@keyhive/keyhive 0.1.0-alpha.3 → 0.1.0-alpha.5

package/pkg-slim/keyhive_wasm.d.ts

@@ -9,26 +9,6 @@ export class Access {
     static tryFromString(s: string): Access | undefined;
 }
 
-/**
- * The result of adding a member: the membership delegation, plus any new leaf
- * secrets produced by auto-rekeying a non-forward-secret document on add.
- */
-export class AddMemberUpdate {
-    private constructor();
-    free(): void;
-    [Symbol.dispose](): void;
-    readonly delegation: SignedDelegation;
-    /**
-     * New leaf secret keypairs from auto-rekeying a non-forward-secret document
-     * when this reader was added, serialized as a
-     * `BTreeMap<ShareKey, ShareSecretKey>` (the format `importPrekeySecrets`
-     * accepts). A sibling instance of this identity (e.g. a tab and its
-     * SharedWorker) installs them to derive the rotated key. `undefined` when
-     * no rotation occurred (a forward-secret document).
-     */
-    readonly leafSecrets: Uint8Array | undefined;
-}
-
 export class Agent {
     private constructor();
     free(): void;
@@ -135,6 +115,21 @@ export class ContactCard {
     readonly shareKey: ShareKey;
 }
 
+/**
+ * Plaintext plus the application secret key that decrypted it.
+ */
+export class DecryptedKeyed {
+    private constructor();
+    free(): void;
+    [Symbol.dispose](): void;
+    /**
+     * The 32-byte application secret key used to decrypt this content.
+     * Treat as secret: do not log or persist unencrypted.
+     */
+    readonly applicationSecret: Uint8Array;
+    readonly plaintext: Uint8Array;
+}
+
 export class Delegation {
     private constructor();
     free(): void;
@@ -183,6 +178,11 @@ export class Encrypted {
     private constructor();
     free(): void;
     [Symbol.dispose](): void;
+    /**
+     * Decrypt this content with an explicit 32-byte application secret key,
+     * bypassing CGKA.
+     */
+    decryptWithKey(key: Uint8Array): Uint8Array;
     static fromBytes(bytes: Uint8Array): Encrypted;
     serialize(): Uint8Array;
     toBytes(): Uint8Array;
@@ -201,6 +201,21 @@ export class EncryptedContentWithUpdate {
     update_op(): SignedCgkaOperation | undefined;
 }
 
+/**
+ * Encrypted content plus the application secret key it was encrypted under.
+ */
+export class EncryptedKeyed {
+    private constructor();
+    free(): void;
+    [Symbol.dispose](): void;
+    encrypted_content(): Encrypted;
+    update_op(): SignedCgkaOperation | undefined;
+    /**
+     * The 32-byte application secret key used to encrypt this content.
+     */
+    readonly applicationSecret: Uint8Array;
+}
+
 export class Event {
     private constructor();
     free(): void;
@@ -293,7 +308,7 @@ export class Keyhive {
     free(): void;
     [Symbol.dispose](): void;
     accessForDoc(id: Identifier, doc_id: DocumentId): Promise<Access | undefined>;
-    addMember(to_add: Agent, membered: Membered, access: Access, other_relevant_docs: Document[]): Promise<AddMemberUpdate>;
+    addMember(to_add: Agent, membered: Membered, access: Access, other_relevant_docs: Document[]): Promise<SignedDelegation>;
     /**
      * Returns all agent events with deduplicated storage and two-tier indirection
      * for membership, prekey, and CGKA ops.
@@ -314,14 +329,9 @@ export class Keyhive {
     /**
      * Force a PCS key rotation and return the new leaf secret, serialized as a
      * one-entry `BTreeMap<ShareKey, ShareSecretKey>` (the exact format
-     * `importPrekeySecrets` accepts). A sibling instance of this identity can
-     * install it to derive the rotated key without re-importing the whole bundle.
+     * `importPrekeySecrets` accepts).
