@plane31/blind-relay 0.0.0-stage → 0.1.2

package/dist/epoch.js

@@ -0,0 +1,121 @@
+/**
+ * Epochs, wraps, publication and the reader side (protocol section 8).
+ */
+import { equalBytes, toHex } from "./bytes.js";
+import { DocumentType, buildEpochManifest, expectType, parseDocument, verifyDocument } from "./codec.js";
+import { KEY_BYTES, bodyHash, keyCommitment, openSealedBox, randomBytes, sealBox, wrapHash } from "./crypto.js";
+import { KavachError } from "./errors.js";
+export const MAX_COUNTER = 0xffff_ffff;
+export const MAX_EPOCH = 0xffff_ffff;
+/** Prepare an epoch: fresh random key, one sealed box per row, one signature. */
+export function prepareEpoch(input) {
+    const stage = "prepareEpoch";
+    if (input.epoch < 1 || input.epoch > MAX_EPOCH)
+        throw new KavachError("COUNTER_EXHAUSTED", stage, "epoch space exhausted; replace the stream");
+    const epochKey = input.epochKey ?? randomBytes(KEY_BYTES);
+    const wraps = new Map();
+    const rows = input.audience.rows.map((row) => {
+        const wrap = sealBox(epochKey, row.boxKey);
+        wraps.set(toHex(row.identityId), wrap);
+        return { identityId: row.identityId, certificateHash: row.certificateHash, wrapHash: wrapHash(wrap) };
+    });
+    if (!rows.some((r) => equalBytes(r.identityId, input.author.identityId)))
+        throw new KavachError("MALFORMED", stage, "author missing from audience");
+    const manifest = buildEpochManifest({
+        streamId: input.author.streamId,
+        authorIdentityId: input.author.identityId,
+        authorCertificateHash: input.author.certificateHash,
+        epoch: input.epoch,
+        createdAt: input.createdAt,
+        keyCommitment: keyCommitment(input.author.streamId, input.epoch, epochKey),
+        audience: rows
+    }, input.author.signingSecretKey);
+    return {
+        epoch: input.epoch,
+        manifest,
+        manifestHash: bodyHash(manifest.subarray(0, manifest.length - 64)),
+        wraps,
+        epochKey,
+        capturedRevision: input.desiredRevision,
+        audienceKey: input.audience.key,
+        createdAt: input.createdAt
+    };
+}
+/**
+ * Resolve a publish outcome for a prepared epoch. Identical bytes at the slot mean committed; a
+ * different valid body at the same epoch is `EQUIVOCATION`; a higher committed epoch than the one
+ * prepared means local state was lost and the device must replace its stream.
+ */
+export function resolvePublish(prepared, outcome) {
+    const stage = "publishEpoch";
+    switch (outcome.status) {
+        case "COMMITTED":
+        case "ALREADY_COMMITTED":
+            return "COMMITTED";
+        case "RETRYABLE":
+            return "RETRY";
+        case "UNAUTHORIZED":
+            throw new KavachError("NOT_AUTHORIZED", stage);
+        case "PERMANENT_FAILURE":
+            throw new KavachError("STORAGE_FAILURE", stage, "host refused the epoch permanently");
+        case "CONFLICT": {
+            if (outcome.currentEpoch === prepared.epoch && outcome.currentManifest) {
+                if (equalBytes(outcome.currentManifest, prepared.manifest))
+                    return "COMMITTED";
+                const theirs = parseDocument(outcome.currentManifest);
+                if (theirs.type === DocumentType.EpochManifest && theirs.epoch === prepared.epoch) {
+                    throw new KavachError("EQUIVOCATION", stage, "a different manifest is committed at this epoch");
+                }
+            }
+            if (outcome.currentEpoch >= prepared.epoch) {
+                throw new KavachError("RECOVERY_REQUIRED", stage, "the host holds a higher epoch for this stream; local state was lost");
+            }
+            return "RETRY";
+        }
+    }
+}
+/** After commit: promote only if the captured revision and the exact audience still match. */
+export function promote(prepared, currentDesiredRevision, currentAudienceKey) {
+    return prepared.capturedRevision === currentDesiredRevision && prepared.audienceKey === currentAudienceKey ? "PROMOTED" : "OBSOLETE";
+}
+export function rotationReason(active, now, hygieneRotationMs) {
+    if (active.nextCounter > MAX_COUNTER)
+        return "counterExhausted";
+    if (active.lastSentAt !== undefined && now < active.lastSentAt)
+        return "clockReversal";
+    if (now - active.createdAt > hygieneRotationMs)
+        return "hygiene";
+    return undefined;
+}
+/**
+ * Every check of section 8 before a key is stored: manifest signature under the certificate it
+ * names, that certificate's identity and stream, the author's own row, the reader's own row at
+ * its current certificate, the wrap hash, the sealed box and the key commitment.
+ */
+export function openEpoch(manifestWire, author, self, wrap) {
+    const stage = "openEpoch";
+    const parsed = expectType(parseDocument(manifestWire), DocumentType.EpochManifest, stage);
+    const cert = author.certificates.get(toHex(parsed.authorCertificateHash));
+    if (!cert)
+        throw new KavachError("SUPERSEDED_DEVICE", stage, "manifest names a certificate that is not the author's current one");
+    const manifest = expectType(verifyDocument(manifestWire, cert.signingKey), DocumentType.EpochManifest, stage);
+    if (!equalBytes(manifest.authorIdentityId, author.identityId) || !equalBytes(manifest.streamId, cert.streamId)) {
+        throw new KavachError("MALFORMED", stage, "manifest identity or stream does not match the certificate");
+    }
+    const authorRow = manifest.audience.find((r) => equalBytes(r.identityId, author.identityId));
+    if (!authorRow || !equalBytes(authorRow.certificateHash, manifest.authorCertificateHash)) {
+        throw new KavachError("MALFORMED", stage, "author row does not name the author certificate");
+    }
+    const selfRow = manifest.audience.find((r) => equalBytes(r.identityId, self.identityId));
+    if (!selfRow || !equalBytes(selfRow.certificateHash, self.certificateHash)) {
+        throw new KavachError("NOT_AUTHORIZED", stage, "this device is not addressed by the epoch");
+    }
+    if (!equalBytes(wrapHash(wrap), selfRow.wrapHash))
+        throw new KavachError("WRAP_HASH_MISMATCH", stage);
+    const epochKey = openSealedBox(wrap, self.box, stage);
+    if (!equalBytes(keyCommitment(manifest.streamId, manifest.epoch, epochKey), manifest.keyCommitment)) {
+        throw new KavachError("KEY_COMMITMENT_MISMATCH", stage);
+    }
+    return { manifest, epochKey, superseded: !cert.current };
+}
+//# sourceMappingURL=epoch.js.map

