@dstorage-tech/dstorage-sdk 0.0.4

package/dist/chunk-QKA2DCR6.mjs

@@ -0,0 +1,118 @@
+import {
+  EncryptionErrorCode
+} from "./chunk-O37NHERH.mjs";
+import {
+  DStorageError,
+  mlkemGenerateKeypair,
+  mlkemUnwrapDek,
+  mlkemWrapDek
+} from "./chunk-BWLEAAFW.mjs";
+
+// ../encryption/dist/chunk-55C752ON.mjs
+var KeypairEncryptionAdapter = class _KeypairEncryptionAdapter {
+  constructor(pk, sk, context, variant) {
+    this.publicKey = pk;
+    this.secretKey = sk;
+    this.context = context;
+    this.variant = variant;
+    this.name = variant;
+  }
+  /**
+   * Upload-only adapter — holds only the Public Key.
+   * wrapDek() works normally; unwrapDek() throws (no SK available).
+   */
+  static fromPublicKey(pk, context, variant = "mlkem768") {
+    return new _KeypairEncryptionAdapter(pk, void 0, context, variant);
+  }
+  /**
+   * Full adapter — holds both Public Key and Secret Key.
+   * Both wrapDek() and unwrapDek() work.
+   */
+  static fromKeypair(pk, sk, context, variant = "mlkem768") {
+    return new _KeypairEncryptionAdapter(pk, sk, context, variant);
+  }
+  /**
+   * Generate a fresh random ML-KEM keypair.
+   *
+   * Returns the adapter (with both PK+SK) plus the raw keys so the caller
+   * can persist the secret key and share the public key separately.
+   *
+   * @param variant  Default: "mlkem768".
+   */
+  static generateKeypair(context, variant = "mlkem768") {
+    const { pk, sk } = mlkemGenerateKeypair(variant);
+    return {
+      adapter: new _KeypairEncryptionAdapter(pk, sk, context, variant),
+      publicKey: pk,
+      secretKey: sk
+    };
+  }
+  /**
+   * Deterministically derive a ML-KEM keypair from a BIP-39 mnemonic phrase or hex seed.
+   *
+   * Delegates to MnemonicEncryptionAdapter.intoKeypairEncryptionAdapter() so all
+   * mnemonic/seed handling lives in a single place.
+   *
+   * Same inputs + variant always produce the same keypair.
+   *
+   * Note: 32-byte seedHex (64 hex characters) is not supported — use a mnemonic
+   * or a 64-byte seedHex (128 hex characters) instead.
+   *
+   * @param input    { mnemonic } or { seedHex } (64-byte hex, 128 chars)
+   * @param variant  Default: "mlkem768"
+   */
+  static async fromMnemonic(input, context, variant = "mlkem768") {
+    const { MnemonicEncryptionAdapter } = await import("./MnemonicEncryptionAdapter-J6IE5OKA-SI6TBLTQ.mjs");
+    const ms = new MnemonicEncryptionAdapter(input);
+    return ms.intoKeypairEncryptionAdapter(context, variant);
+  }
+  /**
+   * Deterministically derive a ML-KEM keypair from a password and salt.
+   *
+   * Delegates to PasswordEncryptionAdapter.intoKeypairEncryptionAdapter() so all
+   * password handling (scrypt params, entropy validation, 64-byte seed derivation)
+   * lives in a single place.
+   *
+   * Same password + salt + variant always produces the same keypair.
+   *
+   * @param password  User password (validated for entropy)
+   * @param salt      Domain salt — must not be empty
+   * @param variant   Default: "mlkem768"
+   * @param params    Optional custom scrypt params
+   */
+  static async fromPassword(password, salt, context, variant = "mlkem768", params) {
+    const { PasswordEncryptionAdapter } = await import("./PasswordEncryptionAdapter-CWOXUGR4-ZYUBUYUI.mjs");
+    const ps = new PasswordEncryptionAdapter({
+      password,
+      salt,
+      ...params ? { params } : {}
+    });
+    return ps.intoKeypairEncryptionAdapter(context, variant);
+  }
+  /**
+   * Zero the Secret Key bytes and mark this adapter as read-only.
+   * Call when the adapter is no longer needed to minimise the window
+   * during which raw ML-KEM key material sits in GC-reachable memory.
+   * After destroy(), unwrapDek() will throw.
+   */
+  destroy() {
+    this.secretKey?.fill(0);
+    this.secretKey = void 0;
+  }
+  async wrapDek(dek) {
+    return mlkemWrapDek(dek, this.publicKey, this.context, this.variant);
+  }
+  async unwrapDek(data) {
+    if (!this.secretKey) {
+      throw new DStorageError(
+        EncryptionErrorCode.KEYPAIR_MISSING_SECRET_KEY,
+        `[dStorage] KeypairEncryptionAdapter(${this.variant}): cannot unwrapDek \u2014 no Secret Key is available. Use fromKeypair() or fromPassword() to create an adapter with a SK.`
+      );
+    }
+    return mlkemUnwrapDek(data, this.secretKey, this.context);
+  }
+};
+
+export {
+  KeypairEncryptionAdapter
+};

package/dist/chunk-RPSRFFXN.mjs

@@ -0,0 +1,275 @@
+import {
+  EncryptionErrorCode
+} from "./chunk-O37NHERH.mjs";
+import {
+  DStorageError,
+  deriveKek,
+  unwrapKey,
+  wrapKey
+} from "./chunk-TSZ37JDY.mjs";
+
+// ../encryption/dist/chunk-PDWRI7YP.mjs
+import { scrypt } from "@noble/hashes/scrypt.js";
+var KDF_PRESETS = {
+  v1: { N: 131072, r: 8, p: 1 },
+  "v1-lite": { N: 65536, r: 8, p: 1 }
+};
+var PasswordEncryptionAdapter = class _PasswordEncryptionAdapter {
+  constructor(config) {
+    this.name = "password";
+    validatePassword(
+      config.password,
+      config.minPasswordLength ?? 12,
+      config.minEntropyBits ?? 60,
+      config.additionalValidators
+    );
+    this.salt = resolveSalt(config.salt);
+    const resolved = resolveParams(config.preset, config.params);
+    this.N = resolved.N;
+    this.r = resolved.r;
+    this.p = resolved.p;
+    const passwordBytes = new TextEncoder().encode(config.password);
+    const seed = scrypt(passwordBytes, this.salt, {
+      N: this.N,
+      r: this.r,
+      p: this.p,
+      dkLen: 64
+    });
+    this.kekMaterialPromise = globalThis.crypto.subtle.importKey("raw", seed, "HKDF", false, ["deriveBits"]).then(
+      (key) => {
+        seed.fill(0);
+        return key;
+      },
+      (err) => {
+        seed.fill(0);
+        throw err;
+      }
+    );
+  }
+  /**
+   * Reconstruct an adapter from parameters previously stored via `getKdfParams()`.
