@meshline/sdk 0.0.0-stage → 0.1.0-alpha.1

package/dist/groups/account-sync.js

@@ -0,0 +1,235 @@
+import { ProtocolError, StateConflictError } from '../errors.js';
+import { sendGroupAccountPayload } from '../messages/account-sender.js';
+import { cachedDeviceStateKey } from '../messages/contacts.js';
+import { accountGroupHistorySecretSyncCodec, accountGroupPrivateStateRequestCodec, accountGroupPrivateStateSyncCodec, validateAccountGroupHistorySecretSync, validateAccountGroupPrivateStateRequest, validateAccountGroupPrivateStateSync } from '../models/groups.js';
+import { accountDeviceStateCodec, authorizedDevice, certificateId } from '../models/identity.js';
+import { canonicalJson, requireObject, requireSafeInteger } from '../protocol/json.js';
+import { throwIfAborted } from '../runtime/clock.js';
+import { updateStore } from '../storage/transaction.js';
+import { decodeGroupProjection, groupEpochKey, groupKey, GroupRepository } from './repository.js';
+import { groupApplicationSecretKey, groupMemberSecretKey } from './secrets.js';
+const cursorKey = { collection: 'group_account_meta', key: 'local_sequence' };
+const types = new Set(['meshline.account.group.state.request', 'meshline.account.group.state.sync', 'meshline.account.group.history_secret.sync']);
+const fingerprint = (value) => canonicalJson(value ?? null);
+class AccountGroupRejection extends ProtocolError {
+}
+function input(action) {
+    try {
+        return action();
+    }
+    catch (error) {
+        if (!(error instanceof ProtocolError))
+            throw error;
+        throw new AccountGroupRejection(error.code, error.message, { cause: error });
+    }
+}
+function secretEffect(effect) {
+    return { queries: effect.queries, plan: snapshot => {
+            try {
+                return effect.plan(snapshot);
+            }
+            catch (error) {
+                if (!(error instanceof ProtocolError) || error.code !== 'invalid_binding')
+                    throw error;
+                throw new AccountGroupRejection(error.code, error.message, { cause: error });
+            }
+        } };
+}
+/** One consumer cursor commits with all key effects; local protection/storage failures remain retryable. */
+export class GroupAccountSync {
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    request(signal) { return sendGroupAccountPayload(this.options.messages, accountGroupPrivateStateRequestCodec.encode({}), undefined, signal); }
+    async consume(signal) {
+        const { store, messages } = this.options;
+        for (;;) {
+            const after = (await store.read([cursorKey], signal)).sets[0][0]?.value.sequence ?? 0;
+            requireSafeInteger(after, 0);
+            const page = await messages.readTimeline(after, 64, signal);
+            if (!page.length)
+                return;
+            for (const message of page) {
+                throwIfAborted(signal);
+                let effect;
+                let rejection;
+                try {
+                    effect = await this.#prepare(message, signal);
+                }
+                catch (error) {
+                    throwIfAborted(signal);
+                    if (!(error instanceof AccountGroupRejection))
+                        throw error;
+                    rejection = error;
+                }
+                try {
+                    await this.#commit(message, effect, rejection, signal);
+                }
+                catch (error) {
+                    throwIfAborted(signal);
+                    if (rejection || !(error instanceof AccountGroupRejection))
+                        throw error;
+                    rejection = error;
+                    await this.#commit(message, undefined, rejection, signal);
+                }
+                if (rejection)
+                    this.options.rejected(message.messageId, rejection);
+            }
+        }
+    }
+    async #commit(message, effect, rejection, signal) {
+        requireSafeInteger(message.localSequence, 1);
+        await updateStore(this.options.store, [cursorKey, ...effect?.queries ?? []], snapshot => {
+            const previous = snapshot.sets[0][0]?.value.sequence ?? 0;
+            requireSafeInteger(previous, 0);
+            if (previous >= message.localSequence)
+                return { mutations: [], result: undefined };
+            const mutations = [...effect?.plan({ ...snapshot, sets: snapshot.sets.slice(1) }) ?? [], { kind: 'put', ...cursorKey, value: { sequence: message.localSequence } }];
+            if (rejection)
+                mutations.push({ kind: 'put', collection: 'group_account_rejections', key: String(message.localSequence).padStart(16, '0'), value: { messageId: message.messageId, code: rejection.code, message: rejection.message } });
+            return { mutations, result: undefined };
+        }, signal);
+    }
+    #authorize(senderDeviceId, effect) {
+        return { queries: [cachedDeviceStateKey(this.options.accountId), ...effect?.queries ?? []], plan: snapshot => {
+                const row = snapshot.sets[0][0]?.value;
+                if (!row)
+                    throw new StateConflictError('Current device authorization disappeared during group account synchronization.');
+                const state = accountDeviceStateCodec.decode(row);
+                if (state.account !== this.options.accountId)
+                    throw new ProtocolError('invalid_storage', 'Cached device authorization belongs to another account.');
+                input(() => authorizedDevice(state, senderDeviceId, this.options.context, this.options.clock.nowSeconds()));
+                return effect?.plan({ ...snapshot, sets: snapshot.sets.slice(1) }) ?? [];
+            } };
+    }
+    async #prepare(message, signal) {
+        if (!types.has(String(message.payload['$type'])))
+            return undefined;
+        const { accountId, device, context, secrets } = this.options;
+        if (message.sender !== accountId || message.recipient !== accountId)
+            throw new AccountGroupRejection('invalid_binding', 'Private group synchronization must stay within the current account.');
+        const own = await device.getDeviceState(undefined, signal);
+        if (!own)
+            throw new ProtocolError('device_state_required', 'Current account authorization is unavailable.');
+        input(() => authorizedDevice(own, message.senderDeviceId, context, this.options.clock.nowSeconds()));
+        let effect;
+        if (message.payload['$type'] === 'meshline.account.group.state.request') {