package/dist/epoch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"epoch.js","sourceRoot":"","sources":["../src/epoch.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAE/C,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,UAAU,EAAE,aAAa,EAAE,cAAc,EAAmC,MAAM,YAAY,CAAC;AAC1I,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,aAAa,EAAE,aAAa,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAmB,MAAM,aAAa,CAAC;AACjI,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,CAAC,MAAM,WAAW,GAAG,WAAW,CAAC;AACvC,MAAM,CAAC,MAAM,SAAS,GAAG,WAAW,CAAC;AAsBrC,iFAAiF;AACjF,MAAM,UAAU,YAAY,CAAC,KAO5B;IACC,MAAM,KAAK,GAAG,cAAc,CAAC;IAC7B,IAAI,KAAK,CAAC,KAAK,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,GAAG,SAAS;QAAE,MAAM,IAAI,WAAW,CAAC,mBAAmB,EAAE,KAAK,EAAE,2CAA2C,CAAC,CAAC;IAC/I,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,WAAW,CAAC,SAAS,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAsB,CAAC;IAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAC3C,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC;QACvC,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,eAAe,EAAE,GAAG,CAAC,eAAe,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;IACxG,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,KAAK,EAAE,8BAA8B,CAAC,CAAC;IACpJ,MAAM,QAAQ,GAAG,kBAAkB,CACjC;QACE,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ;QAC/B,gBAAgB,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU;QACzC,qBAAqB,EAAE,KAAK,CAAC,MAAM,CAAC,eAAe;QACnD,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,aAAa,EAAE,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,CAAC;QAC1E,QAAQ,EAAE,IAAI;KACf,EACD,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAC9B,CAAC;IACF,OAAO;QACL,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,QAAQ;QACR,YAAY,EAAE,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,QAAQ,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QAClE,KAAK;QACL,QAAQ;QACR,gBAAgB,EAAE,KAAK,CAAC,eAAe;QACvC,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG;QAC/B,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC;AACJ,CAAC;AAcD;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,QAAuB,EAAE,OAAuB;IAC7E,MAAM,KAAK,GAAG,cAAc,CAAC;IAC7B,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;QACvB,KAAK,WAAW,CAAC;QACjB,KAAK,mBAAmB;YACtB,OAAO,WAAW,CAAC;QACrB,KAAK,WAAW;YACd,OAAO,OAAO,CAAC;QACjB,KAAK,cAAc;YACjB,MAAM,IAAI,WAAW,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;QACjD,KAAK,mBAAmB;YACtB,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,KAAK,EAAE,oCAAoC,CAAC,CAAC;QACxF,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,IAAI,OAAO,CAAC,YAAY,KAAK,QAAQ,CAAC,KAAK,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;gBACvE,IAAI,UAAU,CAAC,OAAO,CAAC,eAAe,EAAE,QAAQ,CAAC,QAAQ,CAAC;oBAAE,OAAO,WAAW,CAAC;gBAC/E,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;gBACtD,IAAI,MAAM,CAAC,IAAI,KAAK,YAAY,CAAC,aAAa,IAAI,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK,EAAE,CAAC;oBAClF,MAAM,IAAI,WAAW,CAAC,cAAc,EAAE,KAAK,EAAE,iDAAiD,CAAC,CAAC;gBAClG,CAAC;YACH,CAAC;YACD,IAAI,OAAO,CAAC,YAAY,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;gBAC3C,MAAM,IAAI,WAAW,CAAC,mBAAmB,EAAE,KAAK,EAAE,qEAAqE,CAAC,CAAC;YAC3H,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;IACH,CAAC;AACH,CAAC;AAID,8FAA8F;AAC9F,MAAM,UAAU,OAAO,CAAC,QAAuB,EAAE,sBAA8B,EAAE,kBAA0B;IACzG,OAAO,QAAQ,CAAC,gBAAgB,KAAK,sBAAsB,IAAI,QAAQ,CAAC,WAAW,KAAK,kBAAkB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;AACvI,CAAC;AAYD,MAAM,UAAU,cAAc,CAAC,MAAuB,EAAE,GAAW,EAAE,iBAAyB;IAC5F,IAAI,MAAM,CAAC,WAAW,GAAG,WAAW;QAAE,OAAO,kBAAkB,CAAC;IAChE,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,GAAG,GAAG,MAAM,CAAC,UAAU;QAAE,OAAO,eAAe,CAAC;IACvF,IAAI,GAAG,GAAG,MAAM,CAAC,SAAS,GAAG,iBAAiB;QAAE,OAAO,SAAS,CAAC;IACjE,OAAO,SAAS,CAAC;AACnB,CAAC;AA8BD;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,YAAwB,EAAE,MAAkB,EAAE,IAAc,EAAE,IAAgB;IACtG,MAAM,KAAK,GAAG,WAAW,CAAC;IAC1B,MAAM,MAAM,GAAG,UAAU,CAAgB,aAAa,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IACzG,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAC1E,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,WAAW,CAAC,mBAAmB,EAAE,KAAK,EAAE,mEAAmE,CAAC,CAAC;IAClI,MAAM,QAAQ,GAAG,UAAU,CAAgB,cAAc,CAAC,YAAY,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,YAAY,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IAC7H,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/G,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,KAAK,EAAE,4DAA4D,CAAC,CAAC;IAC1G,CAAC;IACD,MAAM,SAAS,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAC7F,IAAI,CAAC,SAAS,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,eAAe,EAAE,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC;QACzF,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,KAAK,EAAE,iDAAiD,CAAC,CAAC;IAC/F,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IACzF,IAAI,CAAC,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,eAAe,EAAE,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,WAAW,CAAC,gBAAgB,EAAE,KAAK,EAAE,2CAA2C,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;IACtG,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACtD,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACpG,MAAM,IAAI,WAAW,CAAC,yBAAyB,EAAE,KAAK,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;AAC3D,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,17 @@
+/** Error codes of Kavach v1, protocol section 14. The set is closed: new codes are a protocol change. */
+export type ErrorCode = "SIZE_LIMIT" | "MALFORMED" | "UNSUPPORTED_VERSION" | "UNSUPPORTED_TYPE" | "BAD_PAYLOAD" | "INVALID_KEY" | "BAD_SIGNATURE" | "DECRYPT_FAILED" | "WRAP_HASH_MISMATCH" | "KEY_COMMITMENT_MISMATCH" | "ACCOUNT_KEY_CHANGED" | "ACCOUNT_RECOVERY_REQUIRED" | "DEVICE_ROLLBACK" | "DEVICE_ID_REUSED" | "SUPERSEDED_DEVICE" | "VAULT_BINDING" | "RESET_BINDING" | "RESET_KEYS_REQUIRED" | "RESET_KEY_REVOKED" | "RESET_CLOCK_UNTRUSTED" | "ROLLBACK" | "EQUIVOCATION" | "METADATA_REQUIRED" | "KEY_PENDING" | "NOT_AUTHORIZED" | "ROTATION_REQUIRED" | "COUNTER_EXHAUSTED" | "RECIPIENT_LIMIT" | "CLOCK_SKEW" | "EXPIRED" | "QUEUE_FULL" | "CURSOR_OUT_OF_RANGE" | "STALE_APPEND" | "LOCKED" | "RECOVERY_REQUIRED" | "STORAGE_FAILURE"
+/** The host could not be reached or did not answer in time; the same call may succeed later. A transport raises it, never a plain error. */
+ | "NETWORK";
+/**
+ * Every failure the SDK reports. `code` is one of the protocol's codes, `stage` is a safe
+ * stage name for logs (never a secret, a payload or an identifier), `retryable` says whether
+ * the same call may succeed later without any change of state.
+ */
+export declare class KavachError extends Error {
+    readonly code: ErrorCode;
+    readonly stage: string;
+    readonly retryable: boolean;
+    constructor(code: ErrorCode, stage?: string, message?: string);
+}
+export declare function isKavachError(value: unknown, code?: ErrorCode): value is KavachError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,yGAAyG;AACzG,MAAM,MAAM,SAAS,GAEjB,YAAY,GACZ,WAAW,GACX,qBAAqB,GACrB,kBAAkB,GAClB,aAAa,GAEb,aAAa,GACb,eAAe,GACf,gBAAgB,GAChB,oBAAoB,GACpB,yBAAyB,GAEzB,qBAAqB,GACrB,2BAA2B,GAC3B,iBAAiB,GACjB,kBAAkB,GAClB,mBAAmB,GACnB,eAAe,GACf,eAAe,GACf,qBAAqB,GACrB,mBAAmB,GACnB,uBAAuB,GACvB,UAAU,GACV,cAAc,GACd,mBAAmB,GACnB,aAAa,GACb,gBAAgB,GAChB,mBAAmB,GACnB,mBAAmB,GACnB,iBAAiB,GAEjB,YAAY,GACZ,SAAS,GACT,YAAY,GACZ,qBAAqB,GACrB,cAAc,GAEd,QAAQ,GACR,mBAAmB,GACnB,iBAAiB;AACnB,4IAA4I;GAC1I,SAAS,CAAC;AAYd;;;;GAIG;AACH,qBAAa,WAAY,SAAQ,KAAK;IACpC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;gBAEhB,IAAI,EAAE,SAAS,EAAE,KAAK,SAAY,EAAE,OAAO,CAAC,EAAE,MAAM;CAOjE;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,GAAG,KAAK,IAAI,WAAW,CAEpF"}

