@mdbase-dev/sdk 0.0.0-stage → 0.1.0-beta.153

package/dist/app-host/private-bootstrap.js

@@ -0,0 +1,230 @@
+/** First-party DEVICE-phase private bootstrap. Fixed domains/routes, one explicit
+ * attempt. Authenticated response metadata is NOT native policy/keyed/readiness. */
+import { labLoopbackHttpOrigin } from "../application/local-build.js";
+import { uuidToBytes } from "../codec.js";
+import { collectionDisplayName } from "./collection-display-name.js";
+export class AppPrivateBootstrapError extends Error {
+    reason;
+    constructor(reason) {
+        super(`app private bootstrap: ${reason}`);
+        this.reason = reason;
+        this.name = "AppPrivateBootstrapError";
+    }
+}
+const fail = (r) => new AppPrivateBootstrapError(r);
+const hex = (b) => Array.from(b, v => v.toString(16).padStart(2, "0")).join("");
+const equal = (a, b) => a.length === b.length && a.every((v, i) => v === b[i]);
+function bytes(value, max) {
+    if (typeof value !== "string" || !value.length || value.length > max * 2 || value.length % 2 || !/^[0-9a-f]+$/.test(value))
+        throw fail("response");
+    return Uint8Array.from(value.match(/../g).map(v => parseInt(v, 16)));
+}
+function object(value) { if (!value || typeof value !== "object" || Array.isArray(value))
+    throw fail("response"); return value; }
+export class AppCpPrivateBootstrap {
+    runtime;
+    session;
+    persistence;
+    options;
+    attempted = false;
+    lifetime = new AbortController();
+    scope;
+    root;
+    marker;
+    fetchImpl;
+    now;
+    displayName;
+    constructor(runtime, session, persistence, options = {}) {
+        this.runtime = runtime;
+        this.session = session;
+        this.persistence = persistence;
+        this.options = options;
+        try {
+            const requestedName = options.displayName;
+            this.displayName = requestedName === undefined ? undefined : collectionDisplayName(requestedName);
+            if (this.displayName !== undefined && session.purpose !== "create")
+                throw fail("binding");
+            this.scope = Object.freeze({ connectorId: session.connectorId, deviceId: session.deviceId, installationId: session.installationId, collection: session.collection, purpose: session.purpose, accountId: session.accountId, cpOrigin: session.cpOrigin, logOrigin: session.logOrigin });
+            for (const id of [this.scope.connectorId, this.scope.deviceId, this.scope.installationId, this.scope.collection, this.scope.accountId])
+                if (uuidToBytes(id).every(v => v === 0))
+                    throw fail("binding");
+            this.origin(this.scope.cpOrigin);
+            this.origin(this.scope.logOrigin);
+            if (!(session.rootPublicKey instanceof Uint8Array) || session.rootPublicKey.length !== 32 || session.rootPublicKey.every(v => v === 0))
+                throw fail("binding");
+            this.root = new Uint8Array(session.rootPublicKey);
+            this.fetchImpl = options.fetch ?? globalThis.fetch;
+            this.now = options.now ?? Date.now;
+            this.marker = this.scope.purpose === "enrol" ? runtime.privateEnrolMarker() : null;
+            if (!this.current())
+                throw fail("binding");
+        }
+        catch {
+            runtime.retireLog();
+            throw fail("binding");
+        }
+    }
+    origin(raw) { const u = new URL(raw); if (u.username || u.password || u.pathname !== "/" || u.search || u.hash || (u.protocol !== "https:" && !(this.options.allowLoopbackHttp === true && labLoopbackHttpOrigin(raw))))
+        throw fail("binding"); return u.origin; }
+    current() { try {
+        return !this.lifetime.signal.aborted && this.runtime.privateCollectionCurrent(this.session) && this.session.isCurrent() === true && this.session.approvalMode === "password-ak1" && equal(this.session.rootPublicKey, this.root) && Object.entries(this.scope).every(([k, v]) => this.session[k] === v);
+    }
+    catch {
+        return false;
+    } }
+    markerCopy() { const m = this.marker; if (!m)
+        throw fail("binding"); return Object.freeze({ ...m, sasCommitment: new Uint8Array(m.sasCommitment), signPublicKey: new Uint8Array(m.signPublicKey), kemPublicKey: new Uint8Array(m.kemPublicKey), noisePublicKey: new Uint8Array(m.noisePublicKey) }); }
+    check(signal) { if (!this.current() || signal.aborted) {
+        this.close();
+        throw fail("fenced");
+    } }
+    async json(path, bearer, body, signal) {
+        this.check(signal);
+        const controller = new AbortController(), abort = () => controller.abort(), timer = setTimeout(abort, 15000);
+        timer.unref?.();
+        signal.addEventListener("abort", abort, { once: true });
+        this.lifetime.signal.addEventListener("abort", abort, { once: true });
+        const buffer = new Uint8Array(1024 * 1024);
+        let count = 0, reader = null, response = null;
+        try {
+            const request = this.fetchImpl;
+            response = await request(`${this.origin(this.scope.cpOrigin)}${path}`, { method: "POST", headers: { authorization: `Bearer ${bearer}`, ...(body === undefined ? {} : { "content-type": "application/json" }) }, body, signal: controller.signal, redirect: "error", credentials: "omit", cache: "default", referrerPolicy: "no-referrer" });
+            this.check(signal);
+            if (controller.signal.aborted || !response.ok)
+                throw fail("unavailable");
+            // Wire Content-Length can describe compressed bytes; bound decoded bytes.
+            const length = response.headers.get("content-length");
+            if (length !== null && /^(0|[1-9][0-9]*)$/.test(length) && Number(length) > buffer.length) {
+                controller.abort();
+                throw fail("response");
+            }
+            if (!response.body)
+                throw fail("response");
+            reader = response.body.getReader();
+            for (;;) {
+                const { done, value } = await reader.read();
+                try {
+                    this.check(signal);
+                    if (controller.signal.aborted)
+                        throw fail("unavailable");
+                    if (done)
+                        break;
+                    if (count + value.length > buffer.length) {
+                        controller.abort();
+                        throw fail("response");
+                    }
+                    buffer.set(value, count);
+                    count += value.length;
+                }
+                finally {
+                    value?.fill(0);
+                }
+            }
+            return object(JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(buffer.subarray(0, count))));
+        }
+        catch (e) {
+            this.check(signal);
+            if (e instanceof AppPrivateBootstrapError)
+                throw e;
+            throw fail("unavailable");
+        }
+        finally {
+            buffer.fill(0);
+            void (reader?.cancel() ?? response?.body?.cancel())?.catch(() => { });
+            reader?.releaseLock();
+            clearTimeout(timer);
+            signal.removeEventListener("abort", abort);
+            this.lifetime.signal.removeEventListener("abort", abort);
+        }
+    }
+    copy(metadata) {
+        if (metadata.displayName !== this.displayName || metadata.collection !== this.scope.collection || metadata.deviceId !== this.scope.deviceId || metadata.logOrigin !== this.scope.logOrigin || !equal(metadata.rootPublicKey, this.root) || !(metadata.genesisItem instanceof Uint8Array) || !metadata.genesisItem.length || metadata.genesisItem.length > 256 * 1024 || metadata.expectedGenesis.length !== 71 || !/^sha256:[0-9a-f]{64}$/.test(metadata.expectedGenesis) || metadata.approval !== (this.scope.purpose === "create" ? "creator" : "pending"))
+            throw fail("response");
+        return Object.freeze({ collection: metadata.collection, deviceId: metadata.deviceId, logOrigin: metadata.logOrigin, expectedGenesis: metadata.expectedGenesis, approval: metadata.approval, ...(this.displayName === undefined ? {} : { displayName: this.displayName }), rootPublicKey: new Uint8Array(metadata.rootPublicKey), genesisItem: new Uint8Array(metadata.genesisItem) });
+    }
+    async bootstrap(options) {
+        let nonce = null, signature = null;
+        try {
+            this.check(options.signal);
+            if (this.attempted)
+                throw fail("fenced");
+            this.attempted = true;
+            // Completion may have committed before the ACK write/callback was lost.
