@evolu/common 8.9.0 → 8.11.0

package/dist/src/Binary.d.ts

@@ -1,254 +0,0 @@
-/**
- * Binary data handling and byte array utilities.
- *
- * Buffer-based decoding functions intentionally throw errors instead of
- * returning {@link Result}. This is a deliberate micro-optimization for Evolu
- * Protocol's hot paths: Result is inexpensive, but returning decoded values
- * directly avoids its success-case allocation, and using `Error` objects
- * preserves stack traces. In the future, we will try returning `Error` objects
- * in `Result` values to measure the real-world performance impact.
- *
- * @module
- */
-import { bytesToUtf8, utf8ToBytes } from "@noble/ciphers/utils.js";
-import type { FiniteNumber, JsonValue, NonNegativeInt, PositiveInt } from "./Type.ts";
-export { bytesToHex, concatBytes, hexToBytes } from "@noble/ciphers/utils.js";
-export { bytesToUtf8, utf8ToBytes };
-/**
- * Custom error for {@link Buffer}-related failures like premature end of data.
- * Provides better stack traces for debugging binary protocol issues.
- */
-export declare class BufferError extends Error {
-    constructor(message: string);
-}
-/**
- * A Buffer is a dynamic, resizable container for binary data, optimized for
- * scenarios where the final size is unknown. It grows exponentially (doubling
- * its capacity) to minimize memory reallocations and uses `subarray` for
- * efficient, copy-free data access in methods like `unwrap` and `shift`.
- *
- * ## Recommended Usage
- *
- * Create as few Buffers as possible—typically one main Buffer for the final
- * output. Temporary Buffers are allowed when necessary (e.g., for
- * variable-length headers), but avoid excessive allocations. Buffers can be
- * reused within functions by leveraging `reset` to clear contents while
- * preserving capacity, or `truncate` to adjust the length to a specific size,
- * reducing the need for new allocations. Pass Buffers to `encode*` functions to
- * append serialized data and use `decode*` functions to extract data.
- *
- * ### Example
- *
- * ```ts
- * import {
- *   assertEqual,
- *   assertErr,
- *   assertInstanceOf,
- *   createBuffer,
- *   createIdFromString,
- *   IdBytes,
- *   idBytesToId,
- *   idBytesTypeValueLength,
- *   idToIdBytes,
- *   NonNegativeInt,
- *   trySync,
- *   decodeNonNegativeInt,
- *   encodeNonNegativeInt,
- * } from "@evolu/common";
- *
- * const buffer = createBuffer();
- * const id = createIdFromString("buffer-example");
- * encodeNonNegativeInt(buffer, NonNegativeInt.orThrow(300));
- * buffer.extend(idToIdBytes(id));
- *
- * const decoder = createBuffer(buffer.unwrap());
- * assertEqual(decodeNonNegativeInt(decoder), 300);
- * const decodedId = idBytesToId(
- *   IdBytes.orThrow(decoder.shiftN(idBytesTypeValueLength)),
- * );
- * assertEqual(decodedId, id);
- * const result = trySync(() => decodeNonNegativeInt(decoder));
- * assertErr(result);
- * assertInstanceOf(result.error, Error);
- * assertEqual(result.error.message, "Buffer parse ended prematurely");
- * ```
- *
- * For more on exponential growth, see:
- * https://blog.mozilla.org/nnethercote/2014/11/04/please-grow-your-buffers-exponentially
- */
-export interface Buffer {
-    /** Returns the current capacity of the buffer. */
-    getCapacity: () => NonNegativeInt;
-    /** Returns the current number of bytes stored in the buffer. */
-    getLength: () => NonNegativeInt;
-    /**
-     * Appends binary data to the buffer, resizing if necessary. Throws if
-     * `arg.length` is not a non-negative safe integer.
-     */
-    extend: (arg: Uint8Array | ArrayLike<number>) => void;
-    /**
-     * Removes and returns the first byte. Throws an `Error` with message "Buffer
-     * parse ended prematurely" if the buffer is empty.
-     */
-    shift: () => NonNegativeInt;
-    /**
-     * Removes and returns the first `n` bytes. Throws an `Error` with message
-     * "Buffer parse ended prematurely" if fewer than `n` bytes remain.
-     */
-    shiftN: (n: NonNegativeInt) => Uint8Array;
-    /**
-     * Truncates the buffer to the specified length, discarding data from the end.
-     * Throws if the new length is greater than the current length.
-     */
-    truncate: (length: NonNegativeInt) => void;
-    /**
-     * Resets the buffer to its initial empty state, preserving its capacity.
-     *
-     * This allows efficient buffer reuse without reallocating memory. Use this
-     * when you want to clear the buffer and write new data, avoiding unnecessary
-     * allocations.
-     */
-    reset: () => void;
-    /**
-     * Returns a view of the buffer’s current data. Do not modify this array, as
-     * it directly alters the buffer’s internal state, potentially breaking
-     * subsequent operations.
-     */