package/dist/errors.js

@@ -0,0 +1,30 @@
+const RETRYABLE = new Set([
+    "KEY_PENDING",
+    "METADATA_REQUIRED",
+    "RESET_KEYS_REQUIRED",
+    "ROTATION_REQUIRED",
+    "LOCKED",
+    "STORAGE_FAILURE",
+    "NETWORK"
+]);
+/**
+ * Every failure the SDK reports. `code` is one of the protocol's codes, `stage` is a safe
+ * stage name for logs (never a secret, a payload or an identifier), `retryable` says whether
+ * the same call may succeed later without any change of state.
+ */
+export class KavachError extends Error {
+    code;
+    stage;
+    retryable;
+    constructor(code, stage = "unknown", message) {
+        super(message ?? `${code} at ${stage}`);
+        this.name = "KavachError";
+        this.code = code;
+        this.stage = stage;
+        this.retryable = RETRYABLE.has(code);
+    }
+}
+export function isKavachError(value, code) {
+    return value instanceof KavachError && (code === undefined || value.code === code);
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AA8CA,MAAM,SAAS,GAA2B,IAAI,GAAG,CAAY;IAC3D,aAAa;IACb,mBAAmB;IACnB,qBAAqB;IACrB,mBAAmB;IACnB,QAAQ;IACR,iBAAiB;IACjB,SAAS;CACV,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,OAAO,WAAY,SAAQ,KAAK;IAC3B,IAAI,CAAY;IAChB,KAAK,CAAS;IACd,SAAS,CAAU;IAE5B,YAAY,IAAe,EAAE,KAAK,GAAG,SAAS,EAAE,OAAgB;QAC9D,KAAK,CAAC,OAAO,IAAI,GAAG,IAAI,OAAO,KAAK,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;CACF;AAED,MAAM,UAAU,aAAa,CAAC,KAAc,EAAE,IAAgB;IAC5D,OAAO,KAAK,YAAY,WAAW,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AACrF,CAAC"}

