@keyhive/keyhive 0.1.0-alpha.5 → 0.1.0-alpha.6

package/pkg-slim/keyhive_wasm.d.ts

@@ -5,8 +5,56 @@ export class Access {
     private constructor();
     free(): void;
     [Symbol.dispose](): void;
+    /**
+     * The ability to revoke any members of a group, not just those that they have causal senority over.
+     */
+    static admin(): Access;
+    /**
+     * True if this level is at least as permissive as `other`.
+     */
+    atLeast(other: Access): boolean;
+    /**
+     * Standard comparator result: -1 if less permissive than `other`,
+     * 0 if equal, 1 if more permissive.
+     */
+    compareTo(other: Access): number;
+    /**
+     * The ability to edit (append ops to) the content of a document.
+     */
+    static edit(): Access;
+    equals(other: Access): boolean;
+    /**
+     * Parse an access level, throwing on invalid input.
+     * Accepts "relay", "read", "edit", or "admin" (case-insensitive).
+     */
+    static fromString(s: string): Access;
+    /**
+     * The ability to read (decrypt) the content of a document.
+     */
+    static read(): Access;
+    /**
+     * The ability to retrieve bytes over the network.
+     */
+    static relay(): Access;
     toString(): string;
+    /**
+     * Parse an access level, returning undefined on invalid input.
+     * Prefer `fromString`, which throws a descriptive error instead.
+     */
     static tryFromString(s: string): Access | undefined;
+    /**
+     * True for Edit access or higher.
+     */
+    readonly isEditor: boolean;
+    /**
+     * True for Read access or higher.
+     */
+    readonly isReader: boolean;
+    /**
+     * Numeric level for ordering: Relay = 0, Read = 1, Edit = 2, Admin = 3.
+     * Higher levels imply all lower levels.
+     */
+    readonly level: number;
 }
 
 export class Agent {
@@ -212,6 +260,7 @@ export class EncryptedKeyed {
     update_op(): SignedCgkaOperation | undefined;
     /**
      * The 32-byte application secret key used to encrypt this content.
+     * Treat as secret: do not log or persist unencrypted.
      */
     readonly applicationSecret: Uint8Array;
 }
@@ -314,6 +363,12 @@ export class Keyhive {
      * for membership, prekey, and CGKA ops.
      */
     allAgentEvents(): Promise<AllAgentEvents>;
+    /**
+     * The most permissive of `id`'s direct access and the document's
+     * public access. Returns undefined if neither grants access (or the
+     * document is unknown).
+     */
+    bestAccessForDoc(id: Identifier, doc_id: DocumentId): Promise<Access | undefined>;
     contactCard(): Promise<ContactCard>;
     docMemberCapabilities(doc_id: DocumentId): Promise<Membership[]>;
     /**
@@ -330,6 +385,7 @@ export class Keyhive {
      * Force a PCS key rotation and return the new leaf secret, serialized as a
      * one-entry `BTreeMap<ShareKey, ShareSecretKey>` (the exact format
      * `importPrekeySecrets` accepts).
+     * The returned bytes are secret key material: do not log or persist unencrypted.
