@interncom/diplomatic 0.21.1 → 0.23.0

package/dist/web/entdb/cached.d.ts

@@ -25,6 +25,10 @@ export type OpenEntDBOptions = {
      * Process-wide; also accepted on openDiplomaticClient / useClient.
      */
     verbose?: boolean;
+    /** Account whose EntDB to open. Default is the unlabeled account. */
+    label?: string;
+    /** Database name. The worker passes this and does not open the catalog. */
+    name?: string;
 };
 export type CachedEntDBOptions = {
     /** Secondary mem indexes (default true). See {@link OpenEntDBOptions.indexes}. */

package/dist/web/entdb/entdb.d.ts

@@ -1,3 +1,4 @@
+import type { EntRlm } from "../stores/realm";
 import { Status } from "../shared/consts";
 import { ValStat } from "../shared/valstat";
 import { EntityID, Hash, ICrypto, IEntRev, IMessageHead, IMsgEntBody, IOp } from "../shared/types";
@@ -9,6 +10,8 @@ export interface IEntity<T = unknown> extends Omit<IMsgEntBody<T>, "body"> {
     createdAt: Date;
     ctr: number;
     body: T;
+    /** Realm label. Omitted for the default realm. */
+    rlm?: EntRlm;
 }
 /**
  * Deleted eid's LWW frontier: eid + updatedAt + ctr only (no type/body/…).

package/dist/web/entdb/idb.d.ts

@@ -8,15 +8,20 @@ export declare const typeUpdatedAtIndexName = "entity_type_updated_at";
 export declare const typeParentIndexName = "entity_type_parent_id";
 /** multiEntry index on tgs[]; query by tag then filter by type. */
 export declare const tagsIndexName = "entity_tags";
-/** Shared by main thread and sync worker — must stay in lockstep. */
+/** Realm label. Rows in the default realm omit rlm and are not in this index. */
+export declare const realmIndexName = "entity_rlm";
+/** Pre-split EntDB name. New accounts use `ents-<acct>`. */
 export declare const ENT_IDB_NAME = "db";
-/** v14: drop [`typ`,`gid`] index (gid superseded by tags). */
-export declare const ENT_IDB_VERSION = 14;
+/** v15: optional rlm (realm label) index. Omitted on the default realm. */
+export declare const ENT_IDB_VERSION = 15;
 export declare class EntIDB implements IEntDB {
+    private name;
     db: IDBDatabase | undefined;
     /** In-flight open; coalesces concurrent ensureDb / peer upgrade reopen. */
     private opening;
+    constructor(name: string);
     init(): Promise<void>;
+    close(): void;
     /**
      * Open (or reopen) the shared EntDB IDB connection.
      * Main + worker both hold connections; on versionchange we must close so the
@@ -43,4 +48,4 @@ export declare class EntIDB implements IEntDB {
     checksum(crypto: ICrypto): Promise<ValStat<Hash>>;
 }
 /** Durable IndexedDB EntDB. Internal-only. Apps use {@link openEntDB} instead. */
-export declare function openEntIDB(): Promise<EntIDB>;
+export declare function openEntIDB(name: string): Promise<EntIDB>;

