@meshline/sdk 0.0.0-stage → 0.1.0-alpha.1

package/dist/models/groups.d.ts

@@ -0,0 +1,81 @@
+import { type ExtensibleModel, type ValueCodec } from '../protocol/codec.js';
+import { type NetworkContext } from '../protocol/context.js';
+import { type JsonObject } from '../protocol/json.js';
+import { type ContentReference, type MessageBody } from './content.js';
+import { type DeviceCertificate } from './identity.js';
+import { type EncryptedPayload } from './messages.js';
+export interface GroupRef {
+    readonly groupId: string;
+    readonly relayId: string;
+}
+export declare function validateGroupRef(value: GroupRef): void;
+export interface GroupSecretBox extends ExtensibleModel {
+    readonly alg: string;
+    readonly enc: Uint8Array;
+    readonly sealedSecret: Uint8Array;
+}
+export declare const groupSecretBoxCodec: import("../protocol/codec.js").ProtocolCodec<GroupSecretBox>;
+export declare function validateGroupSecretBox(value: GroupSecretBox): void;
+/** The sender identity is carried by the verified timeline event and certificate, never by this envelope. */
+export interface GroupMessageEnvelope extends ExtensibleModel {
+    readonly messageId: string;
+    readonly groupId: string;
+    readonly epoch: number;
+    readonly createdAt: number;
+    readonly payload: EncryptedPayload;
+    readonly deviceSignature: Uint8Array;
+}
+export declare const groupMessageEnvelopeCodec: import("../protocol/codec.js").ProtocolCodec<GroupMessageEnvelope>;
+export declare const groupMessageEnvelopeInput: (value: GroupMessageEnvelope, context: NetworkContext) => Uint8Array;
+export declare function validateGroupMessageEnvelope(value: GroupMessageEnvelope): void;
+/** Historical signature integrity only; membership, epoch and event ordering require verified management state. */
+export declare function verifyGroupMessageEnvelope(value: GroupMessageEnvelope, sender: DeviceCertificate, signerDeviceId: string, context: NetworkContext): void;
+export interface GroupMessage extends ExtensibleModel {
+    readonly body?: MessageBody;
+    readonly attachments?: readonly ContentReference[];
+    readonly replyToSeq?: number;
+}
+export declare const groupMessageCodec: import("../protocol/codec.js").ProtocolCodec<GroupMessage>;
+export declare function validateGroupMessage(value: GroupMessage): void;
+export interface GroupMemberNicknameUpdate extends ExtensibleModel {
+    readonly nickname: string | null;
+}
+export declare const groupMemberNicknameUpdateCodec: import("../protocol/codec.js").ProtocolCodec<GroupMemberNicknameUpdate>;
+export declare function validateGroupMemberNicknameUpdate(value: GroupMemberNicknameUpdate): void;
+/** Preserves authenticated but business-invalid content so the receiver can record diagnostics without stalling its cursor. */
+export declare const groupPayloadCodec: ValueCodec<JsonObject>;
+export declare function validateGroupPayload(value: JsonObject): void;
+export interface GroupMemberKey extends ExtensibleModel {
+    readonly account: string;
+    readonly memberEncryptionPublicKey: Uint8Array;
+}
+export declare const groupMemberKeyCodec: import("../protocol/codec.js").ProtocolCodec<GroupMemberKey>;
+export declare function validateGroupMemberKey(value: GroupMemberKey): void;
+export interface GroupHistorySecret extends ExtensibleModel {
+    readonly groupId: string;
+    readonly epoch: number;
+    readonly applicationSecret: Uint8Array;
+}
+export declare const groupHistorySecretCodec: import("../protocol/codec.js").ProtocolCodec<GroupHistorySecret>;
+export declare function validateGroupHistorySecret(value: GroupHistorySecret): void;
+export interface GroupMemberPrivateState extends ExtensibleModel, GroupRef {
+    readonly memberEncryptionPrivateKey: Uint8Array;
+}
+export declare const groupMemberPrivateStateCodec: import("../protocol/codec.js").ProtocolCodec<GroupMemberPrivateState>;
+export declare function validateGroupMemberPrivateState(value: GroupMemberPrivateState): void;
+export interface AccountGroupHistorySecretSync extends ExtensibleModel {
+    readonly secrets: readonly GroupHistorySecret[];
+}
+export declare const accountGroupHistorySecretSyncCodec: import("../protocol/codec.js").ProtocolCodec<AccountGroupHistorySecretSync>;
+export declare function validateAccountGroupHistorySecretSync(value: AccountGroupHistorySecretSync): void;
+export interface AccountGroupPrivateStateSync extends ExtensibleModel {
+    readonly states: readonly GroupMemberPrivateState[];
+}
+export declare const accountGroupPrivateStateSyncCodec: import("../protocol/codec.js").ProtocolCodec<AccountGroupPrivateStateSync>;
+export declare function validateAccountGroupPrivateStateSync(value: AccountGroupPrivateStateSync): void;
+export interface AccountGroupPrivateStateRequest extends ExtensibleModel {
+    readonly groupId?: string;
+}
+export declare const accountGroupPrivateStateRequestCodec: import("../protocol/codec.js").ProtocolCodec<AccountGroupPrivateStateRequest>;
+export declare function validateAccountGroupPrivateStateRequest(value: AccountGroupPrivateStateRequest): void;
+//# sourceMappingURL=groups.d.ts.map

package/dist/models/groups.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"groups.d.ts","sourceRoot":"","sources":["../../src/models/groups.ts"],"names":[],"mappings":"AAIA,OAAO,EAA4C,KAAK,eAAe,EAAE,KAAK,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvH,OAAO,EAAgB,KAAK,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE3E,OAAO,EAA+D,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEnH,OAAO,EAA4G,KAAK,gBAAgB,EAAE,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AACjL,OAAO,EAAsC,KAAK,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAC3F,OAAO,EAAmD,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEvG,MAAM,WAAW,QAAQ;IAAG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAChF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,QAAQ,GAAG,IAAI,CAAgF;AAEvI,MAAM,WAAW,cAAe,SAAQ,eAAe;IAAG,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,UAAU,CAAA;CAAE;AAC7I,eAAO,MAAM,mBAAmB,8DAAgK,CAAC;AACjM,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,cAAc,GAAG,IAAI,CAIlE;AAED,6GAA6G;AAC7G,MAAM,WAAW,oBAAqB,SAAQ,eAAe;IACzD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IACzG,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAC;CAC5E;AACD,eAAO,MAAM,yBAAyB,oEAEsD,CAAC;AAC7F,eAAO,MAAM,yBAAyB,UAAW,oBAAoB,WAAW,cAAc,KAAG,UAAkG,CAAC;AACpM,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,oBAAoB,GAAG,IAAI,CAI9E;AACD,mHAAmH;AACnH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,oBAAoB,EAAE,MAAM,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,IAAI,CAIxJ;AAED,MAAM,WAAW,YAAa,SAAQ,eAAe;IAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE;AACvK,eAAO,MAAM,iBAAiB,4DAC+E,CAAC;AAC9G,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAI9D;AACD,MAAM,WAAW,yBAA0B,SAAQ,eAAe;IAAG,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE;AACvG,eAAO,MAAM,8BAA8B,yEAAmJ,CAAC;AAC/L,wBAAgB,iCAAiC,CAAC,KAAK,EAAE,yBAAyB,GAAG,IAAI,CAGxF;AACD,+HAA+H;AAC/H,eAAO,MAAM,iBAAiB,EAAE,UAAU,CAAC,UAAU,CAQpD,CAAC;AACF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAI5D;AAED,MAAM,WAAW,cAAe,SAAQ,eAAe;IAAG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,yBAAyB,EAAE,UAAU,CAAA;CAAE;AACpI,eAAO,MAAM,mBAAmB,8DAAgK,CAAC;AACjM,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,cAAc,GAAG,IAAI,CAAqL;AACxP,MAAM,WAAW,kBAAmB,SAAQ,eAAe;IAAG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,iBAAiB,EAAE,UAAU,CAAA;CAAE;AACxJ,eAAO,MAAM,uBAAuB,kEAA6L,CAAC;AAClO,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,CAA2N;AACtS,MAAM,WAAW,uBAAwB,SAAQ,eAAe,EAAE,QAAQ;IAAG,QAAQ,CAAC,0BAA0B,EAAE,UAAU,CAAA;CAAE;AAC9H,eAAO,MAAM,4BAA4B,uEAAwN,CAAC;AAClQ,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,uBAAuB,GAAG,IAAI,CAAuL;AAC5Q,MAAM,WAAW,6BAA8B,SAAQ,eAAe;IAAG,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAA;CAAE;AAC1H,eAAO,MAAM,kCAAkC,6EAAoK,CAAC;AACpN,wBAAgB,qCAAqC,CAAC,KAAK,EAAE,6BAA6B,GAAG,IAAI,CAIhG;AACD,MAAM,WAAW,4BAA6B,SAAQ,eAAe;IAAG,QAAQ,CAAC,MAAM,EAAE,SAAS,uBAAuB,EAAE,CAAA;CAAE;AAC7H,eAAO,MAAM,iCAAiC,4EAA6J,CAAC;AAC5M,wBAAgB,oCAAoC,CAAC,KAAK,EAAE,4BAA4B,GAAG,IAAI,CAG9F;AACD,MAAM,WAAW,+BAAgC,SAAQ,eAAe;IAAG,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE;AACtG,eAAO,MAAM,oCAAoC,+EAAuJ,CAAC;AACzM,wBAAgB,uCAAuC,CAAC,KAAK,EAAE,+BAA+B,GAAG,IAAI,CAA6J"}

