@real-life/trust-protocol 0.3.2 → 0.4.0

package/dist/group-star.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"group-star.js","sourceRoot":"","sources":["../src/group-star.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,sEAAsE;AACtE,sEAAsE;AACtE,gCAAgC;AAChC,EAAE;AACF,0EAA0E;AAC1E,wEAAwE;AACxE,qCAAqC;AACrC,EAAE;AACF,yDAAyD;AACzD,4GAA4G;AAC5G,4BAA4B;AAC5B,uHAAuH;AACvH,8GAA8G;AAC9G,2CAA2C;AAC3C,uEAAuE;AACvE,2HAA2H;AAC3H,EAAE;AACF,uEAAuE;AACvE,mEAAmE;AACnE,oEAAoE;AACpE,wEAAwE;AACxE,sEAAsE;AACtE,iDAAiD;AACjD,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AACtC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAEpF,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAA;AAElC,MAAM,EAAE,GAAG,IAAI,WAAW,EAAE,CAAA;AAC5B,MAAM,EAAE,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;AACpD,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;AAClC,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,IAAa,EAAW,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAE,EAAE,OAAO,CAAC,IAAI,CAAE,CAAC,CAAC,MAAM,KAAK,CAAC,CAAA;AAE1H,wEAAwE;AACxE,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAA;AAChC;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAA;AAClC,MAAM,KAAK,GAAG,EAAE,CAAA;AAChB,MAAM,GAAG,GAAG,EAAE,CAAA;AAQd,MAAM,MAAM,GAAG,CAAC,CAAa,EAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAA;AAElE,kIAAkI;AAClI,MAAM,CAAC,KAAK,UAAU,cAAc,CAAE,MAAkB,EAAE,MAAc,EAAE,SAAiB,EAAE,IAAY,EAAE,SAAuB,cAAc,EAAE;IAChJ,IAAI,MAAM,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IAC1E,OAAO,IAAI,CAAC,MAAM,EAAE,oCAAoC,MAAM,IAAI,SAAS,IAAI,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,CAAA;AACpG,CAAC;AACD,0HAA0H;AAC1H,MAAM,CAAC,KAAK,UAAU,cAAc,CAAE,MAAkB,EAAE,MAAc,EAAE,SAAiB,EAAE,IAAY,EAAE,KAAa,EAAE,SAAuB,cAAc,EAAE;IAC/J,IAAI,MAAM,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IAC1E,OAAO,IAAI,CAAC,MAAM,EAAE,mCAAmC,MAAM,IAAI,SAAS,IAAI,IAAI,IAAI,KAAK,EAAE,EAAE,EAAE,EAAE,MAAM,CAAC,CAAA;AAC5G,CAAC;AAED,+FAA+F;AAC/F,KAAK,UAAU,IAAI,CAAE,GAAe,EAAE,GAAW,EAAE,SAAiB,EAAE,KAAiB,EAAE,CAAe;IACtG,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC,CAAA;IACtE,MAAM,EAAE,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IACnJ,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;IAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAAC,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAA;IACjF,OAAO,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;AAC1B,CAAC;AACD,KAAK,UAAU,IAAI,CAAE,GAAe,EAAE,GAAW,EAAE,CAAS,EAAE,CAAe;IAC3E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;QAChC,IAAI,GAAG,CAAC,MAAM,IAAI,KAAK,GAAG,GAAG;YAAE,OAAO,IAAI,CAAA;QAC1C,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC,CAAA;QACtE,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,cAAc,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;QACnJ,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IACtB,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAA;IAAC,CAAC;AACzB,CAAC;AAaD,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAE,CAAkB,EAAE,YAAwB,EAAE,SAAuB,cAAc,EAAE;IAC7H,IAAI,MAAM,CAAC,YAAY,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;IAChF,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IACzH,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,gCAAgC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAA;IAChF,OAAO,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,MAAM,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,EAAE,CAAA;AACrE,CAAC;AACD,sEAAsE;AACtE,qEAAqE;AACrE,8DAA8D;AAC9D,MAAM,YAAY,GAAG,CAAC,EAAU,EAAE,IAAY,EAAU,EAAE,CAAC,KAAK,GAAG,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC;IACrF,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;CACxI,CAAC,CAAC,CAAC,MAAM,CAAA;AA4BV,kEAAkE;AAClE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAE,CAAqB;IAC7D,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,cAAc,EAAE,CAAA;IACtC,MAAM,EAAE,GAAG,MAAM,cAAc,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IACpE,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAA;IACvC,MAAM,EAAE,GAAG,IAAI,GAAG,EAAU,EAAE,EAAE,GAAG,IAAI,GAAG,EAAU,CAAA;IACpD,MAAM,OAAO,GAA+B,EAAE,CAAA;IAC9C,MAAM,OAAO,GAAG,GAAW,EAAE,GAAG,SAAS,CAAC;QAAC,MAAM,CAAC,GAAG,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAA;IAAC,CAAC,CAAC,CAAC,CAAA;IACvH,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;QACpC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,SAAQ,CAAqB,sBAAsB;QAClE,IAAI,CAAS,CAAA;QACb,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YACb,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,YAAY;gBAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;YACjH,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAA;YACpJ,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,cAAc,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAA;YAC3H,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAA;QAC7I,CAAC;;YAAM,CAAC,GAAG,OAAO,EAAE,CAAA;QACpB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IAC9C,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,cAAc,CAAC,GAAG,cAAc,CAAC,CAAA;IACpG,OAAO,OAAO,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC;QAC/B,IAAI,CAAS,CAAA;QACb;YAAG,CAAC,GAAG,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;eAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAC,CAAG,0CAA0C;QACzG,MAAM,CAAC,GAAG,OAAO,EAAE,CAAA;QACnB,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAA;IAC9C,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC5D,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,gBAAgB,CAAC,CAAA;IACtD,MAAM,MAAM,GAAqB,EAAE,CAAA;IACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,cAAuB,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,gBAAgB,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,gBAAgB,CAAC,EAAE,CAAA;QAC5K,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,MAAM,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACrE,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,CAAA;AACnB,CAAC;AAED,2EAA2E;AAE3E,qFAAqF;AACrF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAc,EAAW,EAAE,CAAC,QAAQ,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAA;AAEjH;oEACoE;AACpE,MAAM,UAAU,gBAAgB,CAAE,OAA4C;IAC5E,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,OAAO,CAAA;IAChF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,cAAc,KAAK,CAAC;QAAE,OAAO,MAAM,CAAA;IAChF,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,MAAM,CAAC;QAAE,OAAO,UAAU,CAAA;IAC/E,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAE,CAAyG;IACpJ,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,cAAc,EAAE,CAAA;IACtC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAA;IAC1F,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,MAAM;QAAE,IAAI,CAAC,gBAAgB,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;IAC5F,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAA;IAClC,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;IACtF,IAAI,EAAc,CAAA;IAClB,IAAI,CAAC;QAAC,EAAE,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;IAAC,CAAC;IAC1H,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,MAAM;QAAE,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;IACtH,MAAM,KAAK,GAAG,IAAI,GAAG,EAAe,CAAA;IACpC,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QAAC,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,CAAA;IAAC,CAAC;IACxI,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACnD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;IAC5D,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACnC,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAA;IAChE,MAAM,OAAO,GAA+B,EAAE,CAAA;IAC9C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAAC,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAAC,IAAI,CAAC,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAA;IAAC,CAAC;IAC9I,MAAM,GAAG,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAA;IACrC,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,CAAA;IACnD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;AACpC,CAAC;AAYD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAE,CAGxC;IACC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,cAAc,EAAE,CAAA;IACtC,MAAM,EAAE,GAAG,MAAM,cAAc,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IACnE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACrD,MAAM,GAAG,GAAsB,EAAE,CAAA;IACjC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAA;QACpC,MAAM,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;QACpB,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;YAAC,SAAQ;QAAC,CAAC;QAC3G,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,cAAc,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;QACjG,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;YAAC,SAAQ;QAAC,CAAC;QACtG,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;QACjH,IAAI,IAAS,CAAA;QACb,IAAI,CAAC;YAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAAC,SAAQ;QAAC,CAAC;QAClE,IAAI,CAAC,QAAQ,CAAC,mCAAmC,EAAE,IAAI,CAAC,EAAE,CAAC;YAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAAC,SAAQ;QAAC,CAAC;QACxF,IAAI,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;YAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAAC,SAAQ;QAAC,CAAC;QACzD,IAAI,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAAC,SAAQ;QAAC,CAAC;QACzE,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACnC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAAC,SAAQ;QAAC,CAAC;QACjG,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,YAAY,CAAC,CAAA;QAC/C,IAAI,CAAC,EAAE,IAAI,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;YAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAAC,SAAQ;QAAC,CAAC;QAClD,MAAM,EAAE,KAAK,EAAE,GAAG,QAAQ,EAAE,GAAG,IAAI,CAAA;QACnC,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,EAAE,gCAAgC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC;YAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAAC,SAAQ;QAAC,CAAC;QAClI,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAA;IACrH,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,0EAA0E;AAC1E,yEAAyE;AACzE,uEAAuE;AACvE,uEAAuE;AACvE,yDAAyD;AAEzD,MAAM,MAAM,GAAG,KAAK,EAAE,GAAY,EAAE,gBAAwB,EAAuB,EAAE;IACnF,MAAM,CAAC,GAAG,QAAQ,CAAC,gBAAgB,CAAC,CAAA;IACpC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;IAC/D,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAA;IACpC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA,CAAG,iCAAiC;IACxH,OAAO,EAAE,CAAA;AACX,CAAC,CAAA;AACD,6GAA6G;AAC7G,MAAM,CAAC,KAAK,UAAU,YAAY,CAAE,GAAY,EAAE,gBAAwB,EAAE,MAAc,EAAE,SAAiB,EAAE,IAAY;IACzH,OAAO,cAAc,CAAC,MAAM,MAAM,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,CAAA;AACrF,CAAC;AACD,qGAAqG;AACrG,MAAM,CAAC,KAAK,UAAU,YAAY,CAAE,GAAY,EAAE,gBAAwB,EAAE,MAAc,EAAE,SAAiB,EAAE,IAAY,EAAE,KAAa;IACxI,OAAO,cAAc,CAAC,MAAM,MAAM,CAAC,GAAG,EAAE,gBAAgB,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAA;AAC5F,CAAC;AAcD,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,cAAc,CAAE,CAAiB;IACrD,OAAO,kBAAkB,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,MAAM,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,CAAA;AAChK,CAAC;AAqBD,kEAAkE;AAClE,MAAM,CAAC,KAAK,UAAU,cAAc,CAAE,CAAiB;IACrD,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,CAAA;IAClB,OAAO,kBAAkB,CAAC;QACxB,MAAM,EAAE,MAAM,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI;QAC3F,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3B,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ;YAChF,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAO,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS;SAC/E,CAAC,CAAC;QACH,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;KACpB,CAAC,CAAA;AACJ,CAAC;AAED,2EAA2E;AAC3E;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAE,CAA0E;IACjH,OAAO,qBAAqB,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAA;AACtI,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAE,CAA8I;IACjL,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC;QAClC,MAAM,EAAE,MAAM,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,gBAAgB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW;QAC9I,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE;YAClC,MAAM,OAAO,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAA;YACtC,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QACrD,CAAC;KACF,CAAC,CAAA;IACF,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;AAC9C,CAAC","sourcesContent":["// group-star — group-star@1, the sender's groups blinded to every\n// contact and sealed to the chosen ones (Trust Layer 0.31 §5.2b, task\n// group-star/0.1): the pure wire constructions over raw X25519 shared\n// secrets (lib Stage 2, PR 4b).\n//\n// Byte-identical with vectors/group-star.json (check:generators:lib). The\n// holder's trust module (trust/group-star.ts) builds on these functions\n// with secrets from its KeyProvider.\n//\n//   k_g    = HKDF(X25519(pairX_sender, pairX_recipient),\n//                 \"rltp/visibility/blind/group-star/\" || senderPair || \"/\" || recipientPair || \"/\" || salt)\n//   k_e(G) = HKDF(same ikm,\n//                 \"rltp/visibility/seal/group-star/\" || senderPair || \"/\" || recipientPair || \"/\" || salt || \"/\" || G)\n//   entry  = { d: HMAC(k_g, UTF-8 of G), c: AES-256-GCM(k_e(G), nonce, AAD = bytes of d, JCS(group-pair@1)) }\n//   proof  = { mac: HMAC(k_g, JCS(body)) }\n//   group-pair@1 = { type, group, member, memberOp, to, salt, proof },\n//     proof = HMAC(HKDF(ECDH(memberX_sender, pairX_recipient), \"rltp/visibility/mac/group-pair\"), JCS(pair without proof))\n//\n// A `c` that is not a real pair is FILLER: random bytes of exactly the\n// length a real c has in this star. The list is padded with filler\n// entries to the next multiple of 16 (an empty list to 16: the all-\n// filler star), sorted by d once, and sliced in order into chunks of at\n// most 64 (5.2a). Entropy comes from the caller's `draw`, by kind, so\n// vectors replay; this module draws none itself.\nimport { jcs, makeValidator } from './core.js'\nimport { SCHEMAS } from './schemas.js'\nimport { b64uOf, ecdh, fromB64u, hkdf, platformSubtle, xRawOfMk } from './crypto.js'\nimport type { Context } from './identity.js'\nimport { macU } from './anchor.js'\n\nconst te = new TextEncoder()\nconst td = new TextDecoder('utf-8', { fatal: true })\nconst VAL = makeValidator(SCHEMAS)\nconst schemaOk = (file: string, data: unknown): boolean => VAL.validate(data, SCHEMAS[file]!, SCHEMAS[file]!).length === 0\n\n/** Entries are padded to the next positive multiple of this (§5.2b). */\nexport const GROUP_STAR_PAD = 16\n/**\n * Chunks hold at most 64 entries (§5.2b): a real entry is about 570\n * bytes JCS, so a full chunk stays well inside the Delivery Contract's\n * 65 536-byte plaintext bound at the longest salt.\n */\nexport const GROUP_STAR_CHUNK = 64\nconst NONCE = 12\nconst TAG = 16\n\n/** The kinds of randomness a group star draws: AEAD nonces of sealed\n *  pairs, and filler (d and c of filler entries, c of unsealed ones). */\nexport type GroupStarRandKind = 'nonce' | 'filler'\n/** The caller's entropy: n fresh bytes of one kind. */\nexport type GroupStarDraw = (n: number, kind: GroupStarRandKind) => Uint8Array\n\nconst isZero = (b: Uint8Array): boolean => b.every((x) => x === 0)\n\n/** k_g of one direction from the pair secret: `sender` and `recipient` are the two pair anchors, salt in its wire string form. */\nexport async function groupStarKeyOf (shared: Uint8Array, sender: string, recipient: string, salt: string, subtle: SubtleCrypto = platformSubtle()): Promise<Uint8Array> {\n  if (isZero(shared)) throw new Error('all-zero shared secret (Trust §2.1)')\n  return hkdf(shared, `rltp/visibility/blind/group-star/${sender}/${recipient}/${salt}`, 32, subtle)\n}\n/** k_e(G) from the pair secret: the sealing key of one group's entry; G is the canonical u form of the genesis digest. */\nexport async function groupSealKeyOf (shared: Uint8Array, sender: string, recipient: string, salt: string, group: string, subtle: SubtleCrypto = platformSubtle()): Promise<Uint8Array> {\n  if (isZero(shared)) throw new Error('all-zero shared secret (Trust §2.1)')\n  return hkdf(shared, `rltp/visibility/seal/group-star/${sender}/${recipient}/${salt}/${group}`, 32, subtle)\n}\n\n// ── AEAD (§2.1): AES-256-GCM, 128-bit tag, 96-bit nonce; u + base64url(nonce || ct || tag) ──\nasync function seal (key: Uint8Array, aad: string, plaintext: string, nonce: Uint8Array, S: SubtleCrypto): Promise<string> {\n  const k = await S.importKey('raw', key, 'AES-GCM', false, ['encrypt'])\n  const ct = new Uint8Array(await S.encrypt({ name: 'AES-GCM', iv: nonce, additionalData: te.encode(aad), tagLength: 128 }, k, te.encode(plaintext)))\n  const out = new Uint8Array(NONCE + ct.length); out.set(nonce); out.set(ct, NONCE)\n  return 'u' + b64uOf(out)\n}\nasync function open (key: Uint8Array, aad: string, c: string, S: SubtleCrypto): Promise<string | null> {\n  try {\n    const raw = fromB64u(c.slice(1))\n    if (raw.length <= NONCE + TAG) return null\n    const k = await S.importKey('raw', key, 'AES-GCM', false, ['decrypt'])\n    const pt = await S.decrypt({ name: 'AES-GCM', iv: raw.subarray(0, NONCE), additionalData: te.encode(aad), tagLength: 128 }, k, raw.subarray(NONCE))\n    return td.decode(pt)\n  } catch { return null }\n}\n\n// ── group-pair@1 ────────────────────────────────────────────────────────\nexport interface GroupPairFields {\n  /** the genesis digest G, canonical u form */\n  group: string\n  /** the sender's member anchor in G (for a founder: its founding pair anchor) */\n  member: string\n  /** oid: of the canonical admission of member, or of the genesis where the sender founded G */\n  memberOp: string\n  to: string\n  salt: string\n}\n/** The opened body of a sealed entry; `memberShared` = X25519(memberX_sender, pairX_recipient). */\nexport async function buildGroupPairWith (i: GroupPairFields, memberShared: Uint8Array, subtle: SubtleCrypto = platformSubtle()) {\n  if (isZero(memberShared)) throw new Error('all-zero shared secret (Trust §2.1)')\n  const unproved = { type: 'group-pair@1', group: i.group, member: i.member, memberOp: i.memberOp, to: i.to, salt: i.salt }\n  const k = await hkdf(memberShared, 'rltp/visibility/mac/group-pair', 32, subtle)\n  return { ...unproved, proof: await macU(k, jcs(unproved), subtle) }\n}\n// every field of a group pair but salt has a fixed length on the wire\n// (did:key 56, digest 47, oid 47, mac 44), so a real c's length is a\n// function of the salt alone — the filler length of this star\nconst sealedLength = (to: string, salt: string): number => NONCE + TAG + te.encode(jcs({\n  type: 'group-pair@1', group: 'u' + 'A'.repeat(46), member: to, memberOp: 'oid:' + 'A'.repeat(43), to, salt, proof: 'u' + 'A'.repeat(43),\n})).length\n\n// ── the sender ──────────────────────────────────────────────────────────\nexport interface GroupStarEntryInput {\n  group: string\n  /** a real sealed pair; otherwise c is filler */\n  sealed: boolean\n  /** the sender's member anchor in G (sealed only) */\n  member?: string\n  memberOp?: string\n  /** X25519(memberX_sender, pairX_recipient), asked for only when sealed */\n  memberShared?: () => Promise<Uint8Array>\n}\nexport interface GroupStarWithInput {\n  /** X25519(pairX_sender, pairX_recipient) */\n  shared: Uint8Array\n  /** the sender's pair anchor */\n  sender: string\n  /** the recipient's pair anchor */\n  to: string\n  salt: string\n  /** every group the sender lists toward this recipient */\n  groups: GroupStarEntryInput[]\n  draw: GroupStarDraw\n  subtle?: SubtleCrypto\n}\nexport type GroupStarChunk = { body: { type: 'group-star@1', salt: string, seq: string, last: boolean, groups: { d: string, c: string }[] }, proof: { mac: string } }\n\n/** The chunks of one group-star delivery toward one recipient. */\nexport async function buildGroupStarWith (i: GroupStarWithInput): Promise<{ chunks: GroupStarChunk[] }> {\n  const S = i.subtle ?? platformSubtle()\n  const kg = await groupStarKeyOf(i.shared, i.sender, i.to, i.salt, S)\n  const cLen = sealedLength(i.to, i.salt)\n  const ds = new Set<string>(), cs = new Set<string>()\n  const entries: { d: string, c: string }[] = []\n  const fillerC = (): string => { for (;;) { const c = 'u' + b64uOf(i.draw(cLen, 'filler')); if (!cs.has(c)) return c } }\n  for (const g of i.groups) {\n    const d = await macU(kg, g.group, S)\n    if (ds.has(d)) continue                     // one entry per group\n    let c: string\n    if (g.sealed) {\n      if (!g.member || !g.memberOp || !g.memberShared) throw new Error('a sealed group pair needs member and memberOp')\n      const pair = await buildGroupPairWith({ group: g.group, member: g.member, memberOp: g.memberOp, to: i.to, salt: i.salt }, await g.memberShared(), S)\n      c = await seal(await groupSealKeyOf(i.shared, i.sender, i.to, i.salt, g.group, S), d, jcs(pair), i.draw(NONCE, 'nonce'), S)\n      if (c.length !