@agora-sdk/secure-chat-core 0.7.0 → 0.8.0

package/dist/esm/content/cbor.js

@@ -0,0 +1,292 @@
+// Deterministic CBOR (RFC 8949) over a constrained subset — the wire form for MimiContent.
+//
+// Where it sits: this is pure byte-shuffling ABOVE the SecureChatCrypto seam and INSIDE the padding
+// frame. It encodes message content to canonical CBOR so the SHA-256 contentHash is stable across
+// runtimes (web/native), and decodes UNTRUSTED peer bytes strictly and within bounds (CLAUDE.md §1:
+// validate-then-decode, fail closed). The subset is exactly what MimiContent needs — unsigned/negative
+// integers, byte/text strings, arrays, maps, tags, and the simple values false/true/null — and
+// deliberately EXCLUDES CBOR's hard, ambiguous parts: floats, indefinite-length items, and bignums.
+//
+// "Canonical" = RFC 8949 §4.2 core deterministic rules for this subset: shortest-form integers and
+// lengths, definite lengths, map keys sorted by their encoded bytes, no duplicate keys.
+/** A CBOR tagged value (major type 6): a `tag` number wrapping one nested value. */
+export class CborTag {
+    constructor(
+    /** The CBOR tag number (major type 6 argument). */
+    tag, 
+    /** The single nested value wrapped by this tag. */
+    value) {
+        this.tag = tag;
+        this.value = value;
+    }
+}
+const enc = new TextEncoder();
+const dec = new TextDecoder("utf-8", { fatal: true });
+function concat(parts) {
+    let n = 0;
+    for (const p of parts)
+        n += p.length;
+    const out = new Uint8Array(n);
+    let o = 0;
+    for (const p of parts) {
+        out.set(p, o);
+        o += p.length;
+    }
+    return out;
+}
+/** Compare two byte arrays lexicographically (the canonical map-key order). */
+function cmpBytes(a, b) {
+    const n = Math.min(a.length, b.length);
+    for (let i = 0; i < n; i++)
+        if (a[i] !== b[i])
+            return a[i] - b[i];
+    return a.length - b.length;
+}
+/** Emit a CBOR head: the major type (0..7) and its argument, in shortest form. */
+function head(major, arg) {
+    const m = major << 5;
+    const n = typeof arg === "bigint" ? arg : BigInt(arg);
+    if (n < 0n)
+        throw new Error("cbor: negative head argument");
+    if (n < 24n)
+        return Uint8Array.of(m | Number(n));
+    if (n < 0x100n)
+        return Uint8Array.of(m | 24, Number(n));
+    if (n < 0x10000n)
+        return Uint8Array.of(m | 25, Number(n >> 8n) & 0xff, Number(n & 0xffn));
+    if (n < 0x100000000n)
+        return Uint8Array.of(m | 26, Number((n >> 24n) & 0xffn), Number((n >> 16n) & 0xffn), Number((n >> 8n) & 0xffn), Number(n & 0xffn));
+    if (n < 0x10000000000000000n) {
+        const out = new Uint8Array(9);
+        out[0] = m | 27;
+        let v = n;
+        for (let i = 8; i >= 1; i--) {
+            out[i] = Number(v & 0xffn);
+            v >>= 8n;
+        }
+        return out;
+    }
+    throw new Error("cbor: integer exceeds u64 (no bignum support)");
+}
+function encodeInto(v, parts) {
+    if (v === null)
+        return void parts.push(Uint8Array.of(0xf6));
+    if (v === false)
+        return void parts.push(Uint8Array.of(0xf4));
+    if (v === true)
+        return void parts.push(Uint8Array.of(0xf5));
+    const t = typeof v;
+    if (t === "number" || t === "bigint") {
+        if (t === "number" && !Number.isInteger(v))
+            throw new Error("cbor: non-integer number (no float support)");
+        const n = typeof v === "bigint" ? v : BigInt(v);
+        if (n >= 0n)
+            parts.push(head(0, n));
+        else
+            parts.push(head(1, -1n - n));
+        return;
+    }