+            const request = input(() => { const value = accountGroupPrivateStateRequestCodec.decode(message.payload); validateAccountGroupPrivateStateRequest(value); return value; });
+            if (message.senderDeviceId !== certificateId(device.certificate, context))
+                await this.#reply(message.senderDeviceId, request.groupId, signal);
+        }
+        else if (message.payload['$type'] === 'meshline.account.group.state.sync') {
+            const value = input(() => accountGroupPrivateStateSyncCodec.decode(message.payload));
+            try {
+                input(() => validateAccountGroupPrivateStateSync(value));
+                effect = secretEffect(await secrets.prepareMemberStates(value.states, signal));
+            }
+            finally {
+                for (const state of value.states)
+                    state.memberEncryptionPrivateKey.fill(0);
+            }
+        }
+        else {
+            const value = input(() => accountGroupHistorySecretSyncCodec.decode(message.payload));
+            try {
+                input(() => validateAccountGroupHistorySecretSync(value));
+                try {
+                    effect = await secrets.prepareHistorySecrets(value.secrets, signal);
+                }
+                catch (error) {
+                    if (!(error instanceof ProtocolError) || error.code !== 'conflicting_epoch_secret')
+                        throw error;
+                    throw new AccountGroupRejection(error.code, error.message, { cause: error });
+                }
+            }
+            finally {
+                for (const secret of value.secrets)
+                    secret.applicationSecret.fill(0);
+            }
+        }
+        return this.#authorize(message.senderDeviceId, effect);
+    }
+    #member(group, row) {
+        if (!row)
+            return undefined;
+        if (row.relayId !== group.relayId)
+            throw new ProtocolError('invalid_binding', 'Synchronized group belongs to another hosting relay.');
+        if (!row.projection)
+            return undefined;
+        const projection = decodeGroupProjection(requireObject(row.projection), group);
+        if (row.localDepartureAfter !== undefined) {
+            requireSafeInteger(row.localDepartureAfter, 0);
+            if (projection.sequence <= row.localDepartureAfter)
+                return undefined;
+        }
+        return projection.members.some(value => value.account === this.options.accountId) ? projection : undefined;
+    }
+    #guard(queries, before, mutations = []) {
+        return { queries, plan: snapshot => {
+                if (snapshot.sets.some((rows, index) => fingerprint(rows[0]?.value) !== fingerprint(before.sets[index][0]?.value)))
+                    throw new StateConflictError('Group key authority changed before account synchronization was enqueued.');
+                return mutations;
+            } };
+    }
+    async shareCurrent(group, signal) { await this.#sendPrivate(group, undefined, signal); }
+    async #sendPrivate(group, devices, signal) {
+        const { store, secrets, messages } = this.options;
+        const row = (await store.read([groupKey(group)], signal)).sets[0][0]?.value;
+        const projection = this.#member(group, row);
+        if (!projection)
+            return;
+        const member = projection.members.find(value => value.account === this.options.accountId);
+        const key = groupMemberSecretKey(group.groupId, member.memberEncryptionPublicKey);
+        const queries = [groupKey(group), groupEpochKey(group, projection.epoch), key];
+        const snapshot = await store.read(queries, signal);
+        if (fingerprint(snapshot.sets[0][0]?.value) !== fingerprint(row))
+            throw new StateConflictError('Group authority changed before key sharing.');
+        const stored = snapshot.sets[2][0]?.value;
+        if (!stored || devices === undefined && stored.shared === true || snapshot.sets[1][0]?.value.materialVerified !== true)
+            return;
+        const privateKey = await secrets.readMemberKey(group.groupId, member.memberEncryptionPublicKey, signal);
+        if (!privateKey)
+            return;
+        try {
+            await sendGroupAccountPayload(messages, accountGroupPrivateStateSyncCodec.encode({ states: [{ ...group, memberEncryptionPrivateKey: privateKey }] }), devices, signal, this.#guard(queries, snapshot, devices === undefined ? [{ kind: 'put', ...key, value: { ...stored, shared: true } }] : []));
+        }
+        finally {
+            privateKey.fill(0);
+        }
+    }
+    async #reply(sender, requested, signal) {
+        const { store, context, accountId, secrets, messages } = this.options;
+        const repository = new GroupRepository(store, context, accountId);
+        const rows = (await store.read([{ collection: 'groups', ...(requested ? { key: requested } : {}) }], signal)).sets[0];
+        for (const row of rows) {
+            const group = { groupId: row.key, relayId: String(row.value.relayId) };
+            if (!this.#member(group, row.value))
+                continue;
+            await this.#sendPrivate(group, [sender], signal);
+            const epochs = (await repository.epochs(group, signal)).filter(value => value.commitment);
+            for (let start = 0; start < epochs.length; start += 64) {
+                const batch = epochs.slice(start, start + 64);
+                const queries = [groupKey(group), ...batch.flatMap(value => [groupEpochKey(group, value.epoch), groupApplicationSecretKey(group.groupId, value.epoch)])];
+                const snapshot = await store.read(queries, signal);
+                if (!this.#member(group, snapshot.sets[0][0]?.value))
+                    break;
+                const history = [];
+                try {
+                    for (const value of batch) {
+                        const secret = await secrets.readApplicationSecret(group, value.epoch, signal);
+                        if (secret)
+                            history.push({ groupId: group.groupId, epoch: value.epoch, applicationSecret: secret });
+                    }
+                    if (history.length)
+                        await sendGroupAccountPayload(messages, accountGroupHistorySecretSyncCodec.encode({ secrets: history }), [sender], signal, this.#guard(queries, snapshot));
+                }
+                finally {
+                    for (const value of history)
+                        value.applicationSecret.fill(0);
