@engramx/client 0.16.0-rc.12 → 0.16.0-rc.14

package/dist/connect-config.d.ts

@@ -0,0 +1,109 @@
+export interface ConnectParams {
+    canisterId: string;
+    /** IC gateway host. Defaults to mainnet (icp0.io). Local replica: http://localhost:4943 */
+    host?: string;
+}
+export declare const MAINNET_HOST = "https://icp0.io";
+/** What a surface that prints the per-client guides passes: the engram, and the build's version. */
+export interface GuideParams extends ConnectParams {
+    /**
+     * The @engramx/client version the surface printing these guides was BUILT with — its own
+     * package.json's version, which the release's version change stamps (X.Y.Z-rc.N while a release
+     * candidate soaks, X.Y.Z once the final release is cut). Every pairing command in the guides
+     * names it.
+     *
+     * ⟨2026-10-13⟩ It is also the @engramx/mcp version the local (stdio) server config names
+     * (`mcpPackage`): the protocol's packages share one version number, which each release's version
+     * change stamps into every one of them, so the surface's own version is both.
+     */
+    clientVersion: string;
+}
+/**
+ * The pairing command, pinned to the version the surface printing it was built with.
+ *
+ * WHY (the owner's ruling of 2026-10-03: print the exact version each page was built with).
+ * A bare `npx @engramx/client pair …` installs npm's default (`latest`), which is the last FINAL
+ * release: while a release candidate soaks under the `next` tag, every surface built from it would
+ * hand out a command that installs the previous release, and a previous release cannot pair with
+ * this release's engram (the 0.15.0 → 0.16.0 enrolment change). Pinned to the build's own version,
+ * the command names the final version once the final release is cut — through that release's own
+ * version change, with nothing to undo. WHAT WOULD MAKE THIS WRONG: a surface that prints the guides
+ * for a different release than the one it was built from (then `clientVersion` must be that
+ * release's), or a published version being withdrawn from npm (a pinned command then fails loudly,
+ * where a bare one would quietly install another release).
+ */
+export declare function pairCommand(clientVersion: string, inviteCode: string, canisterId: string): string;
+/** The remote MCP endpoint URL for an engram canister (boundary-node subdomain routing). */
+export declare function mcpUrl({ canisterId, host }: ConnectParams): string;
+/**
+ * The @engramx/mcp package the local (stdio) server config runs, pinned to the version the surface
+ * printing it was built with: `@engramx/mcp@<version>`.
+ *
+ * ⟨ADDED 2026-10-13, the owner's "fix … the MCP version in rc.12"⟩ WHY. The config said
+ * `npx -y @engramx/mcp`, and a bare name installs npm's default (`latest`) — the last FINAL release.
+ * While a release candidate soaks under `next`, that is the previous release (0.15.0 during the
+ * 0.16.0 soak, read from npm's dist-tags 2026-10-13), which cannot talk to this release's engram, so
+ * the first session started from the copied config failed. The defect class is the bare pairing
+ * command's (`pairCommand` above); that fix missed this one because the package name sits in an
+ * argument list, not a command line.
+ *
+ * A version that is not a release version — a surface that could not read its own — prints the
+ * visible blank `<version>`, which npm refuses by name (EINVALIDTAGNAME). Never `@engramx/mcp@` or
+ * the bare name: npm reads both as the range `*` and installs `latest`, the very failure this
+ * prevents (npm-package-arg, measured 2026-10-13 with npm 11.19.1).
+ *
+ * WHAT WOULD MAKE THIS WRONG: the packages no longer sharing one version number (then the surface
+ * must pass @engramx/mcp's own version), a surface printing the config for a release other than the
+ * one it was built from, or the named version being withdrawn from npm (the pinned config then
+ * fails loudly, where a bare one would quietly run another release).
+ */
+export declare function mcpPackage(version: string): string;
+/** What the stdio entry needs beyond the guides: the key file, when the surface knows it. */
+export interface StdioParams extends GuideParams {
+    /**
+     * The session key file the server reads. ⟨2026-10-13⟩ Set by `engramx pair --target claude`, which
+     * just wrote that file (and may have been given `--key-path`); omitted by surfaces that do not
+     * know it, so the server reads its default, ~/.engramx/session.key.
+     */
+    sessionKeyPath?: string;
+}
+/** The stdio `mcpServers.engramx` entry, as every surface writes it. */
+export interface StdioServerEntry {
+    command: string;
+    args: string[];
+    env: Record<string, string>;
+}
+/**
+ * Claude Desktop / Cursor STDIO server entry (local @engramx/mcp, session-key auth), running the
+ * @engramx/mcp version the surface was built with (`mcpPackage`).
+ */
+export declare function stdioServerConfig({ canisterId, host, clientVersion, sessionKeyPath, }: StdioParams): StdioServerEntry;
+/** The claude_desktop_config.json fragment with the engramx server under mcpServers. */
+export declare function claudeDesktopConfig(p: StdioParams): {
+    mcpServers: {
+        engramx: StdioServerEntry;
+    };
+};
+export interface ClientGuide {
+    id: string;
+    name: string;
+    /** 'remote' = canister-hosted HTTP MCP + OAuth; 'stdio' = local @engramx/mcp + session key */
+    transport: 'remote' | 'stdio';
+    steps: string[];
+    /** Optional copy-paste install snippet (CLI command, YAML, or JSON). */
+    snippet?: string;
+}
+/** Per-client connection guides — identical wording in the CLI and the web page. */
+export declare function clientGuides(p: GuideParams): ClientGuide[];
+/** Everything a consumer needs in one call. */
+export declare function connectInfo(p: GuideParams): {
+    canisterId: string;
+    host: string;
+    mcpUrl: string;
+    claudeDesktopConfig: {
+        mcpServers: {
+            engramx: StdioServerEntry;
+        };
+    };
+    guides: ClientGuide[];
+};

package/dist/connect-config.js

@@ -0,0 +1,251 @@
+// Canonical config generation for connecting AI clients (Claude.ai web, Claude Desktop, Cursor, …)
+// to an engram's remote MCP endpoint. Used by the `@engramx/mcp connect` CLI.
+//
+// Dependency-free and free of Node/browser-only APIs so any consumer (this CLI, or a web UI) can
+// import it unchanged. The contract test (connect-config.test.ts) pins the output — downstream UIs
+// that re-render this config should reuse this module + that test so every surface stays identical.