      */
     forcePcsUpdate(doc: Document): Promise<Uint8Array>;
     generateDocument(coparents: Peer[], initial_content_ref_head: ChangeId, more_initial_content_refs: ChangeId[]): Promise<Document>;
@@ -539,144 +595,6 @@ export type InitInput = RequestInfo | URL | Response | BufferSource | WebAssembl
 
 export interface InitOutput {
     readonly memory: WebAssembly.Memory;
-    readonly __wbg_invocation_free: (a: number, b: number) => void;
-    readonly __wbg_signedinvocation_free: (a: number, b: number) => void;
-    readonly setPanicHook: () => void;
-    readonly __wbg_signed_free: (a: number, b: number) => void;
-    readonly __wbg_signedcgkaoperation_free: (a: number, b: number) => void;
-    readonly signed_fromBytes: (a: number, b: number) => [number, number, number];
-    readonly signed_payload: (a: number) => [number, number];
-    readonly signed_signature: (a: number) => [number, number];
-    readonly signed_toBytes: (a: number) => [number, number, number, number];
-    readonly signed_verify: (a: number) => number;
-    readonly signed_verifyingKey: (a: number) => [number, number];
-    readonly signedcgkaoperation_delegation: (a: number) => number;
-    readonly signedcgkaoperation_signature: (a: number) => [number, number];
-    readonly signedcgkaoperation_verify: (a: number) => number;
-    readonly signedcgkaoperation_verifyingKey: (a: number) => [number, number];
-    readonly __wbg_allagentevents_free: (a: number, b: number) => void;
-    readonly __wbg_changeid_free: (a: number, b: number) => void;
-    readonly __wbg_ciphertextstore_free: (a: number, b: number) => void;
-    readonly __wbg_decryptedkeyed_free: (a: number, b: number) => void;
-    readonly __wbg_doccontentrefs_free: (a: number, b: number) => void;
-    readonly __wbg_revocation_free: (a: number, b: number) => void;
-    readonly __wbg_sharekey_free: (a: number, b: number) => void;
-    readonly allagentevents_agentCgkaSources: (a: number) => any;
-    readonly allagentevents_agentMembershipSources: (a: number) => any;
-    readonly allagentevents_agentPrekeySources: (a: number) => any;
-    readonly allagentevents_cgkaSources: (a: number) => any;
-    readonly allagentevents_events: (a: number) => any;
-    readonly allagentevents_membershipSources: (a: number) => any;
-    readonly allagentevents_prekeySources: (a: number) => any;
-    readonly changeid___wasm_refgen_toJsChangeId: (a: number) => number;
-    readonly changeid_bytes: (a: number) => [number, number];
-    readonly changeid_new: (a: number, b: number) => number;
-    readonly ciphertextstore_newFromWebStorage: (a: any) => number;
-    readonly ciphertextstore_newInMemory: () => number;
-    readonly decryptedkeyed_applicationSecret: (a: number) => [number, number];
-    readonly decryptedkeyed_plaintext: (a: number) => [number, number];
-    readonly doccontentrefs_addChangeId: (a: number, b: number) => any;
-    readonly doccontentrefs_change_hashes: (a: number) => any;
-    readonly doccontentrefs_docId: (a: number) => number;
-    readonly doccontentrefs_new: (a: number, b: number, c: number) => [number, number, number];
-    readonly revocation_after: (a: number) => number;
-    readonly revocation_proof: (a: number) => number;
-    readonly revocation_revoked: (a: number) => number;
-    readonly revocation_subject_id: (a: number) => number;
-    readonly __wbg_access_free: (a: number, b: number) => void;
-    readonly __wbg_cannotparseed25519signingkey_free: (a: number, b: number) => void;
-    readonly __wbg_cgkaoperation_free: (a: number, b: number) => void;
-    readonly __wbg_contactcard_free: (a: number, b: number) => void;
-    readonly __wbg_documentid_free: (a: number, b: number) => void;
-    readonly __wbg_encrypted_free: (a: number, b: number) => void;
-    readonly __wbg_event_free: (a: number, b: number) => void;
-    readonly __wbg_generatewebcryptoerror_free: (a: number, b: number) => void;
-    readonly __wbg_groupid_free: (a: number, b: number) => void;
-    readonly __wbg_signer_free: (a: number, b: number) => void;
-    readonly access_toString: (a: number) => [number, number];
-    readonly access_tryFromString: (a: number, b: number) => number;
-    readonly cgkaoperation_variant: (a: number) => [number, number];
-    readonly contactcard_fromJson: (a: number, b: number) => [number, number, number];
-    readonly contactcard_id: (a: number) => number;
-    readonly contactcard_individualId: (a: number) => number;
-    readonly contactcard_op: (a: number) => number;
-    readonly contactcard_shareKey: (a: number) => number;
