@plane31/blind-relay 0.0.0-stage → 0.1.1

package/dist/record.js

@@ -0,0 +1,46 @@
+/**
+ * Records: sealing with the active epoch, opening with certificate and manifest resolution
+ * (protocol section 9).
+ */
+import { equalBytes, toHex } from "./bytes.js";
+import { DocumentType, buildRecordWire, decodeEnvelope, expectType, openRecord as openRecordBody, parseDocument, verifyDocument } from "./codec.js";
+import { NONCE_BYTES, randomBytes, recordId } from "./crypto.js";
+import { MAX_COUNTER } from "./epoch.js";
+import { KavachError } from "./errors.js";
+/** Seal one record under the active epoch. The caller persists the result and the next counter (T6). */
+export function sealRecord(input) {
+    if (input.nextCounter > MAX_COUNTER)
+        throw new KavachError("COUNTER_EXHAUSTED", "sealRecord");
+    const nonce = input.nonce ?? randomBytes(NONCE_BYTES);
+    const wire = buildRecordWire({ streamId: input.streamId, epoch: input.epoch, counter: input.nextCounter, sentAt: input.sentAt, headerClass: input.headerClass, kind: input.kind, eventTime: input.eventTime }, input.payload, input.epochKey, nonce, input.signingSecretKey);
+    return { wire, recordId: recordId(input.streamId, input.epoch, input.nextCounter), counter: input.nextCounter, kind: input.kind };
+}
+/**
+ * Verify and open a record. The author view supplies the certificate for the record's stream
+ * (the current one, or an archived one for history); `epochKeyFor` returns the stored key for
+ * (stream, epoch) or `undefined`, which is `KEY_PENDING`.
+ */
+export function openRecordWire(wire, author, epochKeyFor) {
+    const stage = "openRecord";
+    const parsed = expectType(parseDocument(wire), DocumentType.EncryptedRecord, stage);
+    const cert = [...author.certificates.values()].find((c) => equalBytes(c.streamId, parsed.streamId));
+    if (!cert)
+        throw new KavachError("NOT_AUTHORIZED", stage, "record stream belongs to no known device of the author");
+    const record = expectType(verifyDocument(wire, cert.signingKey), DocumentType.EncryptedRecord, stage);
+    const key = epochKeyFor(record.streamId, record.epoch);
+    if (!key)
+        throw new KavachError("KEY_PENDING", stage, `no key for epoch ${record.epoch}`);
+    const envelope = decodeEnvelope(openRecordBody(record, key));
+    return { record, recordId: recordId(record.streamId, record.epoch, record.counter), kind: envelope.kind, eventTime: envelope.eventTime, payload: envelope.payload, superseded: !cert.current };
+}
+export function compareSlots(a, b) {
+    if (a.generation !== b.generation)
+        return a.generation < b.generation ? -1 : 1;
+    if (a.epoch !== b.epoch)
+        return a.epoch - b.epoch;
+    return a.counter - b.counter;
+}
+export function slotKey(streamId, epoch, counter) {
+    return `${toHex(streamId)}:${epoch}:${counter}`;
+}
+//# sourceMappingURL=record.js.map

package/dist/record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"record.js","sourceRoot":"","sources":["../src/record.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EACL,YAAY,EACZ,eAAe,EACf,cAAc,EACd,UAAU,EACV,UAAU,IAAI,cAAc,EAC5B,aAAa,EACb,cAAc,EAKf,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEjE,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAS1C,wGAAwG;AACxG,MAAM,UAAU,UAAU,CAAC,KAc1B;IACC,IAAI,KAAK,CAAC,WAAW,GAAG,WAAW;QAAE,MAAM,IAAI,WAAW,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC;IAC9F,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,WAAW,CAAC,WAAW,CAAC,CAAC;IACtD,MAAM,IAAI,GAAG,eAAe,CAC1B,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,EAChL,KAAK,CAAC,OAAO,EACb,KAAK,CAAC,QAAQ,EACd,KAAK,EACL,KAAK,CAAC,gBAAgB,CACvB,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;AACpI,CAAC;AAaD;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAgB,EAChB,MAAkB,EAClB,WAA4E;IAE5E,MAAM,KAAK,GAAG,YAAY,CAAC;IAC3B,MAAM,MAAM,GAAG,UAAU,CAAkB,aAAa,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IACrG,MAAM,IAAI,GAAG,CAAC,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpG,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,WAAW,CAAC,gBAAgB,EAAE,KAAK,EAAE,wDAAwD,CAAC,CAAC;IACpH,MAAM,MAAM,GAAG,UAAU,CAAkB,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,YAAY,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IACvH,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IACvD,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,WAAW,CAAC,aAAa,EAAE,KAAK,EAAE,oBAAoB,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAC1F,MAAM,QAAQ,GAAG,cAAc,CAAC,cAAc,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IAC7D,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,UAAU,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;AACjM,CAAC;AASD,MAAM,UAAU,YAAY,CAAC,CAAU,EAAE,CAAU;IACjD,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU;QAAE,OAAO,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,IAAI,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK;QAAE,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;IAClD,OAAO,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,QAAoB,EAAE,KAAa,EAAE,OAAe;IAC1E,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAI,OAAO,EAAE,CAAC;AAClD,CAAC"}