+   * Use this when loading existing encrypted data — ensures the exact same N/r/p
+   * are used regardless of what the current SDK defaults are.
+   *
+   * @example
+   * const adapter = PasswordEncryptionAdapter.fromKdfParams({
+   *   password,
+   *   salt: meta.salt,
+   *   kdf: meta.kdf,
+   *   N: meta.N,
+   *   r: meta.r,
+   *   p: meta.p,
+   * });
+   */
+  static fromKdfParams(config) {
+    if (config.kdf !== "scrypt") {
+      throw new DStorageError(
+        EncryptionErrorCode.PASSWORD_UNSUPPORTED_KDF,
+        `[dStorage] PasswordEncryptionAdapter.fromKdfParams: unsupported kdf "${config.kdf}". Only "scrypt" is supported.`
+      );
+    }
+    return new _PasswordEncryptionAdapter({
+      password: config.password,
+      salt: config.salt,
+      params: { N: config.N, r: config.r, p: config.p },
+      ...config.minPasswordLength !== void 0 && {
+        minPasswordLength: config.minPasswordLength
+      },
+      ...config.minEntropyBits !== void 0 && {
+        minEntropyBits: config.minEntropyBits
+      },
+      ...config.additionalValidators !== void 0 && {
+        additionalValidators: config.additionalValidators
+      }
+    });
+  }
+  /**
+   * Returns the resolved KDF parameters to store alongside encrypted data.
+   *
+   * These values are language- and SDK-agnostic: any scrypt implementation
+   * can re-derive the key from `{ kdf, N, r, p }` + the original salt and
+   * password, without any knowledge of this SDK's preset names.
+   *
+   * @example
+   * const meta = {
+   *   ...adapter.getKdfParams(),  // { kdf: "scrypt", N: 131072, r: 8, p: 1 }
+   *   salt: "myapp:alice@example.com",
+   * };
+   * await db.save({ encryptedData, meta });
+   */
+  getKdfParams() {
+    return { kdf: "scrypt", N: this.N, r: this.r, p: this.p };
+  }
+  async wrapDek(dek) {
+    const kekMaterial = await this.kekMaterialPromise;
+    const kek = await deriveKek(kekMaterial);
+    try {
+      return {
+        algorithm: "xchacha20poly1305-v1",
+        kekDerivation: "hkdf-sha256-v1",
+        wrappedDek: await wrapKey(dek, kek)
+      };
+    } finally {
+      kek.fill(0);
+    }
+  }
+  async unwrapDek({ wrappedDek }) {
+    const kekMaterial = await this.kekMaterialPromise;
+    const kek = await deriveKek(kekMaterial);
+    try {
+      return unwrapKey(wrappedDek, kek);
+    } finally {
+      kek.fill(0);
+    }
+  }
+  /**
+   * Deterministically derive a ML-KEM keypair from this adapter's key material.
+   *
+   * Uses Web Crypto HKDF to derive a 64-byte ML-KEM seed from the stored
+   * CryptoKey, domain-separated from the symmetric KEK derivation path with
+   * info="dstorage:mlkem-seed:v1". This is equivalent to noble's
+   * hkdf(sha256, scryptOutput, undefined, info, 64) but avoids materialising
+   * the raw scrypt output in a JS-accessible variable.
+   *
+   * Same password + salt + variant always produces the same keypair.
+   *
+   * @param variant  ML-KEM variant. Default: "mlkem768".
+   */
+  async intoKeypairEncryptionAdapter(context, variant) {
+    const { KeypairEncryptionAdapter } = await import("./KeypairEncryptionAdapter-AE75YC4W-AOWNSH2M.mjs");
+    const { mlkemGenerateKeypairFromSeed } = await import("./dist-UD4WRMYJ.mjs");
+    const kekMaterial = await this.kekMaterialPromise;
+    const mlkemBits = await globalThis.crypto.subtle.deriveBits(
+      {
+        name: "HKDF",
+        hash: "SHA-256",
+        salt: new Uint8Array(32),
+        info: new TextEncoder().encode("dstorage:mlkem-seed:v1")
+      },
+      kekMaterial,
+      512
+      // 64 bytes
+    );
+    const mlkemSeed = new Uint8Array(mlkemBits);
+    try {
+      const { pk, sk } = mlkemGenerateKeypairFromSeed(mlkemSeed, variant);
+      return KeypairEncryptionAdapter.fromKeypair(pk, sk, context, variant);
+    } finally {
+      mlkemSeed.fill(0);
+    }
+  }
+};
+function resolveSalt(salt) {
+  const bytes = typeof salt === "string" ? new TextEncoder().encode(salt) : salt;
+  if (bytes.length === 0) {
+    throw new DStorageError(
+      EncryptionErrorCode.PASSWORD_EMPTY_SALT,
+      '[dStorage] PasswordEncryptionAdapter: salt must not be empty. Provide an app-specific domain label, e.g. "myapp:v1:alice@example.com".'
