@interncom/diplomatic 0.22.0 → 0.24.0

package/dist/cli/src/index.d.ts

@@ -3,11 +3,13 @@ import { IClock } from "../shared/clock.ts";
 import type { IBagPeekItem } from "../shared/codecs/peekItem.ts";
 import { IBagPullItem } from "../shared/codecs/pullItem.ts";
 import { IBagPushItem } from "../shared/codecs/pushItem.ts";
+import type { IKDM } from "../shared/codecs/kdm.ts";
 import { Status } from "../shared/consts.ts";
 import { Enclave } from "../shared/crypto/enclave.ts";
 import { HostHandle, IHostConnectionInfo, IMessage, ITransport } from "../shared/types.ts";
 import { ValStat } from "../shared/valstat.ts";
 export declare class CLIClient<Handle extends HostHandle> {
+    #private;
     private enclave;
     private conn?;
     private clock;
@@ -16,10 +18,10 @@ export declare class CLIClient<Handle extends HostHandle> {
         clock?: IClock;
     });
     connect(host: IHostConnectionInfo<Handle>, transport: ITransport): Promise<Status>;
-    push(msgs: IMessage[]): Promise<ValStat<IBagPushItem[]>>;
-    peek(lastSeq: number): Promise<ValStat<IBagPeekItem[]>>;
-    pull(seqs: number[]): Promise<ValStat<IBagPullItem[]>>;
-    open(peekItem: IBagPeekItem, pullItem: IBagPullItem): Promise<ValStat<IOpenBag>>;
+    push(msgs: IMessage[], realm?: IKDM): Promise<ValStat<IBagPushItem[]>>;
+    peek(lastSeq: number, realm?: IKDM): Promise<ValStat<IBagPeekItem[]>>;
+    pull(seqs: number[], realm?: IKDM): Promise<ValStat<IBagPullItem[]>>;
+    open(peekItem: IBagPeekItem, pullItem: IBagPullItem, realm?: IKDM): Promise<ValStat<IOpenBag>>;
     upsertSingletonSync(type: string, body: Uint8Array): Promise<Status>;
     listen(onNotification: (bytes: Uint8Array) => Promise<Status>, onDisconnect?: () => void, onConnect?: () => void): Promise<Status>;
     isConnected(): boolean;
@@ -37,7 +39,6 @@ export declare function initCLIOrPanic<Handle extends URL>({ enclave, host, tran
 /** Load master seed hex from env and construct an Enclave immediately. */
 export declare function loadEnclaveOrPanic(envVar: string): Enclave;
 export declare function loadHostOrPanic(envVar: string): IHostConnectionInfo<URL>;
-export { default as msgpack } from "../bun/src/codec.ts";
 export { Decoder } from "../shared/codec.ts";
 export { notifItemCodec } from "../shared/codecs/notifItem.ts";
 export type { IBagNotifItem } from "../shared/codecs/notifItem.ts";

