@real-life/trust-protocol 0.3.1 → 0.4.0

package/dist/sha256.d.ts

@@ -0,0 +1,3 @@
+/** SHA-256 of the UTF-8 bytes of `text`, lowercase hex. */
+export declare function sha256Hex(text: string): string;
+//# sourceMappingURL=sha256.d.ts.map

package/dist/sha256.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sha256.d.ts","sourceRoot":"","sources":["../src/sha256.ts"],"names":[],"mappings":"AAqBA,2DAA2D;AAC3D,wBAAgB,SAAS,CAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAiC/C"}

package/dist/sha256.js

@@ -0,0 +1,69 @@
+// sha256 — a synchronous SHA-256 (FIPS 180-4) over UTF-8 text: a
+// deliberately scoped exception to "WebCrypto only" (README). It digests
+// local state only — the reconciliation views of 5.4 that a pure,
+// synchronous transition compares (trust/star.ts, used for the star and
+// the group star) — and never wire bytes, keys or MACs; WebCrypto's digest
+// is asynchronous and cannot serve there. test/sha256.test.mjs checks it
+// differentially against node:crypto and that no other module imports it.
+const K = new Uint32Array([
+    0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5, 0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5,
+    0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3, 0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174,
+    0xe49b69c1, 0xefbe4786, 0x0fc19dc6, 0x240ca1cc, 0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da,
+    0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7, 0xc6e00bf3, 0xd5a79147, 0x06ca6351, 0x14292967,
+    0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13, 0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85,
+    0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3, 0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070,
+    0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5, 0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3,
+    0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208, 0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2,
+]);
+const te = new TextEncoder();
+/** SHA-256 of the UTF-8 bytes of `text`, lowercase hex. */
+export function sha256Hex(text) {
+    const msg = te.encode(text);
+    const bitLen = msg.length * 8;
+    const padded = new Uint8Array(((msg.length + 9 + 63) >> 6) << 6);
+    padded.set(msg);
+    padded[msg.length] = 0x80;
+    const dv = new DataView(padded.buffer);
+    dv.setUint32(padded.length - 8, Math.floor(bitLen / 0x100000000));
+    dv.setUint32(padded.length - 4, bitLen >>> 0);
+    const H = new Uint32Array([0x6a09e667, 0xbb67ae85, 0x3c6ef372, 0xa54ff53a, 0x510e527f, 0x9b05688c, 0x1f83d9ab, 0x5be0cd19]);
+    const W = new Uint32Array(64);
+    for (let off = 0; off < padded.length; off += 64) {
+        for (let i = 0; i < 16; i++)
+            W[i] = dv.getUint32(off + i * 4);
+        for (let i = 16; i < 64; i++) {
+            const a = W[i - 15], b = W[i - 2];
+            const s0 = ((a >>> 7) | (a << 25)) ^ ((a >>> 18) | (a << 14)) ^ (a >>> 3);
+            const s1 = ((b >>> 17) | (b << 15)) ^ ((b >>> 19) | (b << 13)) ^ (b >>> 10);
+            W[i] = (W[i - 16] + s0 + W[i - 7] + s1) >>> 0;
+        }
+        let a = H[0], b = H[1], c = H[2], d = H[3], e = H[4], f = H[5], g = H[6], h = H[7];
+        for (let i = 0; i < 64; i++) {
+            const S1 = ((e >>> 6) | (e << 26)) ^ ((e >>> 11) | (e << 21)) ^ ((e >>> 25) | (e << 7));
+            const t1 = (h + S1 + ((e & f) ^ (~e & g)) + K[i] + W[i]) >>> 0;
+            const S0 = ((a >>> 2) | (a << 30)) ^ ((a >>> 13) | (a << 19)) ^ ((a >>> 22) | (a << 10));
+            const t2 = (S0 + ((a & b) ^ (a & c) ^ (b & c))) >>> 0;
+            h = g;
+            g = f;
+            f = e;
+            e = (d + t1) >>> 0;
+            d = c;
+            c = b;
+            b = a;
+            a = (t1 + t2) >>> 0;
+        }
+        H[0] = (H[0] + a) >>> 0;
+        H[1] = (H[1] + b) >>> 0;
+        H[2] = (H[2] + c) >>> 0;
+        H[3] = (H[3] + d) >>> 0;
+        H[4] = (H[4] + e) >>> 0;
+        H[5] = (H[5] + f) >>> 0;
+        H[6] = (H[6] + g) >>> 0;
+        H[7] = (H[7] + h) >>> 0;
+    }
+    let out = '';
+    for (const x of H)
+        out += x.toString(16).padStart(8, '0');
+    return out;
+}
+//# sourceMappingURL=sha256.js.map