package/dist/historyIndex.d.ts

@@ -0,0 +1,15 @@
+import type { HistoryRow, Store, Tx } from "./store.js";
+/** A u64 as twenty decimal digits, so that string order is numeric order. */
+export declare function padTime(ms: bigint): string;
+export declare function historyTuple(r: Pick<HistoryRow, "sentAt" | "epoch" | "counter" | "recordId">): string;
+export declare function timelinePrefix(kind: number): string;
+export declare function authorPrefix(authorIdentityId: string, kind: number): string;
+/** Index a history row; written in the same transaction as the row (T6, T7). */
+export declare function indexHistory(tx: Tx, r: HistoryRow): void;
+export declare function unindexHistory(tx: Tx, r: HistoryRow): void;
+/**
+ * Build the index once for a store written before it existed: every history row is indexed and
+ * the header records it. A fresh store is marked at T1 and never runs this. Idempotent.
+ */
+export declare function ensureHistoryIndex(store: Store): Promise<boolean>;
+//# sourceMappingURL=historyIndex.d.ts.map

package/dist/historyIndex.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"historyIndex.d.ts","sourceRoot":"","sources":["../src/historyIndex.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,YAAY,CAAC;AAIxD,6EAA6E;AAC7E,wBAAgB,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAE1C;AAED,wBAAgB,YAAY,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,EAAE,QAAQ,GAAG,OAAO,GAAG,SAAS,GAAG,UAAU,CAAC,GAAG,MAAM,CAErG;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED,wBAAgB,YAAY,CAAC,gBAAgB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAE3E;AAOD,gFAAgF;AAChF,wBAAgB,YAAY,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,UAAU,GAAG,IAAI,CAExD;AAED,wBAAgB,cAAc,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,UAAU,GAAG,IAAI,CAE1D;AAED;;;GAGG;AACH,wBAAsB,kBAAkB,CAAC,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAUvE"}

package/dist/historyIndex.js

@@ -0,0 +1,57 @@
+/**
+ * The history index: two time-ordered keys per history row, so a history query, a cursor and
+ * the retention purge read a bounded slice of the store instead of the whole history table.
+ *
+ * Keys sort by time and are unique: the tuple is the zero-padded `sentAt`, epoch and counter
+ * followed by the record id. `t:<kind>:<tuple>` is the timeline of one kind; `a:<author>:<kind>:
+ * <tuple>` is one author's. A query without a kind merges the two kinds that reach history
+ * declared with history; a slot-only kind is never history. The tuple doubles as the page cursor:
+ * it names a position that no later write moves.
+ */
+import { unbig } from "./rows.js";
+const META = "meta";
+/** A u64 as twenty decimal digits, so that string order is numeric order. */
+export function padTime(ms) {
+    return (ms < 0n ? 0n : ms).toString().padStart(20, "0");
+}
+export function historyTuple(r) {
+    return `${padTime(unbig(r.sentAt))}:${r.epoch.toString().padStart(10, "0")}:${r.counter.toString().padStart(10, "0")}:${r.recordId}`;
+}
+export function timelinePrefix(kind) {
+    return `t:${kind}:`;
+}
+export function authorPrefix(authorIdentityId, kind) {
+    return `a:${authorIdentityId}:${kind}:`;
+}
+function keysOf(r) {
+    const tuple = historyTuple(r);
+    return [timelinePrefix(r.kind) + tuple, authorPrefix(r.authorIdentityId, r.kind) + tuple];
+}
+/** Index a history row; written in the same transaction as the row (T6, T7). */
+export function indexHistory(tx, r) {
+    for (const k of keysOf(r))
+        tx.put("historyIndex", k, { recordId: r.recordId });
+}
+export function unindexHistory(tx, r) {
+    for (const k of keysOf(r))
+        tx.delete("historyIndex", k);
+}
+/**
+ * Build the index once for a store written before it existed: every history row is indexed and
+ * the header records it. A fresh store is marked at T1 and never runs this. Idempotent.
+ */
+export async function ensureHistoryIndex(store) {
+    const built = await store.read((tx) => tx.get("meta", META)?.historyIndex === 1);
+    if (built)
+        return false;
+    return store.transaction((tx) => {
+        const meta = tx.get("meta", META);
+        if (!meta || meta.historyIndex === 1)
+            return false;
+        for (const [, r] of tx.list("history"))
+            indexHistory(tx, r);
+        tx.put("meta", META, { ...meta, historyIndex: 1 });
+        return true;
+    });
+}
+//# sourceMappingURL=historyIndex.js.map

package/dist/historyIndex.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"historyIndex.js","sourceRoot":"","sources":["../src/historyIndex.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAGlC,MAAM,IAAI,GAAG,MAAM,CAAC;AAEpB,6EAA6E;AAC7E,MAAM,UAAU,OAAO,CAAC,EAAU;IAChC,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,CAAgE;IAC3F,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;AACvI,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,KAAK,IAAI,GAAG,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,gBAAwB,EAAE,IAAY;IACjE,OAAO,KAAK,gBAAgB,IAAI,IAAI,GAAG,CAAC;AAC1C,CAAC;AAED,SAAS,MAAM,CAAC,CAAa;IAC3B,MAAM,KAAK,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;IAC9B,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;AAC5F,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,YAAY,CAAC,EAAM,EAAE,CAAa;IAChD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC;QAAE,EAAE,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,EAAM,EAAE,CAAa;IAClD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC;QAAE,EAAE,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAAY;IACnD,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,YAAY,KAAK,CAAC,CAAC,CAAC;IACjF,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,OAAO,KAAK,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE;QAC9B,MAAM,IAAI,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACnD,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC5D,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC,CAAC;QACnD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/identity.d.ts