package/dist/models/groups.js

@@ -0,0 +1,127 @@
+import { requireLength, verifyDevice } from '../crypto/primitives.js';
+import { ProtocolError } from '../errors.js';
+import { validateIdentifier } from '../identity/identifiers.js';
+import { validateAccountId, validateRelayId } from '../identity/neo.js';
+import { array, bytes, defineCodec, integer, text } from '../protocol/codec.js';
+import { signingInput } from '../protocol/context.js';
+import { encodeUtf8 } from '../protocol/encoding.js';
+import { canonicalJson, parseJson, requireObject, requireSafeInteger } from '../protocol/json.js';
+import { validateCompleteObject } from '../protocol/validation.js';
+import { containsNonWhitespace, contentReferenceCodec, messageBodyCodec, validateAttachments, validateMessageBody } from './content.js';
+import { certificateId, validateCertificate } from './identity.js';
+import { encryptedPayloadCodec, validateEncryptedPayload } from './messages.js';
+export function validateGroupRef(value) { validateIdentifier('group', value.groupId); validateRelayId(value.relayId); }
+export const groupSecretBoxCodec = defineCodec({ alg: { wire: 'alg', codec: text }, enc: { wire: 'enc', codec: bytes }, sealedSecret: { wire: 'sealed_secret', codec: bytes } });
+export function validateGroupSecretBox(value) {
+    validateCompleteObject(groupSecretBoxCodec.encode(value));
+    if (value.alg !== 'X25519-HKDF-SHA256-AES256GCM')
+        throw new ProtocolError('unsupported_algorithm', 'Unsupported group secret box algorithm.');
+    requireLength(value.enc, 32, 'Ephemeral public key');
+    requireLength(value.sealedSecret, 60, 'Sealed group secret');
+}
+export const groupMessageEnvelopeCodec = defineCodec({ messageId: { wire: 'message_id', codec: text }, groupId: { wire: 'group_id', codec: text },
+    epoch: { wire: 'epoch', codec: integer }, createdAt: { wire: 'created_at', codec: integer }, payload: { wire: 'payload', codec: encryptedPayloadCodec },
+    deviceSignature: { wire: 'device_signature', codec: bytes } }, 'meshline.group.message');
+export const groupMessageEnvelopeInput = (value, context) => signingInput(groupMessageEnvelopeCodec.encode(value), context, ['device_signature']);
+export function validateGroupMessageEnvelope(value) {
+    validateCompleteObject(groupMessageEnvelopeCodec.encode(value));
+    validateIdentifier('message', value.messageId);
+    validateIdentifier('group', value.groupId);
+    requireSafeInteger(value.epoch, 0);
+    requireSafeInteger(value.createdAt, 0);
+    requireLength(value.deviceSignature, 64, 'Group message signature');
+    validateEncryptedPayload(value.payload);
+    if (encodeUtf8(groupMessageEnvelopeCodec.stringify(value)).length > 262144)
+        throw new ProtocolError('invalid_size', 'Group message envelope exceeds 262144 canonical UTF-8 bytes.');
+}
+/** Historical signature integrity only; membership, epoch and event ordering require verified management state. */
+export function verifyGroupMessageEnvelope(value, sender, signerDeviceId, context) {
+    validateGroupMessageEnvelope(value);
+    validateCertificate(sender, context);
+    validateIdentifier('device', signerDeviceId);
+    if (certificateId(sender, context) !== signerDeviceId)
+        throw new ProtocolError('invalid_identity', 'Group event signing certificate belongs to another device.');
+    if (!verifyDevice(groupMessageEnvelopeInput(value, context), value.deviceSignature, sender.signingPublicKey))
+        throw new ProtocolError('invalid_signature', 'Invalid group message signature.');
+}
+export const groupMessageCodec = defineCodec({ body: { wire: 'body', codec: messageBodyCodec, optional: true }, attachments: { wire: 'attachments', codec: array(contentReferenceCodec), optional: true },
+    replyToSeq: { wire: 'reply_to_seq', codec: integer, optional: true } }, 'meshline.group.message.content');
+export function validateGroupMessage(value) {
+    validateCompleteObject(groupMessageCodec.encode(value));
+    if (value.body)
+        validateMessageBody(value.body);
+    if (value.attachments)
+        validateAttachments(value.attachments);
+    if (!value.body && !value.attachments?.length)
+        throw new ProtocolError('invalid_message', 'A group message requires a body or at least one attachment.');
+    if (value.replyToSeq !== undefined)
+        requireSafeInteger(value.replyToSeq, 1);
+}
+export const groupMemberNicknameUpdateCodec = defineCodec({ nickname: { wire: 'nickname', codec: text, nullable: true } }, 'meshline.group.member.nickname.update');
+export function validateGroupMemberNicknameUpdate(value) {
+    const wire = groupMemberNicknameUpdateCodec.encode(value);
+    if (wire.nickname === null)
+        delete wire.nickname;
+    validateCompleteObject(wire);
+    if (value.nickname !== null && (!containsNonWhitespace(value.nickname) || encodeUtf8(value.nickname).length > 256))
+        throw new ProtocolError('invalid_nickname', 'A group nickname requires non-whitespace text and at most 256 UTF-8 bytes.');
+}
+/** Preserves authenticated but business-invalid content so the receiver can record diagnostics without stalling its cursor. */
+export const groupPayloadCodec = {
+    decode(value) {
+        const object = requireObject(value);
+        const copy = requireObject(parseJson(canonicalJson(object)));
+        if (typeof copy.$type !== 'string')
+            throw new ProtocolError('invalid_type', 'Group content requires a string $type.');
+        const complete = { ...copy };
+        if (complete.$type === 'meshline.group.member.nickname.update' && complete.nickname === null)
+            delete complete.nickname;
+        validateCompleteObject(complete);
+        return copy;
+    },
+    encode(value) { return this.decode(value); },
+};
+export function validateGroupPayload(value) {
+    const wire = groupPayloadCodec.decode(value);
+    if (wire.$type === 'meshline.group.message.content')
+        validateGroupMessage(groupMessageCodec.decode(wire));
+    else if (wire.$type === 'meshline.group.member.nickname.update')
+        validateGroupMemberNicknameUpdate(groupMemberNicknameUpdateCodec.decode(wire));
+}
+export const groupMemberKeyCodec = defineCodec({ account: { wire: 'account', codec: text }, memberEncryptionPublicKey: { wire: 'member_encryption_public_key', codec: bytes } });
+export function validateGroupMemberKey(value) { validateCompleteObject(groupMemberKeyCodec.encode(value)); validateAccountId(value.account); requireLength(value.memberEncryptionPublicKey, 32, 'Member encryption public key'); }
+export const groupHistorySecretCodec = defineCodec({ groupId: { wire: 'group_id', codec: text }, epoch: { wire: 'epoch', codec: integer }, applicationSecret: { wire: 'application_secret', codec: bytes } });
+export function validateGroupHistorySecret(value) { validateCompleteObject(groupHistorySecretCodec.encode(value)); validateIdentifier('group', value.groupId); requireSafeInteger(value.epoch, 0); requireLength(value.applicationSecret, 32, 'Epoch application secret'); }
+export const groupMemberPrivateStateCodec = defineCodec({ groupId: { wire: 'group_id', codec: text }, relayId: { wire: 'relay_id', codec: text }, memberEncryptionPrivateKey: { wire: 'member_encryption_private_key', codec: bytes } });
+export function validateGroupMemberPrivateState(value) { validateCompleteObject(groupMemberPrivateStateCodec.encode(value)); validateGroupRef(value); requireLength(value.memberEncryptionPrivateKey, 32, 'Member encryption private key'); }
+export const accountGroupHistorySecretSyncCodec = defineCodec({ secrets: { wire: 'secrets', codec: array(groupHistorySecretCodec) } }, 'meshline.account.group.history_secret.sync');
+export function validateAccountGroupHistorySecretSync(value) {
+    validateCompleteObject(accountGroupHistorySecretSyncCodec.encode(value));
+    if (!value.secrets.length)
+        throw new ProtocolError('invalid_size', 'History secret synchronization requires at least one secret.');
+    const ids = new Set();
+    for (const secret of value.secrets) {
+        validateGroupHistorySecret(secret);
+        const id = `${secret.groupId}|${secret.epoch}`;
+        if (ids.has(id))
+            throw new ProtocolError('duplicate_secret', 'History secret synchronization repeats a group and epoch.');
+        ids.add(id);
+    }
+}
+export const accountGroupPrivateStateSyncCodec = defineCodec({ states: { wire: 'states', codec: array(groupMemberPrivateStateCodec) } }, 'meshline.account.group.state.sync');
+export function validateAccountGroupPrivateStateSync(value) {
+    validateCompleteObject(accountGroupPrivateStateSyncCodec.encode(value));
+    if (!value.states.length)
+        throw new ProtocolError('invalid_size', 'Private state synchronization requires at least one state.');
+    const ids = new Set();
+    for (const state of value.states) {
+        validateGroupMemberPrivateState(state);
+        if (ids.has(state.groupId))
+            throw new ProtocolError('duplicate_group', 'Private state synchronization repeats a group.');
+        ids.add(state.groupId);
+    }
+}
+export const accountGroupPrivateStateRequestCodec = defineCodec({ groupId: { wire: 'group_id', codec: text, optional: true } }, 'meshline.account.group.state.request');
+export function validateAccountGroupPrivateStateRequest(value) { validateCompleteObject(accountGroupPrivateStateRequestCodec.encode(value)); if (value.groupId !== undefined)
+    validateIdentifier('group', value.groupId); }
+//# sourceMappingURL=groups.js.map