+    if (v instanceof Uint8Array) {
+        parts.push(head(2, v.length));
+        parts.push(v);
+        return;
+    }
+    if (t === "string") {
+        const b = enc.encode(v);
+        parts.push(head(3, b.length));
+        parts.push(b);
+        return;
+    }
+    if (Array.isArray(v)) {
+        parts.push(head(4, v.length));
+        for (const e of v)
+            encodeInto(e, parts);
+        return;
+    }
+    if (v instanceof CborTag) {
+        parts.push(head(6, v.tag));
+        encodeInto(v.value, parts);
+        return;
+    }
+    if (v instanceof Map) {
+        const entries = [...v.entries()].map(([k, val]) => [encode(k), val]);
+        entries.sort((a, b) => cmpBytes(a[0], b[0]));
+        for (let i = 1; i < entries.length; i++)
+            if (cmpBytes(entries[i - 1][0], entries[i][0]) === 0)
+                throw new Error("cbor: duplicate map key");
+        parts.push(head(5, entries.length));
+        for (const [kb, val] of entries) {
+            parts.push(kb);
+            encodeInto(val, parts);
+        }
+        return;
+    }
+    throw new Error("cbor: unsupported value");
+}
+/**
+ * Encode a {@link CborValue} to canonical CBOR bytes (RFC 8949 §4.2 core deterministic rules).
+ *
+ * @param value - A value in the supported subset.
+ * @returns The canonical CBOR byte encoding.
+ * @throws {Error} On a non-integer number, an integer above u64, or an unsupported value type.
+ * @example
+ * ```ts
+ * encode(new Map([[1, "a"]])); // → a2 01 61 61 …  (keys sorted by encoded bytes)
+ * ```
+ */
+export function encode(value) {
+    const parts = [];
+    encodeInto(value, parts);
+    return concat(parts);
+}
+class Reader {
+    constructor(buf, limits) {
+        this.buf = buf;
+        this.limits = limits;
+        this.pos = 0;
+    }
+    byte() {
+        if (this.pos >= this.buf.length)
+            throw new Error("cbor: unexpected end of input");
+        return this.buf[this.pos++];
+    }
+    /** Read the argument for additional-info `ai`, enforcing shortest-form (canonical). */
+    arg(ai) {
+        if (ai < 24)
+            return BigInt(ai);
+        if (ai === 24) {
+            const n = BigInt(this.byte());
+            if (n < 24n)
+                throw new Error("cbor: non-canonical (shortest-form) integer");
+            return n;
+        }
+        if (ai === 25) {
+            const n = (BigInt(this.byte()) << 8n) | BigInt(this.byte());
+            if (n < 0x100n)
+                throw new Error("cbor: non-canonical (shortest-form) integer");
+            return n;
+        }
+        if (ai === 26) {
+            let n = 0n;
+            for (let i = 0; i < 4; i++)
+                n = (n << 8n) | BigInt(this.byte());
+            if (n < 0x10000n)
+                throw new Error("cbor: non-canonical (shortest-form) integer");
+            return n;
+        }
+        if (ai === 27) {
+            let n = 0n;
+            for (let i = 0; i < 8; i++)
+                n = (n << 8n) | BigInt(this.byte());
+            if (n < 0x100000000n)
+                throw new Error("cbor: non-canonical (shortest-form) integer");
+            return n;
+        }
+        throw new Error("cbor: reserved/indefinite additional info (outside subset)");
+    }
+    take(n) {
+        if (n > BigInt(this.limits.maxBytes))
+            throw new Error("cbor: length exceeds bounds");
+        const len = Number(n);
+        if (this.pos + len > this.buf.length)
+            throw new Error("cbor: unexpected end of input");
+        const slice = this.buf.subarray(this.pos, this.pos + len);
