@nihilium/recovery-storage-indexeddb 0.0.0-stage → 0.9.0

package/README.md

@@ -1,3 +1,17 @@
-# Temporary Holding Version
+# `@nihilium/recovery-storage-indexeddb`
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Core's `SealStore` and `SealedDataStore`, and `@nihilium/recovery-sdk`'s three ledger stores, over
+IndexedDB, for a browser wallet. `idbStores(options)` builds all five over one database; add `chains`
+and it is an `OrchestrationDeps`.
+
+```ts
+const deps = { ...idbStores({ dbName: "my-wallet" }), chains };
+```
+
+Opens per operation and closes when the transaction completes, so the conformance suites' "survives a
+reopen" cases are real reopens. The upgrade creates what is missing and drops nothing: a wallet that
+already owns a database keeps its rows. `getSeal` throws on a missing vault rather than resolving
+`undefined`; a duplicate `entryId` is refused by a unique index and surfaces as core's
+`OneWayViolationError`.
+
+Run core's and the sdk's conformance suites against it with `fake-indexeddb/auto` under a test runner.

package/dist/data-store.d.ts

@@ -0,0 +1,20 @@
+/**
+ * `SealedDataStore` over IndexedDB — the encrypted records, which are inert without the seal.
+ *
+ * Add-only, no update, no delete, and no listing: a listing would make whoever holds the records
+ * a directory of who has a recovery. Every method normalizes the record id first, so the display
+ * form and the canonical form hit the same record.
+ */
+import { type RecordId, type SealedDataEntry, type SealedDataStore } from "@nihilium/recovery-core";
+import { type IdbOptions } from "./indexeddb.js";
+export declare class IdbSealedDataStore implements SealedDataStore {
+    private readonly options;
+    readonly domain: string;
+    constructor(options?: IdbOptions & {
+        domain?: string;
+    });
+    addEntry(recordId: RecordId, entry: SealedDataEntry): Promise<void>;
+    /** Oldest first — insertion order, which is primary-key order for an autoIncrement store. */
+    getEntries(recordId: RecordId): Promise<SealedDataEntry[]>;
+}
+//# sourceMappingURL=data-store.d.ts.map

package/dist/data-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-store.d.ts","sourceRoot":"","sources":["../src/data-store.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAIH,KAAK,QAAQ,EACb,KAAK,eAAe,EACpB,KAAK,eAAe,EACvB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAA6B,KAAK,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAQ5E,qBAAa,kBAAmB,YAAW,eAAe;IAG1C,OAAO,CAAC,QAAQ,CAAC,OAAO;IAFpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEK,OAAO,GAAE,UAAU,GAAG;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAO;IAIrE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAqBzE,6FAA6F;IACvF,UAAU,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,eAAe,EAAE,CAAC;CAKnE"}

package/dist/data-store.js

@@ -0,0 +1,48 @@
+/**
+ * `SealedDataStore` over IndexedDB — the encrypted records, which are inert without the seal.
+ *
+ * Add-only, no update, no delete, and no listing: a listing would make whoever holds the records
+ * a directory of who has a recovery. Every method normalizes the record id first, so the display
+ * form and the canonical form hit the same record.
+ */
+import { OneWayViolationError, SEALED_DATA_STORE_SUBJECT, normalizeRecordId, } from "@nihilium/recovery-core";
+import { detach, STORES, withStore } from "./indexeddb.js";
+export class IdbSealedDataStore {
+    options;
+    domain;
+    constructor(options = {}) {
+        this.options = options;
+        this.domain = options.domain ?? "browser-indexeddb";
+    }
+    async addEntry(recordId, entry) {
+        // First, and not defensively: a malformed id must be refused here rather than becoming a
+        // record nobody can look up again.
+        const id = normalizeRecordId(recordId);
+        const row = {
+            recordId: id,
+            entryId: entry.entryId,
+            entry: { ...entry, storedAt: entry.storedAt ?? Math.floor(Date.now() / 1000) },
+        };
+        try {
+            await withStore(this.options, STORES.records, "readwrite", (store, run) => run(store.add(row)));
+        }
+        catch (error) {
+            // The unique `byEntry` index is what detects this, so the rejection is atomic — no
+            // read-then-write window where two appends both see an empty slot.
+            if (isConstraintError(error)) {
+                throw new OneWayViolationError(id, `entry "${entry.entryId}" already exists and records are never replaced`, SEALED_DATA_STORE_SUBJECT);
+            }
+            throw error;
+        }
+    }
+    /** Oldest first — insertion order, which is primary-key order for an autoIncrement store. */
+    async getEntries(recordId) {
+        const id = normalizeRecordId(recordId);
+        const rows = await withStore(this.options, STORES.records, "readonly", (store, run) => run(store.index("byRecord").getAll(id)));
+        return rows.map((row) => detach(row.entry));
+    }
+}
+function isConstraintError(error) {
+    return typeof error === "object" && error !== null && "name" in error && error.name === "ConstraintError";
+}
+//# sourceMappingURL=data-store.js.map