      */
     forcePcsUpdate(doc: Document): Promise<Uint8Array>;
-    /**
-     * Generate a document. Whether it provides forward secrecy is determined by
-     * this peer's forward-secrecy policy (chosen at `Keyhive.init`).
-     */
     generateDocument(coparents: Peer[], initial_content_ref_head: ChangeId, more_initial_content_refs: ChangeId[]): Promise<Document>;
     generateGroup(js_coparents: Peer[]): Promise<Group>;
     getAgent(id: Identifier): Promise<Agent | undefined>;
@@ -332,16 +342,7 @@ export class Keyhive {
     importPrekeySecrets(bytes: Uint8Array): Promise<void>;
     ingestArchive(archive: Archive): Promise<void>;
     ingestEventsBytes(events_bytes_array: Array<any>): Promise<Array<any>>;
-    /**
-     * Initialize a peer.
-     *
-     * `forward_secrecy` is this peer's policy for all documents it creates or
-     * receives. When `false`, documents carry the CGKA predecessor key chain
-     * (a member added later reads the whole prior history) and adding a reader
-     * auto-rekeys (see `addMember`'s `leafSecrets`). When `true`, a member
-     * added later cannot read content from before they joined.
-     */
-    static init(signer: Signer, ciphertext_store: CiphertextStore, event_handler: Function, forward_secrecy: boolean): Promise<Keyhive>;
+    static init(signer: Signer, ciphertext_store: CiphertextStore, event_handler: Function): Promise<Keyhive>;
     intoArchive(): Promise<Archive>;
     membershipOpsForAgent(agent: Agent): Promise<Map<any, any>>;
     pendingEventHashes(): Promise<Set<any>>;
@@ -353,8 +354,17 @@ export class Keyhive {
     stats(): Promise<Stats>;
     toArchive(): Promise<Archive>;
     tryDecrypt(doc: Document, encrypted: Encrypted): Promise<Uint8Array>;
+    /**
+     * Decrypt content and also return the 32-byte application secret key used.
+     */
+    tryDecryptKeyed(doc: Document, encrypted: Encrypted): Promise<DecryptedKeyed>;
     tryEncrypt(doc: Document, content_ref: ChangeId, js_pred_refs: ChangeId[], content: Uint8Array): Promise<EncryptedContentWithUpdate>;
     tryEncryptArchive(doc: Document, content_ref: ChangeId, pred_refs: ChangeId[], content: Uint8Array): Promise<EncryptedContentWithUpdate>;
+    /**
+     * Encrypt content and also return the application secret key it was
+     * encrypted under.
+     */
+    tryEncryptKeyed(doc: Document, content_ref: ChangeId, js_pred_refs: ChangeId[], content: Uint8Array): Promise<EncryptedKeyed>;
     tryPcsKeyHash(doc: Document): Promise<Uint8Array | undefined>;
     trySign(data: Uint8Array): Promise<Signed>;
     readonly id: IndividualId;
@@ -515,168 +525,64 @@ export class Summary {
  */
 export function setPanicHook(): void;
 
+/**
+ * Inverse of [`symmetric_encrypt`]. Reads `nonce(24) || ciphertext`.
+ */
+export function symmetricDecrypt(key: Uint8Array, blob: Uint8Array): Uint8Array;
+
+/**
+ * Encrypt `plaintext` under a 32-byte `key`, returning `nonce(24) || ciphertext`.
