) {
-                    updated.epoch_chain = opts.epochChain;
-                    updated.updated_at = now;
-                    changed = true;
-                }
-                if (opts.epochChainUnverified === true) {
-                    if (updated.epoch_chain_unverified !== true) {
-                        updated.epoch_chain_unverified = true;
-                        changed = true;
-                    }
-                    if (opts.epochChainUnverifiedReason && updated.epoch_chain_unverified_reason !== opts.epochChainUnverifiedReason) {
-                        updated.epoch_chain_unverified_reason = opts.epochChainUnverifiedReason;
-                        changed = true;
-                    }
-                }
-                else if (opts.epochChainUnverified === false) {
-                    if ('epoch_chain_unverified' in updated || 'epoch_chain_unverified_reason' in updated) {
-                        delete updated.epoch_chain_unverified;
-                        delete updated.epoch_chain_unverified_reason;
-                        changed = true;
-                    }
-                }
-                if (pendingRotationId && updated.pending_rotation_id !== pendingRotationId) {
-                    updated.pending_rotation_id = pendingRotationId;
-                    updated.pending_created_at = now;
-                    changed = true;
-                }
-                if (!pendingRotationId && updated.pending_rotation_id) {
-                    delete updated.pending_rotation_id;
-                    delete updated.pending_created_at;
-                    changed = true;
-                }
-                if (changed) {
-                    await idbPut(STORE_GROUP_CURRENT, currentKey, { ...updated, group_id: groupId });
-                }
-                return true;
-            }
-            if (localEpoch !== epoch) {
-                const oldEntry = { ...current };
-                oldEntry.expires_at = Number(current.updated_at ?? now) + opts.oldEpochRetentionMs;
-                await idbPut(STORE_GROUP_OLD_EPOCHS, groupOldStoreKey(aid, groupId, localEpoch), {
-                    ...oldEntry,
-                    group_id: groupId,
-                });
-            }
-            else {
-                const merged = { ...current, ...this._buildGroupCurrentRecord(groupId, opts, members, now) };
-                if (!opts.epochChain && current.epoch_chain) {
-                    merged.epoch_chain = current.epoch_chain;
-                }
-                if (current.pending_rotation_id && !opts.pendingRotationId) {
-                    merged.pending_rotation_id = current.pending_rotation_id;
-                    if (current.pending_created_at)
-                        merged.pending_created_at = current.pending_created_at;
-                }
-                await idbPut(STORE_GROUP_CURRENT, currentKey, merged);
-                return true;
-            }
-        }
-        await idbPut(STORE_GROUP_CURRENT, currentKey, {
-            ...this._buildGroupCurrentRecord(groupId, opts, members, now),
-        });
-        return true;
-    }
-    async _storeGroupSecretEpochUnlocked(aid, groupId, opts) {
-        const now = Date.now();
-        const epoch = Number(opts.epoch);
-        const members = [...(opts.memberAids ?? [])].map((item) => String(item)).sort();
-        const pendingRotationId = String(opts.pendingRotationId ?? '').trim();
-        const currentKey = groupCurrentStoreKey(aid, groupId);
-        const currentRaw = await idbGet(STORE_GROUP_CURRENT, currentKey);
-        const newRecord = this._buildGroupCurrentRecord(groupId, opts, members, now);
-        if (!isRecord(currentRaw)) {
-            await idbPut(STORE_GROUP_CURRENT, currentKey, newRecord);
-            return true;
-        }
-        const current = deepClone(currentRaw);
-        delete current.group_id;
-        const localEpoch = Number(current.epoch ?? 0);
-        if (epoch > localEpoch) {
-            const expiresAt = Date.now() + (opts.oldEpochRetentionMs ?? 604800_000);
-            const oldRecord = { ...current, group_id: groupId, expires_at: expiresAt };
-            const oldKey = groupOldStoreKey(aid, groupId, localEpoch);
-            await idbPut(STORE_GROUP_OLD_EPOCHS, oldKey, oldRecord);
-            await idbPut(STORE_GROUP_CURRENT, currentKey, newRecord);
-            return true;
-        }
-        if (epoch === localEpoch) {
-            if (typeof current.secret === 'string' && current.secret !== opts.secret) {
-                if (!String(current.pending_rotation_id ?? '').trim())
-                    return false;
-                await idbPut(STORE_GROUP_CURRENT, currentKey, newRecord);
-                return true;
-            }
-            const updated = { ...current };
-            let changed = false;
-            const oldMembers = Array.isArray(updated.member_aids) ? updated.member_aids.map(String).sort() : [];