@@ -0,0 +1,62 @@
+import { type AccountDevice, type Parsed } from "./codec.js";
+import { type BoxKeypair, type SigningKeypair } from "./crypto.js";
+/** What the SDK persists per known account. */
+export interface AccountPin {
+    readonly accountName: string;
+    readonly accountKey: Uint8Array;
+    readonly identityId: Uint8Array;
+    readonly generation: bigint;
+    readonly certificateHash: Uint8Array;
+    readonly certificate: Uint8Array;
+    readonly deviceId: Uint8Array;
+    readonly signingKey: Uint8Array;
+    readonly boxKey: Uint8Array;
+    readonly streamId: Uint8Array;
+    /** Every device id this account has used, including the current one. */
+    readonly deviceIds: readonly Uint8Array[];
+}
+export type CertificateOutcome = {
+    readonly outcome: "ACCEPTED";
+    readonly pin: AccountPin;
+    readonly rotate: boolean;
+    readonly previous: AccountPin | undefined;
+} | {
+    readonly outcome: "DUPLICATE";
+    readonly pin: AccountPin;
+};
+export declare function pinFromCertificate(doc: Parsed<AccountDevice>, previous?: AccountPin): AccountPin;
+/**
+ * Accept or reject a certificate against the local pin for its account.
+ *
+ * - No pin yet: first contact. If `expected` names the account the directory resolved, the
+ *   certificate must carry that name and key; the pin is created and nothing rotates.
+ * - A pinned account: a different `AK` is `ACCOUNT_KEY_CHANGED` and the caller quarantines
+ *   (never closing or re-admitting anything); a lower generation is `DEVICE_ROLLBACK`; the same
+ *   generation is a duplicate or `EQUIVOCATION`; a higher one with a reused device id is
+ *   `DEVICE_ID_REUSED`; otherwise it is accepted and the audience must rotate.
+ */
+export declare function acceptCertificate(current: AccountPin | undefined, wire: Uint8Array, expected?: {
+    readonly accountName: string;
+    readonly accountKey: Uint8Array;
+}): CertificateOutcome;
+export interface DeviceKeys {
+    readonly deviceSeed: Uint8Array;
+    readonly deviceId: Uint8Array;
+    readonly signing: SigningKeypair;
+    readonly box: BoxKeypair;
+}
+export interface OwnAccount {
+    readonly accountName: string;
+    readonly accountSeed: Uint8Array;
+    readonly account: SigningKeypair;
+    readonly identityId: Uint8Array;
+}
+export declare function openAccount(accountName: string, accountSeed: Uint8Array): OwnAccount;
+export declare function newAccountSeed(): Uint8Array;
+/** A fresh installation: new device seed and a random nonzero device id. Never backed up. */
+export declare function newDevice(): DeviceKeys;
+export declare function deviceFromSeed(deviceSeed: Uint8Array, deviceId: Uint8Array): DeviceKeys;
+/** Build and sign this account's certificate for a device at a generation. */
+export declare function certify(account: OwnAccount, device: DeviceKeys, generation: bigint): Uint8Array;
+export declare function pinKey(identity: Uint8Array): string;
+//# sourceMappingURL=identity.d.ts.map

package/dist/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":"AAQA,OAAO,EAKL,KAAK,aAAa,EAClB,KAAK,MAAM,EACZ,MAAM,YAAY,CAAC;AACpB,OAAO,EASL,KAAK,UAAU,EACf,KAAK,cAAc,EACpB,MAAM,aAAa,CAAC;AAGrB,+CAA+C;AAC/C,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAC;IACrC,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,wEAAwE;IACxE,QAAQ,CAAC,SAAS,EAAE,SAAS,UAAU,EAAE,CAAC;CAC3C;AAED,MAAM,MAAM,kBAAkB,GAC1B;IAAE,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,GAAG,SAAS,CAAA;CAAE,GAC/H;IAAE,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAA;CAAE,CAAC;AAEhE,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,aAAa,CAAC,EAAE,QAAQ,CAAC,EAAE,UAAU,GAAG,UAAU,CAiBhG;AAED;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,UAAU,GAAG,SAAS,EAC/B,IAAI,EAAE,UAAU,EAChB,QAAQ,CAAC,EAAE;IAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;CAAE,GAC3E,kBAAkB,CAepB;AAID,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;CAC1B;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;CACjC;AAED,wBAAgB,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,GAAG,UAAU,CAIpF;AAED,wBAAgB,cAAc,IAAI,UAAU,CAE3C;AAED,6FAA6F;AAC7F,wBAAgB,SAAS,IAAI,UAAU,CAKtC;AAED,wBAAgB,cAAc,CAAC,UAAU,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,GAAG,UAAU,CAGvF;AAED,8EAA8E;AAC9E,wBAAgB,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,GAAG,UAAU,CAa/F;AAED,wBAAgB,MAAM,CAAC,QAAQ,EAAE,UAAU,GAAG,MAAM,CAEnD"}

