@plane31/blind-relay 0.0.0-stage → 0.1.2

package/dist/transactions.js

@@ -0,0 +1,212 @@
+/**
+ * The named transaction boundaries of protocol section 11 (T1 to T5, T8, T9). T6, T6h and T7
+ * live with the outbox and the inbox. Each function takes an open `Tx` so callers can compose
+ * them; nothing here opens the network.
+ */
+import { equalBytes, toHex } from "./bytes.js";
+import { applyAudienceEvent, initialRevisionState } from "./audience.js";
+import { DocumentType, expectType, parseDocument } from "./codec.js";
+import { identityId } from "./crypto.js";
+import { promote } from "./epoch.js";
+import { KavachError } from "./errors.js";
+import { openAccount, pinFromCertificate } from "./identity.js";
+import { big, pinToRow, preparedToRow, revisionToRow, rowToPrepared, rowToRevision, unbig } from "./rows.js";
+export const META = "meta";
+export const SELF = "self";
+export const STREAM = "stream";
+export const REVISION = "revision";
+export const VAULT = "vault";
+/**
+ * Bind the secret store to the local store. A mismatch between the two is `RECOVERY_REQUIRED`
+ * and is resolved by device replacement, never by inventing counters.
+ */
+export async function openStore(store, secrets, accountName) {
+    const stage = "openStore";
+    const [accountSeed, instanceId] = await Promise.all([secrets.get("accountSeed"), secrets.get("instanceId")]);
+    const meta = await store.read((tx) => tx.get("meta", META));
+    if (!accountSeed || !instanceId) {
+        if (meta)
+            throw new KavachError("RECOVERY_REQUIRED", stage, "store present but secrets missing");
+        return { kind: "fresh" };
+    }
+    const account = openAccount(accountName, accountSeed);
+    if (!meta)
+        return { kind: "initializing", account };
+    if (meta.instanceId !== toHex(instanceId) || meta.identityId !== toHex(account.identityId) || meta.accountName !== accountName || meta.schema !== 1) {
+        throw new KavachError("RECOVERY_REQUIRED", stage, "store header does not match the secret store");
+    }
+    if (meta.state === "INITIALIZING")
+        return { kind: "initializing", account };
+    return { kind: meta.state, meta, account };
+}
+// T1 ----------------------------------------------------------------------------------------------
+/** T1a: roots into the secret store. Idempotent for the same values. */
+export async function t1Secrets(secrets, roots) {
+    await secrets.set("accountSeed", roots.accountSeed);
+    await secrets.set("deviceSeed", roots.deviceSeed);
+    await secrets.set("recoveryKey", roots.recoveryKey);
+    await secrets.set("instanceId", roots.instanceId);
+}
+/** T1b: the store header with the INITIALIZING marker, the own pin and the stream state. */
+export function t1Header(tx, input) {
+    const doc = expectType(parseDocument(input.certificate), DocumentType.AccountDevice, "t1");
+    const pin = pinFromCertificate(doc);
+    if (!equalBytes(pin.identityId, input.account.identityId))
+        throw new KavachError("MALFORMED", "t1", "certificate is not for this account");
+    tx.put("meta", META, {
+        schema: 1,
+        historyIndex: 1,
+        newest: 1,
+        instanceId: toHex(input.instanceId),
+        accountName: input.account.accountName,
+        identityId: toHex(input.account.identityId),
+        certificateHash: toHex(pin.certificateHash),
+        state: "INITIALIZING"
+    });
+    tx.put("self", SELF, {
+        generation: big(input.generation),
+        deviceId: toHex(input.device.deviceId),
+        certificate: toHex(input.certificate),
+        certificateHash: toHex(pin.certificateHash),
+        streamId: toHex(pin.streamId)
+    });
+    tx.put("pins", toHex(pin.identityId), pinToRow(pin));
+    tx.put("certificates", toHex(pin.certificateHash), {
+        identityId: toHex(pin.identityId),
+        certificateHash: toHex(pin.certificateHash),
+        signingKey: toHex(pin.signingKey),
+        boxKey: toHex(pin.boxKey),
+        streamId: toHex(pin.streamId),
+        generation: big(input.generation),
+        wire: toHex(input.certificate),
+        current: true
+    });
+    tx.put("stream", STREAM, { highestCommittedEpoch: 0, activeEpoch: undefined, pendingEpoch: undefined });
+    tx.put("revision", REVISION, revisionToRow(initialRevisionState, undefined));
+}
+/** T1c: ACTIVE once the certificate is durable at the host. */
+export function t1Activate(tx) {
+    const meta = tx.get("meta", META);
+    if (!meta)
+        throw new KavachError("STORAGE_FAILURE", "t1", "no header");
+    tx.put("meta", META, { ...meta, state: "ACTIVE" });
+}
+// T2 ----------------------------------------------------------------------------------------------
+/** T2: the exact replacement certificate and vault bytes prepared for activation. */
+export function t2PrepareActivation(tx, row) {
+    tx.put("activation", "pending", row);
+    const meta = tx.get("meta", META);
+    if (meta)
+        tx.put("meta", META, { ...meta, state: "ACTIVATION_PENDING" });
+}
+/**
+ * T3: a verified circle or device change. Bumps the desired revision, invalidates the active
+ * epoch, burns its counters and cancels queued (not yet handed off) outbox rows sealed under the
+ * obsolete revision. Pauses with `rotation`.
+ */
+export function t3ApplyChange(tx, event) {
+    const row = tx.get("revision", REVISION);
+    const state = row ? rowToRevision(row) : initialRevisionState;
+    const { state: next, changed } = applyAudienceEvent(state, event);
+    if (!changed)
+        return { changed: false, desiredRevision: state.desiredRevision, cancelled: [] };