package/dist/data-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-store.js","sourceRoot":"","sources":["../src/data-store.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACH,oBAAoB,EACpB,yBAAyB,EACzB,iBAAiB,GAIpB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAmB,MAAM,gBAAgB,CAAC;AAQ5E,MAAM,OAAO,kBAAkB;IAGE;IAFpB,MAAM,CAAS;IAExB,YAA6B,UAA4C,EAAE;QAA9C,YAAO,GAAP,OAAO,CAAuC;QACvE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,mBAAmB,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,QAAkB,EAAE,KAAsB;QACrD,yFAAyF;QACzF,mCAAmC;QACnC,MAAM,EAAE,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,GAAG,GAAc;YACnB,QAAQ,EAAE,EAAE;YACZ,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE;SACjF,CAAC;QACF,IAAI,CAAC;YACD,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACpG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,mFAAmF;YACnF,mEAAmE;YACnE,IAAI,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3B,MAAM,IAAI,oBAAoB,CAAC,EAAE,EAAE,UAAU,KAAK,CAAC,OAAO,iDAAiD,EAAE,yBAAyB,CAAC,CAAC;YAC5I,CAAC;YACD,MAAM,KAAK,CAAC;QAChB,CAAC;IACL,CAAC;IAED,6FAA6F;IAC7F,KAAK,CAAC,UAAU,CAAC,QAAkB;QAC/B,MAAM,EAAE,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAc,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7I,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAChD,CAAC;CACJ;AAED,SAAS,iBAAiB,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,IAAK,KAA4B,CAAC,IAAI,KAAK,iBAAiB,CAAC;AACtI,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,22 @@
+/**
+ * `@nihilium/recovery-storage-indexeddb` — the §12 storage contracts and the sdk's ledger stores
+ * over IndexedDB, for a browser wallet.
+ *
+ * Five stores in one database, opened per call. Pass `dbName` to keep a database a wallet already
+ * owns; the upgrade creates what is missing and drops nothing.
+ */
+export { DB_VERSION, DEFAULT_DB_NAME, STORES, clearStores, deleteDatabase, detach, withStore } from "./indexeddb.js";
+export type { IdbOptions } from "./indexeddb.js";
+export { IdbSealStore, SealNotFoundError } from "./seal-store.js";
+export { IdbSealedDataStore } from "./data-store.js";
+export { IdbHandoverStore, IdbVaultLedgerStore, IdbWatchRecordStore } from "./ledger-stores.js";
+import type { OrchestrationDeps } from "@nihilium/recovery-sdk";
+import type { IdbOptions } from "./indexeddb.js";
+import { IdbWatchRecordStore } from "./ledger-stores.js";
+/** Every store the orchestration needs, over one database. Add `chains` and it is an `OrchestrationDeps`. */
+export declare function idbStores(options?: IdbOptions & {
+    domain?: string;
+}): Omit<OrchestrationDeps, "chains"> & {
+    watches: IdbWatchRecordStore;
+};
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AACrH,YAAY,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEhG,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAChE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAGjD,OAAO,EAAyC,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEhG,6GAA6G;AAC7G,wBAAgB,SAAS,CAAC,OAAO,GAAE,UAAU,GAAG;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,IAAI,CAAC,iBAAiB,EAAE,QAAQ,CAAC,GAAG;IAAE,OAAO,EAAE,mBAAmB,CAAA;CAAE,CAQ9I"}

