@mt-tl/server 0.1.0

package/dist/session/session-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-manager.js","sourceRoot":"","sources":["../../src/session/session-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAe,MAAM,WAAW,CAAA;AAInD,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AASlD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAC/B,OAAgB,EAChB,SAAoB,EACpB,IAAgB,EAChB,IAAiB,EACjB,MAAc,UAAU;IAExB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAE3D,IAAI,QAAQ,IAAI,QAAQ,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;QACpD,MAAM,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAC5C,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAA;QACrC,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAA;QACrC,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAA;QACnC,OAAM;IACV,CAAC;IACD,IAAI,QAAQ;QAAE,MAAM,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAE3D,MAAM,QAAQ,GAAG,YAAY,CAAC,EAAE,CAAC,CAAA;IACjC,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,QAAQ,CAAA;IAC5B,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;IAE/B,MAAM,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC;QACxB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,QAAQ;QACR,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ;QAC3B,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;KAC3B,CAAC,CAAA;IACF,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE;QACpB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,OAAO,EAAE,IAAI,CAAC,OAAO;KACxB,CAAC,CAAA;IAEF,SAAS,CAAC,aAAa,CACnB,IAAI,EACJ;QACI,CAAC,EAAE,qBAAqB;QACxB,YAAY,EAAE,IAAI,CAAC,UAAU;QAC7B,SAAS,EAAE,QAAQ;QACnB,WAAW,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE;KACzC,EACD,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,CAClD,CAAA;AACL,CAAC"}

package/dist/storage/index.d.ts

@@ -0,0 +1,14 @@
+import type { Storage } from './types.js';
+export type { Storage } from './types.js';
+export type StorageBackend = 'memory' | 'mongo';
+export interface StorageConfig {
+    backend: StorageBackend;
+    mongoUrl?: string;
+    mongoDb?: string;
+}
+/**
+ * Builds the configured storage backend. `memory` (default) needs no external
+ * services; `mongo` lazily imports the driver so memory mode stays dependency-free.
+ */
+export declare function createStorage(config: StorageConfig): Promise<Storage>;
+//# sourceMappingURL=index.d.ts.map

package/dist/storage/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/storage/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAGzC,YAAY,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AACzC,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,OAAO,CAAA;AAE/C,MAAM,WAAW,aAAa;IAC1B,OAAO,EAAE,cAAc,CAAA;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,OAAO,CAAC,CAS3E"}

package/dist/storage/index.js

@@ -0,0 +1,16 @@
+import { createMemoryStorage } from './memory.js';
+/**
+ * Builds the configured storage backend. `memory` (default) needs no external
+ * services; `mongo` lazily imports the driver so memory mode stays dependency-free.
+ */
+export async function createStorage(config) {
+    if (config.backend === 'mongo') {
+        if (!config.mongoUrl || !config.mongoDb) {
+            throw new Error('STORAGE_BACKEND=mongo requires MONGO_URL and MONGO_DB');
+        }
+        const { createMongoStorage } = await import('./mongo.js');
+        return createMongoStorage(config.mongoUrl, config.mongoDb);
+    }
+    return createMemoryStorage();
+}
+//# sourceMappingURL=index.js.map

package/dist/storage/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/storage/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAA;AAWjD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAqB;IACrD,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAA;QAC5E,CAAC;QACD,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAA;QACzD,OAAO,kBAAkB,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,CAAA;IAC9D,CAAC;IACD,OAAO,mBAAmB,EAAE,CAAA;AAChC,CAAC"}

package/dist/storage/memory.d.ts

@@ -0,0 +1,3 @@
+import type { Storage } from './types.js';
+export declare function createMemoryStorage(): Storage;
+//# sourceMappingURL=memory.d.ts.map

package/dist/storage/memory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../src/storage/memory.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAQR,OAAO,EACV,MAAM,YAAY,CAAA;AAoFnB,wBAAgB,mBAAmB,IAAI,OAAO,CAO7C"}