+ */
+export function symmetricEncrypt(key: Uint8Array, plaintext: Uint8Array, associated_data: Uint8Array): Uint8Array;
+
 export type InitInput = RequestInfo | URL | Response | BufferSource | WebAssembly.Module;
 
 export interface InitOutput {
     readonly memory: WebAssembly.Memory;
-    readonly __wbg_allagentevents_free: (a: number, b: number) => void;
-    readonly __wbg_ciphertextstore_free: (a: number, b: number) => void;
     readonly __wbg_invocation_free: (a: number, b: number) => void;
     readonly __wbg_signedinvocation_free: (a: number, b: number) => void;
-    readonly allagentevents_agentCgkaSources: (a: number) => any;
-    readonly allagentevents_agentMembershipSources: (a: number) => any;
-    readonly allagentevents_agentPrekeySources: (a: number) => any;
-    readonly allagentevents_cgkaSources: (a: number) => any;
-    readonly allagentevents_events: (a: number) => any;
-    readonly allagentevents_membershipSources: (a: number) => any;
-    readonly allagentevents_prekeySources: (a: number) => any;
-    readonly ciphertextstore_newFromWebStorage: (a: any) => number;
-    readonly ciphertextstore_newInMemory: () => number;
-    readonly __wbg_archive_free: (a: number, b: number) => void;
+    readonly setPanicHook: () => void;
     readonly __wbg_signed_free: (a: number, b: number) => void;
-    readonly __wbg_stats_free: (a: number, b: number) => void;
-    readonly archive_toBytes: (a: number) => [number, number, number, number];
-    readonly archive_tryToKeyhive: (a: number, b: number, c: number, d: any) => any;
-    readonly archive_try_from_bytes: (a: number, b: number) => [number, number, number];
+    readonly __wbg_signedcgkaoperation_free: (a: number, b: number) => void;
     readonly signed_fromBytes: (a: number, b: number) => [number, number, number];
     readonly signed_payload: (a: number) => [number, number];
     readonly signed_signature: (a: number) => [number, number];
     readonly signed_toBytes: (a: number) => [number, number, number, number];
     readonly signed_verify: (a: number) => number;
     readonly signed_verifyingKey: (a: number) => [number, number];
-    readonly stats_activePrekeyCount: (a: number) => bigint;
-    readonly stats_cgkaOperations: (a: number) => bigint;
-    readonly stats_delegations: (a: number) => bigint;
-    readonly stats_docs: (a: number) => bigint;
-    readonly stats_groups: (a: number) => bigint;
-    readonly stats_individuals: (a: number) => bigint;
-    readonly stats_pendingCgkaOperation: (a: number) => bigint;
-    readonly stats_pendingCgkaOperationByActive: (a: number) => bigint;
-    readonly stats_pendingDelegated: (a: number) => bigint;
-    readonly stats_pendingDelegatedByActive: (a: number) => bigint;
-    readonly stats_pendingPrekeyRotated: (a: number) => bigint;
-    readonly stats_pendingPrekeyRotatedByActive: (a: number) => bigint;
-    readonly stats_pendingPrekeysExpanded: (a: number) => bigint;
-    readonly stats_pendingPrekeysExpandedByActive: (a: number) => bigint;
-    readonly stats_pendingRevoked: (a: number) => bigint;
-    readonly stats_pendingRevokedByActive: (a: number) => bigint;
-    readonly stats_prekeyRotations: (a: number) => bigint;
-    readonly stats_prekeysExpanded: (a: number) => bigint;
-    readonly stats_revocations: (a: number) => bigint;
-    readonly stats_totalOps: (a: number) => bigint;
-    readonly stats_totalPendingOps: (a: number) => bigint;
-    readonly __wbg_agent_free: (a: number, b: number) => void;
-    readonly __wbg_document_free: (a: number, b: number) => void;
-    readonly __wbg_encryptedcontentwithupdate_free: (a: number, b: number) => void;
-    readonly __wbg_group_free: (a: number, b: number) => void;
-    readonly __wbg_individual_free: (a: number, b: number) => void;
-    readonly __wbg_keyhive_free: (a: number, b: number) => void;