+    );
+  }
+  return bytes;
+}
+function resolveParams(preset, params) {
+  if (preset !== void 0) {
+    if (!(preset in KDF_PRESETS)) {
+      throw new DStorageError(
+        EncryptionErrorCode.PASSWORD_UNKNOWN_PRESET,
+        `[dStorage] PasswordEncryptionAdapter: unknown preset "${preset}". Valid presets: ${Object.keys(KDF_PRESETS).join(", ")}.`
+      );
+    }
+    return KDF_PRESETS[preset];
+  }
+  return {
+    N: params?.N ?? KDF_PRESETS["v1"].N,
+    r: params?.r ?? KDF_PRESETS["v1"].r,
+    p: params?.p ?? KDF_PRESETS["v1"].p
+  };
+}
+function estimateEntropyBits(password) {
+  let pool = 0;
+  if (/[a-z]/.test(password)) pool += 26;
+  if (/[A-Z]/.test(password)) pool += 26;
+  if (/[0-9]/.test(password)) pool += 10;
+  if (/[^a-zA-Z0-9]/.test(password)) pool += 32;
+  return pool === 0 ? 0 : Math.log2(pool) * password.length;
+}
+function hasSequentialRun(pw, runLength = 5) {
+  for (let i = 0; i <= pw.length - runLength; i++) {
+    let ascending = true;
+    let descending = true;
+    for (let j = 1; j < runLength; j++) {
+      const diff = pw.charCodeAt(i + j) - pw.charCodeAt(i + j - 1);
+      if (diff !== 1) ascending = false;
+      if (diff !== -1) descending = false;
+      if (!ascending && !descending) break;
+    }
+    if (ascending || descending) return true;
+  }
+  return false;
+}
+var KEYBOARD_ROWS = ["qwertyuiop", "asdfghjkl", "zxcvbnm", "1234567890"];
+function hasKeyboardWalk(pw, minLen = 5) {
+  const lower = pw.toLowerCase();
+  for (const row of KEYBOARD_ROWS) {
+    for (let i = 0; i <= row.length - minLen; i++) {
+      const fwd = row.slice(i, i + minLen);
+      const rev = fwd.split("").reverse().join("");
+      if (lower.includes(fwd) || lower.includes(rev)) return true;
+    }
+  }
+  return false;
+}
+function generatePqsPassword() {
+  while (true) {
+    const bytes = globalThis.crypto.getRandomValues(new Uint8Array(32));
+    const b64 = btoa(Array.from(bytes, (b) => String.fromCharCode(b)).join(""));
+    const password = b64.replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
+    if (new Set(password).size >= 3 && !hasSequentialRun(password) && !hasKeyboardWalk(password)) {
+      return password;
+    }
+  }
+}
+function validatePassword(password, minLength, minEntropyBits, additionalValidators) {
+  if (password.length < minLength) {
+    throw new DStorageError(
+      EncryptionErrorCode.PASSWORD_TOO_SHORT,
+      `[dStorage] Password too short: ${password.length} character(s) (minimum ${minLength}). Use a longer passphrase.`
+    );
+  }
+  if (new Set(password).size < 3) {
+    throw new DStorageError(
+      EncryptionErrorCode.PASSWORD_TOO_FEW_DISTINCT,
+      "[dStorage] Password is too weak: too few distinct characters."
+    );
+  }
+  if (hasSequentialRun(password)) {
+    throw new DStorageError(
+      EncryptionErrorCode.PASSWORD_SEQUENTIAL_RUN,
+      "[dStorage] Password is too weak: contains a sequential character run (e.g. abcde, 12345)."
+    );
+  }
+  if (hasKeyboardWalk(password)) {
+    throw new DStorageError(
+      EncryptionErrorCode.PASSWORD_KEYBOARD_WALK,
+      "[dStorage] Password is too weak: contains a keyboard-row pattern (e.g. qwerty, asdfg)."
+    );
+  }
+  const entropy = estimateEntropyBits(password);
+  if (entropy < minEntropyBits) {
+    throw new DStorageError(
+      EncryptionErrorCode.PASSWORD_ENTROPY_TOO_LOW,
+      `[dStorage] Password entropy too low: ~${Math.round(entropy)} bits (minimum ${minEntropyBits} bits). Use a longer password with a mix of uppercase, lowercase, digits, and symbols.`
+    );
+  }
+  if (additionalValidators) {
+    for (const validate of additionalValidators) {
+      validate(password);
+    }
+  }
+}
+
+export {
+  KDF_PRESETS,
+  PasswordEncryptionAdapter,
+  generatePqsPassword
+};

package/dist/chunk-TESUOXRJ.mjs

@@ -0,0 +1 @@
+import{a as m}from"./chunk-PKHRAYFD.mjs";import{A as c,B as p,a as o,y as s}from"./chunk-EYF3263P.mjs";var h=class n{constructor(e,t,r,i){this.publicKey=e,this.secretKey=t,this.context=r,this.variant=i,this.name=i}static fromPublicKey(e,t,r="mlkem768"){return new n(e,void 0,t,r)}static fromKeypair(e,t,r,i="mlkem768"){return new n(e,t,r,i)}static generateKeypair(e,t="mlkem768"){let{pk:r,sk:i}=s(t);return{adapter:new n(r,i,e,t),publicKey:r,secretKey:i}}static async fromMnemonic(e,t,r="mlkem768"){let{MnemonicEncryptionAdapter:i}=await import("./MnemonicEncryptionAdapter-RCHUETBP-ELAMJMMO.mjs");return new i(e).intoKeypairEncryptionAdapter(t,r)}static async fromPassword(e,t,r,i="mlkem768",a){let{PasswordEncryptionAdapter:y}=await import("./PasswordEncryptionAdapter-ECHND672-XVBPHPPT.mjs");return new y({password:e,salt:t,...a?{params:a}:{}}).intoKeypairEncryptionAdapter(r,i)}destroy(){this.secretKey?.fill(0),this.secretKey=void 0}async wrapDek(e){return c(e,this.publicKey,this.context,this.variant)}async unwrapDek(e){if(!this.secretKey)throw new o(m.KEYPAIR_MISSING_SECRET_KEY,`[dStorage] KeypairEncryptionAdapter(${this.variant}): cannot unwrapDek \u2014 no Secret Key is available. Use fromKeypair() or fromPassword() to create an adapter with a SK.`);return p(e,this.secretKey,this.context)}};export{h as a};