package/dist/reset.d.ts

@@ -0,0 +1,74 @@
+import { type AccountResetReceipt, type Parsed, type ResetKeyList } from "./codec.js";
+export interface ResetTrustConfig {
+    /** The deployment's pinned management public key. */
+    readonly managementKey: Uint8Array;
+    /** The packaged minimum list version. */
+    readonly minimumVersion: bigint;
+}
+export interface ResetBinding {
+    readonly accountName: string;
+    readonly oldIdentityId: string;
+    readonly newIdentityId: string;
+}
+export interface ResetTrustState {
+    readonly current: {
+        wire: Uint8Array;
+        list: Parsed<ResetKeyList>;
+    } | undefined;
+    /** The greatest trusted time seen: a durable high-water mark. */
+    readonly timeHighWater: bigint;
+    readonly acceptedReceipts: ReadonlySet<string>;
+    readonly events: ReadonlyMap<string, ResetBinding>;
+    readonly retired: ReadonlySet<string>;
+}
+export declare const emptyResetTrust: ResetTrustState;
+export type InstallOutcome = "INSTALLED" | "DUPLICATE";
+export type ApplyOutcome = "ACCOUNT_KEY_CHANGED" | "DUPLICATE";
+/** A peer's view of an accepted reset: who to stop sharing with, and whose circles close. */
+export interface ResetEffect {
+    readonly outcome: ApplyOutcome;
+    readonly oldIdentityId: Uint8Array;
+    readonly newIdentityId: Uint8Array;
+    readonly receipt: Parsed<AccountResetReceipt>;
+}
+export declare class ResetTrust {
+    readonly config: ResetTrustConfig;
+    state: ResetTrustState;
+    constructor(config: ResetTrustConfig, state?: ResetTrustState);
+    /** The platform clock under the accurate-clock assumption, checked against the high-water mark. */
+    private clock;
+    /** Is the current list usable at `now`? */
+    fresh(now: bigint): boolean;
+    /**
+     * Install a key list: verified under the pinned management key, version at least the packaged
+     * minimum and the durable highest, equal version only with an equal body, fresh at `now`.
+     */
+    install(wire: Uint8Array, now: bigint | undefined): InstallOutcome;
+    /**
+     * Apply a reset receipt for an account whose current pinned identity is `currentIdentityId`.
+     * Requires a fresh list, an allowed signer, a verified new certificate and consistent bindings.
+     */
+    apply(receiptWire: Uint8Array, newCertificate: Uint8Array, accountName: string, currentIdentityId: Uint8Array, now: bigint | undefined): ResetEffect;
+    toRows(): ResetTrustRows;
+    static fromRows(config: ResetTrustConfig, rows: ResetTrustRows): ResetTrust;
+}
+export interface ResetTrustRows {
+    list: {
+        wire: string;
+        version: string;
+        hash: string;
+        checkedAt: string;
+    } | undefined;
+    clock: {
+        highWater: string;
+    };
+    accepted: string[];
+    events: {
+        resetId: string;
+        accountName: string;
+        oldIdentityId: string;
+        newIdentityId: string;
+    }[];
+    retired: string[];
+}
+//# sourceMappingURL=reset.d.ts.map