-    readonly __wbg_peer_free: (a: number, b: number) => void;
-    readonly agent_id: (a: number) => number;
-    readonly agent_isDocument: (a: number) => number;
-    readonly agent_isGroup: (a: number) => number;
-    readonly agent_isIndividual: (a: number) => number;
-    readonly agent_keyOpHashes: (a: number) => any;
-    readonly agent_keyOps: (a: number) => any;
-    readonly agent_toString: (a: number) => [number, number];
-    readonly document___wasm_refgen_toJsDocument: (a: number) => number;
-    readonly document_doc_id: (a: number) => number;
-    readonly document_id: (a: number) => number;
-    readonly document_members: (a: number) => any;
-    readonly document_toAgent: (a: number) => number;
-    readonly document_toMembered: (a: number) => number;
-    readonly document_toPeer: (a: number) => number;
-    readonly encryptedcontentwithupdate_encrypted_content: (a: number) => number;
-    readonly encryptedcontentwithupdate_update_op: (a: number) => number;
-    readonly group___wasm_refgen_toJsGroup: (a: number) => number;
-    readonly group_members: (a: number) => any;
-    readonly group_toAgent: (a: number) => number;
-    readonly group_toMembered: (a: number) => number;
-    readonly group_toPeer: (a: number) => number;
-    readonly individual_individualId: (a: number) => number;
-    readonly individual_pickPrekey: (a: number, b: number) => any;
-    readonly individual_toAgent: (a: number) => number;
-    readonly individual_toPeer: (a: number) => number;
-    readonly keyhive_accessForDoc: (a: number, b: number, c: number) => any;
-    readonly keyhive_addMember: (a: number, b: number, c: number, d: number, e: number, f: number) => any;
-    readonly keyhive_allAgentEvents: (a: number) => any;
-    readonly keyhive_contactCard: (a: number) => any;
-    readonly keyhive_docMemberCapabilities: (a: number, b: number) => any;
-    readonly keyhive_eventHashesForAgent: (a: number, b: number) => any;
-    readonly keyhive_eventsForAgent: (a: number, b: number) => any;
-    readonly keyhive_expandPrekeys: (a: number) => any;
-    readonly keyhive_exportPrekeySecrets: (a: number) => any;
-    readonly keyhive_forcePcsUpdate: (a: number, b: number) => any;
-    readonly keyhive_generateDocument: (a: number, b: number, c: number, d: number, e: number, f: number) => any;
-    readonly keyhive_generateGroup: (a: number, b: number, c: number) => any;
-    readonly keyhive_getAgent: (a: number, b: number) => any;
-    readonly keyhive_getDocument: (a: number, b: number) => any;
-    readonly keyhive_getExistingContactCard: (a: number) => any;
-    readonly keyhive_getGroup: (a: number, b: number) => any;
-    readonly keyhive_getIndividual: (a: number, b: number) => any;
-    readonly keyhive_id: (a: number) => number;
-    readonly keyhive_idString: (a: number) => [number, number];
-    readonly keyhive_importPrekeySecrets: (a: number, b: number, c: number) => any;
-    readonly keyhive_individual: (a: number) => any;
-    readonly keyhive_ingestArchive: (a: number, b: number) => any;
-    readonly keyhive_ingestEventsBytes: (a: number, b: any) => any;
-    readonly keyhive_init: (a: number, b: number, c: any, d: number) => any;
-    readonly keyhive_intoArchive: (a: number) => any;
-    readonly keyhive_membershipOpsForAgent: (a: number, b: number) => any;
-    readonly keyhive_pendingEventHashes: (a: number) => any;
-    readonly keyhive_reachableDocs: (a: number) => any;
-    readonly keyhive_receiveContactCard: (a: number, b: number) => any;
-    readonly keyhive_revokeMember: (a: number, b: number, c: number, d: number) => any;
-    readonly keyhive_revokedMembersForDoc: (a: number, b: number) => any;
-    readonly keyhive_rotatePrekey: (a: number, b: number) => any;
-    readonly keyhive_stats: (a: number) => any;
-    readonly keyhive_toArchive: (a: number) => any;
