@chipmobilesdk/rn-local-db 0.3.0 → 0.5.0

package/lib/commonjs/artifacts/store.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_config","require","_errors","_errors2","_faults","_mapNative","_fs","_bytes","_budgets","_chunkedCipher","_values","_paths","CREATE_ATTACHMENTS","CREATE_OWNER_INDEX","ensureAttachmentTable","executor","execute","toReference","row","reference","id","text","contentType","content_type","size","num","createdAt","created_at","owner_collection","owner_id","owner","collection","chunkSize","maybeNum","chunk_size","chunkCount","chunk_count","readReference","result","rows","listReferences","map","listReferencesFor","insertReference","deleteReference","rowsAffected","writePlaintext","path","content","fileSystem","writeFile","writeEncrypted","key","source","header","headerFor","Budgets","ARTIFACT_CHUNK_BYTES","bytesToBase64","encodeHeader","index","chunk","chunkPlaintextLength","appendFile","encryptChunk","sourceFileOf","input","sourcePath","startsWith","slice","length","byteSourceFor","file","raise","DiagnosticCodes","CONFIG_INVALID","message","detail","attachmentId","plaintext","base64ToBytes","offset","subarray","stat","error","raiseNative","operation","read","writeArtifact","context","throwIfFaulted","assertArtifactWithinBudget","artifactPath","layout","scopeKey","artifactKey","chunking","mkdir","artifactsDirectory","copyFile","removeIfPresent","now","readPlaintext","range","readFile","readEncrypted","headerBytes","HEADER_BYTES","decodeHeader","from","to","Math","min","plaintextSize","first","floor","last","pieces","stored","TAG_BYTES","chunkOffset","decrypted","decryptChunk","chunkStart","push","max","concatBytes","readArtifact","isStorageError","ATTACHMENT_MISSING","cause","removeArtifact","deferred","hadReference","add","removedRecords","removedArtifacts","orphanedReferences","failedRemovals","removed"],"sourceRoot":"../../../src","sources":["artifacts/store.ts"],"mappings":";;;;;;;;;;;;;AAwBA,IAAAA,OAAA,GAAAC,OAAA;AACA,IAAAC,OAAA,GAAAD,OAAA;AACA,IAAAE,QAAA,GAAAF,OAAA;AACA,IAAAG,OAAA,GAAAH,OAAA;AACA,IAAAI,UAAA,GAAAJ,OAAA;AACA,IAAAK,GAAA,GAAAL,OAAA;AACA,IAAAM,MAAA,GAAAN,OAAA;AAEA,IAAAO,QAAA,GAAAP,OAAA;AACA,IAAAQ,cAAA,GAAAR,OAAA;AAYA,IAAAS,OAAA,GAAAT,OAAA;AACA,IAAAU,MAAA,GAAAV,OAAA;AA9CA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAiCA,MAAMW,kBAAkB,GAAG;AAC3B;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,EAAE;AAEF,MAAMC,kBAAkB,GACvB,4FAA4F;AAWtF,eAAeC,qBAAqBA,CAACC,QAAkB,EAAiB;EAC9E,MAAMA,QAAQ,CAACC,OAAO,CAACJ,kBAAkB,CAAC;EAC1C,MAAMG,QAAQ,CAACC,OAAO,CAACH,kBAAkB,CAAC;AAC3C;AAEA,SAASI,WAAWA,CAACC,GAA4B,EAAuB;EACvE,MAAMC,SAA8B,GAAG;IACtCC,EAAE,EAAE,IAAAC,YAAI,EAACH,GAAG,CAACE,EAAE,CAAC;IAChBE,WAAW,EAAE,IAAAD,YAAI,EAACH,GAAG,CAACK,YAAY,CAAC;IACnCC,IAAI,EAAE,IAAAC,WAAG,EAACP,GAAG,CAACM,IAAI,CAAC;IACnBE,SAAS,EAAE,IAAAD,WAAG,EAACP,GAAG,CAACS,UAAU;EAC9B,CAAC;EACD,IAAIT,GAAG,CAACU,gBAAgB,IAAI,IAAI,IAAIV,GAAG,CAACW,QAAQ,IAAI,IAAI,EAAE;IACzDV,SAAS,CAACW,KAAK,GAAG;MAAEC,UAAU,EAAE,IAAAV,YAAI,EAACH,GAAG,CAACU,gBAAgB,CAAC;MAAER,EAAE,EAAE,IAAAC,YAAI,EAACH,GAAG,CAACW,QAAQ;IAAE,CAAC;EACrF;EACA,MAAMG,SAAS,GAAG,IAAAC,gBAAQ,EAACf,GAAG,CAACgB,UAAU,CAAC;EAC1C,IAAIF,SAAS,KAAK,IAAI,EAAE;IACvBb,SAAS,CAACa,SAAS,GAAGA,SAAS;IAC/Bb,SAAS,CAACgB,UAAU,GAAG,IAAAV,WAAG,EAACP,GAAG,CAACkB,WAAW,CAAC;EAC5C;EACA,OAAOjB,SAAS;AACjB;AAEO,eAAekB,aAAaA,CAClCtB,QAAkB,EAClBK,EAAU,EAC4B;EACtC,MAAMkB,MAAM,GAAG,MAAMvB,QAAQ,CAACC,OAAO,CAAC,yCAAyC,EAAE,CAACI,EAAE,CAAC,CAAC;EACtF,MAAMF,GAAG,GAAGoB,MAAM,CAACC,IAAI,CAAC,CAAC,CAAC;EAC1B,OAAOrB,GAAG,GAAGD,WAAW,CAACC,GAAG,CAAC,GAAG,IAAI;AACrC;AAEO,eAAesB,cAAcA,CAACzB,QAAkB,EAAkC;EACxF,MAAMuB,MAAM,GAAG,MAAMvB,QAAQ,CAACC,OAAO,CAAC,4CAA4C,CAAC;EACnF,OAAOsB,MAAM,CAACC,IAAI,CAACE,GAAG,CAACxB,WAAW,CAAC;AACpC;AAEO,eAAeyB,iBAAiBA,CACtC3B,QAAkB,EAClBe,KAAsB,EACW;EACjC,MAAMQ,MAAM,GAAG,MAAMvB,QAAQ,CAACC,OAAO,CACpC,wFAAwF,EACxF,CAACc,KAAK,CAACC,UAAU,EAAED,KAAK,CAACV,EAAE,CAC5B,CAAC;EACD,OAAOkB,MAAM,CAACC,IAAI,CAACE,GAAG,CAACxB,WAAW,CAAC;AACpC;AAEA,eAAe0B,eAAeA,CAAC5B,QAAkB,EAAEI,SAA8B,EAAiB;EACjG,MAAMJ,QAAQ,CAACC,OAAO,CACrB;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,sCAAsC,EACpC,CACCG,SAAS,CAACC,EAAE,EACZD,SAAS,CAACW,KAAK,EAAEC,UAAU,IAAI,IAAI,EACnCZ,SAAS,CAACW,KAAK,EAAEV,EAAE,IAAI,IAAI,EAC3BD,SAAS,CAACG,WAAW,EACrBH,SAAS,CAACK,IAAI,EACdL,SAAS,CAACa,SAAS,IAAI,IAAI,EAC3Bb,SAAS,CAACgB,UAAU,IAAI,IAAI,EAC5BhB,SAAS,CAACO,SAAS,CAErB,CAAC;AACF;AAEO,eAAekB,eAAeA,CAAC7B,QAAkB,EAAEK,EAAU,EAAoB;EACvF,MAAMkB,MAAM,GAAG,MAAMvB,QAAQ,CAACC,OAAO,CAAC,uCAAuC,EAAE,CAACI,EAAE,CAAC,CAAC;EACpF,OAAOkB,MAAM,CAACO,YAAY,GAAG,CAAC;AAC/B;AAEA,eAAeC,cAAcA,CAACC,IAAY,EAAEC,OAAe,EAAiB;EAC3E,MAAM,IAAAC,cAAU,EAAC,CAAC,CAACC,SAAS,CAACH,IAAI,EAAEC,OAAO,EAAE,QAAQ,CAAC;AACtD;;AAEA;;AAMA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAeG,cAAcA,CAC5BJ,IAAY,EACZK,GAAe,EACfC,MAAkB,EACmC;EACrD,MAAMC,MAAM,GAAG,IAAAC,wBAAS,EAACF,MAAM,CAAC7B,IAAI,EAAEgC,eAAO,CAACC,oBAAoB,CAAC;EACnE,MAAM,IAAAR,cAAU,EAAC,CAAC,CAACC,SAAS,CAACH,IAAI,EAAE,IAAAW,oBAAa,EAAC,IAAAC,2BAAY,EAACL,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC;EAEjF,KAAK,IAAIM,KAAK,GAAG,CAAC,EAAEA,KAAK,GAAGN,MAAM,CAACnB,UAAU,EAAEyB,KAAK,IAAI,CAAC,EAAE;IAC1D,MAAMC,KAAK,GAAG,MAAMR,MAAM,CAACQ,KAAK,CAACD,KAAK,GAAGN,MAAM,CAACtB,SAAS,EAAE,IAAA8B,mCAAoB,EAACR,MAAM,EAAEM,KAAK,CAAC,CAAC;IAC/F,MAAM,IAAAX,cAAU,EAAC,CAAC,CAACc,UAAU,CAAChB,IAAI,EAAE,IAAAW,oBAAa,EAAC,IAAAM,2BAAY,EAACZ,GAAG,EAAEQ,KAAK,EAAEC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC;EAC9F;EAEA,OAAO;IAAE7B,SAAS,EAAEsB,MAAM,CAACtB,SAAS;IAAEG,UAAU,EAAEmB,MAAM,CAACnB;EAAW,CAAC;AACtE;AAEA,SAAS8B,YAAYA,CAACC,KAAsB,EAAiB;EAC5D,IAAI,OAAOA,KAAK,CAACC,UAAU,KAAK,QAAQ,EAAE;IACzC,OAAO,IAAI;EACZ;EACA,OAAOD,KAAK,CAACC,UAAU,CAACC,UAAU,CAAC,SAAS,CAAC,GAC1CF,KAAK,CAACC,UAAU,CAACE,KAAK,CAAC,SAAS,CAACC,MAAM