package/dist/sha256.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sha256.js","sourceRoot":"","sources":["../src/sha256.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,yEAAyE;AACzE,kEAAkE;AAClE,wEAAwE;AACxE,2EAA2E;AAC3E,yEAAyE;AACzE,0EAA0E;AAE1E,MAAM,CAAC,GAAG,IAAI,WAAW,CAAC;IACxB,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;IAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU;CAC/F,CAAC,CAAA;AAEF,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAA;AAE5B,2DAA2D;AAC3D,MAAM,UAAU,SAAS,CAAE,IAAY;IACrC,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAC3B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,CAAA;IAC7B,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;IAChE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACf,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,CAAA;IACzB,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACtC,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC,CAAA;IACjE,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,MAAM,KAAK,CAAC,CAAC,CAAA;IAC7C,MAAM,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAA;IAC3H,MAAM,CAAC,GAAG,IAAI,WAAW,CAAC,EAAE,CAAC,CAAA;IAC7B,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,EAAE,EAAE,CAAC;QACjD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE;YAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;QAC7D,KAAK,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;YACjC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;YACzE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAA;YAC3E,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAA;QAC/C,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QAClF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;YACvF,MAAM,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;YAC9D,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;YACxF,MAAM,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;YACrD,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;YAAC,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,CAAA;QACnF,CAAC;QACD,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAA;QAClG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAA;IACpG,CAAC;IACD,IAAI,GAAG,GAAG,EAAE,CAAA;IACZ,KAAK,MAAM,CAAC,IAAI,CAAC;QAAE,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACzD,OAAO,GAAG,CAAA;AACZ,CAAC","sourcesContent":["// sha256 — a synchronous SHA-256 (FIPS 180-4) over UTF-8 text: a\n// deliberately scoped exception to \"WebCrypto only\" (README). It digests\n// local state only — the reconciliation views of 5.4 that a pure,\n// synchronous transition compares (trust/star.ts, used for the star and\n// the group star) — and never wire bytes, keys or MACs; WebCrypto's digest\n// is asynchronous and cannot serve there. test/sha256.test.mjs checks it\n// differentially against node:crypto and that no other module imports it.\n\nconst K = new Uint32Array([\n  0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5, 0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5,\n  0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3, 0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174,\n  0xe49b69c1, 0xefbe4786, 0x0fc19dc6, 0x240ca1cc, 0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da,\n  0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7, 0xc6e00bf3, 0xd5a79147, 0x06ca6351, 0x14292967,\n  0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13, 0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85,\n  0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3, 0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070,\n  0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5, 0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3,\n  0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208, 0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2,\n])\n\nconst te = new TextEncoder()\n\n/** SHA-256 of the UTF-8 bytes of `text`, lowercase hex. */\nexport function sha256Hex (text: string): string {\n  const msg = te.encode(text)\n  const bitLen = msg.length * 8\n  const padded = new Uint8Array(((msg.length + 9 + 63) >> 6) << 6)\n  padded.set(msg)\n  padded[msg.length] = 0x80\n  const dv = new DataView(padded.buffer)\n  dv.setUint32(padded.length - 8, Math.floor(bitLen / 0x100000000))\n  dv.setUint32(padded.length - 4, bitLen >>> 0)\n  const H = new Uint32Array([0x6a09e667, 0xbb67ae85, 0x3c6ef372, 0xa54ff53a, 0x510e527f, 0x9b05688c, 0x1f83d9ab, 0x5be0cd19])\n  const W = new Uint32Array(64)\n  for (let off = 0; off < padded.length; off += 64) {\n    for (let i = 0; i < 16; i++) W[i] = dv.getUint32(off + i * 4)\n    for (let i = 16; i < 64; i++) {\n      const a = W[i - 15], b = W[i - 2]\n      const s0 = ((a >>> 7) | (a << 25)) ^ ((a >>> 18) | (a << 14)) ^ (a >>> 3)\n      const s1 = ((b >>> 17) | (b << 15)) ^ ((b >>> 19) | (b << 13)) ^ (b >>> 10)\n      W[i] = (W[i - 16] + s0 + W[i - 7] + s1) >>> 0\n    }\n    let a = H[0], b = H[1], c = H[2], d = H[3], e = H[4], f = H[5], g = H[6], h = H[7]\n    for (let i = 0; i < 64; i++) {\n      const S1 = ((e >>> 6) | (e << 26)) ^ ((e >>> 11) | (e << 21)) ^ ((e >>> 25) | (e << 7))\n      const t1 = (h + S1 + ((e & f) ^ (~e & g)) + K[i] + W[i]) >>> 0\n      const S0 = ((a >>> 2) | (a << 30)) ^ ((a >>> 13) | (a << 19)) ^ ((a >>> 22) | (a << 10))\n      const t2 = (S0 + ((a & b) ^ (a & c) ^ (b & c))) >>> 0\n      h = g; g = f; f = e; e = (d + t1) >>> 0; d = c; c = b; b = a; a = (t1 + t2) >>> 0\n    }\n    H[0] = (H[0] + a) >>> 0; H[1] = (H[1] + b) >>> 0; H[2] = (H[2] + c) >>> 0; H[3] = (H[3] + d) >>> 0\n    H[4] = (H[4] + e) >>> 0; H[5] = (H[5] + f) >>> 0; H[6] = (H[6] + g) >>> 0; H[7] = (H[7] + h) >>> 0\n  }\n  let out = ''\n  for (const x of H) out += x.toString(16).padStart(8, '0')\n  return out\n}\n"]}

package/dist/star.d.ts

@@ -0,0 +1,31 @@
+/** At most this many entries per chunk (5200). */
+export declare const STAR_CHUNK = 1024;
+/** The Delivery Contract's plaintext limit a chunk's document stays within (5190). */
+export declare const PLAINTEXT_MAX = 65536;
+export type StarChunk = {
+    body: {
+        type: 'star@2';
+        salt: string;
+        seq: string;
+        last: boolean;
+        blinded: string[];
+    };
+    proof: {
+        mac: string;
+    };
+};
+/** k of one direction from the pair secret (5160); salt in its wire string form. */
+export declare function starKeyOf(shared: Uint8Array, sender: string, recipient: string, salt: string, subtle?: SubtleCrypto): Promise<Uint8Array>;
+/** One blinded entry: HMAC(k, anchor) in its u form (5010). */
+export declare const blindAnchor: (k: Uint8Array, anchor: string, subtle?: SubtleCrypto) => Promise<string>;
+/** The chunks of one delivery: every anchor once, blinded, sorted once,
+ *  sliced by STAR_CHUNK (5010, 5050, 5200, 5220). */
+export declare function buildStarChunks(k: Uint8Array, salt: string, anchors: Iterable<string>, subtle?: SubtleCrypto): Promise<StarChunk[]>;
+/** Is this a schema-valid star@2 chunk (visibility-star.schema.json)? */
+export declare const starChunkOk: (chunk: unknown) => boolean;
+/** Does the chunk's MAC verify under k (5080)? */
+export declare function starChunkMacOk(k: Uint8Array, chunk: StarChunk, subtle?: SubtleCrypto): Promise<boolean>;
+/** The assembled union is strictly ascending: sorted and free of
+ *  duplicates in one check (5300, 5310). */
+export declare const strictlyAscending: (xs: readonly string[]) => boolean;
+//# sourceMappingURL=star.d.ts.map

