@interncom/diplomatic 0.9.0 → 0.11.0

package/dist/web/passkey/seed.d.ts

@@ -0,0 +1,57 @@
+import { Enclave } from "../shared/crypto/enclave";
+import type { MasterSeed } from "../shared/types";
+import type { ISeedStore, SetSeedOpts } from "../types";
+export type LargeBlobRp = {
+    rpId?: string;
+    rpName?: string;
+};
+/** Best-effort capability probe (not all UAs expose this). */
+export declare function largeBlobCapable(): Promise<boolean>;
+export type LargeBlobCreateOpts = LargeBlobRp & {
+    userName?: string;
+    /**
+     * Omit (default) to allow both platform (Hello/Touch ID) and roaming
+     * authenticators (YubiKey). Set only if you intentionally restrict.
+     */
+    authenticatorAttachment?: AuthenticatorAttachment;
+};
+/**
+ * Create a discoverable credential with largeBlob support.
+ * Does not write the seed — call {@link writeLargeBlobSeed} next (second gesture).
+ *
+ * Default allows platform *and* cross-platform authenticators. Forcing
+ * `authenticatorAttachment: "platform"` excludes YubiKeys and similar.
+ */
+export declare function createLargeBlobCred(opts?: LargeBlobCreateOpts): Promise<Uint8Array>;
+/** Persist seed on an existing largeBlob-capable credential. */
+export declare function writeLargeBlobSeed(credId: Uint8Array, seed: MasterSeed, opts?: LargeBlobRp): Promise<void>;
+/** Overwrite largeBlob with 32 zero bytes (destroys stored seed material). UV required. */
+export declare function clearLargeBlobSeed(credId: Uint8Array, opts?: LargeBlobRp): Promise<void>;
+/** Read seed from largeBlob (user verification required). */
+export declare function readLargeBlobSeed(credId: Uint8Array, opts?: LargeBlobRp): Promise<MasterSeed>;
+/**
+ * Create credential and write seed (two user gestures).
+ * Returns credential id — persist it (e.g. IDB); the seed lives on the authenticator.
+ */
+export declare function storeSeedLargeBlob(seed: MasterSeed, opts?: LargeBlobCreateOpts): Promise<Uint8Array>;
+/**
+ * ISeedStore backed by largeBlob.
+ * - {@link save} creates (or reuses) cred + writes seed (gestures).
+ * - {@link load} returns in-memory enclave only; call {@link unlock} after restart.
+ * - Local {@link credId} must be persisted by the app across sessions.
+ * - {@link wipe} overwrites largeBlob with zeros (UV), then drops memory + credId.
+ *   Does not delete the WebAuthn credential from the authenticator.
+ */
+export declare class PasskeySeedStore implements ISeedStore {
+    #private;
+    constructor(opts?: LargeBlobRp & {
+        credId?: Uint8Array;
+    });
+    get credId(): Uint8Array | undefined;
+    setCredId(credId: Uint8Array | undefined): void;
+    save(seed: MasterSeed, opts?: SetSeedOpts): Promise<Enclave>;
+    load(): Promise<Enclave | void>;
+    /** User-gesture unlock after cold start (needs {@link credId}). */
+    unlock(): Promise<Enclave>;
+    wipe(): Promise<void>;
+}

package/dist/web/stores/idb/seed.d.ts

@@ -1,11 +1,15 @@
 import { Enclave } from "../../shared/crypto/enclave";
 import { MasterSeed } from "../../shared/types";
-import { ISeedStore } from "../../types";
+import { ISeedStore, type SetSeedOpts } from "../../types";
 export declare class IDBSeedStore implements ISeedStore {
     enclave?: Enclave;
     db: IDBDatabase;
     constructor(db: IDBDatabase);
-    save(seed: MasterSeed): Promise<Enclave>;
+    save(seed: MasterSeed, opts?: SetSeedOpts): Promise<Enclave>;
     load(): Promise<Enclave | undefined>;
+    /**
+     * Explicit identity clear only. Not invoked by {@link IDBStore.wipe}
+     * (that deletes the whole protocol DB, including legacy seedMeta).
+     */
     wipe(): Promise<void>;
 }