package/dist/reset.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reset.d.ts","sourceRoot":"","sources":["../src/reset.ts"],"names":[],"mappings":"AASA,OAAO,EAML,KAAK,mBAAmB,EACxB,KAAK,MAAM,EACX,KAAK,YAAY,EAClB,MAAM,YAAY,CAAC;AAKpB,MAAM,WAAW,gBAAgB;IAC/B,qDAAqD;IACrD,QAAQ,CAAC,aAAa,EAAE,UAAU,CAAC;IACnC,yCAAyC;IACzC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE;QAAE,IAAI,EAAE,UAAU,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC,YAAY,CAAC,CAAA;KAAE,GAAG,SAAS,CAAC;IAC/E,iEAAiE;IACjE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,gBAAgB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC/C,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IACnD,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CACvC;AAED,eAAO,MAAM,eAAe,EAAE,eAA+H,CAAC;AAE9J,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,WAAW,CAAC;AACvD,MAAM,MAAM,YAAY,GAAG,qBAAqB,GAAG,WAAW,CAAC;AAE/D,6FAA6F;AAC7F,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,UAAU,CAAC;IACnC,QAAQ,CAAC,aAAa,EAAE,UAAU,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,mBAAmB,CAAC,CAAC;CAC/C;AAED,qBAAa,UAAU;IAEnB,QAAQ,CAAC,MAAM,EAAE,gBAAgB;IAC1B,KAAK,EAAE,eAAe;gBADpB,MAAM,EAAE,gBAAgB,EAC1B,KAAK,GAAE,eAAiC;IAGjD,mGAAmG;IACnG,OAAO,CAAC,KAAK;IAKb,2CAA2C;IAC3C,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO;IAK3B;;;OAGG;IACH,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,cAAc;IAkBlE;;;OAGG;IACH,KAAK,CAAC,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,iBAAiB,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,WAAW;IA6CpJ,MAAM,IAAI,cAAc;IAUxB,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,EAAE,IAAI,EAAE,cAAc,GAAG,UAAU;CAU5E;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,SAAS,CAAC;IACrF,KAAK,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7B,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,MAAM,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACjG,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB"}