== 'u'.length + Math.ceil(cLen * 4 / 3)) throw new Error('group pair of unexpected length — filler would be distinguishable')\n    } else c = fillerC()\n    ds.add(d); cs.add(c); entries.push({ d, c })\n  }\n  const target = Math.max(GROUP_STAR_PAD, Math.ceil(entries.length / GROUP_STAR_PAD) * GROUP_STAR_PAD)\n  while (entries.length < target) {\n    let d: string\n    do d = 'u' + b64uOf(i.draw(32, 'filler')); while (ds.has(d))   // collisions with any value are resampled\n    const c = fillerC()\n    ds.add(d); cs.add(c); entries.push({ d, c })\n  }\n  entries.sort((x, y) => (x.d < y.d ? -1 : x.d > y.d ? 1 : 0))\n  const n = Math.ceil(entries.length / GROUP_STAR_CHUNK)\n  const chunks: GroupStarChunk[] = []\n  for (let k = 0; k < n; k++) {\n    const body = { type: 'group-star@1' as const, salt: i.salt, seq: String(k + 1), last: k === n - 1, groups: entries.slice(k * GROUP_STAR_CHUNK, (k + 1) * GROUP_STAR_CHUNK) }\n    chunks.push({ body, proof: { mac: await macU(kg, jcs(body), S) } })\n  }\n  return { chunks }\n}\n\n// ── the recipient ───────────────────────────────────────────────────────\n\n/** Is this a schema-valid group-star@1 chunk (visibility-group-star.schema.json)? */\nexport const groupStarChunkOk = (chunk: unknown): boolean => schemaOk('visibility-group-star.schema.json', chunk)\n\n/** The §5.2b checks of a completed union: a positive multiple of 16\n *  entries, strictly ascending by d, every c of the same length. */\nexport function groupStarUnionOk (entries: readonly { d: string, c: string }[]): 'order' | 'size' | 'c length' | null {\n  if (!entries.every((e, k) => k === 0 || entries[k - 1]!.d < e.d)) return 'order'\n  if (entries.length === 0 || entries.length % GROUP_STAR_PAD !== 0) return 'size'\n  if (entries.some((e) => e.c.length !== entries[0]!.c.length)) return 'c length'\n  return null\n}\n\n/**\n * One delivery's chunks → its entry union (5.2a under the group star's\n * own salt): every chunk schema-valid and MAC-valid under k_g of the\n * arrival tuple, one salt, seq 1..n each once, exactly the n-th last,\n * the union strictly ascending by d — and the §5.2b reception rules on\n * the completed assembly: a positive multiple of 16 entries, every c of\n * the same length. A failing assembly rejects the delivery.\n */\nexport async function assembleGroupStarWith (i: { shared: () => Promise<Uint8Array>, from: string, own: string, chunks: any[], subtle?: SubtleCrypto }): Promise<{ ok: true, salt: string, entries: { d: string, c: string }[] } | { ok: false, reason: string }> {\n  const S = i.subtle ?? platformSubtle()\n  if (!Array.isArray(i.chunks) || !i.chunks.length) return { ok: false, reason: 'no chunk' }\n  for (const ch of i.chunks) if (!groupStarChunkOk(ch)) return { ok: false, reason: 'schema' }\n  const salt = i.chunks[0].body.salt\n  if (i.chunks.some((ch) => ch.body.salt !== salt)) return { ok: false, reason: 'salt' }\n  let kg: Uint8Array\n  try { kg = await groupStarKeyOf(await i.shared(), i.from, i.own, salt, S) } catch { return { ok: false, reason: 'ecdh' } }\n  for (const ch of i.chunks) if ((await macU(kg, jcs(ch.body), S)) !== ch.proof.mac) return { ok: false, reason: 'mac' }\n  const bySeq = new Map<string, any>()\n  for (const ch of i.chunks) { if (bySeq.has(ch.body.seq)) return { ok: false, reason: 'seq repeated' }; bySeq.set(ch.body.seq, ch.body) }\n  const lasts = i.chunks.filter((ch) => ch.body.last)\n  if (lasts.length !== 1) return { ok: false, reason: 'last' }\n  const n = Number(lasts[0].body.seq)\n  if (bySeq.size !== n) return { ok: false, reason: 'incomplete' }\n  const entries: { d: string, c: string }[] = []\n  for (let k = 1; k <= n; k++) { const b = bySeq.get(String(k)); if (!b) return { ok: false, reason: 'incomplete' }; entries.push(...b.groups) }\n  const bad = groupStarUnionOk(entries)\n  if (bad !== null) return { ok: false, reason: bad }\n  return { ok: true, salt, entries }\n}\n\n/** A group the recipient is a CURRENT member of, with its materialized state. */\nexport interface GroupMembership {\n  group: string\n  /** is this anchor a current member of the recipient's materialized state of the group? */\n  isMember: (anchor: string) => boolean\n  /** the canonical admission (or the genesis) an oid: names: its subject (genesis: body.members[0]) and its card's key-agreement key */\n  resolve: (oid: string) => { subject: string, keyAgreement: string } | null\n}\nexport interface GroupStarResult { group: string, hit: boolean, opened: boolean, accepted: boolean, member?: string, memberOp?: string, reason?: string }\n\n/**\n * Reception (§5.2b): for each group the recipient is a current member\n * of, compute d and test the union; on a hit derive k_e(G) and try to\n * open c — a c that does not open is a miss, not an error. An opened\n * pair is accepted only if, in order: schema · group = G · to = the\n * own pair anchor and salt = the assembly's · memberOp names a\n * canonical admission of member (or the genesis) and member is current\n * · the MAC verifies under that operation's card key, non-zero ECDH\n * (`agreeMember(cardKeyAgreement)` = X25519(own pairX, that key), null\n * where it cannot agree). An accepted pair is class V: merged\n * holder-locally, never republished.\n */\nexport async function openGroupStarWith (i: {\n  shared: Uint8Array, from: string, own: string, salt: string, entries: { d: string, c: string }[], memberships: GroupMembership[],\n  agreeMember: (keyAgreement: string) => Promise<Uint8Array | null>, subtle?: SubtleCrypto,\n}): Promise<GroupStarResult[]> {\n  const S = i.subtle ?? platformSubtle()\n  const kg = await groupStarKeyOf(i.shared, i.from, i.own, i.salt, S)\n  const byD = new Map(i.entries.map((e) => [e.d, e.c]))\n  const out: GroupStarResult[] = []\n  for (const m of i.memberships) {\n    const d = await macU(kg, m.group, S)\n    const c = byD.get(d)\n    if (c === undefined) { out.push({ group: m.group, hit: false, opened: false, accepted: false }); continue }\n    const pt = await open(await groupSealKeyOf(i.shared, i.from, i.own, i.salt, m.group, S), d, c, S)\n    if (pt === null) { out.push({ group: m.group, hit: true, opened: false, accepted: false }); continue }\n    const reject = (reason: string) => out.push({ group: m.group, hit: true, opened: true, accepted: false, reason })\n    let pair: any\n    try { pair = JSON.parse(pt) } catch { reject('schema'); continue }\n    if (!schemaOk('visibility-group-pair.schema.json', pair)) { reject('schema'); continue }\n    if (pair.group !== m.group) { reject('group'); continue }\n    if (pair.to !== i.own || pair.salt !== i.salt) { reject('to'); continue }\n    const op = m.resolve(pair.memberOp)\n    if (!op || op.subject !== pair.member || !m.isMember(pair.member)) { reject('member'); continue }\n    const sh = await i.agreeMember(op.keyAgreement)\n    if (!sh || isZero(sh)) { reject('mac'); continue }\n    const { proof, ...unproved } = pair\n    if ((await macU(await hkdf(sh, 'rltp/visibility/mac/group-pair', 32, S), jcs(unproved), S)) !== proof) { reject('mac'); continue }\n    out.push({ group: m.group, hit: true, opened: true, accepted: true, member: pair.member, memberOp: pair.memberOp })\n  }\n  return out\n}\n\n// ── over identity Contexts ─────────────────────────────────────────────\n// The same constructions with the private keys of identity Contexts (the\n// form vectors, generators and tests use); the holder goes through the\n// *With forms with secrets from its KeyProvider. Entropy (AEAD nonces,\n// filler) is the caller's `rand`, so the vectors replay.\n\nconst shared = async (own: Context, peerKeyAgreement: string): Promise<Uint8Array> => {\n  const x = xRawOfMk(peerKeyAgreement)\n  if (!x) throw new Error('peer key agreement is not a multikey')\n  const sh = await ecdh(own.x.priv, x)\n  if (sh.every((b) => b === 0)) throw new Error('all-zero shared secret (Trust §2.1)')   // rejected before key derivation\n  return sh\n}\n/** k_g of one direction: `sender` and `recipient` are the two pair anchors, salt in its wire string form. */\nexport async function groupStarKey (own: Context, peerKeyAgreement: string, sender: string, recipient: string, salt: string): Promise<Uint8Array> {\n  return groupStarKeyOf(await shared(own, peerKeyAgreement), sender, recipient, salt)\n}\n/** k_e(G): the sealing key of one group's entry; G is the canonical u form of the genesis digest. */\nexport async function groupSealKey (own: Context, peerKeyAgreement: string, sender: string, recipient: string, salt: string, group: string): Promise<Uint8Array> {\n  return groupSealKeyOf(await shared(own, peerKeyAgreement), sender, recipient, salt, group)\n}\n\n// ── group-pair@1 ────────────────────────────────────────────────────────\nexport interface GroupPairInput {\n  /** the genesis digest G, canonical u form */\n  group: string\n  /** the sender's member context in G (for a founder: its founding pair context) */\n  member: Context\n  /** oid: of the canonical admission of member, or of the genesis where the sender founded G */\n  memberOp: string\n  to: string\n  toKeyAgreement: string\n  salt: string\n}\n/** The opened body of a sealed entry; proof under memberX × pairX of the recipient. */\nexport async function buildGroupPair (i: GroupPairInput) {\n  return buildGroupPairWith({ group: i.group, member: i.member.anchor, memberOp: i.memberOp, to: i.to, salt: i.salt }, await shared(i.member, i.toKeyAgreement))\n}\n\n// ── the sender ──────────────────────────────────────────────────────────\nexport interface GroupStarGroup {\n  group: string\n  /** a real sealed pair (the recipient is trusted, or this group is switched on for it); otherwise c is filler */\n  sealed: boolean\n  member?: Context\n  memberOp?: string\n}\nexport interface GroupStarInput {\n  /** the sender's pair context of the relationship */\n  own: Context\n  to: string\n  toKeyAgreement: string\n  salt: string\n  /** every group the sender lists toward this recipient (its current groups not switched off) */\n  groups: GroupStarGroup[]\n  /** the entropy source (nonces, filler): the caller's, so vectors replay */\n  rand: (n: number) => Uint8Array\n}\n/** The chunks of one group-star delivery toward one recipient. */\nexport async function buildGroupStar (i: GroupStarInput) {\n  const rnd = i.rand\n  return buildGroupStarWith({\n    shared: await shared(i.own, i.toKeyAgreement), sender: i.own.anchor, to: i.to, salt: i.salt,\n    groups: i.groups.map((g) => ({\n      group: g.group, sealed: g.sealed, member: g.member?.anchor, memberOp: g.memberOp,\n      memberShared: g.member ? () => shared(g.member!, i.toKeyAgreement) : undefined,\n    })),\n    draw: (n) => rnd(n),\n  })\n}\n\n// ── the recipient ───────────────────────────────────────────────────────\n/**\n * One delivery's chunks → its entry union (5.2a under the group star's\n * own salt): every chunk schema-valid and MAC-valid under k_g of the\n * arrival tuple, one salt, seq 1..n each once, exactly the n-th last,\n * the union strictly ascending by d — and the §5.2b reception rules on\n * the completed assembly: a positive multiple of 16 entries, every c of\n * the same length. A failing assembly rejects the delivery.