+        this.pos += len;
+        return slice;
+    }
+    /** Integers small enough stay `number`; larger become `bigint`. */
+    intVal(n, negative) {
+        const v = negative ? -1n - n : n;
+        return v >= BigInt(Number.MIN_SAFE_INTEGER) && v <= BigInt(Number.MAX_SAFE_INTEGER)
+            ? Number(v)
+            : v;
+    }
+    value(depth) {
+        if (depth > this.limits.maxDepth)
+            throw new Error("cbor: nesting depth exceeds bounds");
+        const ib = this.byte();
+        const major = ib >> 5;
+        const ai = ib & 0x1f;
+        switch (major) {
+            case 0:
+                return this.intVal(this.arg(ai), false);
+            case 1:
+                return this.intVal(this.arg(ai), true);
+            case 2:
+                return this.take(this.arg(ai)).slice(); // copy out of the backing buffer
+            case 3:
+                return dec.decode(this.take(this.arg(ai)));
+            case 4: {
+                const len = this.arg(ai);
+                if (len > BigInt(this.limits.maxItems))
+                    throw new Error("cbor: array length exceeds bounds");
+                const out = [];
+                for (let i = 0n; i < len; i++)
+                    out.push(this.value(depth + 1));
+                return out;
+            }
+            case 5: {
+                const len = this.arg(ai);
+                if (len > BigInt(this.limits.maxItems))
+                    throw new Error("cbor: map length exceeds bounds");
+                const out = new Map();
+                let prevKey = null;
+                for (let i = 0n; i < len; i++) {
+                    const k = this.value(depth + 1);
+                    const kb = encode(k); // canonical key bytes — enforce strictly-increasing order
+                    if (prevKey) {
+                        const c = cmpBytes(prevKey, kb);
+                        if (c === 0)
+                            throw new Error("cbor: duplicate map key");
+                        if (c > 0)
+                            throw new Error("cbor: map keys not sorted (non-canonical)");
+                    }
+                    prevKey = kb;
+                    out.set(k, this.value(depth + 1));
+                }
+                return out;
+            }
+            case 6: {
+                // Normalize the tag the same way as integers (safe-int → number, larger → bigint) so a tag
+                // round-trips to the same JS type a caller would naturally pass to `new CborTag(...)`.
+                const tag = this.intVal(this.arg(ai), false);
+                return new CborTag(tag, this.value(depth + 1));
+            }
+            case 7:
+                if (ai === 20)
+                    return false;
+                if (ai === 21)
+                    return true;
+                if (ai === 22)
+                    return null;
+                throw new Error("cbor: float/simple value outside subset");
+            default:
+                throw new Error("cbor: unknown major type");
+        }
+    }
+}
+/**
+ * Strict-decode canonical CBOR bytes from the supported subset. Rejects non-canonical encodings,
+ * out-of-subset major/simple values, trailing bytes, and anything exceeding {@link CborLimits}.
+ *
+ * @param bytes - The CBOR input (untrusted peer data — decoded fail-closed).
+ * @param limits - Optional {@link CborLimits} bounds.
+ * @returns The decoded {@link CborValue}.
+ * @throws {Error} On any non-canonical encoding, out-of-subset value, truncation, trailing bytes, or
+ *   a bound (size/depth/item-count) being exceeded.