package/dist/chunk-TMLXCRJU.mjs

@@ -0,0 +1 @@
+import{a as n}from"./chunk-PKHRAYFD.mjs";import{a as i,q as p,r as w,s as h}from"./chunk-EYF3263P.mjs";import{scrypt as S}from"@noble/hashes/scrypt.js";var d={v1:{N:131072,r:8,p:1},"v1-lite":{N:65536,r:8,p:1}},N=class m{constructor(t){this.name="password",O(t.password,t.minPasswordLength??12,t.minEntropyBits??60,t.additionalValidators),this.salt=P(t.salt);let r=A(t.preset,t.params);this.N=r.N,this.r=r.r,this.p=r.p;let a=new TextEncoder().encode(t.password),s=S(a,this.salt,{N:this.N,r:this.r,p:this.p,dkLen:64});this.kekMaterialPromise=globalThis.crypto.subtle.importKey("raw",s,"HKDF",!1,["deriveBits"]).then(o=>(s.fill(0),o),o=>{throw s.fill(0),o})}static fromKdfParams(t){if(t.kdf!=="scrypt")throw new i(n.PASSWORD_UNSUPPORTED_KDF,`[dStorage] PasswordEncryptionAdapter.fromKdfParams: unsupported kdf "${t.kdf}". Only "scrypt" is supported.`);return new m({password:t.password,salt:t.salt,params:{N:t.N,r:t.r,p:t.p},...t.minPasswordLength!==void 0&&{minPasswordLength:t.minPasswordLength},...t.minEntropyBits!==void 0&&{minEntropyBits:t.minEntropyBits},...t.additionalValidators!==void 0&&{additionalValidators:t.additionalValidators}})}getKdfParams(){return{kdf:"scrypt",N:this.N,r:this.r,p:this.p}}async wrapDek(t){let r=await this.kekMaterialPromise,a=await p(r);try{return{algorithm:"xchacha20poly1305-v1",kekDerivation:"hkdf-sha256-v1",wrappedDek:await w(t,a)}}finally{a.fill(0)}}async unwrapDek({wrappedDek:t}){let r=await this.kekMaterialPromise,a=await p(r);try{return h(t,a)}finally{a.fill(0)}}async intoKeypairEncryptionAdapter(t,r){let{KeypairEncryptionAdapter:a}=await import("./KeypairEncryptionAdapter-AE75YC4W-BEYO4RUO.mjs"),{mlkemGenerateKeypairFromSeed:s}=await import("./dist-MEZZWKP4.mjs"),o=await this.kekMaterialPromise,l=await globalThis.crypto.subtle.deriveBits({name:"HKDF",hash:"SHA-256",salt:new Uint8Array(32),info:new TextEncoder().encode("dstorage:mlkem-seed:v1")},o,512),c=new Uint8Array(l);try{let{pk:u,sk:k}=s(c,r);return a.fromKeypair(u,k,t,r)}finally{c.fill(0)}}};function P(e){let t=typeof e=="string"?new TextEncoder().encode(e):e;if(t.length===0)throw new i(n.PASSWORD_EMPTY_SALT,'[dStorage] PasswordEncryptionAdapter: salt must not be empty. Provide an app-specific domain label, e.g. "myapp:v1:alice@example.com".');return t}function A(e,t){if(e!==void 0){if(!(e in d))throw new i(n.PASSWORD_UNKNOWN_PRESET,`[dStorage] PasswordEncryptionAdapter: unknown preset "${e}". Valid presets: ${Object.keys(d).join(", ")}.`);return d[e]}return{N:t?.N??d.v1.N,r:t?.r??d.v1.r,p:t?.p??d.v1.p}}function E(e){let t=0;return/[a-z]/.test(e)&&(t+=26),/[A-Z]/.test(e)&&(t+=26),/[0-9]/.test(e)&&(t+=10),/[^a-zA-Z0-9]/.test(e)&&(t+=32),t===0?0:Math.log2(t)*e.length}function y(e,t=5){for(let r=0;r<=e.length-t;r++){let a=!0,s=!0;for(let o=1;o<t;o++){let l=e.charCodeAt(r+o)-e.charCodeAt(r+o-1);if(l!==1&&(a=!1),l!==-1&&(s=!1),!a&&!s)break}if(a||s)return!0}return!1}var v=["qwertyuiop","asdfghjkl","zxcvbnm","1234567890"];function f(e,t=5){let r=e.toLowerCase();for(let a of v)for(let s=0;s<=a.length-t;s++){let o=a.slice(s,s+t),l=o.split("").reverse().join("");if(r.includes(o)||r.includes(l))return!0}return!1}function _(){for(;;){let e=globalThis.crypto.getRandomValues(new Uint8Array(32)),r=btoa(Array.from(e,a=>String.fromCharCode(a)).join("")).replace(/\+/g,"-").replace(/\//g,"_").replace(/=/g,"");if(new Set(r).size>=3&&!y(r)&&!f(r))return r}}function O(e,t,r,a){if(e.length<t)throw new i(n.PASSWORD_TOO_SHORT,`[dStorage] Password too short: ${e.length} character(s) (minimum ${t}). Use a longer passphrase.`);if(new Set(e).size<3)throw new i(n.PASSWORD_TOO_FEW_DISTINCT,"[dStorage] Password is too weak: too few distinct characters.");if(y(e))throw new i(n.PASSWORD_SEQUENTIAL_RUN,"[dStorage] Password is too weak: contains a sequential character run (e.g. abcde, 12345).");if(f(e))throw new i(n.PASSWORD_KEYBOARD_WALK,"[dStorage] Password is too weak: contains a keyboard-row pattern (e.g. qwerty, asdfg).");let s=E(e);if(s<r)throw new i(n.PASSWORD_ENTROPY_TOO_LOW,`[dStorage] Password entropy too low: ~${Math.round(s)} bits (minimum ${r} bits). Use a longer password with a mix of uppercase, lowercase, digits, and symbols.`);if(a)for(let o of a)o(e)}export{d as a,N as b,_ as c};

package/dist/chunk-TNRKN4LB.mjs

@@ -0,0 +1 @@