-    readonly contactcard_signature: (a: number) => [number, number];
-    readonly contactcard_toJson: (a: number) => [number, number, number, number];
-    readonly documentid_new: (a: number, b: number) => [number, number, number];
-    readonly documentid_toBytes: (a: number) => [number, number];
-    readonly documentid_toJsValue: (a: number) => any;
-    readonly documentid_toString: (a: number) => [number, number];
-    readonly encrypted_ciphertext: (a: number) => [number, number];
-    readonly encrypted_content_ref: (a: number) => [number, number];
-    readonly encrypted_decryptWithKey: (a: number, b: number, c: number) => [number, number, number, number];
-    readonly encrypted_fromBytes: (a: number, b: number) => [number, number, number];
-    readonly encrypted_nonce: (a: number) => [number, number];
-    readonly encrypted_pcs_key_hash: (a: number) => [number, number];
-    readonly encrypted_pred_refs: (a: number) => [number, number];
-    readonly encrypted_serialize: (a: number) => [number, number, number, number];
-    readonly event_isDelegated: (a: number) => number;
-    readonly event_isRevoked: (a: number) => number;
-    readonly event_toBytes: (a: number) => [number, number, number, number];
-    readonly event_tryIntoSignedDelegation: (a: number) => number;
-    readonly event_tryIntoSignedRevocation: (a: number) => number;
-    readonly event_variant: (a: number) => [number, number];
-    readonly generatewebcryptoerror_message: (a: number) => [number, number];
-    readonly groupid_toString: (a: number) => [number, number];
-    readonly signer_clone: (a: number) => number;
-    readonly signer_generate: () => any;
-    readonly signer_generateMemory: () => number;
-    readonly signer_generateWebCrypto: () => any;
-    readonly signer_memorySignerFromBytes: (a: number, b: number) => [number, number, number];
-    readonly signer_trySign: (a: number, b: number, c: number) => any;
-    readonly signer_variant: (a: number) => [number, number];
-    readonly signer_verifyingKey: (a: number) => [number, number];
-    readonly signer_webCryptoSigner: (a: any) => any;
-    readonly symmetricDecrypt: (a: number, b: number, c: number, d: number) => [number, number, number, number];
-    readonly symmetricEncrypt: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
-    readonly encrypted_toBytes: (a: number) => [number, number];
-    readonly __wbg_archive_free: (a: number, b: number) => void;
-    readonly __wbg_capability_free: (a: number, b: number) => void;
-    readonly __wbg_delegation_free: (a: number, b: number) => void;
-    readonly __wbg_history_free: (a: number, b: number) => void;
-    readonly __wbg_individualid_free: (a: number, b: number) => void;
-    readonly __wbg_membered_free: (a: number, b: number) => void;
-    readonly __wbg_membership_free: (a: number, b: number) => void;
-    readonly __wbg_signeddelegation_free: (a: number, b: number) => void;
-    readonly __wbg_signedrevocation_free: (a: number, b: number) => void;
-    readonly __wbg_summary_free: (a: number, b: number) => void;
-    readonly archive_toBytes: (a: number) => [number, number, number, number];
-    readonly archive_tryToKeyhive: (a: number, b: number, c: number, d: any) => any;
-    readonly archive_try_from_bytes: (a: number, b: number) => [number, number, number];
-    readonly capability_can: (a: number) => number;
-    readonly capability_proof: (a: number) => number;
-    readonly capability_who: (a: number) => number;
-    readonly delegation_after: (a: number) => number;
-    readonly delegation_can: (a: number) => number;
-    readonly delegation_delegate: (a: number) => number;
-    readonly delegation_proof: (a: number) => number;
-    readonly history_contentRefs: (a: number) => [number, number];
-    readonly history_delegations: (a: number) => [number, number];
-    readonly history_revocations: (a: number) => [number, number];
-    readonly individualid_bytes: (a: number) => [number, number];
-    readonly membership_can: (a: number) => number;
-    readonly membership_who: (a: number) => number;
-    readonly signeddelegation_delegation: (a: number) => number;
-    readonly signeddelegation_signature: (a: number) => [number, number];
-    readonly signeddelegation_subjectId: (a: number) => number;
-    readonly signeddelegation_verify: (a: number) => number;
-    readonly signeddelegation_verifyingKey: (a: number) => [number, number];
-    readonly signedrevocation_delegation: (a: number) => number;
-    readonly signedrevocation_signature: (a: number) => [number, number];
-    readonly signedrevocation_verify: (a: number) => number;
