@evolu/common 6.0.1-preview.3 → 6.0.1-preview.30

package/dist/src/Console.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Console.d.ts","sourceRoot":"","sources":["../../src/Console.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH;;;GAGG;AACH,MAAM,WAAW,OAAO;IACtB,sEAAsE;IACtE,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,uCAAuC;IACvC,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;IAEnC,2DAA2D;IAC3D,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;IAEpC,gCAAgC;IAChC,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;IAEpC,+BAA+B;IAC/B,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;IAErC,8BAA8B;IAC9B,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;IAErC,4CAA4C;IAC5C,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAE/B,6CAA6C;IAC7C,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAElC,2DAA2D;IAC3D,GAAG,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,GAAG,KAAK,IAAI,CAAC;IAE1C,uCAAuC;IACvC,KAAK,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE,UAAU,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC;IAE9D,yEAAyE;IACzE,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAEhC,6CAA6C;IAC7C,UAAU,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAErC,qEAAqE;IACrE,MAAM,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,cAAc,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;IAE9E,0DAA0D;IAC1D,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;IAEvD,oDAAoD;IACpD,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,cAAc,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;CAC/D;AAED,6DAA6D;AAC7D,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,2DAA2D;AAC3D,eAAO,MAAM,aAAa,GAAI,SAAQ,aAAkB,KAAG,OAgE1D,CAAC"}
+{"version":3,"file":"Console.d.ts","sourceRoot":"","sources":["../../src/Console.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH;;;GAGG;AACH,MAAM,WAAW,OAAO;IACtB,sEAAsE;IACtE,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,uCAAuC;IACvC,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;IAEnC,2DAA2D;IAC3D,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;IAEpC,gCAAgC;IAChC,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;IAEpC,+BAA+B;IAC/B,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;IAErC,8BAA8B;IAC9B,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;IAErC,4CAA4C;IAC5C,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAE/B,0DAA0D;IAC1D,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;IAEvD,6CAA6C;IAC7C,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAElC,2DAA2D;IAC3D,GAAG,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,GAAG,KAAK,IAAI,CAAC;IAE1C,uCAAuC;IACvC,KAAK,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE,UAAU,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC;IAE9D,yEAAyE;IACzE,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAEhC,6CAA6C;IAC7C,UAAU,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAErC,qEAAqE;IACrE,MAAM,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,cAAc,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;IAE9E,oDAAoD;IACpD,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,cAAc,EAAE,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC;CAC/D;AAED,6DAA6D;AAC7D,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,aAAa;IAC5B;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;CAClC;AAED,2DAA2D;AAC3D,eAAO,MAAM,aAAa,GAAI,SAAQ,aAAkB,KAAG,OAgE1D,CAAC;AAEF,MAAM,WAAW,qBAAsB,SAAQ,aAAa;IAC1D;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,EAAE,UAAU,GAAG,UAAU,CAAC;CACjD;AAED,0DAA0D;AAC1D,eAAO,MAAM,qBAAqB,GAChC,SAAQ,qBAAqD,KAC5D,OAmDF,CAAC"}

package/dist/src/Console.js

@@ -13,14 +13,28 @@
  * ### Example
  *
  * ```ts
- * deps.console.log("[db]", "send data message", protocolMessage);
+ * deps.console.log("[evolu]", "createEvoluInstance", { name });
  * ```
  *
  * **Tip**: In browser dev tools, you can filter logs by tag (e.g., `[db]`) to
- * quickly find relevant messages.
+ * quickly find relevant messages. In Node.js, use `grep` to filter output:
  *
- * **Warning**: If you encounter platform-specific issues or missing methods,
- * please contribute a PR with details about the environment and behavior.
