@graffiti-garden/implementation-decentralized 0.0.2 → 0.0.4

package/dist/cjs/3-protocol/3-object-encoding.js.map

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../../src/3-protocol/3-object-encoding.ts"],
-  "sourcesContent": ["import type { JSONSchema } from \"json-schema-to-ts\";\nimport type {\n  GraffitiObject,\n  GraffitiObjectBase,\n  GraffitiPostObject,\n} from \"@graffiti-garden/api\";\nimport type { ChannelAttestations } from \"../2-primitives/3-channel-attestations\";\nimport type { AllowedAttestations } from \"../2-primitives/4-allowed-attestations\";\nimport {\n  CONTENT_ADDRESS_METHOD_SHA256,\n  type ContentAddresses,\n} from \"../2-primitives/2-content-addresses\";\nimport { randomBytes } from \"@noble/hashes/utils.js\";\nimport {\n  encode as dagCborEncode,\n  decode as dagCborDecode,\n} from \"@ipld/dag-cbor\";\nimport {\n  type infer as infer_,\n  array,\n  custom,\n  looseObject,\n  optional,\n  strictObject,\n} from \"zod/mini\";\nimport { CHANNEL_ATTESTATION_METHOD_SHA256_ED25519 } from \"../2-primitives/3-channel-attestations\";\nimport { ALLOWED_ATTESTATION_METHOD_HMAC_SHA256 } from \"../2-primitives/4-allowed-attestations\";\nimport {\n  STRING_ENCODER_METHOD_BASE64URL,\n  type StringEncoder,\n} from \"../2-primitives/1-string-encoding\";\n\n// Objects have a max size of 32kb\n// If each channel and allowed actor takes 32 bytes\n// of space (i.e. they are hashed with 256 bit security)\n// then this means that the combined number of channels\n// and recipients of object has cannot exceed one thousand.\n// This seems like a reasonable limit and on par with\n// signal's group chat limit of 1000\nexport const MAX_OBJECT_SIZE_BYTES = 32 * 1024;\n\nexport class ObjectEncoding {\n  constructor(\n    protected readonly primitives: {\n      readonly stringEncoder: StringEncoder;\n      readonly channelAttestations: ChannelAttestations;\n      readonly allowedAttestations: AllowedAttestations;\n      readonly contentAddresses: ContentAddresses;\n    },\n  ) {}\n\n  async encode<Schema extends JSONSchema>(\n    partialObject: GraffitiPostObject<Schema>,\n    actor: string,\n  ): Promise<{\n    object: GraffitiObject<Schema>;\n    tags: Uint8Array[];\n    objectBytes: Uint8Array;\n    allowedTickets: Uint8Array[] | undefined;\n  }> {\n    // Clean out any undefineds\n    partialObject = cleanUndefined(partialObject);\n\n    // Create a verifiable attestation that the actor\n    // knows the included channels without\n    // directly revealing any channel to anyone who doesn't\n    // know the channel already\n    const channelAttestationAndPublicIds = await Promise.all(\n      partialObject.channels.map((channel) =>\n        this.primitives.channelAttestations.attest(\n          // TODO: get this from the DID document of the actor\n          CHANNEL_ATTESTATION_METHOD_SHA256_ED25519,\n          actor,\n          channel,\n        ),\n      ),\n    );\n    const channelAttestations = channelAttestationAndPublicIds.map(\n      (c) => c.attestation,\n    );\n    const channelPublicIds = channelAttestationAndPublicIds.map(\n      (c) => c.channelPublicId,\n    );\n\n    const objectData: infer_<typeof ObjectDataSchema> = {\n      [VALUE_PROPERTY]: partialObject.value,\n      [CHANNEL_ATTESTATIONS_PROPERTY]: channelAttestations,\n      [NONCE_PROPERTY]: randomBytes(32),\n    };\n\n    let allowedTickets: Uint8Array[] | undefined = undefined;\n\n    // If the object is private...\n    if (Array.isArray(partialObject.allowed)) {\n      // Create an attestation that the object's allowed list\n      // includes the given actors, without revealing the\n      // presence of an actor on the list to anyone except\n      // that actor themselves. Each actor will receive a\n      // \"ticket\" that they can use to verify their own membership\n      // on the allowed list.\n      const allowedAttestations = await Promise.all(\n        partialObject.allowed.map(async (allowedActor) =>\n          this.primitives.allowedAttestations.attest(\n            // TODO: get this from the DID document of the actor\n            ALLOWED_ATTESTATION_METHOD_HMAC_SHA256,\n            allowedActor,\n          ),\n        ),\n      );\n      objectData[ALLOWED_ATTESTATIONS_PROPERTY] = allowedAttestations.map(\n        (a) => a.attestation,\n      );\n      allowedTickets = allowedAttestations.map((a) => a.ticket);\n    }\n\n    // Encode the mixed JSON/binary data using CBOR\n    const objectBytes = dagCborEncode(objectData);\n    if (objectBytes.byteLength > MAX_OBJECT_SIZE_BYTES) {\n      throw new Error(\"The object is too large\");\n    }\n\n    // Compute a public identifier (hash) of the object data\n    const objectContentAddressBytes =\n      await this.primitives.contentAddresses.register(\n        // TODO: get this from the DID document of the actor\n        CONTENT_ADDRESS_METHOD_SHA256,\n        objectBytes,\n      );\n    const objectContentAddress = await this.primitives.stringEncoder.encode(\n      STRING_ENCODER_METHOD_BASE64URL,\n      objectContentAddressBytes,\n    );\n    // Use it to compute the object's URL\n    const objectUrl = encodeObjectUrl(actor, objectContentAddress);\n\n    const tags = [new TextEncoder().encode(objectUrl), ...channelPublicIds];\n\n    const object: GraffitiObject<Schema> = {\n      value: partialObject.value,\n      channels: partialObject.channels,\n      url: objectUrl,\n      actor,\n      ...(partialObject.allowed\n        ? {\n            allowed: partialObject.allowed,\n          }\n        : {}),\n    } as GraffitiObject<Schema>;\n\n    // Return object URL and allowed secrets\n    return {\n      object,\n      tags,\n      objectBytes,\n      allowedTickets,\n    };\n  }\n\n  async validate(\n    object: GraffitiObjectBase,\n    tags: Uint8Array[],\n    objectBytes: Uint8Array,\n    privateObjectInfo?:\n      | {\n          recipient: string;\n          allowedTicket: Uint8Array;\n          allowedIndex: number;\n        }\n      | {\n          allowedTickets: Uint8Array[];\n        },\n  ): Promise<void> {\n    if (objectBytes.byteLength > MAX_OBJECT_SIZE_BYTES) {\n      throw new Error(\"Object is too big\");\n    }\n    const { actor, contentAddress } = decodeObjectUrl(object.url);\n    if (actor !== object.actor) {\n      throw new Error(\"Object actor does not match URL actor\");\n    }\n\n    const objectUrlTag = tags.at(0);\n    if (!objectUrlTag) {\n      throw new Error(\"No object URL tag\");\n    }\n    if (new TextDecoder().decode(objectUrlTag) !