+            // Restore BOTH purposes before another challenge/proof/POST; repair only the
+            // protected enrol acknowledgement, never infer keyed/approval from metadata.
+            const stored = await this.persistence.restoredCompletion(options);
+            this.check(options.signal);
+            if (stored) {
+                const owned = this.copy(stored);
+                if (this.marker && !this.marker.acknowledged) {
+                    await this.persistence.privateEnrolAcknowledged(this.markerCopy(), options);
+                    this.check(options.signal);
+                }
+                return owned;
+            }
+            if (this.marker?.acknowledged)
+                throw fail("response");
+            if (this.marker)
+                await this.persistence.privateEnrolPending(this.markerCopy(), options);
+            else
+                await this.persistence.pendingCreate({ ...this.runtime.registeredDeviceReceipt(), collection: this.scope.collection, ...(this.displayName === undefined ? {} : { displayName: this.displayName }) }, options);
+            this.check(options.signal);
+            const bearer = await this.session.connectorBearer(options);
+            this.check(options.signal);
+            if (typeof bearer !== "string" || !bearer || bearer.length > 16384 || /[^\x21-\x7e]/.test(bearer))
+                throw fail("binding");
+            const issued = await this.json("/v1/next/devices/challenge", bearer, undefined, options.signal);
+            this.check(options.signal);
+            nonce = bytes(issued.challenge, 32);
+            if (nonce.length !== 32 || typeof issued.expires_at !== "number" || !Number.isSafeInteger(issued.expires_at) || issued.expires_at - this.now() <= 5000 || issued.expires_at - this.now() > 16 * 60000)
+                throw fail("response");
+            const enrol = this.scope.purpose === "enrol";
+            signature = enrol ? this.runtime.signPrivateDeviceEnrol(nonce).signature : this.runtime.signPrivateCreate(nonce);
+            this.check(options.signal);
+            const result = await this.json(enrol ? `/v1/next/collections/${this.scope.collection}/private/devices` : "/v1/next/collections/private", bearer, JSON.stringify({ device_id: this.scope.deviceId, capabilities: ["collection_mode_switch_v1"], challenge: issued.challenge, sig: hex(signature), ...(enrol ? { sas_commit: hex(this.marker.sasCommitment) } : { collection_id: this.scope.collection, ...(this.displayName === undefined ? {} : { display_name: this.displayName }) }) }), options.signal);
+            this.check(options.signal);
+            if (result.collection_id !== this.scope.collection || this.origin(result.log_url) !== this.origin(this.scope.logOrigin))
+                throw fail("response");
+            if (enrol) {
+                if (result.approval !== "pending" || typeof result.enrolled_at !== "number" || !Number.isSafeInteger(result.enrolled_at) || result.enrolled_at < 1)
+                    throw fail("response");
+            }
+            else if (result.state !== "private" || result.owner_account !== this.scope.accountId || !equal(bytes(result.root_public_key, 32), this.root))
+                throw fail("response");
+            const device = object(result.device);
+            if (device.device_id !== this.scope.deviceId || typeof device.token !== "string" || !device.token.length || device.token.length > 16384 || /[^\x21-\x7e]/.test(device.token) || typeof device.expires_at !== "number" || !Number.isSafeInteger(device.expires_at) || device.expires_at - this.now() <= 5000 || device.expires_at - this.now() > 16 * 60000)
+                throw fail("response");
+            const genesis = object(result.genesis);
+            if (genesis.seq !== 1)
+                throw fail("response");
+            const item = bytes(genesis.item, 256 * 1024);
+            // H(domain,msg) = SHA256(u8(domain.length)||UTF8(domain)||msg), wire §hash.
+            const domain = new TextEncoder().encode("mdbase/v1/chain"), message = new Uint8Array(1 + domain.length + item.length);
+            message[0] = domain.length;
+            message.set(domain, 1);
+            message.set(item, 1 + domain.length);
+            const digest = new Uint8Array(await crypto.subtle.digest("SHA-256", message));
+            this.check(options.signal);
+            const metadata = this.copy({ collection: this.scope.collection, deviceId: this.scope.deviceId, logOrigin: this.scope.logOrigin, rootPublicKey: this.root, genesisItem: item, expectedGenesis: `sha256:${hex(digest)}`, approval: enrol ? "pending" : "creator", ...(this.displayName === undefined ? {} : { displayName: this.displayName }) });
+            await this.persistence.completed(this.copy(metadata), options);
+            this.check(options.signal);
+            if (this.marker) {
+                await this.persistence.privateEnrolAcknowledged(this.markerCopy(), options);
+                this.check(options.signal);
+            }
+            return metadata;
+        }
+        catch (e) {
+            this.close();
+            if (e instanceof AppPrivateBootstrapError)
+                throw e;
+            throw fail("unavailable");
+        }
+        finally {
+            nonce?.fill(0);
+            signature?.fill(0);
+        }
+    }
+    close() { this.lifetime.abort(); this.runtime.retireLog(); }
+}
+//# sourceMappingURL=private-bootstrap.js.map