+ * ```bash
+ * node app.js | grep "\[relay\]"         # Show only relay logs
+ * node app.js | grep -E "\[db\]|\[sql\]" # Show db and sql logs
+ * node app.js | grep -v "\[debug\]"      # Hide debug logs
+ * ```
+ *
+ * Or add to package.json scripts:
+ *
+ * ```json
+ * {
+ *   "scripts": {
+ *     "dev:relay": "node app.js | grep \"\\[relay\\]\"",
+ *     "dev:db": "node app.js | grep -E \"\\[db\\]|\\[sql\\]\""
+ *   }
+ * }
+ * ```
  *
  * @module
  */
@@ -58,6 +72,11 @@ export const createConsole = (config = {}) => {
             if (instance.enabled)
                 console.time(label);
         },
+        timeLog: (label, ...data) => {
+            // eslint-disable-next-line no-console, @typescript-eslint/no-unsafe-argument
+            if (instance.enabled)
+                console.timeLog(label, ...data);
+        },
         timeEnd: (label) => {
             // eslint-disable-next-line no-console
             if (instance.enabled)
@@ -88,11 +107,6 @@ export const createConsole = (config = {}) => {
             if (instance.enabled)
                 console.assert(value, message, ...optionalParams);
         },
-        timeLog: (label, ...data) => {
-            // eslint-disable-next-line no-console, @typescript-eslint/no-unsafe-argument
-            if (instance.enabled)
-                console.timeLog(label, ...data);
-        },
         trace: (message, ...optionalParams) => {
             // eslint-disable-next-line no-console, @typescript-eslint/no-unsafe-argument
             if (instance.enabled)
@@ -101,3 +115,52 @@ export const createConsole = (config = {}) => {
     };
     return instance;
 };
+/** Creates a console instance with timestamp prefixes. */
+export const createConsoleWithTime = (config = { timestampType: "relative" }) => {
+    const console = createConsole(config);
+    const startTime = performance.now();
+    const getTimestamp = () => {
+        if (config.timestampType === "relative") {
+            const elapsed = (performance.now() - startTime) / 1000;
+            // Format for better readability at different time scales
+            if (elapsed < 60) {
+                // Under 1 minute: show seconds with millisecond precision
+                return `+${elapsed.toFixed(3)}s`;
+            }
+            else if (elapsed < 3600) {
+                // 1 minute to 1 hour: show minutes and seconds with millisecond precision
+                const minutes = Math.floor(elapsed / 60);
+                const seconds = (elapsed % 60).toFixed(3);
+                return `+${minutes}m${seconds}s`;
+            }
+            else {
+                // Over 1 hour: show hours, minutes, and seconds with millisecond precision
+                const hours = Math.floor(elapsed / 3600);
+                const minutes = Math.floor((elapsed % 3600) / 60);
+                const seconds = ((elapsed % 3600) % 60).toFixed(3);
+                return `+${hours}h${minutes}m${seconds}s`;
+            }
+        }
+        else {
+            // Absolute time - format as HH:MM:SS.mmm
+            const now = new Date();
+            const hours = now.getHours().toString().padStart(2, "0");
+            const minutes = now.getMinutes().toString().padStart(2, "0");
+            const seconds = now.getSeconds().toString().padStart(2, "0");
+            const milliseconds = now.getMilliseconds().toString().padStart(3, "0");
+            return `${hours}:${minutes}:${seconds}.${milliseconds}`;
+        }
+    };
+    const withTimestamp = (fn) => (...args) => {
+        // eslint-disable-next-line @typescript-eslint/no-unsafe-argument
+        fn(`[${getTimestamp()}]`, ...args);
+    };
+    // Override methods that should have timestamps
+    console.log = withTimestamp(console.log);
+    console.info = withTimestamp(console.info);
+    console.warn = withTimestamp(console.warn);
+    console.error = withTimestamp(console.error);
+    console.debug = withTimestamp(console.debug);
+    console.trace = withTimestamp(console.trace);
+    return console;
+};

package/dist/src/Crypto.d.ts

@@ -1,49 +1,64 @@
-/**
- * 🔒
- *
- * @module
- */
 import { Result } from "./Result.js";
-import { Id, Mnemonic, NonNegativeInt } from "./Type.js";
-import { Brand } from "./Types.js";
-/** `Uint8Array` created by {@link createRandomBytes}. */
-export type RandomBytes = Uint8Array & Brand<"RandomBytes">;
-export type CreateRandomBytes = (bytesLength?: number) => RandomBytes;
-export interface CreateRandomBytesDep {
-    readonly createRandomBytes: CreateRandomBytes;
+import { NonNegativeInt } from "./Type.js";
+export interface RandomBytes {
+    /**
+     * Creates cryptographically secure random bytes with type-safe length
+     * branding.
+     *
+     * Uses the operating system's cryptographically secure random number
+     * generator (crypto.getRandomValues) to generate high-quality entropy
+     * suitable for cryptographic operations.
+     *
+     * ### Type Safety
+     *
+     * Returns specific branded types for common sizes:
+     *
+     * - `Random16` for 16-byte values (128 bits)
+     * - `Random32` for 32-byte values (256 bits)
+     * - `Random64` for 64-byte values (512 bits)
+     * - `Random` for any other size
+     *
+     * ### Example
+     *
+     * ```ts
+     * const nonce = randomBytes.create(16); // Type: Random16
+     * const key = randomBytes.create(32); // Type: Random32
+     * const seed = randomBytes.create(64); // Type: Random64
+     * const custom = randomBytes.create(48); // Type: Random
+     * ```
+     */
+    create(bytesLength: 16): Entropy16;
+    create(bytesLength: 32): Entropy32;
+    create(bytesLength: 64): Entropy64;
+    create(bytesLength: number): Entropy;