+//
+// ⟨MOVED 2026-10-13, the bloat audit + the owner's 3A⟩ From integrations/mcp/src/ into
+// @engramx/client, published as the browser-safe subpath `@engramx/client/connect-config`, so a web
+// UI imports it instead of keeping a hand copy (the platform's was policed by a sync script). It is
+// also now the ONE generator of the stdio `mcpServers.engramx` entry: claude-setup.ts
+// (`engramx pair --target claude`) built a second one that had drifted (the session-key variable set
+// there and not here; `ic0.app` the only mainnet spelling there). `stdioServerConfig` takes the
+// key path for the surfaces that know it. Still dependency-free — test/browser-safe-subpaths.test.ts
+// holds it to that.
+//
+// ⟨2026-10-03⟩ Every pairing command this module prints names the exact @engramx/client version the
+// surface printing it was built with (`npx @engramx/client@<version> pair …`), so the caller passes
+// that version in (`GuideParams.clientVersion`): this module cannot read a package.json and stay
+// usable in a browser. This CLI passes its own package.json's version; a web UI passes the version
+// it was built with. See `pairCommand` below for why.
+// ⟨2026-10-13⟩ The local (stdio) server config takes that same version and names
+// `@engramx/mcp@<version>` (`mcpPackage` below) — it named the bare package until then.
+export const MAINNET_HOST = 'https://icp0.io';
+/**
+ * The pairing command, pinned to the version the surface printing it was built with.
+ *
+ * WHY (the owner's ruling of 2026-10-03: print the exact version each page was built with).
+ * A bare `npx @engramx/client pair …` installs npm's default (`latest`), which is the last FINAL
+ * release: while a release candidate soaks under the `next` tag, every surface built from it would
+ * hand out a command that installs the previous release, and a previous release cannot pair with
+ * this release's engram (the 0.15.0 → 0.16.0 enrolment change). Pinned to the build's own version,
+ * the command names the final version once the final release is cut — through that release's own
+ * version change, with nothing to undo. WHAT WOULD MAKE THIS WRONG: a surface that prints the guides
+ * for a different release than the one it was built from (then `clientVersion` must be that
+ * release's), or a published version being withdrawn from npm (a pinned command then fails loudly,
+ * where a bare one would quietly install another release).
+ */
+export function pairCommand(clientVersion, inviteCode, canisterId) {
+    return `npx @engramx/client@${clientVersion} pair ${inviteCode} --engram ${canisterId}`;
+}
+function isLocal(host) {
+    return host.includes('localhost') || host.includes('127.0.0.1');
+}
+/** The remote MCP endpoint URL for an engram canister (boundary-node subdomain routing). */
+export function mcpUrl({ canisterId, host = MAINNET_HOST }) {
+    if (isLocal(host))
+        return `http://${canisterId}.localhost:4943/mcp`;
+    return `https://${canisterId}.icp0.io/mcp`;
+}
+/** A release version as the release's version change writes it: X.Y.Z, or X.Y.Z-<pre-release>. */
+const RELEASE_VERSION = /^[0-9]+\.[0-9]+\.[0-9]+(-[0-9A-Za-z.]+)?$/;
+/**
+ * The @engramx/mcp package the local (stdio) server config runs, pinned to the version the surface
+ * printing it was built with: `@engramx/mcp@<version>`.
+ *
+ * ⟨ADDED 2026-10-13, the owner's "fix … the MCP version in rc.12"⟩ WHY. The config said
+ * `npx -y @engramx/mcp`, and a bare name installs npm's default (`latest`) — the last FINAL release.
+ * While a release candidate soaks under `next`, that is the previous release (0.15.0 during the
+ * 0.16.0 soak, read from npm's dist-tags 2026-10-13), which cannot talk to this release's engram, so
+ * the first session started from the copied config failed. The defect class is the bare pairing
+ * command's (`pairCommand` above); that fix missed this one because the package name sits in an
+ * argument list, not a command line.
+ *
+ * A version that is not a release version — a surface that could not read its own — prints the
+ * visible blank `<version>`, which npm refuses by name (EINVALIDTAGNAME). Never `@engramx/mcp@` or
+ * the bare name: npm reads both as the range `*` and installs `latest`, the very failure this
+ * prevents (npm-package-arg, measured 2026-10-13 with npm 11.19.1).
+ *
+ * WHAT WOULD MAKE THIS WRONG: the packages no longer sharing one version number (then the surface
+ * must pass @engramx/mcp's own version), a surface printing the config for a release other than the
+ * one it was built from, or the named version being withdrawn from npm (the pinned config then
+ * fails loudly, where a bare one would quietly run another release).
+ */
+export function mcpPackage(version) {
+    return `@engramx/mcp@${RELEASE_VERSION.test(version) ? version : '<version>'}`;
+}
+/**
+ * Claude Desktop / Cursor STDIO server entry (local @engramx/mcp, session-key auth), running the
+ * @engramx/mcp version the surface was built with (`mcpPackage`).
+ */
+export function stdioServerConfig({ canisterId, host = MAINNET_HOST, clientVersion, sessionKeyPath, }) {
+    const env = { ENGRAM_CANISTER_ID: canisterId };
+    if (sessionKeyPath)
+        env['ENGRAM_SESSION_KEY_PATH'] = sessionKeyPath;
+    // Only pin a non-default host (e.g. local replica); mainnet is the @engramx/mcp default.
+    if (host !== MAINNET_HOST && host !== 'https://ic0.app')
+        env['ENGRAM_HOST'] = host;
+    // ⟨2026-10-13⟩ Was `args: ['-y', '@engramx/mcp']` — unpinned; `mcpPackage` says why.