package/dist/storage/memory.js

@@ -0,0 +1,91 @@
+/**
+ * In-memory storage. The default backend so the gateway runs with no external
+ * services (dev, tests). Auth keys/sessions do not survive a restart — use the
+ * Mongo backend for that.
+ */
+class MemoryAuthKeyRepo {
+    map = new Map();
+    async create(rec) {
+        this.map.set(rec.id.toString(), { ...rec });
+    }
+    async getById(id) {
+        return this.map.get(id.toString()) ?? null;
+    }
+    async setBlocked(id, blocked) {
+        const rec = this.map.get(id.toString());
+        if (rec)
+            rec.isBlocked = blocked;
+    }
+    async bindUser(id, subject) {
+        const rec = this.map.get(id.toString());
+        if (rec)
+            rec.subject = subject;
+    }
+    async updateMeta(id, patch) {
+        const rec = this.map.get(id.toString());
+        if (!rec)
+            return;
+        const meta = (rec.meta ??= {});
+        for (const [k, v] of Object.entries(patch)) {
+            if (v !== undefined)
+                meta[k] = v;
+        }
+    }
+}
+class MemorySaltRepo {
+    map = new Map();
+    async append(authKeyId, entries) {
+        const k = authKeyId.toString();
+        const list = this.map.get(k) ?? [];
+        for (const e of entries) {
+            // Insert-if-absent by window start; never overwrite an existing salt.
+            if (!list.some(x => x.validSince === e.validSince))
+                list.push({ ...e });
+        }
+        list.sort((a, b) => a.validSince - b.validSince);
+        this.map.set(k, list);
+    }
+    async list(authKeyId) {
+        return (this.map.get(authKeyId.toString()) ?? []).map(e => ({ ...e }));
+    }
+    async prune(authKeyId, before) {
+        const k = authKeyId.toString();
+        const list = this.map.get(k);
+        if (list)
+            this.map.set(k, list.filter(e => e.validUntil > before));
+    }
+}
+class MemorySessionRepo {
+    map = new Map();
+    async get(sessionId) {
+        const r = this.map.get(sessionId.toString());
+        return r ? { ...r } : null;
+    }
+    async save(rec) {
+        this.map.set(rec.sessionId.toString(), { ...rec });
+    }
+    async update(sessionId, patch) {
+        const r = this.map.get(sessionId.toString());
+        if (r)
+            this.map.set(sessionId.toString(), { ...r, ...patch });
+    }
+    async delete(sessionId) {
+        this.map.delete(sessionId.toString());
+    }
+    async touch(sessionId) {
+        const r = this.map.get(sessionId.toString());
+        if (!r)
+            return false;
+        r.lastActivity = Date.now();
+        return true;
+    }
+}
+export function createMemoryStorage() {
+    return {
+        authKeys: new MemoryAuthKeyRepo(),
+        salts: new MemorySaltRepo(),
+        sessions: new MemorySessionRepo(),
+        async close() { },
+    };
+}
+//# sourceMappingURL=memory.js.map

package/dist/storage/memory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.js","sourceRoot":"","sources":["../../src/storage/memory.ts"],"names":[],"mappings":"AAWA;;;;GAIG;AACH,MAAM,iBAAiB;IACX,GAAG,GAAG,IAAI,GAAG,EAAyB,CAAA;IAE9C,KAAK,CAAC,MAAM,CAAC,GAAkB;QAC3B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG,GAAG,EAAE,CAAC,CAAA;IAC/C,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,EAAU;QACpB,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,IAAI,IAAI,CAAA;IAC9C,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,EAAU,EAAE,OAAgB;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAA;QACvC,IAAI,GAAG;YAAE,GAAG,CAAC,SAAS,GAAG,OAAO,CAAA;IACpC,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,EAAU,EAAE,OAAsB;QAC7C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAA;QACvC,IAAI,GAAG;YAAE,GAAG,CAAC,OAAO,GAAG,OAAO,CAAA;IAClC,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,EAAU,EAAE,KAAkB;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAA;QACvC,IAAI,CAAC,GAAG;YAAE,OAAM;QAChB,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC,CAAA;QAC9B,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC,KAAK,SAAS;gBAAG,IAAgC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QACjE,CAAC;IACL,CAAC;CACJ;AAED,MAAM,cAAc;IACR,GAAG,GAAG,IAAI,GAAG,EAA+B,CAAA;IACpD,KAAK,CAAC,MAAM,CAAC,SAAiB,EAAE,OAA4B;QACxD,MAAM,CAAC,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAA;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAClC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACtB,sEAAsE;YACtE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAA;QAC3E,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAA;QAChD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA;IACzB,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,SAAiB;QACxB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;IAC1E,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,SAAiB,EAAE,MAAc;QACzC,MAAM,CAAC,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAA;QAC9B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QAC5B,IAAI,IAAI;YACJ,IAAI,CAAC,GAAG,CAAC,GAAG,CACR,CAAC,EACD,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,GAAG,MAAM,CAAC,CAC1C,CAAA;IACT,CAAC;CACJ;AAED,MAAM,iBAAiB;IACX,GAAG,GAAG,IAAI,GAAG,EAAyB,CAAA;IAC9C,KAAK,CAAC,GAAG,CAAC,SAAiB;QACvB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAA;QAC5C,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;IAC9B,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,GAAkB;QACzB,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG,GAAG,EAAE,CAAC,CAAA;IACtD,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,SAAiB,EAAE,KAA6B;QACzD,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAA;QAC5C,IAAI,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAA;IACjE,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,SAAiB;QAC1B,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAA;IACzC,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,SAAiB;QACzB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAA;QAC5C,IAAI,CAAC,CAAC;YAAE,OAAO,KAAK,CAAA;QACpB,CAAC,CAAC,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QAC3B,OAAO,IAAI,CAAA;IACf,CAAC;CACJ;AAED,MAAM,UAAU,mBAAmB;IAC/B,OAAO;QACH,QAAQ,EAAE,IAAI,iBAAiB,EAAE;QACjC,KAAK,EAAE,IAAI,cAAc,EAAE;QAC3B,QAAQ,EAAE,IAAI,iBAAiB,EAAE;QACjC,KAAK,CAAC,KAAK,KAAI,CAAC;KACnB,CAAA;AACL,CAAC"}