+    tx.put("revision", REVISION, revisionToRow(next, "rotation"));
+    const stream = tx.get("stream", STREAM);
+    if (stream?.activeEpoch !== undefined) {
+        const active = tx.get("epochs", String(stream.activeEpoch));
+        if (active)
+            tx.put("epochs", String(stream.activeEpoch), { ...active, status: "obsolete" });
+        tx.put("stream", STREAM, { ...stream, activeEpoch: undefined });
+    }
+    const cancelled = [];
+    for (const [key, out] of tx.list("outbox")) {
+        if (out.status === "queued" && unbig(out.desiredRevision) < next.desiredRevision) {
+            tx.put("outbox", key, { ...out, wire: "", status: "cancelled", reason: "rotation" });
+            cancelled.push(key);
+        }
+    }
+    return { changed: true, desiredRevision: next.desiredRevision, cancelled };
+}
+/**
+ * T3c: one circle row change with its bookkeeping. The row is stored, the audience event it
+ * implies (if any) rotates the sending epoch, and the vault is marked so the backup follows the
+ * rows. Every circle write except the restore from the vault itself goes through here.
+ */
+export function t3Circle(tx, row, event) {
+    tx.put("circles", row.circleId, row);
+    t9MarkVault(tx);
+    return event ? t3ApplyChange(tx, event) : { changed: false, desiredRevision: currentRevision(tx), cancelled: [] };
+}
+export function currentRevision(tx) {
+    const row = tx.get("revision", REVISION);
+    return row ? unbig(row.desiredRevision) : 1n;
+}
+// T4 and T5 ---------------------------------------------------------------------------------------
+/** T4: the exact manifest, wraps, key and audience checkpoint of a prepared epoch. One unresolved epoch per stream. */
+export function t4PersistPrepared(tx, prepared) {
+    const stream = tx.get("stream", STREAM) ?? { highestCommittedEpoch: 0, activeEpoch: undefined, pendingEpoch: undefined };
+    // Never overwrite an unresolved epoch, even at the same number: a second preparation carries a
+    // different key, and publishing both is an equivocation against ourselves.
+    if (stream.pendingEpoch !== undefined)
+        throw new KavachError("ROTATION_REQUIRED", "t4", "an epoch is already unresolved");
+    if (prepared.epoch !== stream.highestCommittedEpoch + 1)
+        throw new KavachError("MALFORMED", "t4", "epoch must be highestCommitted + 1");
+    tx.put("epochs", String(prepared.epoch), preparedToRow(prepared));
+    tx.put("stream", STREAM, { ...stream, pendingEpoch: prepared.epoch });
+}
+/** T5: a committed publication. Promotion is conditional on the revision and the exact audience. */
+export function t5Committed(tx, epoch, currentAudienceKey) {
+    const stream = tx.get("stream", STREAM);
+    const row = tx.get("epochs", String(epoch));
+    if (!stream || !row)
+        throw new KavachError("STORAGE_FAILURE", "t5", "unknown epoch");
+    // Idempotent: two contexts can both learn of one publication. The second must not reset a
+    // counter the first already started allocating from.
+    if (row.status === "active")
+        return "PROMOTED";
+    if (row.status === "obsolete" || row.status === "retired")
+        return "OBSOLETE";
+    const outcome = promote(rowToPrepared(row), currentRevision(tx), currentAudienceKey);
+    const revision = tx.get("revision", REVISION);
+    if (outcome === "PROMOTED") {
+        tx.put("epochs", String(epoch), { ...row, status: "active", nextCounter: 0 });
+        tx.put("stream", STREAM, { highestCommittedEpoch: Math.max(stream.highestCommittedEpoch, epoch), activeEpoch: epoch, pendingEpoch: undefined });
+        // A promoted epoch resolved whatever paused sending: the rotation, the missing certificate,
+        // or the audience limit. The sync pause belongs to the host and stays.
+        if (revision?.paused && revision.paused !== "sync")
+            tx.put("revision", REVISION, { ...revision, paused: undefined });
+    }
+    else {
+        tx.put("epochs", String(epoch), { ...row, status: "obsolete" });
+        tx.put("stream", STREAM, { ...stream, highestCommittedEpoch: Math.max(stream.highestCommittedEpoch, epoch), pendingEpoch: undefined });
+    }
+    return outcome;
+}
+// T8 and T9 ---------------------------------------------------------------------------------------
+/** T8: the owner's successor snapshot, kept until the host confirms it. */
+export function t8OwnerSnapshot(tx, circleId, snapshot, revision, close = false) {
+    const key = toHex(circleId);
+    const row = tx.get("circles", key);
+    if (!row)
+        throw new KavachError("STORAGE_FAILURE", "t8", "unknown circle");
+    tx.put("circles", key, { ...row, pending: { snapshot: toHex(snapshot), revision: big(revision), ...(close ? { close: true } : {}) } });
+}
+/** T9: a vault update prepared for publication (or confirmed). */
+export function t9Vault(tx, row) {
+    tx.put("vault", VAULT, row);
+}
+/** T9 marker: the circle rows changed in this transaction, so the vault has to be derived from them again. */
+export function t9MarkVault(tx) {
+    const row = tx.get("vault", VAULT);
+    if (row && !row.dirty)
+        tx.put("vault", VAULT, { ...row, dirty: true });
+}
+/** Own identity id from the header, for callers that only hold a transaction. */
+export function selfIdentity(tx, accountName, accountKey) {
+    const meta = tx.get("meta", META);
+    const iid = identityId(accountName, accountKey);
+    if (meta && meta.identityId !== toHex(iid))
+        throw new KavachError("RECOVERY_REQUIRED", "selfIdentity");
+    return iid;
+}
+//# sourceMappingURL=transactions.js.map