+import{a as C}from"./chunk-ZGUY5EIR.mjs";import*as e from"@midnight-ntwrk/compact-runtime";import{CompiledContract as E}from"@midnight-ntwrk/compact-js";e.checkRuntimeVersion("0.16.0");var o=new e.CompactTypeBytes(32),m=e.CompactTypeOpaqueString,g=new e.CompactTypeUnsignedInteger(18446744073709551615n,8),b=class{alignment(){return m.alignment().concat(m.alignment().concat(m.alignment().concat(m.alignment().concat(g.alignment().concat(m.alignment().concat(o.alignment().concat(o.alignment())))))))}fromValue(t){return{storageId:m.fromValue(t),encryptionScheme:m.fromValue(t),storageProvider:m.fromValue(t),metadata:m.fromValue(t),writtenAt:g.fromValue(t),keyEnvelope:m.fromValue(t),ownerCommitment:o.fromValue(t),contentHash:o.fromValue(t)}}toValue(t){return m.toValue(t.storageId).concat(m.toValue(t.encryptionScheme).concat(m.toValue(t.storageProvider).concat(m.toValue(t.metadata).concat(g.toValue(t.writtenAt).concat(m.toValue(t.keyEnvelope).concat(o.toValue(t.ownerCommitment).concat(o.toValue(t.contentHash))))))))}},y=new b,w=e.CompactTypeBoolean,q=class{alignment(){return o.alignment()}fromValue(t){return{bytes:o.fromValue(t)}}toValue(t){return o.toValue(t.bytes)}},V=new q,h=new e.CompactTypeUnsignedInteger(65535n,2),P=new e.CompactTypeVector(4,o),L=new e.CompactTypeVector(3,o),B=class{alignment(){return w.alignment().concat(o.alignment().concat(o.alignment()))}fromValue(t){return{is_left:w.fromValue(t),left:o.fromValue(t),right:o.fromValue(t)}}toValue(t){return w.toValue(t.is_left).concat(o.toValue(t.left).concat(o.toValue(t.right)))}},M=new B,N=new e.CompactTypeUnsignedInteger(340282366920938463463374607431768211455n,16),u=new e.CompactTypeUnsignedInteger(255n,1),T=class{constructor(...t){if(C(this,"witnesses"),t.length!==1)throw new e.CompactError(`Contract constructor: expected 1 argument, received ${t.length}`);let n=t[0];if(typeof n!="object")throw new e.CompactError("first (witnesses) argument to Contract constructor is not an object");if(typeof n.ownerSecret!="function")throw new e.CompactError("first (witnesses) argument to Contract constructor does not contain a function-valued field named ownerSecret");if(typeof n.newOwnerSecret!="function")throw new e.CompactError("first (witnesses) argument to Contract constructor does not contain a function-valued field named newOwnerSecret");this.witnesses=n,this.circuits={deriveRefId(a,...r){return{result:k.deriveRefId(...r),context:a}},storeReference:(...a)=>{if(a.length!==8)throw new e.CompactError(`storeReference: expected 8 arguments (as invoked from Typescript), received ${a.length}`);let r=a[0],c=a[1],i=a[2],l=a[3],p=a[4],_=a[5],s=a[6],f=a[7];typeof r=="object"&&r.currentQueryContext!=null||e.typeError("storeReference","argument 1 (as invoked from Typescript)","DataRegistry.compact line 184 char 1","CircuitContext",r),typeof _=="bigint"&&_>=0n&&_<=18446744073709551615n||e.typeError("storeReference","argument 5 (argument 6 as invoked from Typescript)","DataRegistry.compact line 184 char 1","Uint<0..18446744073709551616>",_),f.buffer instanceof ArrayBuffer&&f.BYTES_PER_ELEMENT===1&&f.length===32||e.typeError("storeReference","argument 7 (argument 8 as invoked from Typescript)","DataRegistry.compact line 184 char 1","Bytes<32>",f);let d={...r,gasCost:e.emptyRunningCost()},v={input:{value:m.toValue(c).concat(m.toValue(i).concat(m.toValue(l).concat(m.toValue(p).concat(g.toValue(_).concat(m.toValue(s).concat(o.toValue(f))))))),alignment:m.alignment().concat(m.alignment().concat(m.alignment().concat(m.alignment().concat(g.alignment().concat(m.alignment().concat(o.alignment()))))))},output:void 0,publicTranscript:[],privateTranscriptOutputs:[]},R=this._storeReference_0(d,v,c,i,l,p,_,s,f);return v.output={value:o.toValue(R),alignment:o.alignment()},{result:R,context:d,proofData:v,gasCost:d.gasCost}},removeReference:(...a)=>{if(a.length!==2)throw new e.CompactError(`removeReference: expected 2 arguments (as invoked from Typescript), received ${a.length}`);let r=a[0],c=a[1];typeof r=="object"&&r.currentQueryContext!=null||e.typeError("removeReference","argument 1 (as invoked from Typescript)","DataRegistry.compact line 224 char 1","CircuitContext",r),c.buffer instanceof ArrayBuffer&&c.BYTES_PER_ELEMENT===1&&c.length===32||e.typeError("removeReference","argument 1 (argument 2 as invoked from Typescript)","DataRegistry.compact line 224 char 1","Bytes<32>",c);let i={...r,gasCost:e.emptyRunningCost()},l={input:{value:o.toValue(c),alignment:o.alignment()},output:void 0,publicTranscript:[],privateTranscriptOutputs:[]},p=this._removeReference_0(i,l,c);return l.output={value:[],alignment:[]},{result:p,context:i,proofData:l,gasCost:i.gasCost}},updateReference:(...a)=>{if(a.length!==9)throw new e.CompactError(`updateReference: expected 9 arguments (as invoked from Typescript), received ${a.length}`);let r=a[0],c=a[1],i=a[2],l=a[3],p=a[4],_=a[5],s=a[6],f=a[7],d=a[8];typeof r=="object"&&r.currentQueryContext!