package/dist/models/groups.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"groups.js","sourceRoot":"","sources":["../../src/models/groups.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACtE,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAyC,MAAM,sBAAsB,CAAC;AACvH,OAAO,EAAE,YAAY,EAAuB,MAAM,wBAAwB,CAAC;AAC3E,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,kBAAkB,EAAmB,MAAM,qBAAqB,CAAC;AACnH,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,mBAAmB,EAA2C,MAAM,cAAc,CAAC;AACjL,OAAO,EAAE,aAAa,EAAE,mBAAmB,EAA0B,MAAM,eAAe,CAAC;AAC3F,OAAO,EAAE,qBAAqB,EAAE,wBAAwB,EAAyB,MAAM,eAAe,CAAC;AAGvG,MAAM,UAAU,gBAAgB,CAAC,KAAe,IAAU,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAGvI,MAAM,CAAC,MAAM,mBAAmB,GAAG,WAAW,CAAiB,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;AACjM,MAAM,UAAU,sBAAsB,CAAC,KAAqB;IACxD,sBAAsB,CAAC,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1D,IAAI,KAAK,CAAC,GAAG,KAAK,8BAA8B;QAAE,MAAM,IAAI,aAAa,CAAC,uBAAuB,EAAE,yCAAyC,CAAC,CAAC;IAC9I,aAAa,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,EAAE,sBAAsB,CAAC,CAAC;IAAC,aAAa,CAAC,KAAK,CAAC,YAAY,EAAE,EAAE,EAAE,qBAAqB,CAAC,CAAC;AACvH,CAAC;AAOD,MAAM,CAAC,MAAM,yBAAyB,GAAG,WAAW,CAAuB,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE;IACnK,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,qBAAqB,EAAE;IACvJ,eAAe,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,wBAAwB,CAAC,CAAC;AAC7F,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,KAA2B,EAAE,OAAuB,EAAc,EAAE,CAAC,YAAY,CAAC,yBAAyB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,kBAAkB,CAAC,CAAC,CAAC;AACpM,MAAM,UAAU,4BAA4B,CAAC,KAA2B;IACpE,sBAAsB,CAAC,yBAAyB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAAC,kBAAkB,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5J,kBAAkB,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAAC,kBAAkB,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAAC,aAAa,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,EAAE,yBAAyB,CAAC,CAAC;IAAC,wBAAwB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACzL,IAAI,UAAU,CAAC,yBAAyB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,MAAM;QAAE,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,8DAA8D,CAAC,CAAC;AACxL,CAAC;AACD,mHAAmH;AACnH,MAAM,UAAU,0BAA0B,CAAC,KAA2B,EAAE,MAAyB,EAAE,cAAsB,EAAE,OAAuB;IAC9I,4BAA4B,CAAC,KAAK,CAAC,CAAC;IAAC,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,kBAAkB,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IACxH,IAAI,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,cAAc;QAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,4DAA4D,CAAC,CAAC;IACjK,IAAI,CAAC,YAAY,CAAC,yBAAyB,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,eAAe,EAAE,MAAM,CAAC,gBAAgB,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,mBAAmB,EAAE,kCAAkC,CAAC,CAAC;AACnM,CAAC;AAGD,MAAM,CAAC,MAAM,iBAAiB,GAAG,WAAW,CAAe,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,KAAK,CAAC,qBAAqB,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE;IACnN,UAAU,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,gCAAgC,CAAC,CAAC;AAC9G,MAAM,UAAU,oBAAoB,CAAC,KAAmB;IACpD,sBAAsB,CAAC,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAAC,IAAI,KAAK,CAAC,IAAI;QAAE,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAAC,IAAI,KAAK,CAAC,WAAW;QAAE,mBAAmB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACxK,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM;QAAE,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,6DAA6D,CAAC,CAAC;IACzJ,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS;QAAE,kBAAkB,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,CAAC,MAAM,8BAA8B,GAAG,WAAW,CAA4B,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,uCAAuC,CAAC,CAAC;AAC/L,MAAM,UAAU,iCAAiC,CAAC,KAAgC;IAC9E,MAAM,IAAI,GAAG,8BAA8B,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAAC,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;IAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAC1I,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,4EAA4E,CAAC,CAAC;AAClP,CAAC;AACD,+HAA+H;AAC/H,MAAM,CAAC,MAAM,iBAAiB,GAA2B;IACrD,MAAM,CAAC,KAAK;QACR,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QAAC,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAClG,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;YAAE,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,wCAAwC,CAAC,CAAC;QACtH,MAAM,QAAQ,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;QAAC,IAAI,QAAQ,CAAC,KAAK,KAAK,uCAAuC,IAAI,QAAQ,CAAC,QAAQ,KAAK,IAAI;YAAE,OAAO,QAAQ,CAAC,QAAQ,CAAC;QACrJ,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAClD,CAAC;IACD,MAAM,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;CAC/C,CAAC;AACF,MAAM,UAAU,oBAAoB,CAAC,KAAiB;IAClD,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,IAAI,CAAC,KAAK,KAAK,gCAAgC;QAAE,oBAAoB,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;SACrG,IAAI,IAAI,CAAC,KAAK,KAAK,uCAAuC;QAAE,iCAAiC,CAAC,8BAA8B,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;AACpJ,CAAC;AAGD,MAAM,CAAC,MAAM,mBAAmB,GAAG,WAAW,CAAiB,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,yBAAyB,EAAE,EAAE,IAAI,EAAE,8BAA8B,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;AACjM,MAAM,UAAU,sBAAsB,CAAC,KAAqB,IAAU,sBAAsB,CAAC,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,EAAE,8BAA8B,CAAC,CAAC,CAAC,CAAC;AAExP,MAAM,CAAC,MAAM,uBAAuB,GAAG,WAAW,CAAqB,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,iBAAiB,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;AAClO,MAAM,UAAU,0BAA0B,CAAC,KAAyB,IAAU,sBAAsB,CAAC,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,iBAAiB,EAAE,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC,CAAC;AAEtS,MAAM,CAAC,MAAM,4BAA4B,GAAG,WAAW,CAA0B,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,0BAA0B,EAAE,EAAE,IAAI,EAAE,+BAA+B,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;AAClQ,MAAM,UAAU,+BAA+B,CAAC,KAA8B,IAAU,sBAAsB,CAAC,4BAA4B,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,EAAE,+BAA+B,CAAC,CAAC,CAAC,CAAC;AAE5Q,MAAM,CAAC,MAAM,kCAAkC,GAAG,WAAW,CAAgC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,CAAC,uBAAuB,CAAC,EAAE,EAAE,EAAE,4CAA4C,CAAC,CAAC;AACpN,MAAM,UAAU,qCAAqC,CAAC,KAAoC;IACtF,sBAAsB,CAAC,kCAAkC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM;QAAE,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,8DAA8D,CAAC,CAAC;IAC7M,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAAC,KAAK,MAAM,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;QAAC,MAAM,EAAE,GAAG,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACpJ,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,2DAA2D,CAAC,CAAC;QAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;AACjJ,CAAC;AAED,MAAM,CAAC,MAAM,iCAAiC,GAAG,WAAW,CAA+B,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,4BAA4B,CAAC,EAAE,EAAE,EAAE,mCAAmC,CAAC,CAAC;AAC5M,MAAM,UAAU,oCAAoC,CAAC,KAAmC;IACpF,sBAAsB,CAAC,iCAAiC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,4DAA4D,CAAC,CAAC;IACzM,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAAC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QAAC,+BAA+B,CAAC,KAAK,CAAC,CAAC;QAAC,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,gDAAgD,CAAC,CAAC;QAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAAC,CAAC;AAClQ,CAAC;AAED,MAAM,CAAC,MAAM,oCAAoC,GAAG,WAAW,CAAkC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE,sCAAsC,CAAC,CAAC;AACzM,MAAM,UAAU,uCAAuC,CAAC,KAAsC,IAAU,sBAAsB,CAAC,oCAAoC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;IAAE,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC"}