package/dist/transactions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transactions.js","sourceRoot":"","sources":["../src/transactions.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAsB,MAAM,eAAe,CAAC;AAC7F,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAsB,MAAM,YAAY,CAAC;AACzF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAoC,MAAM,eAAe,CAAC;AAClG,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAG7G,MAAM,CAAC,MAAM,IAAI,GAAG,MAAM,CAAC;AAC3B,MAAM,CAAC,MAAM,IAAI,GAAG,MAAM,CAAC;AAC3B,MAAM,CAAC,MAAM,MAAM,GAAG,QAAQ,CAAC;AAC/B,MAAM,CAAC,MAAM,QAAQ,GAAG,UAAU,CAAC;AACnC,MAAM,CAAC,MAAM,KAAK,GAAG,OAAO,CAAC;AAS7B;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,KAAY,EAAE,OAAoB,EAAE,WAAmB;IACrF,MAAM,KAAK,GAAG,WAAW,CAAC;IAC1B,MAAM,CAAC,WAAW,EAAE,UAAU,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC7G,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IAC5D,IAAI,CAAC,WAAW,IAAI,CAAC,UAAU,EAAE,CAAC;QAChC,IAAI,IAAI;YAAE,MAAM,IAAI,WAAW,CAAC,mBAAmB,EAAE,KAAK,EAAE,mCAAmC,CAAC,CAAC;QACjG,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;IAC3B,CAAC;IACD,MAAM,OAAO,GAAG,WAAW,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IACtD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC;IACpD,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,WAAW,KAAK,WAAW,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpJ,MAAM,IAAI,WAAW,CAAC,mBAAmB,EAAE,KAAK,EAAE,8CAA8C,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,KAAK,cAAc;QAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC;IAC5E,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC7C,CAAC;AAED,oGAAoG;AAEpG,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAoB,EAAE,KAA2G;IAC/J,MAAM,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAClD,MAAM,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;IACpD,MAAM,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;AACpD,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,QAAQ,CAAC,EAAM,EAAE,KAAuH;IACtJ,MAAM,GAAG,GAAG,UAAU,CAAgB,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,YAAY,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAC1G,MAAM,GAAG,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,IAAI,EAAE,qCAAqC,CAAC,CAAC;IAC3I,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE;QACnB,MAAM,EAAE,CAAC;QACT,YAAY,EAAE,CAAC;QACf,MAAM,EAAE,CAAC;QACT,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC;QACnC,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,WAAW;QACtC,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;QAC3C,eAAe,EAAE,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC;QAC3C,KAAK,EAAE,cAAc;KACtB,CAAC,CAAC;IACH,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE;QACnB,UAAU,EAAE,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC;QACjC,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;QACtC,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC;QACrC,eAAe,EAAE,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC;QAC3C,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;KAC9B,CAAC,CAAC;IACH,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,EAAE,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE;QACjD,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;QACjC,eAAe,EAAE,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC;QAC3C,UAAU,EAAE,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;QACjC,MAAM,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;QACzB,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;QAC7B,UAAU,EAAE,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC;QACjC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC;QAC9B,OAAO,EAAE,IAAI;KACd,CAAC,CAAC;IACH,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,qBAAqB,EAAE,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC;IACxG,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,aAAa,CAAC,oBAAoB,EAAE,SAAS,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,UAAU,CAAC,EAAM;IAC/B,MAAM,IAAI,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;IACvE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,oGAAoG;AAEpG,qFAAqF;AACrF,MAAM,UAAU,mBAAmB,CAAC,EAAM,EAAE,GAAkB;IAC5D,EAAE,CAAC,GAAG,CAAC,YAAY,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAClC,IAAI,IAAI;QAAE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC,CAAC;AAC3E,CAAC;AAUD;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,EAAM,EAAE,KAAoB;IACxD,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC;IAC9D,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,kBAAkB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAClE,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,CAAC,eAAe,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC/F,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,aAAa,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAG,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxC,IAAI,MAAM,EAAE,WAAW,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;QAC5D,IAAI,MAAM;YAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QAC5F,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3C,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;YACjF,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;YACrF,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,SAAS,EAAE,CAAC;AAC7E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,EAAM,EAAE,GAAc,EAAE,KAAqB;IACpE,EAAE,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACrC,WAAW,CAAC,EAAE,CAAC,CAAC;IAChB,OAAO,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,eAAe,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AACpH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,EAAmB;IACjD,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IACzC,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,oGAAoG;AAEpG,uHAAuH;AACvH,MAAM,UAAU,iBAAiB,CAAC,EAAM,EAAE,QAAuB;IAC/D,MAAM,MAAM,GAAG,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,qBAAqB,EAAE,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;IACzH,+FAA+F;IAC/F,2EAA2E;IAC3E,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS;QAAE,MAAM,IAAI,WAAW,CAAC,mBAAmB,EAAE,IAAI,EAAE,gCAAgC,CAAC,CAAC;IAC1H,IAAI,QAAQ,CAAC,KAAK,KAAK,MAAM,CAAC,qBAAqB,GAAG,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,IAAI,EAAE,oCAAoC,CAAC,CAAC;IACxI,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;IAClE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,YAAY,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;AACxE,CAAC;AAID,oGAAoG;AACpG,MAAM,UAAU,WAAW,CAAC,EAAM,EAAE,KAAa,EAAE,kBAA0B;IAC3E,MAAM,MAAM,GAAG,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;IACrF,0FAA0F;IAC1F,qDAAqD;IACrD,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC;IAC/C,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC;IAC7E,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,eAAe,CAAC,EAAE,CAAC,EAAE,kBAAkB,CAAC,CAAC;IACrF,MAAM,QAAQ,GAAG,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC9C,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QAC3B,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;QAC9E,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,qBAAqB,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,qBAAqB,EAAE,KAAK,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC;QAChJ,4FAA4F;QAC5F,uEAAuE;QACvE,IAAI,QAAQ,EAAE,MAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM;YAAE,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;IACvH,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QAChE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,qBAAqB,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,qBAAqB,EAAE,KAAK,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC;IACzI,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,oGAAoG;AAEpG,2EAA2E;AAC3E,MAAM,UAAU,eAAe,CAAC,EAAM,EAAE,QAAoB,EAAE,QAAoB,EAAE,QAAgB,EAAE,KAAK,GAAG,KAAK;IACjH,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5B,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAC3E,EAAE,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;AACzI,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,OAAO,CAAC,EAAM,EAAE,GAAa;IAC3C,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED,8GAA8G;AAC9G,MAAM,UAAU,WAAW,CAAC,EAAM;IAChC,MAAM,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACnC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK;QAAE,EAAE,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,YAAY,CAAC,EAAmB,EAAE,WAAmB,EAAE,UAAsB;IAC3F,MAAM,IAAI,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,UAAU,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAChD,IAAI,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,mBAAmB,EAAE,cAAc,CAAC,CAAC;IACvG,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/transport.d.ts