-    readonly signedrevocation_verifyingKey: (a: number) => [number, number];
-    readonly summary_access: (a: number) => number;
-    readonly summary_doc: (a: number) => number;
-    readonly __wbg_cannotparseidentifier_free: (a: number, b: number) => void;
-    readonly __wbg_identifier_free: (a: number, b: number) => void;
-    readonly identifier_new: (a: number, b: number) => [number, number, number];
-    readonly identifier_publicId: () => number;
-    readonly identifier_toBytes: (a: number) => [number, number];
     readonly __wbg_agent_free: (a: number, b: number) => void;
     readonly __wbg_document_free: (a: number, b: number) => void;
     readonly __wbg_encryptedcontentwithupdate_free: (a: number, b: number) => void;
@@ -685,7 +603,6 @@ export interface InitOutput {
     readonly __wbg_individual_free: (a: number, b: number) => void;
     readonly __wbg_keyhive_free: (a: number, b: number) => void;
     readonly __wbg_peer_free: (a: number, b: number) => void;
-    readonly __wbg_stats_free: (a: number, b: number) => void;
     readonly agent_id: (a: number) => number;
     readonly agent_isDocument: (a: number) => number;
     readonly agent_isGroup: (a: number) => number;
@@ -717,6 +634,7 @@ export interface InitOutput {
     readonly keyhive_accessForDoc: (a: number, b: number, c: number) => any;
     readonly keyhive_addMember: (a: number, b: number, c: number, d: number, e: number, f: number) => any;
     readonly keyhive_allAgentEvents: (a: number) => any;
+    readonly keyhive_bestAccessForDoc: (a: number, b: number, c: number) => any;
     readonly keyhive_contactCard: (a: number) => any;
     readonly keyhive_docMemberCapabilities: (a: number, b: number) => any;
     readonly keyhive_eventHashesForAgent: (a: number, b: number) => any;
@@ -761,6 +679,57 @@ export interface InitOutput {
     readonly peer_isGroup: (a: number) => number;
     readonly peer_isIndividual: (a: number) => number;
     readonly peer_toString: (a: number) => [number, number];
+    readonly setPanicHook: () => void;
+    readonly group_groupId: (a: number) => number;
+    readonly group_id: (a: number) => number;
+    readonly individual_id: (a: number) => number;
+    readonly peer_id: (a: number) => number;
+    readonly __wbg_signed_free: (a: number, b: number) => void;
+    readonly __wbg_signedcgkaoperation_free: (a: number, b: number) => void;
+    readonly signed_fromBytes: (a: number, b: number) => [number, number, number];
+    readonly signed_payload: (a: number) => [number, number];
+    readonly signed_signature: (a: number) => [number, number];
+    readonly signed_toBytes: (a: number) => [number, number, number, number];
+    readonly signed_verify: (a: number) => number;
+    readonly signed_verifyingKey: (a: number) => [number, number];
+    readonly signedcgkaoperation_delegation: (a: number) => number;
+    readonly signedcgkaoperation_signature: (a: number) => [number, number];
+    readonly signedcgkaoperation_verify: (a: number) => number;
+    readonly signedcgkaoperation_verifyingKey: (a: number) => [number, number];
+    readonly __wbg_archive_free: (a: number, b: number) => void;
+    readonly __wbg_capability_free: (a: number, b: number) => void;
+    readonly __wbg_delegation_free: (a: number, b: number) => void;
+    readonly __wbg_history_free: (a: number, b: number) => void;
+    readonly __wbg_membered_free: (a: number, b: number) => void;
+    readonly __wbg_membership_free: (a: number, b: number) => void;
+    readonly __wbg_signeddelegation_free: (a: number, b: number) => void;
+    readonly __wbg_signedrevocation_free: (a: number, b: number) => void;
+    readonly __wbg_stats_free: (a: number, b: number) => void;
+    readonly __wbg_summary_free: (a: number, b: number) => void;
+    readonly archive_toBytes: (a: number) => [number, number, number, number];
+    readonly archive_tryToKeyhive: (a: number, b: number, c: number, d: any) => any;
+    readonly archive_try_from_bytes: (a: number, b: number) => [number, number, number];
+    readonly capability_can: (a: number) => number;
+    readonly capability_proof: (a: number) => number;
+    readonly capability_who: (a: number) => number;
+    readonly delegation_after: (a: number) => number;
+    readonly delegation_can: (a: number) => number;
+    readonly delegation_delegate: (a: number) => number;
+    readonly delegation_proof: (a: number) => number;
+    readonly history_contentRefs: (a: number) => [number, number];
+    readonly history_delegations: (a: number) => [number, number];
+    readonly history_revocations: (a: number) => [number, number];