package/dist/models/identity.d.ts

@@ -0,0 +1,47 @@
+import { type ExtensibleModel } from '../protocol/codec.js';
+import { NetworkContext } from '../protocol/context.js';
+export interface DeviceCertificate extends ExtensibleModel {
+    readonly account: string;
+    readonly accountPublicKey: Uint8Array;
+    readonly signingPublicKey: Uint8Array;
+    readonly encryptionPublicKey: Uint8Array;
+    readonly notBefore: number;
+    readonly expiresAt: number;
+    readonly deviceSignature: Uint8Array;
+    readonly accountSignature: Uint8Array;
+}
+export declare const deviceCertificateCodec: import("../protocol/codec.js").ProtocolCodec<DeviceCertificate>;
+export declare function certificateId(certificate: DeviceCertificate, context: NetworkContext): string;
+export declare function certificateDeviceInput(certificate: DeviceCertificate, context: NetworkContext): Uint8Array;
+export declare function certificateAccountInput(certificate: DeviceCertificate, context: NetworkContext): Uint8Array;
+/** Checks complete certificate integrity; current account authorization is a separate operation. */
+export declare function validateCertificate(certificate: DeviceCertificate, context: NetworkContext): void;
+export interface AccountDeviceState extends ExtensibleModel {
+    readonly account: string;
+    readonly accountPublicKey: Uint8Array;
+    readonly revision: number;
+    readonly certificates: readonly DeviceCertificate[];
+    readonly accountSignature: Uint8Array;
+}
+export declare const accountDeviceStateCodec: import("../protocol/codec.js").ProtocolCodec<AccountDeviceState>;
+export declare function deviceStateInput(state: AccountDeviceState, context: NetworkContext): Uint8Array;
+export declare function validateDeviceState(state: AccountDeviceState, context: NetworkContext): void;
+/** The state must have passed validateDeviceState before use as trusted authorization. */
+export declare function authorizedDevice(state: AccountDeviceState, deviceId: string, context: NetworkContext, now: number): DeviceCertificate;
+export interface AccountRoute extends ExtensibleModel {
+    readonly account: string;
+    readonly accountPublicKey: Uint8Array;
+    readonly revision: number;
+    readonly relayId: string;
+    readonly updatedAt: number;
+    readonly expiresAt: number;
+    readonly accountSignature: Uint8Array;
+    readonly relaySignature?: Uint8Array;
+}
+export declare const accountRouteCodec: import("../protocol/codec.js").ProtocolCodec<AccountRoute>;
+export declare function routeAccountInput(route: AccountRoute, context: NetworkContext): Uint8Array;
+export declare function routeRelayInput(route: AccountRoute, context: NetworkContext): Uint8Array;
+/** Relay acknowledgement, when present, must additionally be checked against the relay key. */
+export declare function validateRoute(route: AccountRoute, context: NetworkContext, now: number): void;
+export declare function compareRoutes(left: AccountRoute, right: AccountRoute): 'older' | 'newer' | 'equivalent' | 'conflict';
+//# sourceMappingURL=identity.d.ts.map