-    unwrap: () => Uint8Array;
-}
-/** Creates a {@link Buffer} for efficient byte operations. */
-export declare const createBuffer: (arrayLike?: Uint8Array | ArrayLike<number>) => Buffer;
-/**
- * Evolu uses MessagePack to handle finite numbers except for NonNegativeInt.
- * For NonNegativeInt, Evolu provides more efficient encoding.
- */
-export declare const encodeNumber: (buffer: Buffer, number: FiniteNumber) => void;
-export declare const decodeNumber: (buffer: Buffer) => FiniteNumber;
-/**
- * Encodes an array of boolean flags into a single byte.
- *
- * Each element in the array corresponds to a bit (0-7). Array can have 0-8
- * elements.
- *
- * ### Example
- *
- * ```ts
- * import { assertEqual, createBuffer, encodeFlags } from "@evolu/common";
- *
- * const buffer = createBuffer();
- * encodeFlags(buffer, [true, false, true]);
- *
- * assertEqual(buffer.unwrap(), new Uint8Array([0b101]));
- * ```
- */
-export declare const encodeFlags: (buffer: Buffer, flags: ReadonlyArray<boolean>) => void;
-/**
- * Decodes a byte into an array of boolean flags.
- *
- * ### Example
- *
- * ```ts
- * import {
- *   assertEqual,
- *   createBuffer,
- *   decodeFlags,
- *   PositiveInt,
- * } from "@evolu/common";
- *
- * const buffer = createBuffer([0b101]);
- * const flags = decodeFlags(buffer, PositiveInt.orThrow(3));
- *
- * assertEqual(flags, [true, false, true]);
- * assertEqual(buffer.getLength(), 0);
- * ```
- */
-export declare const decodeFlags: (buffer: Buffer, count: PositiveInt) => ReadonlyArray<boolean>;
-/**
- * Encodes a non-negative integer into a variable-length integer format. It's
- * more efficient than encoding via {@link encodeNumber}.
- *
- * https://en.wikipedia.org/wiki/Variable-length_quantity
- */
-export declare const encodeNonNegativeInt: (buffer: Buffer, value: NonNegativeInt) => void;
-/**
- * Decodes a non-negative integer from a variable-length integer format.
- *
- * https://en.wikipedia.org/wiki/Variable-length_quantity
- */
-export declare const decodeNonNegativeInt: (buffer: Buffer) => NonNegativeInt;
-/** Encodes the length of an array-like value. */
-export declare const encodeLength: (buffer: Buffer, value: ArrayLike<unknown>) => void;
-/** Decodes an array-like value length. */
-export declare const decodeLength: typeof decodeNonNegativeInt;
-/** Encodes a length-prefixed UTF-8 string. */
-export declare const encodeString: (buffer: Buffer, value: string) => void;
-/** Decodes a length-prefixed UTF-8 string. */
-export declare const decodeString: (buffer: Buffer) => string;
-/** Incrementally encodes consecutive equal values using run-length encoding. */
-export interface RunLengthEncoder<T> {
-    readonly add: (value: T) => void;
-    readonly getLength: () => NonNegativeInt;
-    readonly unwrap: () => Uint8Array;
-}
-/** Creates an incremental run-length encoder. */
-export declare const createRunLengthEncoder: <T>(encodeValue: (buffer: Buffer, value: T) => void) => RunLengthEncoder<T>;
-/** Decodes a run-length encoded sequence. */
-export declare const decodeRle: <T>(buffer: Buffer, length: NonNegativeInt, decodeValue: () => T) => ReadonlyArray<T>;
-/**
- * Encodes a {@link JsonValue} using the MessagePack format.
- *
- * ### Example
- *
- * ```ts
- * import {
- *   assertEqual,
- *   createBuffer,
- *   encodeJsonValue,
- *   JsonValue,
- * } from "@evolu/common";
- *
- * const buffer = createBuffer();
- * const value = JsonValue.orThrow({ name: "Ada" });
- *
- * encodeJsonValue(buffer, value);
- *
- * assertEqual(
- *   buffer.unwrap(),
- *   new Uint8Array([
- *     0x81, 0xa4, 0x6e, 0x61, 0x6d, 0x65, 0xa3, 0x41, 0x64, 0x61,
- *   ]),
- * );
- * ```
- *
- * Encoding is artificially limited to 1,000 nested arrays or objects to keep
- * recursive encoding and decoding safe and symmetric. JSON data should not
- * require such depth; flatten or split deeply nested data, or use a
- * purpose-built serialization format.
- */
-export declare const encodeJsonValue: (buffer: Buffer, value: JsonValue) => void;
-/**
- * Decodes a {@link JsonValue} using the MessagePack format.
- *
- * Throws a {@link BufferError} without modifying the Buffer if the encoded value
- * is malformed, truncated, unsupported, outside the JsonValue domain, or
- * exceeds 1,000 nested arrays or objects.
- *
- * ### Example
- *
- * ```ts
- * import {
- *   assertEqual,
- *   createBuffer,
- *   decodeJsonValue,
- * } from "@evolu/common";
- *
- * const buffer = createBuffer([
- *   0x81, 0xa4, 0x6e, 0x61, 0x6d, 0x65, 0xa3, 0x41, 0x64, 0x61,
- * ]);
- *
- * assertEqual(decodeJsonValue(buffer), { name: "Ada" });
- * assertEqual(buffer.unwrap(), new Uint8Array());
- * ```
- */
-export declare const decodeJsonValue: (buffer: Buffer) => JsonValue;
-//# sourceMappingURL=Binary.d.ts.map