@@ -0,0 +1,125 @@
+/**
+ * The transport the host implements (protocol section 13): a directory and a relay. The SDK
+ * passes opaque bytes through unchanged; no plaintext payload ever enters this interface.
+ */
+export type MutationStatus = "COMMITTED" | "ALREADY_COMMITTED" | "CONFLICT" | "IGNORED_OLDER" | "RETRYABLE" | "UNAUTHORIZED" | "PERMANENT_FAILURE";
+export interface MutationOutcome {
+    readonly status: MutationStatus;
+    /** On CONFLICT: the bytes the host currently holds, when it can return them. */
+    readonly current?: Uint8Array | undefined;
+    readonly currentRevision?: bigint | undefined;
+}
+export interface ResolvedAccount {
+    readonly accountName: string;
+    readonly accountKey: Uint8Array;
+    /** The current certificate wire. */
+    readonly certificate: Uint8Array;
+    /** When the account's key changed through a reset: the receipt that proves it. */
+    readonly resetReceipt?: Uint8Array | undefined;
+}
+export interface JoinRequest {
+    readonly circleId: Uint8Array;
+    readonly accountName: string;
+    readonly action: "join" | "leave";
+    readonly requestedAt: bigint;
+}
+export interface Directory {
+    resolveAccounts(names: readonly string[]): Promise<readonly ResolvedAccount[]>;
+    /** Snapshots name identities; the directory maps them back to accounts (host-trusted, like first contact). */
+    resolveIdentities(identityIds: readonly Uint8Array[]): Promise<readonly ResolvedAccount[]>;
+    getCertificate(hash: Uint8Array): Promise<Uint8Array | undefined>;
+    activateDevice(input: {
+        accountName: string;
+        expectedCertificateHash: Uint8Array;
+        expectedVaultRevision: bigint;
+        expectedVaultHash: Uint8Array;
+        newCertificate: Uint8Array;
+        newVault: Uint8Array;
+    }): Promise<MutationOutcome>;
+    registerAccount(input: {
+        certificate: Uint8Array;
+        vault: Uint8Array;
+    }): Promise<MutationOutcome>;
+    getVault(accountName: string): Promise<Uint8Array | undefined>;
+    publishVault(input: {
+        expectedRevision: bigint;
+        expectedHash: Uint8Array | undefined;
+        newVault: Uint8Array;
+    }): Promise<MutationOutcome>;
+    getCircle(circleId: Uint8Array): Promise<Uint8Array | undefined>;
+    publishOwnedCircle(input: {
+        circleId: Uint8Array;
+        expectedRevision: bigint;
+        expectedHash: Uint8Array | undefined;
+        newSnapshot: Uint8Array;
+    }): Promise<MutationOutcome>;
+    requestJoin(circleId: Uint8Array): Promise<MutationOutcome>;
+    requestLeave(circleId: Uint8Array): Promise<MutationOutcome>;
+    readRequests(circleId: Uint8Array): Promise<readonly JoinRequest[]>;
+    getResetKeyList(): Promise<Uint8Array | undefined>;
+    getResetReceipt(resetId: Uint8Array): Promise<Uint8Array | undefined>;
+    resetAccount(input: {
+        accountName: string;
+        expectedOldIdentityId: Uint8Array;
+        newCertificate: Uint8Array;
+        newVault: Uint8Array;
+        resetId: Uint8Array;
+        reauthProof: Uint8Array;
+    }): Promise<MutationOutcome & {
+        receipt?: Uint8Array | undefined;
+    }>;
+}
+export interface EpochBundle {
+    readonly manifest: Uint8Array;
+    /** The caller's own wrap. */
+    readonly wrap: Uint8Array | undefined;
+}
+export type AppendStatus = "ACCEPTED" | "ALREADY_ACCEPTED" | "EQUIVOCATION" | "STALE_APPEND" | "RETRYABLE" | "UNAUTHORIZED" | "SUPERSEDED_DEVICE" | "EPOCH_FENCED";
+export interface AppendOutcome {
+    readonly status: AppendStatus;
+    readonly deliverySeq?: bigint;
+}
+export interface ReadRecordsResult {
+    readonly records: readonly {
+        readonly deliverySeq: bigint;
+        readonly wire: Uint8Array;
+    }[];
+    readonly nextSeq: bigint;
+    readonly tail: bigint;
+    readonly expiredThrough: bigint;
+    readonly committedCursor: bigint;
+}
+export interface Relay {
+    getCurrentEpoch(streamId: Uint8Array): Promise<{
+        epoch: number;
+        manifestHash: Uint8Array;
+    } | undefined>;
+    getEpoch(streamId: Uint8Array, epoch: number): Promise<EpochBundle | undefined>;
+    publishEpoch(input: {
+        streamId: Uint8Array;
+        expectedEpoch: number;
+        expectedHash: Uint8Array | undefined;
+        manifest: Uint8Array;
+        wraps: ReadonlyMap<string, Uint8Array>;
+    }): Promise<MutationOutcome & {
+        currentEpoch?: number | undefined;
+        currentManifest?: Uint8Array | undefined;
+    }>;
+    /** MUST be callable from inside T6h without awaiting: it queues the bytes synchronously and returns a promise. */
+    appendRecord(recordId: Uint8Array, wire: Uint8Array): Promise<AppendOutcome>;
+    readRecords(streamId: Uint8Array, afterSeq: bigint, limit: number): Promise<ReadRecordsResult>;
+    ackThrough(streamId: Uint8Array, cursor: bigint): Promise<{
+        status: "COMMITTED" | "CURSOR_OUT_OF_RANGE" | "RETRYABLE" | "UNAUTHORIZED";
+        committedCursor?: bigint;
+    }>;
+    /** The streams this reader is subscribed to (the host creates subscriptions). */
+    listSubscriptions(): Promise<readonly {
+        streamId: Uint8Array;
+        authorIdentityId: Uint8Array;
+    }[]>;
+}
+export interface Transport {
+    readonly directory: Directory;
+    readonly relay: Relay;
+}
+//# sourceMappingURL=transport.d.ts.map