-    readonly keyhive_tryDecrypt: (a: number, b: number, c: number) => any;
-    readonly keyhive_tryEncrypt: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => any;
-    readonly keyhive_tryEncryptArchive: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => any;
-    readonly keyhive_tryPcsKeyHash: (a: number, b: number) => any;
-    readonly keyhive_trySign: (a: number, b: number, c: number) => any;
-    readonly keyhive_whoami: (a: number) => number;
-    readonly peer___wasm_refgen_toJsPeer: (a: number) => number;
-    readonly peer_isDocument: (a: number) => number;
-    readonly peer_isGroup: (a: number) => number;
-    readonly peer_isIndividual: (a: number) => number;
-    readonly peer_toString: (a: number) => [number, number];
-    readonly setPanicHook: () => void;
-    readonly group_groupId: (a: number) => number;
-    readonly group_id: (a: number) => number;
-    readonly individual_id: (a: number) => number;
-    readonly peer_id: (a: number) => number;
-    readonly __wbg_signedcgkaoperation_free: (a: number, b: number) => void;
     readonly signedcgkaoperation_delegation: (a: number) => number;
     readonly signedcgkaoperation_signature: (a: number) => [number, number];
     readonly signedcgkaoperation_verify: (a: number) => number;
     readonly signedcgkaoperation_verifyingKey: (a: number) => [number, number];
-    readonly __wbg_cannotparseidentifier_free: (a: number, b: number) => void;
+    readonly __wbg_allagentevents_free: (a: number, b: number) => void;
     readonly __wbg_changeid_free: (a: number, b: number) => void;
+    readonly __wbg_ciphertextstore_free: (a: number, b: number) => void;
+    readonly __wbg_decryptedkeyed_free: (a: number, b: number) => void;
     readonly __wbg_doccontentrefs_free: (a: number, b: number) => void;
-    readonly __wbg_identifier_free: (a: number, b: number) => void;
     readonly __wbg_revocation_free: (a: number, b: number) => void;
     readonly __wbg_sharekey_free: (a: number, b: number) => void;
-    readonly __wbg_signedrevocation_free: (a: number, b: number) => void;
+    readonly allagentevents_agentCgkaSources: (a: number) => any;
+    readonly allagentevents_agentMembershipSources: (a: number) => any;
+    readonly allagentevents_agentPrekeySources: (a: number) => any;
+    readonly allagentevents_cgkaSources: (a: number) => any;
+    readonly allagentevents_events: (a: number) => any;
+    readonly allagentevents_membershipSources: (a: number) => any;
+    readonly allagentevents_prekeySources: (a: number) => any;
     readonly changeid___wasm_refgen_toJsChangeId: (a: number) => number;
     readonly changeid_bytes: (a: number) => [number, number];
     readonly changeid_new: (a: number, b: number) => number;
+    readonly ciphertextstore_newFromWebStorage: (a: any) => number;
+    readonly ciphertextstore_newInMemory: () => number;
+    readonly decryptedkeyed_applicationSecret: (a: number) => [number, number];
+    readonly decryptedkeyed_plaintext: (a: number) => [number, number];
     readonly doccontentrefs_addChangeId: (a: number, b: number) => any;
     readonly doccontentrefs_change_hashes: (a: number) => any;
     readonly doccontentrefs_docId: (a: number) => number;
     readonly doccontentrefs_new: (a: number, b: number, c: number) => [number, number, number];
-    readonly identifier_new: (a: number, b: number) => [number, number, number];
-    readonly identifier_publicId: () => number;
-    readonly identifier_toBytes: (a: number) => [number, number];
     readonly revocation_after: (a: number) => number;
     readonly revocation_proof: (a: number) => number;
     readonly revocation_revoked: (a: number) => number;
     readonly revocation_subject_id: (a: number) => number;
-    readonly signedrevocation_delegation: (a: number) => number;