package/dist/identity.js

@@ -0,0 +1,99 @@
+/**
+ * Accounts, devices, certificates and generation rules (protocol section 4).
+ *
+ * The pin is the local trust state for one account: (`accountName`, `AK`) at first contact, then
+ * the greatest accepted device generation with its certificate hash and device keys. Everything
+ * here is a pure decision over a pin and a candidate certificate; persistence is the store's job.
+ */
+import { concat, equalBytes, toHex } from "./bytes.js";
+import { DocumentType, buildAccountDevice, expectType, verifyDocument } from "./codec.js";
+import { DEVICE_ID_BYTES, SEED_BYTES, accountKeypair, deviceBoxKeypair, deviceSigningKeypair, identityId, randomBytes, streamId } from "./crypto.js";
+import { KavachError } from "./errors.js";
+export function pinFromCertificate(doc, previous) {
+    const iid = identityId(doc.accountName, doc.accountKey);
+    const ids = previous ? [...previous.deviceIds] : [];
+    if (!ids.some((d) => equalBytes(d, doc.deviceId)))
+        ids.push(doc.deviceId);
+    return {
+        accountName: doc.accountName,
+        accountKey: doc.accountKey,
+        identityId: iid,
+        generation: doc.generation,
+        certificateHash: doc.bodyHash,
+        certificate: concat(doc.body, doc.signature),
+        deviceId: doc.deviceId,
+        signingKey: doc.signingKey,
+        boxKey: doc.boxKey,
+        streamId: streamId(iid, doc.deviceId),
+        deviceIds: ids
+    };
+}
+/**
+ * Accept or reject a certificate against the local pin for its account.
+ *
+ * - No pin yet: first contact. If `expected` names the account the directory resolved, the
+ *   certificate must carry that name and key; the pin is created and nothing rotates.
+ * - A pinned account: a different `AK` is `ACCOUNT_KEY_CHANGED` and the caller quarantines
+ *   (never closing or re-admitting anything); a lower generation is `DEVICE_ROLLBACK`; the same
+ *   generation is a duplicate or `EQUIVOCATION`; a higher one with a reused device id is
+ *   `DEVICE_ID_REUSED`; otherwise it is accepted and the audience must rotate.
+ */
+export function acceptCertificate(current, wire, expected) {
+    const stage = "acceptCertificate";
+    const doc = expectType(verifyDocument(wire), DocumentType.AccountDevice, stage);
+    const anchor = current ?? expected;
+    if (anchor && (anchor.accountName !== doc.accountName || !equalBytes(anchor.accountKey, doc.accountKey))) {
+        throw new KavachError("ACCOUNT_KEY_CHANGED", stage, `certificate for ${doc.accountName} carries a different account key`);
+    }
+    if (!current)
+        return { outcome: "ACCEPTED", pin: pinFromCertificate(doc), rotate: false, previous: undefined };
+    if (doc.generation < current.generation)
+        throw new KavachError("DEVICE_ROLLBACK", stage);
+    if (doc.generation === current.generation) {
+        if (equalBytes(doc.bodyHash, current.certificateHash))
+            return { outcome: "DUPLICATE", pin: current };
+        throw new KavachError("EQUIVOCATION", stage, "two certificates at one generation");
+    }
+    if (current.deviceIds.some((d) => equalBytes(d, doc.deviceId)))
+        throw new KavachError("DEVICE_ID_REUSED", stage);
+    return { outcome: "ACCEPTED", pin: pinFromCertificate(doc, current), rotate: true, previous: current };
+}
+export function openAccount(accountName, accountSeed) {
+    if (accountSeed.length !== SEED_BYTES)
+        throw new KavachError("INVALID_KEY", "openAccount");
+    const account = accountKeypair(accountSeed);
+    return { accountName, accountSeed, account, identityId: identityId(accountName, account.publicKey) };
+}
+export function newAccountSeed() {
+    return randomBytes(SEED_BYTES);
+}
+/** A fresh installation: new device seed and a random nonzero device id. Never backed up. */
+export function newDevice() {
+    const deviceSeed = randomBytes(SEED_BYTES);
+    let deviceId = randomBytes(DEVICE_ID_BYTES);
+    while (deviceId.every((b) => b === 0))
+        deviceId = randomBytes(DEVICE_ID_BYTES);
+    return deviceFromSeed(deviceSeed, deviceId);
+}
+export function deviceFromSeed(deviceSeed, deviceId) {
+    if (deviceId.length !== DEVICE_ID_BYTES || deviceId.every((b) => b === 0))
+        throw new KavachError("MALFORMED", "device", "device id");
+    return { deviceSeed, deviceId, signing: deviceSigningKeypair(deviceSeed), box: deviceBoxKeypair(deviceSeed) };
+}
+/** Build and sign this account's certificate for a device at a generation. */
+export function certify(account, device, generation) {
+    if (generation < 1n)
+        throw new KavachError("MALFORMED", "certify", "generation");
+    return buildAccountDevice({
+        accountName: account.accountName,
+        accountKey: account.account.publicKey,
+        generation,
+        deviceId: device.deviceId,
+        signingKey: device.signing.publicKey,
+        boxKey: device.box.publicKey
+    }, account.account.secretKey);
+}
+export function pinKey(identity) {
+    return toHex(identity);
+}
+//# sourceMappingURL=identity.js.map

package/dist/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../src/identity.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,UAAU,EACV,cAAc,EAGf,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,eAAe,EACf,UAAU,EACV,cAAc,EACd,gBAAgB,EAChB,oBAAoB,EACpB,UAAU,EACV,WAAW,EACX,QAAQ,EAGT,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAsB1C,MAAM,UAAU,kBAAkB,CAAC,GAA0B,EAAE,QAAqB;IAClF,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACpD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC1E,OAAO;QACL,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,UAAU,EAAE,GAAG;QACf,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,eAAe,EAAE,GAAG,CAAC,QAAQ;QAC7B,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,SAAS,CAAC;QAC5C,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC;QACrC,SAAS,EAAE,GAAG;KACf,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAA+B,EAC/B,IAAgB,EAChB,QAA4E;IAE5E,MAAM,KAAK,GAAG,mBAAmB,CAAC;IAClC,MAAM,GAAG,GAAG,UAAU,CAAgB,cAAc,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IAC/F,MAAM,MAAM,GAAG,OAAO,IAAI,QAAQ,CAAC;IACnC,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,KAAK,GAAG,CAAC,WAAW,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QACzG,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,KAAK,EAAE,mBAAmB,GAAG,CAAC,WAAW,kCAAkC,CAAC,CAAC;IAC5H,CAAC;IACD,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,kBAAkB,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;IAC/G,IAAI,GAAG,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU;QAAE,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;IACzF,IAAI,GAAG,CAAC,UAAU,KAAK,OAAO,CAAC,UAAU,EAAE,CAAC;QAC1C,IAAI,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,eAAe,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;QACrG,MAAM,IAAI,WAAW,CAAC,cAAc,EAAE,KAAK,EAAE,oCAAoC,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;IACjH,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AACzG,CAAC;AAkBD,MAAM,UAAU,WAAW,CAAC,WAAmB,EAAE,WAAuB;IACtE,IAAI,WAAW,CAAC,MAAM,KAAK,UAAU;QAAE,MAAM,IAAI,WAAW,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;IAC3F,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,CAAC,CAAC;IAC5C,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;AACvG,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,WAAW,CAAC,UAAU,CAAC,CAAC;AACjC,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,SAAS;IACvB,MAAM,UAAU,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,QAAQ,GAAG,WAAW,CAAC,eAAe,CAAC,CAAC;IAC5C,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAAE,QAAQ,GAAG,WAAW,CAAC,eAAe,CAAC,CAAC;IAC/E,OAAO,cAAc,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,UAAsB,EAAE,QAAoB;IACzE,IAAI,QAAQ,CAAC,MAAM,KAAK,eAAe,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;IACrI,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,oBAAoB,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC;AAChH,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,OAAO,CAAC,OAAmB,EAAE,MAAkB,EAAE,UAAkB;IACjF,IAAI,UAAU,GAAG,EAAE;QAAE,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;IACjF,OAAO,kBAAkB,CACvB;QACE,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,UAAU,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS;QACrC,UAAU;QACV,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,UAAU,EAAE,MAAM,CAAC,OAAO,CAAC,SAAS;QACpC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS;KAC7B,EACD,OAAO,CAAC,OAAO,CAAC,SAAS,CAC1B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,QAAoB;IACzC,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC;AACzB,CAAC"}