== object.url) {\n      throw new Error(\"Object URL tag does not match object URL\");\n    }\n    const channelPublicIds = tags.slice(1);\n\n    // Make sure the object content address matches the object content\n    const contentAddressBytes =\n      await this.primitives.stringEncoder.decode(contentAddress);\n    const contentAddressMethod =\n      await this.primitives.contentAddresses.getMethod(contentAddressBytes);\n    const expectedContentAddress =\n      await this.primitives.contentAddresses.register(\n        contentAddressMethod,\n        objectBytes,\n      );\n    if (\n      expectedContentAddress.length !== contentAddressBytes.length ||\n      !expectedContentAddress.every((b, i) => b === contentAddressBytes[i])\n    ) {\n      throw new Error(\"Content address is invalid\");\n    }\n\n    // Convert the raw object data from CBOR\n    // back to a javascript object\n    const objectDataUnknown = dagCborDecode(objectBytes);\n    const objectData = ObjectDataSchema.parse(objectDataUnknown);\n\n    // And extract the values\n    const value = objectData[VALUE_PROPERTY];\n    const channelAttestations = objectData[CHANNEL_ATTESTATIONS_PROPERTY];\n    const allowedAttestations = objectData[ALLOWED_ATTESTATIONS_PROPERTY];\n\n    // Validate that the object's value matches\n    const valueBytes = dagCborEncode(value);\n    const expectedValueBytes = dagCborEncode(object.value);\n    if (\n      valueBytes.length !== expectedValueBytes.length ||\n      !valueBytes.every((b, i) => b === expectedValueBytes[i])\n    ) {\n      throw new Error(\"Object value does not match storage value\");\n    }\n\n    // Validate the object's channels\n    if (channelAttestations.length !== channelPublicIds.length) {\n      throw new Error(\"Not as many channel attestations and public ids\");\n    }\n    for (const [index, attestation] of channelAttestations.entries()) {\n      const channelPublicId = channelPublicIds[index];\n      const isValid = await this.primitives.channelAttestations.validate(\n        attestation,\n        actor,\n        channelPublicId,\n      );\n      if (!isValid) {\n        throw new Error(\"Invalid channel attestation\");\n      }\n    }\n    if (object.channels.length) {\n      // If any channels are included, they all must be included\n      if (object.channels.length !== channelPublicIds.length) {\n        throw new Error(\n          \"Number of claimed channels does not match attestations/public IDs\",\n        );\n      }\n      const channelAttestationMethod =\n        await this.primitives.channelAttestations.getMethod(\n          channelPublicIds[0],\n        );\n      const expectedChannelPublicIds = await Promise.all(\n        object.channels.map((channel) =>\n          this.primitives.channelAttestations.register(\n            channelAttestationMethod,\n            channel,\n          ),\n        ),\n      );\n      for (const [\n        index,\n        expectedPublicId,\n      ] of expectedChannelPublicIds.entries()) {\n        const actualPublicId = channelPublicIds[index];\n        if (\n          expectedPublicId.length !== actualPublicId.length ||\n          !expectedPublicId.every((b, i) => b === actualPublicId[i])\n        ) {\n          throw new Error(\"Channel public id does not match expected\");\n        }\n      }\n    }\n\n    // Validate the recipient\n    if (privateObjectInfo) {\n      if (!allowedAttestations) {\n        throw new Error(\"Object is public but thought to be private\");\n      }\n\n      let recipients: string[];\n      let allowedTickets: Uint8Array[];\n      let attestations: Uint8Array[];\n      if (\"recipient\" in privateObjectInfo) {\n        recipients = [privateObjectInfo.recipient];\n        allowedTickets = [privateObjectInfo.allowedTicket];\n        attestations = allowedAttestations.filter(\n          (_, i) => i === privateObjectInfo.allowedIndex,\n        );\n      } else {\n        recipients = [...(object.allowed ?? [])];\n        allowedTickets = privateObjectInfo.allowedTickets;\n        attestations = allowedAttestations;\n      }\n\n      // All recipients must be in the allowed list\n      if (recipients.length !== object.allowed?.length) {\n        throw new Error(\"Recipient count does not match object allowed list\");\n      }\n      if (!recipients.every((r) => object.allowed?.includes(r))) {\n        throw new Error(\"Recipient not in object allowed list\");\n      }\n\n      for (const [index, recipient] of recipients.entries()) {\n        const allowedTicket = allowedTickets.at(index);\n        const allowedAttestation = attestations.at(index);\n        if (!allowedTicket) {\n          throw new Error(\"Missing allowed ticket for recipient\");\n        }\n        if (!allowedAttestation) {\n          throw new Error(\"Missing allowed attestation for recipient\");\n        }\n        const isValid = await this.primitives.allowedAttestations.validate(\n          allowedAttestation,\n          recipient,\n          allowedTicket,\n        );\n\n        if (!isValid) {\n          throw new Error(\"Invalid allowed attestation for recipient\");\n        }\n      }\n    } else if (allowedAttestations) {\n      throw new Error(\"Object is private but no recipient info provided\");\n    }\n  }\n}\n\n// A compact data representation of the object data\nconst VALUE_PROPERTY = \"v\";\nconst CHANNEL_ATTESTATIONS_PROPERTY = \"c\";\nconst ALLOWED_ATTESTATIONS_PROPERTY = \"a\";\nconst NONCE_PROPERTY = \"n\";\n\nconst Uint8ArraySchema = custom<Uint8Array>(\n  (v): v is Uint8Array => v instanceof Uint8Array,\n);\n\nconst ObjectDataSchema = strictObject({\n  [VALUE_PROPERTY]: looseObject({}),\n  [CHANNEL_ATTESTATIONS_PROPERTY]: array(Uint8ArraySchema),\n  [ALLOWED_ATTESTATIONS_PROPERTY]: optional(array(Uint8ArraySchema)),\n  [NONCE_PROPERTY]: Uint8ArraySchema,\n});\n\nexport const GRAFFITI_OBJECT_URL_PREFIX = \"graffiti:\";\n\n// Methods to encode and decode object URLs\nexport function encodeObjectUrlComponent(value: string) {\n  const replaced = value.replace(/:/g, \"!\").replace(/\\//g, \"~\");\n  return encodeURIComponent(replaced);\n}\nexport function decodeObjectUrlComponent(value: string) {\n  const decoded = decodeURIComponent(value);\n  return decoded.replace(/!/g, \":\").replace(/~/g, \"/\");\n}\nexport function encodeObjectUrl(actor: string, contentAddress: string) {\n  return `${GRAFFITI_OBJECT_URL_PREFIX}${encodeObjectUrlComponent(actor)}:${encodeObjectUrlComponent(contentAddress)}`;\n}\nexport function decodeObjectUrl(objectUrl: string) {\n  if (!objectUrl.startsWith(GRAFFITI_OBJECT_URL_PREFIX)) {\n    throw new Error(\"Invalid object URL\");\n  }\n\n  const rest = objectUrl.slice(GRAFFITI_OBJECT_URL_PREFIX.length);\n  const parts = rest.split(\":\");\n\n  if (parts.length !== 2) {\n    throw new Error(\"Invalid object URL format\");\n  }\n\n  const [actor, contentAddress] = parts;\n\n  return {\n    actor: decodeObjectUrlComponent(actor),\n    contentAddress: decodeObjectUrlComponent(contentAddress),\n  };\n}\n\nfunction cleanUndefined(value: any): any {\n  if (value === undefined) return null;\n\n  if (Array.isArray(value)) {\n    return value.map(cleanUndefined);\n  }\n\n  if (typeof value === \"object\") {\n    return Object.fromEntries(\n      Object.entries(value)\n        .filter(([, v]) => v !== undefined)\n        .map(([k, v]) => [k, cleanUndefined(v)]),\n    );\n  }\n\n  return value;\n}\n"],