,CAAC,GACxCJ,KAAK,CAACC,UAAU;AACpB;;AAEA;AACA;AACA;AACA;AACA;AACA,eAAeI,aAAaA,CAACL,KAAsB,EAAuB;EACzE,MAAMM,IAAI,GAAGP,YAAY,CAACC,KAAK,CAAC;EAChC,IAAIM,IAAI,KAAK,IAAI,EAAE;IAClB,IAAI,OAAON,KAAK,CAAClB,OAAO,KAAK,QAAQ,EAAE;MACtC,IAAAyB,cAAK,EAACC,uBAAe,CAACC,cAAc,EAAE;QACrCC,OAAO,EAAE,2CAA2C;QACpDC,MAAM,EAAE;UAAEC,YAAY,EAAEZ,KAAK,CAAC9C;QAAG;MAClC,CAAC,CAAC;IACH;IACA,MAAM2D,SAAS,GAAG,IAAAC,oBAAa,EAACd,KAAK,CAAClB,OAAO,CAAC;IAC9C,OAAO;MACNxB,IAAI,EAAEuD,SAAS,CAACT,MAAM;MACtBT,KAAK,EAAE,MAAAA,CAAOoB,MAAM,EAAEX,MAAM,KAAKS,SAAS,CAACG,QAAQ,CAACD,MAAM,EAAEA,MAAM,GAAGX,MAAM;IAC5E,CAAC;EACF;EACA,IAAI9C,IAAY;EAChB,IAAI;IACHA,IAAI,GAAG,CAAC,MAAM,IAAAyB,cAAU,EAAC,CAAC,CAACkC,IAAI,CAACX,IAAI,CAAC,EAAEhD,IAAI;EAC5C,CAAC,CAAC,OAAO4D,KAAK,EAAE;IACf,IAAAC,sBAAW,EAACD,KAAK,EAAE;MAAEE,SAAS,EAAE;IAAa,CAAC,CAAC;EAChD;EACA,OAAO;IACN9D,IAAI;IACJqC,KAAK,EAAE,MAAAA,CAAOoB,MAAM,EAAEX,MAAM,KAC3B,IAAAU,oBAAa,EAAC,MAAM,IAAA/B,cAAU,EAAC,CAAC,CAACsC,IAAI,CAACf,IAAI,EAAEF,MAAM,EAAEW,MAAM,EAAE,QAAQ,CAAC;EACvE,CAAC;AACF;AAEO,eAAeO,aAAaA,CAClCC,OAAwB,EACxBvB,KAAsB,EACS;EAC/B,IAAAwB,sBAAc,EAAC,iBAAiB,CAAC;EACjC,MAAMrC,MAAM,GAAG,MAAMkB,aAAa,CAACL,KAAK,CAAC;EACzC,IAAAyB,mCAA0B,EAACzB,KAAK,CAAC9C,EAAE,EAAEiC,MAAM,CAAC7B,IAAI,CAAC;EAEjD,MAAMuB,IAAI,GAAG,IAAA6C,mBAAY,EAACH,OAAO,CAACI,MAAM,EAAEJ,OAAO,CAACK,QAAQ,EAAE5B,KAAK,CAAC9C,EAAE,CAAC;EACrE,MAAMgC,GAAG,GAAGqC,OAAO,CAACM,WAAW,CAAC7B,KAAK,CAAC9C,EAAE,CAAC;EACzC,MAAMoD,IAAI,GAAGP,YAAY,CAACC,KAAK,CAAC;EAEhC,IAAI8B,QAA+D;EACnE,IAAI;IACH,MAAM,IAAA/C,cAAU,EAAC,CAAC,CAACgD,KAAK,CAAC,IAAAC,yBAAkB,EAACT,OAAO,CAACI,MAAM,EAAEJ,OAAO,CAACK,QAAQ,CAAC,CAAC;IAC9E,IAAI1C,GAAG,EAAE;MACR4C,QAAQ,GAAG,MAAM7C,cAAc,CAACJ,IAAI,EAAEK,GAAG,EAAEC,MAAM,CAAC;IACnD,CAAC,MAAM,IAAImB,IAAI,KAAK,IAAI,EAAE;MACzB,MAAM,IAAAvB,cAAU,EAAC,CAAC,CAACkD,QAAQ,CAAC3B,IAAI,EAAEzB,IAAI,CAAC;IACxC,CAAC,MAAM;MACN,MAAMD,cAAc,CAACC,IAAI,EAAEmB,KAAK,CAAClB,OAAiB,CAAC;IACpD;EACD,CAAC,CAAC,OAAOoC,KAAK,EAAE;IACf;IACA;IACA,MAAM,IAAAgB,mBAAe,EAACrD,IAAI,CAAC;IAC3B,IAAAsC,sBAAW,EAACD,KAAK,EAAE;MAAEE,SAAS,EAAE;IAAa,CAAC,CAAC;EAChD;EAEA,MAAMnE,SAA8B,GAAG;IACtCC,EAAE,EAAE8C,KAAK,CAAC9C,EAAE;IACZE,WAAW,EAAE4C,KAAK,CAAC5C,WAAW;IAC9BE,IAAI,EAAE6B,MAAM,CAAC7B,IAAI;IACjBE,SAAS,EAAE+D,OAAO,CAACY,GAAG,CAAC;EACxB,CAAC;EACD,IAAInC,KAAK,CAACpC,KAAK,EAAE;IAChBX,SAAS,CAACW,KAAK,GAAGoC,KAAK,CAACpC,KAAK;EAC9B;EACA,IAAIkE,QAAQ,EAAE;IACb7E,SAAS,CAACa,SAAS,GAAGgE,QAAQ,CAAChE,SAAS;IACxCb,SAAS,CAACgB,UAAU,GAAG6D,QAAQ,CAAC7D,UAAU;EAC3C;;EAEA;EACA,MAAMQ,eAAe,CAAC8C,OAAO,CAAC1E,QAAQ,CAAC,CAAC,EAAEI,SAAS,CAAC;EACpD,OAAOA,SAAS;AACjB;AAEA,eAAemF,aAAaA,CAACvD,IAAY,EAAEwD,KAAiB,EAAmB;EAC9E,IAAI,CAACA,KAAK,EAAE;IACX,OAAO,IAAAtD,cAAU,EAAC,CAAC,CAACuD,QAAQ,CAACzD,IAAI,EAAE,QAAQ,CAAC;EAC7C;EACA,OAAO,IAAAE,cAAU,EAAC,CAAC,CAACsC,IAAI,CAACxC,IAAI,EAAEwD,KAAK,CAACjC,MAAM,EAAEiC,KAAK,CAACtB,MAAM,EAAE,QAAQ,CAAC;AACrE;AAEA,eAAewB,aAAaA,CAAC1D,IAAY,EAAEK,GAAe,EAAEmD,KAAiB,EAAmB;EAC/F,MAAMG,WAAW,GAAG,IAAA1B,oBAAa,EAAC,MAAM,IAAA/B,cAAU,EAAC,CAAC,CAACsC,IAAI,CAACxC,IAAI,EAAE4D,2BAAY,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC;EAC3F,MAAMrD,MAAM,GAAG,IAAAsD,2BAAY,EAACF,WAAW,CAAC;EAExC,MAAMG,IAAI,GAAGN,KAAK,EAAEtB,MAAM,IAAI,CAAC;EAC/B,MAAM6B,EAAE,GAAGP,KAAK,GAAGQ,IAAI,CAACC,GAAG,CAAC1D,MAAM,CAAC2D,aAAa,EAAEJ,IAAI,GAAGN,KAAK,CAACjC,MAAM,CAAC,GAAGhB,MAAM,CAAC2D,aAAa;EAC7F,IAAIH,EAAE,IAAID,IAAI,EAAE;IACf,OAAO,EAAE;EACV;EAEA,MAAMK,KAAK,GAAGH,IAAI,CAACI,KAAK,CAACN,IAAI,GAAGvD,MAAM,CAACtB,SAAS,CAAC;EACjD,MAAMoF,IAAI,GAAGL,IAAI,CAACI,KAAK,CAAC,CAACL,EAAE,GAAG,CAAC,IAAIxD,MAAM,CAACtB,SAAS,CAAC;EACpD,MAAMqF,MAAoB,GAAG,EAAE;EAE/B,KAAK,IAAIzD,KAAK,GAAGsD,KAAK,EAAEtD,KAAK,IAAIwD,IAAI,EAAExD,KAAK,IAAI,CAAC,EAAE;IAClD,MAAM0D,MAAM,GAAG,IAAAtC,oBAAa,EAC3B,MAAM,IAAA/B,cAAU,EAAC,CAAC,CAACsC,IAAI,CACtBxC,IAAI,EACJ,IAAAe,mCAAoB,EAACR,MAAM,EAAEM,KAAK,CAAC,GAAG2D,wBAAS,EAC/C,IAAAC,0BAAW,EAAClE,MAAM,EAAEM,KAAK,CAAC,EAC1B,QACD,CACD,CAAC;IACD,MAAM6D,SAAS,GAAG,IAAAC,2BAAY,EAACtE,GAAG,EAAEQ,KAAK,EAAE0D,MAAM,CAAC;IAClD,MAAMK,UAAU,GAAG/D,KAAK,GAAGN,MAAM,CAACtB,SAAS;IAC3CqF,MAAM,CAACO,IAAI,CACVH,SAAS,CAACvC,QAAQ,CACjB6B,IAAI,CAACc,GAAG,CAAC,CAAC,EAAEhB,IAAI,GAAGc,UAAU,CAAC,EAC9BZ,IAAI,CAACC,GAAG,CAACS,SAAS,CAACnD,MAAM,EAAEwC,EAAE,GAAGa,UAAU,CAC3C,CACD,CAAC;EACF;EAEA,OAAO,IAAAjE,oBAAa,EAAC,IAAAoE,kBAAW,EAACT,MAAM,CAAC,CAAC;AAC1C;AAEO,eAAeU,YAAYA,CACjCtC,OAAwB,EACxBrE,EAAU,EACVmF,KAAiB,EACC;EAClB,MAAMxD,IAAI,GAAG,IAAA6C,mBAAY,EAACH,OAAO,CAACI,MAAM,EAAEJ,OAAO,CAACK,QAAQ,EAAE1E,EAAE,CAAC;EAC/D,MAAMgC,GAAG,GAAGqC,OAAO,CAACM,WAAW,CAAC3E,EAAE,CAAC;EACnC,IAAI;IACH,OAAOgC,GAAG,GAAG,MAAMqD,aAAa,CAAC1D,IAAI,EAAEK,GAAG,EAAEmD,KAAK,CAAC,GAAG,MAAMD,aAAa,CAACvD,IAAI,EAAEwD,KAAK,CAAC;EACtF,CAAC,CAAC,OAAOnB,KAAK,EAAE;IACf;IACA;IACA;IACA,IAAI,IAAA4C,uBAAc,EAAC5C,KAAK,CAAC,EAAE;MAC1B,MAAMA,KAAK;IACZ;IACA,IAAAX,cAAK,EAACC,uBAAe,CAACuD,kBAAkB,EAAE;MACzCrD,OAAO,EAAE,qBAAqB;MAC9BC,MAAM,EAAE;QAAEC,YAAY,EAAE1D;MAAG,CAAC;MAC5B8G,KAAK,EAAE9C;IACR,CAAC,CAAC;EACH;AACD;;AAEA;AACA;AACA;AACA;AACA;AACA;;AAKO,eAAe+C,cAAcA,CACnC1C,OAAwB,EACxBrE,EAAU,EACVgH,QAA0B,EACC;EAC3B,MAAMrF,IAAI,GAAG,IAAA6C,mBAAY,EAACH,OAAO,CAACI,MAAM,EAAEJ,OAAO,CAACK,QAAQ,EAAE1E,EAAE,CAAC;EAC/D,IAAIgH,QAAQ,EAAE;IACb;IACA;IACA,MAAMC,YAAY,GAAG,MAAMzF,eAAe,CAAC6C,OAAO,CAAC1E,QAAQ,CAAC,CAAC,EAAEK,EAAE,CAAC;IAClE,IAAIiH,YAAY,EAAE;MACjBD,QAAQ,CAACE,GAAG,CAACvF,IAAI,CAAC;IACnB;IACA,OAAO;MACNwF,cAAc,EAAE,CAAC;MACjBC,gBAAgB,EAAEH,YAAY,GAAG,CAACjH,EAAE,CAAC,GAAG,EAAE;MAC1CqH,kBAAkB,EAAE,EAAE;MACtBC,cAAc,EAAE;IACjB,CAAC;EACF;EACA,MAAMC,OAAO,GAAG,MAAM,IAAAvC,mBAAe,EAACrD,IAAI,CAAC;EAC3C,MAAMsF,YAAY,GAAG,MAAMzF,eAAe,CAAC6C,OAAO,CAAC1E,QAAQ,CAAC,CAAC,EAAEK,EAAE,CAAC;EAElE,OAAO;IACNmH,cAAc,EAAE,CAAC;IACjBC,gBAAgB,EAAEG,OAAO,GAAG,CAACvH,EAAE,CAAC,GAAG,EAAE;IACrC;IACA;IACAqH,kBAAkB,EAAE,CAACE,OAAO,IAAIN,YAAY,GAAG,CAACjH,EAAE,CAAC,GAAG,EAAE;IACxDsH,cAAc,EAAE;EACjB,CAAC;AACF","ignoreList":[]}