package/dist/src/Binary.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"Binary.d.ts","sourceRoot":"","sources":["../../src/Binary.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AAEnE,OAAO,KAAK,EACV,YAAY,EACZ,SAAS,EACT,cAAc,EACd,WAAW,EACZ,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;AAEpC;;;GAGG;AACH,qBAAa,WAAY,SAAQ,KAAK;IACpC,YAAY,OAAO,EAAE,MAAM,EAK1B;CACF;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDG;AACH,MAAM,WAAW,MAAM;IACrB,kDAAkD;IAClD,WAAW,EAAE,MAAM,cAAc,CAAC;IAElC,gEAAgE;IAChE,SAAS,EAAE,MAAM,cAAc,CAAC;IAEhC;;;OAGG;IACH,MAAM,EAAE,CAAC,GAAG,EAAE,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC;IAEtD;;;OAGG;IACH,KAAK,EAAE,MAAM,cAAc,CAAC;IAE5B;;;OAGG;IACH,MAAM,EAAE,CAAC,CAAC,EAAE,cAAc,KAAK,UAAU,CAAC;IAE1C;;;OAGG;IACH,QAAQ,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,IAAI,CAAC;IAE3C;;;;;;OAMG;IACH,KAAK,EAAE,MAAM,IAAI,CAAC;IAElB;;;;OAIG;IACH,MAAM,EAAE,MAAM,UAAU,CAAC;CAC1B;AAED,8DAA8D;AAC9D,eAAO,MAAM,YAAY,eACX,UAAU,GAAG,SAAS,CAAC,MAAM,CAAC,KACzC,MA8DF,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,YAAY,WAAY,MAAM,UAAU,YAAY,KAAG,IAEnE,CAAC;AAEF,eAAO,MAAM,YAAY,WAAY,MAAM,KAAG,YAM7C,CAAC;AAEF;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,WAAW,WACd,MAAM,SACP,aAAa,CAAC,OAAO,CAAC,KAC5B,IAQF,CAAC;AAEF;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,WAAW,WACd,MAAM,SACP,WAAW,KACjB,aAAa,CAAC,OAAO,CASvB,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,oBAAoB,WACvB,MAAM,SACP,cAAc,KACpB,IAoBF,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,WAAY,MAAM,KAAG,cAsBrD,CAAC;AAEF,iDAAiD;AACjD,eAAO,MAAM,YAAY,WACf,MAAM,SACP,SAAS,CAAC,OAAO,CAAC,KACxB,IAGF,CAAC;AAEF,0CAA0C;AAC1C,eAAO,MAAM,YAAY,6BAAuB,CAAC;AAEjD,8CAA8C;AAC9C,eAAO,MAAM,YAAY,WAAY,MAAM,SAAS,MAAM,KAAG,IAI5D,CAAC;AAEF,8CAA8C;AAC9C,eAAO,MAAM,YAAY,WAAY,MAAM,KAAG,MAI7C,CAAC;AAEF,gFAAgF;AAChF,MAAM,WAAW,gBAAgB,CAAC,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC,KAAK,IAAI,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,cAAc,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,UAAU,CAAC;CACnC;AAED,iDAAiD;AACjD,eAAO,MAAM,sBAAsB,GAAI,CAAC,eACzB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,IAAI,KAC9C,gBAAgB,CAAC,CAAC,CAwBpB,CAAC;AAEF,6CAA6C;AAC7C,eAAO,MAAM,SAAS,GAAI,CAAC,UACjB,MAAM,UACN,cAAc,eACT,MAAM,CAAC,KACnB,aAAa,CAAC,CAAC,CA6BjB,CAAC;AAuDF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,eAAe,WAAY,MAAM,SAAS,SAAS,KAAG,IAelE,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,eAAe,WAAY,MAAM,KAAG,SAwBhD,CAAC"}