 }
-/** Cryptographically secure PRNG. Uses internal OS-level crypto.getRandomValues. */
-export declare const createRandomBytes: CreateRandomBytes;
-export type CreateMnemonic = () => Mnemonic;
-export interface CreateMnemonicDep {
-    readonly createMnemonic: CreateMnemonic;
+export interface RandomBytesDep {
+    readonly randomBytes: RandomBytes;
 }
-export declare const createEnglishMnemonic: CreateMnemonic;
-export type MnemonicSeed = Uint8Array & Brand<"MnemonicSeed">;
-export declare const mnemonicToMnemonicSeed: (mnemonic: Mnemonic) => MnemonicSeed;
+declare const Entropy: import("./Type.js").BrandType<import("./Type.js").Type<"Uint8Array", Uint8Array<ArrayBufferLike>, Uint8Array<ArrayBufferLike>, import("./Type.js").Uint8ArrayError, Uint8Array<ArrayBufferLike>, import("./Type.js").Uint8ArrayError>, "Entropy", import("./Type.js").BrandWithoutRefineError<"Entropy", import("./Type.js").Uint8ArrayError>, never>;
+type Entropy = typeof Entropy.Type;
+export declare const Entropy16: import("./Type.js").BrandType<import("./Type.js").Type<"Brand", Uint8Array<ArrayBufferLike> & import("./Brand.js").Brand<"Entropy">, Uint8Array<ArrayBufferLike>, import("./Type.js").BrandWithoutRefineError<"Entropy", import("./Type.js").Uint8ArrayError>, Uint8Array<ArrayBufferLike>, never>, "Length16", import("./Type.js").LengthError<16>, import("./Type.js").BrandWithoutRefineError<"Entropy", import("./Type.js").Uint8ArrayError>>;
+export type Entropy16 = typeof Entropy16.Type;
+export declare const Entropy32: import("./Type.js").BrandType<import("./Type.js").Type<"Brand", Uint8Array<ArrayBufferLike> & import("./Brand.js").Brand<"Entropy">, Uint8Array<ArrayBufferLike>, import("./Type.js").BrandWithoutRefineError<"Entropy", import("./Type.js").Uint8ArrayError>, Uint8Array<ArrayBufferLike>, never>, "Length32", import("./Type.js").LengthError<32>, import("./Type.js").BrandWithoutRefineError<"Entropy", import("./Type.js").Uint8ArrayError>>;
+export type Entropy32 = typeof Entropy32.Type;
+export declare const Entropy64: import("./Type.js").BrandType<import("./Type.js").Type<"Brand", Uint8Array<ArrayBufferLike> & import("./Brand.js").Brand<"Entropy">, Uint8Array<ArrayBufferLike>, import("./Type.js").BrandWithoutRefineError<"Entropy", import("./Type.js").Uint8ArrayError>, Uint8Array<ArrayBufferLike>, never>, "Length64", import("./Type.js").LengthError<64>, import("./Type.js").BrandWithoutRefineError<"Entropy", import("./Type.js").Uint8ArrayError>>;
+export type Entropy64 = typeof Entropy64.Type;
+export declare const createRandomBytes: () => RandomBytes;
 /**
  * SLIP21.
  *
  * https://github.com/satoshilabs/slips/blob/master/slip-0021.md
  */
-export declare const createSlip21: (seed: MnemonicSeed, path: ReadonlyArray<string>) => Uint8Array;
+export declare const createSlip21: (seed: Entropy16 | Entropy32 | Entropy64, path: ReadonlyArray<string | number>) => Entropy32;
 /**
- * Creates a 21-character Base64URL ID (also known as nanoid) from a SLIP-21
- * derived key.
- *
- * Reduces the 256-bit SLIP-21 output to 126 bits (21 chars × 6 bits) for a
- * compact, human-readable, and shareable identifier suitable for UI display or
- * URL use. While this lowers entropy, 126 bits remains cryptographically secure
- * for uniqueness and unpredictability in most applications (comparable to
- * UUIDv4's 122 bits).
+ * Derives a single node in the SLIP-21 hierarchical key derivation.
  *
- * See https://github.com/satoshilabs/slips/blob/master/slip-0021.md
+ * @see {@link createSlip21}
  */
-export declare const createSlip21Id: (seed: MnemonicSeed, path: ReadonlyArray<string>) => Id;
+export declare const deriveSlip21Node: (label: string, parentNode: Entropy64) => Entropy64;
 /** The encryption key for {@link SymmetricCrypto}. */
-export declare const EncryptionKey: import("./Type.js").BrandType<import("./Type.js").BrandType<import("./Type.js").Type<"Uint8Array", Uint8Array<ArrayBufferLike>, Uint8Array<ArrayBufferLike>, import("./Type.js").Uint8ArrayError, Uint8Array<ArrayBufferLike>, import("./Type.js").Uint8ArrayError>, "Length32", import("./Type.js").LengthError<32>, import("./Type.js").Uint8ArrayError>, "EncryptionKey", import("./Type.js").BrandWithoutRefineError<"EncryptionKey", import("./Type.js").Uint8ArrayError | import("./Type.js").LengthError<32>>, never>;
+export declare const EncryptionKey: import("./Type.js").BrandType<import("./Type.js").BrandType<import("./Type.js").Type<"Brand", Uint8Array<ArrayBufferLike> & import("./Brand.js").Brand<"Entropy">, Uint8Array<ArrayBufferLike>, import("./Type.js").BrandWithoutRefineError<"Entropy", import("./Type.js").Uint8ArrayError>, Uint8Array<ArrayBufferLike>, never>, "Length32", import("./Type.js").LengthError<32>, import("./Type.js").BrandWithoutRefineError<"Entropy", import("./Type.js").Uint8ArrayError>>, "EncryptionKey", import("./Type.js").BrandWithoutRefineError<"EncryptionKey", import("./Type.js").BrandWithoutRefineError<"Entropy", import("./Type.js").Uint8ArrayError> | import("./Type.js").LengthError<32>>, never>;
 export type EncryptionKey = typeof EncryptionKey.Type;
-export declare const createEncryptionKey: (seed: MnemonicSeed) => EncryptionKey;
 /** Symmetric cryptography. */
 export interface SymmetricCrypto {
     readonly nonceLength: NonNegativeInt;
@@ -65,7 +80,7 @@ export interface SymmetricCryptoDecryptError {
  *
  * https://github.com/paulmillr/noble-ciphers?tab=readme-ov-file#which-cipher-should-i-pick
  */
-export declare const createSymmetricCrypto: (deps: CreateRandomBytesDep) => SymmetricCrypto;
+export declare const createSymmetricCrypto: (deps: RandomBytesDep) => SymmetricCrypto;
 /**
  * Returns the PADMÉ padded length for a given input length.