package/lib/commonjs/contract/adapter.js

@@ -0,0 +1,6 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+//# sourceMappingURL=adapter.js.map

package/lib/commonjs/contract/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sourceRoot":"../../../src","sources":["contract/adapter.ts"],"mappings":"","ignoreList":[]}

package/lib/commonjs/contract/attachment.js

@@ -0,0 +1,2 @@
+"use strict";
+//# sourceMappingURL=attachment.js.map

package/lib/commonjs/contract/attachment.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sourceRoot":"../../../src","sources":["contract/attachment.ts"],"mappings":"","ignoreList":[]}

package/lib/commonjs/contract/backup.js

@@ -0,0 +1,2 @@
+"use strict";
+//# sourceMappingURL=backup.js.map

package/lib/commonjs/contract/backup.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sourceRoot":"../../../src","sources":["contract/backup.ts"],"mappings":"","ignoreList":[]}

package/lib/commonjs/contract/config.js

@@ -0,0 +1,31 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.Budgets = void 0;
+/**
+ * Database configuration: everything an app supplies at open time.
+ *
+ * Immutable for the handle's lifetime. Scope in particular is bound here and
+ * never changes (FR-008a) — there is no switchScope, and no operation takes a
+ * scope argument, which is what makes cross-scope leakage inexpressible
+ * rather than merely prevented.
+ */
+
+/** Phase-one budgets (FR-088). Confirmed against the harness during validation. */
+const Budgets = exports.Budgets = {
+  MAX_RECORDS_PER_COLLECTION: 100_000,
+  MAX_RECORD_BYTES: 256 * 1024,
+  MAX_BATCH_OPERATIONS: 1_000,
+  MAX_PAGE_SIZE: 500,
+  MAX_COLLECTIONS_PER_DATABASE: 50,
+  MAX_ATTACHMENT_REFERENCES_PER_SCOPE: 50_000,
+  MAX_ARTIFACT_BYTES: 100 * 1024 * 1024,
+  MAX_OPEN_HANDLES: 8,
+  /** Plaintext chunk size for encrypted artifacts (research.md R4). */
+  ARTIFACT_CHUNK_BYTES: 256 * 1024
+};
+
+/** Names a scope for the operations that legitimately need to (FR-059). */
+//# sourceMappingURL=config.js.map