package/dist/web/stores/idb/store.d.ts

@@ -18,6 +18,7 @@ export declare const MESSAGES_TABLE = "messages";
 export declare const MESSAGES_APLD_INDEX = "apld";
 /** Schema version: v3 adds messages.apld index for the apply queue. */
 export declare const DIPLOMATIC_STORE_DB_VERSION = 3;
+export declare const DIPLOMATIC_STORE_DB_NAME = "diplomatic-store-db";
 export declare class IDBStore implements IStore<URL> {
     seed: IDBSeedStore;
     hosts: IDBHostStore;
@@ -26,8 +27,11 @@ export declare class IDBStore implements IStore<URL> {
     messages: IDBMessageStore;
     db: IDBDatabase;
     constructor(db: IDBDatabase, crypto: ICrypto);
+    /**
+     * Clear protocol tables only (not seed). Seed is wiped only via
+     * {@link ISeedStore.wipe} when client.wipe({ seed: true }).
+     */
     wipe(): Promise<void>;
 }
-export declare const DIPLOMATIC_STORE_DB_NAME = "diplomatic-store-db";
 export declare function openIDBStoreDB(): Promise<IDBDatabase>;
 export declare function openIDBStore(crypto: ICrypto): Promise<IDBStore>;

package/dist/web/stores/memory/seed.d.ts

@@ -1,9 +1,9 @@
 import { Enclave } from "../../shared/crypto/enclave";
 import { MasterSeed } from "../../shared/types";
-import { ISeedStore } from "../../types";
+import { ISeedStore, type SetSeedOpts } from "../../types";
 export declare class MemorySeedStore implements ISeedStore {
     enclave?: Enclave;
-    save(seed: MasterSeed): Promise<Enclave>;
+    save(seed: MasterSeed, _opts?: SetSeedOpts): Promise<Enclave>;
     load(): Promise<Enclave | undefined>;
     wipe(): Promise<void>;
 }

package/dist/web/types.d.ts

@@ -29,9 +29,43 @@ export type Applier = (ops: IOp[]) => Promise<{
     types: Set<string>;
     eids: EntityID[];
 }>;
+/** Options for loading a seed into the enclave. */
+export type SetSeedOpts = {
+    /**
+     * When true, write seed to the durable store (e.g. IndexedDB).
+     * Default false (memory only) — IDB is readable by other local apps.
+     * Opt in only when the app accepts that tradeoff (or has no better store).
+     */
+    persist?: boolean;
+};
+/**
+ * Selective wipe for {@link IClient.wipe}.
+ *
+ * Default `client.wipe()` / `client.wipe({})` clears **everything except seed**:
+ * msgs, ents, meta = true; seed = false.
+ * That avoids passkey/largeBlob UV when the user only wants to clear app data.
+ * Pass `{ seed: true }` to also clear identity (may prompt the authenticator).
+ */
+export type WipeOpts = {
+    /** Message archive. Default true. */
+    msgs?: boolean;
+    /** Application EntDB / state manager. Default true. */
+    ents?: boolean;
+    /** Hosts + upload/download queues. Default true. */
+    meta?: boolean;
+    /**
+     * Seed / identity ({@link ISeedStore.wipe}). Default **false**.
+     * When true, passkey stores overwrite largeBlob (UV ceremony).
+     */
+    seed?: boolean;
+};
 export interface ISeedStore {
-    save: (seed: MasterSeed) => Promise<Enclave>;
+    save: (seed: MasterSeed, opts?: SetSeedOpts) => Promise<Enclave>;
     load: () => Promise<Enclave | void>;
+    /**
+     * Clear durable seed material for this store (IDB row, largeBlob overwrite, …)
+     * and drop the in-memory enclave. Called only when client.wipe({ seed: true }).
+     */
     wipe: () => Promise<void>;
 }
 export interface IHostRow<Handle extends HostHandle> extends IHostConnectionInfo<Handle>, Partial<IHostMetadata> {
@@ -239,6 +273,9 @@ export interface IStore<Handle extends HostHandle> {
     uploads: IUploadQueue;
     downloads: IDownloadQueue;
     messages: IMessageStore;
+    /**
+     * Clear protocol tables (hosts, queues, messages). Does not call seed.wipe.
+     */
     wipe(): Promise<void>;
 }
 type UnlistenFunc = () => void;
@@ -248,7 +285,7 @@ export interface IStateEmitter<T> {
     listen(listener: (state: T) => void): UnlistenFunc;
 }
 export interface IClient<Handle extends HostHandle> {
-    setSeed(seed: MasterSeed): Promise<void>;
+    setSeed(seed: MasterSeed, opts?: SetSeedOpts): Promise<void>;
     link(host: IHostConnectionInfo<Handle>): Promise<void>;
     unlink(label: string): Promise<void>;
     /** Linked hosts from the protocol store (handle, label, lastSeq, …). */
@@ -298,7 +335,11 @@ export interface IClient<Handle extends HostHandle> {
      * on the host row.
      */
     reconcile(hostLabel: string, opts?: ReconcileOpts): Promise<ValStat<ReconcileReport>>;
-    wipe(): Promise<void>;
+    /**
+     * Clear local state. Defaults wipe msgs/ents/meta only; seed requires
+     * `{ seed: true }` (avoids passkey UV on ordinary EXIT / data wipe).
+     */
+    wipe(opts?: WipeOpts): Promise<void>;
     import(file: File): Promise<Status>;
     export(filename: string, extension?: string): Promise<Status>;
     clientState: IStateEmitter<IDiplomaticClientState>;