-  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAQA,+BAGO;AACP,mBAA4B;AAC5B,sBAGO;AACP,kBAOO;AACP,kCAA0D;AAC1D,kCAAuD;AACvD,6BAGO;AASA,MAAM,wBAAwB,KAAK;AAEnC,MAAM,eAAe;AAAA,EAC1B,YACqB,YAMnB;AANmB;AAAA,EAMlB;AAAA,EAEH,MAAM,OACJ,eACA,OAMC;AAED,oBAAgB,eAAe,aAAa;AAM5C,UAAM,iCAAiC,MAAM,QAAQ;AAAA,MACnD,cAAc,SAAS;AAAA,QAAI,CAAC,YAC1B,KAAK,WAAW,oBAAoB;AAAA;AAAA,UAElC;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,UAAM,sBAAsB,+BAA+B;AAAA,MACzD,CAAC,MAAM,EAAE;AAAA,IACX;AACA,UAAM,mBAAmB,+BAA+B;AAAA,MACtD,CAAC,MAAM,EAAE;AAAA,IACX;AAEA,UAAM,aAA8C;AAAA,MAClD,CAAC,cAAc,GAAG,cAAc;AAAA,MAChC,CAAC,6BAA6B,GAAG;AAAA,MACjC,CAAC,cAAc,OAAG,0BAAY,EAAE;AAAA,IAClC;AAEA,QAAI,iBAA2C;AAG/C,QAAI,MAAM,QAAQ,cAAc,OAAO,GAAG;AAOxC,YAAM,sBAAsB,MAAM,QAAQ;AAAA,QACxC,cAAc,QAAQ;AAAA,UAAI,OAAO,iBAC/B,KAAK,WAAW,oBAAoB;AAAA;AAAA,YAElC;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAAA,MACF;AACA,iBAAW,6BAA6B,IAAI,oBAAoB;AAAA,QAC9D,CAAC,MAAM,EAAE;AAAA,MACX;AACA,uBAAiB,oBAAoB,IAAI,CAAC,MAAM,EAAE,MAAM;AAAA,IAC1D;AAGA,UAAM,kBAAc,gBAAAA,QAAc,UAAU;AAC5C,QAAI,YAAY,aAAa,uBAAuB;AAClD,YAAM,IAAI,MAAM,yBAAyB;AAAA,IAC3C;AAGA,UAAM,4BACJ,MAAM,KAAK,WAAW,iBAAiB;AAAA;AAAA,MAErC;AAAA,MACA;AAAA,IACF;AACF,UAAM,uBAAuB,MAAM,KAAK,WAAW,cAAc;AAAA,MAC/D;AAAA,MACA;AAAA,IACF;AAEA,UAAM,YAAY,gBAAgB,OAAO,oBAAoB;AAE7D,UAAM,OAAO,CAAC,IAAI,YAAY,EAAE,OAAO,SAAS,GAAG,GAAG,gBAAgB;AAEtE,UAAM,SAAiC;AAAA,MACrC,OAAO,cAAc;AAAA,MACrB,UAAU,cAAc;AAAA,MACxB,KAAK;AAAA,MACL;AAAA,MACA,GAAI,cAAc,UACd;AAAA,QACE,SAAS,cAAc;AAAA,MACzB,IACA,CAAC;AAAA,IACP;AAGA,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,SACJ,QACA,MACA,aACA,mBASe;AACf,QAAI,YAAY,aAAa,uBAAuB;AAClD,YAAM,IAAI,MAAM,mBAAmB;AAAA,IACrC;AACA,UAAM,EAAE,OAAO,eAAe,IAAI,gBAAgB,OAAO,GAAG;AAC5D,QAAI,UAAU,OAAO,OAAO;AAC1B,YAAM,IAAI,MAAM,uCAAuC;AAAA,IACzD;AAEA,UAAM,eAAe,KAAK,GAAG,CAAC;AAC9B,QAAI,CAAC,cAAc;AACjB,YAAM,IAAI,MAAM,mBAAmB;AAAA,IACrC;AACA,QAAI,IAAI,YAAY,EAAE,OAAO,YAAY,MAAM,OAAO,KAAK;AACzD,YAAM,IAAI,MAAM,0CAA0C;AAAA,IAC5D;AACA,UAAM,mBAAmB,KAAK,MAAM,CAAC;AAGrC,UAAM,sBACJ,MAAM,KAAK,WAAW,cAAc,OAAO,cAAc;AAC3D,UAAM,uBACJ,MAAM,KAAK,WAAW,iBAAiB,UAAU,mBAAmB;AACtE,UAAM,yBACJ,MAAM,KAAK,WAAW,iBAAiB;AAAA,MACrC;AAAA,MACA;AAAA,IACF;AACF,QACE,uBAAuB,WAAW,oBAAoB,UACtD,CAAC,uBAAuB,MAAM,CAAC,GAAG,MAAM,MAAM,oBAAoB,CAAC,CAAC,GACpE;AACA,YAAM,IAAI,MAAM,4BAA4B;AAAA,IAC9C;AAIA,UAAM,wBAAoB,gBAAAC,QAAc,WAAW;AACnD,UAAM,aAAa,iBAAiB,MAAM,iBAAiB;AAG3D,UAAM,QAAQ,WAAW,cAAc;AACvC,UAAM,sBAAsB,WAAW,6BAA6B;AACpE,UAAM,sBAAsB,WAAW,6BAA6B;AAGpE,UAAM,iBAAa,gBAAAD,QAAc,KAAK;AACtC,UAAM,yBAAqB,gBAAAA,QAAc,OAAO,KAAK;AACrD,QACE,WAAW,WAAW,mBAAmB,UACzC,CAAC,WAAW,MAAM,CAAC,GAAG,MAAM,MAAM,mBAAmB,CAAC,CAAC,GACvD;AACA,YAAM,IAAI,MAAM,2CAA2C;AAAA,IAC7D;AAGA,QAAI,oBAAoB,WAAW,iBAAiB,QAAQ;AAC1D,YAAM,IAAI,MAAM,iDAAiD;AAAA,IACnE;AACA,eAAW,CAAC,OAAO,WAAW,KAAK,oBAAoB,QAAQ,GAAG;AAChE,YAAM,kBAAkB,iBAAiB,KAAK;AAC9C,YAAM,UAAU,MAAM,KAAK,WAAW,oBAAoB;AAAA,QACxD;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,UAAI,CAAC,SAAS;AACZ,cAAM,IAAI,MAAM,6BAA6B;AAAA,MAC/C;AAAA,IACF;AACA,QAAI,OAAO,SAAS,QAAQ;AAE1B,UAAI,OAAO,SAAS,WAAW,iBAAiB,QAAQ;AACtD,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF;AACA,YAAM,2BACJ,MAAM,KAAK,WAAW,oBAAoB;AAAA,QACxC,iBAAiB,CAAC;AAAA,MACpB;AACF,YAAM,2BAA2B,MAAM,QAAQ;AAAA,QAC7C,OAAO,SAAS;AAAA,UAAI,CAAC,YACnB,KAAK,WAAW,oBAAoB;AAAA,YAClC;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAAA,MACF;AACA,iBAAW;AAAA,QACT;AAAA,QACA;AAAA,MACF,KAAK,yBAAyB,QAAQ,GAAG;AACvC,cAAM,iBAAiB,iBAAiB,KAAK;AAC7C,YACE,iBAAiB,WAAW,eAAe,UAC3C,CAAC,iBAAiB,MAAM,CAAC,GAAG,MAAM,MAAM,eAAe,CAAC,CAAC,GACzD;AACA,gBAAM,IAAI,MAAM,2CAA2C;AAAA,QAC7D;AAAA,MACF;AAAA,IACF;AAGA,QAAI,mBAAmB;AACrB,UAAI,CAAC,qBAAqB;AACxB,cAAM,IAAI,MAAM,4CAA4C;AAAA,MAC9D;AAEA,UAAI;AACJ,UAAI;AACJ,UAAI;AACJ,UAAI,eAAe,mBAAmB;AACpC,qBAAa,CAAC,kBAAkB,SAAS;AACzC,yBAAiB,CAAC,kBAAkB,aAAa;AACjD,uBAAe,oBAAoB;AAAA,UACjC,CAAC,GAAG,MAAM,MAAM,kBAAkB;AAAA,QACpC;AAAA,MACF,OAAO;AACL,qBAAa,CAAC,GAAI,OAAO,WAAW,CAAC,CAAE;AACvC,yBAAiB,kBAAkB;AACnC,uBAAe;AAAA,MACjB;AAGA,UAAI,WAAW,WAAW,OAAO,SAAS,QAAQ;AAChD,cAAM,IAAI,MAAM,oDAAoD;AAAA,MACtE;AACA,UAAI,CAAC,WAAW,MAAM,CAAC,MAAM,OAAO,SAAS,SAAS,CAAC,CAAC,GAAG;AACzD,cAAM,IAAI,MAAM,sCAAsC;AAAA,MACxD;AAEA,iBAAW,CAAC,OAAO,SAAS,KAAK,WAAW,QAAQ,GAAG;AACrD,cAAM,gBAAgB,eAAe,GAAG,KAAK;AAC7C,cAAM,qBAAqB,aAAa,GAAG,KAAK;AAChD,YAAI,CAAC,eAAe;AAClB,gBAAM,IAAI,MAAM,sCAAsC;AAAA,QACxD;AACA,YAAI,CAAC,oBAAoB;AACvB,gBAAM,IAAI,MAAM,2CAA2C;AAAA,QAC7D;AACA,cAAM,UAAU,MAAM,KAAK,WAAW,oBAAoB;AAAA,UACxD;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAEA,YAAI,CAAC,SAAS;AACZ,gBAAM,IAAI,MAAM,2CAA2C;AAAA,QAC7D;AAAA,MACF;AAAA,IACF,WAAW,qBAAqB;AAC9B,YAAM,IAAI,MAAM,kDAAkD;AAAA,IACpE;AAAA,EACF;AACF;AAGA,MAAM,iBAAiB;AACvB,MAAM,gCAAgC;AACtC,MAAM,gCAAgC;AACtC,MAAM,iBAAiB;AAEvB,MAAM,uBAAmB;AAAA,EACvB,CAAC,MAAuB,aAAa;AACvC;AAEA,MAAM,uBAAmB,0BAAa;AAAA,EACpC,CAAC,cAAc,OAAG,yBAAY,CAAC,CAAC;AAAA,EAChC,CAAC,6BAA6B,OAAG,mBAAM,gBAAgB;AAAA,EACvD,CAAC,6BAA6B,OAAG,0BAAS,mBAAM,gBAAgB,CAAC;AAAA,EACjE,CAAC,cAAc,GAAG;AACpB,CAAC;AAEM,MAAM,6BAA6B;AAGnC,SAAS,yBAAyB,OAAe;AACtD,QAAM,WAAW,MAAM,QAAQ,MAAM,GAAG,EAAE,QAAQ,OAAO,GAAG;AAC5D,SAAO,mBAAmB,QAAQ;AACpC;AACO,SAAS,yBAAyB,OAAe;AACtD,QAAM,UAAU,mBAAmB,KAAK;AACxC,SAAO,QAAQ,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG;AACrD;AACO,SAAS,gBAAgB,OAAe,gBAAwB;AACrE,SAAO,GAAG,0BAA0B,GAAG,yBAAyB,KAAK,CAAC,IAAI,yBAAyB,cAAc,CAAC;AACpH;AACO,SAAS,gBAAgB,WAAmB;AACjD,MAAI,CAAC,UAAU,WAAW,0BAA0B,GAAG;AACrD,UAAM,IAAI,MAAM,oBAAoB;AAAA,EACtC;AAEA,QAAM,OAAO,UAAU,MAAM,2BAA2B,MAAM;AAC9D,QAAM,QAAQ,KAAK,MAAM,GAAG;AAE5B,MAAI,MAAM,WAAW,GAAG;AACtB,UAAM,IAAI,MAAM,2BAA2B;AAAA,EAC7C;AAEA,QAAM,CAAC,OAAO,cAAc,IAAI;AAEhC,SAAO;AAAA,IACL,OAAO,yBAAyB,KAAK;AAAA,IACrC,gBAAgB,yBAAyB,cAAc;AAAA,EACzD;AACF;AAEA,SAAS,eAAe,OAAiB;AACvC,MAAI,UAAU,OAAW,QAAO;AAEhC,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO,MAAM,IAAI,cAAc;AAAA,EACjC;AAEA,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,OAAO;AAAA,MACZ,OAAO,QAAQ,KAAK,EACjB,OAAO,CAAC,CAAC,EAAE,CAAC,MAAM,MAAM,MAAS,EACjC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC;AAAA,IAC3C;AAAA,EACF;AAEA,SAAO;AACT;",