package/dist/web/index.d.ts

@@ -17,12 +17,17 @@ import { TypedEventEmitter } from "./shared/events";
 import { asSealedMasterKey, MASTER_SEED_LEN, SEALED_MASTER_KEY_LEN, type SealedMasterKey } from "./shared/seed";
 import { EntityID, HostHandle, ICrypto, IDeleteParams, IEntRev, IHostConnectionInfo, IMessage, IMutateOp, type IOp, IStateManager, ITransport, IUpdateParams } from "./shared/types";
 import { Enclave } from "./shared/crypto/enclave";
+import type { Identity } from "./shared/crypto/enclave";
+import { asChildKey, asHostRlm, type ChildKey, type HostRlm, nullKDM, Purpose } from "./shared/crypto/derivation";
+import type { PairRequest } from "./shared/crypto/pairing";
+import type { BindPrior, PrfBound } from "./shared/crypto/prf";
 import { nullStateManager, StateManager } from "./state";
-import { IDBSeedStore } from "./stores/idb/seed";
+import type { EntRlm, IRealm } from "./stores/realm";
+import { IDBAccountStore } from "./stores/idb/account";
 import { IDBStore, openIDBStore } from "./stores/idb/store";
 import { MemoryStore } from "./stores/memory/store";
 import { SingletonStateManager } from "./shared/singleton";
-import type { ApldState, Applier, HostStatsUpdate, IClient, IDiplomaticClientState, IHostRow, IStore, IStoredMessage, IStoredMessageData, IStoredMessageWrite, ListMsgsOpts, ReconcileOpts, ReconcileReport, SetSeedOpts } from "./types";
+import type { ApldState, Applier, HostSeqsUpdate, IClient, IDiplomaticClientState, IHostRow, IStore, IStoredMessage, IStoredMessageData, IStoredMessageWrite, ListMsgsOpts, OpenAccount, ReconcileOpts, ReconcileReport, SetSeedOpts } from "./types";
 import { APLD_APPLIED, APLD_ERROR, APLD_PENDING, apldFromStored, isApldState, isPendingApply, isTerminalApplyFailure, setApld } from "./types";
 import type { SyncProgressEvent } from "./progress";
 import { defaultPeekProgressEvery, idleProgress, shouldEmitItemProgress } from "./progress";
@@ -33,7 +38,8 @@ import { KEYRING_MAX, keyringCredIds, keyringKind, keyringLabel, PrfSeedStore }
 import type { Keyring, KeyringEntry, KeyringRow, PersistKeyring, PrfSeedStoreOpts } from "./passkey/prf-store";
 import type { PasskeySeedStoreOpts } from "./passkey/seed";
 import { type BundleHost } from "./shared/codecs/bundleHost";
-import { asDHKEReq, asDHKEResp, PairRequest } from "./shared/crypto/pairing";
+import { type IKDM } from "./shared/codecs/kdm";
+import { asDHKEReq, asDHKEResp } from "./shared/crypto/pairing";
 import type { DHKEReq, DHKEResp } from "./shared/crypto/pairing";
 import { checksumEntRevs, checksumSet, cmpBytes, encodeEntRev } from "./shared/checksum";
 import { openDiplomaticClient, type OpenDiplomaticClientMainOptions, type OpenDiplomaticClientOptions, type OpenDiplomaticClientWorkerOptions, type OpenedDiplomaticClient } from "./openClient";
@@ -43,5 +49,5 @@ import type { WipeOpts } from "./types";
 /** Platform advertises largeBlob (not a guarantee the binding key has it). */
 export { largeBlobCapable } from "./shared/webauthn/largeBlob";
 export { webAuthnLastError } from "./shared/webauthn/common";
