@mdbase-dev/sdk 0.0.0-stage → 0.1.0-beta.149

package/dist/app-host/noise-custody.js

@@ -0,0 +1,238 @@
+/** Web-only OUTER protection of an opaque native Noise envelope. No Noise
+ * plaintext, native custody key, sign/KEM seed or generic crypto interface. */
+import { decode, encode } from "../cbor.js";
+import { uuidToBytes } from "../codec.js";
+const bad = () => new Error("app Noise custody unavailable; preserve storage and reopen");
+const equal = (a, b) => a.length === b.length && a.every((v, i) => v === b[i]);
+/** The KEK is acquired/restored through the platform's persistent protected key
+ * provider. NEVER generate a substitute key on failed lookup/decrypt/reopen.
+ * Workers do NOT isolate keys against same-origin JS/XSS. */
+export class AppWebNoiseCustody {
+    pin;
+    key;
+    store;
+    scope;
+    namespace;
+    aad;
+    constructor(pin, key, store) {
+        this.pin = pin;
+        this.key = key;
+        this.store = store;
+        try {
+            this.scope = Object.freeze({ connectorId: pin.connectorId, deviceId: pin.deviceId, installationId: pin.installationId });
+            const ids = [this.scope.connectorId, this.scope.deviceId, this.scope.installationId].map(uuidToBytes);
+            if (ids.some(b => b.every(v => v === 0)))
+                throw bad();
+            if (key.type !== "secret" || key.extractable || key.algorithm.name !== "AES-GCM" || key.algorithm.length !== 256 || !key.usages.includes("encrypt") || !key.usages.includes("decrypt"))
+                throw bad();
+            this.namespace = `mdbase.app-noise.v1:${this.scope.connectorId}:${this.scope.deviceId}:${this.scope.installationId}`;
+            this.aad = encode(["mdbase/v1/app-noise-platform", ...ids]);
+            this.check(new AbortController().signal);
+        }
+        catch {
+            throw bad();
+        }
+    }
+    check(signal) {
+        try {
+            if (signal.aborted || this.pin.isCurrent() !== true || this.pin.connectorId !== this.scope.connectorId || this.pin.deviceId !== this.scope.deviceId || this.pin.installationId !== this.scope.installationId)
+                throw bad();
+        }
+        catch {
+            throw bad();
+        }
+    }
+    receiptValue(receipt) {
+        if (receipt.connectorId !== this.scope.connectorId || receipt.deviceId !== this.scope.deviceId || receipt.installationId !== this.scope.installationId)
+            throw bad();
+        const keys = [receipt.signPublicKey, receipt.kemPublicKey, receipt.noisePublicKey];
+        if (keys.some(b => !(b instanceof Uint8Array) || b.length !== 32 || b.every(v => v === 0)))
+            throw bad();
+        return keys.map(b => new Uint8Array(b));
+    }
+    receipt(value) {
+        if (value === null)
+            return null;
+        if (!Array.isArray(value) || value.length !== 3 || value.some(b => !(b instanceof Uint8Array) || b.length !== 32 || b.every(v => v === 0)))
+            throw bad();
+        return Object.freeze({ ...this.scope, signPublicKey: new Uint8Array(value[0]), kemPublicKey: new Uint8Array(value[1]), noisePublicKey: new Uint8Array(value[2]) });
+    }
+    markerValue(marker) {
+        const collection = uuidToBytes(marker.collection);
+        if (collection.every(v => v === 0) || typeof marker.acknowledged !== "boolean" || !(marker.sasCommitment instanceof Uint8Array) || marker.sasCommitment.length !== 32 || marker.sasCommitment.every(v => v === 0))
+            throw bad();
+        return [collection, ...this.receiptValue(marker), new Uint8Array(marker.sasCommitment), marker.acknowledged];
+    }
+    marker(value, receipt) {
+        if (value === null)
+            return null;
+        if (!receipt || !Array.isArray(value) || value.length !== 6 || !(value[0] instanceof Uint8Array) || value[0].length !== 16 || value[0].every(v => v === 0) || typeof value[5] !== "boolean")
+            throw bad();
+        const keys = this.receipt(value.slice(1, 4));
+        for (const k of ["signPublicKey", "kemPublicKey", "noisePublicKey"])
+            if (!equal(keys[k], receipt[k]))
+                throw bad();
+        const commit = value[4];
+        if (!(commit instanceof Uint8Array) || commit.length !== 32 || commit.every(v => v === 0))
+            throw bad();
+        const id = Array.from(value[0], v => v.toString(16).padStart(2, "0")).join("");
+        return Object.freeze({ ...keys, collection: `${id.slice(0, 8)}-${id.slice(8, 12)}-${id.slice(12, 16)}-${id.slice(16, 20)}-${id.slice(20)}`, sasCommitment: new Uint8Array(commit), acknowledged: value[5] });
+    }
+    /** Async BEFORE sync native device open. Missing is explicit null, not first
+     * install authorization: a host must consult its installation record. Any
+     * existing ciphertext/key/scope failure REFUSES, never regenerates/falls back. */
+    async restore(options) {
+        const record = await this.read(options);
+        this.check(options.signal);
+        return record?.value ?? null;
+    }
+    async read(options) {
+        let cipher = null, plain = null;
+        try {
+            this.check(options.signal);
+            const borrowed = await this.store.read(this.namespace, options);
+            this.check(options.signal);
+            if (borrowed === null)
+                return null;
+            if (!(borrowed instanceof Uint8Array) || borrowed.length === 0 || borrowed.length > 4096)
+                throw bad();
+            cipher = new Uint8Array(borrowed);
+            const outer = decode(cipher);
+            if (!(outer instanceof Map))
+                throw bad();
+            const m = outer;
+            const iv = m.get(1), body = m.get(2);
+            if (m.size !== 3 || m.get(0) !== 1 || !(iv instanceof Uint8Array) || iv.length !== 12 || !(body instanceof Uint8Array) || body.length < 16 || body.length > 2064)