package/dist/web/worker/client.d.ts

@@ -2,7 +2,7 @@ import { IClock } from "../shared/clock";
 import { Status } from "../shared/consts";
 import type { EntityID, Hash, IDeleteParams, IEntRev, IHostConnectionInfo, IInsertParams, IMessageHead, IStateManager, IUpdateParams, MasterSeed, SerializedContent } from "../shared/types";
 import { type ValStat } from "../shared/valstat";
-import type { ApldState, IClient, IDiplomaticClientState, IDiplomaticClientXferState, IHostRow, IStateEmitter, IStore, IStoredMessage, ListMsgsOpts, ReconcileOpts, ReconcileReport } from "../types";
+import type { ApldState, IClient, IDiplomaticClientState, IDiplomaticClientXferState, IHostRow, IStateEmitter, IStore, IStoredMessage, ListMsgsOpts, ReconcileOpts, ReconcileReport, SetSeedOpts, WipeOpts } from "../types";
 /**
  * Options for attaching to an app-owned sync Worker.
  *
@@ -37,6 +37,8 @@ export type WorkerClientOptions = {
 export declare class WorkerClient implements IClient<URL> {
     private worker;
     private state;
+    /** Shared protocol store (main connection). */
+    private store;
     /** Main-thread writer: msg archive + local apply for fast UI. */
     private local;
     private nextId;
@@ -98,7 +100,7 @@ export declare class WorkerClient implements IClient<URL> {
     private request;
     private requestStatus;
     private serializeHost;
-    setSeed(seed: MasterSeed): Promise<void>;
+    setSeed(seed: MasterSeed, opts?: SetSeedOpts): Promise<void>;
     link(host: IHostConnectionInfo<URL>, connect?: boolean): Promise<void>;
     unlink(label: string): Promise<void>;
     /** Hosts live in shared main IDB (same as local writer). */
@@ -131,7 +133,7 @@ export declare class WorkerClient implements IClient<URL> {
      * SyncClient has no EntDB; use entDB.checksum(crypto) on the main path.
      */
     entcheck(): Promise<Hash>;
-    wipe(): Promise<void>;
+    wipe(opts?: WipeOpts): Promise<void>;
     import(file: File): Promise<Status>;
     export(filename: string, _extension?: string): Promise<Status>;
 }

package/dist/web/worker/protocol.d.ts

@@ -14,6 +14,7 @@ export type WorkerCmd = {
     id: number;
     op: "setSeed";
     seed: Uint8Array;
+    persist?: boolean;
 } | {
     id: number;
     op: "link";
@@ -54,6 +55,10 @@ export type WorkerCmd = {
 } | {
     id: number;
     op: "wipe";
+    msgs?: boolean;
+    ents?: boolean;
+    meta?: boolean;
+    seed?: boolean;
 } | {
     id: number;
     op: "import";