package/lib/commonjs/contract/config.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["Budgets","exports","MAX_RECORDS_PER_COLLECTION","MAX_RECORD_BYTES","MAX_BATCH_OPERATIONS","MAX_PAGE_SIZE","MAX_COLLECTIONS_PER_DATABASE","MAX_ATTACHMENT_REFERENCES_PER_SCOPE","MAX_ARTIFACT_BYTES","MAX_OPEN_HANDLES","ARTIFACT_CHUNK_BYTES"],"sourceRoot":"../../../src","sources":["contract/config.ts"],"mappings":";;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAQA;AACO,MAAMA,OAAO,GAAAC,OAAA,CAAAD,OAAA,GAAG;EACtBE,0BAA0B,EAAE,OAAO;EACnCC,gBAAgB,EAAE,GAAG,GAAG,IAAI;EAC5BC,oBAAoB,EAAE,KAAK;EAC3BC,aAAa,EAAE,GAAG;EAClBC,4BAA4B,EAAE,EAAE;EAChCC,mCAAmC,EAAE,MAAM;EAC3CC,kBAAkB,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI;EACrCC,gBAAgB,EAAE,CAAC;EACnB;EACAC,oBAAoB,EAAE,GAAG,GAAG;AAC7B,CAAU;;AAiBV","ignoreList":[]}

package/lib/commonjs/contract/encryption.js

@@ -0,0 +1,6 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+//# sourceMappingURL=encryption.js.map

package/lib/commonjs/contract/encryption.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sourceRoot":"../../../src","sources":["contract/encryption.ts"],"mappings":"","ignoreList":[]}

package/lib/commonjs/contract/errors.js

@@ -0,0 +1,64 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.RETRYABLE_CODES = exports.DiagnosticCodes = void 0;
+/**
+ * Diagnostic codes.
+ *
+ * Stable identifiers so an app can choose a response without parsing a
+ * message (FR-074, FR-082). Disk-full, filesystem-access, and corruption stay
+ * distinct rather than collapsing into a generic write failure (FR-076) —
+ * an app frees space for one, retries after unlock for another, and offers a
+ * reset for the third.
+ *
+ * Full table with recommended recovery per code:
+ * specs/008-rn-local-db-package/contracts/errors.md
+ */
+
+const DiagnosticCodes = exports.DiagnosticCodes = {
+  // Configuration and scope
+  CONFIG_INVALID: 'CONFIG_INVALID',
+  INVALID_SCOPE: 'INVALID_SCOPE',
+  MIGRATION_CONFIG_INVALID: 'MIGRATION_CONFIG_INVALID',
+  // Open and lifecycle
+  OPEN_FAILED: 'OPEN_FAILED',
+  CLOSED_HANDLE: 'CLOSED_HANDLE',
+  SCOPE_DELETED: 'SCOPE_DELETED',
+  CORRUPTION: 'CORRUPTION',
+  STORAGE_ACCESS: 'STORAGE_ACCESS',
+  // Migration
+  MIGRATION_FAILED: 'MIGRATION_FAILED',
+  SCHEMA_DOWNGRADE: 'SCHEMA_DOWNGRADE',
+  // Records and writes
+  RECORD_NOT_FOUND: 'RECORD_NOT_FOUND',
+  RECORD_CONFLICT: 'RECORD_CONFLICT',
+  RECORD_TOO_LARGE: 'RECORD_TOO_LARGE',
+  BATCH_TOO_LARGE: 'BATCH_TOO_LARGE',
+  DISK_FULL: 'DISK_FULL',
+  WRITE_FAILED: 'WRITE_FAILED',
+  // Query
+  QUERY_INVALID: 'QUERY_INVALID',
+  PAGE_SIZE_INVALID: 'PAGE_SIZE_INVALID',
+  CURSOR_INVALID: 'CURSOR_INVALID',
+  // Transaction
+  TRANSACTION_FAILED: 'TRANSACTION_FAILED',
+  TRANSACTION_STATE: 'TRANSACTION_STATE',
+  // Attachments
+  ATTACHMENT_MISSING: 'ATTACHMENT_MISSING',
+  ATTACHMENT_OUT_OF_BOUNDS: 'ATTACHMENT_OUT_OF_BOUNDS',
+  ATTACHMENT_WRITE_FAILED: 'ATTACHMENT_WRITE_FAILED',
+  ATTACHMENT_UNDECRYPTABLE: 'ATTACHMENT_UNDECRYPTABLE',
+  // Encryption
+  KEY_INVALID: 'KEY_INVALID',
+  KEY_PROVIDER_FAILED: 'KEY_PROVIDER_FAILED',
+  ENCRYPTION_MISMATCH: 'ENCRYPTION_MISMATCH',
+  ENCRYPTION_UNAVAILABLE: 'ENCRYPTION_UNAVAILABLE'
+};
+/**
+ * Codes worth retrying. `KEY_PROVIDER_FAILED` is here because a locked device
+ * is an expected condition, not a bug (FR-102).
+ */
+const RETRYABLE_CODES = exports.RETRYABLE_CODES = new Set([DiagnosticCodes.OPEN_FAILED, DiagnosticCodes.DISK_FULL, DiagnosticCodes.WRITE_FAILED, DiagnosticCodes.STORAGE_ACCESS, DiagnosticCodes.TRANSACTION_FAILED, DiagnosticCodes.MIGRATION_FAILED, DiagnosticCodes.ATTACHMENT_WRITE_FAILED, DiagnosticCodes.KEY_PROVIDER_FAILED]);
+//# sourceMappingURL=errors.js.map

package/lib/commonjs/contract/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["DiagnosticCodes","exports","CONFIG_INVALID","INVALID_SCOPE","MIGRATION_CONFIG_INVALID","OPEN_FAILED","CLOSED_HANDLE","SCOPE_DELETED","CORRUPTION","STORAGE_ACCESS","MIGRATION_FAILED","SCHEMA_DOWNGRADE","RECORD_NOT_FOUND","RECORD_CONFLICT","RECORD_TOO_LARGE","BATCH_TOO_LARGE","DISK_FULL","WRITE_FAILED","QUERY_INVALID","PAGE_SIZE_INVALID","CURSOR_INVALID","TRANSACTION_FAILED","TRANSACTION_STATE","ATTACHMENT_MISSING","ATTACHMENT_OUT_OF_BOUNDS","ATTACHMENT_WRITE_FAILED","ATTACHMENT_UNDECRYPTABLE","KEY_INVALID","KEY_PROVIDER_FAILED","ENCRYPTION_MISMATCH","ENCRYPTION_UNAVAILABLE","RETRYABLE_CODES","Set"],"sourceRoot":"../../../src","sources":["contract/errors.ts"],"mappings":";;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEO,MAAMA,eAAe,GAAAC,OAAA,CAAAD,eAAA,GAAG;EAC9B;EACAE,cAAc,EAAE,gBAAgB;EAChCC,aAAa,EAAE,eAAe;EAC9BC,wBAAwB,EAAE,0BAA0B;EAEpD;EACAC,WAAW,EAAE,aAAa;EAC1BC,aAAa,EAAE,eAAe;EAC9BC,aAAa,EAAE,eAAe;EAC9BC,UAAU,EAAE,YAAY;EACxBC,cAAc,EAAE,gBAAgB;EAEhC;EACAC,gBAAgB,EAAE,kBAAkB;EACpCC,gBAAgB,EAAE,kBAAkB;EAEpC;EACAC,gBAAgB,EAAE,kBAAkB;EACpCC,eAAe,EAAE,iBAAiB;EAClCC,gBAAgB,EAAE,kBAAkB;EACpCC,eAAe,EAAE,iBAAiB;EAClCC,SAAS,EAAE,WAAW;EACtBC,YAAY,EAAE,cAAc;EAE5B;EACAC,aAAa,EAAE,eAAe;EAC9BC,iBAAiB,EAAE,mBAAmB;EACtCC,cAAc,EAAE,gBAAgB;EAEhC;EACAC,kBAAkB,EAAE,oBAAoB;EACxCC,iBAAiB,EAAE,mBAAmB;EAEtC;EACAC,kBAAkB,EAAE,oBAAoB;EACxCC,wBAAwB,EAAE,0BAA0B;EACpDC,uBAAuB,EAAE,yBAAyB;EAClDC,wBAAwB,EAAE,0BAA0B;EAEpD;EACAC,WAAW,EAAE,aAAa;EAC1BC,mBAAmB,EAAE,qBAAqB;EAC1CC,mBAAmB,EAAE,qBAAqB;EAC1CC,sBAAsB,EAAE;AACzB,CAAU;AAIV;AACA;AACA;AACA;AACO,MAAMC,eAA4C,GAAA9B,OAAA,CAAA8B,eAAA,GAAG,IAAIC,GAAG,CAAiB,CACnFhC,eAAe,CAACK,WAAW,EAC3BL,eAAe,CAACgB,SAAS,EACzBhB,eAAe,CAACiB,YAAY,EAC5BjB,eAAe,CAACS,cAAc,EAC9BT,eAAe,CAACqB,kBAAkB,EAClCrB,eAAe,CAACU,gBAAgB,EAChCV,eAAe,CAACyB,uBAAuB,EACvCzB,eAAe,CAAC4B,mBAAmB,CACnC,CAAC","ignoreList":[]}