+                }
+            }
+        }
+    }
+}
+//# sourceMappingURL=account-sync.js.map

package/dist/groups/account-sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-sync.js","sourceRoot":"","sources":["../../src/groups/account-sync.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,uBAAuB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAE/D,OAAO,EAAE,kCAAkC,EAAE,oCAAoC,EAAE,iCAAiC,EAChH,qCAAqC,EAAE,uCAAuC,EAAE,oCAAoC,EAA0C,MAAM,qBAAqB,CAAC;AAC9L,OAAO,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAEjG,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,kBAAkB,EAAmB,MAAM,qBAAqB,CAAC;AACxG,OAAO,EAAE,cAAc,EAAqB,MAAM,qBAAqB,CAAC;AAExE,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,aAAa,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClG,OAAO,EAAE,yBAAyB,EAAE,oBAAoB,EAA6C,MAAM,cAAc,CAAC;AAO1H,MAAM,SAAS,GAAc,EAAE,UAAU,EAAE,oBAAoB,EAAE,GAAG,EAAE,gBAAgB,EAAE,CAAC;AACzF,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,sCAAsC,EAAE,mCAAmC,EAAE,4CAA4C,CAAC,CAAC,CAAC;AACnJ,MAAM,WAAW,GAAG,CAAC,KAA6B,EAAU,EAAE,CAAC,aAAa,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;AAC5F,MAAM,qBAAsB,SAAQ,aAAa;CAAG;AACpD,SAAS,KAAK,CAAI,MAAe;IAC7B,IAAI,CAAC;QAAC,OAAO,MAAM,EAAE,CAAC;IAAC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,IAAI,CAAC,CAAC,KAAK,YAAY,aAAa,CAAC;YAAE,MAAM,KAAK,CAAC;QAAC,MAAM,IAAI,qBAAqB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAAC,CAAC;AAChL,CAAC;AACD,SAAS,YAAY,CAAC,MAAyB;IAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE;YAC/C,IAAI,CAAC;gBAAC,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAAC,CAAC;YACrC,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAI,CAAC,CAAC,KAAK,YAAY,aAAa,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB;oBAAE,MAAM,KAAK,CAAC;gBAAC,MAAM,IAAI,qBAAqB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YAAC,CAAC;QAC3L,CAAC,EAAE,CAAC;AACR,CAAC;AAED,4GAA4G;AAC5G,MAAM,OAAO,gBAAgB;IACJ,OAAO;IAA5B,YAAqB,OAAgC;uBAAhC,OAAO;IAA4B,CAAC;IACzD,OAAO,CAAC,MAAoB,IAAmB,OAAO,uBAAuB,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,oCAAoC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC3K,KAAK,CAAC,OAAO,CAAC,MAAmB;QAC7B,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QACzC,SAAS,CAAC;YACN,MAAM,KAAK,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC;YAAC,kBAAkB,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACrH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,MAAM;gBAAE,OAAO;YACtF,KAAK,MAAM,OAAO,IAAI,IAAI,EAAE,CAAC;gBACzB,cAAc,CAAC,MAAM,CAAC,CAAC;gBAAC,IAAI,MAAqC,CAAC;gBAAC,IAAI,SAA4C,CAAC;gBACpH,IAAI,CAAC;oBAAC,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAAC,CAAC;gBACtD,OAAO,KAAK,EAAE,CAAC;oBAAC,cAAc,CAAC,MAAM,CAAC,CAAC;oBAAC,IAAI,CAAC,CAAC,KAAK,YAAY,qBAAqB,CAAC;wBAAE,MAAM,KAAK,CAAC;oBAAC,SAAS,GAAG,KAAK,CAAC;gBAAC,CAAC;gBACxH,IAAI,CAAC;oBAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;gBAAC,CAAC;gBAC/D,OAAO,KAAK,EAAE,CAAC;oBACX,cAAc,CAAC,MAAM,CAAC,CAAC;oBAAC,IAAI,SAAS,IAAI,CAAC,CAAC,KAAK,YAAY,qBAAqB,CAAC;wBAAE,MAAM,KAAK,CAAC;oBAChG,SAAS,GAAG,KAAK,CAAC;oBAAC,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;gBACjF,CAAC;gBACD,IAAI,SAAS;oBAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;YACvE,CAAC;QACL,CAAC;IACL,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,OAAuB,EAAE,MAAqC,EAAE,SAAoC,EAAE,MAAmB;QACnI,kBAAkB,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;QAC7C,MAAM,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,GAAG,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC,EAAE;YACpF,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC;YAAC,kBAAkB,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YAC5F,IAAI,QAAQ,IAAI,OAAO,CAAC,aAAa;gBAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YACnF,MAAM,SAAS,GAAoB,CAAC,GAAG,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,SAAS,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;YACrL,IAAI,SAAS;gBAAE,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,0BAA0B,EAAE,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACxO,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC5C,CAAC,EAAE,MAAM,CAAC,CAAC;IACf,CAAC;IACD,UAAU,CAAC,cAAsB,EAAE,MAA0B;QACzD,OAAO,EAAE,OAAO,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE;gBACzG,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;gBAAC,IAAI,CAAC,GAAG;oBAAE,MAAM,IAAI,kBAAkB,CAAC,gFAAgF,CAAC,CAAC;gBAClK,MAAM,KAAK,GAAG,uBAAuB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBAAC,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC,SAAS;oBAAE,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,yDAAyD,CAAC,CAAC;gBACvM,KAAK,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,KAAK,EAAE,cAAc,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;gBAC5G,OAAO,MAAM,EAAE,IAAI,CAAC,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;YAC7E,CAAC,EAAE,CAAC;IACR,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,OAAuB,EAAE,MAAmB;QACvD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QACnE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAC7D,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;YAAE,MAAM,IAAI,qBAAqB,CAAC,iBAAiB,EAAE,qEAAqE,CAAC,CAAC;QAC/L,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAAC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,aAAa,CAAC,uBAAuB,EAAE,+CAA+C,CAAC,CAAC;QACxK,KAAK,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACrG,IAAI,MAAqC,CAAC;QAC1C,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,sCAAsC,EAAE,CAAC;YACtE,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,GAAG,MAAM,KAAK,GAAG,oCAAoC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,uCAAuC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3K,IAAI,OAAO,CAAC,cAAc,KAAK,aAAa,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC;gBAAE,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAClJ,CAAC;aAAM,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,mCAAmC,EAAE,CAAC;YAC1E,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,iCAAiC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YACrF,IAAI,CAAC;gBAAC,KAAK,CAAC,GAAG,EAAE,CAAC,oCAAoC,CAAC,KAAK,CAAC,CAAC,CAAC;gBAAC,MAAM,GAAG,YAAY,CAAC,MAAM,OAAO,CAAC,mBAAmB,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;YAAC,CAAC;oBACzI,CAAC;gBAAC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM;oBAAE,KAAK,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;QAC3F,CAAC;aAAM,CAAC;YACJ,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,kCAAkC,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YACtF,IAAI,CAAC;gBACD,KAAK,CAAC,GAAG,EAAE,CAAC,qCAAqC,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC1D,IAAI,CAAC;oBAAC,MAAM,GAAG,MAAM,OAAO,CAAC,qBAAqB,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAAC,CAAC;gBAC5E,OAAO,KAAK,EAAE,CAAC;oBAAC,IAAI,CAAC,CAAC,KAAK,YAAY,aAAa,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,0BAA0B;wBAAE,MAAM,KAAK,CAAC;oBAAC,MAAM,IAAI,qBAAqB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;gBAAC,CAAC;YACpM,CAAC;oBAAS,CAAC;gBAAC,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO;oBAAE,MAAM,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;QACvF,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,CAAC,KAAe,EAAE,GAA2B;QAChD,IAAI,CAAC,GAAG;YAAE,OAAO,SAAS,CAAC;QAAC,IAAI,GAAG,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;YAAE,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,sDAAsD,CAAC,CAAC;QAClK,IAAI,CAAC,GAAG,CAAC,UAAU;YAAE,OAAO,SAAS,CAAC;QAAC,MAAM,UAAU,GAAG,qBAAqB,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,CAAC;QACtH,IAAI,GAAG,CAAC,mBAAmB,KAAK,SAAS,EAAE,CAAC;YAAC,kBAAkB,CAAC,GAAG,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC;YAAC,IAAI,UAAU,CAAC,QAAQ,IAAI,GAAG,CAAC,mBAAmB;gBAAE,OAAO,SAAS,CAAC;QAAC,CAAC;QACpK,OAAO,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/G,CAAC;IACD,MAAM,CAAC,OAA+B,EAAE,MAAqB,EAAE,SAAS,GAA6B,EAAE;QACnG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE;gBAC/B,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;oBAAE,MAAM,IAAI,kBAAkB,CAAC,0EAA0E,CAAC,CAAC;gBAC9N,OAAO,SAAS,CAAC;YACrB,CAAC,EAAE,CAAC;IACR,CAAC;IACD,KAAK,CAAC,YAAY,CAAC,KAAe,EAAE,MAAmB,IAAmB,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC9H,KAAK,CAAC,YAAY,CAAC,KAAe,EAAE,OAAsC,EAAE,MAAmB;QAC3F,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAAC,MAAM,GAAG,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;QAChI,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAAC,IAAI,CAAC,UAAU;YAAE,OAAO;QACrE,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,CAAC,SAAS,CAAE,CAAC;QAC3F,MAAM,GAAG,GAAG,oBAAoB,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,yBAAyB,CAAC,CAAC;QAAC,MAAM,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;QAAC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACtN,IAAI,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,WAAW,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,kBAAkB,CAAC,6CAA6C,CAAC,CAAC;QAC/I,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;QAAC,IAAI,CAAC,MAAM,IAAI,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,gBAAgB,KAAK,IAAI;YAAE,OAAO;QAC5K,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,yBAAyB,EAAE,MAAM,CAAC,CAAC;QAAC,IAAI,CAAC,UAAU;YAAE,OAAO;QACjI,IAAI,CAAC;YACD,MAAM,uBAAuB,CAAC,QAAQ,EAAE,iCAAiC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,KAAK,EAAE,0BAA0B,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,EACjK,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACpI,CAAC;gBAAS,CAAC;YAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;IACrC,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,MAAc,EAAE,SAA6B,EAAE,MAAmB;QAC3E,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAAC,MAAM,UAAU,GAAG,IAAI,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QACzI,MAAM,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC;QACvH,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC;gBAAE,SAAS;YACtH,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;YAAC,MAAM,MAAM,GAAG,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC5I,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;gBACrD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,GAAG,EAAE,CAAC,CAAC;gBAAC,MAAM,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,yBAAyB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;gBACxM,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;oBAAE,MAAM;gBACjH,MAAM,OAAO,GAAyB,EAAE,CAAC;gBACzC,IAAI,CAAC;oBACD,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;wBAAC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;wBAAC,IAAI,MAAM;4BAAE,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC,CAAC;oBAAC,CAAC;oBACnN,IAAI,OAAO,CAAC,MAAM;wBAAE,MAAM,uBAAuB,CAAC,QAAQ,EAAE,kCAAkC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;gBACnL,CAAC;wBAAS,CAAC;oBAAC,KAAK,MAAM,KAAK,IAAI,OAAO;wBAAE,KAAK,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAAC,CAAC;YAC/E,CAAC;QACL,CAAC;IACL,CAAC;CACJ"}

package/dist/groups/messages.d.ts

@@ -0,0 +1,39 @@
+import { ProtocolError } from '../errors.js';
+import { type GroupMessage, type GroupRef } from '../models/groups.js';
+import type { NetworkContext } from '../protocol/context.js';
+import { type JsonObject } from '../protocol/json.js';
+import type { MeshlineStore } from '../storage/store.js';
+import type { GroupProjection } from './state.js';
+export interface GroupMessageInfo extends GroupMessage {
+    readonly group: GroupRef;
+    readonly sequence: number;
+    readonly messageId: string;
+    readonly sender: string;
+    readonly senderDeviceId: string;
+    readonly createdAt: number;
+    readonly acceptedAt: number;
+}
+export interface GroupMessageProcessingResult {
+    readonly state: 'waitingForKey' | 'processed' | 'alreadyProcessed';
+    readonly message?: GroupMessageInfo;
+    readonly nicknameChanged?: boolean;
+    readonly groupRecord?: JsonObject;
+    readonly error?: ProtocolError;
+}
+export interface GroupApplicationSecrets {
+    /** Returns a fresh owned buffer only after the epoch's authority is verified. Caller erases it. */
+    readApplicationSecret(group: GroupRef, epoch: number, signal?: AbortSignal): Promise<Uint8Array | undefined>;
+}
+/** Sequence is scoped to this sender's and this recipient's current membership; unknown payload attributes never select the target member. */
+export declare function applyGroupNickname(projection: GroupProjection, accountId: string, sender: string, sequence: number, nickname: string | null): GroupProjection;
+/** Decryption is separate from verified timeline ingestion, so a missing old key cannot prevent recovery of later epochs. */
+export declare class GroupMessageProcessor {
+    readonly store: MeshlineStore;
+    readonly context: NetworkContext;
+    readonly accountId: string;
+    readonly secrets: GroupApplicationSecrets;
+    constructor(store: MeshlineStore, context: NetworkContext, accountId: string, secrets: GroupApplicationSecrets);
+    processPending(group: GroupRef, committed: (sequence: number, result: GroupMessageProcessingResult) => void, signal?: AbortSignal): Promise<void>;
+    process(group: GroupRef, sequence: number, signal?: AbortSignal): Promise<GroupMessageProcessingResult>;
+}
+//# sourceMappingURL=messages.d.ts.map