package/dist/models/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../src/models/identity.ts"],"names":[],"mappings":"AAIA,OAAO,EAA4C,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACtG,OAAO,EAAE,cAAc,EAAgB,MAAM,wBAAwB,CAAC;AAKtE,MAAM,WAAW,iBAAkB,SAAQ,eAAe;IACtD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,gBAAgB,EAAE,UAAU,CAAC;IACtC,QAAQ,CAAC,gBAAgB,EAAE,UAAU,CAAC;IACtC,QAAQ,CAAC,mBAAmB,EAAE,UAAU,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAC;IACrC,QAAQ,CAAC,gBAAgB,EAAE,UAAU,CAAC;CACzC;AAED,eAAO,MAAM,sBAAsB,iEASF,CAAC;AAElC,wBAAgB,aAAa,CAAC,WAAW,EAAE,iBAAiB,EAAE,OAAO,EAAE,cAAc,GAAG,MAAM,CAE7F;AAED,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,iBAAiB,EAAE,OAAO,EAAE,cAAc,GAAG,UAAU,CAE1G;AAED,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,iBAAiB,EAAE,OAAO,EAAE,cAAc,GAAG,UAAU,CAE3G;AAED,oGAAoG;AACpG,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,iBAAiB,EAAE,OAAO,EAAE,cAAc,GAAG,IAAI,CAgBjG;AAED,MAAM,WAAW,kBAAmB,SAAQ,eAAe;IACvD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,gBAAgB,EAAE,UAAU,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,YAAY,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACpD,QAAQ,CAAC,gBAAgB,EAAE,UAAU,CAAC;CACzC;AAED,eAAO,MAAM,uBAAuB,kEAID,CAAC;AAEpC,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,cAAc,GAAG,UAAU,CAE/F;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,cAAc,GAAG,IAAI,CAgB5F;AAED,0FAA0F;AAC1F,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,MAAM,GAAG,iBAAiB,CAOrI;AAED,MAAM,WAAW,YAAa,SAAQ,eAAe;IACjD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,gBAAgB,EAAE,UAAU,CAAC;IACtC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,UAAU,CAAC;IACtC,QAAQ,CAAC,cAAc,CAAC,EAAE,UAAU,CAAC;CACxC;AAED,eAAO,MAAM,iBAAiB,4DAKF,CAAC;AAE7B,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,GAAG,UAAU,CAE1F;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,GAAG,UAAU,CAExF;AAED,+FAA+F;AAC/F,wBAAgB,aAAa,CAAC,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAc7F;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,GAAG,OAAO,GAAG,YAAY,GAAG,UAAU,CAWpH"}

package/dist/models/identity.js

@@ -0,0 +1,136 @@
+import { requireLength, verifyAccount, verifyDevice } from '../crypto/primitives.js';
+import { ProtocolError } from '../errors.js';
+import { deriveDeviceId, validateIdentifier } from '../identity/identifiers.js';
+import { matchesAccount, validateRelayId } from '../identity/neo.js';
+import { array, bytes, defineCodec, integer, text } from '../protocol/codec.js';
+import { NetworkContext, signingInput } from '../protocol/context.js';
+import { encodeUtf8 } from '../protocol/encoding.js';
+import { canonicalJson, requireSafeInteger } from '../protocol/json.js';
+import { validateCompleteObject } from '../protocol/validation.js';
+export const deviceCertificateCodec = defineCodec({
+    account: { wire: 'account', codec: text },
+    accountPublicKey: { wire: 'account_public_key', codec: bytes },
+    signingPublicKey: { wire: 'signing_public_key', codec: bytes },
+    encryptionPublicKey: { wire: 'encryption_public_key', codec: bytes },
+    notBefore: { wire: 'not_before', codec: integer },
+    expiresAt: { wire: 'expires_at', codec: integer },
+    deviceSignature: { wire: 'device_signature', codec: bytes },
+    accountSignature: { wire: 'account_signature', codec: bytes },
+}, 'meshline.device.certificate');
+export function certificateId(certificate, context) {
+    return deriveDeviceId(certificate.account, certificate.signingPublicKey, certificate.encryptionPublicKey, context);
+}
+export function certificateDeviceInput(certificate, context) {
+    return signingInput(deviceCertificateCodec.encode(certificate), context, ['device_signature', 'account_signature']);
+}
+export function certificateAccountInput(certificate, context) {
+    return signingInput(deviceCertificateCodec.encode(certificate), context, ['account_signature']);
+}
+/** Checks complete certificate integrity; current account authorization is a separate operation. */
+export function validateCertificate(certificate, context) {
+    validateCompleteObject(deviceCertificateCodec.encode(certificate));
+    requireLength(certificate.signingPublicKey, 32, 'Signing public key');
+    requireLength(certificate.encryptionPublicKey, 32, 'Encryption public key');
+    requireLength(certificate.deviceSignature, 64, 'Device signature');
+    requireLength(certificate.accountSignature, 64, 'Account signature');
+    requireSafeInteger(certificate.notBefore, 0);
+    requireSafeInteger(certificate.expiresAt, 0);
+    if (certificate.expiresAt <= certificate.notBefore || certificate.expiresAt - certificate.notBefore > 720 * 86400)
+        throw new ProtocolError('invalid_time', 'Certificate validity must be positive and at most 720 days.');
+    if (!matchesAccount(certificate.account, certificate.accountPublicKey))
+        throw new ProtocolError('invalid_identity', 'Certificate account does not match its public key.');
+    if (encodeUtf8(deviceCertificateCodec.stringify(certificate)).length > 4096)
+        throw new ProtocolError('invalid_size', 'Certificate exceeds 4096 bytes.');
+    if (!verifyDevice(certificateDeviceInput(certificate, context), certificate.deviceSignature, certificate.signingPublicKey))
+        throw new ProtocolError('invalid_signature', 'Invalid certificate device signature.');
+    if (!verifyAccount(certificateAccountInput(certificate, context), certificate.accountSignature, certificate.accountPublicKey))
+        throw new ProtocolError('invalid_signature', 'Invalid certificate account signature.');
+}
+export const accountDeviceStateCodec = defineCodec({
+    account: { wire: 'account', codec: text }, accountPublicKey: { wire: 'account_public_key', codec: bytes },
+    revision: { wire: 'revision', codec: integer }, certificates: { wire: 'certificates', codec: array(deviceCertificateCodec) },
+    accountSignature: { wire: 'account_signature', codec: bytes },
+}, 'meshline.account.device.state');
+export function deviceStateInput(state, context) {
+    return signingInput(accountDeviceStateCodec.encode(state), context, ['account_signature']);
+}
+export function validateDeviceState(state, context) {
+    validateCompleteObject(accountDeviceStateCodec.encode(state));
+    requireSafeInteger(state.revision, 0);
+    if (!matchesAccount(state.account, state.accountPublicKey))
+        throw new ProtocolError('invalid_identity', 'Device state account does not match its key.');
+    if (state.certificates.length > 8)
+        throw new ProtocolError('invalid_size', 'At most eight devices may be authorized.');
+    if (encodeUtf8(accountDeviceStateCodec.stringify(state)).length > 131072)
+        throw new ProtocolError('invalid_size', 'Device state exceeds 131072 bytes.');
+    const identities = new Set();
+    for (const certificate of state.certificates) {
+        validateCertificate(certificate, context);
+        if (certificate.account !== state.account)
+            throw new ProtocolError('invalid_identity', 'Certificate belongs to another account.');
+        const id = certificateId(certificate, context);
+        if (identities.has(id))
+            throw new ProtocolError('duplicate_device', 'Duplicate device identity.');
+        identities.add(id);
+    }
+    if (!verifyAccount(deviceStateInput(state, context), state.accountSignature, state.accountPublicKey))
+        throw new ProtocolError('invalid_signature', 'Invalid device state signature.');
+}
+/** The state must have passed validateDeviceState before use as trusted authorization. */
+export function authorizedDevice(state, deviceId, context, now) {
+    requireSafeInteger(now, 0);
+    validateIdentifier('device', deviceId);
+    const certificate = state.certificates.find(item => certificateId(item, context) === deviceId);
+    if (!certificate)
+        throw new ProtocolError('unauthorized_device', 'Device is not registered in the account state.');
+    if (now < certificate.notBefore || now >= certificate.expiresAt)
+        throw new ProtocolError('unauthorized_device', 'Device is outside its authorization window.');
+    return certificate;
+}
+export const accountRouteCodec = defineCodec({
+    account: { wire: 'account', codec: text }, accountPublicKey: { wire: 'account_public_key', codec: bytes },
+    revision: { wire: 'revision', codec: integer }, relayId: { wire: 'relay_id', codec: text },
+    updatedAt: { wire: 'updated_at', codec: integer }, expiresAt: { wire: 'expires_at', codec: integer },
+    accountSignature: { wire: 'account_signature', codec: bytes }, relaySignature: { wire: 'relay_signature', codec: bytes, optional: true },
+}, 'meshline.account.route');
+export function routeAccountInput(route, context) {
+    return signingInput(accountRouteCodec.encode(route), context, ['account_signature', 'relay_signature']);
+}
+export function routeRelayInput(route, context) {
+    return signingInput(accountRouteCodec.encode(route), context, ['relay_signature']);
+}
+/** Relay acknowledgement, when present, must additionally be checked against the relay key. */
+export function validateRoute(route, context, now) {
+    validateCompleteObject(accountRouteCodec.encode(route));
+    requireSafeInteger(now, 0);
+    requireSafeInteger(route.revision, 0);
+    requireSafeInteger(route.updatedAt, 0);
+    requireSafeInteger(route.expiresAt, 0);
+    validateRelayId(route.relayId);
+    if (route.expiresAt <= route.updatedAt || route.expiresAt - route.updatedAt > 315_360_000 || route.expiresAt <= now)
+        throw new ProtocolError('invalid_time', 'Route is expired or has an invalid validity window.');
+    if (!matchesAccount(route.account, route.accountPublicKey))
+        throw new ProtocolError('invalid_identity', 'Route account does not match its key.');
+    if (route.relaySignature !== undefined)
+        requireLength(route.relaySignature, 64, 'Relay signature');
+    if (encodeUtf8(accountRouteCodec.stringify(route)).length > 4096)
+        throw new ProtocolError('invalid_size', 'Route exceeds 4096 bytes.');
+    if (!verifyAccount(routeAccountInput(route, context), route.accountSignature, route.accountPublicKey))
+        throw new ProtocolError('invalid_signature', 'Invalid account route signature.');
+}
+export function compareRoutes(left, right) {
+    if (left.account !== right.account)
+        throw new ProtocolError('invalid_identity', 'Routes belong to different accounts.');
+    if (left.revision < right.revision)
+        return 'older';
+    if (left.revision > right.revision)
+        return 'newer';
+    const unsigned = (value) => {
+        const object = accountRouteCodec.encode(value);
+        delete object.account_signature;
+        delete object.relay_signature;
+        return object;
+    };
+    return canonicalJson(unsigned(left)) === canonicalJson(unsigned(right)) ? 'equivalent' : 'conflict';
+}
+//# sourceMappingURL=identity.js.map