package/dist/reset.js

@@ -0,0 +1,127 @@
+/**
+ * Last-resort account reset and the reset keys (protocol section 12).
+ *
+ * `ResetTrust` is the acceptance model for management-signed key lists (type 8) and reset
+ * receipts (type 7): version rules, the 30-day lifetime, the trusted-clock rules with a durable
+ * time high-water mark, revocation by list, and immutable reset bindings. It is pure state with
+ * row conversions; the client persists it in T9. Nothing here pauses sharing.
+ */
+import { equalBytes, fromHex, toHex } from "./bytes.js";
+import { DocumentType, expectType, parseDocument, verifyDocument } from "./codec.js";
+import { H, identityId } from "./crypto.js";
+import { KavachError } from "./errors.js";
+import { big, unbig } from "./rows.js";
+export const emptyResetTrust = { current: undefined, timeHighWater: 0n, acceptedReceipts: new Set(), events: new Map(), retired: new Set() };
+export class ResetTrust {
+    config;
+    state;
+    constructor(config, state = emptyResetTrust) {
+        this.config = config;
+        this.state = state;
+    }
+    /** The platform clock under the accurate-clock assumption, checked against the high-water mark. */
+    clock(now, stage) {
+        if (now === undefined || now < this.state.timeHighWater)
+            throw new KavachError("RESET_CLOCK_UNTRUSTED", stage);
+        return now;
+    }
+    /** Is the current list usable at `now`? */
+    fresh(now) {
+        const c = this.state.current;
+        return !!c && c.list.issuedAt <= now && now < c.list.expiresAt;
+    }
+    /**
+     * Install a key list: verified under the pinned management key, version at least the packaged
+     * minimum and the durable highest, equal version only with an equal body, fresh at `now`.
+     */
+    install(wire, now) {
+        const stage = "resetKeyList";
+        const list = expectType(verifyDocument(wire, this.config.managementKey), DocumentType.ResetKeyList, stage);
+        if (list.keys.some((k) => equalBytes(k.publicKey, this.config.managementKey))) {
+            throw new KavachError("INVALID_KEY", stage, "the management key cannot be an operational key");
+        }
+        const current = this.state.current;
+        if (list.version < this.config.minimumVersion || (current && list.version < current.list.version))
+            throw new KavachError("ROLLBACK", stage);
+        if (current && list.version === current.list.version && !equalBytes(list.bodyHash, current.list.bodyHash)) {
+            throw new KavachError("EQUIVOCATION", stage, "two key lists at one version");
+        }
+        const t = this.clock(now, stage);
+        if (!(list.issuedAt <= t && t < list.expiresAt))
+            throw new KavachError("RESET_KEYS_REQUIRED", stage, "list not fresh");
+        const outcome = current && list.version === current.list.version ? "DUPLICATE" : "INSTALLED";
+        this.state = { ...this.state, current: { wire, list }, timeHighWater: t };
+        return outcome;
+    }
+    /**
+     * Apply a reset receipt for an account whose current pinned identity is `currentIdentityId`.
+     * Requires a fresh list, an allowed signer, a verified new certificate and consistent bindings.
+     */
+    apply(receiptWire, newCertificate, accountName, currentIdentityId, now) {
+        const stage = "resetReceipt";
+        const parsed = expectType(parseDocument(receiptWire), DocumentType.AccountResetReceipt, stage);
+        const receiptHash = toHex(H(receiptWire));
+        if (this.state.acceptedReceipts.has(receiptHash)) {
+            return { outcome: "DUPLICATE", oldIdentityId: parsed.oldIdentityId, newIdentityId: parsed.newIdentityId, receipt: parsed };
+        }
+        const t = this.clock(now, stage);
+        if (!this.fresh(t))
+            throw new KavachError("RESET_KEYS_REQUIRED", stage, "no fresh key list");
+        const current = this.state.current;
+        if (!current)
+            throw new KavachError("RESET_KEYS_REQUIRED", stage);
+        const signer = current.list.keys.find((k) => equalBytes(k.keyId, parsed.authorityKeyId));
+        if (!signer)
+            throw new KavachError("RESET_KEY_REVOKED", stage, "the signing key is not in the current list");
+        const receipt = expectType(verifyDocument(receiptWire, signer.publicKey), DocumentType.AccountResetReceipt, stage);
+        const cert = expectType(verifyDocument(newCertificate), DocumentType.AccountDevice, stage);
+        const binding = { accountName: receipt.accountName, oldIdentityId: toHex(receipt.oldIdentityId), newIdentityId: toHex(receipt.newIdentityId) };
+        if (receipt.accountName !== accountName || cert.accountName !== accountName || !equalBytes(identityId(accountName, cert.accountKey), receipt.newIdentityId)) {
+            throw new KavachError("RESET_BINDING", stage, "receipt, account and certificate do not bind");
+        }
+        const resetId = toHex(receipt.resetId);
+        const known = this.state.events.get(resetId);
+        let outcome;
+        if (known) {
+            if (known.accountName !== binding.accountName || known.oldIdentityId !== binding.oldIdentityId || known.newIdentityId !== binding.newIdentityId) {
+                throw new KavachError("RESET_BINDING", stage, "a conflicting binding for a known reset id");
+            }
+            outcome = "DUPLICATE";
+        }
+        else {
+            if (!equalBytes(receipt.oldIdentityId, currentIdentityId) || this.state.retired.has(binding.newIdentityId)) {
+                throw new KavachError("RESET_BINDING", stage, "old identity is not the current pin, or the new one is retired");
+            }
+            outcome = "ACCOUNT_KEY_CHANGED";
+        }
+        const accepted = new Set(this.state.acceptedReceipts);
+        accepted.add(receiptHash);
+        const events = new Map(this.state.events);
+        events.set(resetId, binding);
+        const retired = new Set(this.state.retired);
+        retired.add(binding.oldIdentityId);
+        this.state = { ...this.state, acceptedReceipts: accepted, events, retired, timeHighWater: t };
+        return { outcome, oldIdentityId: receipt.oldIdentityId, newIdentityId: receipt.newIdentityId, receipt };
+    }
+    // Persistence ----------------------------------------------------------------------------------
+    toRows() {
+        return {
+            list: this.state.current ? { wire: toHex(this.state.current.wire), version: big(this.state.current.list.version), hash: toHex(this.state.current.list.bodyHash), checkedAt: big(this.state.timeHighWater) } : undefined,
+            clock: { highWater: big(this.state.timeHighWater) },
+            accepted: [...this.state.acceptedReceipts],
+            events: [...this.state.events.entries()].map(([resetId, b]) => ({ resetId, ...b })),
+            retired: [...this.state.retired]
+        };
+    }
+    static fromRows(config, rows) {
+        const current = rows.list ? { wire: fromHex(rows.list.wire), list: expectType(parseDocument(fromHex(rows.list.wire)), DocumentType.ResetKeyList) } : undefined;
+        return new ResetTrust(config, {
+            current,
+            timeHighWater: unbig(rows.clock.highWater),
+            acceptedReceipts: new Set(rows.accepted),
+            events: new Map(rows.events.map((e) => [e.resetId, { accountName: e.accountName, oldIdentityId: e.oldIdentityId, newIdentityId: e.newIdentityId }])),
+            retired: new Set(rows.retired)
+        });
+    }
+}
+//# sourceMappingURL=reset.js.map