package/dist/src/local-first/Error.d.ts

@@ -1,12 +0,0 @@
-/**
- * Evolu error types.
- *
- * @module
- */
-import type { DecryptWithXChaCha20Poly1305Error } from "../Crypto.ts";
-import type { UnknownError } from "../Error.ts";
-import type { ProtocolError } from "./Protocol.ts";
-import type { TimestampError } from "./Timestamp.ts";
-/** Represents errors that can occur in Evolu. */
-export type EvoluError = DecryptWithXChaCha20Poly1305Error | ProtocolError | TimestampError | UnknownError;
-//# sourceMappingURL=Error.d.ts.map

package/dist/src/local-first/Error.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"Error.d.ts","sourceRoot":"","sources":["../../../src/local-first/Error.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,iCAAiC,EAAE,MAAM,cAAc,CAAC;AACtE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAErD,iDAAiD;AACjD,MAAM,MAAM,UAAU,GAClB,iCAAiC,GACjC,aAAa,GACb,cAAc,GACd,YAAY,CAAC"}

package/dist/src/local-first/Error.js

@@ -1,6 +0,0 @@
-/**
- * Evolu error types.
- *
- * @module
- */
-export {};

package/dist/src/local-first/LocalAuth.d.ts

@@ -1,150 +0,0 @@
-/**
- * Local authentication and owner management.
- *
- * @module
- */
-import type { RandomBytesDep } from "../Crypto.ts";
-import type { Mnemonic } from "../Type.ts";
-import type { AppOwner } from "./Owner.ts";
-import { OwnerId } from "./Owner.ts";
-/**
- * Local authentication and authorization system for Evolu. This is API is
- * subject to change and not recommended for production use.
- */
-export interface LocalAuth {
-    /** Logs in with the given owner ID, or loads the target owner if not provided. */
-    login: (ownerId: OwnerId, options?: LocalAuthOptions) => Promise<AuthResult | null>;
-    /** Registers a new owner with the given username. */
-    register: (username: string, options?: LocalAuthOptions & {
-        mnemonic?: Mnemonic | null;
-    }) => Promise<AuthResult | null>;
-    /** Unregisters an owner with the given owner ID. */
-    unregister: (ownerId: OwnerId, options?: LocalAuthOptions) => Promise<void>;
-    /** Gets the current owner (last logged in or last registered owner) */
-    getOwner: (options?: LocalAuthOptions) => Promise<AuthResult | null>;
-    /** Lists all registered owner ids with associated usernames. */
-    getProfiles: (options?: LocalAuthOptionsValues) => Promise<Array<AuthList>>;
-    /** Clears all owners and metadata from the local auth. */
-    clearAll: (options?: LocalAuthOptions) => Promise<void>;
-}
-export interface LocalAuthDep {
-    readonly localAuth: LocalAuth;
-}
-/** Secure storage interface that must be implemented by each platform. */
-export interface SecureStorage {
-    setItem: (key: string, value: string, options?: LocalAuthOptions) => Promise<MutationResult>;
-    getItem: (key: string, options?: LocalAuthOptionsValues) => Promise<SensitiveInfoItem | null>;
-    deleteItem: (key: string, options?: LocalAuthOptions) => Promise<boolean>;
-    getAllItems: (options?: LocalAuthOptionsValues) => Promise<Array<SensitiveInfoItem>>;
-    clearService: (options?: LocalAuthOptions) => Promise<void>;
-}
-export interface SecureStorageDep {
-    readonly secureStorage: SecureStorage;
-}
-/**
- * Creates a local auth using the given secure storage implementation. This
- * factory function allows each platform to provide its own storage layer while
- * sharing the common auth logic.
- */
-export declare const createLocalAuth: (deps: SecureStorageDep & RandomBytesDep) => LocalAuth;
-export declare const localAuth_Namespace = "evolu";
-export declare const localAuthDefaultOptions: LocalAuthOptions;
-export interface AuthResult {
-    /** The app owner created during registration. */
-    readonly owner: AppOwner | undefined;
-    /** The name provided by the user during registration. */