\n */\nexport async function assembleGroupStar (i: { own: Context, from: string, fromKeyAgreement: string, chunks: any[] }): Promise<{ ok: true, salt: string, entries: { d: string, c: string }[] } | { ok: false, reason: string }> {\n  return assembleGroupStarWith({ shared: () => shared(i.own, i.fromKeyAgreement), from: i.from, own: i.own.anchor, chunks: i.chunks })\n}\n\n/**\n * Reception (§5.2b): for each group the recipient is a current member\n * of, compute d and test the union; on a hit derive k_e(G) and try to\n * open c — a c that does not open is a miss, not an error. An opened\n * pair is accepted only if, in order: schema · group = G · to = the\n * own pair anchor and salt = the assembly's · memberOp names a\n * canonical admission of member (or the genesis) and member is current\n * · the MAC verifies under that operation's card key, non-zero ECDH.\n * An accepted pair is class V: merged holder-locally, never republished.\n */\nexport async function openGroupStar (i: { own: Context, from: string, fromKeyAgreement: string, salt: string, entries: { d: string, c: string }[], memberships: GroupMembership[] }): Promise<GroupStarResult[]> {\n  const res = await openGroupStarWith({\n    shared: await shared(i.own, i.fromKeyAgreement), from: i.from, own: i.own.anchor, salt: i.salt, entries: i.entries, memberships: i.memberships,\n    agreeMember: async (keyAgreement) => {\n      const memberX = xRawOfMk(keyAgreement)\n      return memberX ? ecdh(i.own.x.priv, memberX) : null\n    },\n  })\n  return res.map(({ memberOp: _, ...r }) => r)\n}\n"]}

package/dist/holder-api.d.ts

@@ -0,0 +1,137 @@
+import type { CommitListener, EnginePorts, HolderModule } from './engine.js';
+import type { DeliveryReport } from './ports.js';
+import type { ActResult, ReceiveResult, ResumeResult } from './results.js';
+import type { DeviceKeyResult } from './identity-state.js';
+import type { ProfileContent } from './profile.js';
+import type { Dec, Millis, OpaqueHolderState, PromptChoice, Setting, TrustClass } from './state.js';
+import type { Json } from './core.js';
+import type { ContactView, DeliveryStatusView, GroupView, ProfileView, PromptView } from './views.js';
+/** The committed state and its commitSeq; the state is opaque (note §4.5):
+ *  apps read the views, store tooling may persist it. */
+export interface HolderSnapshot {
+    commitSeq: Dec;
+    state: OpaqueHolderState;
+}
+export interface HolderOptions {
+    /** domain modules to register beside the built-ins, the prompts and the trust module */
+    modules?: readonly HolderModule[];
+    /** testing mode: check the invariants of invariants.ts on every commit,
+     *  before the store's CAS; a violation throws InfraError
+     *  'invariant-violated' (cause: the violations) and nothing commits */
+    invariants?: boolean;
+}
+/** The options of a human act (note §4.2): its time and the actId the app
+ *  mints when the human acts. */
+export interface HumanActOptions {
+    when: Millis;
+    actId: string;
+}
+export interface Holder {
+    /** any registered command by name, for modules and tests; apps use the typed acts */
+    act(command: string, input: unknown, when: Millis, opts?: {
+        actId?: string;
+    }): Promise<ActResult>;
+    /** the human's decision on an open prompt: a human act under the app's
+     *  actId (note §4.2); a missing actId is also refused at runtime */
+    decide(promptId: string, choice: PromptChoice, opts: HumanActOptions): Promise<ActResult>;
+    /** the Trust act: the anchor mapping class on toward the contact (2770); human */
+    trust(contactId: string, opts: HumanActOptions): Promise<ActResult>;
+    /** trust withdrawn: the anchor mapping class off (2840, 2850); human */
+    untrust(contactId: string, opts: HumanActOptions): Promise<ActResult>;
+    /** the pause of 5.4: star and blinded group star off, or back to default; human */
+    pauseTrust(contactId: string, paused: boolean, opts: HumanActOptions): Promise<ActResult>;
+    /** one class's setting toward the contact (2780, 2810); human */
+    setClass(contactId: string, cls: TrustClass, setting: Setting, opts: HumanActOptions): Promise<ActResult>;
+    /** the sealed group star's setting for one group toward the contact (2830); human */
+    setGroupClass(contactId: string, groupId: string, setting: Setting, opts: HumanActOptions): Promise<ActResult>;
+    /** the manual merge (6640): at most one of them holds an entry; human */
+    merge(contactIds: string[], opts: HumanActOptions): Promise<ActResult>;
+    /** departure (2260): the entry, the relationships of an alias, or one
+     *  relationship (relationshipId); human */
+    depart(contactId: string, opts: HumanActOptions & {
+        relationshipId?: string;
+    }): Promise<ActResult>;
+    /** 2240: entries re-commit from verified mappings recovered without them; not human */
+    recover(opts: {
+        when: Millis;
+    }): Promise<ActResult>;
+    /** a device name into the register before any key derived from it is presented (Identity §5.5); human */
+    addDevice(name: string, opts: HumanActOptions): Promise<ActResult>;
+    /** the name's revocation mark: never removed, the name never given again (Identity §5.5); human */
+    revokeDevice(name: string, opts: HumanActOptions): Promise<ActResult>;
+    /** the community anchor's rotation (Identity §5.4): step 1 (label,
+     *  closure, 6596 decided) when none runs, else step 2 of the running one
+     *  through the Log port; resume carries step 2 on its own (identity-state.ts) */
+    rotateAnchor(opts: HumanActOptions): Promise<ActResult>;
+    /** the own profile (Trust 6b): validated (6430, 6435, 6475), the next
+     *  revision of the one counter (6450), delivered on every relationship
+     *  the profile class is on for (6455); human */
+    setProfile(content: ProfileContent, opts: HumanActOptions): Promise<ActResult>;
+    /** a displayed card with a fresh own challenge under a fresh pair
+     *  anchor (Encounter 5.3, 4.4): the event encounter.shown carries the
+     *  card to display; `name` the card's display name (default: the own
+     *  profile's); human */
+    show(opts: HumanActOptions & {
+        name?: string;
+    }): Promise<ActResult>;
+    /** the scanner's step on a displayed card (Encounter 5.8): the record,
+     *  the fresh tuple, the bundle; encounter.scanned carries the sent card
+     *  for the optical leg; human */
+    scan(card: Json, opts: HumanActOptions & {
+        name?: string;
+    }): Promise<ActResult>;
+    /** the optical leg (Encounter 5.8, 5710): a sent card shown by the scanner; human */
+    captureSentCard(card: Json, opts: HumanActOptions): Promise<ActResult>;
+    /** the counter-step toward a contact met as displayer (Encounter 5.8 step 4); human */
+    counter(contactId: string, opts: HumanActOptions): Promise<ActResult>;
+    /** a group founded under a fresh pair anchor (Access 3.4.1); its rule
+     *  vouchThreshold (default "1") is group state; event group.founded; human */
+    foundGroup(group: {
+        name: string;
+        vouchThreshold?: string;
+        listed?: boolean;
+    }, opts: HumanActOptions): Promise<ActResult>;
+    /** invite a contact into a group: the prelude, then the invite on its
+     *  answer (Membership 1.2, 3.1); the contact decides on a group-invite
+     *  prompt; human */
+    invite(groupId: string, contactId: string, opts: HumanActOptions): Promise<ActResult>;
+    /** the mediator's act (Trust §8, this library's start of it): the
+     *  requester gets an offer naming the target by an opaque designator and
+     *  at most the `label` the human types here, with the mediator's
+     *  ack-delay declaration; the requester decides on an
+     *  `introduction` prompt, the target on another; human */
+    introduce(requesterId: string, targetId: string, opts: HumanActOptions & {
+        label?: string;
+    }): Promise<ActResult>;
+    /** a vouch@2 for a member anchor whose consent pair this holder holds
+     *  (Access 5.3, Membership 3.4); human */
+    vouchFor(groupId: string, member: string, opts: HumanActOptions & {
+        provenance?: 'met' | 'introduced';
+    }): Promise<ActResult>;
+    /** the device key of a held, unrevoked device name under an own anchor
+     *  context (Identity §5.5); reads, changes nothing */
+    deviceKey(name: string, contextLabel: string): Promise<DeviceKeyResult>;
+    tick(when: Millis): Promise<ActResult>;
+    resume(when: Millis): Promise<ResumeResult>;
+    report(report: DeliveryReport, when: Millis): Promise<ActResult>;
+    /** an arriving envelope, as the app's transport delivered it (non-human,
+     *  no actId; idempotent over the document digest) */
+    receive(env: unknown, when: Millis): Promise<ReceiveResult>;
+    /** after every commit: its commitSeq and events, the cue to re-read the views */
+    subscribe(listener: CommitListener): () => void;
+    snapshot(): Promise<HolderSnapshot>;
+    contacts(): Promise<ContactView[]>;
+    /** by entry id or alias */
+    contact(id: string): Promise<ContactView | undefined>;
+    groups(): Promise<GroupView[]>;
+    profile(): Promise<ProfileView>;
+    prompts(): Promise<PromptView[]>;
+    /** by document digest or threadId */
+    deliveryStatus(digestOrThreadId: string): Promise<DeliveryStatusView>;
+}
+/** A holder over its ports: `{store, keys, entropy?, log?, access?, retry?, crypto?}`.