+                throw bad();
+            plain = new Uint8Array(await globalThis.crypto.subtle.decrypt({ name: "AES-GCM", iv: new Uint8Array(iv), additionalData: new Uint8Array(this.aad), tagLength: 128 }, this.key, new Uint8Array(body)));
+            this.check(options.signal);
+            if (plain.length > 2048)
+                throw bad();
+            const value = decode(plain);
+            if (!(value instanceof Map))
+                throw bad();
+            const record = value, envelope = record.get(1);
+            if (!((record.get(0) === 1 && record.size === 3) || (record.get(0) === 2 && record.size === 4 && record.has(3))) || !(envelope instanceof Uint8Array) || envelope.length === 0 || envelope.length > 1024 || !record.has(2))
+                throw bad();
+            const receipt = this.receipt(record.get(2));
+            const marker = record.get(0) === 2 ? this.marker(record.get(3), receipt) : null;
+            return { value: Object.freeze({ envelope: new Uint8Array(envelope), receipt, privateEnrolMarker: marker }), encrypted: new Uint8Array(cipher) };
+        }
+        catch {
+            throw bad();
+        }
+        finally {
+            cipher?.fill(0);
+            plain?.fill(0);
+        }
+    }
+    async write(envelope, receipt, expected, options, marker = null) {
+        let plain = null, cipher = null;
+        try {
+            this.check(options.signal);
+            if (!(envelope instanceof Uint8Array) || !envelope.length || envelope.length > 1024)
+                throw bad();
+            const record = new Map([[0, marker === null ? 1 : 2], [1, new Uint8Array(envelope)], [2, receipt === null ? null : this.receiptValue(receipt)]]);
+            if (marker !== null) {
+                const value = this.markerValue(marker);
+                this.marker(value, receipt);
+                record.set(3, value);
+            }
+            plain = encode(record);
+            if (plain.length > 2048)
+                throw bad();
+            const iv = globalThis.crypto.getRandomValues(new Uint8Array(12));
+            const body = new Uint8Array(await globalThis.crypto.subtle.encrypt({ name: "AES-GCM", iv, additionalData: new Uint8Array(this.aad), tagLength: 128 }, this.key, new Uint8Array(plain)));
+            this.check(options.signal);
+            cipher = encode(new Map([[0, 1], [1, iv], [2, body]]));
+            const stored = await this.store.compareAndSet(this.namespace, expected, cipher, options);
+            this.check(options.signal);
+            if (stored !== true)
+                throw bad();
+        }
+        catch {
+            throw bad();
+        }
+        finally {
+            plain?.fill(0);
+            cipher?.fill(0);
+        }
+    }
+    async pending(envelope, options) {
+        const existing = await this.read(options);
+        this.check(options.signal);
+        // Preserve completed registration and uncertain prior writes. NO overwrite
+        // with a different Noise identity, no fresh fallback/reset if record exists.
+        if (existing) {
+            if (!equal(existing.value.envelope, envelope))
+                throw bad();
+            return;
+        }
+        await this.write(envelope, null, null, options);
+        this.check(options.signal);
+    }
+    /** Protect PUBLIC exact tuple+commit BEFORE POST. Existing uncertain marker
+     * cannot be replaced/cleared; no r, SAS custody purpose or generic data API. */
+    async privateEnrolPending(marker, options) {
+        try {
+            if (marker.acknowledged !== false)
+                throw bad();
+            await this.writePrivateMarker(marker, false, options);
+        }
+        catch {
+            throw bad();
+        }
+    }
+    /** Actual authenticated CP enrol response only, NOT approval/keyed. */
+    async privateEnrolAcknowledged(marker, options) {
+        try {
+            await this.writePrivateMarker(marker, true, options);
+        }
+        catch {
+            throw bad();
+        }
+    }
+    async writePrivateMarker(marker, acknowledged, options) {
+        this.check(options.signal);
+        const owned = this.marker(this.markerValue(marker), marker);
+        const existing = await this.read(options);
+        this.check(options.signal);
+        if (!existing?.value.receipt)
+            throw bad();
+        for (const k of ["signPublicKey", "kemPublicKey", "noisePublicKey"])
+            if (!equal(owned[k], existing.value.receipt[k]))
+                throw bad();
+        const prior = existing.value.privateEnrolMarker;
+        if (prior) {
+            if (prior.collection !== owned.collection || !equal(prior.sasCommitment, owned.sasCommitment))
+                throw bad();
+            if (prior.acknowledged) {
+                if (!acknowledged)
+                    throw bad();
+                return;
+            }
+            if (!acknowledged)
+                return;
+        }
+        else if (acknowledged)
+            throw bad();
+        await this.write(existing.value.envelope, existing.value.receipt, existing.encrypted, options, Object.freeze({ ...owned, acknowledged }));
+        this.check(options.signal);
+    }
+    async registered(receipt, options) {
+        const existing = await this.read(options);
+        this.check(options.signal);
+        if (!existing)
+            throw bad();
+        if (existing.value.receipt) {
+            for (const k of ["signPublicKey", "kemPublicKey", "noisePublicKey"])
+                if (!equal(existing.value.receipt[k], receipt[k]))
+                    throw bad();
+            this.receiptValue(receipt);
+            return;
+        }
+        await this.write(existing.value.envelope, receipt, existing.encrypted, options);
+        this.check(options.signal);
+    }
+}
+//# sourceMappingURL=noise-custody.js.map