package/dist/star.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"star.d.ts","sourceRoot":"","sources":["../src/star.ts"],"names":[],"mappings":"AAqBA,kDAAkD;AAClD,eAAO,MAAM,UAAU,OAAO,CAAA;AAC9B,sFAAsF;AACtF,eAAO,MAAM,aAAa,QAAS,CAAA;AAEnC,MAAM,MAAM,SAAS,GAAG;IAAE,IAAI,EAAE;QAAE,IAAI,EAAE,QAAQ,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAAC,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,CAAA;AAEzI,oFAAoF;AACpF,wBAAsB,SAAS,CAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,GAAE,YAA+B,GAAG,OAAO,CAAC,UAAU,CAAC,CAGlK;AAED,+DAA+D;AAC/D,eAAO,MAAM,WAAW,GAAI,GAAG,UAAU,EAAE,QAAQ,MAAM,EAAE,SAAS,YAAY,KAAG,OAAO,CAAC,MAAM,CAA4B,CAAA;AAE7H;qDACqD;AACrD,wBAAsB,eAAe,CAAE,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAE,YAA+B,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAW5J;AAED,yEAAyE;AACzE,eAAO,MAAM,WAAW,GAAI,OAAO,OAAO,KAAG,OACuE,CAAA;AAEpH,kDAAkD;AAClD,wBAAsB,cAAc,CAAE,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,CAE9G;AAED;4CAC4C;AAC5C,eAAO,MAAM,iBAAiB,GAAI,IAAI,SAAS,MAAM,EAAE,KAAG,OAAwD,CAAA"}

package/dist/star.js

@@ -0,0 +1,56 @@
+// star — star@2, the blinded star with its 5.2a chunks (Trust Layer 0.31
+// §5.1–5.2a, task star/0.2): the pure wire constructions over a raw
+// X25519 shared secret (lib Stage 2, PR 4b). The holder's trust module
+// (trust/star.ts) builds and receives through these. Byte-compatible with
+// the star of vectors/visibility.json (vectors3.test.mjs).
+//
+//   k     = HKDF(X25519(pairX_sender, pairX_recipient),
+//                "rltp/visibility/blind/star/" || senderPair || "/" || recipientPair || "/" || salt)   (5160)
+//   entry = HMAC(k, anchor bytes)                                                                       (5010)
+//   chunk = { body: { type: "star@2", salt, seq, last, blinded }, proof: { mac: HMAC(k, JCS(body)) } } (5070, 5080)
+//
+// The union of entries is deduplicated (5050), sorted once and sliced
+// into chunks of at most 1024 entries (5200, 5220); an empty star is one
+// chunk with no entry.
+import { jcs, makeValidator } from './core.js';
+import { SCHEMAS } from './schemas.js';
+import { hkdf, platformSubtle } from './crypto.js';
+import { macU } from './anchor.js';
+const VAL = makeValidator(SCHEMAS);
+/** At most this many entries per chunk (5200). */
+export const STAR_CHUNK = 1024;
+/** The Delivery Contract's plaintext limit a chunk's document stays within (5190). */
+export const PLAINTEXT_MAX = 65_536;
+/** k of one direction from the pair secret (5160); salt in its wire string form. */
+export async function starKeyOf(shared, sender, recipient, salt, subtle = platformSubtle()) {
+    if (shared.every((b) => b === 0))
+        throw new Error('all-zero shared secret (Trust §2.1)');
+    return hkdf(shared, `rltp/visibility/blind/star/${sender}/${recipient}/${salt}`, 32, subtle);
+}
+/** One blinded entry: HMAC(k, anchor) in its u form (5010). */
+export const blindAnchor = (k, anchor, subtle) => macU(k, anchor, subtle);
+/** The chunks of one delivery: every anchor once, blinded, sorted once,
+ *  sliced by STAR_CHUNK (5010, 5050, 5200, 5220). */
+export async function buildStarChunks(k, salt, anchors, subtle = platformSubtle()) {
+    const blinded = [];
+    for (const anchor of new Set(anchors))
+        blinded.push(await blindAnchor(k, anchor, subtle));
+    blinded.sort();
+    const n = Math.max(1, Math.ceil(blinded.length / STAR_CHUNK));
+    const chunks = [];
+    for (let i = 0; i < n; i++) {
+        const body = { type: 'star@2', salt, seq: String(i + 1), last: i === n - 1, blinded: blinded.slice(i * STAR_CHUNK, (i + 1) * STAR_CHUNK) };
+        chunks.push({ body, proof: { mac: await macU(k, jcs(body), subtle) } });
+    }
+    return chunks;
+}
+/** Is this a schema-valid star@2 chunk (visibility-star.schema.json)? */
+export const starChunkOk = (chunk) => VAL.validate(chunk, SCHEMAS['visibility-star.schema.json'], SCHEMAS['visibility-star.schema.json']).length === 0;
+/** Does the chunk's MAC verify under k (5080)? */
+export async function starChunkMacOk(k, chunk, subtle) {
+    return (await macU(k, jcs(chunk.body), subtle)) === chunk.proof.mac;
+}
+/** The assembled union is strictly ascending: sorted and free of
+ *  duplicates in one check (5300, 5310). */
+export const strictlyAscending = (xs) => xs.every((x, i) => i === 0 || xs[i - 1] < x);
+//# sourceMappingURL=star.js.map