+    return { command: 'npx', args: ['-y', mcpPackage(clientVersion)], env };
+}
+/** The claude_desktop_config.json fragment with the engramx server under mcpServers. */
+export function claudeDesktopConfig(p) {
+    return { mcpServers: { engramx: stdioServerConfig(p) } };
+}
+/** Per-client connection guides — identical wording in the CLI and the web page. */
+export function clientGuides(p) {
+    const url = mcpUrl(p);
+    const pair = pairCommand(p.clientVersion, '<invite-code>', p.canisterId);
+    return [
+        {
+            id: 'claude-web',
+            name: 'Claude (claude.ai)',
+            transport: 'remote',
+            steps: [
+                'Open claude.ai → Settings → Connectors → Add custom connector.',
+                `Paste the MCP URL: ${url}`,
+                'Sign in with the wallet that owns this engram, then approve.',
+                'Your engram tools (read/append/list memory, audit log, wallet) appear in new chats.',
+            ],
+        },
+        {
+            id: 'claude-code',
+            name: 'Claude Code (CLI)',
+            transport: 'remote',
+            snippet: `claude mcp add engramx-memory ${url}`,
+            steps: [
+                'Run the command, then restart claude-code — OAuth opens in your browser on first use.',
+            ],
+        },
+        {
+            id: 'claude-desktop',
+            name: 'Claude Desktop (remote)',
+            transport: 'remote',
+            steps: [
+                'Claude Desktop → Settings → Connectors → Add custom connector.',
+                `Paste the MCP URL: ${url}`,
+                'Authorize with your wallet.',
+            ],
+        },
+        {
+            id: 'cursor',
+            name: 'Cursor',
+            transport: 'remote',
+            steps: [
+                'Cursor → Settings → MCP → Add new MCP server.',
+                `Paste the remote URL ${url}; the OAuth flow opens in your browser.`,
+            ],
+        },
+        {
+            id: 'copilot',
+            name: 'GitHub Copilot (VS Code, agent mode)',
+            transport: 'remote',
+            snippet: `{\n  "servers": {\n    "engramx-memory": { "type": "http", "url": "${url}" }\n  }\n}`,
+            steps: [
+                'VS Code → Command Palette → "MCP: Add Server" → HTTP → paste the URL; or add the JSON above to .vscode/mcp.json (workspace) or your user mcp.json.',
+                'Open Copilot Chat in Agent mode and authorize with the wallet that owns this engram; your engram tools appear in the tool picker.',
+                'Note: the GitHub Copilot CLI is a separate surface (gh copilot) — this flow is for Copilot Chat in VS Code.',
+            ],
+        },
+        {
+            id: 'continue',
+            name: 'Continue.dev',
+            transport: 'remote',
+            snippet: `mcpServers:\n  - name: engramx-memory\n    transport: streamable-http\n    url: ${url}`,
+            steps: ['Add this YAML to .continue/mcpServers/engramx.yaml.'],
+        },
+        {
+            id: 'chatgpt',
+            name: 'ChatGPT (developer mode)',
+            transport: 'remote',
+            steps: [
+                'ChatGPT → Settings → Apps & Connectors → enable Developer mode → New connector.',
+                `Add the MCP server URL: ${url}, then authorize with the wallet that owns this engram.`,
+                'Web + paid tiers only (Plus/Pro/Business); the desktop/mobile apps and free tier cannot add a custom MCP.',
+                'Our connector handshake with ChatGPT is still being verified — if the authorize step fails, seed via a paste prompt for now.',
+            ],
+        },
+        {
+            id: 'gemini-cli',
+            name: 'Gemini CLI',
+            transport: 'remote',
+            snippet: `gemini mcp add --transport http engramx-memory ${url}`,
+            steps: [
+                'Run the command, then restart gemini-cli.',
+                'If the OAuth handshake misbehaves, add an auth header (the key for this engram) or use the local stdio proxy instead.',
+                'The consumer Gemini app has no custom-MCP support — use gemini-cli, or seed the app’s Saved Info via a paste prompt.',
+            ],
+        },
+        {
+            id: 'grok',
+            name: 'Grok',
+            transport: 'remote',
+            steps: [
+                'Grok → Settings → Connectors → Bring your own MCP → add a custom connector.',
+                `Paste the MCP URL: ${url} and authorize. Paid tier.`,
+            ],
+        },
+        {
+            id: 'perplexity',
+            name: 'Perplexity',
+            transport: 'remote',
+            steps: [
+                'Perplexity → Settings → Connectors → Add → Custom MCP (Pro / Max / Enterprise).',
+                `Paste the remote URL: ${url}; authorize with your wallet.`,
+            ],
+        },
+        {
+            id: 'lechat',
+            name: 'Mistral Le Chat',
+            transport: 'remote',
+            steps: [
+                'Le Chat → + Add Connector → Custom MCP.',
+                `Name it "engramx" and paste the server URL: ${url}. Available on all tiers, including free.`,
+            ],
+        },
+        {
+            id: 'openclaw',
+            name: 'OpenClaw (self-hosted)',
+            transport: 'stdio',
+            snippet: pair,
+            steps: [
+                'Run the command; it auto-detects OpenClaw and installs the engramx memory plugin.',
+                'The engram becomes OpenClaw’s memory backend — it reads at session start and syncs new memories automatically.',
+                'Get <invite-code> from the engram’s owner — you, if this is your engram — who creates it under Access → Agents; it works for thirty minutes.',
+            ],
+        },
+        {
+            id: 'sdk',
+            name: 'Your own agent (@engramx/client SDK)',
+            transport: 'stdio',
+            snippet: pair,
+            steps: [
+                'Pair a key for this engram once with the command; get <invite-code> from the engram’s owner — you, if this is your engram — who creates it under Access → Agents. It works for thirty minutes.',
+                `In your agent: new EngramClient({ canisterId: '${p.canisterId}', sessionKeyPath: '~/.engramx/session.key' }), then startSession() to read this owner's memory back and appendMemory() as it learns.`,