package/dist/transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,mBAAmB,GAAG,UAAU,GAAG,eAAe,GAAG,WAAW,GAAG,cAAc,GAAG,mBAAmB,CAAC;AAEnJ,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,gFAAgF;IAChF,QAAQ,CAAC,OAAO,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC/C;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,oCAAoC;IACpC,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC;IACjC,kFAAkF;IAClF,QAAQ,CAAC,YAAY,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;CAChD;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,SAAS;IACxB,eAAe,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,eAAe,EAAE,CAAC,CAAC;IAC/E,8GAA8G;IAC9G,iBAAiB,CAAC,WAAW,EAAE,SAAS,UAAU,EAAE,GAAG,OAAO,CAAC,SAAS,eAAe,EAAE,CAAC,CAAC;IAC3F,cAAc,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;IAClE,cAAc,CAAC,KAAK,EAAE;QACpB,WAAW,EAAE,MAAM,CAAC;QACpB,uBAAuB,EAAE,UAAU,CAAC;QACpC,qBAAqB,EAAE,MAAM,CAAC;QAC9B,iBAAiB,EAAE,UAAU,CAAC;QAC9B,cAAc,EAAE,UAAU,CAAC;QAC3B,QAAQ,EAAE,UAAU,CAAC;KACtB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC7B,eAAe,CAAC,KAAK,EAAE;QAAE,WAAW,EAAE,UAAU,CAAC;QAAC,KAAK,EAAE,UAAU,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACjG,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;IAC/D,YAAY,CAAC,KAAK,EAAE;QAAE,gBAAgB,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,UAAU,GAAG,SAAS,CAAC;QAAC,QAAQ,EAAE,UAAU,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACxI,SAAS,CAAC,QAAQ,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;IACjE,kBAAkB,CAAC,KAAK,EAAE;QAAE,QAAQ,EAAE,UAAU,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,UAAU,GAAG,SAAS,CAAC;QAAC,WAAW,EAAE,UAAU,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACvK,WAAW,CAAC,QAAQ,EAAE,UAAU,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5D,YAAY,CAAC,QAAQ,EAAE,UAAU,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC7D,YAAY,CAAC,QAAQ,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC,CAAC;IACpE,eAAe,IAAI,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;IACnD,eAAe,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC;IACtE,YAAY,CAAC,KAAK,EAAE;QAClB,WAAW,EAAE,MAAM,CAAC;QACpB,qBAAqB,EAAE,UAAU,CAAC;QAClC,cAAc,EAAE,UAAU,CAAC;QAC3B,QAAQ,EAAE,UAAU,CAAC;QACrB,OAAO,EAAE,UAAU,CAAC;QACpB,WAAW,EAAE,UAAU,CAAC;KACzB,GAAG,OAAO,CAAC,eAAe,GAAG;QAAE,OAAO,CAAC,EAAE,UAAU,GAAG,SAAS,CAAA;KAAE,CAAC,CAAC;CACrE;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,6BAA6B;IAC7B,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,SAAS,CAAC;CACvC;AAED,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG,kBAAkB,GAAG,cAAc,GAAG,cAAc,GAAG,WAAW,GAAG,cAAc,GAAG,mBAAmB,GAAG,cAAc,CAAC;AAEnK,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,EAAE,SAAS;QAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;KAAE,EAAE,CAAC;IACzF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,KAAK;IACpB,eAAe,CAAC,QAAQ,EAAE,UAAU,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,UAAU,CAAA;KAAE,GAAG,SAAS,CAAC,CAAC;IACxG,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAAC;IAChF,YAAY,CAAC,KAAK,EAAE;QAClB,QAAQ,EAAE,UAAU,CAAC;QACrB,aAAa,EAAE,MAAM,CAAC;QACtB,YAAY,EAAE,UAAU,GAAG,SAAS,CAAC;QACrC,QAAQ,EAAE,UAAU,CAAC;QACrB,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;KACxC,GAAG,OAAO,CAAC,eAAe,GAAG;QAAE,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAAC,eAAe,CAAC,EAAE,UAAU,GAAG,SAAS,CAAA;KAAE,CAAC,CAAC;IAC/G,kHAAkH;IAClH,YAAY,CAAC,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC7E,WAAW,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC/F,UAAU,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,WAAW,GAAG,qBAAqB,GAAG,WAAW,GAAG,cAAc,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpK,iFAAiF;IACjF,iBAAiB,IAAI,OAAO,CAAC,SAAS;QAAE,QAAQ,EAAE,UAAU,CAAC;QAAC,gBAAgB,EAAE,UAAU,CAAA;KAAE,EAAE,CAAC,CAAC;CACjG;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;CACvB"}