package/dist/index.js

@@ -0,0 +1,25 @@
+/**
+ * `@nihilium/recovery-storage-indexeddb` — the §12 storage contracts and the sdk's ledger stores
+ * over IndexedDB, for a browser wallet.
+ *
+ * Five stores in one database, opened per call. Pass `dbName` to keep a database a wallet already
+ * owns; the upgrade creates what is missing and drops nothing.
+ */
+export { DB_VERSION, DEFAULT_DB_NAME, STORES, clearStores, deleteDatabase, detach, withStore } from "./indexeddb.js";
+export { IdbSealStore, SealNotFoundError } from "./seal-store.js";
+export { IdbSealedDataStore } from "./data-store.js";
+export { IdbHandoverStore, IdbVaultLedgerStore, IdbWatchRecordStore } from "./ledger-stores.js";
+import { IdbSealStore } from "./seal-store.js";
+import { IdbSealedDataStore } from "./data-store.js";
+import { IdbHandoverStore, IdbVaultLedgerStore, IdbWatchRecordStore } from "./ledger-stores.js";
+/** Every store the orchestration needs, over one database. Add `chains` and it is an `OrchestrationDeps`. */
+export function idbStores(options = {}) {
+    return {
+        sealStore: new IdbSealStore(options),
+        dataStore: new IdbSealedDataStore(options),
+        ledger: new IdbVaultLedgerStore(options),
+        handovers: new IdbHandoverStore(options),
+        watches: new IdbWatchRecordStore(options),
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAErH,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAClE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAIhG,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAEhG,6GAA6G;AAC7G,MAAM,UAAU,SAAS,CAAC,UAA4C,EAAE;IACpE,OAAO;QACH,SAAS,EAAE,IAAI,YAAY,CAAC,OAAO,CAAC;QACpC,SAAS,EAAE,IAAI,kBAAkB,CAAC,OAAO,CAAC;QAC1C,MAAM,EAAE,IAAI,mBAAmB,CAAC,OAAO,CAAC;QACxC,SAAS,EAAE,IAAI,gBAAgB,CAAC,OAAO,CAAC;QACxC,OAAO,EAAE,IAAI,mBAAmB,CAAC,OAAO,CAAC;KAC5C,CAAC;AACN,CAAC"}

package/dist/indexeddb.d.ts

@@ -0,0 +1,53 @@
+/**
+ * The twenty lines of IndexedDB plumbing every store here sits on.
+ *
+ * Opens per operation and closes when the transaction completes. That is not tidiness: the
+ * conformance suites build a store, use it, and then build a *second* one expecting to see the
+ * first one's data — a "survives a reopen" case that a long-lived connection would pass for the
+ * wrong reason. Opening per call makes the reopen real every time.
+ *
+ * **Create-if-absent, drop nothing.** Every store is created only when missing, so a wallet that
+ * already runs an earlier layout under its own `dbName` keeps its rows — a recovery in flight
+ * survives the upgrade, which matters because the handover store is exactly what holds one.
+ *
+ * **Assumes:** a browser with IndexedDB, or `fake-indexeddb` under a test runner; nothing here
+ * touches `window`.
+ */
+/** 6: adds `watches`. Earlier numbers belong to the demo this grew out of; they drop nothing here. */
+export declare const DB_VERSION = 6;
+export declare const DEFAULT_DB_NAME = "nihilium-recovery";
+/** Every store this package keeps. Declared in one place so an upgrade is a diff, not an archaeology. */
+export declare const STORES: {
+    /** vaultId → { vaultId, storedAt, blob }. Bearer material: one row is a whole seal. */
+    readonly seals: "seals";
+    /** Append-only encrypted records, indexed by recordId and uniquely by (recordId, entryId). */
+    readonly records: "records";
+    /** The ledger of what was sealed — `VaultRecord`. */
+    readonly vaults: "vaults";
+    /** Recoveries submitted on-chain and waiting out a timelock. Signed intents, never keys. */
+    readonly handovers: "handovers";
+    /** What this device keeps about each vault's watch. */
+    readonly watches: "watches";
+};
+export interface IdbOptions {
+    /** Defaults to `nihilium-recovery`. Tests pass a fresh name per case. */
+    dbName?: string;
+}
+/**
+ * Runs `fn` inside one transaction and resolves when the transaction *completes* — not when the
+ * request succeeds. A write that resolved on `onsuccess` would let a caller observe data that the
+ * transaction had not yet committed.
+ */
+export declare function withStore<T>(options: IdbOptions, storeName: string, mode: IDBTransactionMode, fn: (store: IDBObjectStore, run: <R>(request: IDBRequest<R>) => Promise<R>) => Promise<T> | T): Promise<T>;
+/** Structured-cloned on the way out, so a caller mutating what it got cannot reach the store. */
+export declare function detach<T>(value: T): T;
+/** Empty the named stores and leave the rest, and the database, in place. */
+export declare function clearStores(names: readonly string[], options?: IdbOptions): Promise<void>;
+/**
+ * Delete the whole database. Blunt, and the right answer only for a throwaway wallet: seals are
+ * bearer material and records are append-only, so "repair the rows" is not something this can
+ * honestly offer. A blocked delete — another tab holding the database open — rejects rather than
+ * hanging.
+ */
+export declare function deleteDatabase(dbName?: string): Promise<void>;
+//# sourceMappingURL=indexeddb.d.ts.map