=null||e.typeError("updateReference","argument 1 (as invoked from Typescript)","DataRegistry.compact line 251 char 1","CircuitContext",r),c.buffer instanceof ArrayBuffer&&c.BYTES_PER_ELEMENT===1&&c.length===32||e.typeError("updateReference","argument 1 (argument 2 as invoked from Typescript)","DataRegistry.compact line 251 char 1","Bytes<32>",c),typeof s=="bigint"&&s>=0n&&s<=18446744073709551615n||e.typeError("updateReference","argument 6 (argument 7 as invoked from Typescript)","DataRegistry.compact line 251 char 1","Uint<0..18446744073709551616>",s),d.buffer instanceof ArrayBuffer&&d.BYTES_PER_ELEMENT===1&&d.length===32||e.typeError("updateReference","argument 8 (argument 9 as invoked from Typescript)","DataRegistry.compact line 251 char 1","Bytes<32>",d);let v={...r,gasCost:e.emptyRunningCost()},R={input:{value:o.toValue(c).concat(m.toValue(i).concat(m.toValue(l).concat(m.toValue(p).concat(m.toValue(_).concat(g.toValue(s).concat(m.toValue(f).concat(o.toValue(d)))))))),alignment:o.alignment().concat(m.alignment().concat(m.alignment().concat(m.alignment().concat(m.alignment().concat(g.alignment().concat(m.alignment().concat(o.alignment())))))))},output:void 0,publicTranscript:[],privateTranscriptOutputs:[]},x=this._updateReference_0(v,R,c,i,l,p,_,s,f,d);return R.output={value:[],alignment:[]},{result:x,context:v,proofData:R,gasCost:v.gasCost}}},this.impureCircuits={storeReference:this.circuits.storeReference,removeReference:this.circuits.removeReference,updateReference:this.circuits.updateReference},this.provableCircuits={storeReference:this.circuits.storeReference,removeReference:this.circuits.removeReference,updateReference:this.circuits.updateReference}}initialState(...t){if(t.length!==1)throw new e.CompactError(`Contract state constructor: expected 1 argument (as invoked from Typescript), received ${t.length}`);let n=t[0];if(typeof n!="object")throw new e.CompactError("Contract state constructor: expected 'constructorContext' in argument 1 (as invoked from Typescript) to be an object");if(!("initialPrivateState"in n))throw new e.CompactError("Contract state constructor: expected 'initialPrivateState' in argument 1 (as invoked from Typescript)");if(!("initialZswapLocalState"in n))throw new e.CompactError("Contract state constructor: expected 'initialZswapLocalState' in argument 1 (as invoked from Typescript)");if(typeof n.initialZswapLocalState!="object")throw new e.CompactError("Contract state constructor: expected 'initialZswapLocalState' in argument 1 (as invoked from Typescript) to be an object");let a=new e.ContractState,r=e.StateValue.newArray();r=r.arrayPush(e.StateValue.newNull()),r=r.arrayPush(e.StateValue.newNull()),r=r.arrayPush(e.StateValue.newNull()),a.data=new e.ChargedState(r),a.setOperation("storeReference",new e.ContractOperation),a.setOperation("removeReference",new e.ContractOperation),a.setOperation("updateReference",new e.ContractOperation);let c=e.createCircuitContext(e.dummyContractAddress(),n.initialZswapLocalState.coinPublicKey,a.data,n.initialPrivateState),i={input:{value:[],alignment:[]},output:void 0,publicTranscript:[],privateTranscriptOutputs:[]};return e.queryLedgerState(c,i,[{push:{storage:!1,value:e.StateValue.newCell({value:u.toValue(0n),alignment:u.alignment()}).encode()}},{push:{storage:!0,value:e.StateValue.newMap(new e.StateMap).encode()}},{ins:{cached:!1,n:1}}]),e.queryLedgerState(c,i,[{push:{storage:!1,value:e.StateValue.newCell({value:u.toValue(1n),alignment:u.alignment()}).encode()}},{push:{storage:!0,value:e.StateValue.newCell({value:g.toValue(0n),alignment:g.alignment()}).encode()}},{ins:{cached:!1,n:1}}]),e.queryLedgerState(c,i,[{push:{storage:!1,value:e.StateValue.newCell({value:u.toValue(2n),alignment:u.alignment()}).encode()}},{push:{storage:!0,value:e.StateValue.newCell({value:h.toValue(0n),alignment:h.alignment()}).encode()}},{ins:{cached:!1,n:1}}]),e.queryLedgerState(c,i,[{idx:{cached:!1,pushPath:!0,path:[{tag:"value",value:{value:u.toValue(1n),alignment:u.alignment()}}]}},{addi:{immediate:parseInt(e.valueToBigInt({value:h.toValue(1n),alignment:h.alignment()}.value))}},{ins:{cached:!0,n:1}}]),e.queryLedgerState(c,i,[{push:{storage:!1,value:e.StateValue.newCell({value:u.toValue(2n),alignment:u.alignment()}).encode()}},{push:{storage:!0,value:e.StateValue.newCell({value:h.toValue(0n),alignment:h.alignment()}).encode()}},{ins:{cached:!1,n:1}}]),a.data=new e.ChargedState(c.currentQueryContext.state.state),{currentContractState:a,currentPrivateState:c.currentPrivateState,currentZswapLocalState:c.currentZswapLocalState}}_persistentHash_0(t){return e.persistentHash(L,t)}_persistentHash_1(t){return e.persistentHash(P,t)}_ownerSecret_0(t,n){let a=e.createWitnessContext(S(t.currentQueryContext.state),t.currentPrivateState,t.currentQueryContext.address),[r,c]=this.witnesses.ownerSecret(a);return t.currentPrivateState=r,c.buffer instanceof ArrayBuffer&&c.BYTES_PER_ELEMENT===1&&c.length===32||e.typeError("ownerSecret","return value","DataRegistry.compact line 26 char 1","Bytes<32>",c),n.privateTranscriptOutputs.push({value:o.toValue(c),alignment:o.alignment()}),c}_newOwnerSecret_0(t,n){let a=e.createWitnessContext(S(t.currentQueryContext.state),t.currentPrivateState,t.currentQueryContext.address),[r,c]=this.witnesses.newOwnerSecret(a);return t.currentPrivateState=r,c.buffer instanceof ArrayBuffer&&c.BYTES_PER_ELEMENT===1&&c.length===32||e.typeError("newOwnerSecret","return value","DataRegistry.compact