-    readonly username: string;
-}
-export interface AuthList {
-    /** The app owner ID. */
-    readonly ownerId: OwnerId;
-    /** The name provided by the user during registration. */
-    readonly username: string;
-}
-export interface LocalAuthOptions {
-    /**
-     * Native: Namespaces the stored entry. Defaults to the bundle identifier
-     * (when available) or `default`.
-     */
-    readonly service?: string;
-    /** IOS: Enable keychain item synchronization via iCloud. */
-    readonly iosSynchronizable?: boolean;
-    /** IOS: Custom keychain access group. */
-    readonly keychainGroup?: string;
-    /**
-     * Native: Desired access-control policy. The native implementation will
-     * automatically fall back to the strongest supported policy for the current
-     * device (Secure Enclave ➝ Biometry ➝ Device Credential ➝ None).
-     */
-    readonly accessControl?: AccessControl;
-    /**
-     * Android: Fine tune whether the hardware-authenticated key should require
-     * biometrics only.
-     */
-    readonly androidBiometricsStrongOnly?: boolean;
-    /**
-     * Native: Optional prompt configuration that will be shown when protected
-     * keys require user presence.
-     */
-    readonly authenticationPrompt?: AuthenticationPrompt;
-    /** Web: The relying party ID for WebAuthn. Defaults to the current hostname. */
-    readonly relyingPartyID?: string;
-    /** Web: The relying party name for WebAuthn. Defaults to 'Evolu'. */
-    readonly relyingPartyName?: string;
-    /** Web: The username for WebAuthn. Defaults to 'Evolu User'. */
-    readonly webAuthnUsername?: string;
-    /**
-     * Web: The user verification requirement for WebAuthn. Defaults to
-     * 'required'.
-     */
-    readonly webAuthnUserVerification?: UserVerificationRequirement;
-    /** Web: The authenticator attachment for WebAuthn. Defaults to 'platform'. */
-    readonly webAuthnAuthenticatorAttachment?: AuthenticatorAttachment;
-}
-export interface LocalAuthOptionsValues extends LocalAuthOptions {
-    /** When true, the stored value is returned for each item. Defaults to false. */
-    readonly includeValues?: boolean;
-}
-/**
- * Configuration for the biometric/device credential prompt shown when a
- * protected item is accessed.
- */
-export interface AuthenticationPrompt {
-    readonly title: string;
-    readonly subtitle?: string;
-    readonly description?: string;
-    readonly cancel?: string;
-}
-export interface SensitiveInfoGetRequest extends LocalAuthOptions {
-    readonly key: string;
-    /** Include the encrypted value when available. Defaults to true. */
-    readonly includeValue?: boolean;
-}
-export interface StorageMetadata {
-    readonly securityLevel: SecurityLevel;
-    readonly backend: StorageBackend;
-    readonly accessControl: AccessControl;
-    readonly timestamp: number;
-}
-export interface SensitiveInfoItem {
-    readonly key: string;
-    readonly service: string;
-    readonly value?: string;
-    readonly metadata: StorageMetadata;
-}
-export interface MutationResult {
-    readonly metadata: StorageMetadata;
-}
-/**
- * Enumerates the highest security tier that was effectively applied while
- * storing a value.
- */
-export type SecurityLevel = "secureEnclave" | "strongBox" | "biometry" | "deviceCredential" | "software";
-/** Enumerates the native storage backend used to persist sensitive data. */
-export type StorageBackend = "keychain" | "androidKeystore" | "encryptedSharedPreferences";
-/**
- * Enumerates the access-control policy enforced by the underlying secure
- * storage.
- */
-export type AccessControl = "secureEnclaveBiometry" | "biometryCurrentSet" | "biometryAny" | "devicePasscode" | "none";
-//# sourceMappingURL=LocalAuth.d.ts.map