package/dist/reset.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reset.js","sourceRoot":"","sources":["../src/reset.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACxD,OAAO,EACL,YAAY,EACZ,UAAU,EACV,aAAa,EACb,cAAc,EAKf,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAwBvC,MAAM,CAAC,MAAM,eAAe,GAAoB,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,EAAE,gBAAgB,EAAE,IAAI,GAAG,EAAE,EAAE,MAAM,EAAE,IAAI,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;AAa9J,MAAM,OAAO,UAAU;IAEV;IACF;IAFT,YACW,MAAwB,EAC1B,QAAyB,eAAe;QADtC,WAAM,GAAN,MAAM,CAAkB;QAC1B,UAAK,GAAL,KAAK,CAAmC;IAC9C,CAAC;IAEJ,mGAAmG;IAC3F,KAAK,CAAC,GAAuB,EAAE,KAAa;QAClD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa;YAAE,MAAM,IAAI,WAAW,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;QAC/G,OAAO,GAAG,CAAC;IACb,CAAC;IAED,2CAA2C;IAC3C,KAAK,CAAC,GAAW;QACf,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QAC7B,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,GAAG,IAAI,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC;IACjE,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,IAAgB,EAAE,GAAuB;QAC/C,MAAM,KAAK,GAAG,cAAc,CAAC;QAC7B,MAAM,IAAI,GAAG,UAAU,CAAe,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,YAAY,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QACzH,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;YAC9E,MAAM,IAAI,WAAW,CAAC,aAAa,EAAE,KAAK,EAAE,iDAAiD,CAAC,CAAC;QACjG,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QACnC,IAAI,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,cAAc,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC5I,IAAI,OAAO,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1G,MAAM,IAAI,WAAW,CAAC,cAAc,EAAE,KAAK,EAAE,8BAA8B,CAAC,CAAC;QAC/E,CAAC;QACD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC;QACvH,MAAM,OAAO,GAAmB,OAAO,IAAI,IAAI,CAAC,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC;QAC7G,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;QAC1E,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,WAAuB,EAAE,cAA0B,EAAE,WAAmB,EAAE,iBAA6B,EAAE,GAAuB;QACpI,MAAM,KAAK,GAAG,cAAc,CAAC;QAC7B,MAAM,MAAM,GAAG,UAAU,CAAsB,aAAa,CAAC,WAAW,CAAC,EAAE,YAAY,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;QACpH,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;YACjD,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAC7H,CAAC;QACD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC;QAC7F,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QACnC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,KAAK,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC;QACzF,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,WAAW,CAAC,mBAAmB,EAAE,KAAK,EAAE,4CAA4C,CAAC,CAAC;QAC7G,MAAM,OAAO,GAAG,UAAU,CAAsB,cAAc,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,YAAY,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAC;QACxI,MAAM,IAAI,GAAG,UAAU,CAAgB,cAAc,CAAC,cAAc,CAAC,EAAE,YAAY,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QAC1G,MAAM,OAAO,GAAiB,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QAC7J,IAAI,OAAO,CAAC,WAAW,KAAK,WAAW,IAAI,IAAI,CAAC,WAAW,KAAK,WAAW,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YAC5J,MAAM,IAAI,WAAW,CAAC,eAAe,EAAE,KAAK,EAAE,8CAA8C,CAAC,CAAC;QAChG,CAAC;QACD,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,OAAqB,CAAC;QAC1B,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,KAAK,CAAC,WAAW,KAAK,OAAO,CAAC,WAAW,IAAI,KAAK,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa,EAAE,CAAC;gBAChJ,MAAM,IAAI,WAAW,CAAC,eAAe,EAAE,KAAK,EAAE,4CAA4C,CAAC,CAAC;YAC9F,CAAC;YACD,OAAO,GAAG,WAAW,CAAC;QACxB,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,aAAa,EAAE,iBAAiB,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC3G,MAAM,IAAI,WAAW,CAAC,eAAe,EAAE,KAAK,EAAE,gEAAgE,CAAC,CAAC;YAClH,CAAC;YACD,OAAO,GAAG,qBAAqB,CAAC;QAClC,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACtD,QAAQ,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC1B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACnC,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;QAC9F,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,OAAO,EAAE,CAAC;IAC1G,CAAC;IAED,iGAAiG;IAEjG,MAAM;QACJ,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;YACvN,KAAK,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE;YACnD,QAAQ,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC;YAC1C,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;YACnF,OAAO,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;SACjC,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,MAAwB,EAAE,IAAoB;QAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,CAAe,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,YAAY,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7K,OAAO,IAAI,UAAU,CAAC,MAAM,EAAE;YAC5B,OAAO;YACP,aAAa,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;YAC1C,gBAAgB,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;YACxC,MAAM,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;YACpJ,OAAO,EAAE,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;SAC/B,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/rows.d.ts