line 28 char 1","Bytes<32>",c),n.privateTranscriptOutputs.push({value:o.toValue(c),alignment:o.alignment()}),c}_computeOwnerCommitment_0(t,n,a){return this._persistentHash_1([new Uint8Array([100,115,116,111,114,97,103,101,58,111,119,110,101,114,58,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]),t,n,a])}_deriveRefId_0(t,n){return this._persistentHash_0([new Uint8Array([100,115,116,111,114,97,103,101,58,114,101,102,58,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]),t,n])}_validatedOwnerCommitment_0(t,n,a){let r=this._ownerSecret_0(t,n);return e.assert(!this._equal_0(r,new Uint8Array([0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0])),"ownerSecret must not be zero"),this._computeOwnerCommitment_0(r,a,V.fromValue(e.queryLedgerState(t,n,[{dup:{n:2}},{idx:{cached:!0,pushPath:!1,path:[{tag:"value",value:{value:u.toValue(0n),alignment:u.alignment()}}]}},{popeq:{cached:!0,result:void 0}}]).value).bytes)}_validatedNewOwnerCommitment_0(t,n,a){let r=this._newOwnerSecret_0(t,n);return e.assert(!this._equal_1(r,new Uint8Array([0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0])),"newOwnerSecret must not be zero"),this._computeOwnerCommitment_0(r,a,V.fromValue(e.queryLedgerState(t,n,[{dup:{n:2}},{idx:{cached:!0,pushPath:!1,path:[{tag:"value",value:{value:u.toValue(0n),alignment:u.alignment()}}]}},{popeq:{cached:!0,result:void 0}}]).value).bytes)}_storeReference_0(t,n,a,r,c,i,l,p,_){let s=this._deriveRefId_0(e.convertFieldToBytes(32,g.fromValue(e.queryLedgerState(t,n,[{dup:{n:0}},{idx:{cached:!1,pushPath:!1,path:[{tag:"value",value:{value:u.toValue(1n),alignment:u.alignment()}}]}},{popeq:{cached:!0,result:void 0}}]).value),"DataRegistry.compact line 193 char 29"),V.fromValue(e.queryLedgerState(t,n,[{dup:{n:2}},{idx:{cached:!0,pushPath:!1,path:[{tag:"value",value:{value:u.toValue(0n),alignment:u.alignment()}}]}},{popeq:{cached:!0,result:void 0}}]).value).bytes);e.assert(!w.fromValue(e.queryLedgerState(t,n,[{dup:{n:0}},{idx:{cached:!1,pushPath:!1,path:[{tag:"value",value:{value:u.toValue(0n),alignment:u.alignment()}}]}},{push:{storage:!1,value:e.StateValue.newCell({value:o.toValue(s),alignment:o.alignment()}).encode()}},"member",{popeq:{cached:!0,result:void 0}}]).value),"Reference already stored");let f=this._validatedOwnerCommitment_0(t,n,s),d={storageId:a,encryptionScheme:r,storageProvider:c,metadata:i,writtenAt:l,keyEnvelope:p,ownerCommitment:f,contentHash:_};return e.queryLedgerState(t,n,[{idx:{cached:!1,pushPath:!0,path:[{tag:"value",value:{value:u.toValue(0n),alignment:u.alignment()}}]}},{push:{storage:!1,value:e.StateValue.newCell({value:o.toValue(s),alignment:o.alignment()}).encode()}},{push:{storage:!0,value:e.StateValue.newCell({value:y.toValue(d),alignment:y.alignment()}).encode()}},{ins:{cached:!1,n:1}},{ins:{cached:!0,n:1}}]),e.queryLedgerState(t,n,[{idx:{cached:!1,pushPath:!0,path:[{tag:"value",value:{value:u.toValue(1n),alignment:u.alignment()}}]}},{addi:{immediate:parseInt(e.valueToBigInt({value:h.toValue(1n),alignment:h.alignment()}.value))}},{ins:{cached:!0,n:1}}]),s}_removeReference_0(t,n,a){e.assert(w.fromValue(e.queryLedgerState(t,n,[{dup:{n:0}},{idx:{cached:!1,pushPath:!1,path:[{tag:"value",value:{value:u.toValue(0n),alignment:u.alignment()}}]}},{push:{storage:!1,value:e.StateValue.newCell({value:o.toValue(a),alignment:o.alignment()}).encode()}},"member",{popeq:{cached:!0,result:void 0}}]).value),"Reference not found");let r=y.fromValue(e.queryLedgerState(t,n,[{dup:{n:0}},{idx:{cached:!1,pushPath:!1,path:[{tag:"value",value:{value:u.toValue(0n),alignment:u.alignment()}}]}},{idx:{cached:!1,pushPath:!1,path:[{tag:"value",value:{value:o.toValue(a),alignment:o.alignment()}}]}},{popeq:{cached:!1,result:void 0}}]).value),c=this._validatedOwnerCommitment_0(t,n,a);return e.assert(this._equal_2(r.ownerCommitment,c),"Not the owner"),e.queryLedgerState(t,n,[{idx:{cached:!1,pushPath:!0,path:[{tag:"value",value:{value:u.toValue(0n),alignment:u.alignment()}}]}},{push:{storage:!1,value:e.StateValue.newCell({value:o.toValue(a),alignment:o.alignment()}).encode()}},{rem:{cached:!1}},{ins:{cached:!0,n:1}}]),[]}_updateReference_0(t,n,a,r,c,i,l,p,_,s){e.assert(w.fromValue(e.queryLedgerState(t,n,[{dup:{n:0}},{idx:{cached:!1,pushPath:!1,path:[{tag:"value",value:{value:u.toValue(0n),alignment:u.alignment()}}]}},{push:{storage:!1,value:e.StateValue.newCell({value:o.toValue(a),alignment:o.alignment()}).encode()}},"member",{popeq:{cached:!0,result:void 0}}]).value),"Reference not found");let f=y.fromValue(e.queryLedgerState(t,n,[{dup:{n:0}},{idx:{cached:!1,pushPath:!1,path:[{tag:"value",value:{value:u.toValue(0n),alignment:u.alignment()}}]}},{idx:{cached:!1,pushPath:!1,path:[{tag:"value",value:{value:o.toValue(a),alignment:o.alignment()}}]}},{popeq:{cached:!1,result:void 0}}]).value),d=this._validatedOwnerCommitment_0(t,n,a);e.assert(this._equal_3(f.ownerCommitment,d),"Not the owner");let