package/lib/commonjs/contract/migration.js

@@ -0,0 +1,6 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+//# sourceMappingURL=migration.js.map

package/lib/commonjs/contract/migration.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sourceRoot":"../../../src","sources":["contract/migration.ts"],"mappings":"","ignoreList":[]}

package/lib/commonjs/contract/query.js

@@ -0,0 +1,6 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+//# sourceMappingURL=query.js.map

package/lib/commonjs/contract/query.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sourceRoot":"../../../src","sources":["contract/query.ts"],"mappings":"","ignoreList":[]}

package/lib/commonjs/contract/record.js

@@ -0,0 +1,6 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+//# sourceMappingURL=record.js.map

package/lib/commonjs/contract/record.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sourceRoot":"../../../src","sources":["contract/record.ts"],"mappings":"","ignoreList":[]}

package/lib/commonjs/contract/schema.js

@@ -0,0 +1,2 @@
+"use strict";
+//# sourceMappingURL=schema.js.map

package/lib/commonjs/contract/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sourceRoot":"../../../src","sources":["contract/schema.ts"],"mappings":"","ignoreList":[]}

package/lib/commonjs/contract/scope.js

@@ -0,0 +1,2 @@
+"use strict";
+//# sourceMappingURL=scope.js.map

package/lib/commonjs/contract/scope.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sourceRoot":"../../../src","sources":["contract/scope.ts"],"mappings":"","ignoreList":[]}

package/lib/commonjs/contract/transaction.js

@@ -0,0 +1,6 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+//# sourceMappingURL=transaction.js.map

package/lib/commonjs/contract/transaction.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sourceRoot":"../../../src","sources":["contract/transaction.ts"],"mappings":"","ignoreList":[]}

package/lib/commonjs/crypto/chunked-cipher.js

@@ -0,0 +1,147 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.TAG_BYTES = exports.MAGIC = exports.HEADER_BYTES = exports.FORMAT_VERSION = exports.ALGORITHM = void 0;
+exports.chunkCountFor = chunkCountFor;
+exports.chunkOffset = chunkOffset;
+exports.chunkPlaintextLength = chunkPlaintextLength;
+exports.decodeHeader = decodeHeader;
+exports.decryptChunk = decryptChunk;
+exports.encodeHeader = encodeHeader;
+exports.encryptChunk = encryptChunk;
+exports.encryptedLength = encryptedLength;
+exports.headerFor = headerFor;
+var _config = require("../contract/config.js");
+var _errors = require("../contract/errors.js");
+var _errors2 = require("../diagnostics/errors.js");
+var _derive = require("./derive.js");
+var _provider = require("./provider.js");
+var _bytes = require("../platform/bytes.js");
+/**
+ * The chunked AES-256-GCM artifact format.
+ *
+ * Whole-file encryption was rejected because a 100 MB artifact would have to
+ * be held in memory twice — plaintext and ciphertext — which breaks FR-107a's
+ * flat memory bound and every PERF-001 budget along with it (research.md R4).
+ * Chunking keeps exactly one 256 KB chunk in flight regardless of artifact
+ * size.
+ *
+ * ```text
+ * [ header 22 bytes ] magic | format version | chunk size | chunk count | plaintext size
+ * [ chunk 0 ] ciphertext(≤ chunkSize) | auth tag (16)
+ * [ chunk 1 ] …
+ * ```
+ *
+ * The auth tag follows each chunk rather than sitting in the header, which is
+ * a deliberate departure from the sketch in storage-layout.md. A tag is only
+ * known after its chunk has been encrypted, and the filesystem peer appends —
+ * it cannot seek back to patch a header. Collecting every tag before writing
+ * anything would mean buffering the whole ciphertext, which is the thing this
+ * format exists to avoid. Inline tags keep the write append-only and leave
+ * every chunk at a computable offset.
+ *
+ * A failing tag on read is `ATTACHMENT_UNDECRYPTABLE`, deliberately distinct
+ * from `ATTACHMENT_MISSING` (FR-107c): one is a wrong key or a tampered file
+ * and may be recoverable, the other is data that is simply gone.
+ */
+
+const MAGIC = exports.MAGIC = 'LDB1';
+const FORMAT_VERSION = exports.FORMAT_VERSION = 1;
+const HEADER_BYTES = exports.HEADER_BYTES = 22;
+const TAG_BYTES = exports.TAG_BYTES = 16;
+const ALGORITHM = exports.ALGORITHM = 'aes-256-gcm';
+function chunkCountFor(plaintextSize, chunkSize) {
+  return plaintextSize === 0 ? 0 : Math.ceil(plaintextSize / chunkSize);
+}
+function encodeHeader(header) {
+  const bytes = new Uint8Array(HEADER_BYTES);
+  for (let index = 0; index < 4; index += 1) {
+    bytes[index] = MAGIC.charCodeAt(index);
+  }
+  // Big-endian, as DataView writes by default; the on-disk format is unchanged.
+  const view = new DataView(bytes.buffer);
+  view.setUint16(4, header.formatVersion);
+  view.setUint32(6, header.chunkSize);
+  view.setUint32(10, header.chunkCount);
+  // Split across two 32-bit writes: artifact sizes stay well inside the safe
+  // integer range, and this avoids depending on BigInt in Hermes.
+  view.setUint32(14, Math.floor(header.plaintextSize / 0x100000000));
+  view.setUint32(18, header.plaintextSize % 0x100000000);
+  return bytes;
+}
+function decodeHeader(bytes) {
+  if (bytes.length < HEADER_BYTES || (0, _bytes.asciiAt)(bytes, 0, 4) !== MAGIC) {
+    (0, _errors2.raise)(_errors.DiagnosticCodes.ATTACHMENT_UNDECRYPTABLE, {
+      message: 'artifact header is not a recognised encrypted artifact'
+    });
+  }
+  const view = new DataView(bytes.buffer, bytes.byteOffset, HEADER_BYTES);
+  return {
+    formatVersion: view.getUint16(4),
+    chunkSize: view.getUint32(6),
+    chunkCount: view.getUint32(10),
+    plaintextSize: view.getUint32(14) * 0x100000000 + view.getUint32(18)
+  };
+}
+
+/** Plaintext length of chunk `index`; the last one is usually short. */
+function chunkPlaintextLength(header, index) {
+  const start = index * header.chunkSize;
+  return Math.max(0, Math.min(header.chunkSize, header.plaintextSize - start));
+}
+
+/**
+ * Byte offset of chunk `index` in the file.
+ *
+ * Every chunk but the last is full, so the offset is arithmetic rather than a
+ * table lookup — which is what lets a range read seek straight to the chunk
+ * it needs instead of walking the file.
+ */
+function chunkOffset(header, index) {
+  return HEADER_BYTES + index * (header.chunkSize + TAG_BYTES);
+}
+function encryptedLength(header) {
+  if (header.chunkCount === 0) {
+    return HEADER_BYTES;
+  }
+  const lastIndex = header.chunkCount - 1;
+  return chunkOffset(header, lastIndex) + chunkPlaintextLength(header, lastIndex) + TAG_BYTES;
+}
+
+/** One chunk in, ciphertext with its tag appended out. */
+function encryptChunk(key, index, plaintext) {
+  const cipher = (0, _provider.cipherModule)().createCipheriv(ALGORITHM, key, (0, _derive.nonceForChunk)(index));
+  return (0, _bytes.concatBytes)([new Uint8Array(cipher.update(plaintext)), new Uint8Array(cipher.final()), new Uint8Array(cipher.getAuthTag())]);
+}
+function decryptChunk(key, index, stored) {
+  if (stored.length < TAG_BYTES) {
+    (0, _errors2.raise)(_errors.DiagnosticCodes.ATTACHMENT_UNDECRYPTABLE, {
+      message: 'artifact chunk is truncated'
+    });
+  }
+  const body = stored.subarray(0, stored.length - TAG_BYTES);
+  const tag = stored.subarray(stored.length - TAG_BYTES);
+  const decipher = (0, _provider.cipherModule)().createDecipheriv(ALGORITHM, key, (0, _derive.nonceForChunk)(index));
+  decipher.setAuthTag(tag);
+  try {
+    return (0, _bytes.concatBytes)([new Uint8Array(decipher.update(body)), new Uint8Array(decipher.final())]);
+  } catch (error) {
+    // A failing tag is the only signal that separates "exists but will not
+    // decrypt" from "missing", and an app responds to them differently.
+    (0, _errors2.raise)(_errors.DiagnosticCodes.ATTACHMENT_UNDECRYPTABLE, {
+      message: 'artifact chunk failed authentication',
+      cause: error
+    });
+  }
+}
+function headerFor(plaintextSize, chunkSize = _config.Budgets.ARTIFACT_CHUNK_BYTES) {
+  return {
+    formatVersion: FORMAT_VERSION,
+    chunkSize,
+    chunkCount: chunkCountFor(plaintextSize, chunkSize),
+    plaintextSize
+  };
+}
+//# sourceMappingURL=chunked-cipher.js.map