-            if (members.length > 0 && JSON.stringify(oldMembers) !== JSON.stringify(members)) {
-                updated.member_aids = members;
-                updated.commitment = opts.commitment;
-                updated.updated_at = now;
-                changed = true;
-            }
-            if (opts.epochChain !== undefined && updated.epoch_chain !== opts.epochChain) {
-                updated.epoch_chain = opts.epochChain;
-                updated.updated_at = now;
-                changed = true;
-            }
-            if (opts.epochChainUnverified === true) {
-                if (updated.epoch_chain_unverified !== true) {
-                    updated.epoch_chain_unverified = true;
-                    changed = true;
-                }
-                if (opts.epochChainUnverifiedReason && updated.epoch_chain_unverified_reason !== opts.epochChainUnverifiedReason) {
-                    updated.epoch_chain_unverified_reason = opts.epochChainUnverifiedReason;
-                    changed = true;
-                }
-            }
-            else if (opts.epochChainUnverified === false) {
-                if ('epoch_chain_unverified' in updated || 'epoch_chain_unverified_reason' in updated) {
-                    delete updated.epoch_chain_unverified;
-                    delete updated.epoch_chain_unverified_reason;
-                    changed = true;
-                }
-            }
-            if (pendingRotationId && updated.pending_rotation_id !== pendingRotationId) {
-                updated.pending_rotation_id = pendingRotationId;
-                updated.pending_created_at = now;
-                changed = true;
-            }
-            if (!pendingRotationId && updated.pending_rotation_id) {
-                delete updated.pending_rotation_id;
-                delete updated.pending_created_at;
-                changed = true;
-            }
-            if (changed)
-                await idbPut(STORE_GROUP_CURRENT, currentKey, { ...updated, group_id: groupId });
-            return true;
-        }
-        const oldKey = groupOldStoreKey(aid, groupId, epoch);
-        const oldRaw = await idbGet(STORE_GROUP_OLD_EPOCHS, oldKey);
-        if (isRecord(oldRaw)) {
-            const old = deepClone(oldRaw);
-            if (typeof old.secret === 'string' && old.secret !== opts.secret)
-                return false;
-        }
-        await idbPut(STORE_GROUP_OLD_EPOCHS, oldKey, {
-            ...newRecord,
-            epoch,
-            expires_at: now + opts.oldEpochRetentionMs,
-        });
-        return true;
-    }
-    async _discardPendingGroupSecretUnlocked(aid, groupId, epoch, rotationId) {
-        const currentKey = groupCurrentStoreKey(aid, groupId);
-        const currentRaw = await idbGet(STORE_GROUP_CURRENT, currentKey);
-        if (!isRecord(currentRaw))
-            return false;
-        const current = deepClone(currentRaw);
-        if (Number(current.epoch ?? 0) !== Number(epoch))
-            return false;
-        if (String(current.pending_rotation_id ?? '').trim() !== rotationId)
-            return false;
-        let restored = null;
-        let restoredKey = '';
-        for (const item of await idbGetAllByPrefix(STORE_GROUP_OLD_EPOCHS, groupOldPrefix(aid, groupId))) {
-            if (!isRecord(item.value))
-                continue;
-            const old = deepClone(item.value);
-            const oldEpoch = Number(old.epoch ?? 0);
-            if (oldEpoch >= Number(epoch) || !old.secret)
-                continue;
-            if (!restored || oldEpoch > Number(restored.epoch ?? 0)) {
-                restored = old;
-                restoredKey = item.key;
-            }
-        }
-        if (!restored) {
-            await idbDelete(STORE_GROUP_CURRENT, currentKey);
-            for (const item of await idbGetAllByPrefix(STORE_GROUP_OLD_EPOCHS, groupOldPrefix(aid, groupId))) {
-                await idbDelete(STORE_GROUP_OLD_EPOCHS, item.key);
-            }
-            return true;
-        }
-        delete restored.group_id;
-        delete restored.expires_at;
-        await idbPut(STORE_GROUP_CURRENT, currentKey, { ...restored, group_id: groupId, updated_at: Date.now() });
-        if (restoredKey)
-            await idbDelete(STORE_GROUP_OLD_EPOCHS, restoredKey);
-        return true;
-    }
-    _buildGroupCurrentRecord(groupId, opts, memberAids, now) {
-        const record = {
-            group_id: groupId,
-            epoch: opts.epoch,
-            secret: opts.secret,
-            commitment: opts.commitment,
-            member_aids: memberAids,
-            updated_at: now,
-        };
-        if (opts.epochChain !== undefined)
-            record.epoch_chain = opts.epochChain;
-        const pendingRotationId = String(opts.pendingRotationId ?? '').trim();
-        if (pendingRotationId) {
-            record.pending_rotation_id = pendingRotationId;