  *
@@ -79,4 +94,16 @@ export declare const padmePaddedLength: (length: NonNegativeInt) => NonNegativeI
  * {@link padmePaddedLength}.
  */
 export declare const padmePaddingLength: (length: NonNegativeInt) => NonNegativeInt;
+/**
+ * Performs a timing-safe comparison of two Uint8Arrays. Returns true if they
+ * are equal, false otherwise. Takes constant time regardless of where the
+ * arrays differ.
+ *
+ * @see https://nodejs.org/api/crypto.html#cryptotimingsafeequala-b
+ */
+export type TimingSafeEqual = (a: Uint8Array, b: Uint8Array) => boolean;
+export interface TimingSafeEqualDep {
+    readonly timingSafeEqual: TimingSafeEqual;
+}
+export {};
 //# sourceMappingURL=Crypto.d.ts.map

package/dist/src/Crypto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Crypto.d.ts","sourceRoot":"","sources":["../../src/Crypto.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AASH,OAAO,EAAc,MAAM,EAAW,MAAM,aAAa,CAAC;AAC1D,OAAO,EAEL,EAAE,EAEF,QAAQ,EACR,cAAc,EAEf,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEnC,yDAAyD;AACzD,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,KAAK,CAAC,aAAa,CAAC,CAAC;AAE5D,MAAM,MAAM,iBAAiB,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,KAAK,WAAW,CAAC;AAEtE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;CAC/C;AAED,oFAAoF;AACpF,eAAO,MAAM,iBAAiB,EAAE,iBACS,CAAC;AAE1C,MAAM,MAAM,cAAc,GAAG,MAAM,QAAQ,CAAC;AAE5C,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;CACzC;AAED,eAAO,MAAM,qBAAqB,EAAE,cACe,CAAC;AAEpD,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC;AAE9D,eAAO,MAAM,sBAAsB,GAAI,UAAU,QAAQ,KAAG,YACR,CAAC;AAErD;;;;GAIG;AACH,eAAO,MAAM,YAAY,GACvB,MAAM,YAAY,EAClB,MAAM,aAAa,CAAC,MAAM,CAAC,KAC1B,UAUF,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,cAAc,GACzB,MAAM,YAAY,EAClB,MAAM,aAAa,CAAC,MAAM,CAAC,KAC1B,EAUF,CAAC;AAEF,sDAAsD;AACtD,eAAO,MAAM,aAAa,8fAAiD,CAAC;AAC5E,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC,IAAI,CAAC;AAEtD,eAAO,MAAM,mBAAmB,GAAI,MAAM,YAAY,KAAG,aACS,CAAC;AAEnE,8BAA8B;AAC9B,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;IAErC,QAAQ,CAAC,OAAO,EAAE,CAChB,SAAS,EAAE,UAAU,EACrB,aAAa,EAAE,aAAa,KACzB;QACH,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;QAC3B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;KACjC,CAAC;IAEF,QAAQ,CAAC,OAAO,EAAE,CAChB,UAAU,EAAE,UAAU,EACtB,aAAa,EAAE,aAAa,EAC5B,KAAK,EAAE,UAAU,KACd,MAAM,CAAC,UAAU,EAAE,2BAA2B,CAAC,CAAC;CACtD;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;CAC3C;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,IAAI,EAAE,6BAA6B,CAAC;IAC7C,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAED;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,GAChC,MAAM,oBAAoB,KACzB,eAyBF,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,GAAI,QAAQ,cAAc,KAAG,cAO1D,CAAC;AAEF;;;GAGG;AAEH,eAAO,MAAM,kBAAkB,GAAI,QAAQ,cAAc,KAAG,cAE3D,CAAC"}
+{"version":3,"file":"Crypto.d.ts","sourceRoot":"","sources":["../../src/Crypto.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,MAAM,EAAW,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAiB,cAAc,EAAc,MAAM,WAAW,CAAC;AAEtE,MAAM,WAAW,WAAW;IAC1B;;;;;;;;;;;;;;;;;;;;;;;;;OAyBG;IACH,MAAM,CAAC,WAAW,EAAE,EAAE,GAAG,SAAS,CAAC;IACnC,MAAM,CAAC,WAAW,EAAE,EAAE,GAAG,SAAS,CAAC;IACnC,MAAM,CAAC,WAAW,EAAE,EAAE,GAAG,SAAS,CAAC;IACnC,MAAM,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC;CACtC;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;CACnC;AAED,QAAA,MAAM,OAAO,uVAA+B,CAAC;AAC7C,KAAK,OAAO,GAAG,OAAO,OAAO,CAAC,IAAI,CAAC;AAEnC,eAAO,MAAM,SAAS,mbAAsB,CAAC;AAC7C,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC,IAAI,CAAC;AAE9C,eAAO,MAAM,SAAS,mbAAsB,CAAC;AAC7C,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC,IAAI,CAAC;AAE9C,eAAO,MAAM,SAAS,mbAAsB,CAAC;AAC7C,MAAM,MAAM,SAAS,GAAG,OAAO,SAAS,CAAC,IAAI,CAAC;AAE9C,eAAO,MAAM