package/dist/src/local-first/LocalAuth.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"LocalAuth.d.ts","sourceRoot":"","sources":["../../../src/local-first/LocalAuth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAKL,OAAO,EAER,MAAM,YAAY,CAAC;AAEpB;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB,kFAAkF;IAClF,KAAK,EAAE,CACL,OAAO,EAAE,OAAO,EAChB,OAAO,CAAC,EAAE,gBAAgB,KACvB,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAEhC,qDAAqD;IACrD,QAAQ,EAAE,CACR,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,gBAAgB,GAAG;QAAE,QAAQ,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAA;KAAE,KACxD,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAEhC,oDAAoD;IACpD,UAAU,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAE5E,uEAAuE;IACvE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,gBAAgB,KAAK,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAErE,gEAAgE;IAChE,WAAW,EAAE,CAAC,OAAO,CAAC,EAAE,sBAAsB,KAAK,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IAE5E,0DAA0D;IAC1D,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACzD;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;CAC/B;AAED,0EAA0E;AAC1E,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,CACP,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,gBAAgB,KACvB,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7B,OAAO,EAAE,CACP,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,sBAAsB,KAC7B,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAC;IACvC,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1E,WAAW,EAAE,CACX,OAAO,CAAC,EAAE,sBAAsB,KAC7B,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;IACvC,YAAY,EAAE,CAAC,OAAO,CAAC,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7D;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;CACvC;AAED;;;;GAIG;AACH,eAAO,MAAM,eAAe,SACpB,gBAAgB,GAAG,cAAc,KACtC,SAsOF,CAAC;AAEF,eAAO,MAAM,mBAAmB,UAAU,CAAC;AAE3C,eAAO,MAAM,uBAAuB,EAAE,gBASrC,CAAC;AAKF,MAAM,WAAW,UAAU;IACzB,iDAAiD;IACjD,QAAQ,CAAC,KAAK,EAAE,QAAQ,GAAG,SAAS,CAAC;IACrC,yDAAyD;IACzD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,QAAQ;IACvB,wBAAwB;IACxB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,yDAAyD;IACzD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAID,MAAM,WAAW,gBAAgB;IAC/B;;;OAGG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAE1B,4DAA4D;IAC5D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAErC,yCAAyC;IACzC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAEhC;;;;OAIG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC;IAEvC;;;OAGG;IACH,QAAQ,CAAC,2BAA2B,CAAC,EAAE,OAAO,CAAC;IAE/C;;;OAGG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAErD,gFAAgF;IAChF,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IAEjC,qEAAqE;IACrE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAEnC,gEAAgE;IAChE,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAEnC;;;OAGG;IACH,QAAQ,CAAC,wBAAwB,CAAC,EAAE,2BAA2B,CAAC;IAEhE,8EAA8E;IAC9E,QAAQ,CAAC,+BAA+B,CAAC,EAAE,uBAAuB,CAAC;CACpE;AAED,MAAM,WAAW,sBAAuB,SAAQ,gBAAgB;IAC9D,gFAAgF;IAChF,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;CAClC;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,uBAAwB,SAAQ,gBAAgB;IAC/D,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,oEAAoE;IACpE,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;CACjC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;CACpC;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;CACpC;AAED;;;GAGG;AACH,MAAM,MAAM,aAAa,GACvB,eAAe,GAAG,WAAW,GAAG,UAAU,GAAG,kBAAkB,GAAG,UAAU,CAAC;AAE/E,4EAA4E;AAC5E,MAAM,MAAM,cAAc,GACxB,UAAU,GAAG,iBAAiB,GAAG,4BAA4B,CAAC;AAEhE;;;GAGG;AACH,MAAM,MAAM,aAAa,GACrB,uBAAuB,GACvB,oBAAoB,GACpB,aAAa,GACb,gBAAgB,GAChB,MAAM,CAAC"}