package/dist/models/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../src/models/identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,EAAwB,MAAM,sBAAsB,CAAC;AACtG,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtE,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAmB,MAAM,qBAAqB,CAAC;AACzF,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AAanE,MAAM,CAAC,MAAM,sBAAsB,GAAG,WAAW,CAAoB;IACjE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE;IACzC,gBAAgB,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,KAAK,EAAE;IAC9D,gBAAgB,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,KAAK,EAAE;IAC9D,mBAAmB,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,KAAK,EAAE,KAAK,EAAE;IACpE,SAAS,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE;IACjD,SAAS,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE;IACjD,eAAe,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,KAAK,EAAE;IAC3D,gBAAgB,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,KAAK,EAAE;CAChE,EAAE,6BAA6B,CAAC,CAAC;AAElC,MAAM,UAAU,aAAa,CAAC,WAA8B,EAAE,OAAuB;IACjF,OAAO,cAAc,CAAC,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,gBAAgB,EAAE,WAAW,CAAC,mBAAmB,EAAE,OAAO,CAAC,CAAC;AACvH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,WAA8B,EAAE,OAAuB;IAC1F,OAAO,YAAY,CAAC,sBAAsB,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,kBAAkB,EAAE,mBAAmB,CAAC,CAAC,CAAC;AACxH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,WAA8B,EAAE,OAAuB;IAC3F,OAAO,YAAY,CAAC,sBAAsB,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC;AACpG,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,mBAAmB,CAAC,WAA8B,EAAE,OAAuB;IACvF,sBAAsB,CAAC,sBAAsB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;IACnE,aAAa,CAAC,WAAW,CAAC,gBAAgB,EAAE,EAAE,EAAE,oBAAoB,CAAC,CAAC;IACtE,aAAa,CAAC,WAAW,CAAC,mBAAmB,EAAE,EAAE,EAAE,uBAAuB,CAAC,CAAC;IAC5E,aAAa,CAAC,WAAW,CAAC,eAAe,EAAE,EAAE,EAAE,kBAAkB,CAAC,CAAC;IACnE,aAAa,CAAC,WAAW,CAAC,gBAAgB,EAAE,EAAE,EAAE,mBAAmB,CAAC,CAAC;IACrE,kBAAkB,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAC7C,kBAAkB,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAC7C,IAAI,WAAW,CAAC,SAAS,IAAI,WAAW,CAAC,SAAS,IAAI,WAAW,CAAC,SAAS,GAAG,WAAW,CAAC,SAAS,GAAG,GAAG,GAAG,KAAK;QAC7G,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,6DAA6D,CAAC,CAAC;IAC3G,IAAI,CAAC,cAAc,CAAC,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,gBAAgB,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,oDAAoD,CAAC,CAAC;IAC1K,IAAI,UAAU,CAAC,sBAAsB,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,GAAG,IAAI;QAAE,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,iCAAiC,CAAC,CAAC;IACxJ,IAAI,CAAC,YAAY,CAAC,sBAAsB,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,WAAW,CAAC,eAAe,EAAE,WAAW,CAAC,gBAAgB,CAAC;QACtH,MAAM,IAAI,aAAa,CAAC,mBAAmB,EAAE,uCAAuC,CAAC,CAAC;IAC1F,IAAI,CAAC,aAAa,CAAC,uBAAuB,CAAC,WAAW,EAAE,OAAO,CAAC,EAAE,WAAW,CAAC,gBAAgB,EAAE,WAAW,CAAC,gBAAgB,CAAC;QACzH,MAAM,IAAI,aAAa,CAAC,mBAAmB,EAAE,wCAAwC,CAAC,CAAC;AAC/F,CAAC;AAUD,MAAM,CAAC,MAAM,uBAAuB,GAAG,WAAW,CAAqB;IACnE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,gBAAgB,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,KAAK,EAAE;IACzG,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,KAAK,CAAC,sBAAsB,CAAC,EAAE;IAC5H,gBAAgB,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,KAAK,EAAE;CAChE,EAAE,+BAA+B,CAAC,CAAC;AAEpC,MAAM,UAAU,gBAAgB,CAAC,KAAyB,EAAE,OAAuB;IAC/E,OAAO,YAAY,CAAC,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAyB,EAAE,OAAuB;IAClF,sBAAsB,CAAC,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9D,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IACtC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,gBAAgB,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,8CAA8C,CAAC,CAAC;IACxJ,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,0CAA0C,CAAC,CAAC;IACvH,IAAI,UAAU,CAAC,uBAAuB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,MAAM;QAAE,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,oCAAoC,CAAC,CAAC;IACxJ,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,MAAM,WAAW,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QAC3C,mBAAmB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC1C,IAAI,WAAW,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;YAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,yCAAyC,CAAC,CAAC;QAClI,MAAM,EAAE,GAAG,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC/C,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,4BAA4B,CAAC,CAAC;QAClG,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,CAAC;QAChG,MAAM,IAAI,aAAa,CAAC,mBAAmB,EAAE,iCAAiC,CAAC,CAAC;AACxF,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,gBAAgB,CAAC,KAAyB,EAAE,QAAgB,EAAE,OAAuB,EAAE,GAAW;IAC9G,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC3B,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACvC,MAAM,WAAW,GAAG,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;IAC/F,IAAI,CAAC,WAAW;QAAE,MAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,gDAAgD,CAAC,CAAC;IACnH,IAAI,GAAG,GAAG,WAAW,CAAC,SAAS,IAAI,GAAG,IAAI,WAAW,CAAC,SAAS;QAAE,MAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,6CAA6C,CAAC,CAAC;IAC/J,OAAO,WAAW,CAAC;AACvB,CAAC;AAaD,MAAM,CAAC,MAAM,iBAAiB,GAAG,WAAW,CAAe;IACvD,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,gBAAgB,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,KAAK,EAAE;IACzG,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE;IAC1F,SAAS,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE;IACpG,gBAAgB,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,cAAc,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE;CAC3I,EAAE,wBAAwB,CAAC,CAAC;AAE7B,MAAM,UAAU,iBAAiB,CAAC,KAAmB,EAAE,OAAuB;IAC1E,OAAO,YAAY,CAAC,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,mBAAmB,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAC5G,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAmB,EAAE,OAAuB;IACxE,OAAO,YAAY,CAAC,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,aAAa,CAAC,KAAmB,EAAE,OAAuB,EAAE,GAAW;IACnF,sBAAsB,CAAC,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACxD,kBAAkB,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAC3B,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IACtC,kBAAkB,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACvC,kBAAkB,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACvC,eAAe,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,GAAG,WAAW,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG;QAC/G,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,qDAAqD,CAAC,CAAC;IACnG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,gBAAgB,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,uCAAuC,CAAC,CAAC;IACjJ,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS;QAAE,aAAa,CAAC,KAAK,CAAC,cAAc,EAAE,EAAE,EAAE,iBAAiB,CAAC,CAAC;IACnG,IAAI,UAAU,CAAC,iBAAiB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,IAAI;QAAE,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,2BAA2B,CAAC,CAAC;IACvI,IAAI,CAAC,aAAa,CAAC,iBAAiB,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,CAAC;QACjG,MAAM,IAAI,aAAa,CAAC,mBAAmB,EAAE,kCAAkC,CAAC,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAAkB,EAAE,KAAmB;IACjE,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,sCAAsC,CAAC,CAAC;IACxH,IAAI,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ;QAAE,OAAO,OAAO,CAAC;IACnD,IAAI,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ;QAAE,OAAO,OAAO,CAAC;IACnD,MAAM,QAAQ,GAAG,CAAC,KAAmB,EAAc,EAAE;QACjD,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/C,OAAO,MAAM,CAAC,iBAAiB,CAAC;QAChC,OAAO,MAAM,CAAC,eAAe,CAAC;QAC9B,OAAO,MAAM,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC;AACxG,CAAC"}