package/dist/transport.js

@@ -0,0 +1,6 @@
+/**
+ * The transport the host implements (protocol section 13): a directory and a relay. The SDK
+ * passes opaque bytes through unchanged; no plaintext payload ever enters this interface.
+ */
+export {};
+//# sourceMappingURL=transport.js.map

package/dist/transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport.js","sourceRoot":"","sources":["../src/transport.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/vault.d.ts

@@ -0,0 +1,59 @@
+import { decodeRecoveryCode, encodeRecoveryCode, openVault, sealVault, type OpenedVault, type VaultContents, type VaultEntry, type VaultHeader } from "./codec.js";
+export { encodeRecoveryCode, decodeRecoveryCode, openVault, sealVault };
+export type { OpenedVault, VaultContents, VaultEntry, VaultHeader };
+export type ProviderStatus = "available" | "unavailable" | "locked" | "unsupported" | "error";
+export type BackupState = "unknown" | "pending" | "unavailable";
+export interface ProviderLoadResult {
+    readonly status: ProviderStatus;
+    readonly reason?: string;
+    readonly recoveryKey?: Uint8Array;
+}
+export interface ProviderSaveResult {
+    readonly status: ProviderStatus;
+    readonly reason?: string;
+    /** A successful local write is never reported as a completed cloud backup. */
+    readonly backupState: BackupState;
+}
+export interface ProviderStatusResult {
+    readonly status: ProviderStatus;
+    readonly backupState: BackupState;
+    readonly reason?: string;
+}
+/** The platform recovery provider the host supplies (synced Keychain, Block Store, ...). */
+export interface RecoveryProvider {
+    load(accountName: string, identityId: Uint8Array): Promise<ProviderLoadResult>;
+    save(accountName: string, identityId: Uint8Array, recoveryKey: Uint8Array): Promise<ProviderSaveResult>;
+    status(): Promise<ProviderStatusResult>;
+    /** Logout or retirement: forget local access without deleting the shared item. */
+    eraseLocalAccess(): Promise<void>;
+}
+export declare function newRecoveryKey(): Uint8Array;
+/** Seal a vault at a revision with a fresh nonce. Returns the exact bytes and their hash. */
+export declare function buildVault(header: VaultHeader, contents: VaultContents, recoveryKey: Uint8Array): {
+    wire: Uint8Array;
+    hash: Uint8Array;
+};
+/** Pure edits to the entry list, keeping it sorted and unique by circle id. */
+export declare function upsertEntry(entries: readonly VaultEntry[], entry: VaultEntry): VaultEntry[];
+export declare function removeEntry(entries: readonly VaultEntry[], circleId: Uint8Array): VaultEntry[];
+export type RecoverySource = "provider" | "code";
+export interface RecoveryOutcome {
+    readonly vault: OpenedVault;
+    readonly recoveryKey: Uint8Array;
+    readonly source: RecoverySource;
+    readonly providerStatus: ProviderStatus;
+}
+/**
+ * The recovery order. The provider is asked first; a saved code second; when neither opens the
+ * vault the result is `ACCOUNT_RECOVERY_REQUIRED` and the caller preserves what it cannot use.
+ * A wrong key is an authentication failure and never a reason to reset.
+ */
+export declare function recoverAccount(input: {
+    readonly accountName: string;
+    readonly identityId: Uint8Array;
+    readonly accountKey: Uint8Array;
+    readonly vaultWire: Uint8Array;
+    readonly provider: RecoveryProvider;
+    readonly recoveryCode?: string;
+}): Promise<RecoveryOutcome>;
+//# sourceMappingURL=vault.d.ts.map