,iBAAiB,QAAO,WAEnC,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,YAAY,GACvB,MAAM,SAAS,GAAG,SAAS,GAAG,SAAS,EACvC,MAAM,aAAa,CAAC,MAAM,GAAG,MAAM,CAAC,KACnC,SAaF,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,GAC3B,OAAO,MAAM,EACb,YAAY,SAAS,KACpB,SAMF,CAAC;AAEF,sDAAsD;AACtD,eAAO,MAAM,aAAa,2qBAAoC,CAAC;AAC/D,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,CAAC,IAAI,CAAC;AAEtD,8BAA8B;AAC9B,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,WAAW,EAAE,cAAc,CAAC;IAErC,QAAQ,CAAC,OAAO,EAAE,CAChB,SAAS,EAAE,UAAU,EACrB,aAAa,EAAE,aAAa,KACzB;QACH,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;QAC3B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;KACjC,CAAC;IAEF,QAAQ,CAAC,OAAO,EAAE,CAChB,UAAU,EAAE,UAAU,EACtB,aAAa,EAAE,aAAa,EAC5B,KAAK,EAAE,UAAU,KACd,MAAM,CAAC,UAAU,EAAE,2BAA2B,CAAC,CAAC;CACtD;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;CAC3C;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,IAAI,EAAE,6BAA6B,CAAC;IAC7C,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAED;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,GAChC,MAAM,cAAc,KACnB,eAyBF,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,GAAI,QAAQ,cAAc,KAAG,cAO1D,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,kBAAkB,GAAI,QAAQ,cAAc,KAAG,cAE3D,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,KAAK,OAAO,CAAC;AAExE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;CAC3C"}

package/dist/src/Crypto.js

@@ -3,70 +3,57 @@
  *
  * @module
  */
-import { xchacha20poly1305 } from "@noble/ciphers/chacha";
-import { hmac } from "@noble/hashes/hmac";
-import { sha512 } from "@noble/hashes/sha2";
-import { randomBytes } from "@noble/hashes/utils";
-import * as bip39 from "@scure/bip39";
-import { wordlist } from "@scure/bip39/wordlists/english";
-import { urlAlphabet } from "nanoid";
-import { getOrThrow, trySync } from "./Result.js";
-import { brand, length, NonNegativeInt, Uint8Array, } from "./Type.js";
-/** Cryptographically secure PRNG. Uses internal OS-level crypto.getRandomValues. */
-export const createRandomBytes = (bytesLength = 32) => randomBytes(bytesLength);
-export const createEnglishMnemonic = () => bip39.generateMnemonic(wordlist, 128);
-export const mnemonicToMnemonicSeed = (mnemonic) => bip39.mnemonicToSeedSync(mnemonic);
+import { xchacha20poly1305 } from "@noble/ciphers/chacha.js";
+import { hmac } from "@noble/hashes/hmac.js";
+import { sha512 } from "@noble/hashes/sha2.js";
+import { randomBytes, utf8ToBytes } from "@noble/hashes/utils.js";
+import { trySync } from "./Result.js";
+import { brand, length, NonNegativeInt, Uint8Array } from "./Type.js";
+const Entropy = brand("Entropy", Uint8Array);
+export const Entropy16 = length(16)(Entropy);
+export const Entropy32 = length(32)(Entropy);
+export const Entropy64 = length(64)(Entropy);
+export const createRandomBytes = () => ({
+    create: randomBytes,
+});
 /**
  * SLIP21.
  *
  * https://github.com/satoshilabs/slips/blob/master/slip-0021.md
  */
 export const createSlip21 = (seed, path) => {
-    let m = hmac(sha512, "Symmetric key seed", seed);
-    for (const component of path) {
-        const p = new TextEncoder().encode(component);
-        const e = new globalThis.Uint8Array(p.byteLength + 1);
-        e[0] = 0;
-        e.set(p, 1);
-        m = hmac(sha512, m.slice(0, 32), e);
+    let currentNode = hmac(sha512, utf8ToBytes("Symmetric key seed"), seed);
+    for (const element of path) {
+        const label = typeof element === "number" ? element.toString() : element;
+        currentNode = deriveSlip21Node(label, currentNode);
     }
-    return m.slice(32, 64);
+    return currentNode.slice(32, 64);
 };
 /**
- * Creates a 21-character Base64URL ID (also known as nanoid) from a SLIP-21
- * derived key.