package/dist/app-host/private-bootstrap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"private-bootstrap.js","sourceRoot":"","sources":["../../src/app-host/private-bootstrap.ts"],"names":[],"mappings":"AAAA;oFACoF;AACpF,OAAO,EAAE,qBAAqB,EAAE,MAAM,+BAA+B,CAAC;AACtE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AA2BrE,MAAM,OAAO,wBAAyB,SAAQ,KAAK;IAC7B;IAArB,YAAqB,MAAkD;QAAG,KAAK,CAAC,0BAA0B,MAAM,EAAE,CAAC,CAAC;QAA/F,WAAM,GAAN,MAAM,CAA4C;QAA6C,IAAI,CAAC,IAAI,GAAC,0BAA0B,CAAC;IAAA,CAAC;CAC1J;AACD,MAAM,IAAI,GAAC,CAAC,CAAoC,EAAC,EAAE,CAAA,IAAI,wBAAwB,CAAC,CAAC,CAAC,CAAC;AACnF,MAAM,GAAG,GAAC,CAAC,CAAY,EAAC,EAAE,CAAA,KAAK,CAAC,IAAI,CAAC,CAAC,EAAC,CAAC,CAAA,EAAE,CAAA,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACnF,MAAM,KAAK,GAAC,CAAC,CAAY,EAAC,CAAY,EAAC,EAAE,CAAA,CAAC,CAAC,MAAM,KAAG,CAAC,CAAC,MAAM,IAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAC,CAAC,EAAC,EAAE,CAAA,CAAC,KAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACvF,SAAS,KAAK,CAAC,KAAa,EAAC,GAAU;IACtC,IAAG,OAAO,KAAK,KAAG,QAAQ,IAAE,CAAC,KAAK,CAAC,MAAM,IAAE,KAAK,CAAC,MAAM,GAAC,GAAG,GAAC,CAAC,IAAE,KAAK,CAAC,MAAM,GAAC,CAAC,IAAE,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;QAAC,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC;IACjI,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAE,CAAC,GAAG,CAAC,CAAC,CAAA,EAAE,CAAA,QAAQ,CAAC,CAAC,EAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AACpE,CAAC;AACD,SAAS,MAAM,CAAC,KAAa,IAA0B,IAAG,CAAC,KAAK,IAAE,OAAO,KAAK,KAAG,QAAQ,IAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;IAAC,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC,CAAA,OAAO,KAA+B,CAAC,CAAA,CAAC;AAC/K,MAAM,OAAO,qBAAqB;IAMJ;IAAwC;IAA6C;IAA4D;IALtK,SAAS,GAAC,KAAK,CAAC;IAAiB,QAAQ,GAAC,IAAI,eAAe,EAAE,CAAC;IACvD,KAAK,CAAmK;IACxK,IAAI,CAAY;IAAiB,MAAM,CAAqC;IAC5E,SAAS,CAAc;IAAiB,GAAG,CAAY;IACvD,WAAW,CAAkB;IAC9C,YAA6B,OAAsB,EAAkB,OAA2B,EAAkB,WAA0C,EAAkB,UAA6F,EAAE;QAAhP,YAAO,GAAP,OAAO,CAAe;QAAkB,YAAO,GAAP,OAAO,CAAoB;QAAkB,gBAAW,GAAX,WAAW,CAA+B;QAAkB,YAAO,GAAP,OAAO,CAAwF;QAC5Q,IAAI,CAAC;YACJ,MAAM,aAAa,GAAC,OAAO,CAAC,WAAW,CAAC;YACxC,IAAI,CAAC,WAAW,GAAC,aAAa,KAAG,SAAS,CAAA,CAAC,CAAA,SAAS,CAAA,CAAC,CAAA,qBAAqB,CAAC,aAAa,CAAC,CAAC;YAC1F,IAAG,IAAI,CAAC,WAAW,KAAG,SAAS,IAAE,OAAO,CAAC,OAAO,KAAG,QAAQ;gBAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;YAClF,IAAI,CAAC,KAAK,GAAC,MAAM,CAAC,MAAM,CAAC,EAAC,WAAW,EAAC,OAAO,CAAC,WAAW,EAAC,QAAQ,EAAC,OAAO,CAAC,QAAQ,EAAC,cAAc,EAAC,OAAO,CAAC,cAAc,EAAC,UAAU,EAAC,OAAO,CAAC,UAAU,EAAC,OAAO,EAAC,OAAO,CAAC,OAAO,EAAC,SAAS,EAAC,OAAO,CAAC,SAAS,EAAC,QAAQ,EAAC,OAAO,CAAC,QAAQ,EAAC,SAAS,EAAC,OAAO,CAAC,SAAS,EAAC,CAAC,CAAC;YACpQ,KAAI,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAC,IAAI,CAAC,KAAK,CAAC,cAAc,EAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;gBAAC,IAAG,WAAW,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,KAAG,CAAC,CAAC;oBAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;YAC3L,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAAA,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACnE,IAAG,CAAC,CAAC,OAAO,CAAC,aAAa,YAAY,UAAU,CAAC,IAAE,OAAO,CAAC,aAAa,CAAC,MAAM,KAAG,EAAE,IAAE,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAA,EAAE,CAAA,CAAC,KAAG,CAAC,CAAC;gBAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;YAAA,IAAI,CAAC,IAAI,GAAC,IAAI,UAAU,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;YAClM,IAAI,CAAC,SAAS,GAAC,OAAO,CAAC,KAAK,IAAE,UAAU,CAAC,KAAK,CAAC;YAAA,IAAI,CAAC,GAAG,GAAC,OAAO,CAAC,GAAG,IAAE,IAAI,CAAC,GAAG,CAAC;YAC9E,IAAI,CAAC,MAAM,GAAC,IAAI,CAAC,KAAK,CAAC,OAAO,KAAG,OAAO,CAAA,CAAC,CAAA,OAAO,CAAC,kBAAkB,EAAE,CAAA,CAAC,CAAA,IAAI,CAAC;YAC3E,IAAG,CAAC,IAAI,CAAC,OAAO,EAAE;gBAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1C,CAAC;QAAA,MAAK,CAAC;YAAA,OAAO,CAAC,SAAS,EAAE,CAAC;YAAA,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;QAAA,CAAC;IACnD,CAAC;IACO,MAAM,CAAC,GAAU,IAAU,MAAM,CAAC,GAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA,IAAG,CAAC,CAAC,QAAQ,IAAE,CAAC,CAAC,QAAQ,IAAE,CAAC,CAAC,QAAQ,KAAG,GAAG,IAAE,CAAC,CAAC,MAAM,IAAE,CAAC,CAAC,IAAI,IAAE,CAAC,CAAC,CAAC,QAAQ,KAAG,QAAQ,IAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,KAAG,IAAI,IAAE,qBAAqB,CAAC,GAAG,CAAC,CAAC,CAAC;QAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA,OAAO,CAAC,CAAC,MAAM,CAAC,CAAA,CAAC;IACpP,OAAO,KAAY,IAAG,CAAC;QAAA,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,IAAE,IAAI,CAAC,OAAO,CAAC,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,KAAG,IAAI,IAAE,IAAI,CAAC,OAAO,CAAC,YAAY,KAAG,cAAc,IAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAC,IAAI,CAAC,IAAI,CAAC,IAAE,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAC,CAAC,CAAC,EAAC,EAAE,CAAA,IAAI,CAAC,OAAO,CAAC,CAA8B,CAAC,KAAG,CAAC,CAAC,CAAC;IAAA,CAAC;IAAA,MAAK,CAAC;QAAA,OAAO,KAAK,CAAC;IAAA,CAAC,CAAA,CAAC;IAC9V,UAAU,KAAmC,MAAM,CAAC,GAAC,IAAI,CAAC,MAAM,CAAC,CAAA,IAAG,CAAC,CAAC;QAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,CAAA,OAAO,MAAM,CAAC,MAAM,CAAC,EAAC,GAAG,CAAC,EAAC,aAAa,EAAC,IAAI,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,EAAC,aAAa,EAAC,IAAI,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,EAAC,YAAY,EAAC,IAAI,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,EAAC,cAAc,EAAC,IAAI,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,EAAC,CAAC,CAAC,CAAA,CAAC;IACnT,KAAK,CAAC,MAAkB,IAAQ,IAAG,CAAC,IAAI,CAAC,OAAO,EAAE,IAAE,MAAM,CAAC,OAAO,EAAC,CAAC;QAAA,IAAI,CAAC,KAAK,EAAE,CAAC;QAAA,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;IAAA,CAAC,CAAA,CAAC;IACxG,KAAK,CAAC,IAAI,CAAC,IAAiH,EAAC,MAAa,EAAC,IAAqB,EAAC,MAAkB;QAC1L,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAAA,MAAM,UAAU,GAAC,IAAI,eAAe,EAAE,EAAC,KAAK,GAAC,GAAE,EAAE,CAAA,UAAU,CAAC,KAAK,EAAE,EAAC,KAAK,GAAC,UAAU,CAAC,KAAK,EAAC,KAAK,CAAC,CAAC;QAAC,KAA2B,CAAC,KAAK,EAAE,EAAE,CAAC;QAAA,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAC,KAAK,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,CAAC,CAAC;QAAA,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAC,KAAK,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,CAAC,CAAC;QAChR,MAAM,MAAM,GAAC,IAAI,UAAU,CAAC,IAAI,GAAC,IAAI,CAAC,CAAC;QAAA,IAAI,KAAK,GAAC,CAAC,EAAC,MAAM,GAA8C,IAAI,EAAC,QAAQ,GAAe,IAAI,CAAC;QACxI,IAAI,CAAC;YACJ,MAAM,OAAO,GAAC,IAAI,CAAC,SAAS,CAAC;YAAA,QAAQ,GAAC,MAAM,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,EAAC,EAAC,MAAM,EAAC,MAAM,EAAC,OAAO,EAAC,EAAC,aAAa,EAAC,UAAU,MAAM,EAAE,EAAC,GAAG,CAAC,IAAI,KAAG,SAAS,CAAA,CAAC,CAAA,EAAE,CAAA,CAAC,CAAA,EAAC,cAAc,EAAC,kBAAkB,EAAC,CAAC,EAAC,EAAC,IAAI,EAAC,MAAM,EAAC,UAAU,CAAC,MAAM,EAAC,QAAQ,EAAC,OAAO,EAAC,WAAW,EAAC,MAAM,EAAC,KAAK,EAAC,SAAS,EAAC,cAAc,EAAC,aAAa,EAAC,CAAC,CAAC;YAAA,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAAA,IAAG,UAAU,CAAC,MAAM,CAAC,OAAO,IAAE,CAAC,QAAQ,CAAC,EAAE;gBAAC,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC;YACja,0EAA0E;YAC1E,MAAM,MAAM,GAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;YAAA,IAAG,MAAM,KAAG,IAAI,IAAE,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAE,MAAM,CAAC,MAAM,CAAC,GAAC,MAAM,CAAC,MAAM,EAAC,CAAC;gBAAA,UAAU,CAAC,KAAK,EAAE,CAAC;gBAAA,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC;YAAA,CAAC;YAAA,IAAG,CAAC,QAAQ,CAAC,IAAI;gBAAC,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC;YAAA,MAAM,GAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC3P,SAAO,CAAC;gBAAA,MAAM,EAAC,IAAI,EAAC,KAAK,EAAC,GAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBAAA,IAAG,CAAC;oBAAA,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBAAA,IAAG,UAAU,CAAC,MAAM,CAAC,OAAO;wBAAC,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC;oBAAA,IAAG,IAAI;wBAAC,MAAM;oBAAA,IAAG,KAAK,GAAC,KAAK,CAAC,MAAM,GAAC,MAAM,CAAC,MAAM,EAAC,CAAC;wBAAA,UAAU,CAAC,KAAK,EAAE,CAAC;wBAAA,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC;oBAAA,CAAC;oBAAA,MAAM,CAAC,GAAG,CAAC,KAAK,EAAC,KAAK,CAAC,CAAC;oBAAA,KAAK,IAAE,KAAK,CAAC,MAAM,CAAC;gBAAA,CAAC;wBAAO,CAAC;oBAAA,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAA,CAAC;YAAA,CAAC;YACjS,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAC,EAAC,KAAK,EAAC,IAAI,EAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACnG,CAAC;QAAA,OAAM,CAAC,EAAC,CAAC;YAAA,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAAA,IAAG,CAAC,YAAY,wBAAwB;gBAAC,MAAM,CAAC,CAAC;YAAA,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC;QAAA,CAAC;gBAAO,CAAC;YAAA,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAA,KAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,CAAC,GAAE,EAAE,GAAC,CAAC,CAAC,CAAC;YAAA,MAAM,EAAE,WAAW,EAAE,CAAC;YAAA,YAAY,CAAC,KAAK,CAAC,CAAC;YAAA,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC;YAAA,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAC,KAAK,CAAC,CAAC;QAAA,CAAC;IAC9U,CAAC;IACO,IAAI,CAAC,QAAoC;QAChD,IAAG,QAAQ,CAAC,WAAW,KAAG,IAAI,CAAC,WAAW,IAAE,QAAQ,CAAC,UAAU,KAAG,IAAI,CAAC,KAAK,CAAC,UAAU,IAAE,QAAQ,CAAC,QAAQ,KAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAE,QAAQ,CAAC,SAAS,KAAG,IAAI,CAAC,KAAK,CAAC,SAAS,IAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,aAAa,EAAC,IAAI,CAAC,IAAI,CAAC,IAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,YAAY,UAAU,CAAC,IAAE,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,IAAE,QAAQ,CAAC,WAAW,CAAC,MAAM,GAAC,GAAG,GAAC,IAAI,IAAE,QAAQ,CAAC,eAAe,CAAC,MAAM,KAAG,EAAE,IAAE,CAAC,uBAAuB,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,IAAE,QAAQ,CAAC,QAAQ,KAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,KAAG,QAAQ,CAAA,CAAC,CAAA,SAAS,CAAA,CAAC,CAAA,SAAS,CAAC;YAAC,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC;QACxgB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAC,UAAU,EAAC,QAAQ,CAAC,UAAU,EAAC,QAAQ,EAAC,QAAQ,CAAC,QAAQ,EAAC,SAAS,EAAC,QAAQ,CAAC,SAAS,EAAC,eAAe,EAAC,QAAQ,CAAC,eAAe,EAAC,QAAQ,EAAC,QAAQ,CAAC,QAAQ,EAAC,GAAG,CAAC,IAAI,CAAC,WAAW,KAAG,SAAS,CAAA,CAAC,CAAA,EAAE,CAAA,CAAC,CAAA,EAAC,WAAW,EAAC,IAAI,CAAC,WAAW,EAAC,CAAC,EAAC,aAAa,EAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAC,WAAW,EAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAC,CAAC,CAAC;IAC9V,CAAC;IACD,KAAK,CAAC,SAAS,CAAC,OAA4B;QAC3C,IAAI,KAAK,GAAiB,IAAI,EAAC,SAAS,GAAiB,IAAI,CAAC;QAC9D,IAAI,CAAC;YACJ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAAA,IAAG,IAAI,CAAC,SAAS;gBAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;YAAA,IAAI,CAAC,SAAS,GAAC,IAAI,CAAC;YACtF,wEAAwE;YACxE,6EAA6E;YAC7E,6EAA6E;YAC7E,MAAM,MAAM,GAAC,MAAM,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC;YAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC3F,IAAG,MAAM,EAAC,CAAC;gBAAA,MAAM,KAAK,GAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAAA,IAAG,IAAI,CAAC,MAAM,IAAE,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAC,CAAC;oBAAA,MAAM,IAAI,CAAC,WAAW,CAAC,wBAAwB,CAAC,IAAI,CAAC,UAAU,EAAE,EAAC,OAAO,CAAC,CAAC;oBAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAAA,CAAC;gBAAA,OAAO,KAAK,CAAC;YAAA,CAAC;YACzM,IAAG,IAAI,CAAC,MAAM,EAAE,YAAY;gBAAC,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC;YACpD,IAAG,IAAI,CAAC,MAAM;gBAAC,MAAM,IAAI,CAAC,WAAW,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,EAAE,EAAC,OAAO,CAAC,CAAC;;gBAChF,MAAM,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,EAAC,GAAG,IAAI,CAAC,OAAO,CAAC,uBAAuB,EAAE,EAAC,UAAU,EAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAC,GAAG,CAAC,IAAI,CAAC,WAAW,KAAG,SAAS,CAAA,CAAC,CAAA,EAAE,CAAA,CAAC,CAAA,EAAC,WAAW,EAAC,IAAI,CAAC,WAAW,EAAC,CAAC,EAAC,EAAC,OAAO,CAAC,CAAC;YACpM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAAA,MAAM,MAAM,GAAC,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAAA,IAAG,OAAO,MAAM,KAAG,QAAQ,IAAE,CAAC,MAAM,IAAE,MAAM,CAAC,MAAM,GAAC,KAAK,IAAE,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC;YAC5N,MAAM,MAAM,GAAC,MAAM,IAAI,CAAC,IAAI,CAAC,4BAA4B,EAAC,MAAM,EAAC,SAAS,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAAA,KAAK,GAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAC,EAAE,CAAC,CAAC;YAAA,IAAG,KAAK,CAAC,MAAM,KAAG,EAAE,IAAE,OAAO,MAAM,CAAC,UAAU,KAAG,QAAQ,IAAE,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,IAAE,MAAM,CAAC,UAAU,GAAC,IAAI,CAAC,GAAG,EAAE,IAAE,IAAI,IAAE,MAAM,CAAC,UAAU,GAAC,IAAI,CAAC,GAAG,EAAE,GAAC,EAAE,GAAC,KAAK;gBAAC,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC;YAC7V,MAAM,KAAK,GAAC,IAAI,CAAC,KAAK,CAAC,OAAO,KAAG,OAAO,CAAC;YAAA,SAAS,GAAC,KAAK,CAAA,CAAC,CAAA,IAAI,CAAC,OAAO,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,SAAS,CAAA,CAAC,CAAA,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC/K,MAAM,MAAM,GAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAA,CAAC,CAAA,