@interncom/diplomatic 0.20.0 → 0.21.1

package/dist/web/openClient.d.ts

@@ -6,6 +6,11 @@ type OpenDiplomaticClientBase = {
     clock?: IClock;
     /** Max wait for setSeed → Enclave.spawnSyncWorker handshake (default 15s). */
     readyTimeoutMs?: number;
+    /**
+     * Timed `[dip]` traces for local writes, EntDB, and watchers (default false).
+     * Process-wide; same flag as {@link openEntDB}.
+     */
+    verbose?: boolean;
     /**
      * Debounce local write → worker sync (default `defaultSyncDebounceMs`).
      * Use `0` in tests for an immediate upload-queue handoff.

package/dist/web/react/useClient.d.ts

@@ -17,6 +17,11 @@ type UseClientBase = {
      * Set false to notify only after durable commit.
      */
     optimistic?: boolean;
+    /**
+     * Timed `[dip]` traces (default false). See {@link openEntDB} /
+     * {@link openDiplomaticClient}.
+     */
+    verbose?: boolean;
 };
 /**
  * Worker path: IndexedDB on main; sync Worker appears on setSeed via Enclave.

package/dist/web/shared/crypto/enclave.d.ts

@@ -60,6 +60,7 @@ export type Identity = {
     kdmFor: (msgHeadEnc: Uint8Array) => Promise<Uint8Array>;
 };
 declare const SEAL_BIND_DOMAIN: Uint8Array<ArrayBufferLike>;
+declare const FP_MODE: Uint8Array<ArrayBufferLike>;
 declare const SEAL_KEY_LEN = 32;
 declare const SEAL_PRF_MIN_LEN = 16;
 /** Minimum musec length (Mandatory User-Space Entropy Contribution). */
@@ -142,6 +143,12 @@ export declare class Enclave {
     }>>;
     /** UV + overwrite largeBlob with zeros (destroys stored seed material). */
     static clearLargeBlob(credId: Uint8Array, opts?: LargeBlobRp): Promise<Status>;
+    /**
+     * Write numbered `n] xxxx xxxx` hex lines plus a # check to /dev/tty.
+     * Paced mode erases the previous line before the next (Enter between).
+     * Web bundles set DIP_CLI_DUMP=false; the write is compiled out.
+     */
+    dumpToTty(): Promise<Status>;
     /**
      * Absorb seed‖hosts plaintext (pair AEAD inner).
      * Encoder/Decoder never see the seed.
@@ -178,4 +185,4 @@ export declare class Enclave {
 }
 /** Derive seal key from PRF output (domain-separated). Used by enclave seal/unseal. */
 export declare function sealKeyFromPrf(crypto: ICrypto, prf: Uint8Array, domain?: Uint8Array): Promise<ValStat<Uint8Array>>;
-export { MASTER_SEED_LEN, MUSEC_MIN_LEN, SEAL_BIND_DOMAIN, SEAL_KEY_LEN, SEAL_PRF_MIN_LEN, };
+export { FP_MODE, MASTER_SEED_LEN, MUSEC_MIN_LEN, SEAL_BIND_DOMAIN, SEAL_KEY_LEN, SEAL_PRF_MIN_LEN, };

package/dist/web/shared/crypto/noble.d.ts

@@ -1,5 +1,5 @@
 import { type X25519Sk } from "./x25519.ts";
-import type { DerivationSeed, Hash, ICrypto, KeyPair } from "../types.ts";
+import type { Blake3Opts, DerivationSeed, Hash, ICrypto, KeyPair } from "../types.ts";
 /**
  * ICrypto: noble for XSalsa20 + blake3; WebCrypto Ed25519 + X25519
  * (our scalar; RFC 7748 check before trusting pub/DH).
@@ -15,7 +15,7 @@ export declare class NobleCrypto implements ICrypto {
     private importVerifyKey;
     signEd25519(message: Uint8Array | string, secKey: Uint8Array): Promise<Uint8Array>;
     checkSigEd25519(sig: Uint8Array, message: Uint8Array | string, pubKey: Uint8Array): Promise<boolean>;
-    blake3(data: Uint8Array): Promise<Hash>;
+    blake3(data: Uint8Array, opts?: Blake3Opts): Promise<Hash>;
     genX25519(): Promise<{
         priv: X25519Sk;
         pub: Uint8Array;

package/dist/web/shared/types.d.ts

@@ -125,6 +125,13 @@ export type Hash = Uint8Array & {
 export interface IHostCrypto {
     checkSigEd25519: (sig: Uint8Array, message: Uint8Array | string, pubKey: PublicKey) => Promise<boolean>;
 }
+/** BLAKE3 hash / MAC / KDF (noble: `key` XOR `context`, not both). */
+export type Blake3Opts = {
+    /** 32-byte MAC key. */
+    key?: Uint8Array;
+    /** KDF context (hardcoded, app-specific). */
+    context?: Uint8Array | string;
+};
 export interface ICrypto extends IHostCrypto {
     genRandomBytes: (bytes: number) => Promise<Uint8Array>;
     gen256BitSecureRandomSeed: () => Promise<Uint8Array>;
@@ -132,7 +139,7 @@ export interface ICrypto extends IHostCrypto {
     decryptXSalsa20Poly1305Combined: (headerAndCipher: Uint8Array, key: Uint8Array) => Promise<Uint8Array>;
     deriveEd25519KeyPair: (derivationSeed: DerivationSeed) => Promise<KeyPair>;
     signEd25519: (message: Uint8Array | string, secKey: PrivateKey) => Promise<Uint8Array>;
-    blake3: (data: Uint8Array) => Promise<Hash>;
+    blake3: (data: Uint8Array, opts?: Blake3Opts) => Promise<Hash>;
 }
 export interface IMsgpackCodec {
     encode: (source: unknown) => Uint8Array;

package/dist/web/types.d.ts

@@ -295,7 +295,7 @@ export interface IStateEmitter<T> {
 export interface IClient<Handle extends HostHandle> {
     /** Install session enclave (master seed stays inside enclave). */
     setSeed(enclave: Enclave, opts?: SetSeedOpts): Promise<void>;
-    link(host: IHostConnectionInfo<Handle>): Promise<void>;
+    link(host: IHostConnectionInfo<Handle>, connect?: boolean): Promise<void>;
     unlink(label: string): Promise<void>;
     /** Linked hosts from the protocol store (handle, label, lastSeq, …). */
     hosts(): Promise<IHostRow<Handle>[]>;

package/dist/web/verbose.d.ts

@@ -0,0 +1,4 @@
+/** Turn `[dip]` timings on or off. */
+export declare function setVerbose(v: boolean): void;
+/** Timed `[dip]` line when verbose. */
+export declare function dipLog(msg: string, extra?: object): void;