+ *  The crypto handle (default globalThis.crypto) is resolved and probed
+ *  here and also feeds the default entropy; an app that injects one
+ *  passes the same handle to seedKeys(seed, crypto). */
+export declare function createHolder(ports: EnginePorts, opts?: HolderOptions): Promise<Holder>;
+//# sourceMappingURL=holder-api.d.ts.map

package/dist/holder-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"holder-api.d.ts","sourceRoot":"","sources":["../src/holder-api.ts"],"names":[],"mappings":"AA4DA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC5E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAEhD,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAQ1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAE1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAClD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,iBAAiB,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAMnG,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAErC,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAErG;yDACyD;AACzD,MAAM,WAAW,cAAc;IAAG,SAAS,EAAE,GAAG,CAAC;IAAC,KAAK,EAAE,iBAAiB,CAAA;CAAE;AAE5E,MAAM,WAAW,aAAa;IAC5B,wFAAwF;IACxF,OAAO,CAAC,EAAE,SAAS,YAAY,EAAE,CAAA;IACjC;;2EAEuE;IACvE,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAED;iCACiC;AACjC,MAAM,WAAW,eAAe;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AAEhE,MAAM,WAAW,MAAM;IACrB,qFAAqF;IACrF,GAAG,CAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAClG;wEACoE;IACpE,MAAM,CAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1F,kFAAkF;IAClF,KAAK,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACpE,wEAAwE;IACxE,OAAO,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtE,mFAAmF;IACnF,UAAU,CAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1F,iEAAiE;IACjE,QAAQ,CAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1G,qFAAqF;IACrF,aAAa,CAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC/G,yEAAyE;IACzE,KAAK,CAAE,UAAU,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACvE;+CAC2C;IAC3C,MAAM,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACnG,uFAAuF;IACvF,OAAO,CAAE,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACpD,yGAAyG;IACzG,SAAS,CAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACnE,mGAAmG;IACnG,YAAY,CAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtE;;qFAEiF;IACjF,YAAY,CAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACxD;;oDAEgD;IAChD,UAAU,CAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC/E;;;4BAGwB;IACxB,IAAI,CAAE,IAAI,EAAE,eAAe,GAAG;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACpE;;qCAEiC;IACjC,IAAI,CAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAChF,qFAAqF;IACrF,eAAe,CAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACvE,uFAAuF;IACvF,OAAO,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtE;kFAC8E;IAC9E,UAAU,CAAE,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1H;;wBAEoB;IACpB,MAAM,CAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtF;;;;8DAI0D;IAC1D,SAAS,CAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACjH;8CAC0C;IAC1C,QAAQ,CAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,UAAU,CAAC,EAAE,KAAK,GAAG,YAAY,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC7H;0DACsD;IACtD,SAAS,CAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IACxE,IAAI,CAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACvC,MAAM,CAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IAC5C,MAAM,CAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACjE;yDACqD;IACrD,OAAO,CAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IAC5D,iFAAiF;IACjF,SAAS,CAAE,QAAQ,EAAE,cAAc,GAAG,MAAM,IAAI,CAAA;IAChD,QAAQ,IAAK,OAAO,CAAC,cAAc,CAAC,CAAA;IACpC,QAAQ,IAAK,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;IACnC,2BAA2B;IAC3B,OAAO,CAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAAA;IACtD,MAAM,IAAK,OAAO,CAAC,SAAS,EAAE,CAAC,CAAA;IAC/B,OAAO,IAAK,OAAO,CAAC,WAAW,CAAC,CAAA;IAChC,OAAO,IAAK,OAAO,CAAC,UAAU,EAAE,CAAC,CAAA;IACjC,qCAAqC;IACrC,cAAc,CAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;CACvE;AAED;;;wDAGwD;AACxD,wBAAsB,YAAY,CAAE,KAAK,EAAE,WAAW,EAAE,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CAyDjG"}

package/dist/holder-api.js

@@ -0,0 +1,132 @@
+// holder-api — createHolder, the facade over the engine (lib Stage 2,
+// note §4.1, §4.5). Domain modules (identity, encounter, trust, continuity,
+// membership, profile) register with the engine as they graduate; today
+// the facade carries the engine's built-ins, the prompts module, the
+// encounter module (encounter/ceremony.ts: show, scan, the optical leg, the
+// counter-step, the bundle and the credential delivery), the membership
+// module (membership/holder.ts: founding, the prelude and invite, the
+// accept on a group-invite prompt, admission and welcome, evidence and
+// vouches; and the in-library Access over the holder's groups where no
+// Access port is given), the introduction module (introduction/holder.ts:
+// the three roles of Trust §8 and the mediator's start), the identity module (identity-state.ts: device names, the rotation), the trust
+// module (trust/mapping.ts: the Trust act, the class settings, the anchor
+// mapping's issuance and reception, the entry commit; trust/star.ts and
+// trust/group-star.ts: the star and the group star, reconciled on resume
+// and received with their assemblies; trust/entries.ts: merge, split and
+// departure; trust/continuity.ts: the probe, the continuity mapping and
+// the chaining; trust/profile.ts: profile@1) and the modules given.
+//
+// The human acts (note §4.2) are typed methods with an options object
+// `{when, actId}`; actId is required, minted by the app when the human
+// acts, and journaled with the act's result (a repeat with the same actId
+// replays it, another input under it is actid-conflict). They wrap `act`
+// with the trust module's command names, which stays for modules and
+// tests:
+//   trust(contactId, opts)                    trust.set {on: true}      human
+//   untrust(contactId, opts)                  trust.set {on: false}     human
+//   pauseTrust(contactId, paused, opts)       trust.pause               human
+//   setClass(contactId, cls, setting, opts)   trust.setClass            human
+//   setGroupClass(contactId, groupId, setting, opts)  trust.setGroupClass human
+//   merge(contactIds, opts)                   trust.merge               human
+//   depart(contactId, opts{relationshipId?})  trust.depart              human
+//   decide(promptId, choice, opts)            prompt.decide             human
+//   addDevice(name, opts)                     identity.addDevice        human
+//   revokeDevice(name, opts)                  identity.revokeDevice     human
+//   rotateAnchor(opts)                        identity.rotate           human
+//   setProfile({name, image?, text?}, opts)   profile.set               human
+//   show(opts{name?})                         encounter.show            human
+//   scan(card, opts{name?})                   encounter.scan            human
+//   captureSentCard(card, opts)               encounter.capture         human
+//   counter(contactId, opts)                  encounter.counter         human
+//   foundGroup({name, vouchThreshold?, listed?}, opts)  membership.found human
+//   invite(groupId, contactId, opts)          membership.invite         human
+//   vouchFor(groupId, member, opts{provenance?})  membership.vouch      human
+//   introduce(requesterId, targetId, opts)    introduction.introduce    human
+//   recover({when})                           trust.recover          not human
+// and the read deviceKey(name, contextLabel): the device key of a held,
+// unrevoked name under an own anchor context (identity-state.ts).
+// A missing actId is refused at runtime as actid-missing.