-    readonly signedrevocation_signature: (a: number) => [number, number];
-    readonly signedrevocation_verify: (a: number) => number;
-    readonly signedrevocation_verifyingKey: (a: number) => [number, number];
     readonly __wbg_access_free: (a: number, b: number) => void;
     readonly __wbg_cannotparseed25519signingkey_free: (a: number, b: number) => void;
     readonly __wbg_cgkaoperation_free: (a: number, b: number) => void;
@@ -703,6 +609,7 @@ export interface InitOutput {
     readonly documentid_toString: (a: number) => [number, number];
     readonly encrypted_ciphertext: (a: number) => [number, number];
     readonly encrypted_content_ref: (a: number) => [number, number];
+    readonly encrypted_decryptWithKey: (a: number, b: number, c: number) => [number, number, number, number];
     readonly encrypted_fromBytes: (a: number, b: number) => [number, number, number];
     readonly encrypted_nonce: (a: number) => [number, number];
     readonly encrypted_pcs_key_hash: (a: number) => [number, number];
@@ -725,8 +632,10 @@ export interface InitOutput {
     readonly signer_variant: (a: number) => [number, number];
     readonly signer_verifyingKey: (a: number) => [number, number];
     readonly signer_webCryptoSigner: (a: any) => any;
+    readonly symmetricDecrypt: (a: number, b: number, c: number, d: number) => [number, number, number, number];
+    readonly symmetricEncrypt: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
     readonly encrypted_toBytes: (a: number) => [number, number];
-    readonly __wbg_addmemberupdate_free: (a: number, b: number) => void;
+    readonly __wbg_archive_free: (a: number, b: number) => void;
     readonly __wbg_capability_free: (a: number, b: number) => void;
     readonly __wbg_delegation_free: (a: number, b: number) => void;
     readonly __wbg_history_free: (a: number, b: number) => void;
@@ -734,9 +643,11 @@ export interface InitOutput {
     readonly __wbg_membered_free: (a: number, b: number) => void;
     readonly __wbg_membership_free: (a: number, b: number) => void;
     readonly __wbg_signeddelegation_free: (a: number, b: number) => void;
+    readonly __wbg_signedrevocation_free: (a: number, b: number) => void;
     readonly __wbg_summary_free: (a: number, b: number) => void;
-    readonly addmemberupdate_delegation: (a: number) => number;
-    readonly addmemberupdate_leafSecrets: (a: number) => [number, number];
+    readonly archive_toBytes: (a: number) => [number, number, number, number];
+    readonly archive_tryToKeyhive: (a: number, b: number, c: number, d: any) => any;
+    readonly archive_try_from_bytes: (a: number, b: number) => [number, number, number];
     readonly capability_can: (a: number) => number;
     readonly capability_proof: (a: number) => number;
     readonly capability_who: (a: number) => number;
@@ -755,10 +666,128 @@ export interface InitOutput {
     readonly signeddelegation_subjectId: (a: number) => number;
     readonly signeddelegation_verify: (a: number) => number;
     readonly signeddelegation_verifyingKey: (a: number) => [number, number];
+    readonly signedrevocation_delegation: (a: number) => number;
+    readonly signedrevocation_signature: (a: number) => [number, number];
+    readonly signedrevocation_verify: (a: number) => number;
+    readonly signedrevocation_verifyingKey: (a: number) => [number, number];
     readonly summary_access: (a: number) => number;
     readonly summary_doc: (a: number) => number;
-    readonly wasm_bindgen__convert__closures_____invoke__hd575a1431d676418: (a: number, b: number, c: any) => [number, number];
-    readonly wasm_bindgen__convert__closures_____invoke__h1ce7fe53f08aa9a8: (a: number, b: number, c: any, d: any) => void;
+    readonly __wbg_cannotparseidentifier_free: (a: number, b: number) => void;
+    readonly __wbg_identifier_free: (a: number, b: number) => void;