package/dist/groups/messages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../../src/groups/messages.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAsB,MAAM,cAAc,CAAC;AAEjE,OAAO,EAAwH,KAAK,YAAY,EAAE,KAAK,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE7L,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAoD,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAExG,OAAO,KAAK,EAAE,aAAa,EAAiB,MAAM,qBAAqB,CAAC;AAGxE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,MAAM,WAAW,gBAAiB,SAAQ,YAAY;IAClD,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CACtM;AACD,MAAM,WAAW,4BAA4B;IAAG,QAAQ,CAAC,KAAK,EAAE,eAAe,GAAG,WAAW,GAAG,kBAAkB,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAA;CAAE;AAChQ,MAAM,WAAW,uBAAuB;IACpC,mGAAmG;IACnG,qBAAqB,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;CAChH;AACD,8IAA8I;AAC9I,wBAAgB,kBAAkB,CAAC,UAAU,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,eAAe,CAM7J;AAED,6HAA6H;AAC7H,qBAAa,qBAAqB;IAClB,QAAQ,CAAC,KAAK,EAAE,aAAa;IAAE,QAAQ,CAAC,OAAO,EAAE,cAAc;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM;IAAE,QAAQ,CAAC,OAAO,EAAE,uBAAuB;IAAlJ,YAAqB,KAAK,EAAE,aAAa,EAAW,OAAO,EAAE,cAAc,EAAW,SAAS,EAAE,MAAM,EAAW,OAAO,EAAE,uBAAuB,EAAI;IAChJ,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,4BAA4B,KAAK,IAAI,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAQtJ;IACK,OAAO,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,4BAA4B,CAAC,CA4C5G;CACJ"}

package/dist/groups/messages.js

@@ -0,0 +1,141 @@
+import { decryptGroupMessage, GroupKeyAccessError } from '../crypto/groups.js';
+import { requireLength } from '../crypto/primitives.js';
+import { ProtocolError, StateConflictError } from '../errors.js';
+import { groupEventCodec } from '../models/group-management.js';
+import { groupMessageCodec, groupMessageEnvelopeCodec, groupMemberNicknameUpdateCodec, validateGroupPayload, validateGroupRef } from '../models/groups.js';
+import { deviceCertificateCodec } from '../models/identity.js';
+import { canonicalJson, requireObject, requireSafeInteger } from '../protocol/json.js';
+import { throwIfAborted } from '../runtime/clock.js';
+import { updateStore } from '../storage/transaction.js';
+import { decodeGroupProjection, encodeGroupProjection, groupEpochKey, groupEventKey, groupKey, groupPendingMessageKey } from './repository.js';
+/** Sequence is scoped to this sender's and this recipient's current membership; unknown payload attributes never select the target member. */
+export function applyGroupNickname(projection, accountId, sender, sequence, nickname) {
+    requireSafeInteger(sequence, 1);
+    const receiver = projection.members.find(member => member.account === accountId);
+    const member = projection.members.find(member => member.account === sender);
+    if (!receiver || !member || sequence < receiver.joinedAtSequence || sequence < member.joinedAtSequence || sequence <= (member.nicknameSequence ?? -1))
+        return projection;
+    const next = { ...member, nicknameSequence: sequence };
+    if (nickname === null)
+        delete next.nickname;
+    else
+        next.nickname = nickname;
+    return { ...projection, members: projection.members.map(value => value.account === sender ? next : value) };
+}
+/** Decryption is separate from verified timeline ingestion, so a missing old key cannot prevent recovery of later epochs. */
+export class GroupMessageProcessor {
+    store;
+    context;
+    accountId;
+    secrets;
+    constructor(store, context, accountId, secrets) {
+        this.store = store;
+        this.context = context;
+        this.accountId = accountId;
+        this.secrets = secrets;
+    }
+    async processPending(group, committed, signal) {
+        validateGroupRef(group);
+        const reader = await this.store.openQuery({ collection: 'group_pending_messages', prefix: `${group.groupId}|` }, signal);
+        try {
+            while (true) {
+                const rows = await reader.readNext(128, signal);
+                if (!rows.length)
+                    break;
+                for (const row of rows) {
+                    requireSafeInteger(row.value.sequence, 1);
+                    const result = await this.process(group, row.value.sequence, signal);
+                    if (result.state === 'processed')
+                        committed(row.value.sequence, result);
+                }
+            }
+        }
+        finally {
+            await reader.dispose();
+        }
+    }
+    async process(group, sequence, signal) {
+        validateGroupRef(group);
+        requireSafeInteger(sequence, 1);
+        throwIfAborted(signal);
+        const queries = [groupKey(group), groupEventKey(group, sequence), groupPendingMessageKey(group, sequence)];
+        const initial = await this.store.read(queries, signal);
+        const groupRow = initial.sets[0][0]?.value;
+        const stored = initial.sets[1][0]?.value;
+        if (groupRow?.relayId !== group.relayId || !stored)
+            throw new ProtocolError('invalid_storage', 'Verified group message or its hosting association is missing.');
+        const projection = decodeGroupProjection(requireObject(groupRow.projection), group);
+        if (stored.decryptedPayload !== undefined || stored.rejection !== undefined || !initial.sets[2].length)
+            return { state: 'alreadyProcessed' };
+        const event = groupEventCodec.decode(stored.event);
+        const message = requireObject(stored.message);
+        const sender = deviceCertificateCodec.decode(stored.certificate);
+        if (event.sequence !== sequence || projection.sequence < sequence || message.sender !== sender.account || message.senderDeviceId !== event.signerDeviceId)
+            throw new ProtocolError('invalid_storage', 'Stored group message evidence has inconsistent identities or sequence.');
+        const envelope = groupMessageEnvelopeCodec.decode(event.payload);
+        if (message.messageId !== envelope.messageId || message.createdAt !== envelope.createdAt || envelope.groupId !== group.groupId || envelope.epoch !== event.epoch)
+            throw new ProtocolError('invalid_storage', 'Stored group envelope differs from its verified metadata.');
+        const epoch = (await this.store.read([groupEpochKey(group, event.epoch)], signal)).sets[0][0];
+        if (!epoch?.value.commitment)
+            throw new ProtocolError('invalid_storage', 'Verified group message has no established epoch.');
+        // Key access is outside the permanent-content rejection boundary, even when a local provider throws ProtocolError.