package/dist/inbox.d.ts

@@ -0,0 +1,153 @@
+import { type RecordKind } from "./codec.js";
+import { type SelfView } from "./epoch.js";
+import { type RetentionPolicy } from "./policy.js";
+import type { Store, Tx } from "./store.js";
+import type { Relay } from "./transport.js";
+export declare const MAX_FUTURE_SKEW_MS = 300000n;
+export declare const READ_BATCH = 100;
+export type ReceiveResult = {
+    readonly result: "updated";
+    readonly recordId: Uint8Array;
+    readonly authorIdentityId: Uint8Array;
+    readonly kind: RecordKind;
+} | {
+    readonly result: "history";
+    readonly recordId: Uint8Array;
+    readonly authorIdentityId: Uint8Array;
+    readonly kind: RecordKind;
+}
+/** Verified, of a slot-only kind, and older than the slot's holder (or from a retired device): nothing kept. */
+ | {
+    readonly result: "older";
+    readonly recordId: Uint8Array;
+    readonly authorIdentityId: Uint8Array;
+    readonly kind: RecordKind;
+} | {
+    readonly result: "duplicate";
+    readonly recordId: Uint8Array;
+} | {
+    readonly result: "keyPending";
+    readonly streamId: Uint8Array;
+    readonly epoch: number;
+} | {
+    readonly result: "expired";
+    readonly reason: "window" | "CLOCK_SKEW";
+} | {
+    readonly result: "invalid";
+    readonly reason: string;
+};
+export interface InboxEvents {
+    received?(r: ReceiveResult): void;
+    /** The author's current epoch has no key for this device yet: show the person as waiting. */
+    waiting?(authorIdentityId: Uint8Array): void;
+    securityError?(code: string, detail: string): void;
+}
+export interface InboxDeps {
+    readonly store: Store;
+    readonly relay: Relay;
+    readonly policy: RetentionPolicy;
+    readonly now: () => bigint;
+    readonly self: () => SelfView;
+    readonly events?: InboxEvents;
+}
+/** A record pushed by the host outside `sync`: stored, but it never advances a relay cursor. */
+export declare function receive(deps: InboxDeps, wire: Uint8Array): Promise<ReceiveResult>;
+export interface StreamSyncSummary {
+    read: number;
+    stored: number;
+    duplicate: number;
+    keyPending: number;
+    invalid: number;
+    expired: number;
+    acked: bigint | undefined;
+    /** The relay holds more records past the last page read; the budget stopped the catch-up. */
+    hasMore: boolean;
+}
+/**
+ * One pass over one author stream: read a batch above the local scan position, process every
+ * record, hold the prefix at any `keyPending` record, and send at most one acknowledgement.
+ */
+/** What one sync may still read across every stream: records left and the time it must stop at. */
+export interface ReadBudget {
+    remainingRecords: number;
+    readonly deadline: bigint;
+}
+/**
+ * Read a stream in pages until it is caught up or the budget is spent. The first page restarts
+ * from the eligible prefix while a record is unresolved (the held record is read again; stored
+ * ones come back as harmless duplicates); later pages of the same sync continue from the last
+ * sequence examined, so a held record never makes the loop re-read its own page. Each page is
+ * processed and acknowledged before the next is read. `hasMore` says the relay still holds
+ * records past the last page when the budget stopped the loop.
+ */
+export declare function syncStream(deps: InboxDeps, streamId: Uint8Array, authorIdentityId: Uint8Array, budget?: ReadBudget): Promise<StreamSyncSummary>;
+export interface HistoryEntry {
+    readonly recordId: Uint8Array;
+    readonly authorIdentityId: Uint8Array;
+    readonly kind: RecordKind;
+    /** The sender's event time for the record, when it gave one. */
+    readonly eventTime: bigint | undefined;
+    readonly sentAt: bigint;
+    readonly receivedAt: bigint;
+    readonly plaintext: Uint8Array;
+    readonly superseded: boolean;
+    readonly own: boolean;
+}
+/**
+ * A history query. Every filter is served from the index: an author, a kind, a `sentAt` window
+ * (`since` inclusive, `before` exclusive), the order and a page size. `cursor` continues a page
+ * from `HistoryPage.cursor`; it names a fixed position in time order, so pages stay stable while
+ * records arrive or expire.
+ */
+export interface HistoryQuery {
+    readonly authorIdentityId?: Uint8Array;
+    readonly kind?: RecordKind;
+    readonly since?: bigint;
+    readonly before?: bigint;
+    /** At most this many entries; 1000 when absent. */
+    readonly limit?: number;
+    /** Oldest first by default; `"desc"` reads newest first. */
+    readonly order?: "asc" | "desc";
+    readonly cursor?: string;
+}
+export interface HistoryPage {
+    readonly entries: HistoryEntry[];
+    /** Present when the page was full: pass it back as `cursor` for the next page. */
+    readonly cursor: string | undefined;
+}
+export declare const HISTORY_PAGE = 1000;
+/** One page of history in time order, read through the index: one bounded scan per kind, merged. */
+export declare function historyPage(store: Store, policy: RetentionPolicy, q?: HistoryQuery): Promise<HistoryPage>;
+/** The first page only, for callers that want a plain list. */
+export declare function history(store: Store, policy: RetentionPolicy, q?: HistoryQuery): Promise<HistoryEntry[]>;
+/** The newest history entry matching the filters, read as a one-entry descending page. */
+export declare function newest(store: Store, policy: RetentionPolicy, q?: Pick<HistoryQuery, "authorIdentityId" | "kind">): Promise<HistoryEntry | undefined>;
+/** An author's newest record of a kind: the slot's holder, with the event time it was chosen by and its age. */
+export interface Newest {
+    readonly recordId: Uint8Array;
+    readonly kind: number;
+    readonly payload: Uint8Array;
+    readonly sentAt: bigint;
+    /** The event time the slot was ordered by, never later than `sentAt`. */
+    readonly eventTime: bigint;
+    readonly ageMs: bigint;
+}
+/** The newest slot of an author and kind, or `undefined` when there is none or its payload expired (the slot stays, the payload is gone). */
+export declare function newestSlot(store: Store, authorIdentityId: Uint8Array, kind: number, now: bigint): Promise<Newest | undefined>;
+/**
+ * Build the slots once for a store written before the slot table: every non-superseded history
+ * row of a kind declared `newest` is offered to its slot in time order. A fresh store is marked
+ * at T1 and never runs this. Idempotent.
+ */
+export declare function ensureSlots(store: Store, policy: RetentionPolicy): Promise<boolean>;
+/**
+ * Retention, per declared kind: drop history past the kind's window, and drop the payload of a
+ * newest slot past it while the row keeps its order, so an older record replayed later cannot
+ * become current.
+ */
+export declare function purgeHistory(store: Store, policy: RetentionPolicy, now: bigint): Promise<number>;
+/** Clear a removed author's newest slots and keys; history already received stays. */
+export declare function forgetAuthor(store: Store, authorIdentityId: Uint8Array): Promise<void>;
+/** The same, inside a caller's transaction. */
+export declare function forgetAuthorIn(tx: Tx, authorIdentityId: Uint8Array): void;
+//# sourceMappingURL=inbox.d.ts.map