wBAAwB,IAAI,CAAC,KAAK,CAAC,UAAU,kBAAkB,CAAA,CAAC,CAAA,8BAA8B,EAAC,MAAM,EAAC,IAAI,CAAC,SAAS,CAAC,EAAC,SAAS,EAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAC,YAAY,EAAC,CAAC,2BAA2B,CAAC,EAAC,SAAS,EAAC,MAAM,CAAC,SAAS,EAAC,GAAG,EAAC,GAAG,CAAC,SAAS,CAAC,EAAC,GAAG,CAAC,KAAK,CAAA,CAAC,CAAA,EAAC,UAAU,EAAC,GAAG,CAAC,IAAI,CAAC,MAAO,CAAC,aAAa,CAAC,EAAC,CAAA,CAAC,CAAA,EAAC,aAAa,EAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAC,GAAG,CAAC,IAAI,CAAC,WAAW,KAAG,SAAS,CAAA,CAAC,CAAA,EAAE,CAAA,CAAC,CAAA,EAAC,YAAY,EAAC,IAAI,CAAC,WAAW,EAAC,CAAC,EAAC,CAAC,EAAC,CAAC,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAChe,IAAG,MAAM,CAAC,aAAa,KAAG,IAAI,CAAC,KAAK,CAAC,UAAU,IAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAiB,CAAC,KAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;gBAAC,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC;YAClJ,IAAG,KAAK,EAAC,CAAC;gBAAA,IAAG,MAAM,CAAC,QAAQ,KAAG,SAAS,IAAE,OAAO,MAAM,CAAC,WAAW,KAAG,QAAQ,IAAE,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,WAAW,CAAC,IAAE,MAAM,CAAC,WAAW,GAAC,CAAC;oBAAC,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC;YAAA,CAAC;iBAAK,IAAG,MAAM,CAAC,KAAK,KAAG,SAAS,IAAE,MAAM,CAAC,aAAa,KAAG,IAAI,CAAC,KAAK,CAAC,SAAS,IAAE,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,eAAe,EAAC,EAAE,CAAC,EAAC,IAAI,CAAC,IAAI,CAAC;gBAAC,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC;YACjU,MAAM,MAAM,GAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAAA,IAAG,MAAM,CAAC,SAAS,KAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,IAAE,OAAO,MAAM,CAAC,KAAK,KAAG,QAAQ,IAAE,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,IAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAC,KAAK,IAAE,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAE,OAAO,MAAM,CAAC,UAAU,KAAG,QAAQ,IAAE,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,IAAE,MAAM,CAAC,UAAU,GAAC,IAAI,CAAC,GAAG,EAAE,IAAE,IAAI,IAAE,MAAM,CAAC,UAAU,GAAC,IAAI,CAAC,GAAG,EAAE,GAAC,EAAE,GAAC,KAAK;gBAAC,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC;YAClX,MAAM,OAAO,GAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAAA,IAAG,OAAO,CAAC,GAAG,KAAG,CAAC;gBAAC,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC;YAAA,MAAM,IAAI,GAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAC,GAAG,GAAC,IAAI,CAAC,CAAC;YACvH,4EAA4E;YAC5E,MAAM,MAAM,GAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAC,OAAO,GAAC,IAAI,UAAU,CAAC,CAAC,GAAC,MAAM,CAAC,MAAM,GAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAAA,OAAO,CAAC,CAAC,CAAC,GAAC,MAAM,CAAC,MAAM,CAAC;YAAA,OAAO,CAAC,GAAG,CAAC,MAAM,EAAC,CAAC,CAAC,CAAC;YAAA,OAAO,CAAC,GAAG,CAAC,IAAI,EAAC,CAAC,GAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC9L,MAAM,MAAM,GAAC,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAC,OAAO,CAAC,CAAC,CAAC;YAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACtG,MAAM,QAAQ,GAAC,IAAI,CAAC,IAAI,CAAC,EAAC,UAAU,EAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAC,QAAQ,EAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAC,SAAS,EAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAC,aAAa,EAAC,IAAI,CAAC,IAAI,EAAC,WAAW,EAAC,IAAI,EAAC,eAAe,EAAC,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,EAAC,QAAQ,EAAC,KAAK,CAAA,CAAC,CAAA,SAAS,CAAA,CAAC,CAAA,SAAS,EAAC,GAAG,CAAC,IAAI,CAAC,WAAW,KAAG,SAAS,CAAA,CAAC,CAAA,EAAE,CAAA,CAAC,CAAA,EAAC,WAAW,EAAC,IAAI,CAAC,WAAW,EAAC,CAAC,EAAC,CAAC,CAAC;YACjT,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAC,OAAO,CAAC,CAAC;YAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAAA,IAAG,IAAI,CAAC,MAAM,EAAC,CAAC;gBAAA,MAAM,IAAI,CAAC,WAAW,CAAC,wBAAwB,CAAC,IAAI,CAAC,UAAU,EAAE,EAAC,OAAO,CAAC,CAAC;gBAAA,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAAA,CAAC;YAAA,OAAO,QAAQ,CAAC;QACjO,CAAC;QAAA,OAAM,CAAC,EAAC,CAAC;YAAA,IAAI,CAAC,KAAK,EAAE,CAAC;YAAA,IAAG,CAAC,YAAY,wBAAwB;gBAAC,MAAM,CAAC,CAAC;YAAA,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC;QAAA,CAAC;gBAAO,CAAC;YAAA,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YAAA,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAAA,CAAC;IAC/I,CAAC;IACD,KAAK,KAAS,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAA,CAAC;CAC9D"}

package/dist/app-host/private-persistence-idb.d.ts

@@ -0,0 +1,32 @@
+import type { AppCpPrivateSession } from "./private-bootstrap.js";
+import { type AppPrivateBootstrapProtectedStore } from "./private-persistence.js";
+export interface AppIndexedDbPrivateBootstrapOptions {
+    readonly source: AppCpPrivateSession;
+    /** Exact authenticated FIRST-PARTY app origin (not CP/grant origin). */
+    readonly origin: string;
+    /** Explicit operation-record decision, not inferred from missing custody. */
+    readonly mode: "fresh" | "existing";
+    readonly signal: AbortSignal;
+    readonly allowLoopbackHttp?: boolean;
+    readonly allowNativeLoopbackHttp?: boolean;
+}
+export declare class AppIndexedDbPrivateBootstrapStore implements AppPrivateBootstrapProtectedStore {
+    private readonly db;
+    private readonly source;
+    private readonly pins;
+    private readonly root;
+    private readonly origin;
+    private closed;
+    private constructor();
+    static open(options: AppIndexedDbPrivateBootstrapOptions): Promise<AppIndexedDbPrivateBootstrapStore>;
+    private static openChecked;
+    private check;
+    read(options: {
+        signal: AbortSignal;
+    }): Promise<Uint8Array | null>;
+    compareAndSet(expected: Uint8Array | null, encrypted: Uint8Array, options: {
+        signal: AbortSignal;
+    }): Promise<boolean>;
+    private transaction;
+    close(): void;
+}

package/dist/app-host/private-persistence-idb.js

@@ -0,0 +1,188 @@
+/** Exact-scope bootstrap ciphertext IO. No generic KV, reset/delete or retry.
+ * Host must hold Worker/installation/collection ownership BEFORE open/crypto.
+ * Strict IDB durability is a request, never a Saved/power-loss claim. */
+import { currentAppOrigin, isAppOrigin } from "./app-origin.js";
+import { uuidToBytes } from "../codec.js";