+  "sourcesContent": ["import type { JSONSchema } from \"json-schema-to-ts\";\nimport type {\n  GraffitiObject,\n  GraffitiObjectBase,\n  GraffitiPostObject,\n} from \"@graffiti-garden/api\";\nimport type { ChannelAttestations } from \"../2-primitives/3-channel-attestations\";\nimport type { AllowedAttestations } from \"../2-primitives/4-allowed-attestations\";\nimport {\n  CONTENT_ADDRESS_METHOD_SHA256,\n  type ContentAddresses,\n} from \"../2-primitives/2-content-addresses\";\nimport { randomBytes } from \"@noble/hashes/utils.js\";\nimport {\n  encode as dagCborEncode,\n  decode as dagCborDecode,\n} from \"@ipld/dag-cbor\";\nimport {\n  type infer as infer_,\n  array,\n  custom,\n  looseObject,\n  optional,\n  strictObject,\n} from \"zod/mini\";\nimport { CHANNEL_ATTESTATION_METHOD_SHA256_ED25519 } from \"../2-primitives/3-channel-attestations\";\nimport { ALLOWED_ATTESTATION_METHOD_HMAC_SHA256 } from \"../2-primitives/4-allowed-attestations\";\nimport {\n  STRING_ENCODER_METHOD_BASE64URL,\n  type StringEncoder,\n} from \"../2-primitives/1-string-encoding\";\n\n// Objects have a max size of 32kb\n// If each channel and allowed actor takes 32 bytes\n// of space (i.e. they are hashed with 256 bit security)\n// then this means that the combined number of channels\n// and recipients of object has cannot exceed one thousand.\n// This seems like a reasonable limit and on par with\n// signal's group chat limit of 1000\nexport const MAX_OBJECT_SIZE_BYTES = 32 * 1024;\n\nexport class ObjectEncoding {\n  constructor(\n    protected readonly primitives: {\n      readonly stringEncoder: StringEncoder;\n      readonly channelAttestations: ChannelAttestations;\n      readonly allowedAttestations: AllowedAttestations;\n      readonly contentAddresses: ContentAddresses;\n    },\n  ) {}\n\n  async encode<Schema extends JSONSchema>(\n    partialObject: GraffitiPostObject<Schema>,\n    actor: string,\n  ): Promise<{\n    object: GraffitiObject<Schema>;\n    tags: Uint8Array[];\n    objectBytes: Uint8Array;\n    allowedTickets: Uint8Array[] | undefined;\n  }> {\n    // Clean out any undefineds\n    partialObject = cleanUndefined(partialObject);\n\n    const uniqueChannels = [...new Set(partialObject.channels)];\n\n    // Create a verifiable attestation that the actor\n    // knows the included channels without\n    // directly revealing any channel to anyone who doesn't\n    // know the channel already\n    const channelAttestationAndPublicIds = await Promise.all(\n      uniqueChannels.map((channel) =>\n        this.primitives.channelAttestations.attest(\n          // TODO: get this from the DID document of the actor\n          CHANNEL_ATTESTATION_METHOD_SHA256_ED25519,\n          actor,\n          channel,\n        ),\n      ),\n    );\n    const channelAttestations = channelAttestationAndPublicIds.map(\n      (c) => c.attestation,\n    );\n    const channelPublicIds = channelAttestationAndPublicIds.map(\n      (c) => c.channelPublicId,\n    );\n\n    const objectData: infer_<typeof ObjectDataSchema> = {\n      [VALUE_PROPERTY]: partialObject.value,\n      [CHANNEL_ATTESTATIONS_PROPERTY]: channelAttestations,\n      [NONCE_PROPERTY]: randomBytes(32),\n    };\n\n    let allowedTickets: Uint8Array[] | undefined = undefined;\n\n    // If the object is private...\n    if (Array.isArray(partialObject.allowed)) {\n      // Create an attestation that the object's allowed list\n      // includes the given actors, without revealing the\n      // presence of an actor on the list to anyone except\n      // that actor themselves. Each actor will receive a\n      // \"ticket\" that they can use to verify their own membership\n      // on the allowed list.\n      const allowedAttestations = await Promise.all(\n        partialObject.allowed.map(async (allowedActor) =>\n          this.primitives.allowedAttestations.attest(\n            // TODO: get this from the DID document of the actor\n            ALLOWED_ATTESTATION_METHOD_HMAC_SHA256,\n            allowedActor,\n          ),\n        ),\n      );\n      objectData[ALLOWED_ATTESTATIONS_PROPERTY] = allowedAttestations.map(\n        (a) => a.attestation,\n      );\n      allowedTickets = allowedAttestations.map((a) => a.ticket);\n    }\n\n    // Encode the mixed JSON/binary data using CBOR\n    const objectBytes = dagCborEncode(objectData);\n    if (objectBytes.byteLength > MAX_OBJECT_SIZE_BYTES) {\n      throw new Error(\"The object is too large\");\n    }\n\n    // Compute a public identifier (hash) of the object data\n    const objectContentAddressBytes =\n      await this.primitives.contentAddresses.register(\n        // TODO: get this from the DID document of the actor\n        CONTENT_ADDRESS_METHOD_SHA256,\n        objectBytes,\n      );\n    const objectContentAddress = await this.primitives.stringEncoder.encode(\n      STRING_ENCODER_METHOD_BASE64URL,\n      objectContentAddressBytes,\n    );\n    // Use it to compute the object's URL\n    const objectUrl = encodeObjectUrl(actor, objectContentAddress);\n\n    const tags = [new TextEncoder().encode(objectUrl), ...channelPublicIds];\n\n    const object: GraffitiObject<Schema> = {\n      value: partialObject.value,\n      channels: uniqueChannels,\n      url: objectUrl,\n      actor,\n      ...(partialObject.allowed\n        ? {\n            allowed: partialObject.allowed,\n          }\n        : {}),\n    } as GraffitiObject<Schema>;\n\n    // Return object URL and allowed secrets\n    return {\n      object,\n      tags,\n      objectBytes,\n      allowedTickets,\n    };\n  }\n\n  async validate(\n    object: GraffitiObjectBase,\n    tags: Uint8Array[],\n    objectBytes: Uint8Array,\n    privateObjectInfo?:\n      | {\n          recipient: string;\n          allowedTicket: Uint8Array;\n          allowedIndex: number;\n        }\n      | {\n          allowedTickets: Uint8Array[];\n        },\n  ): Promise<void> {\n    if (objectBytes.byteLength > MAX_OBJECT_SIZE_BYTES) {\n      throw new Error(\"Object is too big\");\n    }\n    const { actor, contentAddress } = decodeObjectUrl(object.url);\n    if (actor !== object.actor) {\n      throw new Error(\"Object actor does not match URL actor\");\n    }\n\n    const objectUrlTag = tags.at(0);\n    if (!objectUrlTag) {\n      throw new Error(\"No object URL tag\");\n    }\n    if (new TextDecoder().decode(objectUrlTag) !== object.url) {\n      throw new Error(\"Object URL tag does not match object URL\");\n    }\n    const channelPublicIds = tags.slice(1);\n\n    // Make sure the object content address matches the object content\n    const contentAddressBytes =\n      await this.primitives.stringEncoder.decode(contentAddress);\n    const contentAddressMethod =\n      await this.primitives.contentAddresses.getMethod(contentAddressBytes);\n    const expectedContentAddress =\n      await this.primitives.contentAddresses.register(\n        contentAddressMethod,\n        objectBytes,\n      );\n    if (\n      expectedContentAddress.length !