+                'This grant is append-only for writes — your agent can read and add memory, and cannot delete it. Overwriting existing content requires a separate grant the owner issues deliberately, per path: only on paths the owner lists for agents, and never on paths the owner has locked.',
+            ],
+        },
+        {
+            id: 'claude-desktop-stdio',
+            name: 'Claude Desktop / Cursor (local stdio)',
+            transport: 'stdio',
+            snippet: JSON.stringify(claudeDesktopConfig(p), null, 2),
+            steps: [
+                `Pair a key for this engram once: ${pair}`,
+                'Add the JSON to claude_desktop_config.json under "mcpServers", then restart the app.',
+            ],
+        },
+    ];
+}
+/** Everything a consumer needs in one call. */
+export function connectInfo(p) {
+    return {
+        canisterId: p.canisterId,
+        host: p.host ?? MAINNET_HOST,
+        mcpUrl: mcpUrl(p),
+        claudeDesktopConfig: claudeDesktopConfig(p),
+        guides: clientGuides(p),
+    };
+}
+//# sourceMappingURL=connect-config.js.map

package/dist/connect-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect-config.js","sourceRoot":"","sources":["../src/connect-config.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,8EAA8E;AAC9E,EAAE;AACF,iGAAiG;AACjG,mGAAmG;AACnG,oGAAoG;AACpG,EAAE;AACF,uFAAuF;AACvF,oGAAoG;AACpG,oGAAoG;AACpG,sFAAsF;AACtF,qGAAqG;AACrG,gGAAgG;AAChG,qGAAqG;AACrG,oBAAoB;AACpB,EAAE;AACF,oGAAoG;AACpG,oGAAoG;AACpG,iGAAiG;AACjG,mGAAmG;AACnG,sDAAsD;AACtD,iFAAiF;AACjF,wFAAwF;AAQxF,MAAM,CAAC,MAAM,YAAY,GAAG,iBAAiB,CAAC;AAiB9C;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,WAAW,CAAC,aAAqB,EAAE,UAAkB,EAAE,UAAkB;IACvF,OAAO,uBAAuB,aAAa,SAAS,UAAU,aAAa,UAAU,EAAE,CAAC;AAC1F,CAAC;AAED,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAClE,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,MAAM,CAAC,EAAE,UAAU,EAAE,IAAI,GAAG,YAAY,EAAiB;IACvE,IAAI,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,UAAU,UAAU,qBAAqB,CAAC;IACpE,OAAO,WAAW,UAAU,cAAc,CAAC;AAC7C,CAAC;AAED,kGAAkG;AAClG,MAAM,eAAe,GAAG,2CAA2C,CAAC;AAEpE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,UAAU,CAAC,OAAe;IACxC,OAAO,gBAAgB,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;AACjF,CAAC;AAmBD;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAChC,UAAU,EACV,IAAI,GAAG,YAAY,EACnB,aAAa,EACb,cAAc,GACF;IACZ,MAAM,GAAG,GAA2B,EAAE,kBAAkB,EAAE,UAAU,EAAE,CAAC;IACvE,IAAI,cAAc;QAAE,GAAG,CAAC,yBAAyB,CAAC,GAAG,cAAc,CAAC;IACpE,yFAAyF;IACzF,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,iBAAiB;QAAE,GAAG,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC;IACnF,qFAAqF;IACrF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,UAAU,CAAC,aAAa,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;AAC1E,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,mBAAmB,CAAC,CAAc;IAChD,OAAO,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC3D,CAAC;AAYD,oFAAoF;AACpF,MAAM,UAAU,YAAY,CAAC,CAAc;IACzC,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACtB,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC,aAAa,EAAE,eAAe,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC;IACzE,OAAO;QACL;YACE,EAAE,EAAE,YAAY;YAChB,IAAI,EAAE,oBAAoB;YAC1B,SAAS,EAAE,QAAQ;YACnB,KAAK,EAAE;gBACL,gEAAgE;gBAChE,sBAAsB,GAAG,EAAE;gBAC3B,8DAA8D;gBAC9D,qFAAqF;aACtF;SACF;QACD;YACE,EAAE,EAAE,aAAa;YACjB,IAAI,EAAE,mBAAmB;YACzB,SAAS,EAAE,QAAQ;YACnB,OAAO,EAAE,iCAAiC,GAAG,EAAE;YAC/C,KAAK,EAAE;gBACL,uFAAuF;aACxF;SACF;QACD;YACE,EAAE,EAAE,gBAAgB;YACpB,IAAI,EAAE,yBAAyB;YAC/B,SAAS,EAAE,QAAQ;YACnB,KAAK,EAAE;gBACL,gEAAgE;gBAChE,sBAAsB,GAAG,EAAE;gBAC3B,6BAA6B;aAC9B;SACF;QACD;YACE,EAAE,EAAE,QAAQ;YACZ,IAAI,EAAE,QAAQ;YACd,SAAS,EAAE,QAAQ;YACnB,KAAK,EAAE;gBACL,+CAA+C;gBAC/C,wBAAwB,GAAG,yCAAyC;aACrE;SACF;QACD;YACE,EAAE,EAAE,SAAS;YACb,IAAI,EAAE,sCAAsC;YAC5C,SAAS,EAAE,QAAQ;YACnB,OAAO,EAAE,sEAAsE,GAAG,aAAa;YAC/F,KAAK,EAAE;gBACL,oJAAoJ;gBACpJ,mIAAmI;gBACnI,6GAA6G;aAC9G;SACF;QACD;YACE,EAAE,EAAE,UAAU;YACd,IAAI,EAAE,cAAc;YACpB,SAAS,EAAE,QAAQ;YACnB,OAAO,EAAE,mFAAmF,GAAG,EAAE;YACjG,KAAK,EAAE,CAAC,qDAAqD,CAAC;SAC/D;QACD;YACE,EAAE,EAAE,SAAS;YACb,IAAI,EAAE,0BAA0B;YAChC,SAAS,EAAE,QAAQ;YACnB,KAAK,EAAE;gBACL,iFAAiF;gBACjF,2BAA2B,GAAG,yDAAyD;gBACvF,2GAA2G;gBAC3G,8HAA8H;aAC/H;SACF;QACD;YACE,EAAE,EAAE,YAAY;YAChB,IAAI,EAAE,YAAY;YAClB,SAAS,EAAE,QAAQ;YACnB,OAAO,EAAE,kDAAkD,GAAG,EAAE;YAChE,KAAK,EAAE;gBACL,2CAA2C;gBAC3C,uHAAuH;gBACvH,sHAAsH;aACvH;SACF;QACD;YACE,EAAE,EAAE,MAAM;YACV,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,QAAQ;YACnB,KAAK,EAAE;gBACL,6EAA6E;gBAC7E,sBAAsB,GAAG,4BAA4B;aACtD;SACF;QACD;YACE,EAAE,EAAE,YAAY;YAChB,IAAI,EAAE,YAAY;YAClB,SAAS,EAAE,QAAQ;YACnB,KAAK,EAAE;gBACL,iFAAiF;gBACjF,yBAAyB,GAAG,+BAA+B;aAC5D;SACF;QACD;YACE,EAAE,EAAE,QAAQ;YACZ,IAAI,EAAE,iBAAiB;YACvB,SAAS,EAAE,QAAQ;YACnB,KAAK,EAAE;gBACL,yCAAyC;gBACzC,+CAA+C,GAAG,2CAA2C;aAC9F;SACF;QACD;YACE,EAAE,EAAE,UAAU;YACd,IAAI,EAAE,wBAAwB;YAC9B,SAAS,EAAE,OAAO;YAClB,OAAO,EAAE,IAAI;YACb,KAAK,EAAE;gBACL,mFAAmF;gBACnF,gHAAgH;gBAChH,8IAA8I;aAC/I;SACF;QACD;YACE,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,sCAAsC;YAC5C,SAAS,EAAE,OAAO;YAClB,OAAO,EAAE,IAAI;YACb,KAAK,EAAE;gBACL,gMAAgM;gBAChM,kDAAkD,CAAC,CAAC,UAAU,uIAAuI;gBACrM,qRAAqR;aACtR;SACF;QACD;YACE,EAAE,EAAE,sBAAsB;YAC1B,IAAI,EAAE,uCAAuC;YAC7C,SAAS,EAAE,OAAO;YAClB,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,KAAK,EAAE;gBACL,oCAAoC,IAAI,EAAE;gBAC1C,sFAAsF;aACvF;SACF;KACF,CAAC;AACJ,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,WAAW,CAAC,CAAc;IACxC,OAAO;QACL,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,YAAY;QAC5B,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACjB,mBAAmB,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAC3C,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;KACxB,CAAC;AACJ,CAAC"}

package/dist/encryption.js

@@ -70,7 +70,13 @@ export class EncryptionManager {
     async cacheModule() {
         if (!this.persistPath || typeof process === 'undefined' || !process.versions?.node)
             return null;
-        return import('./keyCache.js');
+        // ⟨2026-10-13, the owner's 3A⟩ The specifier is a VARIABLE so a browser bundler does not follow
+        // it: this module is the browser-safe subpath `@engramx/client/encryption`, and keyCache.js is
+        // Node's file system. With a literal, Vite bundled keyCache (and node:fs) into a web build that
+        // can never reach it (persistence needs `process.versions.node`). Node resolves the variable
+        // relative to this file exactly as it did the literal. Held by test/browser-safe-subpaths.test.ts.