package/dist/indexeddb.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"indexeddb.d.ts","sourceRoot":"","sources":["../src/indexeddb.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,sGAAsG;AACtG,eAAO,MAAM,UAAU,IAAI,CAAC;AAE5B,eAAO,MAAM,eAAe,sBAAsB,CAAC;AAEnD,yGAAyG;AACzG,eAAO,MAAM,MAAM;IACf,uFAAuF;;IAEvF,8FAA8F;;IAE9F,qDAAqD;;IAErD,4FAA4F;;IAE5F,uDAAuD;;CAEjD,CAAC;AAEX,MAAM,WAAW,UAAU;IACvB,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB;AAyCD;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,CAAC,EAC7B,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,kBAAkB,EACxB,EAAE,EAAE,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,GAC9F,OAAO,CAAC,CAAC,CAAC,CAmBZ;AAED,iGAAiG;AACjG,wBAAgB,MAAM,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAErC;AAED,6EAA6E;AAC7E,wBAAsB,WAAW,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,EAAE,OAAO,GAAE,UAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAInG;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,MAAM,SAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAOtE"}

package/dist/indexeddb.js

@@ -0,0 +1,119 @@
+/**
+ * The twenty lines of IndexedDB plumbing every store here sits on.
+ *
+ * Opens per operation and closes when the transaction completes. That is not tidiness: the
+ * conformance suites build a store, use it, and then build a *second* one expecting to see the
+ * first one's data — a "survives a reopen" case that a long-lived connection would pass for the
+ * wrong reason. Opening per call makes the reopen real every time.
+ *
+ * **Create-if-absent, drop nothing.** Every store is created only when missing, so a wallet that
+ * already runs an earlier layout under its own `dbName` keeps its rows — a recovery in flight
+ * survives the upgrade, which matters because the handover store is exactly what holds one.
+ *
+ * **Assumes:** a browser with IndexedDB, or `fake-indexeddb` under a test runner; nothing here
+ * touches `window`.
+ */
+/** 6: adds `watches`. Earlier numbers belong to the demo this grew out of; they drop nothing here. */
+export const DB_VERSION = 6;
+export const DEFAULT_DB_NAME = "nihilium-recovery";
+/** Every store this package keeps. Declared in one place so an upgrade is a diff, not an archaeology. */
+export const STORES = {
+    /** vaultId → { vaultId, storedAt, blob }. Bearer material: one row is a whole seal. */
+    seals: "seals",
+    /** Append-only encrypted records, indexed by recordId and uniquely by (recordId, entryId). */
+    records: "records",
+    /** The ledger of what was sealed — `VaultRecord`. */
+    vaults: "vaults",
+    /** Recoveries submitted on-chain and waiting out a timelock. Signed intents, never keys. */
+    handovers: "handovers",
+    /** What this device keeps about each vault's watch. */
+    watches: "watches",
+};
+function open(dbName) {
+    return new Promise((resolve, reject) => {
+        const request = indexedDB.open(dbName, DB_VERSION);
+        request.onupgradeneeded = () => {
+            const db = request.result;
+            if (!db.objectStoreNames.contains(STORES.seals)) {
+                db.createObjectStore(STORES.seals, { keyPath: "vaultId" });
+            }
+            if (!db.objectStoreNames.contains(STORES.records)) {
+                const records = db.createObjectStore(STORES.records, { autoIncrement: true });
+                records.createIndex("byRecord", "recordId", { unique: false });
+                // Unique, so IndexedDB itself rejects a duplicate entry rather than this package
+                // read-modify-writing its way into a race. The rejection becomes core's own
+                // `OneWayViolationError` in `data-store.ts`.
+                records.createIndex("byEntry", ["recordId", "entryId"], { unique: true });
+            }
+            if (!db.objectStoreNames.contains(STORES.vaults)) {
+                db.createObjectStore(STORES.vaults, { keyPath: "vaultId" });
+            }
+            if (!db.objectStoreNames.contains(STORES.handovers)) {
+                const handovers = db.createObjectStore(STORES.handovers, { keyPath: "id" });
+                handovers.createIndex("byVault", "vaultId", { unique: false });
+            }
+            if (!db.objectStoreNames.contains(STORES.watches)) {
+                db.createObjectStore(STORES.watches, { keyPath: "vaultId" });
+            }
+        };
+        request.onsuccess = () => resolve(request.result);
+        request.onerror = () => reject(request.error ?? new Error("Could not open IndexedDB"));
+    });
+}
+function promisify(request) {
+    return new Promise((resolve, reject) => {
+        request.onsuccess = () => resolve(request.result);
+        request.onerror = () => reject(request.error ?? new Error("IndexedDB request failed"));
+    });
+}
+/**
+ * Runs `fn` inside one transaction and resolves when the transaction *completes* — not when the
+ * request succeeds. A write that resolved on `onsuccess` would let a caller observe data that the
+ * transaction had not yet committed.
+ */
+export async function withStore(options, storeName, mode, fn) {
+    const db = await open(options.dbName ?? DEFAULT_DB_NAME);
+    try {
+        const tx = db.transaction(storeName, mode);
+        const store = tx.objectStore(storeName);
+        const settled = new Promise((resolve, reject) => {
+            tx.oncomplete = () => resolve();
+            tx.onabort = () => reject(tx.error ?? new Error("IndexedDB transaction aborted"));
+            tx.onerror = () => reject(tx.error ?? new Error("IndexedDB transaction failed"));
+        });
+        // A failed request aborts its transaction, so one cause rejects both promises. Marking this
+        // one observed keeps the abort from surfacing as a second, unhandled rejection.
+        void settled.catch(() => undefined);
+        const result = await fn(store, promisify);
+        await settled;
+        return result;
+    }
+    finally {
+        db.close();
+    }
+}
+/** Structured-cloned on the way out, so a caller mutating what it got cannot reach the store. */
+export function detach(value) {
+    return structuredClone(value);
+}
+/** Empty the named stores and leave the rest, and the database, in place. */
+export async function clearStores(names, options = {}) {
+    for (const name of names) {
+        await withStore(options, name, "readwrite", (store, run) => run(store.clear()));
+    }
+}
+/**
+ * Delete the whole database. Blunt, and the right answer only for a throwaway wallet: seals are
+ * bearer material and records are append-only, so "repair the rows" is not something this can
+ * honestly offer. A blocked delete — another tab holding the database open — rejects rather than
+ * hanging.
+ */
+export function deleteDatabase(dbName = DEFAULT_DB_NAME) {
+    return new Promise((resolve, reject) => {
+        const request = indexedDB.deleteDatabase(dbName);
+        request.onsuccess = () => resolve();
+        request.onerror = () => reject(request.error ?? new Error(`Could not delete ${dbName}.`));
+        request.onblocked = () => reject(new Error(`Another tab still has "${dbName}" open, so it cannot be deleted. Close the other tabs and try again.`));
+    });
+}
+//# sourceMappingURL=indexeddb.js.map