== contentAddressBytes.length ||\n      !expectedContentAddress.every((b, i) => b === contentAddressBytes[i])\n    ) {\n      throw new Error(\"Content address is invalid\");\n    }\n\n    // Convert the raw object data from CBOR\n    // back to a javascript object\n    const objectDataUnknown = dagCborDecode(objectBytes);\n    const objectData = ObjectDataSchema.parse(objectDataUnknown);\n\n    // And extract the values\n    const value = objectData[VALUE_PROPERTY];\n    const channelAttestations = objectData[CHANNEL_ATTESTATIONS_PROPERTY];\n    const allowedAttestations = objectData[ALLOWED_ATTESTATIONS_PROPERTY];\n\n    // Validate that the object's value matches\n    const valueBytes = dagCborEncode(value);\n    const expectedValueBytes = dagCborEncode(object.value);\n    if (\n      valueBytes.length !== expectedValueBytes.length ||\n      !valueBytes.every((b, i) => b === expectedValueBytes[i])\n    ) {\n      throw new Error(\"Object value does not match storage value\");\n    }\n\n    // Validate the object's channels\n    if (channelAttestations.length !== channelPublicIds.length) {\n      throw new Error(\"Not as many channel attestations and public ids\");\n    }\n    for (const [index, attestation] of channelAttestations.entries()) {\n      const channelPublicId = channelPublicIds[index];\n      const isValid = await this.primitives.channelAttestations.validate(\n        attestation,\n        actor,\n        channelPublicId,\n      );\n      if (!isValid) {\n        throw new Error(\"Invalid channel attestation\");\n      }\n    }\n    if (object.channels.length) {\n      // If any channels are included, they all must be included\n      if (object.channels.length !== channelPublicIds.length) {\n        throw new Error(\n          \"Number of claimed channels does not match attestations/public IDs\",\n        );\n      }\n      const channelAttestationMethod =\n        await this.primitives.channelAttestations.getMethod(\n          channelPublicIds[0],\n        );\n      const expectedChannelPublicIds = await Promise.all(\n        object.channels.map((channel) =>\n          this.primitives.channelAttestations.register(\n            channelAttestationMethod,\n            channel,\n          ),\n        ),\n      );\n      for (const [\n        index,\n        expectedPublicId,\n      ] of expectedChannelPublicIds.entries()) {\n        const actualPublicId = channelPublicIds[index];\n        if (\n          expectedPublicId.length !== actualPublicId.length ||\n          !expectedPublicId.every((b, i) => b === actualPublicId[i])\n        ) {\n          throw new Error(\"Channel public id does not match expected\");\n        }\n      }\n    }\n\n    // Validate the recipient\n    if (privateObjectInfo) {\n      if (!allowedAttestations) {\n        throw new Error(\"Object is public but thought to be private\");\n      }\n\n      let recipients: string[];\n      let allowedTickets: Uint8Array[];\n      let attestations: Uint8Array[];\n      if (\"recipient\" in privateObjectInfo) {\n        recipients = [privateObjectInfo.recipient];\n        allowedTickets = [privateObjectInfo.allowedTicket];\n        attestations = allowedAttestations.filter(\n          (_, i) => i === privateObjectInfo.allowedIndex,\n        );\n      } else {\n        recipients = [...(object.allowed ?? [])];\n        allowedTickets = privateObjectInfo.allowedTickets;\n        attestations = allowedAttestations;\n      }\n\n      // All recipients must be in the allowed list\n      if (recipients.length !== object.allowed?.length) {\n        throw new Error(\"Recipient count does not match object allowed list\");\n      }\n      if (!recipients.every((r) => object.allowed?.includes(r))) {\n        throw new Error(\"Recipient not in object allowed list\");\n      }\n\n      for (const [index, recipient] of recipients.entries()) {\n        const allowedTicket = allowedTickets.at(index);\n        const allowedAttestation = attestations.at(index);\n        if (!allowedTicket) {\n          throw new Error(\"Missing allowed ticket for recipient\");\n        }\n        if (!allowedAttestation) {\n          throw new Error(\"Missing allowed attestation for recipient\");\n        }\n        const isValid = await this.primitives.allowedAttestations.validate(\n          allowedAttestation,\n          recipient,\n          allowedTicket,\n        );\n\n        if (!isValid) {\n          throw new Error(\"Invalid allowed attestation for recipient\");\n        }\n      }\n    } else if (allowedAttestations) {\n      throw new Error(\"Object is private but no recipient info provided\");\n    }\n  }\n}\n\n// A compact data representation of the object data\nconst VALUE_PROPERTY = \"v\";\nconst CHANNEL_ATTESTATIONS_PROPERTY = \"c\";\nconst ALLOWED_ATTESTATIONS_PROPERTY = \"a\";\nconst NONCE_PROPERTY = \"n\";\n\nconst Uint8ArraySchema = custom<Uint8Array>(\n  (v): v is Uint8Array => v instanceof Uint8Array,\n);\n\nconst ObjectDataSchema = strictObject({\n  [VALUE_PROPERTY]: looseObject({}),\n  [CHANNEL_ATTESTATIONS_PROPERTY]: array(Uint8ArraySchema),\n  [ALLOWED_ATTESTATIONS_PROPERTY]: optional(array(Uint8ArraySchema)),\n  [NONCE_PROPERTY]: Uint8ArraySchema,\n});\n\nexport const GRAFFITI_OBJECT_URL_PREFIX = \"graffiti:\";\n\n// Methods to encode and decode object URLs\nexport function encodeObjectUrlComponent(value: string) {\n  const replaced = value.replace(/:/g, \"!\").replace(/\\//g, \"~\");\n  return encodeURIComponent(replaced);\n}\nexport function decodeObjectUrlComponent(value: string) {\n  const decoded = decodeURIComponent(value);\n  return decoded.replace(/!/g, \":\").replace(/~/g, \"/\");\n}\nexport function encodeObjectUrl(actor: string, contentAddress: string) {\n  return `${GRAFFITI_OBJECT_URL_PREFIX}${encodeObjectUrlComponent(actor)}:${encodeObjectUrlComponent(contentAddress)}`;\n}\nexport function decodeObjectUrl(objectUrl: string) {\n  if (!objectUrl.startsWith(GRAFFITI_OBJECT_URL_PREFIX)) {\n    throw new Error(\"Invalid object URL\");\n  }\n\n  const rest = objectUrl.slice(GRAFFITI_OBJECT_URL_PREFIX.length);\n  const parts = rest.split(\":\");\n\n  if (parts.length !== 2) {\n    throw new Error(\"Invalid object URL format\");\n  }\n\n  const [actor, contentAddress] = parts;\n\n  return {\n    actor: decodeObjectUrlComponent(actor),\n    contentAddress: decodeObjectUrlComponent(contentAddress),\n  };\n}\n\nfunction cleanUndefined(value: any): any {\n  if (value === undefined) return null;\n\n  if (Array.isArray(value)) {\n    return value.map(cleanUndefined);\n  }\n\n  if (typeof value === \"object\") {\n    return Object.fromEntries(\n      Object.entries(value)\n        .filter(([, v]) => v !