package/dist/app-host/noise-custody.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"noise-custody.js","sourceRoot":"","sources":["../../src/app-host/noise-custody.ts"],"names":[],"mappings":"AAAA;+EAC+E;AAC/E,OAAO,EAAE,MAAM,EAAE,MAAM,EAAkB,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAe1C,MAAM,GAAG,GAAC,GAAE,EAAE,CAAA,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;AACtF,MAAM,KAAK,GAAC,CAAC,CAAY,EAAC,CAAY,EAAC,EAAE,CAAA,CAAC,CAAC,MAAM,KAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAC,CAAC,EAAC,EAAE,CAAA,CAAC,KAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACzF;;6DAE6D;AAC7D,MAAM,OAAO,kBAAkB;IAIA;IAA0C;IAA+B;IAHrF,KAAK,CAAsE;IAC3E,SAAS,CAAQ;IACjB,GAAG,CAAY;IAChC,YAA6B,GAAwB,EAAkB,GAAa,EAAkB,KAA4B;QAArG,QAAG,GAAH,GAAG,CAAqB;QAAkB,QAAG,GAAH,GAAG,CAAU;QAAkB,UAAK,GAAL,KAAK,CAAuB;QAChI,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,GAAC,MAAM,CAAC,MAAM,CAAC,EAAC,WAAW,EAAC,GAAG,CAAC,WAAW,EAAC,QAAQ,EAAC,GAAG,CAAC,QAAQ,EAAC,cAAc,EAAC,GAAG,CAAC,cAAc,EAAC,CAAC,CAAC;YAChH,MAAM,GAAG,GAAC,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAAA,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,KAAG,CAAC,CAAC,CAAC;gBAAE,MAAM,GAAG,EAAE,CAAC;YAClJ,IAAI,GAAG,CAAC,IAAI,KAAG,QAAQ,IAAI,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,KAAG,SAAS,IAAK,GAAG,CAAC,SAA6B,CAAC,MAAM,KAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAAE,MAAM,GAAG,EAAE,CAAC;YACnN,IAAI,CAAC,SAAS,GAAC,uBAAuB,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YACnH,IAAI,CAAC,GAAG,GAAC,MAAM,CAAC,CAAC,8BAA8B,EAAC,GAAG,GAAG,CAAC,CAAC,CAAC;YAAA,IAAI,CAAC,KAAK,CAAC,IAAI,eAAe,EAAE,CAAC,MAAM,CAAC,CAAC;QACpG,CAAC;QAAC,MAAM,CAAC;YAAA,MAAM,GAAG,EAAE,CAAC;QAAA,CAAC;IACxB,CAAC;IACO,KAAK,CAAC,MAAkB;QAC9B,IAAI,CAAC;YAAA,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,KAAG,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,KAAG,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,cAAc,KAAG,IAAI,CAAC,KAAK,CAAC,cAAc;gBAAE,MAAM,GAAG,EAAE,CAAC;QAAA,CAAC;QAAC,MAAM,CAAC;YAAA,MAAM,GAAG,EAAE,CAAC;QAAA,CAAC;IAC/O,CAAC;IACO,YAAY,CAAC,OAAoC;QACvD,IAAI,OAAO,CAAC,WAAW,KAAG,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,OAAO,CAAC,QAAQ,KAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAI,OAAO,CAAC,cAAc,KAAG,IAAI,CAAC,KAAK,CAAC,cAAc;YAAE,MAAM,GAAG,EAAE,CAAC;QAC9J,MAAM,IAAI,GAAC,CAAC,OAAO,CAAC,aAAa,EAAC,OAAO,CAAC,YAAY,EAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAAA,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC,IAAI,CAAC,CAAC,MAAM,KAAG,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,KAAG,CAAC,CAAC,CAAC;YAAE,MAAM,GAAG,EAAE,CAAC;QAC/K,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;IACO,OAAO,CAAC,KAAe;QAC7B,IAAI,KAAK,KAAG,IAAI;YAAE,OAAO,IAAI,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAG,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC,IAAI,CAAC,CAAC,MAAM,KAAG,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,KAAG,CAAC,CAAC,CAAC;YAAE,MAAM,GAAG,EAAE,CAAC;QAC9I,OAAO,MAAM,CAAC,MAAM,CAAC,EAAC,GAAG,IAAI,CAAC,KAAK,EAAC,aAAa,EAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAe,CAAC,EAAC,YAAY,EAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAe,CAAC,EAAC,cAAc,EAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAe,CAAC,EAAC,CAAC,CAAC;IACvM,CAAC;IACO,WAAW,CAAC,MAAqC;QACvD,MAAM,UAAU,GAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAAA,IAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,KAAG,CAAC,CAAC,IAAI,OAAO,MAAM,CAAC,YAAY,KAAG,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,YAAY,UAAU,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,KAAG,EAAE,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,KAAG,CAAC,CAAC;YAAE,MAAM,GAAG,EAAE,CAAC;QAClQ,OAAO,CAAC,UAAU,EAAC,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAgB,EAAC,IAAI,UAAU,CAAC,MAAM,CAAC,aAAa,CAAC,EAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC3H,CAAC;IACO,MAAM,CAAC,KAAe,EAAC,OAAyC;QACtE,IAAG,KAAK,KAAG,IAAI;YAAE,OAAO,IAAI,CAAC;QAC7B,IAAG,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,KAAG,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,KAAG,CAAC,CAAC,IAAI,OAAO,KAAK,CAAC,CAAC,CAAC,KAAG,SAAS;YAAE,MAAM,GAAG,EAAE,CAAC;QAC9L,MAAM,IAAI,GAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAC,CAAC,CAAC,CAAE,CAAC;QAAA,KAAI,MAAM,CAAC,IAAI,CAAC,eAAe,EAAC,cAAc,EAAC,gBAAgB,CAAU;YAAE,IAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBAAE,MAAM,GAAG,EAAE,CAAC;QACjK,MAAM,MAAM,GAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAAA,IAAG,CAAC,CAAC,MAAM,YAAY,UAAU,CAAC,IAAI,MAAM,CAAC,MAAM,KAAG,EAAE,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,KAAG,CAAC,CAAC;YAAE,MAAM,GAAG,EAAE,CAAC;QACtH,MAAM,EAAE,GAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAC,GAAG,IAAI,EAAC,UAAU,EAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,EAAC,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAC,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,EAAC,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,EAAC,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,EAAC,aAAa,EAAC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAC,YAAY,EAAC,KAAK,CAAC,CAAC,CAAC,EAAC,CAAC,CAAC;IACnM,CAAC;IACD;;sFAEkF;IAClF,KAAK,CAAC,OAAO,CAAC,OAA4B;QACxC,MAAM,MAAM,GAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAAA,OAAO,MAAM,EAAE,KAAK,IAAE,IAAI,CAAC;IAC9F,CAAC;IACO,KAAK,CAAC,IAAI,CAAC,OAA4B;QAC7C,IAAI,MAAM,GAAiB,IAAI,EAAC,KAAK,GAAiB,IAAI,CAAC;QAC3D,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAAA,MAAM,QAAQ,GAAC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAC,OAAO,CAAC,CAAC;YAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACnH,IAAI,QAAQ,KAAG,IAAI;gBAAE,OAAO,IAAI,CAAC;YACjC,IAAI,CAAC,CAAC,QAAQ,YAAY,UAAU,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAG,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAC,IAAI;gBAAE,MAAM,GAAG,EAAE,CAAC;YAAA,MAAM,GAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC;YAClI,MAAM,KAAK,GAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAAA,IAAI,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC;gBAAE,MAAM,GAAG,EAAE,CAAC;YAAA,MAAM,CAAC,GAAC,KAAiC,CAAC;YAAA,MAAM,EAAE,GAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAC,IAAI,GAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC9I,IAAI,CAAC,CAAC,IAAI,KAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAG,CAAC,IAAI,CAAC,CAAC,EAAE,YAAY,UAAU,CAAC,IAAI,EAAE,CAAC,MAAM,KAAG,EAAE,IAAI,CAAC,CAAC,IAAI,YAAY,UAAU,CAAC,IAAI,IAAI,CAAC,MAAM,GAAC,EAAE,IAAI,IAAI,CAAC,MAAM,GAAC,IAAI;gBAAE,MAAM,GAAG,EAAE,CAAC;YACpK,KAAK,GAAC,IAAI,UAAU,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAC,IAAI,EAAC,SAAS,EAAC,EAAE,EAAC,IAAI,UAAU,CAAC,EAAE,CAAC,EAAC,cAAc,EAAC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAC,SAAS,EAAC,GAAG,EAAC,EAAC,IAAI,CAAC,GAAG,EAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACpN,IAAI,KAAK,CAAC,MAAM,GAAC,IAAI;gBAAE,MAAM,GAAG,EAAE,CAAC;YAAA,MAAM,KAAK,GAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAAA,IAAI,CAAC,CAAC,KAAK,YAAY,GAAG,CAAC;gBAAE,MAAM,GAAG,EAAE,CAAC;YAAA,MAAM,MAAM,GAAC,KAAiC,EAAC,QAAQ,GAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC5K,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAG,CAAC,IAAI,MAAM,CAAC,IAAI,KAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAG,CAAC,IAAI,MAAM,CAAC,IAAI,KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,YAAY,UAAU,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAG,CAAC,IAAI,QAAQ,CAAC,MAAM,GAAC,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;gBAAE,MAAM,GAAG,EAAE,CAAC;YAC5N,MAAM,OAAO,GAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,CAAC;YAAA,MAAM,MAAM,GAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAG,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAE,EAAC,OAAO,CAAC,CAAA,CAAC,CAAA,IAAI,CAAC;YACnH,OAAO,EAAC,KAAK,EAAC,MAAM,CAAC,MAAM,CAAC,EAAC,QAAQ,EAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAC,OAAO,EAAC,kBAAkB,EAAC,MAAM,EAAC,CAAC,EAAC,SAAS,EAAC,IAAI,UAAU,CAAC,MAAM,CAAC,EAAC,CAAC;QACvI,CAAC;QAAC,MAAM,CAAC;YAAA,MAAM,GAAG,EAAE,CAAC;QAAA,CAAC;gBACd,CAAC;YAAA,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YAAA,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAAA,CAAC;IAC3C,CAAC;IACO,KAAK,CAAC,KAAK,CAAC,QAAmB,EAAC,OAAyC,EAAC,QAAwB,EAAC,OAA4B,EAAC,SAA2C,IAAI;QACrL,IAAI,KAAK,GAAiB,IAAI,EAAC,MAAM,GAAiB,IAAI,CAAC;QAC3D,IAAI,CAAC;YACH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAAA,IAAI,CAAC,CAAC,QAAQ,YAAY,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,GAAC,IAAI;gBAAE,MAAM,GAAG,EAAE,CAAC;YAC1H,MAAM,MAAM,GAAC,IAAI,GAAG,CAAmB,CAAC,CAAC,CAAC,EAAC,MAAM,KAAG,IAAI,CAAA,CAAC,CAAA,CAAC,CAAA,CAAC,CAAA,CAAC,CAAC,EAAC,CAAC,CAAC,EAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAC,CAAC,CAAC,EAAC,OAAO,KAAG,IAAI,CAAA,CAAC,CAAA,IAAI,CAAA,CAAC,CAAA,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;YAAA,IAAG,MAAM,KAAG,IAAI,EAAE,CAAC;gBAAA,MAAM,KAAK,GAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;gBAAA,IAAI,CAAC,MAAM,CAAC,KAAK,EAAC,OAAO,CAAC,CAAC;gBAAA,MAAM,CAAC,GAAG,CAAC,CAAC,EAAC,KAAK,CAAC,CAAC;YAAA,CAAC;YACxP,KAAK,GAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAAA,IAAI,KAAK,CAAC,MAAM,GAAC,IAAI;gBAAE,MAAM,GAAG,EAAE,CAAC;YACxD,MAAM,EAAE,GAAC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;YAC/D,MAAM,IAAI,GAAC,IAAI,UAAU,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAC,IAAI,EAAC,SAAS,EAAC,EAAE,EAAC,cAAc,EAAC,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAC,SAAS,EAAC,GAAG,EAAC,EAAC,IAAI,CAAC,GAAG,EAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACvM,MAAM,GAAC,MAAM,CAAC,IAAI,GAAG,CAAmB,CAAC,CAAC,CAAC,EAAC,CAAC,CAAC,EAAC,CAAC,CAAC,EAAC,EAAE,CAAC,EAAC,CAAC,CAAC,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAAA,MAAM,MAAM,GAAC,MAAM,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAC,QAAQ,EAAC,MAAM,EAAC,OAAO,CAAC,CAAC;YAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAAA,IAAI,MAAM,KAAG,IAAI;gBAAE,MAAM,GAAG,EAAE,CAAC;QAClN,CAAC;QAAC,MAAM,CAAC;YAAA,MAAM,GAAG,EAAE,CAAC;QAAA,CAAC;gBACd,CAAC;YAAA,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YAAA,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAAA,CAAC;IAC3C,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,QAAmB,EAAC,OAA4B;QAC5D,MAAM,QAAQ,GAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACnE,2EAA2E;QAC3E,6EAA6E;QAC7E,IAAI,QAAQ,EAAE,CAAC;YAAA,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAC,QAAQ,CAAC;gBAAE,MAAM,GAAG,EAAE,CAAC;YAAA,OAAO;QAAA,CAAC;QACjF,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAC,IAAI,EAAC,IAAI,EAAC,OAAO,CAAC,CAAC;QAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1E,CAAC;IACD;oFACgF;IAChF,KAAK,CAAC,mBAAmB,CAAC,MAAqC,EAAC,OAA4B;QAC1F,IAAI,CAAC;YAAA,IAAG,MAAM,CAAC,YAAY,KAAG,KAAK;gBAAE,MAAM,GAAG,EAAE,CAAC;YAAA,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAC,KAAK,EAAC,OAAO,CAAC,CAAC;QAAA,CAAC;QAAC,MAAM,CAAC;YAAA,MAAM,GAAG,EAAE,CAAC;QAAA,CAAC;IAC7H,CAAC;IACD,uEAAuE;IACvE,KAAK,CAAC,wBAAwB,CAAC,MAAqC,EAAC,OAA4B;QAC/F,IAAI,CAAC;YAAA,MAAM,IAAI,CAAC,kBAAkB,CAAC,MAAM,EAAC,IAAI,EAAC,OAAO,CAAC,CAAC;QAAA,CAAC;QAAC,MAAM,CAAC;YAAA,MAAM,GAAG,EAAE,CAAC;QAAA,CAAC;IAChF,CAAC;IACO,KAAK,CAAC,kBAAkB,CAAC,MAAqC,EAAC,YAAoB,EAAC,OAA4B;QACtH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAAA,MAAM,KAAK,GAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,EAAC,MAAM,CAAE,CAAC;QACrF,MAAM,QAAQ,GAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAAA,IAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO;YAAE,MAAM,GAAG,EAAE,CAAC;QAC5G,KAAI,MAAM,CAAC,IAAI,CAAC,eAAe,EAAC,cAAc,EAAC,gBAAgB,CAAU;YAAE,IAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBAAE,MAAM,GAAG,EAAE,CAAC;QACtI,MAAM,KAAK,GAAC,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC;QAC9C,IAAG,KAAK,EAAE,CAAC;YACT,IAAG,KAAK,CAAC,UAAU,KAAG,KAAK,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,aAAa,EAAC,KAAK,CAAC,aAAa,CAAC;gBAAE,MAAM,GAAG,EAAE,CAAC;YACvG,IAAG,KAAK,CAAC,YAAY,EAAE,CAAC;gBAAA,IAAG,CAAC,YAAY;oBAAE,MAAM,GAAG,EAAE,CAAC;gBAAA,OAAO;YAAA,CAAC;YAC9D,IAAG,CAAC,YAAY;gBAAE,OAAO;QAC3B,CAAC;aAAM,IAAG,YAAY;YAAE,MAAM,GAAG,EAAE,CAAC;QACpC,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAC,QAAQ,CAAC,SAAS,EAAC,OAAO,EAAC,MAAM,CAAC,MAAM,CAAC,EAAC,GAAG,KAAK,EAAC,YAAY,EAAC,CAAC,CAAC,CAAC;QAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAChK,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,OAAoC,EAAC,OAA4B;QAChF,MAAM,QAAQ,GAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAAA,IAAI,CAAC,QAAQ;YAAE,MAAM,GAAG,EAAE,CAAC;QAC9F,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YAC3B,KAAK,MAAM,CAAC,IAAI,CAAC,eAAe,EAAC,cAAc,EAAC,gBAAgB,CAAU;gBAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC;oBAAE,MAAM,GAAG,EAAE,CAAC;YAC1I,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;YAAA,OAAO;QACpC,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAC,OAAO,EAAC,QAAQ,CAAC,SAAS,EAAC,OAAO,CAAC,CAAC;QAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1G,CAAC;CACF"}