package/lib/commonjs/crypto/chunked-cipher.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_config","require","_errors","_errors2","_derive","_provider","_bytes","MAGIC","exports","FORMAT_VERSION","HEADER_BYTES","TAG_BYTES","ALGORITHM","chunkCountFor","plaintextSize","chunkSize","Math","ceil","encodeHeader","header","bytes","Uint8Array","index","charCodeAt","view","DataView","buffer","setUint16","formatVersion","setUint32","chunkCount","floor","decodeHeader","length","asciiAt","raise","DiagnosticCodes","ATTACHMENT_UNDECRYPTABLE","message","byteOffset","getUint16","getUint32","chunkPlaintextLength","start","max","min","chunkOffset","encryptedLength","lastIndex","encryptChunk","key","plaintext","cipher","cipherModule","createCipheriv","nonceForChunk","concatBytes","update","final","getAuthTag","decryptChunk","stored","body","subarray","tag","decipher","createDecipheriv","setAuthTag","error","cause","headerFor","Budgets","ARTIFACT_CHUNK_BYTES"],"sourceRoot":"../../../src","sources":["crypto/chunked-cipher.ts"],"mappings":";;;;;;;;;;;;;;;AA4BA,IAAAA,OAAA,GAAAC,OAAA;AACA,IAAAC,OAAA,GAAAD,OAAA;AACA,IAAAE,QAAA,GAAAF,OAAA;AACA,IAAAG,OAAA,GAAAH,OAAA;AACA,IAAAI,SAAA,GAAAJ,OAAA;AACA,IAAAK,MAAA,GAAAL,OAAA;AAjCA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AASO,MAAMM,KAAK,GAAAC,OAAA,CAAAD,KAAA,GAAG,MAAM;AACpB,MAAME,cAAc,GAAAD,OAAA,CAAAC,cAAA,GAAG,CAAC;AACxB,MAAMC,YAAY,GAAAF,OAAA,CAAAE,YAAA,GAAG,EAAE;AACvB,MAAMC,SAAS,GAAAH,OAAA,CAAAG,SAAA,GAAG,EAAE;AACpB,MAAMC,SAAS,GAAAJ,OAAA,CAAAI,SAAA,GAAG,aAAa;AAS/B,SAASC,aAAaA,CAACC,aAAqB,EAAEC,SAAiB,EAAU;EAC/E,OAAOD,aAAa,KAAK,CAAC,GAAG,CAAC,GAAGE,IAAI,CAACC,IAAI,CAACH,aAAa,GAAGC,SAAS,CAAC;AACtE;AAEO,SAASG,YAAYA,CAACC,MAAsB,EAAc;EAChE,MAAMC,KAAK,GAAG,IAAIC,UAAU,CAACX,YAAY,CAAC;EAC1C,KAAK,IAAIY,KAAK,GAAG,CAAC,EAAEA,KAAK,GAAG,CAAC,EAAEA,KAAK,IAAI,CAAC,EAAE;IAC1CF,KAAK,CAACE,KAAK,CAAC,GAAGf,KAAK,CAACgB,UAAU,CAACD,KAAK,CAAC;EACvC;EACA;EACA,MAAME,IAAI,GAAG,IAAIC,QAAQ,CAACL,KAAK,CAACM,MAAM,CAAC;EACvCF,IAAI,CAACG,SAAS,CAAC,CAAC,EAAER,MAAM,CAACS,aAAa,CAAC;EACvCJ,IAAI,CAACK,SAAS,CAAC,CAAC,EAAEV,MAAM,CAACJ,SAAS,CAAC;EACnCS,IAAI,CAACK,SAAS,CAAC,EAAE,EAAEV,MAAM,CAACW,UAAU,CAAC;EACrC;EACA;EACAN,IAAI,CAACK,SAAS,CAAC,EAAE,EAAEb,IAAI,CAACe,KAAK,CAACZ,MAAM,CAACL,aAAa,GAAG,WAAW,CAAC,CAAC;EAClEU,IAAI,CAACK,SAAS,CAAC,EAAE,EAAEV,MAAM,CAACL,aAAa,GAAG,WAAW,CAAC;EACtD,OAAOM,KAAK;AACb;AAEO,SAASY,YAAYA,CAACZ,KAAiB,EAAkB;EAC/D,IAAIA,KAAK,CAACa,MAAM,GAAGvB,YAAY,IAAI,IAAAwB,cAAO,EAACd,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,KAAKb,KAAK,EAAE;IAClE,IAAA4B,cAAK,EAACC,uBAAe,CAACC,wBAAwB,EAAE;MAC/CC,OAAO,EAAE;IACV,CAAC,CAAC;EACH;EACA,MAAMd,IAAI,GAAG,IAAIC,QAAQ,CAACL,KAAK,CAACM,MAAM,EAAEN,KAAK,CAACmB,UAAU,EAAE7B,YAAY,CAAC;EACvE,OAAO;IACNkB,aAAa,EAAEJ,IAAI,CAACgB,SAAS,CAAC,CAAC,CAAC;IAChCzB,SAAS,EAAES,IAAI,CAACiB,SAAS,CAAC,CAAC,CAAC;IAC5BX,UAAU,EAAEN,IAAI,CAACiB,SAAS,CAAC,EAAE,CAAC;IAC9B3B,aAAa,EAAEU,IAAI,CAACiB,SAAS,CAAC,EAAE,CAAC,GAAG,WAAW,GAAGjB,IAAI,CAACiB,SAAS,CAAC,EAAE;EACpE,CAAC;AACF;;AAEA;AACO,SAASC,oBAAoBA,CAACvB,MAAsB,EAAEG,KAAa,EAAU;EACnF,MAAMqB,KAAK,GAAGrB,KAAK,GAAGH,MAAM,CAACJ,SAAS;EACtC,OAAOC,IAAI,CAAC4B,GAAG,CAAC,CAAC,EAAE5B,IAAI,CAAC6B,GAAG,CAAC1B,MAAM,CAACJ,SAAS,EAAEI,MAAM,CAACL,aAAa,GAAG6B,KAAK,CAAC,CAAC;AAC7E;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASG,WAAWA,CAAC3B,MAAsB,EAAEG,KAAa,EAAU;EAC1E,OAAOZ,YAAY,GAAGY,KAAK,IAAIH,MAAM,CAACJ,SAAS,GAAGJ,SAAS,CAAC;AAC7D;AAEO,SAASoC,eAAeA,CAAC5B,MAAsB,EAAU;EAC/D,IAAIA,MAAM,CAACW,UAAU,KAAK,CAAC,EAAE;IAC5B,OAAOpB,YAAY;EACpB;EACA,MAAMsC,SAAS,GAAG7B,MAAM,CAACW,UAAU,GAAG,CAAC;EACvC,OAAOgB,WAAW,CAAC3B,MAAM,EAAE6B,SAAS,CAAC,GAAGN,oBAAoB,CAACvB,MAAM,EAAE6B,SAAS,CAAC,GAAGrC,SAAS;AAC5F;;AAEA;AACO,SAASsC,YAAYA,CAACC,GAAe,EAAE5B,KAAa,EAAE6B,SAAqB,EAAc;EAC/F,MAAMC,MAAM,GAAG,IAAAC,sBAAY,EAAC,CAAC,CAACC,cAAc,CAAC1C,SAAS,EAAEsC,GAAG,EAAE,IAAAK,qBAAa,EAACjC,KAAK,CAAC,CAAC;EAClF,OAAO,IAAAkC,kBAAW,EAAC,CAClB,IAAInC,UAAU,CAAC+B,MAAM,CAACK,MAAM,CAACN,SAAS,CAAC,CAAC,EACxC,IAAI9B,UAAU,CAAC+B,MAAM,CAACM,KAAK,CAAC,CAAC,CAAC,EAC9B,IAAIrC,UAAU,CAAC+B,MAAM,CAACO,UAAU,CAAC,CAAC,CAAC,CACnC,CAAC;AACH;AAEO,SAASC,YAAYA,CAACV,GAAe,EAAE5B,KAAa,EAAEuC,MAAkB,EAAc;EAC5F,IAAIA,MAAM,CAAC5B,MAAM,GAAGtB,SAAS,EAAE;IAC9B,IAAAwB,cAAK,EAACC,uBAAe,CAACC,wBAAwB,EAAE;MAC/CC,OAAO,EAAE;IACV,CAAC,CAAC;EACH;EACA,MAAMwB,IAAI,GAAGD,MAAM,CAACE,QAAQ,CAAC,CAAC,EAAEF,MAAM,CAAC5B,MAAM,GAAGtB,SAAS,CAAC;EAC1D,MAAMqD,GAAG,GAAGH,MAAM,CAACE,QAAQ,CAACF,MAAM,CAAC5B,MAAM,GAAGtB,SAAS,CAAC;EAEtD,MAAMsD,QAAQ,GAAG,IAAAZ,sBAAY,EAAC,CAAC,CAACa,gBAAgB,CAACtD,SAAS,EAAEsC,GAAG,EAAE,IAAAK,qBAAa,EAACjC,KAAK,CAAC,CAAC;EACtF2C,QAAQ,CAACE,UAAU,CAACH,GAAG,CAAC;EACxB,IAAI;IACH,OAAO,IAAAR,kBAAW,EAAC,CAAC,IAAInC,UAAU,CAAC4C,QAAQ,CAACR,MAAM,CAACK,IAAI,CAAC,CAAC,EAAE,IAAIzC,UAAU,CAAC4C,QAAQ,CAACP,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;EAC9F,CAAC,CAAC,OAAOU,KAAK,EAAE;IACf;IACA;IACA,IAAAjC,cAAK,EAACC,uBAAe,CAACC,wBAAwB,EAAE;MAC/CC,OAAO,EAAE,sCAAsC;MAC/C+B,KAAK,EAAED;IACR,CAAC,CAAC;EACH;AACD;AAEO,SAASE,SAASA,CACxBxD,aAAqB,EACrBC,SAAS,GAAGwD,eAAO,CAACC,oBAAoB,EACvB;EACjB,OAAO;IACN5C,aAAa,EAAEnB,cAAc;IAC7BM,SAAS;IACTe,UAAU,EAAEjB,aAAa,CAACC,aAAa,EAAEC,SAAS,CAAC;IACnDD;EACD,CAAC;AACF","ignoreList":[]}