+ */
+export function decode(bytes, limits = {}) {
+    const resolved = {
+        maxBytes: limits.maxBytes ?? 1 << 20,
+        maxDepth: limits.maxDepth ?? 32,
+        maxItems: limits.maxItems ?? 4096,
+    };
+    if (bytes.length > resolved.maxBytes)
+        throw new Error("cbor: input too large (bounds)");
+    const r = new Reader(bytes, resolved);
+    const v = r.value(0);
+    if (r.pos !== bytes.length)
+        throw new Error("cbor: trailing bytes after top-level value");
+    return v;
+}
+//# sourceMappingURL=cbor.js.map

package/dist/esm/content/cbor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cbor.js","sourceRoot":"","sources":["../../../src/content/cbor.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,EAAE;AACF,oGAAoG;AACpG,kGAAkG;AAClG,oGAAoG;AACpG,uGAAuG;AACvG,+FAA+F;AAC/F,oGAAoG;AACpG,EAAE;AACF,mGAAmG;AACnG,wFAAwF;AAiBxF,oFAAoF;AACpF,MAAM,OAAO,OAAO;IAClB;IACE,mDAAmD;IACnC,GAAoB;IACpC,mDAAmD;IACnC,KAAgB;QAFhB,QAAG,GAAH,GAAG,CAAiB;QAEpB,UAAK,GAAL,KAAK,CAAW;IAC/B,CAAC;CACL;AAYD,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;AAC9B,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAEtD,SAAS,MAAM,CAAC,KAAmB;IACjC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IACrC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACd,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,+EAA+E;AAC/E,SAAS,QAAQ,CAAC,CAAa,EAAE,CAAa;IAC5C,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;QAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;AAC7B,CAAC;AAED,kFAAkF;AAClF,SAAS,IAAI,CAAC,KAAa,EAAE,GAAoB;IAC/C,MAAM,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC;IACrB,MAAM,CAAC,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACtD,IAAI,CAAC,GAAG,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC5D,IAAI,CAAC,GAAG,GAAG;QAAE,OAAO,UAAU,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,IAAI,CAAC,GAAG,MAAM;QAAE,OAAO,UAAU,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,IAAI,CAAC,GAAG,QAAQ;QAAE,OAAO,UAAU,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;IAC1F,IAAI,CAAC,GAAG,YAAY;QAClB,OAAO,UAAU,CAAC,EAAE,CAClB,CAAC,GAAG,EAAE,EACN,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,EAC1B,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,KAAK,CAAC,EAC1B,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,EACzB,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,CAClB,CAAC;IACJ,IAAI,CAAC,GAAG,oBAAoB,EAAE,CAAC;QAC7B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;QAC9B,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;QAChB,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;YAC3B,CAAC,KAAK,EAAE,CAAC;QACX,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,UAAU,CAAC,CAAY,EAAE,KAAmB;IACnD,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,IAAI,CAAC,KAAK,KAAK;QAAE,OAAO,KAAK,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC;IACnB,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAW,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;QACjE,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAW,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;;YAC/B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QAClC,OAAO;IACT,CAAC;IACD,IAAI,CAAC,YAAY,UAAU,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,OAAO;IACT,CAAC;IACD,IAAI,CAAC,KAAK,QAAQ,EAAE,CAAC;QACnB,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAW,CAAC,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9B,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,OAAO;IACT,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,CAAC;YAAE,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACxC,OAAO;IACT,CAAC;IACD,IAAI,CAAC,YAAY,OAAO,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC3B,OAAO;IACT,CAAC;IACD,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,CAAC,GAAI,CAAa,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAC/C,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAU,CACxC,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE;YACrC,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;gBAClD,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAC/C,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;QACpC,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,OAAO,EAAE,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACzB,CAAC;QACD,OAAO;IACT,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;AAC7C,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,MAAM,CAAC,KAAgB;IACrC,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACzB,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,MAAM;IAEV,YACW,GAAe,EACf,MAA4B;QAD5B,QAAG,GAAH,GAAG,CAAY;QACf,WAAM,GAAN,MAAM,CAAsB;QAHvC,QAAG,GAAG,CAAC,CAAC;IAIL,CAAC;IAEI,IAAI;QACV,IAAI,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAClF,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9B,CAAC;IAED,uFAAuF;IAC/E,GAAG,CAAC,EAAU;QACpB,IAAI,EAAE,GAAG,EAAE;YAAE,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACd,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9B,IAAI,CAAC,GAAG,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YAC5E,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACd,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAC5D,IAAI,CAAC,GAAG,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YAC/E,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACd,IAAI,CAAC,GAAG,EAAE,CAAC;YACX,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;gBAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAChE,IAAI,CAAC,GAAG,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACjF,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACd,IAAI,CAAC,GAAG,EAAE,CAAC;YACX,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;gBAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAChE,IAAI,CAAC,GAAG,YAAY;gBAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;YACrF,OAAO,CAAC,CAAC;QACX,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IAEO,IAAI,CAAC,CAAS;QACpB,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACrF,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,IAAI,CAAC,GAAG,GAAG,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACvF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC;QAC1D,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC;QAChB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,mEAAmE;IAC3D,MAAM,CAAC,CAAS,EAAE,QAAiB;QACzC,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjC,OAAO,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC;YACjF,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;YACX,CAAC,CAAC,CAAC,CAAC;IACR,CAAC;IAED,KAAK,CAAC,KAAa;QACjB,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxF,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,EAAE,IAAI,CAAC,CAAC;QACtB,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QACrB,QAAQ,KAAK,EAAE,CAAC;YACd,KAAK,CAAC;gBACJ,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;YAC1C,KAAK,CAAC;gBACJ,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;YACzC,KAAK,CAAC;gBACJ,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,iCAAiC;YAC3E,KAAK,CAAC;gBACJ,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;YAC7C,KAAK,CAAC,CAAC,CAAC,CAAC;gBACP,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACzB,IAAI,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;gBAC7F,MAAM,GAAG,GAAgB,EAAE,CAAC;gBAC5B,KAAK,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE;oBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;gBAC/D,OAAO,GAAG,CAAC;YACb,CAAC;YACD,KAAK,CAAC,CAAC,CAAC,CAAC;gBACP,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACzB,IAAI,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;gBAC3F,MAAM,GAAG,GAAY,IAAI,GAAG,EAAE,CAAC;gBAC/B,IAAI,OAAO,GAAsB,IAAI,CAAC;gBACtC,KAAK,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;oBAC9B,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;oBAChC,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,0DAA0D;oBAChF,IAAI,OAAO,EAAE,CAAC;wBACZ,MAAM,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;wBAChC,IAAI,CAAC,KAAK,CAAC;4BAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;wBACxD,IAAI,CAAC,GAAG,CAAC;4BAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;oBAC1E,CAAC;oBACD,OAAO,GAAG,EAAE,CAAC;oBACb,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;gBACpC,CAAC;gBACD,OAAO,GAAG,CAAC;YACb,CAAC;YACD,KAAK,CAAC,CAAC,CAAC,CAAC;gBACP,2FAA2F;gBAC3F,uFAAuF;gBACvF,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;gBAC7C,OAAO,IAAI,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;YACjD,CAAC;YACD,KAAK,CAAC;gBACJ,IAAI,EAAE,KAAK,EAAE;oBAAE,OAAO,KAAK,CAAC;gBAC5B,IAAI,EAAE,KAAK,EAAE;oBAAE,OAAO,IAAI,CAAC;gBAC3B,IAAI,EAAE,KAAK,EAAE;oBAAE,OAAO,IAAI,CAAC;gBAC3B,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;YAC7D;gBACE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,MAAM,CAAC,KAAiB,EAAE,SAAqB,EAAE;IAC/D,MAAM,QAAQ,GAAyB;QACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC,IAAI,EAAE;QACpC,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE;QAC/B,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,IAAI;KAClC,CAAC;IACF,IAAI,KAAK,CAAC,MAAM,GAAG,QAAQ,CAAC,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACxF,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACtC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrB,IAAI,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAC1F,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/esm/content/frame.d.ts

@@ -0,0 +1,24 @@
+/** Content-frame discriminator. `Mimi` = MimiContent CBOR; `IucControl` is reserved for the IUC state machine. */
+export declare const ContentKind: {
+    readonly Mimi: 0;
+    readonly IucControl: 1;
+};
+export type ContentKind = (typeof ContentKind)[keyof typeof ContentKind];
+/**
+ * Prefix `payload` with its routing `kind` byte.
+ * @param kind - The discriminator (0..255); use {@link ContentKind}.
+ * @param payload - The bytes to route (e.g. MimiContent CBOR).
+ * @returns `[kind][payload]`.
+ * @throws {Error} If `kind` is not an integer in 0..255.
+ */
+export declare function frameContent(kind: number, payload: Uint8Array): Uint8Array;
+/**
+ * Split a content frame into its routing `kind` and the remaining `payload`.
+ * @param bytes - A `[kind][payload]` frame (after unpadding).
+ * @returns `{ kind, payload }`.
+ * @throws {Error} If `bytes` is empty (no kind byte).