== undefined)\n        .map(([k, v]) => [k, cleanUndefined(v)]),\n    );\n  }\n\n  return value;\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAQA,+BAGO;AACP,mBAA4B;AAC5B,sBAGO;AACP,kBAOO;AACP,kCAA0D;AAC1D,kCAAuD;AACvD,6BAGO;AASA,MAAM,wBAAwB,KAAK;AAEnC,MAAM,eAAe;AAAA,EAC1B,YACqB,YAMnB;AANmB;AAAA,EAMlB;AAAA,EAEH,MAAM,OACJ,eACA,OAMC;AAED,oBAAgB,eAAe,aAAa;AAE5C,UAAM,iBAAiB,CAAC,GAAG,IAAI,IAAI,cAAc,QAAQ,CAAC;AAM1D,UAAM,iCAAiC,MAAM,QAAQ;AAAA,MACnD,eAAe;AAAA,QAAI,CAAC,YAClB,KAAK,WAAW,oBAAoB;AAAA;AAAA,UAElC;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,UAAM,sBAAsB,+BAA+B;AAAA,MACzD,CAAC,MAAM,EAAE;AAAA,IACX;AACA,UAAM,mBAAmB,+BAA+B;AAAA,MACtD,CAAC,MAAM,EAAE;AAAA,IACX;AAEA,UAAM,aAA8C;AAAA,MAClD,CAAC,cAAc,GAAG,cAAc;AAAA,MAChC,CAAC,6BAA6B,GAAG;AAAA,MACjC,CAAC,cAAc,OAAG,0BAAY,EAAE;AAAA,IAClC;AAEA,QAAI,iBAA2C;AAG/C,QAAI,MAAM,QAAQ,cAAc,OAAO,GAAG;AAOxC,YAAM,sBAAsB,MAAM,QAAQ;AAAA,QACxC,cAAc,QAAQ;AAAA,UAAI,OAAO,iBAC/B,KAAK,WAAW,oBAAoB;AAAA;AAAA,YAElC;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAAA,MACF;AACA,iBAAW,6BAA6B,IAAI,oBAAoB;AAAA,QAC9D,CAAC,MAAM,EAAE;AAAA,MACX;AACA,uBAAiB,oBAAoB,IAAI,CAAC,MAAM,EAAE,MAAM;AAAA,IAC1D;AAGA,UAAM,kBAAc,gBAAAA,QAAc,UAAU;AAC5C,QAAI,YAAY,aAAa,uBAAuB;AAClD,YAAM,IAAI,MAAM,yBAAyB;AAAA,IAC3C;AAGA,UAAM,4BACJ,MAAM,KAAK,WAAW,iBAAiB;AAAA;AAAA,MAErC;AAAA,MACA;AAAA,IACF;AACF,UAAM,uBAAuB,MAAM,KAAK,WAAW,cAAc;AAAA,MAC/D;AAAA,MACA;AAAA,IACF;AAEA,UAAM,YAAY,gBAAgB,OAAO,oBAAoB;AAE7D,UAAM,OAAO,CAAC,IAAI,YAAY,EAAE,OAAO,SAAS,GAAG,GAAG,gBAAgB;AAEtE,UAAM,SAAiC;AAAA,MACrC,OAAO,cAAc;AAAA,MACrB,UAAU;AAAA,MACV,KAAK;AAAA,MACL;AAAA,MACA,GAAI,cAAc,UACd;AAAA,QACE,SAAS,cAAc;AAAA,MACzB,IACA,CAAC;AAAA,IACP;AAGA,WAAO;AAAA,MACL;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,SACJ,QACA,MACA,aACA,mBASe;AACf,QAAI,YAAY,aAAa,uBAAuB;AAClD,YAAM,IAAI,MAAM,mBAAmB;AAAA,IACrC;AACA,UAAM,EAAE,OAAO,eAAe,IAAI,gBAAgB,OAAO,GAAG;AAC5D,QAAI,UAAU,OAAO,OAAO;AAC1B,YAAM,IAAI,MAAM,uCAAuC;AAAA,IACzD;AAEA,UAAM,eAAe,KAAK,GAAG,CAAC;AAC9B,QAAI,CAAC,cAAc;AACjB,YAAM,IAAI,MAAM,mBAAmB;AAAA,IACrC;AACA,QAAI,IAAI,YAAY,EAAE,OAAO,YAAY,MAAM,OAAO,KAAK;AACzD,YAAM,IAAI,MAAM,0CAA0C;AAAA,IAC5D;AACA,UAAM,mBAAmB,KAAK,MAAM,CAAC;AAGrC,UAAM,sBACJ,MAAM,KAAK,WAAW,cAAc,OAAO,cAAc;AAC3D,UAAM,uBACJ,MAAM,KAAK,WAAW,iBAAiB,UAAU,mBAAmB;AACtE,UAAM,yBACJ,MAAM,KAAK,WAAW,iBAAiB;AAAA,MACrC;AAAA,MACA;AAAA,IACF;AACF,QACE,uBAAuB,WAAW,oBAAoB,UACtD,CAAC,uBAAuB,MAAM,CAAC,GAAG,MAAM,MAAM,oBAAoB,CAAC,CAAC,GACpE;AACA,YAAM,IAAI,MAAM,4BAA4B;AAAA,IAC9C;AAIA,UAAM,wBAAoB,gBAAAC,QAAc,WAAW;AACnD,UAAM,aAAa,iBAAiB,MAAM,iBAAiB;AAG3D,UAAM,QAAQ,WAAW,cAAc;AACvC,UAAM,sBAAsB,WAAW,6BAA6B;AACpE,UAAM,sBAAsB,WAAW,6BAA6B;AAGpE,UAAM,iBAAa,gBAAAD,QAAc,KAAK;AACtC,UAAM,yBAAqB,gBAAAA,QAAc,OAAO,KAAK;AACrD,QACE,WAAW,WAAW,mBAAmB,UACzC,CAAC,WAAW,MAAM,CAAC,GAAG,MAAM,MAAM,mBAAmB,CAAC,CAAC,GACvD;AACA,YAAM,IAAI,MAAM,2CAA2C;AAAA,IAC7D;AAGA,QAAI,oBAAoB,WAAW,iBAAiB,QAAQ;AAC1D,YAAM,IAAI,MAAM,iDAAiD;AAAA,IACnE;AACA,eAAW,CAAC,OAAO,WAAW,KAAK,oBAAoB,QAAQ,GAAG;AAChE,YAAM,kBAAkB,iBAAiB,KAAK;AAC9C,YAAM,UAAU,MAAM,KAAK,WAAW,oBAAoB;AAAA,QACxD;AAAA,QACA;AAAA,QACA;AAAA,MACF;AACA,UAAI,CAAC,SAAS;AACZ,cAAM,IAAI,MAAM,6BAA6B;AAAA,MAC/C;AAAA,IACF;AACA,QAAI,OAAO,SAAS,QAAQ;AAE1B,UAAI,OAAO,SAAS,WAAW,iBAAiB,QAAQ;AACtD,cAAM,IAAI;AAAA,UACR;AAAA,QACF;AAAA,MACF;AACA,YAAM,2BACJ,MAAM,KAAK,WAAW,oBAAoB;AAAA,QACxC,iBAAiB,CAAC;AAAA,MACpB;AACF,YAAM,2BAA2B,MAAM,QAAQ;AAAA,QAC7C,OAAO,SAAS;AAAA,UAAI,CAAC,YACnB,KAAK,WAAW,oBAAoB;AAAA,YAClC;AAAA,YACA;AAAA,UACF;AAAA,QACF;AAAA,MACF;AACA,iBAAW;AAAA,QACT;AAAA,QACA;AAAA,MACF,KAAK,yBAAyB,QAAQ,GAAG;AACvC,cAAM,iBAAiB,iBAAiB,KAAK;AAC7C,YACE,iBAAiB,WAAW,eAAe,UAC3C,CAAC,iBAAiB,MAAM,CAAC,GAAG,MAAM,MAAM,eAAe,CAAC,CAAC,GACzD;AACA,gBAAM,IAAI,MAAM,2CAA2C;AAAA,QAC7D;AAAA,MACF;AAAA,IACF;AAGA,QAAI,mBAAmB;AACrB,UAAI,CAAC,qBAAqB;AACxB,cAAM,IAAI,MAAM,4CAA4C;AAAA,MAC9D;AAEA,UAAI;AACJ,UAAI;AACJ,UAAI;AACJ,UAAI,eAAe,mBAAmB;AACpC,qBAAa,CAAC,kBAAkB,SAAS;AACzC,yBAAiB,CAAC,kBAAkB,aAAa;AACjD,uBAAe,oBAAoB;AAAA,UACjC,CAAC,GAAG,MAAM,MAAM,kBAAkB;AAAA,QACpC;AAAA,MACF,OAAO;AACL,qBAAa,CAAC,GAAI,OAAO,WAAW,CAAC,CAAE;AACvC,yBAAiB,kBAAkB;AACnC,uBAAe;AAAA,MACjB;AAGA,UAAI,WAAW,WAAW,OAAO,SAAS,QAAQ;AAChD,cAAM,IAAI,MAAM,oDAAoD;AAAA,MACtE;AACA,UAAI,CAAC,WAAW,MAAM,CAAC,MAAM,OAAO,SAAS,SAAS,CAAC,CAAC,GAAG;AACzD,cAAM,IAAI,MAAM,sCAAsC;AAAA,MACxD;AAEA,iBAAW,CAAC,OAAO,SAAS,KAAK,WAAW,QAAQ,GAAG;AACrD,cAAM,gBAAgB,eAAe,GAAG,KAAK;AAC7C,cAAM,qBAAqB,aAAa,GAAG,KAAK;AAChD,YAAI,CAAC,eAAe;AAClB,gBAAM,IAAI,MAAM,sCAAsC;AAAA,QACxD;AACA,YAAI,CAAC,oBAAoB;AACvB,gBAAM,IAAI,MAAM,2CAA2C;AAAA,QAC7D;AACA,cAAM,UAAU,MAAM,KAAK,WAAW,oBAAoB;AAAA,UACxD;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAEA,YAAI,CAAC,SAAS;AACZ,gBAAM,IAAI,MAAM,2CAA2C;AAAA,QAC7D;AAAA,MACF;AAAA,IACF,WAAW,qBAAqB;AAC9B,YAAM,IAAI,MAAM,kDAAkD;AAAA,IACpE;AAAA,EACF;AACF;AAGA,MAAM,iBAAiB;AACvB,MAAM,gCAAgC;AACtC,MAAM,gCAAgC;AACtC,MAAM,iBAAiB;AAEvB,MAAM,uBAAmB;AAAA,EACvB,CAAC,MAAuB,aAAa;AACvC;AAEA,MAAM,uBAAmB,0BAAa;AAAA,EACpC,CAAC,cAAc,OAAG,yBAAY,CAAC,CAAC;AAAA,EAChC,CAAC,6BAA6B,OAAG,mBAAM,gBAAgB;AAAA,EACvD,CAAC,6BAA6B,OAAG,0BAAS,mBAAM,gBAAgB,CAAC;AAAA,EACjE,CAAC,cAAc,GAAG;AACpB,CAAC;AAEM,MAAM,6BAA6B;AAGnC,SAAS,yBAAyB,OAAe;AACtD,QAAM,WAAW,MAAM,QAAQ,MAAM,GAAG,EAAE,QAAQ,OAAO,GAAG;AAC5D,SAAO,mBAAmB,QAAQ;AACpC;AACO,SAAS,yBAAyB,OAAe;AACtD,QAAM,UAAU,mBAAmB,KAAK;AACxC,SAAO,QAAQ,QAAQ,MAAM,GAAG,EAAE,QAAQ,MAAM,GAAG;AACrD;AACO,SAAS,gBAAgB,OAAe,gBAAwB;AACrE,SAAO,GAAG,0BAA0B,GAAG,yBAAyB,KAAK,CAAC,IAAI,yBAAyB,cAAc,CAAC;AACpH;AACO,SAAS,gBAAgB,WAAmB;AACjD,MAAI,CAAC,UAAU,WAAW,0BAA0B,GAAG;AACrD,UAAM,IAAI,MAAM,oBAAoB;AAAA,EACtC;AAEA,QAAM,OAAO,UAAU,MAAM,2BAA2B,MAAM;AAC9D,QAAM,QAAQ,KAAK,MAAM,GAAG;AAE5B,MAAI,MAAM,WAAW,GAAG;AACtB,UAAM,IAAI,MAAM,2BAA2B;AAAA,EAC7C;AAEA,QAAM,CAAC,OAAO,cAAc,IAAI;AAEhC,SAAO;AAAA,IACL,OAAO,yBAAyB,KAAK;AAAA,IACrC,gBAAgB,yBAAyB,cAAc;AAAA,EACzD;AACF;AAEA,SAAS,eAAe,OAAiB;AACvC,MAAI,UAAU,OAAW,QAAO;AAEhC,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO,MAAM,IAAI,cAAc;AAAA,EACjC;AAEA,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,OAAO;AAAA,MACZ,OAAO,QAAQ,KAAK,EACjB,OAAO,CAAC,CAAC,EAAE,CAAC,MAAM,MAAM,MAAS,EACjC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC;AAAA,IAC3C;AAAA,EACF;AAEA,SAAO;AACT;",
   "names": ["dagCborEncode", "dagCborDecode"]
 }

package/dist/cjs/3-protocol/4-graffiti.js

@@ -87,6 +87,7 @@ const MESSAGE_LABEL_UNLABELED = 0;
 const MESSAGE_LABEL_VALID = 1;
 const MESSAGE_LABEL_TRASH = 2;
 const MESSAGE_LABEL_INVALID = 3;
+const CONCURRENCY = 16;
 class GraffitiDecentralized {
   dids = new import_dids.DecentralizedIdentifiers();
   authorization = new import_authorization.Authorization();
@@ -177,11 +178,7 @@ class GraffitiDecentralized {
         );
         input?.setAttribute("value", proposedHandle);