package/dist/indexeddb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"indexeddb.js","sourceRoot":"","sources":["../src/indexeddb.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,sGAAsG;AACtG,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC;AAE5B,MAAM,CAAC,MAAM,eAAe,GAAG,mBAAmB,CAAC;AAEnD,yGAAyG;AACzG,MAAM,CAAC,MAAM,MAAM,GAAG;IAClB,uFAAuF;IACvF,KAAK,EAAE,OAAO;IACd,8FAA8F;IAC9F,OAAO,EAAE,SAAS;IAClB,qDAAqD;IACrD,MAAM,EAAE,QAAQ;IAChB,4FAA4F;IAC5F,SAAS,EAAE,WAAW;IACtB,uDAAuD;IACvD,OAAO,EAAE,SAAS;CACZ,CAAC;AAOX,SAAS,IAAI,CAAC,MAAc;IACxB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnC,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACnD,OAAO,CAAC,eAAe,GAAG,GAAG,EAAE;YAC3B,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;YAC1B,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9C,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;YAC/D,CAAC;YACD,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChD,MAAM,OAAO,GAAG,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC9E,OAAO,CAAC,WAAW,CAAC,UAAU,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC/D,iFAAiF;gBACjF,4EAA4E;gBAC5E,6CAA6C;gBAC7C,OAAO,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9E,CAAC;YACD,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC/C,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;YAChE,CAAC;YACD,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;gBAClD,MAAM,SAAS,GAAG,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC5E,SAAS,CAAC,WAAW,CAAC,SAAS,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;YACnE,CAAC;YACD,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBAChD,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;YACjE,CAAC;QACL,CAAC,CAAC;QACF,OAAO,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClD,OAAO,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,SAAS,CAAI,OAAsB;IACxC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnC,OAAO,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClD,OAAO,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;IAC3F,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC3B,OAAmB,EACnB,SAAiB,EACjB,IAAwB,EACxB,EAA6F;IAE7F,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC;IACzD,IAAI,CAAC;QACD,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC3C,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAClD,EAAE,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;YAChC,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC,CAAC;YAClF,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC;QACrF,CAAC,CAAC,CAAC;QACH,4FAA4F;QAC5F,gFAAgF;QAChF,KAAK,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QAC1C,MAAM,OAAO,CAAC;QACd,OAAO,MAAM,CAAC;IAClB,CAAC;YAAS,CAAC;QACP,EAAE,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;AACL,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,MAAM,CAAI,KAAQ;IAC9B,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC;AAClC,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,KAAwB,EAAE,UAAsB,EAAE;IAChF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACpF,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,MAAM,GAAG,eAAe;IACnD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnC,MAAM,OAAO,GAAG,SAAS,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QACjD,OAAO,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;QACpC,OAAO,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,oBAAoB,MAAM,GAAG,CAAC,CAAC,CAAC;QAC1F,OAAO,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,MAAM,sEAAsE,CAAC,CAAC,CAAC;IACxJ,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/ledger-stores.d.ts