package/dist/app-host/noise-idb.d.ts

@@ -0,0 +1,33 @@
+import type { AppDeviceIdentityPin } from "./wasm-runtime.js";
+import type { AppNoiseProtectedStore } from "./noise-custody.js";
+export interface AppIndexedDbNoiseOptions {
+    /** Exact authenticated host-approved FIRST-PARTY origin, not a grant origin. */
+    origin: string;
+    /** Explicit installation decision. Missing EXISTING store/blob never => fresh. */
+    mode: "fresh" | "existing";
+    source: AppDeviceIdentityPin;
+    signal: AbortSignal;
+    /** Isolated loopback fixtures only; never enables an arbitrary HTTP origin. */
+    allowLoopbackHttp?: boolean;
+    readonly allowNativeLoopbackHttp?: boolean;
+}
+export declare class AppIndexedDbNoiseProtectedStore implements AppNoiseProtectedStore {
+    private readonly db;
+    private readonly source;
+    private readonly pins;
+    private readonly origin;
+    private closed;
+    private constructor();
+    static open(options: AppIndexedDbNoiseOptions): Promise<AppIndexedDbNoiseProtectedStore>;
+    private static openChecked;
+    private get namespace();
+    private check;
+    read(namespace: string, options: {
+        signal: AbortSignal;
+    }): Promise<Uint8Array | null>;
+    compareAndSet(namespace: string, expected: Uint8Array | null, value: Uint8Array, options: {
+        signal: AbortSignal;
+    }): Promise<boolean>;
+    private transaction;
+    close(): void;
+}