         input?.addEventListener("focus", () => input?.select());
-        new Promise((r) => {
-          setTimeout(() => r(), 0);
-        }).then(() => {
-          input?.focus();
-        });
+        setTimeout(() => input?.focus(), 0);
         template?.querySelector("#graffiti-login-handle-form")?.addEventListener("submit", async (e) => {
           e.preventDefault();
           input?.setAttribute("disabled", "true");
@@ -222,11 +219,12 @@ class GraffitiDecentralized {
           e.preventDefault();
           this.login_("");
         });
-        new Promise((r) => {
-          setTimeout(() => r(), 0);
-        }).then(() => {
-          template?.querySelector("#graffiti-login-new")?.focus();
-        });
+        setTimeout(
+          () => template?.querySelector(
+            "#graffiti-login-new"
+          )?.focus(),
+          0
+        );
       }
       const createUrl = new URL(this.identityCreatorEndpoint);
       createUrl.searchParams.set(
@@ -600,14 +598,14 @@ class GraffitiDecentralized {
       cursor: JSON.stringify({
         channels,
         cursors
-      }),
-      continue: (session2) => this.discoverMeta(channels, schema, cursors, session2)
+      })
     };
   }
   discover = (...args) => {
     const [channels, schema, session] = args;
     return this.discoverMeta(channels, schema, {}, session);
   };
+  // @ts-ignore
   continueDiscover = (...args) => {
     const [cursor, session] = args;
     let channels;
@@ -754,150 +752,210 @@ class GraffitiDecentralized {
       queryArguments.cursor,
       inboxToken
     );
+    const inFlight = [];
+    let doneValue = null;
     while (true) {
-      const itResult = await iterator.next();
-      if (itResult.done) return itResult.value;
-      const result = itResult.value;
-      const label = result.l;
-      if (label !== MESSAGE_LABEL_VALID && label !== MESSAGE_LABEL_UNLABELED)
-        continue;
-      const messageId = result.id;
-      const { o: object, m: metadataBytes, t: receivedTags } = result.m;
-      let metadata;
-      try {
-        const metadataRaw = (0, import_dag_cbor.decode)(metadataBytes);
-        metadata = MessageMetadataSchema.parse(metadataRaw);
-      } catch (e) {
+      while (doneValue === null && inFlight.length < CONCURRENCY) {
+        const itResult = await iterator.next();
+        if (itResult.done) {
+          doneValue = itResult.value;
+          break;
+        }
+        const processPromise = this.processOneLabeledMessage(
+          inboxEndpoint,
+          itResult.value,
+          inboxToken,
+          recipient
+        ).catch((e) => {
+          throw e;
+        });
+        inFlight.push(processPromise);
+      }
+      const nextProcessedPromise = inFlight.shift();
+      if (!nextProcessedPromise) {
+        if (doneValue !== null) return doneValue;
+        throw new Error("Process queue empty but no return value");
+      }
+      const processed = await nextProcessedPromise;
+      if (processed) yield processed;
+    }
+  }
+  async processOneLabeledMessage(inboxEndpoint, result, inboxToken, recipient) {
+    const label = result.l;
+    if (label !== MESSAGE_LABEL_VALID && label !== MESSAGE_LABEL_UNLABELED && label !== MESSAGE_LABEL_TRASH)
+      return;
+    const messageId = result.id;
+    const { o: object, m: metadataBytes, t: receivedTags } = result.m;
+    let metadata;
+    try {
+      const metadataRaw = (0, import_dag_cbor.decode)(metadataBytes);
+      metadata = MessageMetadataSchema.parse(metadataRaw);
+    } catch (e) {
+      this.inboxes.label(
+        inboxEndpoint,
+        messageId,
+        MESSAGE_LABEL_INVALID,
+        inboxToken
+      );
+      return;
+    }
+    const {
+      [MESSAGE_DATA_STORAGE_BUCKET_KEY]: storageBucketKey,
+      [MESSAGE_DATA_TOMBSTONED_MESSAGE_ID_KEY]: tombstonedMessageId
+    } = metadata;
+    const allowedTickets = MESSAGE_DATA_ALLOWED_TICKETS_KEY in metadata ? metadata[MESSAGE_DATA_ALLOWED_TICKETS_KEY] : void 0;
+    const announcements = MESSAGE_DATA_ANNOUNCEMENTS_KEY in metadata ? metadata[MESSAGE_DATA_ANNOUNCEMENTS_KEY] : void 0;
+    if (label === MESSAGE_LABEL_VALID) {
+      return {
+        messageId,
+        object,
+        storageBucketKey,
+        allowedTickets,
+        tags: receivedTags,
+        announcements
+      };
+    } else if (label === MESSAGE_LABEL_TRASH) {
+      if (!tombstonedMessageId) return;
+      const past = await this.inboxes.get(
+        inboxEndpoint,
+        tombstonedMessageId,
+        inboxToken
+      );
+      if (!past || past[import_inboxes.LABELED_MESSAGE_MESSAGE_KEY][import_inboxes.MESSAGE_OBJECT_KEY].url !== object.url)
+        return;
+      if (past[import_inboxes.LABELED_MESSAGE_LABEL_KEY] !== MESSAGE_LABEL_TRASH) {
         this.inboxes.label(
           inboxEndpoint,
-          messageId,
-          MESSAGE_LABEL_INVALID,
+          tombstonedMessageId,
+          MESSAGE_LABEL_TRASH,
           inboxToken
         );
-        continue;
-      }
-      const {
-        [MESSAGE_DATA_STORAGE_BUCKET_KEY]: storageBucketKey,
-        [MESSAGE_DATA_TOMBSTONED_MESSAGE_ID_KEY]: tombstonedMessageId
-      } = metadata;
-      const allowedTickets = MESSAGE_DATA_ALLOWED_TICKETS_KEY in metadata ? metadata[MESSAGE_DATA_ALLOWED_TICKETS_KEY] : void 0;
-      const announcements = MESSAGE_DATA_ANNOUNCEMENTS_KEY in metadata ? metadata[MESSAGE_DATA_ANNOUNCEMENTS_KEY] : void 0;
-      if (label === MESSAGE_LABEL_VALID) {
-        yield {
-          messageId,
-          object,
-          storageBucketKey,
-          allowedTickets,
-          tags: receivedTags,
-          announcements
-        };
-        continue;
       }
-      let validationError = void 0;
-      try {
-        const actor = object.actor;
-        const actorDocument = await this.dids.resolve(actor);
-        const storageBucketService = actorDocument?.service?.find(
-          (service) => service.id === import_sessions.DID_SERVICE_ID_GRAFFITI_STORAGE_BUCKET && service.type === import_sessions.DID_SERVICE_TYPE_GRAFFITI_STORAGE_BUCKET
+      return {
+        messageId,
+        tombstone: true,
+        object,
+        storageBucketKey,
+        allowedTickets,
+        tags: receivedTags,
+        announcements
+      };
+    }
+    let validationError = void 0;
+    try {
+      const actor = object.actor;
+      const actorDocument = await this.dids.resolve(actor);
+      const storageBucketService = actorDocument?.service?.find(
+        (service) => service.id === import_sessions.DID_SERVICE_ID_GRAFFITI_STORAGE_BUCKET && service.type === import_sessions.DID_SERVICE_TYPE_GRAFFITI_STORAGE_BUCKET
+      );
+      if (!storageBucketService) {