package/dist/web/client.d.ts

@@ -5,8 +5,10 @@ import { EncodedMessage } from "./shared/message";
 import type { Enclave } from "./shared/crypto/enclave";
 import { EntityID, Hash, HostHandle, ICrypto, IDeleteParams, IEntRev, IHostConnectionInfo, IInsertParams, IMessageHead, IStateManager, ITransport, IUpdateParams } from "./shared/types";
 import { ValStat } from "./shared/valstat";
-import { ApldState, IClient, IDiplomaticClientState, IDiplomaticClientXferState, IHostRow, IStateEmitter, IStore, IStoredMessage, ListMsgsOpts, ReconcileOpts, ReconcileReport, SetSeedOpts, WipeOpts } from "./types";
+import { type IBlobUpdate, type IBlobWrite } from "./shared/blobs";
+import { ApldState, IClient, IDiplomaticClientState, IDiplomaticClientXferState, IHostRow, IStateEmitter, IStore, IStoredMessage, ListMsgsOpts, OpenAccount, ReconcileOpts, ReconcileReport, SetSeedOpts, WipeOpts } from "./types";
 export declare class SyncClient<Handle extends HostHandle> implements IClient<Handle> {
+    #private;
     private clock;
     private state;
     private store;
@@ -56,7 +58,10 @@ export declare class SyncClient<Handle extends HostHandle> implements IClient<Ha
     onScheduleSync?: (() => void) | undefined);
     /** Record phase progress and notify xferState listeners. */
     private emitProgress;
-    setSeed(enclave: Enclave, opts?: SetSeedOpts): Promise<void>;
+    /** Account this client is operating as, if one is open. */
+    selected(): OpenAccount<Handle> | undefined;
+    setSeed(enclave: Enclave, opts?: SetSeedOpts): Promise<Status>;
+    adopt(enclave: Enclave, label?: string): Promise<Status>;
     private getClientState;
     private getXferState;
     /**
@@ -121,13 +126,18 @@ export declare class SyncClient<Handle extends HostHandle> implements IClient<Ha
      */
     private updateWithSkew;
     updateRaw(prior: IEntRev, bod: EncodedMessage | undefined, force?: boolean, typ?: string): Promise<ValStat<IMessageHead>>;
-    insert<T = unknown>(op: IInsertParams<T>): Promise<ValStat<IMessageHead>>;
-    update<T = unknown>(op: IUpdateParams<T>): Promise<ValStat<IMessageHead>>;
+    insert(op: IInsertParams<Uint8Array>): Promise<ValStat<IMessageHead>>;
+    update(op: IUpdateParams<Uint8Array>): Promise<ValStat<IMessageHead>>;
     /**
      * Delete by `{ prior }` (preferred) or `{ eid }` (archive lookup).
      * `force` defaults to true (skew recovery on delete).
      */
     delete(op: IDeleteParams): Promise<ValStat<IMessageHead>>;
+    insertBlob(mime: string, bytes: Uint8Array, opts?: IBlobWrite): Promise<ValStat<IMessageHead>>;
+    updateBlob(eid: EntityID, bytes: Uint8Array, opts?: IBlobUpdate): Promise<ValStat<IMessageHead>>;
+    deleteBlob(eid: EntityID): Promise<ValStat<IMessageHead>>;
+    readBlob(eid: EntityID): Promise<ValStat<Uint8Array>>;
+    private lastMsg;
     /**
      * Latest rev for eid from the message archive.
      * If none, returns ctr -1 so the next write uses ctr 0.
@@ -168,9 +178,10 @@ export declare class SyncClient<Handle extends HostHandle> implements IClient<Ha
     /** Count archive rows; optional apld filter. Prefer over list+length. */
     countMsgs(apld?: ApldState): Promise<number>;
     /**
-     * Full inventory of one host (peek seq 0): advances lastSeq; optionally
-     * enqueues pull/push. Waits out in-flight {@link sync} first (same as
-     * {@link rebuild}). By default drains via {@link sync}, then re-inventories.
+     * Full inventory of one host (peek seq 0 per realm). Sets each cursor and
+     * optionally enqueues pull/push. Waits out in-flight {@link sync} first
+     * (same as {@link rebuild}). By default drains via {@link sync}, then
+     * re-inventories.
      * Returns ephemeral {@link ReconcileReport} (msgcheck, numBags, numDupes) —
      * bag tallies are not persisted.
      */

package/dist/web/crypto.d.ts

@@ -1,3 +1,2 @@
-import { NobleCrypto } from "./shared/crypto/noble";
-declare const crypto: NobleCrypto;
-export default crypto;
+import { noble } from "./shared/crypto/noble";
+export default noble;

package/dist/web/entdb/cached.d.ts

@@ -25,6 +25,10 @@ export type OpenEntDBOptions = {
      * Process-wide; also accepted on openDiplomaticClient / useClient.
      */
     verbose?: boolean;
+    /** Account whose EntDB to open. Default is the unlabeled account. */
+    label?: string;
+    /** Database name. The worker passes this and does not open the catalog. */
+    name?: string;
 };
 export type CachedEntDBOptions = {
     /** Secondary mem indexes (default true). See {@link OpenEntDBOptions.indexes}. */