package/dist/src/local-first/LocalAuth.js

@@ -1,179 +0,0 @@
-/**
- * Local authentication and owner management.
- *
- * @module
- */
-import { createAppOwner, createOwnerSecret, mnemonicToOwnerSecret, OwnerEncryptionKey, OwnerId, OwnerWriteKey, } from "./Owner.js";
-/**
- * Creates a local auth using the given secure storage implementation. This
- * factory function allows each platform to provide its own storage layer while
- * sharing the common auth logic.
- */
-export const createLocalAuth = (deps) => {
-    const setLastOwnerId = async (id, options) => {
-        await deps.secureStorage.setItem(localAuthMetakeyLastOwner, id, {
-            ...buildAuthOptions(options),
-            accessControl: "none",
-        });
-    };
-    const getLastOwnerId = async (options) => {
-        const item = await deps.secureStorage.getItem(localAuthMetakeyLastOwner, {
-            ...buildAuthOptions(options),
-            accessControl: "none",
-        });
-        return item?.value;
-    };
-    const getOwnerNames = async (options) => {
-        const item = await deps.secureStorage.getItem(localAuthMetakeyOwnerNames, {
-            ...buildAuthOptions(options),
-            accessControl: "none",
-        });
-        let names = {};
-        if (item?.value) {
-            names = JSON.parse(item.value);
-        }
-        return names;
-    };
-    const setOwnerName = async (id, username, options) => {
-        const names = await getOwnerNames(options);
-        names[id] = username;
-        await deps.secureStorage.setItem(localAuthMetakeyOwnerNames, JSON.stringify(names), {
-            ...buildAuthOptions(options),
-            accessControl: "none",
-        });
-    };
-    const deleteOwnerName = async (id, options) => {
-        const { [id]: _, ...names } = await getOwnerNames(options);
-        await deps.secureStorage.setItem(localAuthMetakeyOwnerNames, JSON.stringify(names), {
-            ...buildAuthOptions(options),
-            accessControl: "none",
-        });
-    };
-    const getOwnerIds = async (options) => {
-        const items = await deps.secureStorage.getAllItems({
-            ...buildAuthOptions(options),
-            includeValues: false,
-        });
-        return items
-            .filter(Boolean)
-            .filter((i) => i.key !== localAuthMetakeyLastOwner &&
-            i.key !== localAuthMetakeyOwnerNames)
-            .map((i) => i.key);
-    };
-    const clearAuthStore = (options) => deps.secureStorage.clearService(buildAuthOptions(options));
-    const buildAuthOptions = (options, username) => {
-        const newOptions = {
-            ...localAuthDefaultOptions,
-            ...(username && { webAuthnUsername: username }),
-            ...options,
-        };
-        return {
-            ...newOptions,
-            authenticationPrompt: {
-                title: replaceMessageTokens(newOptions.authenticationPrompt?.title ?? "", username),
-                cancel: replaceMessageTokens(newOptions.authenticationPrompt?.cancel ?? "", username),
-                subtitle: replaceMessageTokens(newOptions.authenticationPrompt?.subtitle ?? "", username),
-                description: replaceMessageTokens(newOptions.authenticationPrompt?.description ?? "", username),
-            },
-        };
-    };
-    const replaceMessageTokens = (text, username) => {
-        if (!username)
-            return text;
-        return text.replace("|USERNAME|", username);
-    };
-    return {
-        login: async (ownerId, options) => {
-            // Lookup the associated username
-            const names = await getOwnerNames(options);
-            const username = names[ownerId] ?? "";
-            // Currently a reload is needed. This avoids authentication
-            // it needs to be handled on next page load.
-            // We set the last owner so we know what the target is.
-            // It is the applications's responsibility to reload and trigger login.
-            await setLastOwnerId(ownerId, options);
-            return { owner: undefined, username };
-        },
-        register: async (username, options) => {
-            // Create an owner with a new secret or use specified mnemonic