+    readonly membership_can: (a: number) => number;
+    readonly membership_who: (a: number) => number;
+    readonly signeddelegation_delegation: (a: number) => number;
+    readonly signeddelegation_signature: (a: number) => [number, number];
+    readonly signeddelegation_subjectId: (a: number) => number;
+    readonly signeddelegation_verify: (a: number) => number;
+    readonly signeddelegation_verifyingKey: (a: number) => [number, number];
+    readonly signedrevocation_delegation: (a: number) => number;
+    readonly signedrevocation_signature: (a: number) => [number, number];
+    readonly signedrevocation_verify: (a: number) => number;
+    readonly signedrevocation_verifyingKey: (a: number) => [number, number];
     readonly stats_activePrekeyCount: (a: number) => bigint;
     readonly stats_cgkaOperations: (a: number) => bigint;
     readonly stats_delegations: (a: number) => bigint;
@@ -782,12 +751,111 @@ export interface InitOutput {
     readonly stats_revocations: (a: number) => bigint;
     readonly stats_totalOps: (a: number) => bigint;
     readonly stats_totalPendingOps: (a: number) => bigint;
-    readonly group_groupId: (a: number) => number;
-    readonly group_id: (a: number) => number;
-    readonly individual_id: (a: number) => number;
-    readonly peer_id: (a: number) => number;
-    readonly wasm_bindgen__convert__closures_____invoke__h9887d5ab72723f8a: (a: number, b: number, c: any) => [number, number];
-    readonly wasm_bindgen__convert__closures_____invoke__h58982df154245cbc: (a: number, b: number, c: any, d: any) => void;
+    readonly summary_access: (a: number) => number;
+    readonly summary_doc: (a: number) => number;
+    readonly __wbg_access_free: (a: number, b: number) => void;
+    readonly __wbg_cannotparseed25519signingkey_free: (a: number, b: number) => void;
+    readonly __wbg_cgkaoperation_free: (a: number, b: number) => void;
+    readonly __wbg_contactcard_free: (a: number, b: number) => void;
+    readonly __wbg_documentid_free: (a: number, b: number) => void;
+    readonly __wbg_encrypted_free: (a: number, b: number) => void;
+    readonly __wbg_event_free: (a: number, b: number) => void;
+    readonly __wbg_generatewebcryptoerror_free: (a: number, b: number) => void;
+    readonly __wbg_groupid_free: (a: number, b: number) => void;
+    readonly __wbg_sharekey_free: (a: number, b: number) => void;
+    readonly __wbg_signer_free: (a: number, b: number) => void;
+    readonly access_admin: () => number;
+    readonly access_atLeast: (a: number, b: number) => number;
+    readonly access_compareTo: (a: number, b: number) => number;
+    readonly access_edit: () => number;
+    readonly access_equals: (a: number, b: number) => number;
+    readonly access_fromString: (a: number, b: number) => [number, number, number];
+    readonly access_isEditor: (a: number) => number;
+    readonly access_isReader: (a: number) => number;
+    readonly access_level: (a: number) => number;
+    readonly access_read: () => number;
+    readonly access_relay: () => number;
+    readonly access_toString: (a: number) => [number, number];
+    readonly access_tryFromString: (a: number, b: number) => number;
+    readonly cgkaoperation_variant: (a: number) => [number, number];
+    readonly contactcard_fromJson: (a: number, b: number) => [number, number, number];
+    readonly contactcard_id: (a: number) => number;
+    readonly contactcard_individualId: (a: number) => number;
+    readonly contactcard_op: (a: number) => number;
+    readonly contactcard_shareKey: (a: number) => number;
+    readonly contactcard_signature: (a: number) => [number, number];
+    readonly contactcard_toJson: (a: number) => [number, number, number, number];
+    readonly documentid_new: (a: number, b: number) => [number, number, number];
+    readonly documentid_toBytes: (a: number) => [number, number];
+    readonly documentid_toJsValue: (a: number) => any;
+    readonly documentid_toString: (a: number) => [number, number];
+    readonly encrypted_ciphertext: (a: number) => [number, number];
+    readonly encrypted_content_ref: (a: number) => [number, number];
+    readonly encrypted_decryptWithKey: (a: number, b: number, c: number) => [number, number, number, number];
+    readonly encrypted_fromBytes: (a: number, b: number) => [number, number, number];
+    readonly encrypted_nonce: (a: number) => [number, number];
+    readonly encrypted_pcs_key_hash: (a: number) => [number, number];
+    readonly encrypted_pred_refs: (a: number) => [number, number];
+    readonly encrypted_serialize: (a: number) => [number, number, number, number];