+ */
+export declare function unframe(bytes: Uint8Array): {
+    kind: number;
+    payload: Uint8Array;
+};

package/dist/esm/content/frame.js

@@ -0,0 +1,34 @@
+// Content routing frame — a single discriminator byte INSIDE the padding frame, ABOVE MimiContent.
+//
+// padPlaintext( frameContent(kind, payload) ) → encrypt. One byte routes user content vs control
+// traffic without wrapping the MimiContent CBOR in another struct (keeps the MIMI bytes pure). The
+// padding frame (util/padding) is the transport concern and is unchanged.
+/** Content-frame discriminator. `Mimi` = MimiContent CBOR; `IucControl` is reserved for the IUC state machine. */
+export const ContentKind = { Mimi: 0, IucControl: 1 };
+/**
+ * Prefix `payload` with its routing `kind` byte.
+ * @param kind - The discriminator (0..255); use {@link ContentKind}.
+ * @param payload - The bytes to route (e.g. MimiContent CBOR).
+ * @returns `[kind][payload]`.
+ * @throws {Error} If `kind` is not an integer in 0..255.
+ */
+export function frameContent(kind, payload) {
+    if (!Number.isInteger(kind) || kind < 0 || kind > 255)
+        throw new Error("content frame: kind must be a byte (0..255)");
+    const out = new Uint8Array(payload.length + 1);
+    out[0] = kind;
+    out.set(payload, 1);
+    return out;
+}
+/**
+ * Split a content frame into its routing `kind` and the remaining `payload`.
+ * @param bytes - A `[kind][payload]` frame (after unpadding).
+ * @returns `{ kind, payload }`.
+ * @throws {Error} If `bytes` is empty (no kind byte).
+ */
+export function unframe(bytes) {
+    if (bytes.length < 1)
+        throw new Error("content frame: empty (too short)");
+    return { kind: bytes[0], payload: bytes.subarray(1) };
+}
+//# sourceMappingURL=frame.js.map

package/dist/esm/content/frame.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frame.js","sourceRoot":"","sources":["../../../src/content/frame.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,EAAE;AACF,iGAAiG;AACjG,mGAAmG;AACnG,0EAA0E;AAE1E,kHAAkH;AAClH,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAW,CAAC;AAG/D;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,OAAmB;IAC5D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACtH,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC/C,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IACd,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACpB,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,OAAO,CAAC,KAAiB;IACvC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IAC1E,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;AACxD,CAAC"}

package/dist/esm/content/mimi-content.d.ts

@@ -0,0 +1,194 @@
+import { type CborMap } from "./cbor.js";
+/**
+ * Part cardinality tag. Values per draft-ietf-mimi-content-08
+ * (`nullpart=0, single=1, external=2, multi=3`).
+ */
+export declare const Cardinality: {
+    readonly Null: 0;
+    readonly Single: 1;
+    readonly External: 2;
+    readonly Multi: 3;
+};
+/** The set of valid {@link Cardinality} tag values. */
+export type Cardinality = (typeof Cardinality)[keyof typeof Cardinality];
+/**
+ * Part disposition (draft-ietf-mimi-content-08 `baseDispos`). `Reaction` distinguishes a reaction
+ * from a reply; `Attachment`/`Inline`/etc. drive client rendering.
+ */
+export declare const Disposition: {
+    readonly Unspecified: 0;
+    readonly Render: 1;
+    readonly Reaction: 2;
+    readonly Profile: 3;
+    readonly Inline: 4;
+    readonly Icon: 5;
+    readonly Attachment: 6;
+    readonly Session: 7;
+    readonly Preview: 8;
+};
+/** The set of valid {@link Disposition} values. */
+export type Disposition = (typeof Disposition)[keyof typeof Disposition];
+/**
+ * {@link MultiPart} `partSemantics` — how a client treats the child parts (draft-ietf-mimi-content-08:
+ * `chooseOne=0, singleUnit=1, processAll=2`).