+ * Derives a single node in the SLIP-21 hierarchical key derivation.
  *
- * Reduces the 256-bit SLIP-21 output to 126 bits (21 chars × 6 bits) for a
- * compact, human-readable, and shareable identifier suitable for UI display or
- * URL use. While this lowers entropy, 126 bits remains cryptographically secure
- * for uniqueness and unpredictability in most applications (comparable to
- * UUIDv4's 122 bits).
- *
- * See https://github.com/satoshilabs/slips/blob/master/slip-0021.md
+ * @see {@link createSlip21}
  */
-export const createSlip21Id = (seed, path) => {
-    const slip21 = createSlip21(seed, path);
-    let id = "";
-    // Convert the key to the Id/NanoId/Base64Url format.
-    for (let i = 0; i < 21; i++) {
-        id = (id + urlAlphabet[slip21[i] & 63]);
-    }
-    return id;
+export const deriveSlip21Node = (label, parentNode) => {
+    const labelBytes = utf8ToBytes(label);
+    const message = new globalThis.Uint8Array(labelBytes.byteLength + 1);
+    message[0] = 0;
+    message.set(labelBytes, 1);
+    return hmac(sha512, parentNode.slice(0, 32), message);
 };
 /** The encryption key for {@link SymmetricCrypto}. */
-export const EncryptionKey = brand("EncryptionKey", length(32)(Uint8Array));
-export const createEncryptionKey = (seed) => createSlip21(seed, ["Evolu", "Encryption Key"]);
+export const EncryptionKey = brand("EncryptionKey", Entropy32);
 /**
  * XChaCha20-Poly1305 encryption
  *
  * https://github.com/paulmillr/noble-ciphers?tab=readme-ov-file#which-cipher-should-i-pick
  */
 export const createSymmetricCrypto = (deps) => {
-    const nonceLength = getOrThrow(NonNegativeInt.from(24));
+    const nonceLength = NonNegativeInt.orThrow(24);
     const symmetricCrypto = {
         nonceLength,
         encrypt: (plaintext, encryptionKey) => {
-            const nonce = deps.createRandomBytes(nonceLength);
+            const nonce = deps.randomBytes.create(nonceLength);
             const ciphertext = xchacha20poly1305(encryptionKey, nonce).encrypt(plaintext);
             return { nonce, ciphertext };
         },
@@ -86,17 +73,17 @@ export const createSymmetricCrypto = (deps) => {
  */
 export const padmePaddedLength = (length) => {
     if (length <= 0)
-        return 0;
+        return NonNegativeInt.orThrow(0);
     const e = 31 - Math.clz32(length >>> 0);
     const s = 32 - Math.clz32(e >>> 0);
     const z = Math.max(0, e - s);
     const mask = (1 << z) - 1;
-    return ((length + mask) & ~mask);
+    return NonNegativeInt.orThrow((length + mask) & ~mask);
 };
 /**
  * Returns the PADMÉ padding length for a given input length. Uses
  * {@link padmePaddedLength}.
  */
 export const padmePaddingLength = (length) => {
-    return (padmePaddedLength(length) - length);
+    return NonNegativeInt.orThrow(padmePaddedLength(length) - length);
 };

package/dist/src/Evolu/Db.d.ts

@@ -1,37 +1,150 @@
 import { NonEmptyReadonlyArray } from "../Array.js";
 import { CallbackId } from "../Callbacks.js";
-import { ConsoleDep } from "../Console.js";
-import { CreateMnemonicDep, CreateRandomBytesDep, SymmetricCryptoDecryptError } from "../Crypto.js";
+import { ConsoleConfig, ConsoleDep } from "../Console.js";
+import { EncryptionKey, RandomBytesDep, SymmetricCryptoDecryptError } from "../Crypto.js";
 import { TransferableError } from "../Error.js";
-import { NanoIdLibDep } from "../NanoId.js";
 import { RandomDep } from "../Random.js";
-import { Ref } from "../Ref.js";
-import { Result } from "../Result.js";
-import { CreateSqliteDriverDep, SafeSql, SqliteDep, SqliteError, SqliteRow } from "../Sqlite.js";
+import { CreateSqliteDriverDep, SqliteError } from "../Sqlite.js";
 import { TimeDep } from "../Time.js";
 import { Id, Mnemonic, SimpleName } from "../Type.js";
+import { CreateWebSocketDep } from "../WebSocket.js";
 import { Worker } from "../Worker.js";
-import { Config } from "./Config.js";
 import { QueryPatches } from "./Diff.js";
-import { AppOwner, OwnerRow } from "./Owner.js";
-import { Base64Url256, BinaryOwnerId, CrdtMessage, DbChange, ProtocolError, Storage } from "./Protocol.js";
+import { AppOwner, OwnerTransport } from "./Owner.js";
+import { ProtocolError } from "./Protocol.js";
 import { Query } from "./Query.js";
-import { SqliteStorageBase } from "./Storage.js";
-import { CreateSyncDep } from "./Sync.js";
-import { Timestamp, TimestampError } from "./Timestamp.js";
-export interface DbSchema {
-    readonly tables: ReadonlyArray<DbTable>;
-    readonly indexes: ReadonlyArray<DbIndex>;
+import { DbSchema, MutationChange } from "./Schema.js";
+import { SyncOwner } from "./Sync.js";
+import { TimestampConfig, TimestampError } from "./Timestamp.js";
+export interface DbConfig extends ConsoleConfig, TimestampConfig {
+    /**
+     * The name of the Evolu instance. Evolu is multitenant - it can run multiple
+     * instances concurrently. Each instance must have a unique name.