package/dist/app-host/noise-idb.js

@@ -0,0 +1,199 @@
+/** First-party opaque Noise vault IO only. No keys, decryption, collection SQL,
+ * deletion, replacement, generic KV or retry API. Actual atomic IDB transaction;
+ * strict durability is a request, NOT a physical durability/Saved claim. */
+import { currentAppOrigin, isAppOrigin } from "./app-origin.js";
+import { uuidToBytes } from "../codec.js";
+const STORE = "opaque-noise";
+const KEY = "custody";
+const MAX = 4096;
+const fail = () => new Error("app noise custody store unavailable");
+function bytes(v) {
+    if (!(v instanceof Uint8Array) || v.byteLength < 1 || v.byteLength > MAX)
+        throw fail();
+    return new Uint8Array(v);
+}
+function same(a, b) {
+    return a === null || b === null ? a === b : a.length === b.length && a.every((v, i) => v === b[i]);
+}
+function id(value) {
+    const encoded = uuidToBytes(value);
+    if (encoded.every(v => v === 0))
+        throw fail();
+    return value.toLowerCase();
+}
+function current(source, pins) {
+    try {
+        return source.isCurrent() === true && source.connectorId === pins[0] && source.deviceId === pins[1] && source.installationId === pins[2];
+    }
+    catch {
+        return false;
+    }
+}
+export class AppIndexedDbNoiseProtectedStore {
+    db;
+    source;
+    pins;
+    origin;
+    closed = false;
+    constructor(db, source, pins, origin) {
+        this.db = db;
+        this.source = source;
+        this.pins = pins;
+        this.origin = origin;
+        db.onversionchange = () => this.close();
+    }
+    static async open(options) {
+        try {
+            return await this.openChecked(options);
+        }
+        catch {
+            throw fail();
+        }
+    }
+    static async openChecked(options) {
+        const { source, signal } = options;
+        const pins = [source.connectorId, source.deviceId, source.installationId];
+        if (!isAppOrigin(options.origin, options.allowLoopbackHttp === true, options.allowNativeLoopbackHttp === true ? "native" : undefined) || currentAppOrigin() !== options.origin ||
+            !["fresh", "existing"].includes(options.mode) || signal.aborted || !current(source, pins) ||
+            typeof globalThis.indexedDB === "undefined")
+            throw fail();
+        const name = `mdbase.app.noise.v1.${id(pins[2])}.${id(pins[0])}.${id(pins[1])}`;
+        // Cancellation while blocked cannot authorize a later open/upgrade. Any
+        // subsequently delivered database is closed; pending upgrade is aborted.
+        const db = await new Promise((resolve, reject) => {
+            const request = indexedDB.open(name, 1);
+            let abandoned = false;
+            const stop = () => { abandoned = true; reject(fail()); };
+            signal.addEventListener("abort", stop, { once: true });
+            const finish = () => signal.removeEventListener("abort", stop);
+            request.onblocked = stop;
+            request.onupgradeneeded = () => {
+                if (abandoned || signal.aborted || options.mode !== "fresh" || !current(source, pins) ||
+                    request.result.objectStoreNames.length !== 0) {
+                    request.transaction?.abort();
+                    return;
+                }
+                request.result.createObjectStore(STORE);
+            };
+            request.onerror = () => { finish(); reject(fail()); };
+            request.onsuccess = () => {
+                finish();
+                if (abandoned || signal.aborted || request.result.objectStoreNames.length !== 1 ||
+                    !request.result.objectStoreNames.contains(STORE)) {
+                    request.result.close();
+                    reject(fail());
+                    return;
+                }
+                resolve(request.result);
+            };
+        });
+        const out = new AppIndexedDbNoiseProtectedStore(db, source, pins, options.origin);
+        try {
+            const existing = await out.read(out.namespace, { signal });
+            // Existing ciphertext is never overwritten by a first-install decision.
+            // Empty/corrupt existing installation is never silently re-created.
+            if ((options.mode === "fresh") !== (existing === null))
+                throw fail();
+            existing?.fill(0);
+            out.check(signal);
+            return out;
+        }
+        catch {
+            out.close();
+            throw fail();
+        }
+    }
+    get namespace() { return `mdbase.app-noise.v1:${this.pins[0]}:${this.pins[1]}:${this.pins[2]}`; }
+    check(signal, namespace = this.namespace) {
+        if (this.closed || signal.aborted || namespace !== this.namespace || currentAppOrigin() !== this.origin ||
+            !current(this.source, this.pins))
+            throw fail();
+    }
+    async read(namespace, options) {
+        this.check(options.signal, namespace);
+        const out = await this.transaction("readonly", options.signal, null, null);
+        try {
+            this.check(options.signal);
+            return out;
+        }
+        catch {
+            if (out instanceof Uint8Array)
+                out.fill(0);
+            throw fail();
+        }
+    }
+    async compareAndSet(namespace, expected, value, options) {
+        this.check(options.signal, namespace);
+        let old = null, next = null;
+        try {
+            old = expected === null ? null : bytes(expected);
+            next = bytes(value);
+            const out = await this.transaction("readwrite", options.signal, old, next);
+            this.check(options.signal); // May be uncertain AFTER commit; never undo it.
+            return out === true;
+        }
+        finally {
+            old?.fill(0);
+            next?.fill(0);
+        }
+    }
+    transaction(mode, signal, expected, next) {
+        return new Promise((resolve, reject) => {
+            this.check(signal);
+            const tx = this.db.transaction(STORE, mode, { durability: "strict" });
+            const store = tx.objectStore(STORE);
+            let result = null;
+            let failed = false;
+            const abort = () => { failed = true; try {
+                tx.abort();
+            }
+            catch { /* already committed: preserve */ } };
+            const finish = () => signal.removeEventListener("abort", abort);
+            signal.addEventListener("abort", abort, { once: true });
+            tx.onabort = tx.onerror = () => { finish(); if (result instanceof Uint8Array)
+                result.fill(0); reject(fail()); };
+            tx.oncomplete = () => {
+                finish();
+                try {
+                    this.check(signal);
+                    if (failed)
+                        throw fail();
+                    resolve(result);
+                }
+                catch {
+                    if (result instanceof Uint8Array)
+                        result.fill(0);
+                    reject(fail());
+                }
+            };
+            const request = store.get(KEY);
+            request.onsuccess = () => {
+                let current = null;
+                try {
+                    this.check(signal);
+                    current = request.result === undefined ? null : bytes(request.result);
+                    if (mode === "readonly") {
+                        result = current;
+                        current = null;
+                    }
+                    else {
+                        result = same(current, expected);
+                        if (result === true && next !== null)
+                            store.put(new Uint8Array(next), KEY);
+                    }
+                }
+                catch {
+                    abort();
+                }
+                finally {
+                    current?.fill(0);
+                }
+            };
+        });
+    }
+    close() { if (!this.closed) {
+        this.closed = true;
+        this.db.close();
+    } }
+}
+//# sourceMappingURL=noise-idb.js.map