package/dist/models/messages.d.ts

@@ -0,0 +1,104 @@
+import { type ExtensibleModel, type ValueCodec } from '../protocol/codec.js';
+import { type NetworkContext } from '../protocol/context.js';
+import { type JsonObject } from '../protocol/json.js';
+import { type RelayFailure } from '../transport/relay-error.js';
+import { type ContentReference, type MessageBody } from './content.js';
+import { type ContactAuthorization } from './contacts.js';
+import { type DeviceCertificate } from './identity.js';
+/** Complete wire business object. Unknown types may be stored but cannot authorize protocol state changes. */
+export declare const messagePayloadCodec: ValueCodec<JsonObject>;
+export interface EncryptedPayload extends ExtensibleModel {
+    readonly alg: string;
+    readonly nonce: Uint8Array;
+    readonly ciphertext: Uint8Array;
+}
+export declare const encryptedPayloadCodec: import("../protocol/codec.js").ProtocolCodec<EncryptedPayload>;
+export declare function validateEncryptedPayload(value: EncryptedPayload): void;
+export interface MessageEnvelope extends ExtensibleModel {
+    readonly messageId: string;
+    readonly createdAt: number;
+    readonly from: string;
+    readonly fromDeviceId: string;
+    readonly to: string;
+    readonly payload: EncryptedPayload;
+    readonly deviceSignature: Uint8Array;
+}
+export declare const messageEnvelopeCodec: import("../protocol/codec.js").ProtocolCodec<MessageEnvelope>;
+export declare const messageEnvelopeInput: (value: MessageEnvelope, context: NetworkContext) => Uint8Array;
+export declare function validateMessageEnvelope(value: MessageEnvelope): void;
+/** Historical signature integrity only. Current device authority is checked separately by the receiver's business workflow. */
+export declare function verifyMessageEnvelope(value: MessageEnvelope, sender: DeviceCertificate, context: NetworkContext): void;
+export interface MessageKeyBox extends ExtensibleModel {
+    readonly deviceId: string;
+    readonly alg: string;
+    readonly enc: Uint8Array;
+    readonly sealedKey: Uint8Array;
+}
+export declare const messageKeyBoxCodec: import("../protocol/codec.js").ProtocolCodec<MessageKeyBox>;
+export declare function validateMessageKeyBox(value: MessageKeyBox): void;
+export declare function validateMessageKeyBoxes(values: readonly MessageKeyBox[]): void;
+export interface MessageSendRequest extends ExtensibleModel {
+    readonly envelope: MessageEnvelope;
+    readonly senderBoxes?: readonly MessageKeyBox[];
+    readonly recipientBoxes: readonly MessageKeyBox[];
+    readonly authorization?: ContactAuthorization;
+}
+export declare const messageSendRequestCodec: import("../protocol/codec.js").ProtocolCodec<MessageSendRequest>;
+export declare function validateMessageSendRequest(value: MessageSendRequest, now: number): void;
+export interface DirectMessageReference extends ExtensibleModel {
+    readonly from: string;
+    readonly messageId: string;
+}
+export declare const directMessageReferenceCodec: import("../protocol/codec.js").ProtocolCodec<DirectMessageReference>;
+export interface DirectMessage extends ExtensibleModel {
+    readonly body?: MessageBody;
+    readonly attachments?: readonly ContentReference[];
+    readonly replyTo?: DirectMessageReference;
+}
+export declare const directMessageCodec: import("../protocol/codec.js").ProtocolCodec<DirectMessage>;
+export declare function validateDirectMessage(value: DirectMessage): void;
+export interface MessageTimelineEntry extends ExtensibleModel {
+    readonly sequence: number;
+    readonly envelope: MessageEnvelope;
+    readonly keyBox: MessageKeyBox;
+    readonly acceptedAt: number;
+}
+export declare const messageTimelineEntryCodec: import("../protocol/codec.js").ProtocolCodec<MessageTimelineEntry>;
+export interface MessageTimelinePage extends ExtensibleModel {
+    readonly items: readonly MessageTimelineEntry[];
+    readonly certificates: readonly DeviceCertificate[];
+    readonly hasMore: boolean;
+    readonly hasRetentionGap?: boolean;
+}
+export declare const messageTimelinePageCodec: import("../protocol/codec.js").ProtocolCodec<MessageTimelinePage>;
+/** Checks page ordering and certificate availability. Each entry still requires decryption and business validation before cursor commit. */
+export declare function validateMessageTimelinePage(value: MessageTimelinePage, context: NetworkContext, after?: number): void;
+export interface MessageTimelineQuery extends ExtensibleModel {
+    readonly after?: number;
+    readonly limit?: number;
+}
+export declare const messageTimelineQueryCodec: import("../protocol/codec.js").ProtocolCodec<MessageTimelineQuery>;
+export declare function validateMessageTimelineQuery(value: MessageTimelineQuery): void;
+export interface MessageDeliveryQuery extends ExtensibleModel {
+    readonly messageId: string;
+}
+export declare const messageDeliveryQueryCodec: import("../protocol/codec.js").ProtocolCodec<MessageDeliveryQuery>;
+export type MessageDeliveryState = 'delivering' | 'target_accepted' | 'failed';
+export interface MessageDeliveryStatus extends ExtensibleModel {
+    readonly status: MessageDeliveryState;
+    readonly error?: RelayFailure;
+    readonly acceptedAt: number;
+}
+export declare const messageDeliveryStatusCodec: import("../protocol/codec.js").ProtocolCodec<MessageDeliveryStatus>;
+export declare function validateMessageDeliveryStatus(value: MessageDeliveryStatus): void;
+export interface DeviceStateChanged extends ExtensibleModel {
+    readonly revision: number;
+}
+export declare const deviceStateChangedCodec: import("../protocol/codec.js").ProtocolCodec<DeviceStateChanged>;
+export declare function validateDeviceStateChanged(value: DeviceStateChanged): void;
+export interface MessageTimelineChangedNotification extends ExtensibleModel {
+    readonly head: number;
+}
+export declare const messageTimelineChangedCodec: import("../protocol/codec.js").ProtocolCodec<MessageTimelineChangedNotification>;
+export declare function validateMessageTimelineChanged(value: MessageTimelineChangedNotification): void;
+//# sourceMappingURL=messages.d.ts.map