+//
+// Reading: the views (views.ts) over one snapshot each, carrying its
+// commitSeq. `subscribe` announces every commit with its commitSeq and
+// events; the app re-reads the views it shows, and a view read after the
+// announcement is at that commitSeq or later.
+//
+// Delivery: `receive(env, when)` runs Delivery §6.2 in the core and
+// dispatches through the task register (receive.ts); `report` takes the
+// adapter's reports (on an ack's digest it marks the ack sent); `resume`
+// re-emits, runs due duties and re-emits unsent acks; `tick` expires and
+// retains (engine.ts).
+import { createEngine } from './engine.js';
+import { DECIDE, collectDecisions, promptsModule } from './prompts.js';
+import { InfraError } from './results.js';
+import { commitViolations } from './invariants.js';
+import { toOpaque } from './state.js';
+import { trustModule } from './trust/mapping.js';
+import { IDENTITY_COMMANDS, deviceKeyOf, identityModule } from './identity-state.js';
+import { PROFILE_SET } from './trust/profile.js';
+import { TRUST_COMMANDS } from './trust/mapping.js';
+import { ENTRY_COMMANDS } from './trust/entries.js';
+import { ENCOUNTER_COMMANDS, encounterModule } from './encounter/ceremony.js';
+import { MEMBERSHIP_COMMANDS, localAccess, membershipModule } from './membership/holder.js';
+import { INTRODUCTION_COMMANDS, introductionModule } from './introduction/holder.js';
+import { contactView, contactsView, deliveryStatusView, groupsView, profileView, promptsView } from './views.js';
+/** A holder over its ports: `{store, keys, entropy?, log?, access?, retry?, crypto?}`.
+ *  The crypto handle (default globalThis.crypto) is resolved and probed
+ *  here and also feeds the default entropy; an app that injects one
+ *  passes the same handle to seedKeys(seed, crypto). */
+export async function createHolder(ports, opts = {}) {
+    const modules = [identityModule(), trustModule(), encounterModule(), membershipModule(), introductionModule(), ...(opts.modules ?? [])];
+    const check = opts.invariants === true
+        ? (before, after, op) => {
+            const v = commitViolations(before, after, op);
+            if (v.length)
+                throw new InfraError('invariant-violated', `invariants broken by ${op.kind}: ${v.map((x) => `[${x.invariant}] ${x.detail}`).join('; ')}`, { cause: v });
+        }
+        : undefined;
+    const engine = await createEngine(ports, [promptsModule(collectDecisions(modules)), ...modules], { ...(check ? { check } : {}), accessFrom: localAccess });
+    const read = async () => (await engine.snapshot()).state;
+    /** a human act: `when` and actId from the options, a missing actId refused by the engine */
+    const human = (command, input, o) => engine.act(command, input, o?.when, o?.actId === undefined ? {} : { actId: o.actId });
+    return Object.freeze({
+        act: (command, input, when, o) => engine.act(command, input, when, o),
+        decide: (promptId, choice, o) => human(DECIDE, { promptId, choice }, o),
+        trust: (contactId, o) => human(TRUST_COMMANDS.set, { contactId, on: true }, o),
+        untrust: (contactId, o) => human(TRUST_COMMANDS.set, { contactId, on: false }, o),
+        pauseTrust: (contactId, paused, o) => human(TRUST_COMMANDS.pause, { contactId, paused }, o),
+        setClass: (contactId, cls, setting, o) => human(TRUST_COMMANDS.setClass, { contactId, cls, setting }, o),
+        setGroupClass: (contactId, groupId, setting, o) => human(TRUST_COMMANDS.setGroupClass, { contactId, groupId, setting }, o),
+        merge: (contactIds, o) => human(ENTRY_COMMANDS.merge, { contactIds }, o),
+        depart: (contactId, o) => human(ENTRY_COMMANDS.depart, o?.relationshipId === undefined ? { contactId } : { contactId, relationshipId: o.relationshipId }, o),
+        recover: (o) => engine.act(TRUST_COMMANDS.recover, {}, o?.when),
+        rotateAnchor: (o) => human(IDENTITY_COMMANDS.rotate, {}, o),
+        setProfile: (content, o) => human(PROFILE_SET, content, o),
+        show: (o) => human(ENCOUNTER_COMMANDS.show, o?.name === undefined ? {} : { name: o.name }, o),
+        scan: (card, o) => human(ENCOUNTER_COMMANDS.scan, o?.name === undefined ? { card } : { card, name: o.name }, o),
+        captureSentCard: (card, o) => human(ENCOUNTER_COMMANDS.capture, { card }, o),
+        counter: (contactId, o) => human(ENCOUNTER_COMMANDS.counter, { contactId }, o),
+        foundGroup: (g, o) => human(MEMBERSHIP_COMMANDS.found, g, o),
+        invite: (groupId, contactId, o) => human(MEMBERSHIP_COMMANDS.invite, { groupId, contactId }, o),
+        vouchFor: (groupId, member, o) => human(MEMBERSHIP_COMMANDS.vouch, o?.provenance === undefined ? { groupId, member } : { groupId, member, provenance: o.provenance }, o),
+        introduce: (requesterId, targetId, o) => human(INTRODUCTION_COMMANDS.introduce, o?.label === undefined ? { requesterId, targetId } : { requesterId, targetId, label: o.label }, o),
+        addDevice: (name, o) => human(IDENTITY_COMMANDS.addDevice, { name }, o),
+        revokeDevice: (name, o) => human(IDENTITY_COMMANDS.revokeDevice, { name }, o),
+        deviceKey: async (name, contextLabel) => deviceKeyOf(await read(), ports.keys, name, contextLabel),
+        tick: (when) => engine.tick(when),
+        resume: (when) => engine.resume(when),
+        report: (report, when) => engine.report(report, when),
+        receive: (env, when) => engine.receive(env, when),
+        subscribe: (listener) => engine.subscribe(listener),
+        snapshot: async () => {
+            const s = await engine.snapshot();
+            return Object.freeze({ commitSeq: s.commitSeq, state: toOpaque(s.state) });
+        },
+        contacts: async () => contactsView(await read()),
+        contact: async (id) => contactView(await read(), id),
+        groups: async () => groupsView(await read()),
+        profile: async () => profileView(await read()),
+        prompts: async () => promptsView(await read()),
+        deliveryStatus: async (x) => deliveryStatusView(await read(), x),
+    });
+}
+//# sourceMappingURL=holder-api.js.map

package/dist/holder-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"holder-api.js","sourceRoot":"","sources":["../src/holder-api.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,4EAA4E;AAC5E,wEAAwE;AACxE,qEAAqE;AACrE,4EAA4E;AAC5E,wEAAwE;AACxE,sEAAsE;AACtE,uEAAuE;AACvE,uEAAuE;AACvE,0EAA0E;AAC1E,wIAAwI;AACxI,0EAA0E;AAC1E,wEAAwE;AACxE,yEAAyE;AACzE,yEAAyE;AACzE,wEAAwE;AACxE,oEAAoE;AACpE,EAAE;AACF,sEAAsE;AACtE,uEAAuE;AACvE,0EAA0E;AAC1E,yEAAyE;AACzE,qEAAqE;AACrE,SAAS;AACT,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,gFAAgF;AAChF,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,wEAAwE;AACxE,kEAAkE;AAClE,0DAA0D;AAC1D,EAAE;AACF,qEAAqE;AACrE,uEAAuE;AACvE,yEAAyE;AACzE,8CAA8C;AAC9C,EAAE;AACF,oEAAoE;AACpE,wEAAwE;AACxE,yEAAyE;AACzE,yEAAyE;AACzE,uBAAuB;AACvB,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAG1C,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAEtE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAGlD,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAEpF,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAGhD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AAC7E,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AAC3F,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAEpF,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,kBAAkB,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AA0GhH;;;wDAGwD;AACxD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAE,KAAkB,EAAE,OAAsB,EAAE;IAC9E,MAAM,OAAO,GAAG,CAAC,cAAc,EAAE,EAAE,WAAW,EAAE,EAAE,eAAe,EAAE,EAAE,gBAAgB,EAAE,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAA;IACvI,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,KAAK,IAAI;QACpC,CAAC,CAAC,CAAC,MAA6B,EAAE,KAA4B,EAAE,EAAY,EAAE,EAAE;YAC5E,MAAM,CAAC,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;YAC7C,IAAI,CAAC,CAAC,MAAM;gBAAE,MAAM,IAAI,UAAU,CAAC,oBAAoB,EAAE,wBAAwB,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;QACvK,CAAC;QACH,CAAC,CAAC,SAAS,CAAA;IACb,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC,aAAa,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAA;IAC1J,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAA;IACxD,4FAA4F;IAC5F,MAAM,KAAK,GAAG,CAAC,OAAe,EAAE,KAAc,EAAE,CAA8B,EAAE,EAAE,CAChF,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,IAAc,EAAE,CAAC,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAA;IACjG,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,EAAE,CAAC,OAAe,EAAE,KAAc,EAAE,IAAY,EAAE,CAAsB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnH,MAAM,EAAE,CAAC,QAAgB,EAAE,MAAoB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9G,KAAK,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACvG,OAAO,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1G,UAAU,EAAE,CAAC,SAAiB,EAAE,MAAe,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7H,QAAQ,EAAE,CAAC,SAAiB,EAAE,GAAe,EAAE,OAAgB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACtJ,aAAa,EAAE,CAAC,SAAiB,EAAE,OAAe,EAAE,OAAgB,EAAE,CAAkB,EAAE,EAAE,CAC1F,KAAK,CAAC,cAAc,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACzE,KAAK,EAAE,CAAC,UAAoB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QACnG,MAAM,EAAE,CAAC,SAAiB,EAAE,CAAgD,EAAE,EAAE,CAC9E,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,EAAE,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QACpI,OAAO,EAAE,CAAC,CAAmB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,IAAc,CAAC;QAC3F,YAAY,EAAE,CAAC,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5E,UAAU,EAAE,CAAC,OAAuB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3F,IAAI,EAAE,CAAC,CAAsC,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAClI,IAAI,EAAE,CAAC,IAAU,EAAE,CAAsC,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1J,eAAe,EAAE,CAAC,IAAU,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACnG,OAAO,