@@ -0,0 +1,16 @@
+import type { CircleState } from "./circle.js";
+import type { AccountPin } from "./identity.js";
+import type { RevisionState } from "./audience.js";
+import type { PreparedEpoch } from "./epoch.js";
+import type { CircleRow, EpochRow, PinRow, RevisionRow } from "./store.js";
+export declare const big: (v: bigint) => string;
+export declare const unbig: (v: string) => bigint;
+export declare function pinToRow(p: AccountPin): PinRow;
+export declare function rowToPin(r: PinRow): AccountPin;
+export declare function circleToRow(c: CircleState): CircleRow;
+export declare function rowToCircle(r: CircleRow): CircleState;
+export declare function revisionToRow(s: RevisionState, paused: RevisionRow["paused"]): RevisionRow;
+export declare function rowToRevision(r: RevisionRow): RevisionState;
+export declare function preparedToRow(p: PreparedEpoch): EpochRow;
+export declare function rowToPrepared(r: EpochRow): PreparedEpoch;
+//# sourceMappingURL=rows.d.ts.map

package/dist/rows.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rows.d.ts","sourceRoot":"","sources":["../src/rows.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE3E,eAAO,MAAM,GAAG,GAAI,GAAG,MAAM,KAAG,MAAsB,CAAC;AACvD,eAAO,MAAM,KAAK,GAAI,GAAG,MAAM,KAAG,MAAmB,CAAC;AAEtD,wBAAgB,QAAQ,CAAC,CAAC,EAAE,UAAU,GAAG,MAAM,CAc9C;AAED,wBAAgB,QAAQ,CAAC,CAAC,EAAE,MAAM,GAAG,UAAU,CAc9C;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,WAAW,GAAG,SAAS,CAYrD;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,SAAS,GAAG,WAAW,CAYrD;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,GAAG,WAAW,CAO1F;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,WAAW,GAAG,aAAa,CAM3D;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,aAAa,GAAG,QAAQ,CAcxD;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,QAAQ,GAAG,aAAa,CAWxD"}

package/dist/rows.js

@@ -0,0 +1,103 @@
+/** Conversions between domain objects and the JSON-safe rows of the store. */
+import { fromHex, toHex } from "./bytes.js";
+export const big = (v) => v.toString();
+export const unbig = (v) => BigInt(v);
+export function pinToRow(p) {
+    return {
+        accountName: p.accountName,
+        accountKey: toHex(p.accountKey),
+        identityId: toHex(p.identityId),
+        generation: big(p.generation),
+        certificateHash: toHex(p.certificateHash),
+        certificate: toHex(p.certificate),
+        deviceId: toHex(p.deviceId),
+        signingKey: toHex(p.signingKey),
+        boxKey: toHex(p.boxKey),
+        streamId: toHex(p.streamId),
+        deviceIds: p.deviceIds.map(toHex)
+    };
+}
+export function rowToPin(r) {
+    return {
+        accountName: r.accountName,
+        accountKey: fromHex(r.accountKey),
+        identityId: fromHex(r.identityId),
+        generation: unbig(r.generation),
+        certificateHash: fromHex(r.certificateHash),
+        certificate: fromHex(r.certificate),
+        deviceId: fromHex(r.deviceId),
+        signingKey: fromHex(r.signingKey),
+        boxKey: fromHex(r.boxKey),
+        streamId: fromHex(r.streamId),
+        deviceIds: r.deviceIds.map(fromHex)
+    };
+}
+export function circleToRow(c) {
+    return {
+        circleId: toHex(c.circleId),
+        ownerIdentityId: toHex(c.ownerIdentityId),
+        revision: big(c.revision),
+        bodyHash: c.bodyHash ? toHex(c.bodyHash) : undefined,
+        snapshot: c.snapshot ? toHex(c.snapshot) : undefined,
+        members: c.members.map(toHex),
+        enabled: c.enabled,
+        status: c.status,
+        verifiedAt: big(c.verifiedAt)
+    };
+}
+export function rowToCircle(r) {
+    return {
+        circleId: fromHex(r.circleId),
+        ownerIdentityId: fromHex(r.ownerIdentityId),
+        revision: unbig(r.revision),
+        bodyHash: r.bodyHash ? fromHex(r.bodyHash) : undefined,
+        snapshot: r.snapshot ? fromHex(r.snapshot) : undefined,
+        members: r.members.map(fromHex),
+        enabled: r.enabled,
+        status: r.status,
+        verifiedAt: unbig(r.verifiedAt)
+    };
+}
+export function revisionToRow(s, paused) {
+    return {
+        desiredRevision: big(s.desiredRevision),
+        seenSnapshots: Object.fromEntries([...s.seenSnapshots].map(([k, v]) => [k, big(v)])),
+        seenCertificates: Object.fromEntries([...s.seenCertificates]),
+        paused
+    };
+}
+export function rowToRevision(r) {
+    return {
+        desiredRevision: unbig(r.desiredRevision),
+        seenSnapshots: new Map(Object.entries(r.seenSnapshots).map(([k, v]) => [k, unbig(v)])),
+        seenCertificates: new Map(Object.entries(r.seenCertificates))
+    };
+}
+export function preparedToRow(p) {
+    return {
+        epoch: p.epoch,
+        status: "prepared",
+        manifest: toHex(p.manifest),
+        manifestHash: toHex(p.manifestHash),
+        wraps: Object.fromEntries([...p.wraps].map(([k, v]) => [k, toHex(v)])),
+        epochKey: toHex(p.epochKey),
+        capturedRevision: big(p.capturedRevision),
+        audienceKey: p.audienceKey,
+        createdAt: big(p.createdAt),
+        nextCounter: 0,
+        lastSentAt: undefined
+    };
+}
+export function rowToPrepared(r) {
+    return {
+        epoch: r.epoch,
+        manifest: fromHex(r.manifest),
+        manifestHash: fromHex(r.manifestHash),
+        wraps: new Map(Object.entries(r.wraps).map(([k, v]) => [k, fromHex(v)])),
+        epochKey: fromHex(r.epochKey),
+        capturedRevision: unbig(r.capturedRevision),
+        audienceKey: r.audienceKey,
+        createdAt: unbig(r.createdAt)
+    };
+}
+//# sourceMappingURL=rows.js.map