+     *
+     * The instance name is used as the SQLite database filename for persistent
+     * storage, ensuring that database files are separated and invisible to each
+     * other.
+     *
+     * The default value is: `Evolu`.
+     *
+     * ### Example
+     *
+     * ```ts
+     * // name: SimpleName.orThrow("MyApp")
+     * ```
+     */
+    readonly name: SimpleName;
+    /**
+     * Transport configuration for data sync and backup. Supports single transport
+     * or multiple transports simultaneously for redundancy.
+     *
+     * **Redundancy:** The ideal setup uses at least two completely independent
+     * relays - for example, a home relay and a geographically separate relay.
+     * Data is sent to both relays simultaneously, providing true redundancy
+     * similar to using two independent clouds. This eliminates vendor lock-in and
+     * ensures your app continues working regardless of circumstances - whether
+     * home relay hardware is stolen or a remote relay provider shuts down.
+     *
+     * Currently supports:
+     *
+     * - WebSocket: Real-time bidirectional communication with relay servers
+     *
+     * Empty transports create local-only instances. Transports can be dynamically
+     * added and removed for any owner (including {@link AppOwner}) via
+     * {@link Evolu#useOwner}.
+     *
+     * Use {@link createOwnerWebSocketTransport} to create WebSocket transport
+     * configurations with proper URL formatting and {@link OwnerId} inclusion. The
+     * {@link OwnerId} in the URL enables relay authentication, allowing relay
+     * servers to control access (e.g., for paid tiers or private instances).
+     *
+     * The default value is:
+     *
+     * `{ type: "WebSocket", url: "wss://free.evoluhq.com" }`.
+     *
+     * ### Example
+     *
+     * ```ts
+     * // Single WebSocket relay
+     * transports: [{ type: "WebSocket", url: "wss://relay1.example.com" }];
+     *
+     * // Multiple WebSocket relays for redundancy
+     * transports: [
+     *   { type: "WebSocket", url: "wss://relay1.example.com" },
+     *   { type: "WebSocket", url: "wss://relay2.example.com" },
+     *   { type: "WebSocket", url: "wss://relay3.example.com" },
+     * ];
+     *
+     * // Local-only instance (no sync) - useful for device settings or when relay
+     * // URL will be provided later (e.g., after authentication), allowing users
+     * // to work offline before the app connects
+     * transports: [];
+     *
+     * // Using createOwnerWebSocketTransport helper for relay authentication
+     * transports: [
+     *   createOwnerWebSocketTransport({
+     *     url: "ws://localhost:4000",
+     *     ownerId,
+     *   }),
+     * ];
+     * ```
+     */
+    readonly transports: ReadonlyArray<OwnerTransport>;
+    /**
+     * External AppOwner to use when creating Evolu instance. Use this when you
+     * want to manage AppOwner creation and persistence externally (e.g., with
+     * your own authentication system). If omitted, Evolu will automatically
+     * create and persist an AppOwner locally.
+     *
+     * For device-specific settings and account management state, we can use a
+     * separate local-only Evolu instance via `transports: []`.
+     *
+     * ### Example
+     *
+     * ```ts
+     * const ConfigId = id("Config");
+     * type ConfigId = typeof ConfigId.Type;
+     *
+     * const DeviceSchema = {
+     *   config: {
+     *     id: ConfigId,
+     *     key: NonEmptyString50,
+     *     value: NonEmptyString50,
+     *   },
+     * };
+     *
+     * // Local-only instance for device settings (no sync)
+     * const deviceEvolu = createEvolu(evoluReactWebDeps)(DeviceSchema, {
+     *   name: SimpleName.orThrow("MyApp-Device"),
+     *   transports: [], // No sync - stays local to device
+     * });
+     *
+     * // Main synced instance for user data
+     * const evolu = createEvolu(evoluReactWebDeps)(MainSchema, {
+     *   name: SimpleName.orThrow("MyApp"),
+     *   // Default transports for sync
+     * });
+     * ```
+     */
+    readonly externalAppOwner?: AppOwner;
+    /**
+     * Use in-memory SQLite database instead of persistent storage. Useful for
+     * testing or temporary data that doesn't need persistence.
+     *
+     * In-memory databases exist only in RAM and are completely destroyed when the
+     * process ends, making them forensically safe for sensitive data.
+     *
+     * The default value is: `false`.
+     */
+    readonly inMemory?: boolean;
+    /**
+     * Encryption key for the SQLite database.