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QACvG,UAAU,EAAE,CAAC,CAA8D,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1I,MAAM,EAAE,CAAC,OAAe,EAAE,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAChI,QAAQ,EAAE,CAAC,OAAe,EAAE,MAAc,EAAE,CAA0D,EAAE,EAAE,CACxG,KAAK,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACxI,SAAS,EAAE,CAAC,WAAmB,EAAE,QAAgB,EAAE,CAAuC,EAAE,EAAE,CAC5F,KAAK,CAAC,qBAAqB,CAAC,SAAS,EAAE,CAAC,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC3I,SAAS,EAAE,CAAC,IAAY,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAChG,YAAY,EAAE,CAAC,IAAY,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACtG,SAAS,EAAE,KAAK,EAAE,IAAY,EAAE,YAAoB,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC;QAClH,IAAI,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACzC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;QAC7C,MAAM,EAAE,CAAC,MAAsB,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC;QAC7E,OAAO,EAAE,CAAC,GAAY,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC;QAClE,SAAS,EAAE,CAAC,QAAwB,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;QACnE,QAAQ,EAAE,KAAK,IAA6B,EAAE;YAC5C,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAA;YACjC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAC5E,CAAC;QACD,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC,MAAM,IAAI,EAAE,CAAC;QAChD,OAAO,EAAE,KAAK,EAAE,EAAU,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,EAAE,EAAE,CAAC;QAC5D,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,CAAC;QAC5C,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,CAAC;QAC9C,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,CAAC;QAC9C,cAAc,EAAE,KAAK,EAAE,CAAS,EAAE,EAAE,CAAC,kBAAkB,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;KACzE,CAAC,CAAA;AACJ,CAAC","sourcesContent":["// holder-api — createHolder, the facade over the engine (lib Stage 2,\n// note §4.1, §4.5). Domain modules (identity, encounter, trust, continuity,\n// membership, profile) register with the engine as they graduate; today\n// the facade carries the engine's built-ins, the prompts module, the\n// encounter module (encounter/ceremony.ts: show, scan, the optical leg, the\n// counter-step, the bundle and the credential delivery), the membership\n// module (membership/holder.ts: founding, the prelude and invite, the\n// accept on a group-invite prompt, admission and welcome, evidence and\n// vouches; and the in-library Access over the holder's groups where no\n// Access port is given), the introduction module (introduction/holder.ts:\n// the three roles of Trust §8 and the mediator's start), the identity module (identity-state.ts: device names, the rotation), the trust\n// module (trust/mapping.ts: the Trust act, the class settings, the anchor\n// mapping's issuance and reception, the entry commit; trust/star.ts and\n// trust/group-star.ts: the star and the group star, reconciled on resume\n// and received with their assemblies; trust/entries.ts: merge, split and\n// departure; trust/continuity.ts: the probe, the continuity mapping and\n// the chaining; trust/profile.ts: profile@1) and the modules given.\n//\n// The human acts (note §4.2) are typed methods with an options object\n// `{when, actId}`; actId is required, minted by the app when the human\n// acts, and journaled with the act's result (a repeat with the same actId\n// replays it, another input under it is actid-conflict). They wrap `act`\n// with the trust module's command names, which stays for modules and\n// tests:\n//   trust(contactId, opts)                    trust.set {on: true}      human\n//   untrust(contactId, opts)                  trust.set {on: false}     human\n//   pauseTrust(contactId, paused, opts)       trust.pause               human\n//   setClass(contactId, cls, setting, opts)   trust.setClass            human\n//   setGroupClass(contactId, groupId, setting, opts)  trust.setGroupClass human\n//   merge(contactIds, opts)                   trust.merge               human\n//   depart(contactId, opts{relationshipId?})  trust.depart              human\n//   decide(promptId, choice, opts)            prompt.decide             human\n//   addDevice(name, opts)                     identity.addDevice        human\n//   revokeDevice(name, opts)                  identity.revokeDevice     human\n//   rotateAnchor(opts)                        identity.rotate           human\n//   setProfile({name, image?, text?}, opts)   profile.set               human\n//   show(opts{name?})                         encounter.show            human\n//   scan(card, opts{name?})                   encounter.scan            human\n//   captureSentCard(card, opts)               encounter.capture         human\n//   counter(contactId, opts)                  encounter.counter         human\n//   foundGroup({name, vouchThreshold?, listed?}, opts)  membership.found human\n//   invite(groupId, contactId, opts)          membership.invite         human\n//   vouchFor(groupId, member, opts{provenance?})  membership.vouch      human\n//   introduce(requesterId, targetId, opts)    introduction.introduce    human\n//   recover({when})                           trust.recover          not human\n// and the read deviceKey(name, contextLabel): the device key of a held,\n// unrevoked name under an own anchor context (identity-state.ts).\n// A missing actId is refused at runtime as actid-missing.\n//\n// Reading: the views (views.ts) over one snapshot each, carrying its\n// commitSeq. `subscribe` announces every commit with its commitSeq and\n// events; the app re-reads the views it shows, and a view read after the\n// announcement is at that commitSeq or later.\n//\n// Delivery: `receive(env, when)` runs Delivery §6.2 in the core and\n// dispatches through the task register (receive.ts); `report` takes the\n// adapter's reports (on an ack's digest it marks the ack sent); `resume`\n// re-emits, runs due duties and re-emits unsent acks; `tick` expires and\n// retains (engine.ts).\nimport { createEngine } from './engine.js'\nimport type { CommitListener, EnginePorts, HolderModule } from './engine.js'\nimport type { DeliveryReport } from './ports.js'\nimport { DECIDE, collectDecisions, promptsModule } from './prompts.js'\nimport type { ActResult, ReceiveResult, ResumeResult } from './results.js'\nimport { InfraError } from './results.js'\nimport { commitViolations } from './invariants.js'\nimport type { CommitOp } from './invariants.js'\nimport type { HolderState } from './state.js'\nimport { toOpaque } from './state.js'\nimport { trustModule } from './trust/mapping.js'\nimport { IDENTITY_COMMANDS, deviceKeyOf, identityModule } from './identity-state.js'\nimport type { DeviceKeyResult } from './identity-state.js'\nimport { PROFILE_SET } from './trust/profile.js'\nimport type { ProfileContent } from './profile.js'\nimport type { Dec, Millis, OpaqueHolderState, PromptChoice, Setting, TrustClass } from './state.js'\nimport { TRUST_COMMANDS } from './trust/mapping.js'\nimport { ENTRY_COMMANDS } from './trust/entries.js'\nimport { ENCOUNTER_COMMANDS, encounterModule } from './encounter/ceremony.js'\nimport { MEMBERSHIP_COMMANDS, localAccess, membershipModule } from './membership/holder.js'\nimport { INTRODUCTION_COMMANDS, introductionModule } from './introduction/holder.js'\nimport type { Json } from './core.js'\nimport { contactView, contactsView, deliveryStatusView, groupsView, profileView, promptsView } from './views.js'\nimport type { ContactView, DeliveryStatusView, GroupView, ProfileView, PromptView } from './views.js'\n\n/** The committed state and its commitSeq; the state is opaque (note §4.5):\n *  apps read the views, store tooling may persist it. */\nexport interface HolderSnapshot { commitSeq: Dec, state: OpaqueHolderState }\n\nexport interface HolderOptions {\n  /** domain modules to register beside the built-ins, the prompts and the trust module */\n  modules?: readonly HolderModule[]\n  /** testing mode: check the invariants of invariants.ts on every commit,\n   *  before the store's CAS; a violation throws InfraError\n   *  'invariant-violated' (cause: the violations) and nothing commits */\n  invariants?: boolean\n}\n\n/** The options of a human act (note §4.2): its time and the actId the app\n *  mints when the human acts. */\nexport interface HumanActOptions { when: Millis, actId: string }\n\nexport interface Holder {\n  /** any registered command by name, for modules and tests; apps use the typed acts */\n  act (command: string, input: unknown, when: Millis, opts?: { actId?: string }): Promise<ActResult>\n  /** the human's decision on an open prompt: a human act under the app's\n   *  actId (note §4.2); a missing actId is also refused at runtime */\n  decide (promptId: string, choice: PromptChoice, opts: HumanActOptions): Promise<ActResult>\n  /** the Trust act: the anchor mapping class on toward the contact (2770); human */\n  trust (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** trust withdrawn: the anchor mapping class off (2840, 2850); human */\n  untrust (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** the pause of 5.4: star and blinded group star off, or back to default; human */\n  pauseTrust (contactId: string, paused: boolean, opts: HumanActOptions): Promise<ActResult>\n  /** one class's setting toward the contact (2780, 2810); human */\n  setClass (contactId: string, cls: TrustClass, setting: Setting, opts: HumanActOptions): Promise<ActResult>\n  /** the sealed group star's setting for one group toward the contact (2830); human */\n  setGroupClass (contactId: string, groupId: string, setting: Setting, opts: HumanActOptions): Promise<ActResult>\n  /** the manual merge (6640): at most one of them holds an entry; human */\n  merge (contactIds: string[], opts: HumanActOptions): Promise<ActResult>\n  /** departure (2260): the entry, the relationships of an alias, or one\n   *  relationship (relationshipId); human */\n  depart (contactId: string, opts: HumanActOptions & { relationshipId?: string }): Promise<ActResult>\n  /** 2240: entries re-commit from verified mappings recovered without them; not human */\n  recover (opts: { when: Millis }): Promise<ActResult>\n  /** a device name into the register before any key derived from it is presented (Identity §5.5); human */\n  addDevice (name: string, opts: HumanActOptions): Promise<ActResult>\n  /** the name's revocation mark: never removed, the name never given again (Identity §5.5); human */\n  revokeDevice (name: string, opts: HumanActOptions): Promise<ActResult>\n  /** the community anchor's rotation (Identity §5.4): step 1 (label,\n   *  closure, 6596 decided) when none runs, else step 2 of the running one\n   *  through the Log port; resume carries step 2 on its own (identity-state.ts) */\n  rotateAnchor (opts: HumanActOptions): Promise<ActResult>\n  /** the own profile (Trust 6b): validated (6430, 6435, 6475), the next\n   *  revision of the one counter (6450), delivered on every relationship\n   *  the profile class is on for (6455); human */\n  setProfile (content: ProfileContent, opts: HumanActOptions): Promise<ActResult>\n  /** a displayed card with a fresh own challenge under a fresh pair\n   *  anchor (Encounter 5.3, 4.4): the event encounter.shown carries the\n   *  card to display; `name` the card's display name (default: the own\n   *  profile's); human */\n  show (opts: HumanActOptions & { name?: string }): Promise<ActResult>\n  /** the scanner's step on a displayed card (Encounter 5.8): the record,\n   *  the fresh tuple, the bundle; encounter.scanned carries the sent card\n   *  for the optical leg; human */\n  scan (card: Json, opts: HumanActOptions & { name?: string }): Promise<ActResult>\n  /** the optical leg (Encounter 5.8, 5710): a sent card shown by the scanner; human */\n  captureSentCard (card: Json, opts: HumanActOptions): Promise<ActResult>\n  /** the counter-step toward a contact met as displayer (Encounter 5.8 step 4); human */\n  counter (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** a group founded under a fresh pair anchor (Access 3.4.1); its rule\n   *  vouchThreshold (default \"1\") is group state; event group.founded; human */\n  foundGroup (group: { name: string, vouchThreshold?: string, listed?: boolean }, opts: HumanActOptions): Promise<ActResult>\n  /** invite a contact into a group: the prelude, then the invite on its\n   *  answer (Membership 1.2, 3.1); the contact decides on a group-invite\n   *  prompt; human */\n  invite (groupId: string, contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** the mediator's act (Trust §8, this library's start of it): the\n   *  requester gets an offer naming the target by an opaque designator and\n   *  at most the `label` the human types here, with the mediator's\n   *  ack-delay declaration; the requester decides on an\n   *  `introduction` prompt, the target on another; human */\n  introduce (requesterId: string, targetId: string, opts: HumanActOptions & { label?: string }): Promise<ActResult>\n  /** a vouch@2 for a member anchor whose consent pair this holder holds\n   *  (Access 5.3, Membership 3.4); human */\n  vouchFor (groupId: string, member: string, opts: HumanActOptions & { provenance?: 'met' | 'introduced' }): Promise<ActResult>\n  /** the device key of a held, unrevoked device name under an own anchor\n   *  context (Identity §5.5); reads, changes nothing */\n  deviceKey (name: string, contextLabel: string): Promise<DeviceKeyResult>\n  tick (when: Millis): Promise<ActResult>\n  resume (when: Millis): Promise<ResumeResult>\n  report (report: DeliveryReport, when: Millis): Promise<ActResult>\n  /** an arriving envelope, as the app's transport delivered it (non-human,\n   *  no actId; idempotent over the document digest) */\n  receive (env: unknown, when: Millis): Promise<ReceiveResult>\n  /** after every commit: its commitSeq and events, the cue to re-read the views */\n  subscribe (listener: CommitListener): () => void\n  snapshot (): Promise<HolderSnapshot>\n  contacts (): Promise<ContactView[]>\n  /** by entry id or alias */\n  contact (id: string): Promise<ContactView | undefined>\n  groups (): Promise<GroupView[]>\n  profile (): Promise<ProfileView>\n  prompts (): Promise<PromptView[]>\n  /** by document digest or threadId */\n  deliveryStatus (digestOrThreadId: string): Promise<DeliveryStatusView>\n}\n\n/** A holder over its ports: `{store, keys, entropy?, log?, access?, retry?, crypto?}`.\n *  The crypto handle (default globalThis.crypto) is resolved and probed\n *  here and also feeds the default entropy; an app that injects one\n *  passes the same handle to seedKeys(seed, crypto). */\nexport async function createHolder (ports: EnginePorts, opts: HolderOptions = {}): Promise<Holder> {\n  const modules = [identityModule(), trustModule(), encounterModule(), membershipModule(), introductionModule(), ...(opts.modules ?? [])]\n  const check = opts.invariants === true\n    ? (before: Readonly<HolderState>, after: Readonly<HolderState>, op: CommitOp) => {\n        const v = commitViolations(before, after, op)\n        if (v.length) throw new InfraError('invariant-violated', `invariants broken by ${op.kind}: ${v.map((x) => `[${x.invariant}] ${x.detail}`).join('; ')}`, { cause: v })\n      }\n    : undefined\n  const engine = await createEngine(ports, [promptsModule(collectDecisions(modules)), ...modules], { ...(check ? { check } : {}), accessFrom: localAccess })\n  const read = async () => (await engine.snapshot()).state\n  /** a human act: `when` and actId from the options, a missing actId refused by the engine */\n  const human = (command: string, input: unknown, o: HumanActOptions | undefined) =>\n    engine.act(command, input, o?.when as Millis, o?.actId === undefined ? {} : { actId: o.actId })\n  return Object.freeze({\n    act: (command: string, input: unknown, when: Millis, o?: { actId?: string }) => engine.act(command, input, when, o),\n    decide: (promptId: string, choice: PromptChoice, o: HumanActOptions) => human(DECIDE, { promptId, choice }, o),\n    trust: (contactId: string, o: HumanActOptions) => human(TRUST_COMMANDS.set, { contactId, on: true }, o),\n    untrust: (contactId: string, o: HumanActOptions) => human(TRUST_COMMANDS.set, { contactId, on: false }, o),\n    pauseTrust: (contactId: string, paused: boolean, o: HumanActOptions) => human(TRUST_COMMANDS.pause, { contactId, paused }, o),\n    setClass: (contactId: string, cls: TrustClass, setting: Setting, o: HumanActOptions) => human(TRUST_COMMANDS.setClass, { contactId, cls, setting }, o),\n    setGroupClass: (contactId: string, groupId: string, setting: Setting, o: HumanActOptions) =>\n      human(TRUST_COMMANDS.setGroupClass, { contactId, groupId, setting }, o),\n    merge: (contactIds: string[], o: HumanActOptions) => human(ENTRY_COMMANDS.merge, { contactIds }, o),\n    depart: (contactId: string, o: HumanActOptions & { relationshipId?: string }) =>\n      human(ENTRY_COMMANDS.depart, o?.relationshipId === undefined ? { contactId } : { contactId, relationshipId: o.relationshipId }, o),\n    recover: (o: { when: Millis }) => engine.act(TRUST_COMMANDS.recover, {}, o?.when as Millis),\n    rotateAnchor: (o: HumanActOptions) => human(IDENTITY_COMMANDS.rotate, {}, o),\n    setProfile: (content: ProfileContent, o: HumanActOptions) => human(PROFILE_SET, content, o),\n    show: (o: HumanActOptions & { name?: string }) => human(ENCOUNTER_COMMANDS.show, o?.name === undefined ? {} : { name: o.name }, o),\n    scan: (card: Json, o: HumanActOptions & { name?: string }) => human(ENCOUNTER_COMMANDS.scan, o?.name === undefined ? { card } : { card, name: o.name }, o),\n    captureSentCard: (card: Json, o: HumanActOptions) => human(ENCOUNTER_COMMANDS.capture, { card }, o),\n    counter: (contactId: string, o: HumanActOptions) => human(ENCOUNTER_COMMANDS.counter, { contactId }, o),\n    foundGroup: (g: { name: string, vouchThreshold?: string, listed?: boolean }, o: HumanActOptions) => human(MEMBERSHIP_COMMANDS.found, g, o),\n    invite: (groupId: string, contactId: string, o: HumanActOptions) => human(MEMBERSHIP_COMMANDS.invite, { groupId, contactId }, o),\n    vouchFor: (groupId: string, member: string, o: HumanActOptions & { provenance?: 'met' | 'introduced' }) =>\n      human(MEMBERSHIP_COMMANDS.vouch, o?.provenance === undefined ? { groupId, member } : { groupId, member, provenance: o.provenance }, o),\n    introduce: (requesterId: string, targetId: string, o: HumanActOptions & { label?: string }) =>\n      human(INTRODUCTION_COMMANDS.introduce, o?.label === undefined ? { requesterId, targetId } : { requesterId, targetId, label: o.label }, o),\n    addDevice: (name: string, o: HumanActOptions) => human(IDENTITY_COMMANDS.addDevice, { name }, o),\n    revokeDevice: (name: string, o: HumanActOptions) => human(IDENTITY_COMMANDS.revokeDevice, { name }, o),\n    deviceKey: async (name: string, contextLabel: string) => deviceKeyOf(await read(), ports.keys, name, contextLabel),\n    tick: (when: Millis) => engine.tick(when),\n    resume: (when: Millis) => engine.resume(when),\n    report: (report: DeliveryReport, when: Millis) => engine.report(report, when),\n    receive: (env: unknown, when: Millis) => engine.receive(env, when),\n    subscribe: (listener: CommitListener) => engine.subscribe(listener),\n    snapshot: async (): Promise<HolderSnapshot> => {\n      const s = await engine.snapshot()\n      return Object.freeze({ commitSeq: s.commitSeq, state: toOpaque(s.state) })\n    },\n    contacts: async () => contactsView(await read()),\n    contact: async (id: string) => contactView(await read(), id),\n    groups: async () => groupsView(await read()),\n    profile: async () => profileView(await read()),\n    prompts: async () => promptsView(await read()),\n    deliveryStatus: async (x: string) => deliveryStatusView(await read(), x),\n  })\n}\n"]}