+ */
+export declare const PartSemantics: {
+    readonly ChooseOne: 0;
+    readonly SingleUnit: 1;
+    readonly ProcessAll: 2;
+};
+/** The set of valid {@link PartSemantics} values. */
+export type PartSemantics = (typeof PartSemantics)[keyof typeof PartSemantics];
+/**
+ * Named-Information hash algorithm. SHA-256 is the only value we emit (identifier `0x01`, per
+ * draft-ietf-mimi-content-08).
+ */
+export declare const HashAlg: {
+    readonly Sha256: 1;
+};
+/** The set of valid {@link HashAlg} values. */
+export type HashAlg = (typeof HashAlg)[keyof typeof HashAlg];
+/** A tombstone body (delete / un-react) — `NullPart` with the NestedPart wrapper's disposition/language. */
+export interface NullPart {
+    /** Cardinality tag — always {@link Cardinality.Null}. */
+    cardinality: typeof Cardinality.Null;
+    /** Wrapper disposition (typically {@link Disposition.Render}); kept for wire-faithful round-trip. */
+    disposition: Disposition;
+    /** BCP-47 language tag, or `""`. */
+    language: string;
+}
+/** An inline body part (text, reaction token, …) — draft `SinglePart` + the NestedPart wrapper fields. */
+export interface SinglePart {
+    /** Cardinality tag — always {@link Cardinality.Single}. */
+    cardinality: typeof Cardinality.Single;
+    /** How a client should treat this part (`Render` for text, `Reaction` for a reaction token, …). */
+    disposition: Disposition;
+    /** BCP-47 language tag for `content`, or `""` when not applicable. */
+    language: string;
+    /** MIME type of `content` (e.g. `text/markdown`). */
+    contentType: string;
+    /** The raw body bytes (UTF-8 for text types). */
+    content: Uint8Array;
+}
+/** An external (by-reference, encrypted) attachment part — Tier 3; encoded, not yet surfaced. */
+export interface ExternalPart {
+    /** Cardinality tag — always {@link Cardinality.External}. */
+    cardinality: typeof Cardinality.External;
+    /** How a client should treat this part (typically {@link Disposition.Attachment}). */
+    disposition: Disposition;
+    /** BCP-47 language tag, or `""`. */
+    language: string;
+    /** MIME type of the referenced blob. */
+    contentType: string;
+    /** Fetch URL for the encrypted blob. */
+    url: string;
+    /** Absolute expiry of the URL (0 = none). */
+    expires: number;
+    /** Plaintext size in bytes. */
+    size: number;
+    /** Symmetric encryption algorithm identifier for the blob (draft `encAlg`). */
+    encAlgorithm: number;
+    /** Symmetric key for the blob (kept client-side only). */
+    key: Uint8Array;
+    /** AEAD nonce. */
+    nonce: Uint8Array;
+    /** AEAD associated data. */
+    aad: Uint8Array;
+    /** Hash algorithm of {@link ExternalPart.contentHash} (we emit {@link HashAlg.Sha256}). */
+    hashAlgorithm: HashAlg;
+    /** Hash of the plaintext blob (integrity). */
+    contentHash: Uint8Array;
+    /** Human-readable description / alt text. */
+    description: string;
+    /** Suggested filename. */
+    filename: string;
+}
+/** A composite body of ordered sub-parts (draft `MultiPart`; at least 2 children). */
+export interface MultiPart {
+    /** Cardinality tag — always {@link Cardinality.Multi}. */
+    cardinality: typeof Cardinality.Multi;
+    /** Wrapper disposition for the composite. */
+    disposition: Disposition;
+    /** BCP-47 language tag, or `""`. */
+    language: string;
+    /** How the child parts relate ({@link PartSemantics}). */
+    partSemantics: PartSemantics;
+    /** The ordered child parts (draft requires 2 or more). */
+    parts: Part[];
+}
+/** The body tree: a cardinality-tagged union of {@link NullPart}, {@link SinglePart}, {@link ExternalPart}, {@link MultiPart}. */
+export type Part = NullPart | SinglePart | ExternalPart | MultiPart;