package/dist/rows.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rows.js","sourceRoot":"","sources":["../src/rows.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAO5C,MAAM,CAAC,MAAM,GAAG,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;AACvD,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAEtD,MAAM,UAAU,QAAQ,CAAC,CAAa;IACpC,OAAO;QACL,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;QAC/B,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;QAC/B,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;QAC7B,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC;QACzC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC;QACjC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC3B,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;QAC/B,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACvB,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC3B,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;KAClC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,CAAS;IAChC,OAAO;QACL,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;QACjC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;QACjC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;QAC/B,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;QAC3C,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC;QACnC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC7B,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;QACjC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;QACzB,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC7B,SAAS,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC;KACpC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,CAAc;IACxC,OAAO;QACL,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC3B,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC;QACzC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;QACzB,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;QACpD,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;QACpD,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;QAC7B,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;KAC9B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,CAAY;IACtC,OAAO;QACL,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC7B,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;QAC3C,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC3B,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;QACtD,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS;QACtD,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC;QAC/B,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;KAChC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,CAAgB,EAAE,MAA6B;IAC3E,OAAO;QACL,eAAe,EAAE,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC;QACvC,aAAa,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpF,gBAAgB,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,gBAAgB,CAAC,CAAC;QAC7D,MAAM;KACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,CAAc;IAC1C,OAAO;QACL,eAAe,EAAE,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC;QACzC,aAAa,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtF,gBAAgB,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC;KAC9D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,CAAgB;IAC5C,OAAO;QACL,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,MAAM,EAAE,UAAU;QAClB,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC3B,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC;QACnC,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC3B,gBAAgB,EAAE,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC;QACzC,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3B,WAAW,EAAE,CAAC;QACd,UAAU,EAAE,SAAS;KACtB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,CAAW;IACvC,OAAO;QACL,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC7B,YAAY,EAAE,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC;QACrC,KAAK,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC7B,gBAAgB,EAAE,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAC3C,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;KAC9B,CAAC;AACJ,CAAC"}

package/dist/slots.d.ts

@@ -0,0 +1,22 @@
+import type { NewestRow, Tx } from "./store.js";
+export interface SlotOrder {
+    readonly generation: bigint;
+    readonly eventTime: bigint;
+    readonly epoch: number;
+    readonly counter: number;
+}
+export declare function compareSlotOrder(a: SlotOrder, b: SlotOrder): number;
+/** The event time a slot orders by: the envelope's, never later than `sentAt`; `sentAt` when the sender gave none. */
+export declare function clampEventTime(eventTime: bigint | undefined, sentAt: bigint): bigint;
+export declare function slotKey(authorIdentityId: string, kind: number): string;
+export declare function slotOrderOf(row: NewestRow): SlotOrder;
+export interface SlotCandidate extends SlotOrder {
+    readonly recordId: string;
+    readonly bodyHash: string;
+    readonly sentAt: bigint;
+    readonly receivedAt: bigint;
+    readonly payload: Uint8Array;
+}
+/** Take the slot if the candidate orders after its current holder (or there is none); true when it did. */
+export declare function takeSlot(tx: Tx, authorIdentityId: string, kind: number, c: SlotCandidate, toHex: (b: Uint8Array) => string): boolean;
+//# sourceMappingURL=slots.d.ts.map