+     *
+     * @experimental
+     */
+    readonly encryptionKey?: EncryptionKey;
 }
-export interface DbTable {
-    readonly name: Base64Url256;
-    readonly columns: ReadonlyArray<Base64Url256>;
-}
-export declare const DbIndex: import("../Type.js").ObjectType<{
-    name: import("../Type.js").Type<"String", string, string, import("../Type.js").StringError, string, import("../Type.js").StringError>;
-    sql: import("../Type.js").Type<"String", string, string, import("../Type.js").StringError, string, import("../Type.js").StringError>;
-}>;
-export type DbIndex = typeof DbIndex.Type;
+export declare const defaultDbConfig: DbConfig;
 export type DbWorker = Worker<DbWorkerInput, DbWorkerOutput>;
 export type CreateDbWorker = (name: SimpleName) => DbWorker;
 export interface CreateDbWorkerDep {
@@ -39,13 +152,14 @@ export interface CreateDbWorkerDep {
 }
 export type DbWorkerInput = {
     readonly type: "init";
-    readonly config: Config;
+    readonly config: DbConfig;
     readonly dbSchema: DbSchema;
-    readonly initialData: ReadonlyArray<DbChange>;
+} | {
+    readonly type: "getAppOwner";
 } | {
     readonly type: "mutate";
     readonly tabId: Id;
-    readonly changes: NonEmptyReadonlyArray<DbChange>;
+    readonly changes: NonEmptyReadonlyArray<MutationChange>;
     readonly onCompleteIds: ReadonlyArray<CallbackId>;
     readonly subscribedQueries: ReadonlyArray<Query>;
 } | {
@@ -66,20 +180,24 @@ export type DbWorkerInput = {
 } | {
     readonly type: "export";
     readonly onCompleteId: CallbackId;
+} | {
+    readonly type: "useOwner";
+    readonly use: boolean;
+    readonly owner: SyncOwner;
 };
 export type DbWorkerOutput = {
-    readonly type: "onInit";
-    readonly owner: AppOwner;
-} | {
     readonly type: "onError";
-    readonly error: SqliteError | TransferableError | TimestampError | ProtocolError | SymmetricCryptoDecryptError;
+    readonly error: ProtocolError | SqliteError | SymmetricCryptoDecryptError | TimestampError | TransferableError;
+} | {
+    readonly type: "onGetAppOwner";
+    readonly appOwner: AppOwner;
 } | {
-    readonly type: "onChange";
+    readonly type: "onQueryPatches";
     readonly tabId: Id;
-    readonly patches: ReadonlyArray<QueryPatches>;
+    readonly queryPatches: ReadonlyArray<QueryPatches>;
     readonly onCompleteIds: ReadonlyArray<CallbackId>;
 } | {
-    readonly type: "onReceive";
+    readonly type: "refreshQueries";
     readonly tabId?: Id;
 } | {
     readonly type: "onReset";
@@ -90,37 +208,12 @@ export type DbWorkerOutput = {
     readonly onCompleteId: CallbackId;
     readonly file: Uint8Array;
 };
-export type DbWorkerPlatformDeps = CreateSqliteDriverDep & CreateSyncDep & ConsoleDep & TimeDep & RandomDep & NanoIdLibDep & CreateMnemonicDep & CreateRandomBytesDep;
-export interface OwnerRowRefDep {
-    readonly ownerRowRef: Ref<OwnerRow>;
+export type DbWorkerPlatformDeps = ConsoleDep & CreateSqliteDriverDep & CreateWebSocketDep & RandomBytesDep & RandomDep & TimeDep;
+export interface PostMessageDep {
+    readonly postMessage: (message: DbWorkerOutput) => void;
 }
-export declare const createDbWorkerForPlatform: (platformDeps: DbWorkerPlatformDeps) => DbWorker;
-/**
- * Get the current database schema by reading SQLite metadata.
- *
- * TODO: Refactor out Evolu stuff and move it to Sqlite.
- */
-export declare const getDbSchema: (deps: SqliteDep) => ({ allIndexes }?: {
-    allIndexes?: boolean;
-}) => Result<DbSchema, SqliteError>;
-export interface DbSnapshot {
-    readonly schema: DbSchema;
-    readonly tables: Array<{
-        name: string;
-        rows: ReadonlyArray<SqliteRow>;
-    }>;
-}
-export declare const getDbSnapshot: (deps: SqliteDep) => DbSnapshot;
-export declare const createAppTable: (tableName: string, columns: ReadonlyArray<string>) => SafeSql;
-export declare const applyMessageToTimestampAndHistoryTables: (deps: SqliteDep & ClientStorageDep) => (ownerId: BinaryOwnerId, message: CrdtMessage) => Result<void, SqliteError>;
-export declare const maybeMigrateToVersion0: (deps: SqliteDep) => (schema: DbSchema) => Result<{
-    readonly messages: ReadonlyArray<CrdtMessage>;
-    readonly mnemonic: Mnemonic;
-    readonly lastTimestamp: Timestamp;
-} | null, SqliteError>;
-export interface ClientStorage extends SqliteStorageBase, Storage {
-}
-export interface ClientStorageDep {
-    readonly storage: ClientStorage;
+export interface AppOwnerDep {
+    readonly appOwner: AppOwner;
 }
+export declare const createDbWorkerForPlatform: (platformDeps: DbWorkerPlatformDeps) => DbWorker;
 //# sourceMappingURL=Db.d.ts.map