package/dist/web/entdb/entdb.d.ts

@@ -1,3 +1,4 @@
+import type { EntRlm } from "../stores/realm";
 import { Status } from "../shared/consts";
 import { ValStat } from "../shared/valstat";
 import { EntityID, Hash, ICrypto, IEntRev, IMessageHead, IMsgEntBody, IOp } from "../shared/types";
@@ -9,6 +10,8 @@ export interface IEntity<T = unknown> extends Omit<IMsgEntBody<T>, "body"> {
     createdAt: Date;
     ctr: number;
     body: T;
+    /** Realm label. Omitted for the default realm. */
+    rlm?: EntRlm;
 }
 /**
  * Deleted eid's LWW frontier: eid + updatedAt + ctr only (no type/body/…).

package/dist/web/entdb/idb.d.ts

@@ -8,15 +8,18 @@ export declare const typeUpdatedAtIndexName = "entity_type_updated_at";
 export declare const typeParentIndexName = "entity_type_parent_id";
 /** multiEntry index on tgs[]; query by tag then filter by type. */
 export declare const tagsIndexName = "entity_tags";
-/** Shared by main thread and sync worker — must stay in lockstep. */
-export declare const ENT_IDB_NAME = "db";
-/** v14: drop [`typ`,`gid`] index (gid superseded by tags). */
-export declare const ENT_IDB_VERSION = 14;
+/** Realm label. Rows in the default realm omit rlm and are not in this index. */
+export declare const realmIndexName = "entity_rlm";
+/** Current EntDB schema. Default-realm rows omit rlm. */
+export declare const ENT_IDB_VERSION = 15;
 export declare class EntIDB implements IEntDB {
+    private name;
     db: IDBDatabase | undefined;
     /** In-flight open; coalesces concurrent ensureDb / peer upgrade reopen. */
     private opening;
+    constructor(name: string);
     init(): Promise<void>;
+    close(): void;
     /**
      * Open (or reopen) the shared EntDB IDB connection.
      * Main + worker both hold connections; on versionchange we must close so the
@@ -43,4 +46,4 @@ export declare class EntIDB implements IEntDB {
     checksum(crypto: ICrypto): Promise<ValStat<Hash>>;
 }
 /** Durable IndexedDB EntDB. Internal-only. Apps use {@link openEntDB} instead. */
-export declare function openEntIDB(): Promise<EntIDB>;
+export declare function openEntIDB(name: string): Promise<EntIDB>;