package/dist/inbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbox.d.ts","sourceRoot":"","sources":["../src/inbox.ts"],"names":[],"mappings":"AAKA,OAAO,EAAiE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAE5G,OAAO,EAA8B,KAAK,QAAQ,EAAE,MAAM,YAAY,CAAC;AAGvE,OAAO,EAAwB,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AAIzE,OAAO,KAAK,EAAwB,KAAK,EAAmB,EAAE,EAAE,MAAM,YAAY,CAAC;AACnF,OAAO,KAAK,EAAqB,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAE/D,eAAO,MAAM,kBAAkB,UAAW,CAAC;AAC3C,eAAO,MAAM,UAAU,MAAM,CAAC;AAE9B,MAAM,MAAM,aAAa,GACrB;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,gBAAgB,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,GAC/H;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,gBAAgB,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE;AACjI,gHAAgH;GAC9G;IAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,gBAAgB,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,GAC7H;IAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAA;CAAE,GAC/D;IAAE,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACxF;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,YAAY,CAAA;CAAE,GACxE;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5D,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,CAAC,CAAC,EAAE,aAAa,GAAG,IAAI,CAAC;IAClC,6FAA6F;IAC7F,OAAO,CAAC,CAAC,gBAAgB,EAAE,UAAU,GAAG,IAAI,CAAC;IAC7C,aAAa,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACpD;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,QAAQ,CAAC;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AA6HD,gGAAgG;AAChG,wBAAsB,OAAO,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,CASvF;AAID,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,6FAA6F;IAC7F,OAAO,EAAE,OAAO,CAAC;CAClB;AA0BD;;;GAGG;AACH,mGAAmG;AACnG,MAAM,WAAW,UAAU;IACzB,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;GAOG;AACH,wBAAsB,UAAU,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,GAAE,UAAmE,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAoB7M;AAmFD,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,EAAE,UAAU,CAAC;IACtC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,gEAAgE;IAChE,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;CACvB;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,UAAU,CAAC;IACvC,QAAQ,CAAC,IAAI,CAAC,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,mDAAmD;IACnD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,4DAA4D;IAC5D,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC;IAChC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC;IACjC,kFAAkF;IAClF,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAED,eAAO,MAAM,YAAY,OAAO,CAAC;AAgBjC,oGAAoG;AACpG,wBAAsB,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,GAAE,YAAiB,GAAG,OAAO,CAAC,WAAW,CAAC,CA8BnH;AAED,+DAA+D;AAC/D,wBAAsB,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,GAAE,YAAiB,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAElH;AAED,0FAA0F;AAC1F,wBAAsB,MAAM,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,GAAE,IAAI,CAAC,YAAY,EAAE,kBAAkB,GAAG,MAAM,CAAM,GAAG,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAE9J;AAyBD,gHAAgH;AAChH,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,yEAAyE;IACzE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,6IAA6I;AAC7I,wBAAsB,UAAU,CAAC,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAMnI;AAED;;;;GAIG;AACH,wBAAsB,WAAW,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CAczF;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAwCtG;AAED,sFAAsF;AACtF,wBAAsB,YAAY,CAAC,KAAK,EAAE,KAAK,EAAE,gBAAgB,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAE5F;AAED,+CAA+C;AAC/C,wBAAgB,cAAc,CAAC,EAAE,EAAE,EAAE,EAAE,gBAAgB,EAAE,UAAU,GAAG,IAAI,CAMzE"}