package/dist/star.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"star.js","sourceRoot":"","sources":["../src/star.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,oEAAoE;AACpE,uEAAuE;AACvE,0EAA0E;AAC1E,2DAA2D;AAC3D,EAAE;AACF,wDAAwD;AACxD,8GAA8G;AAC9G,+GAA+G;AAC/G,oHAAoH;AACpH,EAAE;AACF,sEAAsE;AACtE,yEAAyE;AACzE,uBAAuB;AACvB,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAA;AAElC,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;AAElC,kDAAkD;AAClD,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,CAAA;AAC9B,sFAAsF;AACtF,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAA;AAInC,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,SAAS,CAAE,MAAkB,EAAE,MAAc,EAAE,SAAiB,EAAE,IAAY,EAAE,SAAuB,cAAc,EAAE;IAC3I,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IACxF,OAAO,IAAI,CAAC,MAAM,EAAE,8BAA8B,MAAM,IAAI,SAAS,IAAI,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,CAAA;AAC9F,CAAC;AAED,+DAA+D;AAC/D,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAa,EAAE,MAAc,EAAE,MAAqB,EAAmB,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;AAE7H;qDACqD;AACrD,MAAM,CAAC,KAAK,UAAU,eAAe,CAAE,CAAa,EAAE,IAAY,EAAE,OAAyB,EAAE,SAAuB,cAAc,EAAE;IACpI,MAAM,OAAO,GAAa,EAAE,CAAA;IAC5B,KAAK,MAAM,MAAM,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,CAAC,IAAI,CAAC,MAAM,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IACzF,OAAO,CAAC,IAAI,EAAE,CAAA;IACd,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC,CAAA;IAC7D,MAAM,MAAM,GAAgB,EAAE,CAAA;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,QAAiB,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,UAAU,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,UAAU,CAAC,EAAE,CAAA;QACnJ,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,MAAM,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAA;IACzE,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAc,EAAW,EAAE,CACrD,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,6BAA6B,CAAE,EAAE,OAAO,CAAC,6BAA6B,CAAE,CAAC,CAAC,MAAM,KAAK,CAAC,CAAA;AAEpH,kDAAkD;AAClD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAE,CAAa,EAAE,KAAgB,EAAE,MAAqB;IAC1F,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,KAAK,CAAC,KAAK,CAAC,GAAG,CAAA;AACrE,CAAC;AAED;4CAC4C;AAC5C,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,EAAqB,EAAW,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAE,GAAG,CAAC,CAAC,CAAA","sourcesContent":["// star — star@2, the blinded star with its 5.2a chunks (Trust Layer 0.31\n// §5.1–5.2a, task star/0.2): the pure wire constructions over a raw\n// X25519 shared secret (lib Stage 2, PR 4b). The holder's trust module\n// (trust/star.ts) builds and receives through these. Byte-compatible with\n// the star of vectors/visibility.json (vectors3.test.mjs).\n//\n//   k     = HKDF(X25519(pairX_sender, pairX_recipient),\n//                \"rltp/visibility/blind/star/\" || senderPair || \"/\" || recipientPair || \"/\" || salt)   (5160)\n//   entry = HMAC(k, anchor bytes)                                                                       (5010)\n//   chunk = { body: { type: \"star@2\", salt, seq, last, blinded }, proof: { mac: HMAC(k, JCS(body)) } } (5070, 5080)\n//\n// The union of entries is deduplicated (5050), sorted once and sliced\n// into chunks of at most 1024 entries (5200, 5220); an empty star is one\n// chunk with no entry.\nimport { jcs, makeValidator } from './core.js'\nimport { SCHEMAS } from './schemas.js'\nimport { hkdf, platformSubtle } from './crypto.js'\nimport { macU } from './anchor.js'\n\nconst VAL = makeValidator(SCHEMAS)\n\n/** At most this many entries per chunk (5200). */\nexport const STAR_CHUNK = 1024\n/** The Delivery Contract's plaintext limit a chunk's document stays within (5190). */\nexport const PLAINTEXT_MAX = 65_536\n\nexport type StarChunk = { body: { type: 'star@2', salt: string, seq: string, last: boolean, blinded: string[] }, proof: { mac: string } }\n\n/** k of one direction from the pair secret (5160); salt in its wire string form. */\nexport async function starKeyOf (shared: Uint8Array, sender: string, recipient: string, salt: string, subtle: SubtleCrypto = platformSubtle()): Promise<Uint8Array> {\n  if (shared.every((b) => b === 0)) throw new Error('all-zero shared secret (Trust §2.1)')\n  return hkdf(shared, `rltp/visibility/blind/star/${sender}/${recipient}/${salt}`, 32, subtle)\n}\n\n/** One blinded entry: HMAC(k, anchor) in its u form (5010). */\nexport const blindAnchor = (k: Uint8Array, anchor: string, subtle?: SubtleCrypto): Promise<string> => macU(k, anchor, subtle)\n\n/** The chunks of one delivery: every anchor once, blinded, sorted once,\n *  sliced by STAR_CHUNK (5010, 5050, 5200, 5220). */\nexport async function buildStarChunks (k: Uint8Array, salt: string, anchors: Iterable<string>, subtle: SubtleCrypto = platformSubtle()): Promise<StarChunk[]> {\n  const blinded: string[] = []\n  for (const anchor of new Set(anchors)) blinded.push(await blindAnchor(k, anchor, subtle))\n  blinded.sort()\n  const n = Math.max(1, Math.ceil(blinded.length / STAR_CHUNK))\n  const chunks: StarChunk[] = []\n  for (let i = 0; i < n; i++) {\n    const body = { type: 'star@2' as const, salt, seq: String(i + 1), last: i === n - 1, blinded: blinded.slice(i * STAR_CHUNK, (i + 1) * STAR_CHUNK) }\n    chunks.push({ body, proof: { mac: await macU(k, jcs(body), subtle) } })\n  }\n  return chunks\n}\n\n/** Is this a schema-valid star@2 chunk (visibility-star.schema.json)? */\nexport const starChunkOk = (chunk: unknown): boolean =>\n  VAL.validate(chunk, SCHEMAS['visibility-star.schema.json']!, SCHEMAS['visibility-star.schema.json']!).length === 0\n\n/** Does the chunk's MAC verify under k (5080)? */\nexport async function starChunkMacOk (k: Uint8Array, chunk: StarChunk, subtle?: SubtleCrypto): Promise<boolean> {\n  return (await macU(k, jcs(chunk.body), subtle)) === chunk.proof.mac\n}\n\n/** The assembled union is strictly ascending: sorted and free of\n *  duplicates in one check (5300, 5310). */\nexport const strictlyAscending = (xs: readonly string[]): boolean => xs.every((x, i) => i === 0 || xs[i - 1]! < x)\n"]}