+        const secret = await this.secrets.readApplicationSecret(group, event.epoch, signal);
+        if (!secret)
+            return { state: 'waitingForKey' };
+        let payload;
+        let error;
+        try {
+            throwIfAborted(signal);
+            try {
+                requireLength(secret, 32, 'Stored application secret');
+            }
+            catch (cause) {
+                throw new GroupKeyAccessError('Local group application secret has an invalid length.', { cause });
+            }
+            try {
+                payload = decryptGroupMessage({ context: this.context, envelope, sender, signerDeviceId: event.signerDeviceId, applicationSecret: secret });
+                validateGroupPayload(payload);
+                if (payload.$type === 'meshline.group.message.content' && (groupMessageCodec.decode(payload).replyToSeq ?? 0) >= sequence)
+                    throw new ProtocolError('invalid_reply', 'Group reply sequence must precede its containing message.');
+            }
+            catch (cause) {
+                if (!(cause instanceof ProtocolError))
+                    throw cause;
+                error = cause;
+            }
+        }
+        finally {
+            secret.fill(0);
+        }
+        throwIfAborted(signal);
+        return updateStore(this.store, queries, snapshot => {
+            const current = snapshot.sets[1][0]?.value;
+            const currentGroup = snapshot.sets[0][0]?.value;
+            if (current?.decryptedPayload !== undefined || current?.rejection !== undefined)
+                return { mutations: [], result: { state: 'alreadyProcessed' } };
+            if (canonicalJson(current ?? null) !== canonicalJson(stored) || currentGroup?.relayId !== group.relayId)
+                throw new StateConflictError('Group message evidence changed during decryption.');
+            const mutations = [{ kind: 'delete', ...groupPendingMessageKey(group, sequence) }];
+            const result = error ? { state: 'processed', error } : { state: 'processed' };
+            if (error)
+                mutations.push({ kind: 'put', ...groupEventKey(group, sequence), value: { ...current, rejection: { code: error.code, message: error.message } } });
+            else {
+                const content = payload;
+                let next = decodeGroupProjection(requireObject(currentGroup.projection), group);
+                const before = next;
+                if (content.$type === 'meshline.group.member.nickname.update')
+                    next = applyGroupNickname(next, this.accountId, sender.account, sequence, groupMemberNicknameUpdateCodec.decode(content).nickname);
+                const groupRecord = next === before ? undefined : { ...currentGroup, projection: encodeGroupProjection(next) };
+                if (groupRecord)
+                    mutations.push({ kind: 'put', ...groupKey(group), value: groupRecord });
+                const isMessage = content.$type === 'meshline.group.message.content';
+                mutations.push({ kind: 'put', ...groupEventKey(group, sequence), value: { ...current, decryptedPayload: content, isMessage } });
+                return { mutations, result: { state: 'processed', ...(groupRecord ? { nicknameChanged: true, groupRecord } : {}), ...(isMessage ? { message: {
+                                ...groupMessageCodec.decode(content), group: { ...group }, sequence, sender: sender.account, senderDeviceId: event.signerDeviceId, messageId: envelope.messageId, createdAt: envelope.createdAt, acceptedAt: event.acceptedAt,
+                            } } : {}) } };
+            }
+            return { mutations, result };
+        }, signal);
+    }
+}
+//# sourceMappingURL=messages.js.map

package/dist/groups/messages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.js","sourceRoot":"","sources":["../../src/groups/messages.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,8BAA8B,EAAE,oBAAoB,EAAE,gBAAgB,EAAoC,MAAM,qBAAqB,CAAC;AAC7L,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAE/D,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,kBAAkB,EAAmB,MAAM,qBAAqB,CAAC;AACxG,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,aAAa,EAAE,aAAa,EAAE,QAAQ,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAW/I,8IAA8I;AAC9I,MAAM,UAAU,kBAAkB,CAAC,UAA2B,EAAE,SAAiB,EAAE,MAAc,EAAE,QAAgB,EAAE,QAAuB;IACxI,kBAAkB,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC;IAAC,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC;IAC9J,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,IAAI,QAAQ,GAAG,QAAQ,CAAC,gBAAgB,IAAI,QAAQ,GAAG,MAAM,CAAC,gBAAgB,IAAI,QAAQ,IAAI,CAAC,MAAM,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,UAAU,CAAC;IACzK,MAAM,IAAI,GAAG,EAAE,GAAG,MAAM,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC;IAAC,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;;QAAM,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IACnI,OAAO,EAAE,GAAG,UAAU,EAAE,OAAO,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;AAChH,CAAC;AAED,6HAA6H;AAC7H,MAAM,OAAO,qBAAqB;IACT,KAAK;IAA0B,OAAO;IAA2B,SAAS;IAAmB,OAAO;IAAzH,YAAqB,KAAoB,EAAW,OAAuB,EAAW,SAAiB,EAAW,OAAgC;qBAA7H,KAAK;uBAA0B,OAAO;yBAA2B,SAAS;uBAAmB,OAAO;IAA4B,CAAC;IACtJ,KAAK,CAAC,cAAc,CAAC,KAAe,EAAE,SAA2E,EAAE,MAAoB;QACnI,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAAC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,wBAAwB,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,OAAO,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;QAClJ,IAAI,CAAC;YACD,OAAO,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;gBAAC,IAAI,CAAC,IAAI,CAAC,MAAM;oBAAE,MAAM;gBACzE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;oBAAC,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;oBAAC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;oBAAC,IAAI,MAAM,CAAC,KAAK,KAAK,WAAW;wBAAE,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBAAC,CAAC;YACzN,CAAC;QACL,CAAC;gBAAS,CAAC;YAAC,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IACzC,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,KAAe,EAAE,QAAgB,EAAE,MAAoB;QACjE,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAAC,kBAAkB,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QACjF,MAAM,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,sBAAsB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC3G,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAAC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;QAAC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;QAC/I,IAAI,QAAQ,EAAE,OAAO,KAAK,KAAK,CAAC,OAAO,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,+DAA+D,CAAC,CAAC;QAChK,MAAM,UAAU,GAAG,qBAAqB,CAAC,aAAa,CAAC,QAAQ,CAAC,UAAW,CAAC,EAAE,KAAK,CAAC,CAAC;QACrF,IAAI,MAAM,CAAC,gBAAgB,KAAK,SAAS,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,MAAM;YAAE,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC;QAC9I,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,KAAM,CAAC,CAAC;QAAC,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,OAAQ,CAAC,CAAC;QAAC,MAAM,MAAM,GAAG,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,WAAY,CAAC,CAAC;QACvK,IAAI,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,UAAU,CAAC,QAAQ,GAAG,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC,OAAO,IAAI,OAAO,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc;YAAE,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,wEAAwE,CAAC,CAAC;QAChR,MAAM,QAAQ,GAAG,yBAAyB,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACjE,IAAI,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,IAAI,QAAQ,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK;YAAE,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,2DAA2D,CAAC,CAAC;QAC1Q,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC;QAC/F,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU;YAAE,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,kDAAkD,CAAC,CAAC;QAC7H,mHAAmH;QACnH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAAC,IAAI,CAAC,MAAM;YAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;QACpI,IAAI,OAA+B,CAAC;QAAC,IAAI,KAAgC,CAAC;QAC1E,IAAI,CAAC;YACD,cAAc,CAAC,MAAM,CAAC,CAAC;YAAC,IAAI,CAAC;gBAAC,aAAa,CAAC,MAAM,EAAE,EAAE,EAAE,2BAA2B,CAAC,CAAC;YAAC,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,MAAM,IAAI,mBAAmB,CAAC,uDAAuD,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;YAAC,CAAC;YAC5M,IAAI,CAAC;gBACD,OAAO,GAAG,mBAAmB,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,CAAC,cAAe,EAAE,iBAAiB,EAAE,MAAM,EAAE,CAAC,CAAC;gBAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;gBAC5K,IAAI,OAAO,CAAC,KAAK,KAAK,gCAAgC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,QAAQ;oBAAE,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,2DAA2D,CAAC,CAAC;YACrO,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,IAAI,CAAC,CAAC,KAAK,YAAY,aAAa,CAAC;oBAAE,MAAM,KAAK,CAAC;gBAAC,KAAK,GAAG,KAAK,CAAC;YAAC,CAAC;QAC1F,CAAC;gBAAS,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QAC7B,cAAc,CAAC,MAAM,CAAC,CAAC;QACvB,OAAO,WAAW,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE;YAC/C,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;YAAC,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;YAC9F,IAAI,OAAO,EAAE,gBAAgB,KAAK,SAAS,IAAI,OAAO,EAAE,SAAS,KAAK,SAAS;gBAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAkC,EAAE,CAAC;YACjL,IAAI,aAAa,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,aAAa,CAAC,MAAM,CAAC,IAAI,YAAY,EAAE,OAAO,KAAK,KAAK,CAAC,OAAO;gBAAE,MAAM,IAAI,kBAAkB,CAAC,mDAAmD,CAAC,CAAC;YAC3L,MAAM,SAAS,GAAoB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,sBAAsB,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;YACpG,MAAM,MAAM,GAAiC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;YAC5G,IAAI,KAAK;gBAAE,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;iBACzJ,CAAC;gBACF,MAAM,OAAO,GAAG,OAAQ,CAAC;gBAAC,IAAI,IAAI,GAAG,qBAAqB,CAAC,aAAa,CAAC,YAAY,CAAC,UAAW,CAAC,EAAE,KAAK,CAAC,CAAC;gBAAC,MAAM,MAAM,GAAG,IAAI,CAAC;gBAChI,IAAI,OAAO,CAAC,KAAK,KAAK,uCAAuC;oBAAE,IAAI,GAAG,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,8BAA8B,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC;gBAClM,MAAM,WAAW,GAAG,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,YAAY,EAAE,UAAU,EAAE,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/G,IAAI,WAAW;oBAAE,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;gBACzF,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,KAAK,gCAAgC,CAAC;gBACrE,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;gBAChI,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE;gCACzI,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,CAAC,cAAe,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU;6BACjO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAkC,EAAE,CAAC;YAClD,CAAC;YACD,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;QACjC,CAAC,EAAE,MAAM,CAAC,CAAC;IACf,CAAC;CACJ"}