@@ -0,0 +1,27 @@
+/** The sdk's three ledger stores over IndexedDB. Each is the interface and nothing more. */
+import type { HandoverRecord, HandoverStore, VaultLedgerStore, VaultRecord, VaultWatchRecord, WatchRecordStore } from "@nihilium/recovery-sdk";
+import { type IdbOptions } from "./indexeddb.js";
+export declare class IdbVaultLedgerStore implements VaultLedgerStore {
+    private readonly options;
+    constructor(options?: IdbOptions);
+    put(record: VaultRecord): Promise<void>;
+    get(vaultId: string): Promise<VaultRecord | undefined>;
+    list(): Promise<VaultRecord[]>;
+    delete(vaultId: string): Promise<void>;
+}
+export declare class IdbHandoverStore implements HandoverStore {
+    private readonly options;
+    constructor(options?: IdbOptions);
+    put(record: HandoverRecord): Promise<void>;
+    forVault(vaultId: string): Promise<HandoverRecord[]>;
+    list(): Promise<HandoverRecord[]>;
+    delete(id: string): Promise<void>;
+}
+export declare class IdbWatchRecordStore implements WatchRecordStore {
+    private readonly options;
+    constructor(options?: IdbOptions);
+    put(record: VaultWatchRecord): Promise<void>;
+    get(vaultId: string): Promise<VaultWatchRecord | undefined>;
+    delete(vaultId: string): Promise<void>;
+}
+//# sourceMappingURL=ledger-stores.d.ts.map

package/dist/ledger-stores.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger-stores.d.ts","sourceRoot":"","sources":["../src/ledger-stores.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,gBAAgB,EAAE,WAAW,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC/I,OAAO,EAA6B,KAAK,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE5E,qBAAa,mBAAoB,YAAW,gBAAgB;IAC5C,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,GAAE,UAAe;IAE/C,GAAG,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAGvC,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC;IAItD,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;IAI9B,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG/C;AAED,qBAAa,gBAAiB,YAAW,aAAa;IACtC,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,GAAE,UAAe;IAE/C,GAAG,CAAC,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC;IAG1C,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAIpD,IAAI,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IAIjC,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG1C;AAED,qBAAa,mBAAoB,YAAW,gBAAgB;IAC5C,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,GAAE,UAAe;IAE/C,GAAG,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAG5C,GAAG,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;IAI3D,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG/C"}