package/dist/models/messages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../../src/models/messages.ts"],"names":[],"mappings":"AAIA,OAAO,EAAkE,KAAK,eAAe,EAAE,KAAK,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAC7I,OAAO,EAAgB,KAAK,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE3E,OAAO,EAA+D,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEnH,OAAO,EAAqB,KAAK,YAAY,EAAE,MAAM,6BAA6B,CAAC;AACnF,OAAO,EAAqF,KAAK,gBAAgB,EAAE,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AAC1J,OAAO,EAA0E,KAAK,oBAAoB,EAAE,MAAM,eAAe,CAAC;AAClI,OAAO,EAA8D,KAAK,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAEnH,8GAA8G;AAC9G,eAAO,MAAM,mBAAmB,EAAE,UAAU,CAAC,UAAU,CAOtD,CAAC;AAEF,MAAM,WAAW,gBAAiB,SAAQ,eAAe;IAAG,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;CAAE;AAC/I,eAAO,MAAM,qBAAqB,gEAAiK,CAAC;AACpM,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI,CAKtE;AACD,MAAM,WAAW,eAAgB,SAAQ,eAAe;IACpD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAClI,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAC;CAC5E;AACD,eAAO,MAAM,oBAAoB,+DAE0H,CAAC;AAC5J,eAAO,MAAM,oBAAoB,UAAW,eAAe,WAAW,cAAc,KAAG,UAA6F,CAAC;AACrL,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,CAKpE;AACD,+HAA+H;AAC/H,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,eAAe,EAAE,MAAM,EAAE,iBAAiB,EAAE,OAAO,EAAE,cAAc,GAAG,IAAI,CAItH;AACD,MAAM,WAAW,aAAc,SAAQ,eAAe;IAAG,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAA;CAAE;AACpK,eAAO,MAAM,kBAAkB,6DAAuM,CAAC;AACvO,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,CAIhE;AACD,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,SAAS,aAAa,EAAE,GAAG,IAAI,CAI9E;AACD,MAAM,WAAW,kBAAmB,SAAQ,eAAe;IACvD,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,SAAS,aAAa,EAAE,CAAC;IAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,oBAAoB,CAAC;CACzL;AACD,eAAO,MAAM,uBAAuB,kEAC4I,CAAC;AACjL,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,kBAAkB,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAevF;AACD,MAAM,WAAW,sBAAuB,SAAQ,eAAe;IAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE;AACrH,eAAO,MAAM,2BAA2B,sEAA+H,CAAC;AACxK,MAAM,WAAW,aAAc,SAAQ,eAAe;IAAG,QAAQ,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,sBAAsB,CAAA;CAAE;AACrL,eAAO,MAAM,kBAAkB,6DACoF,CAAC;AACpH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,CAMhE;AACD,MAAM,WAAW,oBAAqB,SAAQ,eAAe;IAAG,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE;AAC5L,eAAO,MAAM,yBAAyB,oEAAkQ,CAAC;AACzS,MAAM,WAAW,mBAAoB,SAAQ,eAAe;IAAG,QAAQ,CAAC,KAAK,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAA;CAAE;AACpO,eAAO,MAAM,wBAAwB,mEAC+F,CAAC;AACrI,4IAA4I;AAC5I,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,mBAAmB,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,SAAK,GAAG,IAAI,CAajH;AACD,MAAM,WAAW,oBAAqB,SAAQ,eAAe;IAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE;AAClH,eAAO,MAAM,yBAAyB,oEAA4J,CAAC;AACnM,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,oBAAoB,GAAG,IAAI,CAI9E;AACD,MAAM,WAAW,oBAAqB,SAAQ,eAAe;IAAG,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE;AAC5F,eAAO,MAAM,yBAAyB,oEAAwF,CAAC;AAC/H,MAAM,MAAM,oBAAoB,GAAG,YAAY,GAAG,iBAAiB,GAAG,QAAQ,CAAC;AAC/E,MAAM,WAAW,qBAAsB,SAAQ,eAAe;IAAG,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE;AACpK,eAAO,MAAM,0BAA0B,qEAA6P,CAAC;AACrS,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,qBAAqB,GAAG,IAAI,CAGhF;AACD,MAAM,WAAW,kBAAmB,SAAQ,eAAe;IAAG,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE;AACzF,eAAO,MAAM,uBAAuB,kEAAuH,CAAC;AAC5J,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,kBAAkB,GAAG,IAAI,CAA0G;AACrL,MAAM,WAAW,kCAAmC,SAAQ,eAAe;IAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AACrG,eAAO,MAAM,2BAA2B,kFAA8F,CAAC;AACvI,wBAAgB,8BAA8B,CAAC,KAAK,EAAE,kCAAkC,GAAG,IAAI,CAA0G"}