package/dist/web/index.d.ts

@@ -11,19 +11,24 @@ import { b64tob, b64urltob, btob64, btob64url, btoh, htob } from "./shared/binar
 import { Clock } from "./shared/clock";
 import { Decoder, Encoder } from "./shared/codec";
 import { eidCodec, genSingletonEID } from "./shared/codecs/eid";
+import { encodeEnt, entCodec } from "./shared/codecs/ent";
 import { Status } from "./shared/consts";
 import { hostHTTPTransport, HTTPTransport } from "./shared/http";
 import { TypedEventEmitter } from "./shared/events";
 import { asSealedMasterKey, MASTER_SEED_LEN, SEALED_MASTER_KEY_LEN, type SealedMasterKey } from "./shared/seed";
 import { EntityID, HostHandle, ICrypto, IDeleteParams, IEntRev, IHostConnectionInfo, IMessage, IMutateOp, type IOp, IStateManager, ITransport, IUpdateParams } from "./shared/types";
 import { Enclave } from "./shared/crypto/enclave";
-import type { PairRequest } from "./shared/crypto/enclave";
+import type { BagManager } from "./shared/crypto/bagman";
+import { asChildKey, asHostRlm, type ChildKey, type HostRlm, nullKDM, Purpose } from "./shared/crypto/derivation";
+import type { PairRequest } from "./shared/crypto/pairing";
+import type { BindPrior, PrfBound } from "./shared/crypto/prf";
 import { nullStateManager, StateManager } from "./state";
-import { IDBSeedStore } from "./stores/idb/seed";
+import type { EntRlm, IRealm } from "./stores/realm";
+import { IDBAccountStore } from "./stores/idb/account";
 import { IDBStore, openIDBStore } from "./stores/idb/store";
 import { MemoryStore } from "./stores/memory/store";
 import { SingletonStateManager } from "./shared/singleton";
-import type { ApldState, Applier, HostStatsUpdate, IClient, IDiplomaticClientState, IHostRow, IStore, IStoredMessage, IStoredMessageData, IStoredMessageWrite, ListMsgsOpts, ReconcileOpts, ReconcileReport, SetSeedOpts } from "./types";
+import type { ApldState, Applier, HostSeqsUpdate, IClient, IDiplomaticClientState, IHostRow, IStore, IStoredMessage, IStoredMessageData, IStoredMessageWrite, ListMsgsOpts, OpenAccount, ReconcileOpts, ReconcileReport, SetSeedOpts } from "./types";
 import { APLD_APPLIED, APLD_ERROR, APLD_PENDING, apldFromStored, isApldState, isPendingApply, isTerminalApplyFailure, setApld } from "./types";
 import type { SyncProgressEvent } from "./progress";
 import { defaultPeekProgressEvery, idleProgress, shouldEmitItemProgress } from "./progress";
@@ -34,6 +39,7 @@ import { KEYRING_MAX, keyringCredIds, keyringKind, keyringLabel, PrfSeedStore }
 import type { Keyring, KeyringEntry, KeyringRow, PersistKeyring, PrfSeedStoreOpts } from "./passkey/prf-store";
 import type { PasskeySeedStoreOpts } from "./passkey/seed";
 import { type BundleHost } from "./shared/codecs/bundleHost";
+import { type IKDM } from "./shared/codecs/kdm";
 import { asDHKEReq, asDHKEResp } from "./shared/crypto/pairing";
 import type { DHKEReq, DHKEResp } from "./shared/crypto/pairing";
 import { checksumEntRevs, checksumSet, cmpBytes, encodeEntRev } from "./shared/checksum";
@@ -44,5 +50,5 @@ import type { WipeOpts } from "./types";
 /** Platform advertises largeBlob (not a guarantee the binding key has it). */
 export { largeBlobCapable } from "./shared/webauthn/largeBlob";
 export { webAuthnLastError } from "./shared/webauthn/common";