package/dist/storage/mongo.d.ts

@@ -0,0 +1,3 @@
+import type { Storage } from './types.js';
+export declare function createMongoStorage(url: string, dbName: string): Promise<Storage>;
+//# sourceMappingURL=mongo.d.ts.map

package/dist/storage/mongo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mongo.d.ts","sourceRoot":"","sources":["../../src/storage/mongo.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAQR,OAAO,EACV,MAAM,YAAY,CAAA;AAyKnB,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAatF"}

package/dist/storage/mongo.js

@@ -0,0 +1,175 @@
+import { MongoClient, Binary } from 'mongodb';
+function toBuf(b) {
+    return Buffer.from(b.buffer);
+}
+class MongoAuthKeyRepo {
+    col;
+    constructor(col) {
+        this.col = col;
+    }
+    async create(rec) {
+        await this.col.updateOne({ _id: rec.id.toString() }, {
+            $set: {
+                key: new Binary(rec.key),
+                expiresIn: rec.expiresIn,
+                createdAt: rec.createdAt,
+                subject: rec.subject,
+                isBlocked: rec.isBlocked ?? false,
+                meta: rec.meta,
+            },
+        }, { upsert: true });
+    }
+    async getById(id) {
+        const doc = await this.col.findOne({ _id: id.toString() });
+        if (!doc)
+            return null;
+        return {
+            id,
+            key: toBuf(doc.key),
+            expiresIn: doc.expiresIn,
+            createdAt: doc.createdAt,
+            subject: doc.subject,
+            isBlocked: doc.isBlocked,
+            meta: doc.meta,
+        };
+    }
+    async setBlocked(id, blocked) {
+        await this.col.updateOne({ _id: id.toString() }, { $set: { isBlocked: blocked } });
+    }
+    async bindUser(id, subject) {
+        await this.col.updateOne({ _id: id.toString() }, { $set: { subject } });
+    }
+    async updateMeta(id, patch) {
+        // Set defined fields under dotted `meta.*` paths so we never clobber the
+        // sibling fields (e.g. `meta.apiLayer` set at handshake time).
+        const set = {};
+        for (const [k, v] of Object.entries(patch)) {
+            if (v !== undefined)
+                set[`meta.${k}`] = v;
+        }
+        if (Object.keys(set).length)
+            await this.col.updateOne({ _id: id.toString() }, { $set: set });
+    }
+}
+class MongoSaltRepo {
+    col;
+    constructor(col) {
+        this.col = col;
+    }
+    async append(authKeyId, entries) {
+        if (!entries.length)
+            return;
+        const key = authKeyId.toString();
+        // $setOnInsert keeps the first writer's salt for a window, so all nodes
+        // that derive the same (deterministic) window converge on one salt.
+        const ops = entries.map(e => ({
+            updateOne: {
+                filter: { _id: `${key}:${e.validSince}` },
+                update: {
+                    $setOnInsert: {
+                        authKeyId: key,
+                        salt: e.salt.toString(),
+                        validSince: e.validSince,
+                        validUntil: e.validUntil,
+                    },
+                },
+                upsert: true,
+            },
+        }));
+        await this.col.bulkWrite(ops, { ordered: false });
+    }
+    async list(authKeyId) {
+        const docs = await this.col
+            .find({ authKeyId: authKeyId.toString() })
+            .sort({ validSince: 1 })
+            .toArray();
+        return docs.map(d => ({ salt: BigInt(d.salt), validSince: d.validSince, validUntil: d.validUntil }));