+    readonly identifier_new: (a: number, b: number) => [number, number, number];
+    readonly identifier_publicId: () => number;
+    readonly identifier_toBytes: (a: number) => [number, number];
+    readonly __wbg_agent_free: (a: number, b: number) => void;
+    readonly __wbg_document_free: (a: number, b: number) => void;
+    readonly __wbg_encryptedcontentwithupdate_free: (a: number, b: number) => void;
+    readonly __wbg_encryptedkeyed_free: (a: number, b: number) => void;
+    readonly __wbg_group_free: (a: number, b: number) => void;
+    readonly __wbg_individual_free: (a: number, b: number) => void;
+    readonly __wbg_keyhive_free: (a: number, b: number) => void;
+    readonly __wbg_peer_free: (a: number, b: number) => void;
+    readonly __wbg_stats_free: (a: number, b: number) => void;
+    readonly agent_id: (a: number) => number;
+    readonly agent_isDocument: (a: number) => number;
+    readonly agent_isGroup: (a: number) => number;
+    readonly agent_isIndividual: (a: number) => number;
+    readonly agent_keyOpHashes: (a: number) => any;
+    readonly agent_keyOps: (a: number) => any;
+    readonly agent_toString: (a: number) => [number, number];
+    readonly document___wasm_refgen_toJsDocument: (a: number) => number;
+    readonly document_doc_id: (a: number) => number;
+    readonly document_id: (a: number) => number;
+    readonly document_members: (a: number) => any;
+    readonly document_toAgent: (a: number) => number;
+    readonly document_toMembered: (a: number) => number;
+    readonly document_toPeer: (a: number) => number;
+    readonly encryptedcontentwithupdate_encrypted_content: (a: number) => number;
+    readonly encryptedcontentwithupdate_update_op: (a: number) => number;
+    readonly encryptedkeyed_applicationSecret: (a: number) => [number, number];
+    readonly encryptedkeyed_encrypted_content: (a: number) => number;
+    readonly encryptedkeyed_update_op: (a: number) => number;
+    readonly group___wasm_refgen_toJsGroup: (a: number) => number;
+    readonly group_members: (a: number) => any;
+    readonly group_toAgent: (a: number) => number;
+    readonly group_toMembered: (a: number) => number;
+    readonly group_toPeer: (a: number) => number;
+    readonly individual_individualId: (a: number) => number;
+    readonly individual_pickPrekey: (a: number, b: number) => any;
+    readonly individual_toAgent: (a: number) => number;
+    readonly individual_toPeer: (a: number) => number;
+    readonly keyhive_accessForDoc: (a: number, b: number, c: number) => any;
+    readonly keyhive_addMember: (a: number, b: number, c: number, d: number, e: number, f: number) => any;
+    readonly keyhive_allAgentEvents: (a: number) => any;
+    readonly keyhive_contactCard: (a: number) => any;
+    readonly keyhive_docMemberCapabilities: (a: number, b: number) => any;
+    readonly keyhive_eventHashesForAgent: (a: number, b: number) => any;
+    readonly keyhive_eventsForAgent: (a: number, b: number) => any;
+    readonly keyhive_expandPrekeys: (a: number) => any;
+    readonly keyhive_exportPrekeySecrets: (a: number) => any;
+    readonly keyhive_forcePcsUpdate: (a: number, b: number) => any;
+    readonly keyhive_generateDocument: (a: number, b: number, c: number, d: number, e: number, f: number) => any;
+    readonly keyhive_generateGroup: (a: number, b: number, c: number) => any;
+    readonly keyhive_getAgent: (a: number, b: number) => any;
+    readonly keyhive_getDocument: (a: number, b: number) => any;
+    readonly keyhive_getExistingContactCard: (a: number) => any;
+    readonly keyhive_getGroup: (a: number, b: number) => any;
+    readonly keyhive_getIndividual: (a: number, b: number) => any;
+    readonly keyhive_id: (a: number) => number;
+    readonly keyhive_idString: (a: number) => [number, number];