+import { APP_PRIVATE_BOOTSTRAP_CIPHER_MAX } from "./private-persistence.js";
+const STORE = "public-outcome", KEY = "operation";
+const bad = () => new Error("app private bootstrap store unavailable");
+const same = (a, b) => a === null || b === null ? a === b : a.length === b.length && a.every((v, i) => v === b[i]);
+function bytes(value) {
+    if (!(value instanceof Uint8Array) || !value.length || value.length > APP_PRIVATE_BOOTSTRAP_CIPHER_MAX)
+        throw bad();
+    return new Uint8Array(value);
+}
+export class AppIndexedDbPrivateBootstrapStore {
+    db;
+    source;
+    pins;
+    root;
+    origin;
+    closed = false;
+    constructor(db, source, pins, root, origin) {
+        this.db = db;
+        this.source = source;
+        this.pins = pins;
+        this.root = root;
+        this.origin = origin;
+        db.onversionchange = () => this.close();
+    }
+    static async open(options) {
+        try {
+            return await this.openChecked(options);
+        }
+        catch {
+            throw bad();
+        }
+    }
+    static async openChecked(options) {
+        const { source, signal } = options;
+        const pins = Object.freeze({ accountId: source.accountId, connectorId: source.connectorId, deviceId: source.deviceId, installationId: source.installationId,
+            collection: source.collection, purpose: source.purpose, cpOrigin: source.cpOrigin, logOrigin: source.logOrigin });
+        const ids = [pins.accountId, pins.connectorId, pins.deviceId, pins.installationId, pins.collection];
+        for (const id of ids)
+            if (uuidToBytes(id).every(v => v === 0))
+                throw bad();
+        if (!(source.rootPublicKey instanceof Uint8Array) || source.rootPublicKey.length !== 32 || source.rootPublicKey.every(v => v === 0))
+            throw bad();
+        const root = new Uint8Array(source.rootPublicKey);
+        if (!isAppOrigin(options.origin, options.allowLoopbackHttp === true, options.allowNativeLoopbackHttp === true ? "native" : undefined) ||
+            currentAppOrigin() !== options.origin || !["fresh", "existing"].includes(options.mode) || !["create", "enrol"].includes(pins.purpose) || !globalThis.indexedDB)
+            throw bad();
+        const current = () => {
+            try {
+                return !signal.aborted && source.isCurrent() === true && source.approvalMode === "password-ak1" &&
+                    source.rootPublicKey instanceof Uint8Array && same(source.rootPublicKey, root) && Object.entries(pins).every(([k, v]) => source[k] === v);
+            }
+            catch {
+                return false;
+            }
+        };
+        if (!current())
+            throw bad();
+        const name = `mdbase.app.private-bootstrap.v1.${ids.map(id => id.toLowerCase()).join(".")}.${pins.purpose}`;
+        const db = await new Promise((resolve, reject) => {
+            const request = indexedDB.open(name, 1);
+            let abandoned = false;
+            const stop = () => { abandoned = true; reject(bad()); }, finish = () => signal.removeEventListener("abort", stop);
+            signal.addEventListener("abort", stop, { once: true });
+            request.onblocked = stop;
+            request.onupgradeneeded = () => {
+                if (abandoned || !current() || options.mode !== "fresh" || request.result.objectStoreNames.length !== 0) {
+                    request.transaction?.abort();
+                    return;
+                }
+                request.result.createObjectStore(STORE);
+            };
+            request.onerror = () => { finish(); reject(bad()); };
+            request.onsuccess = () => {
+                finish();
+                if (abandoned || !current() || request.result.objectStoreNames.length !== 1 || !request.result.objectStoreNames.contains(STORE)) {
+                    request.result.close();
+                    reject(bad());
+                    return;
+                }
+                resolve(request.result);
+            };
+        });
+        const out = new AppIndexedDbPrivateBootstrapStore(db, source, pins, root, options.origin);
+        try {
+            const existing = await out.read({ signal });
+            if ((options.mode === "fresh") !== (existing === null))
+                throw bad();
+            existing?.fill(0);
+            out.check(signal);
+            return out;
+        }
+        catch {
+            out.close();
+            throw bad();
+        }
+    }
+    check(signal) {
+        try {
+            if (this.closed || signal.aborted || currentAppOrigin() !== this.origin || this.source.isCurrent() !== true || this.source.approvalMode !== "password-ak1" ||
+                !(this.source.rootPublicKey instanceof Uint8Array) || !same(this.source.rootPublicKey, this.root) || Object.entries(this.pins).some(([k, v]) => this.source[k] !== v))
+                throw bad();
+        }
+        catch {
+            throw bad();
+        }
+    }
+    async read(options) {
+        this.check(options.signal);
+        const value = await this.transaction("readonly", options.signal, null, null);
+        this.check(options.signal);
+        return value;
+    }
+    async compareAndSet(expected, encrypted, options) {
+        this.check(options.signal);
+        let old = null, next = null;
+        try {
+            old = expected === null ? null : bytes(expected);
+            next = bytes(encrypted);
+            const result = await this.transaction("readwrite", options.signal, old, next);
+            this.check(options.signal);
+            return result === true;
+        }
+        finally {
+            old?.fill(0);
+            next?.fill(0);
+        }
+    }
+    transaction(mode, signal, expected, next) {
+        return new Promise((resolve, reject) => {
+            this.check(signal);
+            const tx = this.db.transaction(STORE, mode, { durability: "strict" });