+    }
+    async prune(authKeyId, before) {
+        await this.col.deleteMany({ authKeyId: authKeyId.toString(), validUntil: { $lte: before } });
+    }
+}
+class MongoSessionRepo {
+    col;
+    constructor(col) {
+        this.col = col;
+    }
+    async get(sessionId) {
+        const doc = await this.col.findOne({ _id: sessionId.toString() });
+        if (!doc)
+            return null;
+        return {
+            sessionId,
+            authKeyId: BigInt(doc.authKeyId),
+            uniqueId: BigInt(doc.uniqueId),
+            apiLayer: doc.apiLayer,
+            subject: doc.subject,
+            lastActivity: doc.lastActivity,
+        };
+    }
+    async save(rec) {
+        await this.col.updateOne({ _id: rec.sessionId.toString() }, {
+            $set: {
+                authKeyId: rec.authKeyId.toString(),
+                uniqueId: rec.uniqueId.toString(),
+                apiLayer: rec.apiLayer,
+                subject: rec.subject,
+                lastActivity: rec.lastActivity,
+            },
+        }, { upsert: true });
+    }
+    async update(sessionId, patch) {
+        const set = {};
+        if (patch.apiLayer !== undefined)
+            set.apiLayer = patch.apiLayer;
+        if (patch.subject !== undefined)
+            set.subject = patch.subject;
+        if (patch.lastActivity !== undefined)
+            set.lastActivity = patch.lastActivity;
+        if (Object.keys(set).length)
+            await this.col.updateOne({ _id: sessionId.toString() }, { $set: set });
+    }
+    async delete(sessionId) {
+        await this.col.deleteOne({ _id: sessionId.toString() });
+    }
+    async touch(sessionId) {
+        const res = await this.col.updateOne({ _id: sessionId.toString() }, { $set: { lastActivity: Date.now() } });
+        return res.matchedCount > 0;
+    }
+}
+export async function createMongoStorage(url, dbName) {
+    const client = new MongoClient(url);
+    await client.connect();
+    const db = client.db(dbName);
+    await ensureIndexes(db);
+    return {
+        authKeys: new MongoAuthKeyRepo(db.collection('authKeys')),
+        salts: new MongoSaltRepo(db.collection('serverSalts')),
+        sessions: new MongoSessionRepo(db.collection('sessions')),
+        async close() {
+            await client.close();
+        },
+    };
+}
+/**
+ * Create the secondary indexes the protocol collections rely on. Idempotent
+ * (Mongo no-ops an index that already exists), so it's safe to run on every
+ * startup. `_id`-keyed lookups (get/save/touch by id) need no extra index.
+ */
+async function ensureIndexes(db) {
+    await Promise.all([
+        // serverSalts: list() filters by authKeyId + sorts by validSince; prune()
+        // filters by authKeyId + validUntil.
+        db.collection('serverSalts').createIndex({ authKeyId: 1, validSince: 1 }),
+        db.collection('serverSalts').createIndex({ authKeyId: 1, validUntil: 1 }),
+        // sessions: looked up / aggregated by the key, the user, and recency.
+        db.collection('sessions').createIndex({ authKeyId: 1 }),
+        db.collection('sessions').createIndex({ subject: 1 }),
+        db.collection('sessions').createIndex({ lastActivity: 1 }),
+        // authKeys: "all devices for a user", moderation, and creation-over-time.
+        db.collection('authKeys').createIndex({ subject: 1 }),
+        db.collection('authKeys').createIndex({ isBlocked: 1 }),
+        db.collection('authKeys').createIndex({ createdAt: 1 }),
+    ]);
+}
+//# sourceMappingURL=mongo.js.map