+/** Expiry directive (draft `Expiration = [relative: bool, time: uint .size 4]`). */
+export interface Expiration {
+    /** `true` = `time` is seconds relative to receipt; `false` = absolute UNIX time. */
+    relative: boolean;
+    /** The expiry time (seconds). */
+    time: number;
+}
+/** The MIMI message content structure (draft-ietf-mimi-content-08; see file header for the CDDL). */
+export interface MimiContent {
+    /** Per-message CSPRNG bytes (draft `salt`, 16 bytes) — unlinkability of the content hash. */
+    salt: Uint8Array;
+    /** 32-byte content-hash (MessageId) of a message this replaces (edit/delete/un-react), or `null`. */
+    replaces: Uint8Array | null;
+    /** Threading topic id (Tier 3; encoded, unsurfaced). Empty = none. */
+    topicId: Uint8Array;
+    /** Expiry directive (draft `Expiration`), or `null` for none. Tier 3; encoded, unsurfaced. */
+    expires: Expiration | null;
+    /** 32-byte content-hash (MessageId) of the reply target, or `null`. */
+    inReplyTo: Uint8Array | null;
+    /** Extension map (round-tripped opaquely). */
+    extensions: CborMap;
+    /** The message body tree (draft `NestedPart`). */
+    nestedPart: Part;
+}
+/**
+ * Schema bounds enforced on decode (DoS / abuse guard): max sibling parts in a {@link MultiPart}, and
+ * max part-tree depth. (draft-08 has no `lastSeen`, so there is no list bound here.)
+ */
+export declare const MIMI_LIMITS: {
+    readonly maxParts: 64;
+    readonly maxNesting: 8;
+};
+/**
+ * Encode a {@link MimiContent} to canonical CBOR bytes per the draft-08 wire layout.
+ * @param c - The content to encode.
+ * @returns Canonical CBOR bytes (stable for equal content — the basis for {@link contentHash}).
+ * @throws {Error} If a field carries an out-of-subset CBOR value (e.g. a non-integer number).
+ * @example
+ * ```ts
+ * const bytes = encodeMimiContent(myContent);
+ * const same  = decodeMimiContent(bytes); // round-trips
+ * ```
+ */
+export declare function encodeMimiContent(c: MimiContent): Uint8Array;
+/**
+ * Strict-decode + schema-validate canonical CBOR into a {@link MimiContent}. Fails closed on any
+ * structural or bounds violation (untrusted peer input — CLAUDE.md §1).
+ * @param bytes - The canonical CBOR content bytes (after unframing).
+ * @returns The validated {@link MimiContent}.
+ * @throws {Error} On a malformed structure, wrong field type, an unknown {@link Cardinality}, or a
+ *   {@link MIMI_LIMITS} bound exceeded. The error message never includes message plaintext.
+ * @example
+ * ```ts
+ * const content = decodeMimiContent(peerBytes); // throws on any tampering
+ * ```
+ */
+export declare function decodeMimiContent(bytes: Uint8Array): MimiContent;
+/**
+ * The MIMI content-hash: a 32-byte, MessageId-SHAPED reference value used to point at a message
+ * (reply / edit / delete / un-react). Per the file-header deviation note, we lack federation
+ * identities, so instead of draft-08's URI-prefixed input we compute
+ * `0x01 || sha256(encodeMimiContent(c))[0..30]` — the leading `0x01` is the SHA-256 hash-algorithm
+ * identifier, then the first 31 bytes of the SHA-256 over our canonical CBOR (which already includes
+ * the per-message `salt`). Structurally a real MIMI MessageId; stable across runtimes; salt-sensitive.
+ * The blind server never sees this. `replaces` / `inReplyTo` are populated with this value.
+ * @param c - The content to hash.
+ * @returns A 32-byte MessageId (`[0]` is `0x01`; `[1..31]` are `sha256(canonical CBOR)[0..30]`).
+ * @example
+ * ```ts
+ * const id = contentHash(myContent); // 32 bytes, id[0] === 0x01, salt-sensitive
+ * reply.inReplyTo = id;
+ * ```
+ */
+export declare function contentHash(c: MimiContent): Uint8Array;