package/dist/app-host/noise-idb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"noise-idb.js","sourceRoot":"","sources":["../../src/app-host/noise-idb.ts"],"names":[],"mappings":"AAAA;;4EAE4E;AAC5E,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAI1C,MAAM,KAAK,GAAG,cAAc,CAAC;AAC7B,MAAM,GAAG,GAAG,SAAS,CAAC;AACtB,MAAM,GAAG,GAAG,IAAI,CAAC;AACjB,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;AACpE,SAAS,KAAK,CAAC,CAAU;IACvB,IAAI,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC,IAAI,CAAC,CAAC,UAAU,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,GAAG,GAAG;QAAE,MAAM,IAAI,EAAE,CAAC;IACvF,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AACD,SAAS,IAAI,CAAC,CAAoB,EAAE,CAAoB;IACtD,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrG,CAAC;AACD,SAAS,EAAE,CAAC,KAAa;IACvB,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,EAAE,CAAC;IAC9C,OAAO,KAAK,CAAC,WAAW,EAAE,CAAC;AAC7B,CAAC;AACD,SAAS,OAAO,CAAC,MAA4B,EAAE,IAAuC;IACpF,IAAI,CAAC;QAAC,OAAO,MAAM,CAAC,SAAS,EAAE,KAAK,IAAI,IAAI,MAAM,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IACjJ,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AACzB,CAAC;AAaD,MAAM,OAAO,+BAA+B;IAGvB;IACA;IACA;IACA;IALX,MAAM,GAAG,KAAK,CAAC;IACvB,YACmB,EAAe,EACf,MAA4B,EAC5B,IAAuC,EACvC,MAAc;QAHd,OAAE,GAAF,EAAE,CAAa;QACf,WAAM,GAAN,MAAM,CAAsB;QAC5B,SAAI,GAAJ,IAAI,CAAmC;QACvC,WAAM,GAAN,MAAM,CAAQ;QAC7B,EAAE,CAAC,eAAe,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;IAE9C,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAiC;QACjD,IAAI,CAAC;YAAC,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,EAAE,CAAC;QAAC,CAAC;IACzE,CAAC;IACO,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,OAAiC;QAChE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QACnC,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,cAAc,CAAU,CAAC;QACnF,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,iBAAiB,KAAK,IAAI,EAAE,OAAO,CAAC,uBAAuB,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,gBAAgB,EAAE,KAAK,OAAO,CAAC,MAAM;YAC1K,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC;YACzF,OAAO,UAAU,CAAC,SAAS,KAAK,WAAW;YAAE,MAAM,IAAI,EAAE,CAAC;QAC9D,MAAM,IAAI,GAAG,uBAAuB,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,wEAAwE;QACxE,yEAAyE;QACzE,MAAM,EAAE,GAAG,MAAM,IAAI,OAAO,CAAc,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC5D,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACxC,IAAI,SAAS,GAAG,KAAK,CAAC;YACtB,MAAM,IAAI,GAAG,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACzD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACvD,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC/D,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;YACzB,OAAO,CAAC,eAAe,GAAG,GAAG,EAAE;gBAC7B,IAAI,SAAS,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC;oBACjF,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACjD,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC;oBAAC,OAAO;gBACvC,CAAC;gBACD,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC1C,CAAC,CAAC;YACF,OAAO,CAAC,OAAO,GAAG,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACtD,OAAO,CAAC,SAAS,GAAG,GAAG,EAAE;gBACvB,MAAM,EAAE,CAAC;gBACT,IAAI,SAAS,IAAI,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC;oBAC3E,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;oBAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;oBAAC,OAAO;gBAAC,CAAC;gBACzG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC1B,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,+BAA+B,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAClF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YAC3D,wEAAwE;YACxE,oEAAoE;YACpE,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC;gBAAE,MAAM,IAAI,EAAE,CAAC;YACrE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAClB,OAAO,GAAG,CAAC;QACb,CAAC;QAAC,MAAM,CAAC;YAAC,GAAG,CAAC,KAAK,EAAE,CAAC;YAAC,MAAM,IAAI,EAAE,CAAC;QAAC,CAAC;IACxC,CAAC;IAED,IAAY,SAAS,KAAa,OAAO,uBAAuB,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACzG,KAAK,CAAC,MAAmB,EAAE,SAAS,GAAG,IAAI,CAAC,SAAS;QAC3D,IAAI,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,IAAI,SAAS,KAAK,IAAI,CAAC,SAAS,IAAI,gBAAgB,EAAE,KAAK,IAAI,CAAC,MAAM;YACnG,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,EAAE,CAAC;IACrD,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,SAAiB,EAAE,OAAgC;QAC5D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QAC3E,IAAI,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAAC,OAAO,GAAwB,CAAC;QAAC,CAAC;QACpE,MAAM,CAAC;YAAC,IAAI,GAAG,YAAY,UAAU;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,MAAM,IAAI,EAAE,CAAC;QAAC,CAAC;IACrE,CAAC;IACD,KAAK,CAAC,aAAa,CAAC,SAAiB,EAAE,QAA2B,EAAE,KAAiB,EAAE,OAAgC;QACrH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QACtC,IAAI,GAAG,GAAsB,IAAI,EAAE,IAAI,GAAsB,IAAI,CAAC;QAClE,IAAI,CAAC;YACH,GAAG,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;YACtE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YAC3E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,gDAAgD;YAC5E,OAAO,GAAG,KAAK,IAAI,CAAC;QACtB,CAAC;gBAAS,CAAC;YAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;IAC5C,CAAC;IACO,WAAW,CAAC,IAAwB,EAAE,MAAmB,EAAE,QAA2B,EAAE,IAAuB;QACrH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACnB,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;YACtE,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACpC,IAAI,MAAM,GAAgC,IAAI,CAAC;YAC/C,IAAI,MAAM,GAAG,KAAK,CAAC;YACnB,MAAM,KAAK,GAAG,GAAG,EAAE,GAAG,MAAM,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC;gBAAC,EAAE,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,iCAAiC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvG,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAChE,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,IAAI,MAAM,YAAY,UAAU;gBAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAChH,EAAE,CAAC,UAAU,GAAG,GAAG,EAAE;gBACnB,MAAM,EAAE,CAAC;gBACT,IAAI,CAAC;oBAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBAAC,IAAI,MAAM;wBAAE,MAAM,IAAI,EAAE,CAAC;oBAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAAC,CAAC;gBACtE,MAAM,CAAC;oBAAC,IAAI,MAAM,YAAY,UAAU;wBAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;oBAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;gBAAC,CAAC;YAC7E,CAAC,CAAC;YACF,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC/B,OAAO,CAAC,SAAS,GAAG,GAAG,EAAE;gBACvB,IAAI,OAAO,GAAsB,IAAI,CAAC;gBACtC,IAAI,CAAC;oBACH,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBACnB,OAAO,GAAG,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;oBACtE,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;wBAAC,MAAM,GAAG,OAAO,CAAC;wBAAC,OAAO,GAAG,IAAI,CAAC;oBAAC,CAAC;yBACzD,CAAC;wBACJ,MAAM,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;wBACjC,IAAI,MAAM,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;4BAAE,KAAK,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;oBAC7E,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBAAC,KAAK,EAAE,CAAC;gBAAC,CAAC;wBACZ,CAAC;oBAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAC,CAAC;YAC/B,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,KAAW,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC,CAAC,CAAC;CAC7E"}