+            const store = tx.objectStore(STORE);
+            let result = null, failed = false;
+            const abort = () => { failed = true; try {
+                tx.abort();
+            }
+            catch { /* uncertain committed outcome preserved */ } };
+            const finish = () => signal.removeEventListener("abort", abort);
+            signal.addEventListener("abort", abort, { once: true });
+            tx.onabort = tx.onerror = () => { finish(); if (result instanceof Uint8Array)
+                result.fill(0); reject(bad()); };
+            tx.oncomplete = () => { finish(); try {
+                this.check(signal);
+                if (failed)
+                    throw bad();
+                resolve(result);
+            }
+            catch {
+                if (result instanceof Uint8Array)
+                    result.fill(0);
+                reject(bad());
+            } };
+            const request = store.get(KEY);
+            request.onsuccess = () => {
+                let existing = null;
+                try {
+                    this.check(signal);
+                    existing = request.result === undefined ? null : bytes(request.result);
+                    if (mode === "readonly") {
+                        result = existing;
+                        existing = null;
+                    }
+                    else {
+                        result = same(existing, expected);
+                        if (result === true && next !== null)
+                            store.put(new Uint8Array(next), KEY);
+                    }
+                }
+                catch {
+                    abort();
+                }
+                finally {
+                    existing?.fill(0);
+                }
+            };
+        });
+    }
+    close() { if (!this.closed) {
+        this.closed = true;
+        this.db.close();
+    } }
+}
+//# sourceMappingURL=private-persistence-idb.js.map

package/dist/app-host/private-persistence-idb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"private-persistence-idb.js","sourceRoot":"","sources":["../../src/app-host/private-persistence-idb.ts"],"names":[],"mappings":"AAAA;;yEAEyE;AACzE,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,gCAAgC,EAA0C,MAAM,0BAA0B,CAAC;AACpH,MAAM,KAAK,GAAG,gBAAgB,EAAE,GAAG,GAAG,WAAW,CAAC;AAClD,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;AACvE,MAAM,IAAI,GAAG,CAAC,CAAoB,EAAE,CAAoB,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACzJ,SAAS,KAAK,CAAC,KAAc;IAC3B,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,gCAAgC;QAAE,MAAM,GAAG,EAAE,CAAC;IAAC,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;AACpJ,CAAC;AAWD,MAAM,OAAO,iCAAiC;IAEP;IAAkC;IACpD;IACA;IAAmC;IAH9C,MAAM,GAAG,KAAK,CAAC;IACvB,YAAqC,EAAe,EAAmB,MAA2B,EAC/E,IAA0L,EAC1L,IAAgB,EAAmB,MAAc;QAF/B,OAAE,GAAF,EAAE,CAAa;QAAmB,WAAM,GAAN,MAAM,CAAqB;QAC/E,SAAI,GAAJ,IAAI,CAAsL;QAC1L,SAAI,GAAJ,IAAI,CAAY;QAAmB,WAAM,GAAN,MAAM,CAAQ;QAAI,EAAE,CAAC,eAAe,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC;IAClH,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAA4C;QAC5D,IAAI,CAAC;YAAC,OAAO,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,GAAG,EAAE,CAAC;QAAC,CAAC;IACxE,CAAC;IACO,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,OAA4C;QAC3E,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;QACnC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc;YACzJ,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;QACpH,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QACpG,KAAK,MAAM,EAAE,IAAI,GAAG;YAAE,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;gBAAE,MAAM,GAAG,EAAE,CAAC;QAC3E,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,YAAY,UAAU,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,KAAK,EAAE,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YAAE,MAAM,GAAG,EAAE,CAAC;QACjJ,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAClD,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,iBAAiB,KAAK,IAAI,EAAE,OAAO,CAAC,uBAAuB,KAAK,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YACnI,gBAAgB,EAAE,KAAK,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS;YAAE,MAAM,GAAG,EAAE,CAAC;QAC9K,MAAM,OAAO,GAAG,GAAG,EAAE;YAAG,IAAI,CAAC;gBAAC,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,SAAS,EAAE,KAAK,IAAI,IAAI,MAAM,CAAC,YAAY,KAAK,cAAc;oBAC3H,MAAM,CAAC,aAAa,YAAY,UAAU,IAAI,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAA8B,CAAC,KAAK,CAAC,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,KAAK,CAAC;YAAC,CAAC;QAAC,CAAC,CAAC;QACtM,IAAI,CAAC,OAAO,EAAE;YAAE,MAAM,GAAG,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,mCAAmC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC5G,MAAM,EAAE,GAAG,MAAM,IAAI,OAAO,CAAc,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC5D,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAAC,IAAI,SAAS,GAAG,KAAK,CAAC;YAC/D,MAAM,IAAI,GAAG,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAClH,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAAC,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;YACjF,OAAO,CAAC,eAAe,GAAG,GAAG,EAAE;gBAC7B,IAAI,SAAS,IAAI,CAAC,OAAO,EAAE,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC;oBAAC,OAAO;gBAAC,CAAC;gBAClJ,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC1C,CAAC,CAAC;YACF,OAAO,CAAC,OAAO,GAAG,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YACrD,OAAO,CAAC,SAAS,GAAG,GAAG,EAAE;gBACvB,MAAM,EAAE,CAAC;gBAAC,IAAI,SAAS,IAAI,CAAC,OAAO,EAAE,IAAI,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;oBAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;oBAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;oBAAC,OAAO;gBAAC,CAAC;gBAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACxN,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,iCAAiC,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QAC1F,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;YAC5C,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