package/dist/vault.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.d.ts","sourceRoot":"","sources":["../src/vault.ts"],"names":[],"mappings":"AASA,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,SAAS,EACT,SAAS,EACT,KAAK,WAAW,EAChB,KAAK,aAAa,EAClB,KAAK,UAAU,EACf,KAAK,WAAW,EACjB,MAAM,YAAY,CAAC;AAIpB,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AACxE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;AAEpE,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,aAAa,GAAG,QAAQ,GAAG,aAAa,GAAG,OAAO,CAAC;AAC9F,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,SAAS,GAAG,aAAa,CAAC;AAEhE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,UAAU,CAAC;CACnC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,8EAA8E;IAC9E,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;CACnC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,4FAA4F;AAC5F,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC/E,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACxG,MAAM,IAAI,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACxC,kFAAkF;IAClF,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACnC;AAED,wBAAgB,cAAc,IAAI,UAAU,CAE3C;AAED,6FAA6F;AAC7F,wBAAgB,UAAU,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,GAAG;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE,CAGxI;AAED,+EAA+E;AAC/E,wBAAgB,WAAW,CAAC,OAAO,EAAE,SAAS,UAAU,EAAE,EAAE,KAAK,EAAE,UAAU,GAAG,UAAU,EAAE,CAG3F;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,SAAS,UAAU,EAAE,EAAE,QAAQ,EAAE,UAAU,GAAG,UAAU,EAAE,CAE9F;AAED,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,MAAM,CAAC;AAEjD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC;CACzC;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,KAAK,EAAE;IAC1C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC,GAAG,OAAO,CAAC,eAAe,CAAC,CA4B3B"}

package/dist/vault.js

@@ -0,0 +1,69 @@
+/**
+ * The account vault and the recovery order (protocol section 5).
+ *
+ * The vault carries the account seed, the last device checkpoint and the circle pins with their
+ * sharing preference. It never carries a key that decrypts a record. Recovery tries the platform
+ * provider, then a saved code, and otherwise reports `ACCOUNT_RECOVERY_REQUIRED`; it never
+ * manufactures identity keys.
+ */
+import { compareBytes, equalBytes } from "./bytes.js";
+import { decodeRecoveryCode, encodeRecoveryCode, openVault, sealVault } from "./codec.js";
+import { KEY_BYTES, NONCE_BYTES, bodyHash, randomBytes } from "./crypto.js";
+import { KavachError, isKavachError } from "./errors.js";
+export { encodeRecoveryCode, decodeRecoveryCode, openVault, sealVault };
+export function newRecoveryKey() {
+    return randomBytes(KEY_BYTES);
+}
+/** Seal a vault at a revision with a fresh nonce. Returns the exact bytes and their hash. */
+export function buildVault(header, contents, recoveryKey) {
+    const wire = sealVault(header, contents, recoveryKey, randomBytes(NONCE_BYTES));
+    return { wire, hash: bodyHash(wire) };
+}
+/** Pure edits to the entry list, keeping it sorted and unique by circle id. */
+export function upsertEntry(entries, entry) {
+    const rest = entries.filter((e) => !equalBytes(e.circleId, entry.circleId));
+    return [...rest, entry].sort((a, b) => compareBytes(a.circleId, b.circleId));
+}
+export function removeEntry(entries, circleId) {
+    return entries.filter((e) => !equalBytes(e.circleId, circleId));
+}
+/**
+ * The recovery order. The provider is asked first; a saved code second; when neither opens the
+ * vault the result is `ACCOUNT_RECOVERY_REQUIRED` and the caller preserves what it cannot use.
+ * A wrong key is an authentication failure and never a reason to reset.
+ */
+export async function recoverAccount(input) {
+    const stage = "recoverAccount";
+    const tryOpen = (key) => {
+        try {
+            return openVault(input.vaultWire, key, input.accountName, input.accountKey);
+        }
+        catch (e) {
+            if (isKavachError(e, "DECRYPT_FAILED"))
+                return undefined;
+            throw e;
+        }
+    };
+    let providerStatus = "error";
+    try {
+        const loaded = await input.provider.load(input.accountName, input.identityId);
+        providerStatus = loaded.status;
+        if (loaded.status === "available" && loaded.recoveryKey) {
+            const vault = tryOpen(loaded.recoveryKey);
+            if (vault)
+                return { vault, recoveryKey: loaded.recoveryKey, source: "provider", providerStatus };
+        }
+    }
+    catch {
+        providerStatus = "error";
+    }
+    if (input.recoveryCode !== undefined) {
+        const key = decodeRecoveryCode(input.recoveryCode);
+        const vault = tryOpen(key);
+        if (vault)
+            return { vault, recoveryKey: key, source: "code", providerStatus };
+        throw new KavachError("DECRYPT_FAILED", stage, "recovery code does not open the vault");
+    }
+    throw new KavachError("ACCOUNT_RECOVERY_REQUIRED", stage, `provider ${providerStatus}, no code`);
+}
+//# sourceMappingURL=vault.js.map