+    readonly event_isDelegated: (a: number) => number;
+    readonly event_isRevoked: (a: number) => number;
+    readonly event_toBytes: (a: number) => [number, number, number, number];
+    readonly event_tryIntoSignedDelegation: (a: number) => number;
+    readonly event_tryIntoSignedRevocation: (a: number) => number;
+    readonly event_variant: (a: number) => [number, number];
+    readonly generatewebcryptoerror_message: (a: number) => [number, number];
+    readonly groupid_toString: (a: number) => [number, number];
+    readonly signer_clone: (a: number) => number;
+    readonly signer_generate: () => any;
+    readonly signer_generateMemory: () => number;
+    readonly signer_generateWebCrypto: () => any;
+    readonly signer_memorySignerFromBytes: (a: number, b: number) => [number, number, number];
+    readonly signer_trySign: (a: number, b: number, c: number) => any;
+    readonly signer_variant: (a: number) => [number, number];
+    readonly signer_verifyingKey: (a: number) => [number, number];
+    readonly signer_webCryptoSigner: (a: any) => any;
+    readonly symmetricDecrypt: (a: number, b: number, c: number, d: number) => [number, number, number, number];
+    readonly symmetricEncrypt: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
+    readonly encrypted_toBytes: (a: number) => [number, number];
+    readonly __wbg_invocation_free: (a: number, b: number) => void;
+    readonly __wbg_signedinvocation_free: (a: number, b: number) => void;
+    readonly __wbg_cannotparseidentifier_free: (a: number, b: number) => void;
+    readonly __wbg_identifier_free: (a: number, b: number) => void;
+    readonly identifier_new: (a: number, b: number) => [number, number, number];
+    readonly identifier_publicId: () => number;
+    readonly identifier_toBytes: (a: number) => [number, number];
+    readonly __wbg_allagentevents_free: (a: number, b: number) => void;
+    readonly __wbg_changeid_free: (a: number, b: number) => void;
+    readonly __wbg_ciphertextstore_free: (a: number, b: number) => void;
+    readonly __wbg_decryptedkeyed_free: (a: number, b: number) => void;
+    readonly __wbg_doccontentrefs_free: (a: number, b: number) => void;
+    readonly __wbg_individualid_free: (a: number, b: number) => void;
+    readonly __wbg_revocation_free: (a: number, b: number) => void;
+    readonly allagentevents_agentCgkaSources: (a: number) => any;
+    readonly allagentevents_agentMembershipSources: (a: number) => any;
+    readonly allagentevents_agentPrekeySources: (a: number) => any;
+    readonly allagentevents_cgkaSources: (a: number) => any;
+    readonly allagentevents_events: (a: number) => any;
+    readonly allagentevents_membershipSources: (a: number) => any;
+    readonly allagentevents_prekeySources: (a: number) => any;
+    readonly changeid___wasm_refgen_toJsChangeId: (a: number) => number;
+    readonly changeid_bytes: (a: number) => [number, number];
+    readonly changeid_new: (a: number, b: number) => number;
+    readonly ciphertextstore_newFromWebStorage: (a: any) => number;
+    readonly ciphertextstore_newInMemory: () => number;
+    readonly decryptedkeyed_applicationSecret: (a: number) => [number, number];
+    readonly decryptedkeyed_plaintext: (a: number) => [number, number];
+    readonly doccontentrefs_addChangeId: (a: number, b: number) => any;
+    readonly doccontentrefs_change_hashes: (a: number) => any;
+    readonly doccontentrefs_docId: (a: number) => number;
+    readonly doccontentrefs_new: (a: number, b: number, c: number) => [number, number, number];
+    readonly individualid_bytes: (a: number) => [number, number];
+    readonly revocation_after: (a: number) => number;
+    readonly revocation_proof: (a: number) => number;
+    readonly revocation_revoked: (a: number) => number;
+    readonly revocation_subject_id: (a: number) => number;
+    readonly wasm_bindgen__convert__closures_____invoke__h264249ebd10d2c4e: (a: number, b: number, c: any) => [number, number];
+    readonly wasm_bindgen__convert__closures_____invoke__h3240482818b7fa6b: (a: number, b: number, c: any, d: any) => void;
     readonly __wbindgen_malloc: (a: number, b: number) => number;
     readonly __wbindgen_realloc: (a: number, b: number, c: number, d: number) => number;
     readonly __wbindgen_exn_store: (a: number) => void;

package/pkg-slim/keyhive_wasm.js

@@ -17,6 +17,108 @@ export class Access {
         const ptr = this.__destroy_into_raw();
         wasm.__wbg_access_free(ptr, 0);
     }
+    /**
+     * The ability to revoke any members of a group, not just those that they have causal senority over.