-export { APLD_APPLIED, APLD_ERROR, APLD_PENDING, apldFromStored, asDHKEReq, asDHKEResp, asSealedMasterKey, b64tob, b64urltob, btob64, btob64url, btoh, CachedEntDB, checksumEntRevs, checksumSet, Clock, cmpBytes, crypto, Decoder, DEFAULT_PRF_SALT, defaultPeekProgressEvery, defaultWebAuthnRpId, eidCodec, Enclave, encodeEntRev, Encoder, EntDBMemory, EntIDB, EntitiesQuery, EntityID, entStateManager, genSingletonEID, hostHTTPTransport, htob, HTTPTransport, IDBSeedStore, IDBStore, idleProgress, IEntDB, IEntity, isApldState, isLiveEnt, isPendingApply, isTerminalApplyFailure, isTombstone, IStore, KEYRING_MAX, keyringCredIds, keyringKind, keyringLabel, MASTER_SEED_LEN, MemoryStore, normalizeTags, nullEntDB, nullStateManager, openDiplomaticClient, openEntDB, openIDBStore, PairRequest, PasskeySeedStore, prfCapable, PrfSeedStore, revFromEntity, revFromHead, SEALED_MASTER_KEY_LEN, setApld, shouldEmitItemProgress, SingletonStateManager, StateManager, Status, SyncClient, TypedEventEmitter, useClient, useClientState, useClientXferState, useStateWatcher, useStateWatcherSuspense, useSyncOnResume, WorkerClient, };
-export type { ApldState, Applier, BundleHost, CachedEntDBOptions, DateSpec, DHKEReq, DHKEResp, EntDBMemoryOptions, HostHandle, HostStatsUpdate, IClient, ICrypto, IDateRange, IDeleteParams, IDiplomaticClientState, IEntRev, IEntRow, IHostConnectionInfo, IHostRow, IMessage, IMutateOp, IOp, IStateManager, IStoredMessage, IStoredMessageData, IStoredMessageWrite, ITagRange, ITombstone, ITransport, IUpdateParams, Keyring, KeyringEntry, KeyringRow, ListMsgsOpts, OpenDiplomaticClientMainOptions, OpenDiplomaticClientOptions, OpenDiplomaticClientWorkerOptions, OpenedDiplomaticClient, OpenEntDBOptions, PasskeySeedStoreOpts, PersistKeyring, PrfRp, PrfSeedStoreOpts, ReconcileOpts, ReconcileReport, SealedMasterKey, SetSeedOpts, SyncProgressEvent, TagSpec, WipeOpts, WorkerClientOptions, };
+export { APLD_APPLIED, APLD_ERROR, APLD_PENDING, apldFromStored, asChildKey, asDHKEReq, asDHKEResp, asHostRlm, asSealedMasterKey, b64tob, b64urltob, btob64, btob64url, btoh, CachedEntDB, checksumEntRevs, checksumSet, Clock, cmpBytes, crypto, Decoder, DEFAULT_PRF_SALT, defaultPeekProgressEvery, defaultWebAuthnRpId, eidCodec, Enclave, encodeEntRev, Encoder, EntDBMemory, EntIDB, EntitiesQuery, EntityID, entStateManager, genSingletonEID, hostHTTPTransport, htob, HTTPTransport, IDBAccountStore, IDBStore, idleProgress, IEntDB, IEntity, isApldState, isLiveEnt, isPendingApply, isTerminalApplyFailure, isTombstone, IStore, KEYRING_MAX, keyringCredIds, keyringKind, keyringLabel, MASTER_SEED_LEN, MemoryStore, normalizeTags, nullEntDB, nullKDM, nullStateManager, openDiplomaticClient, openEntDB, openIDBStore, PasskeySeedStore, prfCapable, PrfSeedStore, Purpose, revFromEntity, revFromHead, SEALED_MASTER_KEY_LEN, setApld, shouldEmitItemProgress, SingletonStateManager, StateManager, Status, SyncClient, TypedEventEmitter, useClient, useClientState, useClientXferState, useStateWatcher, useStateWatcherSuspense, useSyncOnResume, WorkerClient, };
+export type { ApldState, Applier, BindPrior, BundleHost, CachedEntDBOptions, ChildKey, DateSpec, DHKEReq, DHKEResp, EntDBMemoryOptions, EntRlm, HostHandle, HostRlm, HostSeqsUpdate, IClient, ICrypto, IDateRange, IDeleteParams, Identity, IDiplomaticClientState, IEntRev, IEntRow, IHostConnectionInfo, IHostRow, IKDM, IMessage, IMutateOp, IOp, IRealm, IStateManager, IStoredMessage, IStoredMessageData, IStoredMessageWrite, ITagRange, ITombstone, ITransport, IUpdateParams, Keyring, KeyringEntry, KeyringRow, ListMsgsOpts, OpenAccount, OpenDiplomaticClientMainOptions, OpenDiplomaticClientOptions, OpenDiplomaticClientWorkerOptions, OpenedDiplomaticClient, OpenEntDBOptions, PairRequest, PasskeySeedStoreOpts, PersistKeyring, PrfBound, PrfRp, PrfSeedStoreOpts, ReconcileOpts, ReconcileReport, SealedMasterKey, SetSeedOpts, SyncProgressEvent, TagSpec, WipeOpts, WorkerClientOptions, };