package/lib/commonjs/crypto/derive.js

@@ -0,0 +1,61 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.deriveArtifactKey = deriveArtifactKey;
+exports.nonceForChunk = nonceForChunk;
+var _provider = require("./provider.js");
+var _bytes = require("../platform/bytes.js");
+/**
+ * Per-artifact key derivation.
+ *
+ * The database key is handed straight to SQLCipher. Using that same material
+ * as the AES-GCM key for artifacts would mean the two keystreams share a
+ * secret, so a weakness in either one — a nonce collision in the artifact
+ * format, a padding oracle in the database format — becomes a weakness in
+ * both. HKDF costs one hash and removes the coupling entirely (research.md
+ * R4).
+ *
+ * The artifact id is the HKDF `info`, so two artifacts under the same
+ * database key derive different subkeys. That is what makes the deterministic
+ * nonce scheme safe: a nonce is only ever reused with a different key.
+ */
+
+const HKDF_DIGEST = 'sha256';
+const KEY_BYTES = 32;
+const NONCE_BYTES = 12;
+function bytesOf(value) {
+  return (0, _bytes.utf8Bytes)(value);
+}
+
+/** 32 bytes, one artifact, one database key. */
+function deriveArtifactKey(databaseKey, scopeKey, attachmentId) {
+  const derived = (0, _provider.cipherModule)().hkdfSync(HKDF_DIGEST, bytesOf(databaseKey),
+  // The scope digest as salt keeps two scopes holding an artifact under
+  // the same id from deriving the same subkey.
+  bytesOf(scopeKey), bytesOf(`chipmobilesdk-localdb/artifact/${attachmentId}`), KEY_BYTES);
+  return new Uint8Array(derived);
+}
+
+/**
+ * Deterministic 12-byte nonce from the chunk index.
+ *
+ * Deterministic rather than random because a random nonce would have to be
+ * stored per chunk, and because uniqueness is already guaranteed one level
+ * up: the key is unique per artifact, so an index that is unique within the
+ * artifact is unique under that key. The remaining four bytes are a fixed
+ * domain tag rather than padding, so a nonce from this scheme can never
+ * collide with one from a future scheme that uses the same counter space.
+ */
+function nonceForChunk(index) {
+  const nonce = new Uint8Array(NONCE_BYTES);
+  const view = new DataView(nonce.buffer);
+  view.setUint32(0, 0x4c444231, false); // "LDB1"
+  // Split across two 32-bit writes rather than a BigInt: chunk indexes stay
+  // far inside the safe integer range, and Hermes is happier without one.
+  view.setUint32(4, Math.floor(index / 0x100000000), false);
+  view.setUint32(8, index % 0x100000000, false);
+  return nonce;
+}
+//# sourceMappingURL=derive.js.map

package/lib/commonjs/crypto/derive.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_provider","require","_bytes","HKDF_DIGEST","KEY_BYTES","NONCE_BYTES","bytesOf","value","utf8Bytes","deriveArtifactKey","databaseKey","scopeKey","attachmentId","derived","cipherModule","hkdfSync","Uint8Array","nonceForChunk","index","nonce","view","DataView","buffer","setUint32","Math","floor"],"sourceRoot":"../../../src","sources":["crypto/derive.ts"],"mappings":";;;;;;;AAeA,IAAAA,SAAA,GAAAC,OAAA;AACA,IAAAC,MAAA,GAAAD,OAAA;AAhBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAKA,MAAME,WAAW,GAAG,QAAQ;AAC5B,MAAMC,SAAS,GAAG,EAAE;AACpB,MAAMC,WAAW,GAAG,EAAE;AAEtB,SAASC,OAAOA,CAACC,KAAa,EAAc;EAC3C,OAAO,IAAAC,gBAAS,EAACD,KAAK,CAAC;AACxB;;AAEA;AACO,SAASE,iBAAiBA,CAChCC,WAAmB,EACnBC,QAAgB,EAChBC,YAAoB,EACP;EACb,MAAMC,OAAO,GAAG,IAAAC,sBAAY,EAAC,CAAC,CAACC,QAAQ,CACtCZ,WAAW,EACXG,OAAO,CAACI,WAAW,CAAC;EACpB;EACA;EACAJ,OAAO,CAACK,QAAQ,CAAC,EACjBL,OAAO,CAAC,kCAAkCM,YAAY,EAAE,CAAC,EACzDR,SACD,CAAC;EACD,OAAO,IAAIY,UAAU,CAACH,OAAO,CAAC;AAC/B;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASI,aAAaA,CAACC,KAAa,EAAc;EACxD,MAAMC,KAAK,GAAG,IAAIH,UAAU,CAACX,WAAW,CAAC;EACzC,MAAMe,IAAI,GAAG,IAAIC,QAAQ,CAACF,KAAK,CAACG,MAAM,CAAC;EACvCF,IAAI,CAACG,SAAS,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;EACtC;EACA;EACAH,IAAI,CAACG,SAAS,CAAC,CAAC,EAAEC,IAAI,CAACC,KAAK,CAACP,KAAK,GAAG,WAAW,CAAC,EAAE,KAAK,CAAC;EACzDE,IAAI,CAACG,SAAS,CAAC,CAAC,EAAEL,KAAK,GAAG,WAAW,EAAE,KAAK,CAAC;EAC7C,OAAOC,KAAK;AACb","ignoreList":[]}