package/dist/storage/mongo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mongo.js","sourceRoot":"","sources":["../../src/storage/mongo.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,EAAwD,MAAM,SAAS,CAAA;AA4CnG,SAAS,KAAK,CAAC,CAAS;IACpB,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;AAChC,CAAC;AAED,MAAM,gBAAgB;IACW;IAA7B,YAA6B,GAA2B;QAA3B,QAAG,GAAH,GAAG,CAAwB;IAAG,CAAC;IAC5D,KAAK,CAAC,MAAM,CAAC,GAAkB;QAC3B,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CACpB,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC,QAAQ,EAAE,EAAE,EAC1B;YACI,IAAI,EAAE;gBACF,GAAG,EAAE,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC;gBACxB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,KAAK;gBACjC,IAAI,EAAE,GAAG,CAAC,IAAI;aACjB;SACJ,EACD,EAAE,MAAM,EAAE,IAAI,EAAE,CACnB,CAAA;IACL,CAAC;IACD,KAAK,CAAC,OAAO,CAAC,EAAU;QACpB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;QAC1D,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAA;QACrB,OAAO;YACH,EAAE;YACF,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YACnB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,IAAI,EAAE,GAAG,CAAC,IAAI;SACjB,CAAA;IACL,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,EAAU,EAAE,OAAgB;QACzC,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC,CAAA;IACtF,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,EAAU,EAAE,OAAsB;QAC7C,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAA;IAC3E,CAAC;IACD,KAAK,CAAC,UAAU,CAAC,EAAU,EAAE,KAAkB;QAC3C,yEAAyE;QACzE,+DAA+D;QAC/D,MAAM,GAAG,GAA4B,EAAE,CAAA;QACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzC,IAAI,CAAC,KAAK,SAAS;gBAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,CAAC,CAAA;QAC7C,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM;YAAE,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAA;IAChG,CAAC;CACJ;AAED,MAAM,aAAa;IACc;IAA7B,YAA6B,GAAwB;QAAxB,QAAG,GAAH,GAAG,CAAqB;IAAG,CAAC;IACzD,KAAK,CAAC,MAAM,CAAC,SAAiB,EAAE,OAA4B;QACxD,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAM;QAC3B,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAA;QAChC,wEAAwE;QACxE,oEAAoE;QACpE,MAAM,GAAG,GAAqC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC5D,SAAS,EAAE;gBACP,MAAM,EAAE,EAAE,GAAG,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC,UAAU,EAAE,EAAE;gBACzC,MAAM,EAAE;oBACJ,YAAY,EAAE;wBACV,SAAS,EAAE,GAAG;wBACd,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE;wBACvB,UAAU,EAAE,CAAC,CAAC,UAAU;wBACxB,UAAU,EAAE,CAAC,CAAC,UAAU;qBAC3B;iBACJ;gBACD,MAAM,EAAE,IAAI;aACf;SACJ,CAAC,CAAC,CAAA;QACH,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAA;IACrD,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,SAAiB;QACxB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG;aACtB,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC;aACzC,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;aACvB,OAAO,EAAE,CAAA;QACd,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAA;IACxG,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,SAAiB,EAAE,MAAc;QACzC,MAAM,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAA;IAChG,CAAC;CACJ;AAED,MAAM,gBAAgB;IACW;IAA7B,YAA6B,GAA2B;QAA3B,QAAG,GAAH,GAAG,CAAwB;IAAG,CAAC;IAC5D,KAAK,CAAC,GAAG,CAAC,SAAiB;QACvB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;QACjE,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAA;QACrB,OAAO;YACH,SAAS;YACT,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;YAChC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YAC9B,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,OAAO,EAAE,GAAG,CAAC,OAAO;YACpB,YAAY,EAAE,GAAG,CAAC,YAAY;SACjC,CAAA;IACL,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,GAAkB;QACzB,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CACpB,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,EACjC;YACI,IAAI,EAAE;gBACF,SAAS,EAAE,GAAG,CAAC,SAAS,CAAC,QAAQ,EAAE;gBACnC,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,QAAQ,EAAE;gBACjC,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,OAAO,EAAE,GAAG,CAAC,OAAO;gBACpB,YAAY,EAAE,GAAG,CAAC,YAAY;aACjC;SACJ,EACD,EAAE,MAAM,EAAE,IAAI,EAAE,CACnB,CAAA;IACL,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,SAAiB,EAAE,KAA6B;QACzD,MAAM,GAAG,GAA4B,EAAE,CAAA;QACvC,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS;YAAE,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAA;QAC/D,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;YAAE,GAAG,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAA;QAC5D,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS;YAAE,GAAG,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAA;QAC3E,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM;YAAE,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAA;IACvG,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,SAAiB;QAC1B,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;IAC3D,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,SAAiB;QACzB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAChC,EAAE,GAAG,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,EAC7B,EAAE,IAAI,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE,CACzC,CAAA;QACD,OAAO,GAAG,CAAC,YAAY,GAAG,CAAC,CAAA;IAC/B,CAAC;CACJ;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAW,EAAE,MAAc;IAChE,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,CAAA;IACnC,MAAM,MAAM,CAAC,OAAO,EAAE,CAAA;IACtB,MAAM,EAAE,GAAO,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,CAAA;IAChC,MAAM,aAAa,CAAC,EAAE,CAAC,CAAA;IACvB,OAAO;QACH,QAAQ,EAAE,IAAI,gBAAgB,CAAC,EAAE,CAAC,UAAU,CAAa,UAAU,CAAC,CAAC;QACrE,KAAK,EAAE,IAAI,aAAa,CAAC,EAAE,CAAC,UAAU,CAAU,aAAa,CAAC,CAAC;QAC/D,QAAQ,EAAE,IAAI,gBAAgB,CAAC,EAAE,CAAC,UAAU,CAAa,UAAU,CAAC,CAAC;QACrE,KAAK,CAAC,KAAK;YACP,MAAM,MAAM,CAAC,KAAK,EAAE,CAAA;QACxB,CAAC;KACJ,CAAA;AACL,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,aAAa,CAAC,EAAM;IAC/B,MAAM,OAAO,CAAC,GAAG,CAAC;QACd,0EAA0E;QAC1E,qCAAqC;QACrC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;QACzE,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;QACzE,sEAAsE;QACtE,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QACvD,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QACrD,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;QAC1D,0EAA0E;QAC1E,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC;QACrD,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QACvD,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;KAC1D,CAAC,CAAA;AACN,CAAC"}