package/dist/state-builder.d.ts

@@ -0,0 +1,42 @@
+import type { Contact, Duty, HolderState, Millis, Relationship, Setting, TrustClass, Tuple } from './state.js';
+/** A tuple as the builder takes it: the four keys of 6.4 and the rkid;
+ *  every other field may be given, else it starts empty. */
+export type TupleSpec = Pick<Tuple, 'ownPairLabel' | 'counterpartAnchor' | 'counterpartKeyAgreement' | 'rkid'> & Partial<Tuple>;
+/** A relationship as the builder takes it; `activeHead` defaults to the last tuple. */
+export type RelationshipSpec = {
+    contactId: string;
+    tuples: TupleSpec[];
+} & Partial<Omit<Relationship, 'id' | 'contactId' | 'tuples'>>;
+export interface StateBuilder {
+    /** register.community: the personal community's genesis digest and head generation */
+    community(genesis: string, head?: string): StateBuilder;
+    /** register.lineage: the holder's own anchor-rotation@2 artifacts, chain order */
+    lineage(rotations: HolderState['register']['lineage']): StateBuilder;
+    /** a contact, created or merged (fields given replace the held ones) */
+    contact(id: string, fields?: Partial<Omit<Contact, 'id'>>): StateBuilder;
+    /** a relationship with its tuples (see the header) */
+    relationship(id: string, spec: RelationshipSpec): StateBuilder;
+    /** an entry commit for the contact at the next position (2120) */
+    entry(contactId: string, opts?: {
+        status?: 'admitted' | 'pending';
+    }): StateBuilder;
+    /** class settings toward a contact (2810) */
+    settings(contactId: string, settings: Partial<Record<TrustClass, Setting>>): StateBuilder;
+    /** an address key (Delivery §5) */
+    address(rkid: string, label: string, lastShown?: Millis): StateBuilder;
+    duty(d: Duty): StateBuilder;
+    /** the raw draft, for anything the methods do not cover */
+    with(fn: (draft: HolderState) => void): StateBuilder;
+    /** the validated state, an independent copy */
+    build(): HolderState;
+}
+/** A tuple with every per-tuple scope empty (6250: nothing migrates into it). */
+export declare const emptyTuple: (spec: TupleSpec & {
+    entryId: string;
+}) => Tuple;
+/** A fluent builder of valid HolderStates; `at` is the time it stamps
+ *  (provenance, address lastShown), default 0. */
+export declare function stateBuilder(opts?: {
+    at?: Millis;
+}): StateBuilder;
+//# sourceMappingURL=state-builder.d.ts.map

package/dist/state-builder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state-builder.d.ts","sourceRoot":"","sources":["../src/state-builder.ts"],"names":[],"mappings":"AA8BA,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,YAAY,CAAA;AAE9G;4DAC4D;AAC5D,MAAM,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,EAAE,cAAc,GAAG,mBAAmB,GAAG,yBAAyB,GAAG,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;AAE/H,uFAAuF;AACvF,MAAM,MAAM,gBAAgB,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,SAAS,EAAE,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,GAAG,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAA;AAEtI,MAAM,WAAW,YAAY;IAC3B,sFAAsF;IACtF,SAAS,CAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,YAAY,CAAA;IACxD,kFAAkF;IAClF,OAAO,CAAE,SAAS,EAAE,WAAW,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,GAAG,YAAY,CAAA;IACrE,wEAAwE;IACxE,OAAO,CAAE,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,GAAG,YAAY,CAAA;IACzE,sDAAsD;IACtD,YAAY,CAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,GAAG,YAAY,CAAA;IAC/D,kEAAkE;IAClE,KAAK,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,UAAU,GAAG,SAAS,CAAA;KAAE,GAAG,YAAY,CAAA;IACnF,6CAA6C;IAC7C,QAAQ,CAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,GAAG,YAAY,CAAA;IAC1F,mCAAmC;IACnC,OAAO,CAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,YAAY,CAAA;IACvE,IAAI,CAAE,CAAC,EAAE,IAAI,GAAG,YAAY,CAAA;IAC5B,2DAA2D;IAC3D,IAAI,CAAE,EAAE,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,GAAG,YAAY,CAAA;IACrD,+CAA+C;IAC/C,KAAK,IAAK,WAAW,CAAA;CACtB;AAKD,iFAAiF;AACjF,eAAO,MAAM,UAAU,GAAI,MAAM,SAAS,GAAG;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,KAAG,KAYjE,CAAA;AAIF;kDACkD;AAClD,wBAAgB,YAAY,CAAE,IAAI,GAAE;IAAE,EAAE,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,YAAY,CA6CtE"}