+     * @returns {Access}
+     */
+    static admin() {
+        const ret = wasm.access_admin();
+        return Access.__wrap(ret);
+    }
+    /**
+     * True if this level is at least as permissive as `other`.
+     * @param {Access} other
+     * @returns {boolean}
+     */
+    atLeast(other) {
+        _assertClass(other, Access);
+        const ret = wasm.access_atLeast(this.__wbg_ptr, other.__wbg_ptr);
+        return ret !== 0;
+    }
+    /**
+     * Standard comparator result: -1 if less permissive than `other`,
+     * 0 if equal, 1 if more permissive.
+     * @param {Access} other
+     * @returns {number}
+     */
+    compareTo(other) {
+        _assertClass(other, Access);
+        const ret = wasm.access_compareTo(this.__wbg_ptr, other.__wbg_ptr);
+        return ret;
+    }
+    /**
+     * The ability to edit (append ops to) the content of a document.
+     * @returns {Access}
+     */
+    static edit() {
+        const ret = wasm.access_edit();
+        return Access.__wrap(ret);
+    }
+    /**
+     * @param {Access} other
+     * @returns {boolean}
+     */
+    equals(other) {
+        _assertClass(other, Access);
+        const ret = wasm.access_equals(this.__wbg_ptr, other.__wbg_ptr);
+        return ret !== 0;
+    }
+    /**
+     * Parse an access level, throwing on invalid input.
+     * Accepts "relay", "read", "edit", or "admin" (case-insensitive).
+     * @param {string} s
+     * @returns {Access}
+     */
+    static fromString(s) {
+        const ptr0 = passStringToWasm0(s, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+        const len0 = WASM_VECTOR_LEN;
+        const ret = wasm.access_fromString(ptr0, len0);
+        if (ret[2]) {
+            throw takeFromExternrefTable0(ret[1]);
+        }
+        return Access.__wrap(ret[0]);
+    }
+    /**
+     * True for Edit access or higher.
+     * @returns {boolean}
+     */
+    get isEditor() {
+        const ret = wasm.access_isEditor(this.__wbg_ptr);
+        return ret !== 0;
+    }
+    /**
+     * True for Read access or higher.
+     * @returns {boolean}
+     */
+    get isReader() {
+        const ret = wasm.access_isReader(this.__wbg_ptr);
+        return ret !== 0;
+    }
+    /**
+     * Numeric level for ordering: Relay = 0, Read = 1, Edit = 2, Admin = 3.
+     * Higher levels imply all lower levels.
+     * @returns {number}
+     */
+    get level() {
+        const ret = wasm.access_level(this.__wbg_ptr);
+        return ret;
+    }
+    /**
+     * The ability to read (decrypt) the content of a document.
+     * @returns {Access}
+     */
+    static read() {
+        const ret = wasm.access_read();
+        return Access.__wrap(ret);
+    }
+    /**
+     * The ability to retrieve bytes over the network.
+     * @returns {Access}
+     */
+    static relay() {
+        const ret = wasm.access_relay();
+        return Access.__wrap(ret);
+    }
     /**
      * @returns {string}
      */
@@ -33,6 +135,8 @@ export class Access {
         }
     }
     /**
+     * Parse an access level, returning undefined on invalid input.
+     * Prefer `fromString`, which throws a descriptive error instead.