package/dist/storage/types.d.ts

@@ -0,0 +1,85 @@
+/** Persistence contracts for auth keys, server salts and sessions. */
+/**
+ * Connection/device metadata for an auth key. An auth key is one device
+ * authorization (one app install), so this — captured from `initConnection` — is
+ * stable per key and lives here rather than being duplicated across the key's
+ * sessions. `apiLayer` is the last layer negotiated via `invokeWithLayer`,
+ * restored for a fresh session before it re-negotiates.
+ */
+export interface AuthKeyMeta {
+    apiLayer?: number;
+    /** `initConnection.api_id` — the client app id. */
+    apiId?: number;
+    /** `initConnection.device_model`. */
+    deviceModel?: string;
+    /** `initConnection.system_version`. */
+    systemVersion?: string;
+    /** `initConnection.app_version`. */
+    appVersion?: string;
+    /** `initConnection.system_lang_code`. */
+    systemLangCode?: string;
+    /** `initConnection.lang_code`. */
+    langCode?: string;
+}
+export interface AuthKeyRecord {
+    id: bigint;
+    key: Buffer;
+    expiresIn: boolean;
+    createdAt: Date;
+    /** The bound subject (your internal user id), or null for an anonymous key. */
+    subject: string | null;
+    isBlocked?: boolean;
+    meta?: AuthKeyMeta;
+}
+export interface SessionRecord {
+    sessionId: bigint;
+    authKeyId: bigint;
+    uniqueId: bigint;
+    apiLayer: number;
+    subject?: string;
+    lastActivity: number;
+}
+export interface AuthKeyRepo {
+    create(rec: AuthKeyRecord): Promise<void>;
+    getById(id: bigint): Promise<AuthKeyRecord | null>;
+    setBlocked(id: bigint, blocked: boolean): Promise<void>;
+    /** Bind (or clear, with null) the subject authorized on this auth key. */
+    bindUser(id: bigint, subject: string | null): Promise<void>;
+    /** Merge `initConnection`-derived device/app fields into the key's meta. */
+    updateMeta(id: bigint, patch: AuthKeyMeta): Promise<void>;
+}
+/** One scheduled server salt and its validity window (unix seconds). */
+export interface SaltScheduleEntry {
+    salt: bigint;
+    /** Inclusive lower bound (unix seconds). */
+    validSince: number;
+    /** Exclusive upper bound (unix seconds). */
+    validUntil: number;
+}
+export interface SaltRepo {
+    /**
+     * Persist salt-schedule entries for an auth key. Inserts only windows not
+     * already present (keyed by `validSince`) and never overwrites an existing
+     * window's salt, so concurrent gateway nodes converge on one salt per window.
+     */
+    append(authKeyId: bigint, entries: SaltScheduleEntry[]): Promise<void>;
+    /** Full salt schedule for an auth key, ascending by `validSince`. */
+    list(authKeyId: bigint): Promise<SaltScheduleEntry[]>;
+    /** Drop entries that fully expired before `before` (unix seconds). */
+    prune(authKeyId: bigint, before: number): Promise<void>;
+}
+export interface SessionRepo {
+    get(sessionId: bigint): Promise<SessionRecord | null>;
+    save(rec: SessionRecord): Promise<void>;
+    update(sessionId: bigint, patch: Partial<SessionRecord>): Promise<void>;
+    delete(sessionId: bigint): Promise<void>;
+    /** Refresh last-activity; returns true if the session existed. */
+    touch(sessionId: bigint): Promise<boolean>;
+}
+export interface Storage {
+    authKeys: AuthKeyRepo;
+    salts: SaltRepo;
+    sessions: SessionRepo;