-            record.pending_created_at = now;
-        }
-        if (opts.epochChainUnverified === true) {
-            record.epoch_chain_unverified = true;
-            if (opts.epochChainUnverifiedReason)
-                record.epoch_chain_unverified_reason = opts.epochChainUnverifiedReason;
-        }
-        return record;
-    }
-    _mergeGroupEntryFromLegacy(existing, incoming) {
-        const oldByEpoch = new Map();
-        let current = existing && typeof existing.epoch === 'number'
-            ? deepClone(Object.fromEntries(Object.entries(existing).filter(([key]) => key !== 'old_epochs')))
-            : null;
-        if (existing && Array.isArray(existing.old_epochs)) {
-            for (const rawOld of existing.old_epochs) {
-                if (typeof rawOld.epoch !== 'number')
-                    continue;
-                oldByEpoch.set(rawOld.epoch, deepClone(rawOld));
-            }
-        }
-        if (typeof incoming.epoch === 'number' && this._isGroupEpochRecoverable(incoming)) {
-            const incomingCurrent = deepClone(Object.fromEntries(Object.entries(incoming).filter(([key]) => key !== 'old_epochs')));
-            if (!current) {
-                current = incomingCurrent;
-            }
-            else if (incomingCurrent.epoch > current.epoch) {
-                oldByEpoch.set(current.epoch, this._preferNewerGroupEpochRecord(oldByEpoch.get(current.epoch), current));
-                current = incomingCurrent;
-            }
-            else if (incomingCurrent.epoch === current.epoch) {
-                current = this._preferNewerGroupEpochRecord(current, incomingCurrent);
-            }
-            else {
-                oldByEpoch.set(incomingCurrent.epoch, this._preferNewerGroupEpochRecord(oldByEpoch.get(incomingCurrent.epoch), incomingCurrent));
-            }
-        }
-        const incomingOldEpochs = Array.isArray(incoming.old_epochs) ? incoming.old_epochs : [];
-        for (const rawOld of incomingOldEpochs) {
-            if (typeof rawOld.epoch !== 'number' || !this._isGroupEpochRecoverable(rawOld))
-                continue;
-            oldByEpoch.set(rawOld.epoch, this._preferNewerGroupEpochRecord(oldByEpoch.get(rawOld.epoch), rawOld));
-        }
-        const merged = current ? deepClone(current) : {};
-        if (current && typeof current.epoch === 'number') {
-            oldByEpoch.delete(current.epoch);
-        }
-        if (oldByEpoch.size > 0) {
-            merged.old_epochs = [...oldByEpoch.entries()].sort(([a], [b]) => a - b).map(([, value]) => deepClone(value));
-        }
-        return merged;
-    }
-    _preferNewerGroupEpochRecord(existing, incoming) {
-        if (!existing)
-            return deepClone(incoming);
-        return Number(incoming.updated_at ?? 0) > Number(existing.updated_at ?? 0)
-            ? deepClone(incoming)
-            : deepClone(existing);
-    }
-    _isUnexpiredRecord(record, fallbackKey) {
-        const expiresAt = typeof record.expires_at === 'number' ? record.expires_at : null;
-        if (expiresAt !== null)
-            return expiresAt >= Date.now();
-        const marker = typeof record[fallbackKey] === 'number' ? record[fallbackKey] : null;
-        return marker !== null && marker + STRUCTURED_RECOVERY_RETENTION_MS >= Date.now();
-    }
-    _isPrekeyRecoverable(record) {
-        return this._isUnexpiredRecord(record, 'created_at');
-    }
-    _isGroupEpochRecoverable(record) {
-        const secret = record.secret;
-        if (!secret || (typeof secret === 'string' && secret.length === 0))
-            return false;
-        return this._isUnexpiredRecord(record, 'updated_at');
-    }
-    // ── Sessions 内部辅助 ─────────────────────────────────
-    async _loadSessionsUnlocked(aid) {
-        const items = await idbGetAllByPrefix(STORE_SESSIONS, sessionPrefix(aid));
-        const result = [];
-        for (const item of items) {
-            if (!isRecord(item.value))
-                continue;
-            result.push(deepClone(item.value));
-        }
-        return result;
-    }
-    async _migrateLegacySessionsUnlocked(aid) {
-        const metadataOnly = (await this._loadMetadataOnlyUnlocked(aid)) ?? {};
-        if (!Array.isArray(metadataOnly.e2ee_sessions) || metadataOnly.e2ee_sessions.length === 0) {
-            return;
-        }
-        for (const session of metadataOnly.e2ee_sessions) {
-            const sid = typeof session.session_id === 'string' ? session.session_id : '';
-            if (!sid)
-                continue;
-            const record = deepClone(session);
-            record.session_id = sid;
-            await idbPut(STORE_SESSIONS, sessionStoreKey(aid, sid), record);
-        }
-        const cleaned = deepClone(metadataOnly);
-        delete cleaned.e2ee_sessions;
-        await this._saveMetadataOnlyUnlocked(aid, cleaned);
-    }
 }
 //# sourceMappingURL=indexeddb-token-store.js.map