package/dist/ledger-stores.js

@@ -0,0 +1,58 @@
+import { detach, STORES, withStore } from "./indexeddb.js";
+export class IdbVaultLedgerStore {
+    options;
+    constructor(options = {}) {
+        this.options = options;
+    }
+    async put(record) {
+        await withStore(this.options, STORES.vaults, "readwrite", (store, run) => run(store.put(record)));
+    }
+    async get(vaultId) {
+        const row = await withStore(this.options, STORES.vaults, "readonly", (store, run) => run(store.get(vaultId)));
+        return row === undefined ? undefined : detach(row);
+    }
+    async list() {
+        const rows = await withStore(this.options, STORES.vaults, "readonly", (store, run) => run(store.getAll()));
+        return rows.map((row) => detach(row));
+    }
+    async delete(vaultId) {
+        await withStore(this.options, STORES.vaults, "readwrite", (store, run) => run(store.delete(vaultId)));
+    }
+}
+export class IdbHandoverStore {
+    options;
+    constructor(options = {}) {
+        this.options = options;
+    }
+    async put(record) {
+        await withStore(this.options, STORES.handovers, "readwrite", (store, run) => run(store.put(record)));
+    }
+    async forVault(vaultId) {
+        const rows = await withStore(this.options, STORES.handovers, "readonly", (store, run) => run(store.index("byVault").getAll(vaultId)));
+        return rows.map((row) => detach(row));
+    }
+    async list() {
+        const rows = await withStore(this.options, STORES.handovers, "readonly", (store, run) => run(store.getAll()));
+        return rows.map((row) => detach(row));
+    }
+    async delete(id) {
+        await withStore(this.options, STORES.handovers, "readwrite", (store, run) => run(store.delete(id)));
+    }
+}
+export class IdbWatchRecordStore {
+    options;
+    constructor(options = {}) {
+        this.options = options;
+    }
+    async put(record) {
+        await withStore(this.options, STORES.watches, "readwrite", (store, run) => run(store.put(record)));
+    }
+    async get(vaultId) {
+        const row = await withStore(this.options, STORES.watches, "readonly", (store, run) => run(store.get(vaultId)));
+        return row === undefined ? undefined : detach(row);
+    }
+    async delete(vaultId) {
+        await withStore(this.options, STORES.watches, "readwrite", (store, run) => run(store.delete(vaultId)));
+    }
+}
+//# sourceMappingURL=ledger-stores.js.map

package/dist/ledger-stores.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ledger-stores.js","sourceRoot":"","sources":["../src/ledger-stores.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAmB,MAAM,gBAAgB,CAAC;AAE5E,MAAM,OAAO,mBAAmB;IACC;IAA7B,YAA6B,UAAsB,EAAE;QAAxB,YAAO,GAAP,OAAO,CAAiB;IAAG,CAAC;IAEzD,KAAK,CAAC,GAAG,CAAC,MAAmB;QACzB,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACtG,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,OAAe;QACrB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAA0B,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACvI,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACvD,CAAC;IACD,KAAK,CAAC,IAAI;QACN,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAgB,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC1H,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,OAAe;QACxB,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC1G,CAAC;CACJ;AAED,MAAM,OAAO,gBAAgB;IACI;IAA7B,YAA6B,UAAsB,EAAE;QAAxB,YAAO,GAAP,OAAO,CAAiB;IAAG,CAAC;IAEzD,KAAK,CAAC,GAAG,CAAC,MAAsB;QAC5B,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACzG,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,OAAe;QAC1B,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAmB,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACxJ,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,KAAK,CAAC,IAAI;QACN,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAmB,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAChI,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,EAAU;QACnB,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACxG,CAAC;CACJ;AAED,MAAM,OAAO,mBAAmB;IACC;IAA7B,YAA6B,UAAsB,EAAE;QAAxB,YAAO,GAAP,OAAO,CAAiB;IAAG,CAAC;IAEzD,KAAK,CAAC,GAAG,CAAC,MAAwB;QAC9B,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACvG,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,OAAe;QACrB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAA+B,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAC7I,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACvD,CAAC;IACD,KAAK,CAAC,MAAM,CAAC,OAAe;QACxB,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3G,CAAC;CACJ"}

package/dist/seal-store.d.ts

@@ -0,0 +1,31 @@
+/**
+ * `SealStore` over IndexedDB — where a browser wallet keeps its bearer material.
+ *
+ * `getSeal` **throws** on a missing vault rather than resolving `undefined`; core's conformance
+ * suite checks that, because a store that answers "nothing here" for a seal a user believes in is
+ * worse than one that fails loudly. One seal per `vaultId`; a re-put replaces (seals are mutable,
+ * unlike records).
+ */
+import type { SealBlob, SealRef, SealStore } from "@nihilium/recovery-core";
+import { type IdbOptions } from "./indexeddb.js";
+export declare class SealNotFoundError extends Error {
+    readonly name = "SealNotFoundError";
+    constructor(vaultId: string);
+}
+export declare class IdbSealStore implements SealStore {
+    private readonly options;
+    /**
+     * Truthful, and load-bearing: `checkSealPlacement` compares this against the identity factor's
+     * domain. "local" would be a lie that happens to pass the check.
+     */
+    readonly domain: string;
+    constructor(options?: IdbOptions & {
+        domain?: string;
+    });
+    putSeal(vaultId: string, blob: SealBlob): Promise<void>;
+    getSeal(vaultId: string): Promise<SealBlob>;
+    /** A seal that is already gone is the state the caller wanted. Not an error. */
+    deleteSeal(vaultId: string): Promise<void>;
+    listSeals(): Promise<SealRef[]>;
+}
+//# sourceMappingURL=seal-store.d.ts.map