v=this._validatedNewOwnerCommitment_0(t,n,a),R={storageId:r,encryptionScheme:c,storageProvider:i,metadata:l,writtenAt:p,keyEnvelope:_,ownerCommitment:v,contentHash:s};return e.queryLedgerState(t,n,[{idx:{cached:!1,pushPath:!0,path:[{tag:"value",value:{value:u.toValue(0n),alignment:u.alignment()}}]}},{push:{storage:!1,value:e.StateValue.newCell({value:o.toValue(a),alignment:o.alignment()}).encode()}},{push:{storage:!0,value:e.StateValue.newCell({value:y.toValue(R),alignment:y.alignment()}).encode()}},{ins:{cached:!1,n:1}},{ins:{cached:!0,n:1}}]),[]}_equal_0(t,n){return!!t.every((a,r)=>n[r]===a)}_equal_1(t,n){return!!t.every((a,r)=>n[r]===a)}_equal_2(t,n){return!!t.every((a,r)=>n[r]===a)}_equal_3(t,n){return!!t.every((a,r)=>n[r]===a)}};function S(t){let n=t instanceof e.StateValue?t:t.state,a=t instanceof e.StateValue?new e.ChargedState(t):t,r={currentQueryContext:new e.QueryContext(a,e.dummyContractAddress()),costModel:e.CostModel.initialCostModel()},c={input:{value:[],alignment:[]},output:void 0,publicTranscript:[],privateTranscriptOutputs:[]};return{references:{isEmpty(...i){if(i.length!==0)throw new e.CompactError(`isEmpty: expected 0 arguments, received ${i.length}`);return w.fromValue(e.queryLedgerState(r,c,[{dup:{n:0}},{idx:{cached:!1,pushPath:!1,path:[{tag:"value",value:{value:u.toValue(0n),alignment:u.alignment()}}]}},"size",{push:{storage:!1,value:e.StateValue.newCell({value:g.toValue(0n),alignment:g.alignment()}).encode()}},"eq",{popeq:{cached:!0,result:void 0}}]).value)},size(...i){if(i.length!==0)throw new e.CompactError(`size: expected 0 arguments, received ${i.length}`);return g.fromValue(e.queryLedgerState(r,c,[{dup:{n:0}},{idx:{cached:!1,pushPath:!1,path:[{tag:"value",value:{value:u.toValue(0n),alignment:u.alignment()}}]}},"size",{popeq:{cached:!0,result:void 0}}]).value)},member(...i){if(i.length!==1)throw new e.CompactError(`member: expected 1 argument, received ${i.length}`);let l=i[0];return l.buffer instanceof ArrayBuffer&&l.BYTES_PER_ELEMENT===1&&l.length===32||e.typeError("member","argument 1","DataRegistry.compact line 80 char 1","Bytes<32>",l),w.fromValue(e.queryLedgerState(r,c,[{dup:{n:0}},{idx:{cached:!1,pushPath:!1,path:[{tag:"value",value:{value:u.toValue(0n),alignment:u.alignment()}}]}},{push:{storage:!1,value:e.StateValue.newCell({value:o.toValue(l),alignment:o.alignment()}).encode()}},"member",{popeq:{cached:!0,result:void 0}}]).value)},lookup(...i){if(i.length!==1)throw new e.CompactError(`lookup: expected 1 argument, received ${i.length}`);let l=i[0];return l.buffer instanceof ArrayBuffer&&l.BYTES_PER_ELEMENT===1&&l.length===32||e.typeError("lookup","argument 1","DataRegistry.compact line 80 char 1","Bytes<32>",l),y.fromValue(e.queryLedgerState(r,c,[{dup:{n:0}},{idx:{cached:!1,pushPath:!1,path:[{tag:"value",value:{value:u.toValue(0n),alignment:u.alignment()}}]}},{idx:{cached:!1,pushPath:!1,path:[{tag:"value",value:{value:o.toValue(l),alignment:o.alignment()}}]}},{popeq:{cached:!1,result:void 0}}]).value)},[Symbol.iterator](...i){if(i.length!==0)throw new e.CompactError(`iter: expected 0 arguments, received ${i.length}`);let l=n.asArray()[0];return l.asMap().keys().map(p=>{let _=l.asMap().get(p).asCell();return[o.fromValue(p.value),y.fromValue(_.value)]})[Symbol.iterator]()}},get refCounter(){return g.fromValue(e.queryLedgerState(r,c,[{dup:{n:0}},{idx:{cached:!1,pushPath:!1,path:[{tag:"value",value:{value:u.toValue(1n),alignment:u.alignment()}}]}},{popeq:{cached:!0,result:void 0}}]).value)},get contractVersion(){return h.fromValue(e.queryLedgerState(r,c,[{dup:{n:0}},{idx:{cached:!1,pushPath:!1,path:[{tag:"value",value:{value:u.toValue(2n),alignment:u.alignment()}}]}},{popeq:{cached:!1,result:void 0}}]).value)}}}var D={currentQueryContext:new e.QueryContext(new e.ContractState().data,e.dummyContractAddress())},O=new T({ownerSecret:(...t)=>{},newOwnerSecret:(...t)=>{}}),k={deriveRefId:(...t)=>{if(t.length!==2)throw new e.CompactError(`deriveRefId: expected 2 arguments (as invoked from Typescript), received ${t.length}`);let n=t[0],a=t[1];return n.buffer instanceof ArrayBuffer&&n.BYTES_PER_ELEMENT===1&&n.length===32||e.typeError("deriveRefId","argument 1","DataRegistry.compact line 149 char 1","Bytes<32>",n),a.buffer instanceof ArrayBuffer&&a.BYTES_PER_ELEMENT===1&&a.length===32||e.typeError("deriveRefId","argument 2","DataRegistry.compact line 149 char 1","Bytes<32>",a),O._deriveRefId_0(n,a)}},A={ownerSecret:t=>{let n=t.privateState;if(!n.ownerSecret)throw new Error("[dStorage/midnight] ownerSecret is not set in private state. The SDK must call privateStateProvider.set() with ownerSecret before proof generation.");return[n,n.ownerSecret]},newOwnerSecret:t=>{let n=t.privateState;if(!n.newOwnerSecret)throw new Error("[dStorage/midnight] newOwnerSecret is not set in private state. The SDK must call privateStateProvider.set() with newOwnerSecret before proof generation.");return[n,n.newOwnerSecret]}},Q=()=>({}),$=E.make("DataRegistry",T).pipe(E.withWitnesses(A));export{T as a,S as b,A as c,Q as d,$ as e};