+        const keyCacheModule = './keyCache.js';
+        return (await import(/* @vite-ignore */ keyCacheModule));
     }
     async resolvedPath(kc) {
         return this.persistPath === '1' || this.persistPath === 'true'

package/dist/encryption.js.map

@@ -1 +1 @@
-{"version":3,"file":"encryption.js","sourceRoot":"","sources":["../src/encryption.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,EAAE;AACF,iFAAiF;AACjF,yEAAyE;AACzE,0FAA0F;AAC1F,iFAAiF;AACjF,0DAA0D;AAC1D,EAAE;AACF,4EAA4E;AAC5E,+EAA+E;AAC/E,uEAAuE;AASvE,OAAO,EAAE,YAAY,EAAkB,MAAM,WAAW,CAAC;AAEzD,6EAA6E;AAC7E,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACrD,gGAAgG;AAChG,wEAAwE;AACxE,MAAM,aAAa,GAAG,0BAA0B,CAAC;AACjD,MAAM,UAAU,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;AACxE,yEAAyE;AACzE,iFAAiF;AACjF,MAAM,eAAe,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;AAC1C,wEAAwE;AACxE,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AACvD,+EAA+E;AAC/E,MAAM,aAAa,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAC/D,6FAA6F;AAC7F,8FAA8F;AAC9F,8FAA8F;AAC9F,iGAAiG;AACjG,gGAAgG;AAChG,qBAAqB;AACrB,MAAM,WAAW,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAE7D,SAAS,UAAU,CAAC,KAAiB,EAAE,MAAkB;IACvD,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACjF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,KAAiB;IACjC,OAAO,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,IAAI,CAAC,CAAwB;IACpC,OAAO,CAAC,YAAY,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC;AAoCD,MAAM,OAAO,iBAAiB;IAQ5B;;;;;OAKG;IACH,YAAY,OAAO,GAAG,KAAK,EAAE,IAAoD;QAbjF;;;wFAGgF;QACxE,QAAG,GAAG,IAAI,GAAG,EAA8B,CAAC;QAUlD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,IAAI,EAAE,UAAU,IAAI,IAAI,CAAC;QAC3C,2FAA2F;QAC3F,4FAA4F;QAC5F,iGAAiG;QACjG,yFAAyF;QACzF,MAAM,GAAG,GAAG,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5F,MAAM,GAAG,GAAG,IAAI,EAAE,WAAW,IAAI,GAAG,CAAC;QACrC,IAAI,CAAC,WAAW,GAAG,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACxE,CAAC;IAMO,KAAK,CAAC,WAAW;QACvB,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI;YAAE,OAAO,IAAI,CAAC;QAChG,OAAO,MAAM,CAAC,eAAe,CAAC,CAAC;IACjC,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,EAAkC;QAC3D,OAAO,IAAI,CAAC,WAAW,KAAK,GAAG,IAAI,IAAI,CAAC,WAAW,KAAK,MAAM;YAC5D,CAAC,CAAC,EAAE,CAAC,gBAAgB,EAAE;YACvB,CAAC,CAAE,IAAI,CAAC,WAAsB,CAAC;IACnC,CAAC;IAED,kFAAkF;IAClF,UAAU,CAAC,OAAgB;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;8FAC0F;IAClF,KAAK,CAAC,SAAS,CAAC,KAAuB,EAAE,KAAK,GAAG,CAAC;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,EAAE,kBAAkB,EAAE,eAAe,EAAE,gBAAgB,EAAE,GAC7D,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACnC,wFAAwF;QACxF,2FAA2F;QAC3F,+FAA+F;QAC/F,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACpC,IAAI,EAAE,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;YACzC,0FAA0F;YAC1F,qFAAqF;YACrF,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC;YAC9F,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,IAAI,GAAG,kBAAkB,CAAC,WAAW,CACzC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAClD,CAAC;gBACF,MAAM,IAAI,GAAG,gBAAgB,CAAC,WAAW,CACvC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAClD,CAAC;gBACF,MAAM,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,gBAAgB,KAAK,EAAE,CAAC,CAAC;gBAC1F,MAAM,OAAO,GAAG,eAAe,CAAC,WAAW,CACzC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CACvD,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;gBACtC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,oBAAoB,EAAE,CAAC;gBAClD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBAC1B,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,EAAE,CAAC;QACxC,+FAA+F;QAC/F,8FAA8F;QAC9F,6FAA6F;QAC7F,uFAAuF;QACvF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,qBAAqB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC;QACrF,IAAI,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;YACnB,uFAAuF;YACvF,kEAAkE;YAClE,MAAM,IAAI,KAAK,CACb,gDAAgD,KAAK,MAAM,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CACnF,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,gBAAgB,KAAK,EAAE,CAAC,CAAC;QAC1F,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,2BAA2B,EAAE,CAAC,CAAC;QACjE,MAAM,GAAG,GAAG,gBAAgB,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QACnD,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,eAAe,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC5F,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,oBAAoB,EAAE,CAAC;QAChD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACzB,yFAAyF;QACzF,wFAAwF;QACxF,2CAA2C;QAC3C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACrC,IAAI,GAAG,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;gBAC1C,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,EAAE,KAAK,CAAC,EAAE;oBAChF,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBACpD,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBACvD,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBAC7C,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,KAAK;oBACL,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;iBACtB,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,qCAAqC;YACvC,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,OAAO,CAAC,KAAuB;QACnC,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IAED,8DAA8D;IAC9D,WAAW,CAAC,KAAiB;QAC3B,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAED;;+DAE2D;IAC3D,KAAK,CAAC,YAAY,CAAC,KAAuB,EAAE,SAAqB;QAC/D,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QACpC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,SAAS,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;QAC5E,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;QACrD,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACf,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1B,OAAO,GAAG,CAAC;IACb,CAAC;IAED;uDACmD;IACnD,KAAK,CAAC,YAAY,CAAC,KAAuB,EAAE,KAAiB;QAC3D,0FAA0F;QAC1F,4FAA4F;QAC5F,6FAA6F;QAC7F,4FAA4F;QAC5F,0FAA0F;QAC1F,EAAE;QACF,8FAA8F;QAC9F,6FAA6F;QAC7F,6FAA6F;QAC7F,IACE,KAAK,CAAC,MAAM,IAAI,CAAC;YACjB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;YACjB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;YACjB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;YACjB,KAAK,CAAC,CAAC,CAAE,GAAG,IAAI;YAChB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;YACjB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;YACjB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,EACjB,CAAC;YACD,MAAM,IAAI,KAAK,CACb,yCAAyC,KAAK,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK;gBACnF,gFAAgF;gBAChF,qFAAqF;gBACrF,oCAAoC,CACvC,CAAC;QACJ,CAAC;QACD,IAAI,UAAU,CAAC,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC;YACnC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CACb,6EAA6E,CAC9E,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;YAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,+CAA+C;YACjF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC/C,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACnC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACxC,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;IACvF,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,OAAO,CAAC,KAAuB,EAAE,SAAiB;QACtD,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IACvE,CAAC;IAED;6DACyD;IACzD,KAAK,CAAC,OAAO,CAAC,KAAuB,EAAE,KAAiB;QACtD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,2EAA2E;IAC3E,2EAA2E;IAC3E,8EAA8E;IAC9E,gFAAgF;IAChF,sDAAsD;IACtD,6EAA6E;IAC7E,+EAA+E;IAC/E,gFAAgF;IAChF,oDAAoD;IAEpD,6EAA6E;IAC7E,eAAe,CAAC,KAAiB;QAC/B,OAAO,UAAU,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IAC1C,CAAC;IAED;6FACyF;IACzF,KAAK,CAAC,wBAAwB,CAAC,KAAuB,EAAE,KAAiB;QACvE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,WAAW;QACnE,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QACvE,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;QAC1B,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC5B,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC;QAChD,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC;QACpD,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC;QACnD,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,GAAG,GAAG,IAAI,CAAC;QAC3C,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC5C,OAAO,GAAG,CAAC;IACb,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,iBAAiB,CAAC,KAAuB,EAAE,SAAiB;QAChE,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC,CAAC,2BAA2B;QAC5D,OAAO,IAAI,CAAC,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACrD,CAAC;IAED;;+BAE2B;IAC3B,KAAK,CAAC,mBAAmB,CAAC,KAAuB,EAAE,KAAiB;QAClE,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IACrF,CAAC;IAED;;+EAE2E;IAC3E,KAAK,CAAC,wBAAwB,CAAC,KAAuB,EAAE,KAAiB;QACvE,IAAI,UAAU,CAAC,KAAK,EAAE,aAAa,CAAC,EAAE,CAAC;YACrC,8EAA8E;YAC9E,MAAM,KAAK,GAAiB,EAAE,CAAC;YAC/B,IAAI,CAAC,GAAG,CAAC,CAAC;YACV,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;gBACxB,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,CAAC;oBAClD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;gBACxE,CAAC;gBACD,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC;gBAC1B,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;oBACzB,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;gBAC9E,CAAC;gBACD,+FAA+F;gBAC/F,mFAAmF;gBACnF,MAAM,GAAG,GACP,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;gBAC3F,CAAC,IAAI,CAAC,CAAC;gBACP,IAAI,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;oBAC3B,MAAM,IAAI,KAAK,CACb,sFAAsF,CACvF,CAAC;gBACJ,CAAC;gBACD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC;gBAC5C,CAAC,IAAI,GAAG,CAAC;gBACT,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,KAAK,MAAM,CAAC,IAAI,KAAK;gBAAE,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;YACzC,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,GAAG,GAAG,CAAC,CAAC;YACZ,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACtB,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBACnB,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC;YAClB,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,2FAA2F;QAC3F,sEAAsE;QACtE,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED;qFACiF;IACjF,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACpC,IAAI,EAAE,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAC1B,MAAM,EAAE,CAAC,YAAY,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"encryption.js","sourceRoot":"","sources":["../src/encryption.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,EAAE;AACF,iFAAiF;AACjF,yEAAyE;AACzE,0FAA0F;AAC1F,iFAAiF;AACjF,0DAA0D;AAC1D,EAAE;AACF,4EAA4E;AAC5E,+EAA+E;AAC/E,uEAAuE;AASvE,OAAO,EAAE,YAAY,EAAkB,MAAM,WAAW,CAAC;AAEzD,6EAA6E;AAC7E,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AACrD,gGAAgG;AAChG,wEAAwE;AACxE,MAAM,aAAa,GAAG,0BAA0B,CAAC;AACjD,MAAM,UAAU,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,0BAA0B,CAAC,CAAC;AACxE,yEAAyE;AACzE,iFAAiF;AACjF,MAAM,eAAe,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;AAC1C,wEAAwE;AACxE,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AACvD,+EAA+E;AAC/E,MAAM,aAAa,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAC/D,6FAA6F;AAC7F,8FAA8F;AAC9F,8FAA8F;AAC9F,iGAAiG;AACjG,gGAAgG;AAChG,qBAAqB;AACrB,MAAM,WAAW,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAE7D,SAAS,UAAU,CAAC,KAAiB,EAAE,MAAkB;IACvD,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACjF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,QAAQ,CAAC,KAAiB;IACjC,OAAO,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,IAAI,CAAC,CAAwB;IACpC,OAAO,CAAC,YAAY,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC;AAoCD,MAAM,OAAO,iBAAiB;IAQ5B;;;;;OAKG;IACH,YAAY,OAAO,GAAG,KAAK,EAAE,IAAoD;QAbjF;;;wFAGgF;QACxE,QAAG,GAAG,IAAI,GAAG,EAA8B,CAAC;QAUlD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,UAAU,GAAG,IAAI,EAAE,UAAU,IAAI,IAAI,CAAC;QAC3C,2FAA2F;QAC3F,4FAA4F;QAC5F,iGAAiG;QACjG,yFAAyF;QACzF,MAAM,GAAG,GAAG,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5F,MAAM,GAAG,GAAG,IAAI,EAAE,WAAW,IAAI,GAAG,CAAC;QACrC,IAAI,CAAC,WAAW,GAAG,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACxE,CAAC;IAMO,KAAK,CAAC,WAAW;QACvB,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,OAAO,OAAO,KAAK,WAAW,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI;YAAE,OAAO,IAAI,CAAC;QAChG,gGAAgG;QAChG,+FAA+F;QAC/F,gGAAgG;QAChG,6FAA6F;QAC7F,mGAAmG;QACnG,MAAM,cAAc,GAAG,eAAe,CAAC;QACvC,OAAO,CAAC,MAAM,MAAM,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAmC,CAAC