,KAAK,CAAC,QAAQ,KAAK,IAAI,CAAC;gBAAE,MAAM,GAAG,EAAE,CAAC;YAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAAC,OAAO,GAAG,CAAC;QACxH,CAAC;QAAC,MAAM,CAAC;YAAC,GAAG,CAAC,KAAK,EAAE,CAAC;YAAC,MAAM,GAAG,EAAE,CAAC;QAAC,CAAC;IACvC,CAAC;IACO,KAAK,CAAC,MAAmB;QAC/B,IAAI,CAAC;YAAC,IAAI,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,IAAI,gBAAgB,EAAE,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,KAAK,cAAc;gBAC9J,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,YAAY,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAA8B,CAAC,KAAK,CAAC,CAAC;gBAAE,MAAM,GAAG,EAAE,CAAC;QAAC,CAAC;QACpN,MAAM,CAAC;YAAC,MAAM,GAAG,EAAE,CAAC;QAAC,CAAC;IACxB,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,OAAgC;QACzC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAAC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACzG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAAC,OAAO,KAA0B,CAAC;IAChE,CAAC;IACD,KAAK,CAAC,aAAa,CAAC,QAA2B,EAAE,SAAqB,EAAE,OAAgC;QACtG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAAC,IAAI,GAAG,GAAsB,IAAI,EAAE,IAAI,GAAsB,IAAI,CAAC;QAC9F,IAAI,CAAC;YAAC,GAAG,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAAC,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;YAC9E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;YAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAAC,OAAO,MAAM,KAAK,IAAI,CAAC;QACpI,CAAC;gBAAS,CAAC;YAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;IAC5C,CAAC;IACO,WAAW,CAAC,IAAwB,EAAE,MAAmB,EAAE,QAA2B,EAAE,IAAuB;QACrH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAAC,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;YAAC,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAC/H,IAAI,MAAM,GAAgC,IAAI,EAAE,MAAM,GAAG,KAAK,CAAC;YAC/D,MAAM,KAAK,GAAG,GAAG,EAAE,GAAG,MAAM,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC;gBAAC,EAAE,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,2CAA2C,CAAC,CAAC,CAAC,CAAC,CAAC;YACjH,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YACzH,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,IAAI,MAAM,YAAY,UAAU;gBAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/G,EAAE,CAAC,UAAU,GAAG,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC;gBAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;gBAAC,IAAI,MAAM;oBAAE,MAAM,GAAG,EAAE,CAAC;gBAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,IAAI,MAAM,YAAY,UAAU;oBAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;YAAC,CAAC,CAAC,CAAC,CAAC;YACrL,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC/B,OAAO,CAAC,SAAS,GAAG,GAAG,EAAE;gBACvB,IAAI,QAAQ,GAAsB,IAAI,CAAC;gBACvC,IAAI,CAAC;oBAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;oBAAC,QAAQ,GAAG,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;oBAC/F,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;wBAAC,MAAM,GAAG,QAAQ,CAAC;wBAAC,QAAQ,GAAG,IAAI,CAAC;oBAAC,CAAC;yBAAM,CAAC;wBAAC,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;wBAAC,IAAI,MAAM,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI;4BAAE,KAAK,CAAC,GAAG,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;oBAAC,CAAC;gBAC1L,CAAC;gBAAC,MAAM,CAAC;oBAAC,KAAK,EAAE,CAAC;gBAAC,CAAC;wBAAS,CAAC;oBAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAC,CAAC;YACrD,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IACD,KAAK,KAAW,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAAC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QAAC,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;IAAC,CAAC,CAAC,CAAC;CAC7E"}

package/dist/app-host/private-persistence.d.ts

@@ -0,0 +1,55 @@
+import type { AppWebNoiseCustody } from "./noise-custody.js";
+import type { AppCpPrivateSession, AppPrivateBootstrapMetadata, AppPrivateBootstrapPersistence } from "./private-bootstrap.js";
+import type { AppDeviceRegistrationReceipt, AppPrivateEnrolOperationMarker } from "./wasm-runtime.js";
+export declare const APP_PRIVATE_BOOTSTRAP_CIPHER_MAX: number;
+/** One exclusively owned, exact-scope record; atomic exact-ciphertext CAS.
+ * Missing EXISTING records and unknown writes must refuse, not recreate. */
+export interface AppPrivateBootstrapProtectedStore {
+    read(options: {
+        signal: AbortSignal;
+    }): Promise<Uint8Array | null>;
+    compareAndSet(expected: Uint8Array | null, encrypted: Uint8Array, options: {
+        signal: AbortSignal;
+    }): Promise<boolean>;
+}
+export declare class AppWebPrivateBootstrapPersistence implements AppPrivateBootstrapPersistence {
+    private readonly source;
+    private readonly key;
+    private readonly store;
+    private readonly noise;
+    private readonly pins;
+    private readonly root;
+    private readonly keys;
+    private readonly aad;
+    private readonly displayName;
+    constructor(source: AppCpPrivateSession, receipt: AppDeviceRegistrationReceipt, key: CryptoKey, store: AppPrivateBootstrapProtectedStore, noise: Pick<AppWebNoiseCustody, "privateEnrolPending" | "privateEnrolAcknowledged">, options?: {
+        allowLoopbackHttp?: boolean;
+        displayName?: string;
+    });
+    private check;
+    private checkReceipt;
+    private commit;
+    private markerCopy;
+    private copy;
+    private hashChecked;
+    private read;
+    private write;
+    pendingCreate(scope: AppDeviceRegistrationReceipt & {
+        readonly collection: string;
+        readonly displayName?: string;
+    }, options: {
+        signal: AbortSignal;
+    }): Promise<void>;
+    privateEnrolPending(marker: AppPrivateEnrolOperationMarker, options: {
+        signal: AbortSignal;
+    }): Promise<void>;
+    completed(metadata: AppPrivateBootstrapMetadata, options: {
+        signal: AbortSignal;
+    }): Promise<void>;
+    privateEnrolAcknowledged(marker: AppPrivateEnrolOperationMarker, options: {
+        signal: AbortSignal;
+    }): Promise<void>;
+    restoredCompletion(options: {
+        signal: AbortSignal;
+    }): Promise<AppPrivateBootstrapMetadata | null>;
+}