package/dist/groups/operations.d.ts

@@ -0,0 +1,57 @@
+import { type GroupState } from '../models/group-management.js';
+import { type GroupRef } from '../models/groups.js';
+import type { NetworkContext } from '../protocol/context.js';
+import { type JsonObject } from '../protocol/json.js';
+import type { MeshlineStore } from '../storage/store.js';
+import { type PreparedGroupMemberKey } from './secrets.js';
+export declare const groupOperationMethods: {
+    readonly 'group.create': 'POST';
+    readonly 'group.update': 'PATCH';
+    readonly 'group.close': 'DELETE';
+    readonly 'group.message.send': 'POST';
+    readonly 'group.member.leave': 'DELETE';
+    readonly 'group.member.remove': 'DELETE';
+    readonly 'group.member.ban': 'PUT';
+    readonly 'group.member.unban': 'DELETE';
+    readonly 'group.role.update': 'PUT';
+    readonly 'group.owner.transfer': 'POST';
+    readonly 'group.invite.create': 'POST';
+    readonly 'group.invite.revoke': 'DELETE';
+    readonly 'group.application.submit': 'POST';
+    readonly 'group.application.approve': 'POST';
+    readonly 'group.application.reject': 'DELETE';
+    readonly 'group.member.recovery.submit': 'POST';
+    readonly 'group.member.recovery.approve': 'POST';
+    readonly 'group.member.recovery.reject': 'DELETE';
+    readonly 'group.secret.rotation.commit': 'POST';
+};
+export type GroupOperationMethod = keyof typeof groupOperationMethods;
+export interface GroupOperation {
+    readonly group: GroupRef;
+    readonly method: GroupOperationMethod;
+    readonly request: JsonObject;
+    readonly accepted?: true;
+    readonly acceptedSequence?: number;
+    readonly acceptedResult?: JsonObject;
+}
+export declare function groupOperationPayload(operation: GroupOperation): JsonObject | undefined;
+/** Exact signed requests survive uncertain responses; positive receipts are durable before any follow-up I/O. */
+export declare class GroupOperations {
+    readonly store: MeshlineStore;
+    readonly context: NetworkContext;
+    readonly accountId: string;
+    constructor(store: MeshlineStore, context: NetworkContext, accountId: string);
+    all(signal?: AbortSignal): Promise<readonly GroupOperation[]>;
+    ensureAvailable(group: GroupRef, method: GroupOperationMethod, signal?: AbortSignal): Promise<void>;
+    save(operation: GroupOperation, member: PreparedGroupMemberKey | undefined, signal?: AbortSignal, preview?: GroupState): Promise<void>;
+    acknowledge(operation: GroupOperation, acceptedSequence?: number, acceptedResult?: JsonObject): Promise<GroupOperation>;
+    acceptedEvent(operation: GroupOperation, signal?: AbortSignal): Promise<{
+        sequence: number;
+        record: JsonObject;
+    } | undefined>;
+    /** Approval can outlive a lost or malformed submission acknowledgement. */
+    acceptedMemberRequest(operation: GroupOperation, signal?: AbortSignal): Promise<boolean>;
+    /** The caller supplies verified evidence or a positive acknowledgement. Rejections never erase an earlier uncertain operation. */
+    complete(operation: GroupOperation, localEffect?: boolean): Promise<JsonObject | undefined>;
+}
+//# sourceMappingURL=operations.d.ts.map

package/dist/groups/operations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operations.d.ts","sourceRoot":"","sources":["../../src/groups/operations.ts"],"names":[],"mappings":"AAEA,OAAO,EAAuU,KAAK,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAErY,OAAO,EAA6E,KAAK,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/H,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE7D,OAAO,EAAoD,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACxG,OAAO,KAAK,EAAE,aAAa,EAA4B,MAAM,qBAAqB,CAAC;AAInF,OAAO,EAA0C,KAAK,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAEnG,eAAO,MAAM,qBAAqB;6BACd,MAAM;6BAAkB,OAAO;4BAAiB,QAAQ;mCAAwB,MAAM;mCAChF,QAAQ;oCAAyB,QAAQ;iCAAsB,KAAK;mCAAwB,QAAQ;kCACrG,KAAK;qCAA0B,MAAM;oCACnC,MAAM;oCAAyB,QAAQ;yCAClC,MAAM;0CAA+B,MAAM;yCAA8B,QAAQ;6CAC7E,MAAM;8CAAmC,MAAM;6CAAkC,QAAQ;6CACzF,MAAM;CACK,CAAC;AAChD,MAAM,MAAM,oBAAoB,GAAG,MAAM,OAAO,qBAAqB,CAAC;AACtE,MAAM,WAAW,cAAc;IAAG,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,UAAU,CAAA;CAAE;AAGrO,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,cAAc,GAAG,UAAU,GAAG,SAAS,CAwBvF;AASD,iHAAiH;AACjH,qBAAa,eAAe;IACZ,QAAQ,CAAC,KAAK,EAAE,aAAa;IAAE,QAAQ,CAAC,OAAO,EAAE,cAAc;IAAE,QAAQ,CAAC,SAAS,EAAE,MAAM;IAAvG,YAAqB,KAAK,EAAE,aAAa,EAAW,OAAO,EAAE,cAAc,EAAW,SAAS,EAAE,MAAM,EAAmC;IACpI,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,cAAc,EAAE,CAAC,CAAsR;IACnV,eAAe,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,oBAAoB,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAExG;IACK,IAAI,CAAC,SAAS,EAAE,cAAc,EAAE,MAAM,EAAE,sBAAsB,GAAG,SAAS,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAiB3I;IACK,WAAW,CAAC,SAAS,EAAE,cAAc,EAAE,gBAAgB,CAAC,EAAE,MAAM,EAAE,cAAc,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,cAAc,CAAC,CAQ5H;IACK,aAAa,CAAC,SAAS,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,UAAU,CAAA;KAAE,GAAG,SAAS,CAAC,CAQlI;IACD,2EAA2E;IACrE,qBAAqB,CAAC,SAAS,EAAE,cAAc,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAuB7F;IACD,kIAAkI;IAC5H,QAAQ,CAAC,SAAS,EAAE,cAAc,EAAE,WAAW,UAAQ,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAc9F;CACJ"}