-            const owner = createAppOwner(options?.mnemonic
-                ? mnemonicToOwnerSecret(options.mnemonic)
-                : createOwnerSecret(deps));
-            // Store owner, associated username, and update last owner
-            await Promise.all([
-                // setOwnerItem
-                deps.secureStorage.setItem(owner.id, JSON.stringify({ owner }), buildAuthOptions(options, username)),
-                setOwnerName(owner.id, username, options),
-                setLastOwnerId(owner.id, options),
-            ]);
-            // Return the owner and associated username
-            return { owner, username };
-        },
-        unregister: async (ownerId, options) => {
-            // Delete the owner and associated username
-            await Promise.all([
-                // deleteOwnerItem
-                deps.secureStorage.deleteItem(ownerId, buildAuthOptions(options)),
-                deleteOwnerName(ownerId, options),
-            ]);
-            // If the owner was the last owner then set to
-            // the next owner based on metadata timestamp
-            const lastOwnerId = await getLastOwnerId(options);
-            if (lastOwnerId === ownerId) {
-                const ids = await getOwnerIds(options);
-                if (ids.length > 0) {
-                    await setLastOwnerId(ids[0], options);
-                }
-            }
-        },
-        getOwner: async (options) => {
-            const ownerId = await getLastOwnerId(options);
-            if (!ownerId)
-                return null;
-            const names = await getOwnerNames(options);
-            const username = names[ownerId] ?? "";
-            // Retrieve and decrypt the owner (this will trigger device authentication)
-            const account = await deps.secureStorage.getItem(ownerId, buildAuthOptions(options, username));
-            if (!account?.value)
-                return null;
-            // Unserialize the values (TODO: save these as base64 instead of json serializing)
-            const result = JSON.parse(account.value);
-            const writeKey = OwnerWriteKey.orThrow(new Uint8Array(Object.values(result.owner.writeKey)));
-            const encryptionKey = OwnerEncryptionKey.orThrow(new Uint8Array(Object.values(result.owner.encryptionKey)));
-            const owner = { ...result.owner, writeKey, encryptionKey };
-            // Update the last owner for future login attempts
-            await setLastOwnerId(ownerId, options);
-            // Return the owner and associated username
-            return { owner, username };
-        },
-        getProfiles: async (options) => {
-            // Get all owner ids and associated usernames
-            const [ids, names] = await Promise.all([
-                getOwnerIds(options),
-                getOwnerNames(options),
-            ]);
-            // Return the list of profiles (usually used for login UX)
-            return ids.map((ownerId) => ({
-                ownerId,
-                username: names[ownerId] ?? "",
-            }));
-        },
-        clearAll: async (options) => {
-            // Delete all owners and associated metadata (scoped to the service)
-            await clearAuthStore(options);
-        },
-    };
-};
-export const localAuth_Namespace = "evolu";
-export const localAuthDefaultOptions = {
-    service: localAuth_Namespace,
-    keychainGroup: localAuth_Namespace,
-    androidBiometricsStrongOnly: true,
-    iosSynchronizable: true,
-    webAuthnUsername: "Evolu User",
-    authenticationPrompt: {
-        title: "Authenticate as |USERNAME|",
-    },
-};
-const localAuthMetakeyLastOwner = "_last_owner";
-const localAuthMetakeyOwnerNames = "_owner_names";

package/src/local-first/Error.ts

@@ -1,17 +0,0 @@
-/**
- * Evolu error types.
- *
- * @module
- */
-
-import type { DecryptWithXChaCha20Poly1305Error } from "../Crypto.ts";
-import type { UnknownError } from "../Error.ts";
-import type { ProtocolError } from "./Protocol.ts";
-import type { TimestampError } from "./Timestamp.ts";
-
-/** Represents errors that can occur in Evolu. */
-export type EvoluError =
-  | DecryptWithXChaCha20Poly1305Error
-  | ProtocolError
-  | TimestampError
-  | UnknownError;