package/dist/seal-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seal-store.d.ts","sourceRoot":"","sources":["../src/seal-store.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAA6B,KAAK,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE5E,qBAAa,iBAAkB,SAAQ,KAAK;IACxC,SAAkB,IAAI,uBAAuB;gBACjC,OAAO,EAAE,MAAM;CAG9B;AAQD,qBAAa,YAAa,YAAW,SAAS;IAO9B,OAAO,CAAC,QAAQ,CAAC,OAAO;IANpC;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEK,OAAO,GAAE,UAAU,GAAG;QAAE,MAAM,CAAC,EAAE,MAAM,CAAA;KAAO;IAIrE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC;IAKvD,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAMjD,gFAAgF;IAC1E,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI1C,SAAS,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;CAIxC"}

package/dist/seal-store.js

@@ -0,0 +1,38 @@
+import { detach, STORES, withStore } from "./indexeddb.js";
+export class SealNotFoundError extends Error {
+    name = "SealNotFoundError";
+    constructor(vaultId) {
+        super(`No seal for vault "${vaultId}" on this device. Import the seal file you downloaded.`);
+    }
+}
+export class IdbSealStore {
+    options;
+    /**
+     * Truthful, and load-bearing: `checkSealPlacement` compares this against the identity factor's
+     * domain. "local" would be a lie that happens to pass the check.
+     */
+    domain;
+    constructor(options = {}) {
+        this.options = options;
+        this.domain = options.domain ?? "browser-indexeddb";
+    }
+    async putSeal(vaultId, blob) {
+        const row = { vaultId, storedAt: Math.floor(Date.now() / 1000), blob };
+        await withStore(this.options, STORES.seals, "readwrite", (store, run) => run(store.put(row)));
+    }
+    async getSeal(vaultId) {
+        const row = await withStore(this.options, STORES.seals, "readonly", (store, run) => run(store.get(vaultId)));
+        if (row === undefined)
+            throw new SealNotFoundError(vaultId);
+        return detach(row.blob);
+    }
+    /** A seal that is already gone is the state the caller wanted. Not an error. */
+    async deleteSeal(vaultId) {
+        await withStore(this.options, STORES.seals, "readwrite", (store, run) => run(store.delete(vaultId)));
+    }
+    async listSeals() {
+        const rows = await withStore(this.options, STORES.seals, "readonly", (store, run) => run(store.getAll()));
+        return rows.map((row) => ({ vaultId: row.vaultId, storedAt: row.storedAt }));
+    }
+}
+//# sourceMappingURL=seal-store.js.map

package/dist/seal-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seal-store.js","sourceRoot":"","sources":["../src/seal-store.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAmB,MAAM,gBAAgB,CAAC;AAE5E,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IACtB,IAAI,GAAG,mBAAmB,CAAC;IAC7C,YAAY,OAAe;QACvB,KAAK,CAAC,sBAAsB,OAAO,wDAAwD,CAAC,CAAC;IACjG,CAAC;CACJ;AAQD,MAAM,OAAO,YAAY;IAOQ;IAN7B;;;OAGG;IACM,MAAM,CAAS;IAExB,YAA6B,UAA4C,EAAE;QAA9C,YAAO,GAAP,OAAO,CAAuC;QACvE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,mBAAmB,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAe,EAAE,IAAc;QACzC,MAAM,GAAG,GAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC;QAChF,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAClG,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAe;QACzB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAsB,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QAClI,IAAI,GAAG,KAAK,SAAS;YAAE,MAAM,IAAI,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC5D,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,gFAAgF;IAChF,KAAK,CAAC,UAAU,CAAC,OAAe;QAC5B,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACzG,CAAC;IAED,KAAK,CAAC,SAAS;QACX,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAY,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACrH,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IACjF,CAAC;CACJ"}

package/package.json

@@ -1,6 +1,30 @@
 {
   "name": "@nihilium/recovery-storage-indexeddb",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.9.0",
+  "description": "The §12 storage contracts and the sdk's ledger stores over IndexedDB, for browser wallets.",
+  "license": "MIT",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": ["dist", "README.md"],
+  "scripts": {
+    "build": "tsc -b",
+    "clean": "tsc -b --clean"
+  },
+  "dependencies": {
+    "@nihilium/recovery-core": "^0.9.0",
+    "@nihilium/recovery-sdk": "^0.9.0"
+  },
+  "devDependencies": {
+    "fake-indexeddb": "^6.2.5"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}