package/dist/slots.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"slots.d.ts","sourceRoot":"","sources":["../src/slots.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,YAAY,CAAC;AAEhD,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,SAAS,GAAG,MAAM,CAInE;AAED,sHAAsH;AACtH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAEpF;AAED,wBAAgB,OAAO,CAAC,gBAAgB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEtE;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,SAAS,GAAG,SAAS,CAErD;AAED,MAAM,WAAW,aAAc,SAAQ,SAAS;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;CAC9B;AAED,2GAA2G;AAC3G,wBAAgB,QAAQ,CAAC,EAAE,EAAE,EAAE,EAAE,gBAAgB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,UAAU,KAAK,MAAM,GAAG,OAAO,CAOpI"}

package/dist/slots.js

@@ -0,0 +1,38 @@
+/**
+ * The newest slot (protocol section 10): for every kind declared `newest`, one row per author
+ * holding the newest record from the author's current device, shared by the receiver (T7) and
+ * the sender's own row (T6). Order: a newer device generation first; within one generation the
+ * later event time, clamped to the record's `sentAt` so a clock set ahead cannot hold the slot;
+ * equal event times by (epoch, counter). The slot outlives its payload: expiry drops the payload
+ * and keeps the order, so an older record replayed later cannot become current.
+ */
+import { compareSlots } from "./record.js";
+import { big, unbig } from "./rows.js";
+export function compareSlotOrder(a, b) {
+    if (a.generation !== b.generation)
+        return a.generation < b.generation ? -1 : 1;
+    if (a.eventTime !== b.eventTime)
+        return a.eventTime < b.eventTime ? -1 : 1;
+    return compareSlots(a, b);
+}
+/** The event time a slot orders by: the envelope's, never later than `sentAt`; `sentAt` when the sender gave none. */
+export function clampEventTime(eventTime, sentAt) {
+    return eventTime === undefined || eventTime > sentAt ? sentAt : eventTime;
+}
+export function slotKey(authorIdentityId, kind) {
+    return `${authorIdentityId}:${kind}`;
+}
+export function slotOrderOf(row) {
+    return { generation: unbig(row.generation), eventTime: unbig(row.eventTime), epoch: row.epoch, counter: row.counter };
+}
+/** Take the slot if the candidate orders after its current holder (or there is none); true when it did. */
+export function takeSlot(tx, authorIdentityId, kind, c, toHex) {
+    const key = slotKey(authorIdentityId, kind);
+    const current = tx.get("newest", key);
+    if (current && compareSlotOrder(c, slotOrderOf(current)) <= 0)
+        return false;
+    const next = { recordId: c.recordId, bodyHash: c.bodyHash, generation: big(c.generation), epoch: c.epoch, counter: c.counter, sentAt: big(c.sentAt), receivedAt: big(c.receivedAt), eventTime: big(c.eventTime), payload: toHex(c.payload) };
+    tx.put("newest", key, next);
+    return true;
+}
+//# sourceMappingURL=slots.js.map

package/dist/slots.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"slots.js","sourceRoot":"","sources":["../src/slots.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAUvC,MAAM,UAAU,gBAAgB,CAAC,CAAY,EAAE,CAAY;IACzD,IAAI,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU;QAAE,OAAO,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,SAAS;QAAE,OAAO,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,OAAO,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC5B,CAAC;AAED,sHAAsH;AACtH,MAAM,UAAU,cAAc,CAAC,SAA6B,EAAE,MAAc;IAC1E,OAAO,SAAS,KAAK,SAAS,IAAI,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,gBAAwB,EAAE,IAAY;IAC5D,OAAO,GAAG,gBAAgB,IAAI,IAAI,EAAE,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAc;IACxC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;AACxH,CAAC;AAUD,2GAA2G;AAC3G,MAAM,UAAU,QAAQ,CAAC,EAAM,EAAE,gBAAwB,EAAE,IAAY,EAAE,CAAgB,EAAE,KAAgC;IACzH,MAAM,GAAG,GAAG,OAAO,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;IAC5C,MAAM,OAAO,GAAG,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACtC,IAAI,OAAO,IAAI,gBAAgB,CAAC,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5E,MAAM,IAAI,GAAc,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACxP,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAC5B,OAAO,IAAI,CAAC;AACd,CAAC"}