package/dist/state-builder.js

@@ -0,0 +1,100 @@
+// state-builder — valid HolderStates for tests, vectors and adapter
+// authors (lib Stage 2, note §4.6 ./testing). Not for production holders:
+// a real holder's state arises from its acts.
+//
+// A fluent builder over plain data: anchors, key-agreement keys and labels
+// are strings the caller derives (seedKeys(seed).anchorOf(label)), so the
+// builder stays synchronous and key-free. build() validates the result
+// with the codec (encodeState) and hands out an independent copy; every
+// call before it may be chained.
+//
+//   stateBuilder()
+//     .community(genesis, '2')                 register.community
+//     .lineage([rotation1to2])                 register.lineage
+//     .relationship('r1', { contactId: 'c1', tuples: [{ ownPairLabel,
+//        counterpartAnchor, counterpartKeyAgreement, rkid }] })
+//                                              the contact (created at
+//                                              status 'none' if new), the
+//                                              tuple's label in the
+//                                              register, its rkid live in
+//                                              addresses, the active head
+//                                              in entryOrder.heads (2180)
+//     .entry('c1')                             an entry commit (2120): the
+//                                              next position, 'admitted'
+//                                              (or { status: 'pending' })
+//     .settings('c1', { anchorMapping: 'on' }) class settings (2810)
+//     .duty({ kind: 'class-on', … })           an open duty
+//     .with((s) => { … })                      anything else, on the draft
+//     .build()
+import { CODEC, encodeState } from './codec.js';
+import { emptyState } from './state.js';
+const seqOut = () => ({ lastSalt: '0', exhausted: false, hwm: '0', snapshot: null, snapshotDigest: null, inflight: {} });
+const seqIn = () => ({ hwm: '0', lowerBound: '0', assembly: null, accepted: null });
+/** A tuple with every per-tuple scope empty (6250: nothing migrates into it). */
+export const emptyTuple = (spec) => ({
+    priorCandidates: [],
+    starOut: seqOut(), starIn: seqIn(), groupStarOut: seqOut(), groupStarIn: seqIn(),
+    probeOut: { seq: '0', inflight: {}, done: false }, probeIn: { hwm: '0', lowerBound: '0', assembly: null },
+    continuityOut: { rev: '0', body: null, proof: null, sent: [], align: false, chosen: null, reported: null, aligned: false, due: null },
+    continuityIn: { rev: '0', body: null, recordPrior: null },
+    mappingOut: { rev: '0', body: null, underAnchor: null },
+    mappingIn: { rev: '0', body: null, self: null, card: null },
+    profileOut: { rev: '0' },
+    profileIn: { rev: '0', body: null, verifiedSeq: '0' },
+    deactivated: false,
+    ...spec,
+});
+const DEFAULTS = { star: 'default', groupStar: 'default', anchorMapping: 'default', sealedGroupStar: 'default', profile: 'default' };
+/** A fluent builder of valid HolderStates; `at` is the time it stamps
+ *  (provenance, address lastShown), default 0. */
+export function stateBuilder(opts = {}) {
+    const at = opts.at ?? 0;
+    const s = emptyState(CODEC);
+    const contactOf = (id) => {
+        if (!Object.hasOwn(s.contacts, id)) {
+            s.contacts[id] = { id, pos: null, status: 'none', aliases: [], relIds: [], anchorHead: null, settings: { ...DEFAULTS }, groupSettings: {} };
+        }
+        return s.contacts[id];
+    };
+    const b = {
+        community(genesis, head = '1') { s.register.community = { genesis, head }; return b; },
+        lineage(rotations) { s.register.lineage = structuredClone(rotations); return b; },
+        contact(id, fields = {}) { Object.assign(contactOf(id), structuredClone(fields)); return b; },
+        relationship(id, spec) {
+            const { contactId, tuples, ...rest } = structuredClone(spec);
+            const c = contactOf(contactId);
+            if (!c.relIds.includes(id))
+                c.relIds.push(id);
+            const full = tuples.map((t) => emptyTuple({ entryId: contactId, ...t }));
+            for (const t of full) {
+                if (!s.register.labels.includes(t.ownPairLabel))
+                    s.register.labels.push(t.ownPairLabel);
+                if (!Object.hasOwn(s.addresses.keys, t.rkid))
+                    s.addresses.keys[t.rkid] = { label: t.ownPairLabel, lastShown: at };
+            }
+            s.relationships[id] = {
+                id, contactId, tuples: full, activeHead: full[full.length - 1].ownPairLabel,
+                earliestAnchor: null, links: [], bindings: {}, heldCounterpartHead: null, memory: {},
+                provenance: { kind: 'ceremony', at }, chainedInto: null, firstVerified: null,
+                ...rest,
+            };
+            if (!s.entryOrder.heads.includes(id))
+                s.entryOrder.heads.push(id);
+            return b;
+        },
+        entry(contactId, o = {}) {
+            const c = contactOf(contactId);
+            c.pos = s.entryOrder.nextPos;
+            c.status = o.status ?? 'admitted';
+            s.entryOrder.nextPos = (BigInt(s.entryOrder.nextPos) + 1n).toString();
+            return b;
+        },
+        settings(contactId, settings) { Object.assign(contactOf(contactId).settings, settings); return b; },
+        address(rkid, label, lastShown = at) { s.addresses.keys[rkid] = { label, lastShown }; return b; },
+        duty(d) { s.duties[d.id] = structuredClone(d); return b; },
+        with(fn) { fn(s); return b; },
+        build() { return JSON.parse(encodeState(s)); },
+    };
+    return b;
+}
+//# sourceMappingURL=state-builder.js.map