+        throw new import_api.GraffitiErrorNotFound(
+          `Actor ${actor} has no storage bucket service`
         );
-        if (!storageBucketService) {
-          throw new import_api.GraffitiErrorNotFound(
-            `Actor ${actor} has no storage bucket service`
-          );
-        }
-        if (typeof storageBucketService.serviceEndpoint !== "string") {
-          throw new import_api.GraffitiErrorNotFound(
-            `Actor ${actor} does not have a valid storage bucket endpoint`
-          );
-        }
-        const storageBucketEndpoint = storageBucketService.serviceEndpoint;
-        const objectBytes = await this.storageBuckets.get(
-          storageBucketEndpoint,
-          storageBucketKey,
-          import_object_encoding.MAX_OBJECT_SIZE_BYTES
+      }
+      if (typeof storageBucketService.serviceEndpoint !== "string") {
+        throw new import_api.GraffitiErrorNotFound(
+          `Actor ${actor} does not have a valid storage bucket endpoint`
         );
-        if (MESSAGE_DATA_ALLOWED_TICKET_KEY in metadata && !recipient) {
-          throw new import_api.GraffitiErrorForbidden(
-            `Recipient is required when allowed ticket is present`
-          );
-        }
-        const privateObjectInfo = allowedTickets ? { allowedTickets } : MESSAGE_DATA_ALLOWED_TICKET_KEY in metadata ? {
-          recipient: recipient ?? "null",
-          allowedTicket: metadata[MESSAGE_DATA_ALLOWED_TICKET_KEY],
-          allowedIndex: metadata[MESSAGE_DATA_ALLOWED_TICKET_INDEX_KEY]
-        } : void 0;
-        await this.objectEncoding.validate(
-          object,
-          receivedTags,
-          objectBytes,
-          privateObjectInfo
+      }
+      const storageBucketEndpoint = storageBucketService.serviceEndpoint;
+      const objectBytes = await this.storageBuckets.get(
+        storageBucketEndpoint,
+        storageBucketKey,
+        import_object_encoding.MAX_OBJECT_SIZE_BYTES
+      );
+      if (MESSAGE_DATA_ALLOWED_TICKET_KEY in metadata && !recipient) {
+        throw new import_api.GraffitiErrorForbidden(
+          `Recipient is required when allowed ticket is present`
         );
-      } catch (e) {
-        validationError = e;
       }
-      if (tombstonedMessageId) {
-        if (validationError instanceof import_api.GraffitiErrorNotFound) {
-          this.inboxes.get(inboxEndpoint, tombstonedMessageId, inboxToken).then((result2) => {
-            if (result2 && result2[import_inboxes.LABELED_MESSAGE_MESSAGE_KEY][import_inboxes.MESSAGE_OBJECT_KEY].url === object.url) {
-              this.inboxes.label(
-                inboxEndpoint,
-                tombstonedMessageId,
-                MESSAGE_LABEL_TRASH,
-                inboxToken
-              );
-            }
+      const privateObjectInfo = allowedTickets ? { allowedTickets } : MESSAGE_DATA_ALLOWED_TICKET_KEY in metadata ? {
+        recipient: recipient ?? "null",
+        allowedTicket: metadata[MESSAGE_DATA_ALLOWED_TICKET_KEY],
+        allowedIndex: metadata[MESSAGE_DATA_ALLOWED_TICKET_INDEX_KEY]
+      } : void 0;
+      await this.objectEncoding.validate(
+        object,
+        receivedTags,
+        objectBytes,
+        privateObjectInfo
+      );
+    } catch (e) {
+      validationError = e;
+    }
+    if (tombstonedMessageId) {
+      if (validationError instanceof import_api.GraffitiErrorNotFound) {
+        this.inboxes.get(inboxEndpoint, tombstonedMessageId, inboxToken).then((result2) => {
+          if (
+            // Make sure that it actually references the object being deleted
+            result2 && result2[import_inboxes.LABELED_MESSAGE_MESSAGE_KEY][import_inboxes.MESSAGE_OBJECT_KEY].url === object.url && // And that the object is not already marked as trash
+            result2[import_inboxes.LABELED_MESSAGE_LABEL_KEY] !== MESSAGE_LABEL_TRASH
+          ) {
             this.inboxes.label(
               inboxEndpoint,
-              messageId,
+              tombstonedMessageId,
               MESSAGE_LABEL_TRASH,
               inboxToken
             );
-          });
-          yield {
-            messageId,
-            tombstone: true,
-            object,
-            storageBucketKey,
-            allowedTickets,
-            tags: receivedTags,
-            announcements
-          };
-        } else {
-          console.error("Recieved an incorrect object");
-          console.error(validationError);
+          }
           this.inboxes.label(
             inboxEndpoint,
             messageId,
-            MESSAGE_LABEL_INVALID,
+            MESSAGE_LABEL_TRASH,
             inboxToken
           );
-        }
+        });
+        return {
+          messageId,
+          tombstone: true,
+          object,
+          storageBucketKey,
+          allowedTickets,
+          tags: receivedTags,
+          announcements
+        };
       } else {
-        if (validationError === void 0) {
-          this.inboxes.label(
-            inboxEndpoint,
-            messageId,
-            MESSAGE_LABEL_VALID,
-            inboxToken
-          );
-          yield {
-            messageId,
-            object,
-            storageBucketKey,
-            tags: receivedTags,
-            allowedTickets,
-            announcements
-          };
-        } else {
-          console.error("Recieved an incorrect object");
-          console.error(validationError);
-          this.inboxes.label(
-            inboxEndpoint,
-            messageId,
-            MESSAGE_LABEL_INVALID,
-            inboxToken
-          );
-        }
+        console.error("Recieved an incorrect tombstone object");
+        console.error(validationError);
+        this.inboxes.label(
+          inboxEndpoint,
+          messageId,
+          MESSAGE_LABEL_INVALID,
+          inboxToken
+        );
+      }
+    } else {
+      if (validationError === void 0) {
+        this.inboxes.label(
+          inboxEndpoint,
+          messageId,
+          MESSAGE_LABEL_VALID,
+          inboxToken
+        );
+        return {
+          messageId,
+          object,
+          storageBucketKey,
+          tags: receivedTags,
+          allowedTickets,
+          announcements
+        };
+      } else if (validationError instanceof import_api.GraffitiErrorNotFound) {
+        this.inboxes.label(
+          inboxEndpoint,
+          messageId,
+          MESSAGE_LABEL_TRASH,
+          inboxToken
+        );
+      } else {
+        console.error("Recieved an incorrect object");
+        console.error(validationError);
+        this.inboxes.label(
+          inboxEndpoint,
+          messageId,
+          MESSAGE_LABEL_INVALID,
+          inboxToken
+        );
       }
     }
   }