package/lib/commonjs/crypto/key-provider.js

@@ -0,0 +1,70 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.acquireKey = acquireKey;
+var _errors = require("../contract/errors.js");
+var _errors2 = require("../diagnostics/errors.js");
+var _faults = require("../diagnostics/faults.js");
+/**
+ * Key acquisition, scoped to one handle's lifetime.
+ *
+ * The package never generates, derives from its own material, persists,
+ * caches beyond the handle, transmits, or returns a key (FR-098). What it
+ * does is ask the app for one at open and hold it exactly as long as the
+ * connection that needs it — which is also why no keychain library appears in
+ * this package's dependencies (LIB-004).
+ *
+ * The provider receives the resolved scope, so an app can key per identity.
+ * That is not a convenience: it is what makes destroying one identity's key a
+ * meaningful answer to a deletion request, rather than a gesture that leaves
+ * the data readable under a shared key (FR-104).
+ */
+
+/**
+ * A key with an explicit end of life.
+ *
+ * Handing the string around directly would leave copies wherever it was
+ * passed. A handle that can be released gives the connection one place to
+ * drop it, and gives `key-hygiene.test.ts` something to assert against.
+ */
+
+async function acquireKey(encryption, scope) {
+  let key;
+  (0, _faults.throwIfFaulted)('keyProvider');
+  try {
+    key = await encryption.keyProvider.getKey(scope);
+  } catch (error) {
+    // A locked device is an expected condition, not a bug (FR-102), which
+    // is why this code is retryable and distinct from an invalid key.
+    (0, _errors2.raise)(_errors.DiagnosticCodes.KEY_PROVIDER_FAILED, {
+      message: 'key provider failed',
+      cause: error
+    });
+  }
+  if (typeof key !== 'string' || key.length === 0) {
+    (0, _errors2.raise)(_errors.DiagnosticCodes.KEY_INVALID, {
+      message: 'key provider returned no usable key'
+    });
+  }
+  let released = false;
+  return {
+    value() {
+      if (released || key === null) {
+        (0, _errors2.raise)(_errors.DiagnosticCodes.KEY_INVALID, {
+          message: 'key material has already been released'
+        });
+      }
+      return key;
+    },
+    release() {
+      released = true;
+      key = null;
+    },
+    get released() {
+      return released;
+    }
+  };
+}
+//# sourceMappingURL=key-provider.js.map

package/lib/commonjs/crypto/key-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_errors","require","_errors2","_faults","acquireKey","encryption","scope","key","throwIfFaulted","keyProvider","getKey","error","raise","DiagnosticCodes","KEY_PROVIDER_FAILED","message","cause","length","KEY_INVALID","released","value","release"],"sourceRoot":"../../../src","sources":["crypto/key-provider.ts"],"mappings":";;;;;;AAgBA,IAAAA,OAAA,GAAAC,OAAA;AAEA,IAAAC,QAAA,GAAAD,OAAA;AACA,IAAAE,OAAA,GAAAF,OAAA;AAnBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAQA;AACA;AACA;AACA;AACA;AACA;AACA;;AAOO,eAAeG,UAAUA,CAC/BC,UAA4B,EAC5BC,KAAoB,EACC;EACrB,IAAIC,GAAkB;EAEtB,IAAAC,sBAAc,EAAC,aAAa,CAAC;EAE7B,IAAI;IACHD,GAAG,GAAG,MAAMF,UAAU,CAACI,WAAW,CAACC,MAAM,CAACJ,KAAK,CAAC;EACjD,CAAC,CAAC,OAAOK,KAAK,EAAE;IACf;IACA;IACA,IAAAC,cAAK,EAACC,uBAAe,CAACC,mBAAmB,EAAE;MAC1CC,OAAO,EAAE,qBAAqB;MAC9BC,KAAK,EAAEL;IACR,CAAC,CAAC;EACH;EAEA,IAAI,OAAOJ,GAAG,KAAK,QAAQ,IAAIA,GAAG,CAACU,MAAM,KAAK,CAAC,EAAE;IAChD,IAAAL,cAAK,EAACC,uBAAe,CAACK,WAAW,EAAE;MAClCH,OAAO,EAAE;IACV,CAAC,CAAC;EACH;EAEA,IAAII,QAAQ,GAAG,KAAK;EACpB,OAAO;IACNC,KAAKA,CAAA,EAAW;MACf,IAAID,QAAQ,IAAIZ,GAAG,KAAK,IAAI,EAAE;QAC7B,IAAAK,cAAK,EAACC,uBAAe,CAACK,WAAW,EAAE;UAClCH,OAAO,EAAE;QACV,CAAC,CAAC;MACH;MACA,OAAOR,GAAG;IACX,CAAC;IACDc,OAAOA,CAAA,EAAS;MACfF,QAAQ,GAAG,IAAI;MACfZ,GAAG,GAAG,IAAI;IACX,CAAC;IACD,IAAIY,QAAQA,CAAA,EAAY;MACvB,OAAOA,QAAQ;IAChB;EACD,CAAC;AACF","ignoreList":[]}

package/lib/commonjs/crypto/provider.js

@@ -0,0 +1,54 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.cipherModule = cipherModule;
+exports.isCipherAvailable = isCipherAvailable;
+exports.setCipherModule = setCipherModule;
+var _rnCore = require("@chipmobilesdk/rn-core");
+var _errors = require("../contract/errors.js");
+var _errors2 = require("../diagnostics/errors.js");
+/**
+ * The cipher peer, behind one lazy accessor.
+ *
+ * Marked optional in `peerDependenciesMeta`: an app that never enables
+ * encryption should not have to install a native crypto module. That makes
+ * "the peer is absent" a supported state rather than a broken install, so it
+ * reports `ENCRYPTION_UNAVAILABLE` — the same code as a missing SQLCipher
+ * build flag, because from the app's side it is the same problem: encryption
+ * was asked for and cannot be delivered (research.md R1a).
+ */
+
+/**
+ * The two things this package asks of a cipher: AES-256-GCM for artifacts, and
+ * HKDF to derive each artifact's subkey. Hashing is not among them — the scope
+ * digest is SHA-256 in plain TypeScript (`scope/hash.ts`), because it runs on
+ * every scope resolution including the ones that never open an encrypted
+ * database, where a native module may not be installed at all (WS4-08).
+ */
+
+/** Loaded on first use (rn-core's lazy peer); optional, so absence is a normal answer. */
+const cipher = (0, _rnCore.lazyPeer)('react-native-quick-crypto', () => {
+  // Inside `try`, so Metro bundles an app that leaves this optional peer out.
+  try {
+    return require('react-native-quick-crypto');
+  } catch (cause) {
+    throw cause;
+  }
+});
+
+/** Swap the module. Tests only; `null` goes back to the real one. */
+function setCipherModule(module) {
+  cipher.override(module ?? undefined);
+}
+function isCipherAvailable() {
+  return cipher.isAvailable();
+}
+function cipherModule() {
+  return cipher.require((_peer, cause) => new _errors2.StorageError(_errors.DiagnosticCodes.ENCRYPTION_UNAVAILABLE, {
+    message: 'cipher peer is not installed',
+    cause
+  }));
+}
+//# sourceMappingURL=provider.js.map

package/lib/commonjs/crypto/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_rnCore","require","_errors","_errors2","cipher","lazyPeer","cause","setCipherModule","module","override","undefined","isCipherAvailable","isAvailable","cipherModule","_peer","StorageError","DiagnosticCodes","ENCRYPTION_UNAVAILABLE","message"],"sourceRoot":"../../../src","sources":["crypto/provider.ts"],"mappings":";;;;;;;;AAWA,IAAAA,OAAA,GAAAC,OAAA;AAEA,IAAAC,OAAA,GAAAD,OAAA;AACA,IAAAE,QAAA,GAAAF,OAAA;AAdA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAOA;AACA;AACA;AACA;AACA;AACA;AACA;;AA6BA;AACA,MAAMG,MAAM,GAAG,IAAAC,gBAAQ,EAAC,2BAA2B,EAAE,MAAM;EAC1D;EACA,IAAI;IACH,OAAOJ,OAAO,CAAC,2BAA2B,CAAC;EAC5C,CAAC,CAAC,OAAOK,KAAK,EAAE;IACf,MAAMA,KAAK;EACZ;AACD,CAAC,CAAC;;AAEF;AACO,SAASC,eAAeA,CAACC,MAA2B,EAAQ;EAClEJ,MAAM,CAACK,QAAQ,CAACD,MAAM,IAAIE,SAAS,CAAC;AACrC;AAEO,SAASC,iBAAiBA,CAAA,EAAY;EAC5C,OAAOP,MAAM,CAACQ,WAAW,CAAC,CAAC;AAC5B;AAEO,SAASC,YAAYA,CAAA,EAAiB;EAC5C,OAAOT,MAAM,CAACH,OAAO,CACpB,CAACa,KAAK,EAAER,KAAK,KACZ,IAAIS,qBAAY,CAACC,uBAAe,CAACC,sBAAsB,EAAE;IACxDC,OAAO,EAAE,8BAA8B;IACvCZ;EACD,CAAC,CACH,CAAC;AACF","ignoreList":[]}