+    readonly keyhive_importPrekeySecrets: (a: number, b: number, c: number) => any;
+    readonly keyhive_individual: (a: number) => any;
+    readonly keyhive_ingestArchive: (a: number, b: number) => any;
+    readonly keyhive_ingestEventsBytes: (a: number, b: any) => any;
+    readonly keyhive_init: (a: number, b: number, c: any) => any;
+    readonly keyhive_intoArchive: (a: number) => any;
+    readonly keyhive_membershipOpsForAgent: (a: number, b: number) => any;
+    readonly keyhive_pendingEventHashes: (a: number) => any;
+    readonly keyhive_reachableDocs: (a: number) => any;
+    readonly keyhive_receiveContactCard: (a: number, b: number) => any;
+    readonly keyhive_revokeMember: (a: number, b: number, c: number, d: number) => any;
+    readonly keyhive_revokedMembersForDoc: (a: number, b: number) => any;
+    readonly keyhive_rotatePrekey: (a: number, b: number) => any;
+    readonly keyhive_stats: (a: number) => any;
+    readonly keyhive_toArchive: (a: number) => any;
+    readonly keyhive_tryDecrypt: (a: number, b: number, c: number) => any;
+    readonly keyhive_tryDecryptKeyed: (a: number, b: number, c: number) => any;
+    readonly keyhive_tryEncrypt: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => any;
+    readonly keyhive_tryEncryptArchive: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => any;
+    readonly keyhive_tryEncryptKeyed: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => any;
+    readonly keyhive_tryPcsKeyHash: (a: number, b: number) => any;
+    readonly keyhive_trySign: (a: number, b: number, c: number) => any;
+    readonly keyhive_whoami: (a: number) => number;
+    readonly peer___wasm_refgen_toJsPeer: (a: number) => number;
+    readonly peer_isDocument: (a: number) => number;
+    readonly peer_isGroup: (a: number) => number;
+    readonly peer_isIndividual: (a: number) => number;
+    readonly peer_toString: (a: number) => [number, number];
+    readonly stats_activePrekeyCount: (a: number) => bigint;
+    readonly stats_cgkaOperations: (a: number) => bigint;
+    readonly stats_delegations: (a: number) => bigint;
+    readonly stats_docs: (a: number) => bigint;
+    readonly stats_groups: (a: number) => bigint;
+    readonly stats_individuals: (a: number) => bigint;
+    readonly stats_pendingCgkaOperation: (a: number) => bigint;
+    readonly stats_pendingCgkaOperationByActive: (a: number) => bigint;
+    readonly stats_pendingDelegated: (a: number) => bigint;
+    readonly stats_pendingDelegatedByActive: (a: number) => bigint;
+    readonly stats_pendingPrekeyRotated: (a: number) => bigint;
+    readonly stats_pendingPrekeyRotatedByActive: (a: number) => bigint;
+    readonly stats_pendingPrekeysExpanded: (a: number) => bigint;
+    readonly stats_pendingPrekeysExpandedByActive: (a: number) => bigint;
+    readonly stats_pendingRevoked: (a: number) => bigint;
+    readonly stats_pendingRevokedByActive: (a: number) => bigint;
+    readonly stats_prekeyRotations: (a: number) => bigint;
+    readonly stats_prekeysExpanded: (a: number) => bigint;
+    readonly stats_revocations: (a: number) => bigint;
+    readonly stats_totalOps: (a: number) => bigint;
+    readonly stats_totalPendingOps: (a: number) => bigint;
+    readonly group_groupId: (a: number) => number;
+    readonly group_id: (a: number) => number;
+    readonly individual_id: (a: number) => number;
+    readonly peer_id: (a: number) => number;
+    readonly wasm_bindgen__convert__closures_____invoke__h9887d5ab72723f8a: (a: number, b: number, c: any) => [number, number];
+    readonly wasm_bindgen__convert__closures_____invoke__h58982df154245cbc: (a: number, b: number, c: any, d: any) => void;
     readonly __wbindgen_malloc: (a: number, b: number) => number;
     readonly __wbindgen_realloc: (a: number, b: number, c: number, d: number) => number;
     readonly __wbindgen_exn_store: (a: number) => void;