-export { APLD_APPLIED, APLD_ERROR, APLD_PENDING, apldFromStored, asDHKEReq, asDHKEResp, asSealedMasterKey, b64tob, b64urltob, btob64, btob64url, btoh, CachedEntDB, checksumEntRevs, checksumSet, Clock, cmpBytes, crypto, Decoder, DEFAULT_PRF_SALT, defaultPeekProgressEvery, defaultWebAuthnRpId, eidCodec, Enclave, encodeEntRev, Encoder, EntDBMemory, EntIDB, EntitiesQuery, EntityID, entStateManager, genSingletonEID, hostHTTPTransport, htob, HTTPTransport, IDBSeedStore, IDBStore, idleProgress, IEntDB, IEntity, isApldState, isLiveEnt, isPendingApply, isTerminalApplyFailure, isTombstone, IStore, KEYRING_MAX, keyringCredIds, keyringKind, keyringLabel, MASTER_SEED_LEN, MemoryStore, normalizeTags, nullEntDB, nullStateManager, openDiplomaticClient, openEntDB, openIDBStore, PasskeySeedStore, prfCapable, PrfSeedStore, revFromEntity, revFromHead, SEALED_MASTER_KEY_LEN, setApld, shouldEmitItemProgress, SingletonStateManager, StateManager, Status, SyncClient, TypedEventEmitter, useClient, useClientState, useClientXferState, useStateWatcher, useStateWatcherSuspense, useSyncOnResume, WorkerClient, };
-export type { ApldState, Applier, BundleHost, CachedEntDBOptions, DateSpec, DHKEReq, DHKEResp, EntDBMemoryOptions, HostHandle, HostStatsUpdate, IClient, ICrypto, IDateRange, IDeleteParams, IDiplomaticClientState, IEntRev, IEntRow, IHostConnectionInfo, IHostRow, IMessage, IMutateOp, IOp, IStateManager, IStoredMessage, IStoredMessageData, IStoredMessageWrite, ITagRange, ITombstone, ITransport, IUpdateParams, Keyring, KeyringEntry, KeyringRow, ListMsgsOpts, OpenDiplomaticClientMainOptions, OpenDiplomaticClientOptions, OpenDiplomaticClientWorkerOptions, OpenedDiplomaticClient, OpenEntDBOptions, PairRequest, PasskeySeedStoreOpts, PersistKeyring, PrfRp, PrfSeedStoreOpts, ReconcileOpts, ReconcileReport, SealedMasterKey, SetSeedOpts, SyncProgressEvent, TagSpec, WipeOpts, WorkerClientOptions, };
+export { APLD_APPLIED, APLD_ERROR, APLD_PENDING, apldFromStored, asChildKey, asDHKEReq, asDHKEResp, asHostRlm, asSealedMasterKey, b64tob, b64urltob, btob64, btob64url, btoh, CachedEntDB, checksumEntRevs, checksumSet, Clock, cmpBytes, crypto, Decoder, DEFAULT_PRF_SALT, defaultPeekProgressEvery, defaultWebAuthnRpId, eidCodec, Enclave, encodeEnt, encodeEntRev, Encoder, entCodec, EntDBMemory, EntIDB, EntitiesQuery, EntityID, entStateManager, genSingletonEID, hostHTTPTransport, htob, HTTPTransport, IDBAccountStore, IDBStore, idleProgress, IEntDB, IEntity, isApldState, isLiveEnt, isPendingApply, isTerminalApplyFailure, isTombstone, IStore, KEYRING_MAX, keyringCredIds, keyringKind, keyringLabel, MASTER_SEED_LEN, MemoryStore, normalizeTags, nullEntDB, nullKDM, nullStateManager, openDiplomaticClient, openEntDB, openIDBStore, PasskeySeedStore, prfCapable, PrfSeedStore, Purpose, revFromEntity, revFromHead, SEALED_MASTER_KEY_LEN, setApld, shouldEmitItemProgress, SingletonStateManager, StateManager, Status, SyncClient, TypedEventEmitter, useClient, useClientState, useClientXferState, useStateWatcher, useStateWatcherSuspense, useSyncOnResume, WorkerClient, };
+export type { ApldState, Applier, BagManager, BindPrior, BundleHost, CachedEntDBOptions, ChildKey, DateSpec, DHKEReq, DHKEResp, EntDBMemoryOptions, EntRlm, HostHandle, HostRlm, HostSeqsUpdate, IClient, ICrypto, IDateRange, IDeleteParams, IDiplomaticClientState, IEntRev, IEntRow, IHostConnectionInfo, IHostRow, IKDM, IMessage, IMutateOp, IOp, IRealm, IStateManager, IStoredMessage, IStoredMessageData, IStoredMessageWrite, ITagRange, ITombstone, ITransport, IUpdateParams, Keyring, KeyringEntry, KeyringRow, ListMsgsOpts, OpenAccount, OpenDiplomaticClientMainOptions, OpenDiplomaticClientOptions, OpenDiplomaticClientWorkerOptions, OpenedDiplomaticClient, OpenEntDBOptions, PairRequest, PasskeySeedStoreOpts, PersistKeyring, PrfBound, PrfRp, PrfSeedStoreOpts, ReconcileOpts, ReconcileReport, SealedMasterKey, SetSeedOpts, SyncProgressEvent, TagSpec, WipeOpts, WorkerClientOptions, };