;IAC7F,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,EAAkC;QAC3D,OAAO,IAAI,CAAC,WAAW,KAAK,GAAG,IAAI,IAAI,CAAC,WAAW,KAAK,MAAM;YAC5D,CAAC,CAAC,EAAE,CAAC,gBAAgB,EAAE;YACvB,CAAC,CAAE,IAAI,CAAC,WAAsB,CAAC;IACnC,CAAC;IAED,kFAAkF;IAClF,UAAU,CAAC,OAAgB;QACzB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED;8FAC0F;IAClF,KAAK,CAAC,SAAS,CAAC,KAAuB,EAAE,KAAK,GAAG,CAAC;QACxD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,EAAE,kBAAkB,EAAE,eAAe,EAAE,gBAAgB,EAAE,GAC7D,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;QACnC,wFAAwF;QACxF,2FAA2F;QAC3F,+FAA+F;QAC/F,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACpC,IAAI,EAAE,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;YACzC,0FAA0F;YAC1F,qFAAqF;YACrF,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC;YAC9F,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,IAAI,GAAG,kBAAkB,CAAC,WAAW,CACzC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAClD,CAAC;gBACF,MAAM,IAAI,GAAG,gBAAgB,CAAC,WAAW,CACvC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAClD,CAAC;gBACF,MAAM,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,gBAAgB,KAAK,EAAE,CAAC,CAAC;gBAC1F,MAAM,OAAO,GAAG,eAAe,CAAC,WAAW,CACzC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CACvD,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;gBACtC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,oBAAoB,EAAE,CAAC;gBAClD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;gBAC1B,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QACD,MAAM,GAAG,GAAG,kBAAkB,CAAC,MAAM,EAAE,CAAC;QACxC,+FAA+F;QAC/F,8FAA8F;QAC9F,6FAA6F;QAC7F,uFAAuF;QACvF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,qBAAqB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC,CAAC;QACrF,IAAI,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;YACnB,uFAAuF;YACvF,kEAAkE;YAClE,MAAM,IAAI,KAAK,CACb,gDAAgD,KAAK,MAAM,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CACnF,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,gBAAgB,KAAK,EAAE,CAAC,CAAC;QAC1F,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,2BAA2B,EAAE,CAAC,CAAC;QACjE,MAAM,GAAG,GAAG,gBAAgB,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QACnD,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,eAAe,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;QAC5F,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,oBAAoB,EAAE,CAAC;QAChD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACzB,yFAAyF;QACzF,wFAAwF;QACxF,2CAA2C;QAC3C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACrC,IAAI,GAAG,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;gBAC1C,MAAM,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,EAAE,aAAa,EAAE,KAAK,CAAC,EAAE;oBAChF,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBACpD,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBACvD,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;oBAC7C,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,KAAK;oBACL,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;iBACtB,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,qCAAqC;YACvC,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,sEAAsE;IACtE,KAAK,CAAC,OAAO,CAAC,KAAuB;QACnC,IAAI,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IAED,8DAA8D;IAC9D,WAAW,CAAC,KAAiB;QAC3B,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAED;;+DAE2D;IAC3D,KAAK,CAAC,YAAY,CAAC,KAAuB,EAAE,SAAqB;QAC/D,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QACpC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,SAAS,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;QAC5E,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;QACrD,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACf,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1B,OAAO,GAAG,CAAC;IACb,CAAC;IAED;uDACmD;IACnD,KAAK,CAAC,YAAY,CAAC,KAAuB,EAAE,KAAiB;QAC3D,0FAA0F;QAC1F,4FAA4F;QAC5F,6FAA6F;QAC7F,4FAA4F;QAC5F,0FAA0F;QAC1F,EAAE;QACF,8FAA8F;QAC9F,6FAA6F;QAC7F,6FAA6F;QAC7F,IACE,KAAK,CAAC,MAAM,IAAI,CAAC;YACjB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;YACjB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;YACjB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;YACjB,KAAK,CAAC,CAAC,CAAE,GAAG,IAAI;YAChB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;YACjB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI;YACjB,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,EACjB,CAAC;YACD,MAAM,IAAI,KAAK,CACb,yCAAyC,KAAK,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK;gBACnF,gFAAgF;gBAChF,qFAAqF;gBACrF,oCAAoC,CACvC,CAAC;QACJ,CAAC;QACD,IAAI,UAAU,CAAC,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC;YACnC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CACb,6EAA6E,CAC9E,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;YAC3C,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,+CAA+C;YACjF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC/C,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACnC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACxC,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,eAAe,CAAC,CAAC;IACvF,CAAC;IAED,+EAA+E;IAC/E,KAAK,CAAC,OAAO,CAAC,KAAuB,EAAE,SAAiB;QACtD,OAAO,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;IACvE,CAAC;IAED;6DACyD;IACzD,KAAK,CAAC,OAAO,CAAC,KAAuB,EAAE,KAAiB;QACtD,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IACzE,CAAC;IAED,2EAA2E;IAC3E,2EAA2E;IAC3E,8EAA8E;IAC9E,gFAAgF;IAChF,sDAAsD;IACtD,6EAA6E;IAC7E,+EAA+E;IAC/E,gFAAgF;IAChF,oDAAoD;IAEpD,6EAA6E;IAC7E,eAAe,CAAC,KAAiB;QAC/B,OAAO,UAAU,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IAC1C,CAAC;IAED;6FACyF;IACzF,KAAK,CAAC,wBAAwB,CAAC,KAAuB,EAAE,KAAiB;QACvE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,WAAW;QACnE,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QACvE,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;QAC1B,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC5B,GAAG,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC;QAChD,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC;QACpD,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC;QACnD,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,GAAG,GAAG,IAAI,CAAC;QAC3C,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC5C,OAAO,GAAG,CAAC;IACb,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,iBAAiB,CAAC,KAAuB,EAAE,SAAiB;QAChE,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC,CAAC,2BAA2B;QAC5D,OAAO,IAAI,CAAC,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACrD,CAAC;IAED;;+BAE2B;IAC3B,KAAK,CAAC,mBAAmB,CAAC,KAAuB,EAAE,KAAiB;QAClE,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IACrF,CAAC;IAED;;+EAE2E;IAC3E,KAAK,CAAC,wBAAwB,CAAC,KAAuB,EAAE,KAAiB;QACvE,IAAI,UAAU,CAAC,KAAK,EAAE,aAAa,CAAC,EAAE,CAAC;YACrC,8EAA8E;YAC9E,MAAM,KAAK,GAAiB,EAAE,CAAC;YAC/B,IAAI,CAAC,GAAG,CAAC,CAAC;YACV,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;gBACxB,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,CAAC;oBAClD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;gBACxE,CAAC;gBACD,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC;gBAC1B,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;oBACzB,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;gBAC9E,CAAC;gBACD,+FAA+F;gBAC/F,mFAAmF;gBACnF,MAAM,GAAG,GACP,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,KAAK,CAAC,CAAC;gBAC3F,CAAC,IAAI,CAAC,CAAC;gBACP,IAAI,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;oBAC3B,MAAM,IAAI,KAAK,CACb,sFAAsF,CACvF,CAAC;gBACJ,CAAC;gBACD,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC;gBAC5C,CAAC,IAAI,GAAG,CAAC;gBACT,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;YACvD,CAAC;YACD,IAAI,KAAK,GAAG,CAAC,CAAC;YACd,KAAK,MAAM,CAAC,IAAI,KAAK;gBAAE,KAAK,IAAI,CAAC,CAAC,MAAM,CAAC;YACzC,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,GAAG,GAAG,CAAC,CAAC;YACZ,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACtB,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;gBACnB,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC;YAClB,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,2FAA2F;QAC3F,sEAAsE;QACtE,OAAO,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED;qFACiF;IACjF,KAAK,CAAC,UAAU;QACd,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACpC,IAAI,EAAE,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAC1B,MAAM,EAAE,CAAC,YAAY,CAAC,MAAM,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACtF,CAAC;IACH,CAAC;CACF"}

package/dist/evidence.d.ts

@@ -0,0 +1,94 @@
+import { type SealedRow } from './recordChain.js';
+import { verifyHistoricalCertificate } from './certifiedAudit.js';
+export declare const EVIDENCE_FORMAT = "engramx-evidence/1";
+/**
+ * The bundle, as JSON. Hashes are lowercase hex; bytes and certificates base64; every integer a
+ * decimal string (JSON numbers lose precision past 2^53, and record times are nanoseconds).
+ */
+export interface EvidenceBundle {
+    format: typeof EVIDENCE_FORMAT;
+    /** The canister whose record this is (an engram, usually). */
+    canisterId: string;
+    /** The record entry being proven, in full. */
+    entry: {
+        id: string;
+        timestampNs: string;
+        caller: string;
+        callerRole: string;
+        operation: string;
+        details: string;
+        success: boolean;
+        /** As served; checked when present. */
+        entryHash?: string;
+    };
+    /** The record head just before the entry (the write receipt's `recordPrev`). */
+    recordPrev: string;
+    /** The record's switch point to the hash-first rule, as its record read serves it. */
+    hashFirstFrom: string;
+    /** A certified head captured after the entry (`getCertifiedAuditHead`). */
+    certified: {
+        certificate: string;
+        headHash: string;
+        /** Entries ever appended, as the canister claimed; the walk proves or refutes it. */
+        total?: string;
+        /** The registry's tree format only: the witness, and the head is the `audit_head` leaf. */
+        witness?: string | null;
+    };
+    /** Hash-only rows after the entry, up to (at least) the certified head. Absent: fetch them. */
+    rows?: {
+        id: string;
+        digest: string;
+        entryHash: string;
+    }[];
+    /** The memory write the entry records, when the bundle proves content too. */
+    write?: {
+        path: string;
+        /** The bytes the write sent: the appended delta, or the whole new content of a set. */
+        bytes: string;
+        /** The writer's principal (the event's `by`). */
+        by: string;
+        receipt: {
+            version: string;
+            seq: string;
+            head: string;
+            prev: string;
+            atNs: string;
+            contentRoot: string;
+            size: string;
+        };
+    };
+}
+export interface EvidenceLink {
+    link: string;
+    ok: boolean;
+    detail: string;
+}
+export interface EvidenceCheck {
+    ok: boolean;
+    links: EvidenceLink[];
+    /** The first broken link's detail; 'ok' when every link held. */
+    why: string;
+    signedTimeNs?: bigint;
+    /** Entries walked past the proven entry to the certified head. */
+    distance?: bigint;
+    /** Entries the certified head covers (the walk's proof of `total`). */
+    entriesCovered?: bigint;
+}
+export interface CheckOptions {
+    /** Default: the pinned IC mainnet root key. Anything else is printed as such by the CLI. */
+    rootKey?: Uint8Array;
+    /** Rows to walk when the bundle carries none, or too few: fetched from `fromId` onward. */
+    fetchRows?: (fromId: bigint) => Promise<{
+        rows: SealedRow[];
+        hashFirstFrom: bigint;
+    }>;
+    /** For tests only: stands in for the subnet's signature, which a test cannot produce. */
+    verifyCertificate?: typeof verifyHistoricalCertificate;
+}
+/** Run every link. Never throws for a broken bundle: a malformed field is a broken link, named. */
+export declare function checkEvidence(bundle: EvidenceBundle, opts?: CheckOptions): Promise<EvidenceCheck>;
+/** Encode a bundle field from bytes. */
+export declare const bundleHex: (b: Uint8Array) => string;
+export declare const bundleB64: (b: Uint8Array | number[]) => string;
+/** For a page's full items: the hash-only row of each, so a page that mixes both can be walked. */
+export { sealedRowOf, recordEntryBody } from './recordChain.js';