package/dist/state-builder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"state-builder.js","sourceRoot":"","sources":["../src/state-builder.ts"],"names":[],"mappings":"AAAA,oEAAoE;AACpE,0EAA0E;AAC1E,8CAA8C;AAC9C,EAAE;AACF,2EAA2E;AAC3E,0EAA0E;AAC1E,uEAAuE;AACvE,wEAAwE;AACxE,iCAAiC;AACjC,EAAE;AACF,mBAAmB;AACnB,kEAAkE;AAClE,gEAAgE;AAChE,sEAAsE;AACtE,gEAAgE;AAChE,uEAAuE;AACvE,0EAA0E;AAC1E,oEAAoE;AACpE,0EAA0E;AAC1E,0EAA0E;AAC1E,0EAA0E;AAC1E,2EAA2E;AAC3E,yEAAyE;AACzE,0EAA0E;AAC1E,qEAAqE;AACrE,4DAA4D;AAC5D,2EAA2E;AAC3E,eAAe;AACf,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAgCvC,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAA;AACxH,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAA;AAEnF,iFAAiF;AACjF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAqC,EAAS,EAAE,CAAC,CAAC;IAC3E,eAAe,EAAE,EAAE;IACnB,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,KAAK,EAAE;IAChF,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE;IACzG,aAAa,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE;IACrI,YAAY,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;IACzD,UAAU,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE;IACvD,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE;IAC3D,UAAU,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE;IACxB,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE;IACrD,WAAW,EAAE,KAAK;IAClB,GAAG,IAAI;CACR,CAAC,CAAA;AAEF,MAAM,QAAQ,GAAgC,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,eAAe,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,CAAA;AAEjK;kDACkD;AAClD,MAAM,UAAU,YAAY,CAAE,OAAwB,EAAE;IACtD,MAAM,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,CAAC,CAAA;IACvB,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;IAC3B,MAAM,SAAS,GAAG,CAAC,EAAU,EAAW,EAAE;QACxC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC;YACnC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,CAAA;QAC7I,CAAC;QACD,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;IACvB,CAAC,CAAA;IACD,MAAM,CAAC,GAAiB;QACtB,SAAS,CAAE,OAAO,EAAE,IAAI,GAAG,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAA,CAAC,CAAC;QACtF,OAAO,CAAE,SAAS,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA,CAAC,CAAC;QACjF,OAAO,CAAE,EAAE,EAAE,MAAM,GAAG,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA,CAAC,CAAC;QAC7F,YAAY,CAAE,EAAE,EAAE,IAAI;YACpB,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,eAAe,CAAC,IAAI,CAAC,CAAA;YAC5D,MAAM,CAAC,GAAG,SAAS,CAAC,SAAS,CAAC,CAAA;YAC9B,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;YACxE,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;gBACrB,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC;oBAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAA;gBACvF,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;oBAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,YAAY,EAAE,SAAS,EAAE,EAAE,EAAE,CAAA;YACnH,CAAC;YACD,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,GAAG;gBACpB,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,YAAY;gBAC3E,cAAc,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE;gBACpF,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI;gBAC5E,GAAG,IAAI;aACR,CAAA;YACD,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAAE,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACjE,OAAO,CAAC,CAAA;QACV,CAAC;QACD,KAAK,CAAE,SAAS,EAAE,CAAC,GAAG,EAAE;YACtB,MAAM,CAAC,GAAG,SAAS,CAAC,SAAS,CAAC,CAAA;YAC9B,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC,OAAO,CAAA;YAC5B,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,UAAU,CAAA;YACjC,CAAC,CAAC,UAAU,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAA;YACrE,OAAO,CAAC,CAAA;QACV,CAAC;QACD,QAAQ,CAAE,SAAS,EAAE,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA,CAAC,CAAC;QACnG,OAAO,CAAE,IAAI,EAAE,KAAK,EAAE,SAAS,GAAG,EAAE,IAAI,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,CAAA,CAAC,CAAC;QACjG,IAAI,CAAE,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA,CAAC,CAAC;QAC1D,IAAI,CAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA,CAAC,CAAC;QAC7B,KAAK,KAAM,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAgB,CAAA,CAAC,CAAC;KAC9D,CAAA;IACD,OAAO,CAAC,CAAA;AACV,CAAC","sourcesContent":["// state-builder — valid HolderStates for tests, vectors and adapter\n// authors (lib Stage 2, note §4.6 ./testing). Not for production holders:\n// a real holder's state arises from its acts.\n//\n// A fluent builder over plain data: anchors, key-agreement keys and labels\n// are strings the caller derives (seedKeys(seed).anchorOf(label)), so the\n// builder stays synchronous and key-free. build() validates the result\n// with the codec (encodeState) and hands out an independent copy; every\n// call before it may be chained.\n//\n//   stateBuilder()\n//     .community(genesis, '2')                 register.community\n//     .lineage([rotation1to2])                 register.lineage\n//     .relationship('r1', { contactId: 'c1', tuples: [{ ownPairLabel,\n//        counterpartAnchor, counterpartKeyAgreement, rkid }] })\n//                                              the contact (created at\n//                                              status 'none' if new), the\n//                                              tuple's label in the\n//                                              register, its rkid live in\n//                                              addresses, the active head\n//                                              in entryOrder.heads (2180)\n//     .entry('c1')                             an entry commit (2120): the\n//                                              next position, 'admitted'\n//                                              (or { status: 'pending' })\n//     .settings('c1', { anchorMapping: 'on' }) class settings (2810)\n//     .duty({ kind: 