+    close(): Promise<void>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/storage/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/storage/types.ts"],"names":[],"mappings":"AAAA,sEAAsE;AAEtE;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,mDAAmD;IACnD,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,qCAAqC;IACrC,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,uCAAuC;IACvC,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,oCAAoC;IACpC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,yCAAyC;IACzC,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,kCAAkC;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,aAAa;IAC1B,EAAE,EAAE,MAAM,CAAA;IACV,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,OAAO,CAAA;IAClB,SAAS,EAAE,IAAI,CAAA;IACf,+EAA+E;IAC/E,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,IAAI,CAAC,EAAE,WAAW,CAAA;CACrB;AAED,MAAM,WAAW,aAAa;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;CACvB;AAED,MAAM,WAAW,WAAW;IACxB,MAAM,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACzC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAA;IAClD,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvD,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC3D,4EAA4E;IAC5E,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC5D;AAED,wEAAwE;AACxE,MAAM,WAAW,iBAAiB;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAA;IAClB,4CAA4C;IAC5C,UAAU,EAAE,MAAM,CAAA;CACrB;AAED,MAAM,WAAW,QAAQ;IACrB;;;;OAIG;IACH,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACtE,qEAAqE;IACrE,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAA;IACrD,sEAAsE;IACtE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC1D;AAED,MAAM,WAAW,WAAW;IACxB,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAA;IACrD,IAAI,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACvE,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IACxC,kEAAkE;IAClE,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;CAC7C;AAED,MAAM,WAAW,OAAO;IACpB,QAAQ,EAAE,WAAW,CAAA;IACrB,KAAK,EAAE,QAAQ,CAAA;IACf,QAAQ,EAAE,WAAW,CAAA;IACrB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACzB"}

package/dist/storage/types.js

@@ -0,0 +1,3 @@
+/** Persistence contracts for auth keys, server salts and sessions. */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/storage/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/storage/types.ts"],"names":[],"mappings":"AAAA,sEAAsE"}

package/dist/testkit.d.ts

@@ -0,0 +1,11 @@
+export { TlReader } from './tl/reader.js';
+export { TlWriter } from './tl/writer.js';
+export { TlCodec } from './tl/codec.js';
+export { loadSchema, type LoadSchemaResult } from './tl/registry.js';
+export { igeEncrypt, igeDecrypt } from './crypto/aes-ige.js';
+export { sha1 } from './crypto/hashes.js';
+export { generateMessageKey, computeMsgKey } from './crypto/msg-key.js';
+export { modPow } from './crypto/dh.js';
+export { rsaEncryptNoPadding } from './crypto/rsa.js';
+export { toBigIntBE, toBigIntLE, toBufferBE, toBufferLE, xorBuffers } from './util/bytes.js';
+//# sourceMappingURL=testkit.d.ts.map

package/dist/testkit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"testkit.d.ts","sourceRoot":"","sources":["../src/testkit.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AACvC,OAAO,EAAE,UAAU,EAAE,KAAK,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AAEpE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAC5D,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAA;AACzC,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACvE,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AACvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAErD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA"}