package/dist/vault.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.js","sourceRoot":"","sources":["../src/vault.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACtD,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,SAAS,EACT,SAAS,EAKV,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC5E,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEzD,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AAkCxE,MAAM,UAAU,cAAc;IAC5B,OAAO,WAAW,CAAC,SAAS,CAAC,CAAC;AAChC,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,UAAU,CAAC,MAAmB,EAAE,QAAuB,EAAE,WAAuB;IAC9F,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC,WAAW,CAAC,CAAC,CAAC;IAChF,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;AACxC,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,WAAW,CAAC,OAA8B,EAAE,KAAiB;IAC3E,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC5E,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAA8B,EAAE,QAAoB;IAC9E,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAClE,CAAC;AAWD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAOpC;IACC,MAAM,KAAK,GAAG,gBAAgB,CAAC;IAC/B,MAAM,OAAO,GAAG,CAAC,GAAe,EAA2B,EAAE;QAC3D,IAAI,CAAC;YACH,OAAO,SAAS,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QAC9E,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,IAAI,aAAa,CAAC,CAAC,EAAE,gBAAgB,CAAC;gBAAE,OAAO,SAAS,CAAC;YACzD,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC,CAAC;IACF,IAAI,cAAc,GAAmB,OAAO,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QAC9E,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC;QAC/B,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACxD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YAC1C,IAAI,KAAK;gBAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,cAAc,EAAE,CAAC;QACnG,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,cAAc,GAAG,OAAO,CAAC;IAC3B,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACrC,MAAM,GAAG,GAAG,kBAAkB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACnD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,KAAK;YAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QAC9E,MAAM,IAAI,WAAW,CAAC,gBAAgB,EAAE,KAAK,EAAE,uCAAuC,CAAC,CAAC;IAC1F,CAAC;IACD,MAAM,IAAI,WAAW,CAAC,2BAA2B,EAAE,KAAK,EAAE,YAAY,cAAc,WAAW,CAAC,CAAC;AACnG,CAAC"}

package/package.json

@@ -1,6 +1,70 @@
 {
   "name": "@plane31/blind-relay",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.1.2",
+  "description": "Kavach v1 protocol: documents, cryptography, state machine. Pure TypeScript, no platform imports.",
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/plane31-org/kavach.git",
+    "directory": "packages/core"
+  },
+  "homepage": "https://github.com/plane31-org/kavach#readme",
+  "bugs": {
+    "url": "https://github.com/plane31-org/kavach/issues"
+  },
+  "keywords": [
+    "end-to-end-encryption",
+    "e2ee",
+    "relay",
+    "protocol",
+    "circles",
+    "sealed-records"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./adapters": {
+      "types": "./dist/adapters/index.d.ts",
+      "import": "./dist/adapters/index.js"
+    },
+    "./testing": {
+      "types": "./dist/testing/index.d.ts",
+      "import": "./dist/testing/index.js"
+    },
+    "./sodium": {
+      "types": "./dist/crypto/sodium.d.ts",
+      "import": "./dist/crypto/sodium.js"
+    }
+  },
+  "files": [
+    "dist",
+    "src"
+  ],
+  "sideEffects": false,
+  "dependencies": {
+    "@noble/ciphers": "^1.0.0",
+    "@noble/curves": "^1.6.0",
+    "@noble/hashes": "^1.5.0",
+    "libsodium-wrappers-sumo": "^0.7.15"
+  },
+  "devDependencies": {
+    "@types/libsodium-wrappers-sumo": "^0.7.8",
+    "esbuild": "0.21.5"
+  },
+  "scripts": {
+    "build": "tsc -b",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run && KAVACH_CRYPTO=sodium vitest run",
+    "test:noble": "vitest run",
+    "test:sodium": "KAVACH_CRYPTO=sodium vitest run"
+  }
 }