      * @param {string} s
      * @returns {Access | undefined}
      */
@@ -1013,6 +1117,7 @@ export class EncryptedKeyed {
     }
     /**
      * The 32-byte application secret key used to encrypt this content.
+     * Treat as secret: do not log or persist unencrypted.
      * @returns {Uint8Array}
      */
     get applicationSecret() {
@@ -1506,6 +1611,20 @@ export class Keyhive {
         const ret = wasm.keyhive_allAgentEvents(this.__wbg_ptr);
         return ret;
     }
+    /**
+     * The most permissive of `id`'s direct access and the document's
+     * public access. Returns undefined if neither grants access (or the
+     * document is unknown).
+     * @param {Identifier} id
+     * @param {DocumentId} doc_id
+     * @returns {Promise<Access | undefined>}
+     */
+    bestAccessForDoc(id, doc_id) {
+        _assertClass(id, Identifier);
+        _assertClass(doc_id, DocumentId);
+        const ret = wasm.keyhive_bestAccessForDoc(this.__wbg_ptr, id.__wbg_ptr, doc_id.__wbg_ptr);
+        return ret;
+    }
     /**
      * @returns {Promise<ContactCard>}
      */
@@ -1560,6 +1679,7 @@ export class Keyhive {
      * Force a PCS key rotation and return the new leaf secret, serialized as a
      * one-entry `BTreeMap<ShareKey, ShareSecretKey>` (the exact format
      * `importPrekeySecrets` accepts).
+     * The returned bytes are secret key material: do not log or persist unencrypted.
      * @param {Document} doc
      * @returns {Promise<Uint8Array>}
      */
@@ -3029,7 +3149,7 @@ function __wbg_get_imports() {
                     const a = state0.a;
                     state0.a = 0;
                     try {
-                        return wasm_bindgen__convert__closures_____invoke__h58982df154245cbc(a, state0.b, arg0, arg1);
+                        return wasm_bindgen__convert__closures_____invoke__h3240482818b7fa6b(a, state0.b, arg0, arg1);
                     } finally {
                         state0.a = a;
                     }
@@ -3182,8 +3302,8 @@ function __wbg_get_imports() {
             }
         },
         __wbindgen_cast_0000000000000001: function(arg0, arg1) {
-            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 716, ret: Result(Unit), inner_ret: Some(Result(Unit)) }, mutable: true }) -> Externref`.
-            const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h9887d5ab72723f8a);
+            // Cast intrinsic for `Closure(Closure { owned: true, function: Function { arguments: [Externref], shim_idx: 719, ret: Result(Unit), inner_ret: Some(Result(Unit)) }, mutable: true }) -> Externref`.
+            const ret = makeMutClosure(arg0, arg1, wasm_bindgen__convert__closures_____invoke__h264249ebd10d2c4e);
             return ret;
         },
         __wbindgen_cast_0000000000000002: function(arg0, arg1) {
@@ -3268,15 +3388,15 @@ function __wbg_get_imports() {
     };
 }
 
-function wasm_bindgen__convert__closures_____invoke__h9887d5ab72723f8a(arg0, arg1, arg2) {
-    const ret = wasm.wasm_bindgen__convert__closures_____invoke__h9887d5ab72723f8a(arg0, arg1, arg2);
+function wasm_bindgen__convert__closures_____invoke__h264249ebd10d2c4e(arg0, arg1, arg2) {
+    const ret = wasm.wasm_bindgen__convert__closures_____invoke__h264249ebd10d2c4e(arg0, arg1, arg2);
     if (ret[1]) {
         throw takeFromExternrefTable0(ret[0]);
     }
 }
 
-function wasm_bindgen__convert__closures_____invoke__h58982df154245cbc(arg0, arg1, arg2, arg3) {
-    wasm.wasm_bindgen__convert__closures_____invoke__h58982df154245cbc(arg0, arg1, arg2, arg3);
+function wasm_bindgen__convert__closures_____invoke__h3240482818b7fa6b(arg0, arg1, arg2, arg3) {
+    wasm.wasm_bindgen__convert__closures_____invoke__h3240482818b7fa6b(arg0, arg1, arg2, arg3);
 }
 
 const AccessFinalization = (typeof FinalizationRegistry === 'undefined')