package/dist/testkit.js

@@ -0,0 +1,17 @@
+// @mt-tl/server/testkit — protocol primitives a TEST CLIENT needs (TL codec +
+// the client side of the MTProto 2.0 crypto). NOT part of the consumer surface:
+// servers are built with `createServer` from the package root. This subpath
+// exists so `@mt-tl/testing` can drive a real handshake + encrypted RPC
+// against a gateway without deep-importing internal files. The crypto here is
+// the same code pinned byte-for-byte by `test/crypto.kat.test.ts`.
+export { TlReader } from './tl/reader.js';
+export { TlWriter } from './tl/writer.js';
+export { TlCodec } from './tl/codec.js';
+export { loadSchema } from './tl/registry.js';
+export { igeEncrypt, igeDecrypt } from './crypto/aes-ige.js';
+export { sha1 } from './crypto/hashes.js';
+export { generateMessageKey, computeMsgKey } from './crypto/msg-key.js';
+export { modPow } from './crypto/dh.js';
+export { rsaEncryptNoPadding } from './crypto/rsa.js';
+export { toBigIntBE, toBigIntLE, toBufferBE, toBufferLE, xorBuffers } from './util/bytes.js';
+//# sourceMappingURL=testkit.js.map

package/dist/testkit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"testkit.js","sourceRoot":"","sources":["../src/testkit.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,gFAAgF;AAChF,4EAA4E;AAC5E,wEAAwE;AACxE,8EAA8E;AAC9E,mEAAmE;AAEnE,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAA;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AACvC,OAAO,EAAE,UAAU,EAAyB,MAAM,kBAAkB,CAAA;AAEpE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAA;AAC5D,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAA;AACzC,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACvE,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAA;AACvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAErD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA"}

package/dist/tl/codec.d.ts

@@ -0,0 +1,37 @@
+import type { TlRegistry } from './registry.js';
+import type { LayeredRegistry } from './layered-registry.js';
+import { TlReader } from './reader.js';
+import { TlWriter } from './writer.js';
+import type { TlObject, TlValue } from '@mt-tl/tl';
+/**
+ * IR-driven (de)serializer for arbitrary TL values. Constructed types are tagged
+ * objects `{ _: name, ...fields }`. Hand-written protocol codecs (registered on
+ * the registry) take precedence for their ids; everything else routes here.
+ *
+ * When a {@link LayeredRegistry} is supplied, `encode(value, layer)` writes each
+ * type with the constructor id/fields valid at the client's layer (decoding
+ * stays global by id). Without a layer, the merged registry is used.
+ */
+export declare class TlCodec {
+    private readonly registry;
+    private readonly layered?;
+    /** Set transiently during a single `encode(value, layer)` call. */
+    private encodeLayer?;
+    constructor(registry: TlRegistry, layered?: LayeredRegistry | undefined);
+    encode(value: TlObject, layer?: number): Buffer;
+    decode(buf: Buffer): TlValue;
+    /** Resolve the def to serialize a name with, honoring the active encode layer. */
+    private defForWrite;
+    writeObject(w: TlWriter, value: TlValue): void;
+    readObject(r: TlReader): TlValue;
+    private writeBare;
+    private readBare;
+    private writeFields;
+    private readFields;
+    private writeType;
+    private readType;
+    private writeVector;
+    private readVector;
+    private protocolCodecByName;
+}
+//# sourceMappingURL=codec.d.ts.map

package/dist/tl/codec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codec.d.ts","sourceRoot":"","sources":["../../src/tl/codec.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AAC5D,OAAO,EAAE,QAAQ,EAA0C,MAAM,aAAa,CAAA;AAC9E,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AACtC,OAAO,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAElD;;;;;;;;GAQG;AACH,qBAAa,OAAO;IAKZ,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;IAL7B,mEAAmE;IACnE,OAAO,CAAC,WAAW,CAAC,CAAQ;gBAGP,QAAQ,EAAE,UAAU,EACpB,OAAO,CAAC,EAAE,eAAe,YAAA;IAG9C,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM;IAW/C,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAI5B,kFAAkF;IAClF,OAAO,CAAC,WAAW;IAUnB,WAAW,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,GAAG,IAAI;IA2B9C,UAAU,CAAC,CAAC,EAAE,QAAQ,GAAG,OAAO;IAuBhC,OAAO,CAAC,SAAS;IAMjB,OAAO,CAAC,QAAQ;IAUhB,OAAO,CAAC,WAAW;IAyBnB,OAAO,CAAC,UAAU;IAoBlB,OAAO,CAAC,SAAS;IAkDjB,OAAO,CAAC,QAAQ;IAkChB,OAAO,CAAC,WAAW;IAMnB,OAAO,CAAC,UAAU;IAalB,OAAO,CAAC,mBAAmB;CAK9B"}