package/dist/app-host/open-wait.d.ts

@@ -0,0 +1,3 @@
+/** Cancellation-aware pacing for safe initial-open work. No autonomous retry:
+ * callers retain the original operation, classification and deadline. */
+export declare function waitForOpenRetry(milliseconds: number, signal: AbortSignal): Promise<void>;

package/dist/app-host/open-wait.js

@@ -0,0 +1,17 @@
+/** Cancellation-aware pacing for safe initial-open work. No autonomous retry:
+ * callers retain the original operation, classification and deadline. */
+export function waitForOpenRetry(milliseconds, signal) {
+    return new Promise((resolve, reject) => {
+        if (signal.aborted) {
+            reject(signal.reason);
+            return;
+        }
+        const cancel = () => { clearTimeout(timer); reject(signal.reason); };
+        const timer = setTimeout(() => {
+            signal.removeEventListener("abort", cancel);
+            resolve();
+        }, milliseconds);
+        signal.addEventListener("abort", cancel, { once: true });
+    });
+}
+//# sourceMappingURL=open-wait.js.map

package/dist/app-host/open-wait.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"open-wait.js","sourceRoot":"","sources":["../../src/app-host/open-wait.ts"],"names":[],"mappings":"AAAA;yEACyE;AACzE,MAAM,UAAU,gBAAgB,CAAC,YAAoB,EAAE,MAAmB;IACxE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACtD,MAAM,MAAM,GAAG,GAAG,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC5C,OAAO,EAAE,CAAC;QACZ,CAAC,EAAE,YAAY,CAAC,CAAC;QACjB,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAC,IAAI,EAAE,IAAI,EAAC,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/app-host/opening-progress.d.ts

@@ -0,0 +1,3 @@
+/** Display-only opening boundaries. Never payloads, errors, keys or authority. */
+export type AppOpeningProgress = "joining" | "opening_store" | "connecting_log" | "syncing" | "loading_snapshot" | "replaying" | "waiting_for_key" | "verifying_read" | "checking_setup";
+export declare function isAppOpeningProgress(value: unknown): value is AppOpeningProgress;

package/dist/app-host/opening-progress.js

@@ -0,0 +1,5 @@
+const stages = ["joining", "opening_store", "connecting_log", "syncing", "loading_snapshot", "replaying", "waiting_for_key", "verifying_read", "checking_setup"];
+export function isAppOpeningProgress(value) {
+    return typeof value === "string" && stages.includes(value);
+}
+//# sourceMappingURL=opening-progress.js.map

package/dist/app-host/opening-progress.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"opening-progress.js","sourceRoot":"","sources":["../../src/app-host/opening-progress.ts"],"names":[],"mappings":"AAYA,MAAM,MAAM,GAAkC,CAAC,SAAS,EAAE,eAAe,EAAE,gBAAgB,EAAE,SAAS,EAAE,kBAAkB,EAAE,WAAW,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC;AAChM,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAA2B,CAAC,CAAC;AACnF,CAAC"}