'class-on', … })           an open duty\n//     .with((s) => { … })                      anything else, on the draft\n//     .build()\nimport { CODEC, encodeState } from './codec.js'\nimport { emptyState } from './state.js'\nimport type { Contact, Duty, HolderState, Millis, Relationship, Setting, TrustClass, Tuple } from './state.js'\n\n/** A tuple as the builder takes it: the four keys of 6.4 and the rkid;\n *  every other field may be given, else it starts empty. */\nexport type TupleSpec = Pick<Tuple, 'ownPairLabel' | 'counterpartAnchor' | 'counterpartKeyAgreement' | 'rkid'> & Partial<Tuple>\n\n/** A relationship as the builder takes it; `activeHead` defaults to the last tuple. */\nexport type RelationshipSpec = { contactId: string, tuples: TupleSpec[] } & Partial<Omit<Relationship, 'id' | 'contactId' | 'tuples'>>\n\nexport interface StateBuilder {\n  /** register.community: the personal community's genesis digest and head generation */\n  community (genesis: string, head?: string): StateBuilder\n  /** register.lineage: the holder's own anchor-rotation@2 artifacts, chain order */\n  lineage (rotations: HolderState['register']['lineage']): StateBuilder\n  /** a contact, created or merged (fields given replace the held ones) */\n  contact (id: string, fields?: Partial<Omit<Contact, 'id'>>): StateBuilder\n  /** a relationship with its tuples (see the header) */\n  relationship (id: string, spec: RelationshipSpec): StateBuilder\n  /** an entry commit for the contact at the next position (2120) */\n  entry (contactId: string, opts?: { status?: 'admitted' | 'pending' }): StateBuilder\n  /** class settings toward a contact (2810) */\n  settings (contactId: string, settings: Partial<Record<TrustClass, Setting>>): StateBuilder\n  /** an address key (Delivery §5) */\n  address (rkid: string, label: string, lastShown?: Millis): StateBuilder\n  duty (d: Duty): StateBuilder\n  /** the raw draft, for anything the methods do not cover */\n  with (fn: (draft: HolderState) => void): StateBuilder\n  /** the validated state, an independent copy */\n  build (): HolderState\n}\n\nconst seqOut = () => ({ lastSalt: '0', exhausted: false, hwm: '0', snapshot: null, snapshotDigest: null, inflight: {} })\nconst seqIn = () => ({ hwm: '0', lowerBound: '0', assembly: null, accepted: null })\n\n/** A tuple with every per-tuple scope empty (6250: nothing migrates into it). */\nexport const emptyTuple = (spec: TupleSpec & { entryId: string }): Tuple => ({\n  priorCandidates: [],\n  starOut: seqOut(), starIn: seqIn(), groupStarOut: seqOut(), groupStarIn: seqIn(),\n  probeOut: { seq: '0', inflight: {}, done: false }, probeIn: { hwm: '0', lowerBound: '0', assembly: null },\n  continuityOut: { rev: '0', body: null, proof: null, sent: [], align: false, chosen: null, reported: null, aligned: false, due: null },\n  continuityIn: { rev: '0', body: null, recordPrior: null },\n  mappingOut: { rev: '0', body: null, underAnchor: null },\n  mappingIn: { rev: '0', body: null, self: null, card: null },\n  profileOut: { rev: '0' },\n  profileIn: { rev: '0', body: null, verifiedSeq: '0' },\n  deactivated: false,\n  ...spec,\n})\n\nconst DEFAULTS: Record<TrustClass, Setting> = { star: 'default', groupStar: 'default', anchorMapping: 'default', sealedGroupStar: 'default', profile: 'default' }\n\n/** A fluent builder of valid HolderStates; `at` is the time it stamps\n *  (provenance, address lastShown), default 0. */\nexport function stateBuilder (opts: { at?: Millis } = {}): StateBuilder {\n  const at = opts.at ?? 0\n  const s = emptyState(CODEC)\n  const contactOf = (id: string): Contact => {\n    if (!Object.hasOwn(s.contacts, id)) {\n      s.contacts[id] = { id, pos: null, status: 'none', aliases: [], relIds: [], anchorHead: null, settings: { ...DEFAULTS }, groupSettings: {} }\n    }\n    return s.contacts[id]\n  }\n  const b: StateBuilder = {\n    community (genesis, head = '1') { s.register.community = { genesis, head }; return b },\n    lineage (rotations) { s.register.lineage = structuredClone(rotations); return b },\n    contact (id, fields = {}) { Object.assign(contactOf(id), structuredClone(fields)); return b },\n    relationship (id, spec) {\n      const { contactId, tuples, ...rest } = structuredClone(spec)\n      const c = contactOf(contactId)\n      if (!c.relIds.includes(id)) c.relIds.push(id)\n      const full = tuples.map((t) => emptyTuple({ entryId: contactId, ...t }))\n      for (const t of full) {\n        if (!s.register.labels.includes(t.ownPairLabel)) s.register.labels.push(t.ownPairLabel)\n        if (!Object.hasOwn(s.addresses.keys, t.rkid)) s.addresses.keys[t.rkid] = { label: t.ownPairLabel, lastShown: at }\n      }\n      s.relationships[id] = {\n        id, contactId, tuples: full, activeHead: full[full.length - 1].ownPairLabel,\n        earliestAnchor: null, links: [], bindings: {}, heldCounterpartHead: null, memory: {},\n        provenance: { kind: 'ceremony', at }, chainedInto: null, firstVerified: null,\n        ...rest,\n      }\n      if (!s.entryOrder.heads.includes(id)) s.entryOrder.heads.push(id)\n      return b\n    },\n    entry (contactId, o = {}) {\n      const c = contactOf(contactId)\n      c.pos = s.entryOrder.nextPos\n      c.status = o.status ?? 'admitted'\n      s.entryOrder.nextPos = (BigInt(s.entryOrder.nextPos) + 1n).toString()\n      return b\n    },\n    settings (contactId, settings) { Object.assign(contactOf(contactId).settings, settings); return b },\n    address (rkid, label, lastShown = at) { s.addresses.keys[rkid] = { label, lastShown }; return b },\n    duty (d) { s.duties[d.id] = structuredClone(d); return b },\n    with (fn) { fn(s); return b },\n    build () { return JSON.parse(encodeState(s)) as HolderState },\n  }\n  return b\n}\n"]}