@real-life/trust-protocol 0.3.2 → 0.4.0

package/dist/ports.d.ts

@@ -0,0 +1,237 @@
+import type { Json } from './core.js';
+import type { Envelope } from './delivery.js';
+import type { OpaqueHolderState } from './state.js';
+/** A deep, independent snapshot. `state` is raw stored JSON (or null for
+ *  an empty store) — the engine decodes it (decodeState), the store
+ *  never migrates. `version` is an opaque token, null for an empty store. */
+export interface StoreSnapshot {
+    state: unknown;
+    version: string | null;
+}
+export type CommitResult = {
+    ok: true;
+    version: string;
+} | {
+    ok: false;
+    reason: 'conflict';
+};
+/**
+ * Durable holder state with compare-and-swap. `commit(version, next)`
+ * succeeds only if the store is still at `version` (null: still empty),
+ * stores a copy atomically and returns the new version; otherwise it
+ * writes nothing. The version token serves CAS and nothing else: a store
+ * MUST NEVER reuse a token within its lifetime, reopening included, even
+ * when the content returns to an earlier value (no ABA). What the holder
+ * journals and announces is its own `commitSeq`, written inside `next`
+ * (state.ts), because the token is known only after the commit.
+ * Durability: visible to every later reader of the same store instance;
+ * persistent adapters additionally across process loss.
+ * Stage 2 assumes ONE writer per holder; the adapter guarantees it.
+ * A commit whose outcome is unknown surfaces as InfraError
+ * 'unknown-commit-outcome' and is resolved by re-reading (act journal).
+ */
+export interface Store {
+    read(): Promise<StoreSnapshot>;
+    commit(version: string | null, next: OpaqueHolderState): Promise<CommitResult>;
+}
+/** The engine's release of an rkid, read from `addresses` (Delivery §5):
+ *  the label it derives under, a tombstone, or unknown. The provider
+ *  never revives a retired key from a cache. */
+export type KeyRelease = (rkid: string) => {
+    status: 'live';
+    label: string;
+} | {
+    status: 'retired';
+} | {
+    status: 'unknown';
+};
+/** Outcome of a key agreement: the raw X25519 shared secret, or why not.
+ *  `invalid`: the epk is not 32 bytes or yields the all-zero secret (a
+ *  low-order point, Delivery §5) — the sender's fault, never the host's. */
+export type Agreement = {
+    status: 'available';
+    shared: Uint8Array;
+} | {
+    status: 'retired';
+} | {
+    status: 'unknown';
+} | {
+    status: 'invalid';
+};
+/** A carrier-relationship principal (Identity §7a.4) with its signing operation. */
+export interface CarrierKey {
+    principal: string;
+    sign(bytes: Uint8Array): Promise<Uint8Array>;
+}
+/**
+ * Key operations over the holder's secret. Reads no state; modules never
+ * see a seed. The library's default is seedKeys(seed); an app may bind a
+ * keystore, secure enclave or passkey instead.
+ */
+export interface KeyProvider {
+    /** the anchor and key-agreement Multikey of a register label */
+    anchorOf(label: string): Promise<{
+        anchor: string;
+        keyAgreement: string;
+    }>;
+    /** Ed25519 signature under the label's anchor key */
+    sign(label: string, bytes: Uint8Array): Promise<Uint8Array>;
+    /** X25519 with the private key behind `rkid`, only if `allowed` releases it */
+    agree(rkid: string, epk: Uint8Array, allowed: KeyRelease): Promise<Agreement>;
+    /** Identity §7a.4: nonce is the relationship's 32-byte carrier nonce */
+    carrierPrincipal(nonce: Uint8Array, carrier: string): Promise<CarrierKey>;
+}
+/** Head of the community anchor's log (Identity §5.4): its entry, the
+ *  generation, the head anchor and the pre-rotation binding commit(gen+1). */
+export type LogHead = {
+    genesis: string;
+    entryId: string;
+    gen: number;
+    next: string;
+    commit: string;
+} | {
+    genesis: string;
+    empty: true;
+};
+/** One entry of the lineage: the one that introduced a generation. */
+export interface LogEntryRef {
+    entryId: string;
+    next: string;
+    commit: string;
+}
+/** Idempotent over exactly (entry, overHead): the same closure again
+ *  answers `exists` (a restart's repeat); the same entry over another head
+ *  is `head-conflict` (read the head, and at(), again). */
+export type AppendResult = {
+    status: 'appended';
+    head: LogHead;
+} | {
+    status: 'exists';
+    head: LogHead;
+} | {
+    status: 'head-conflict';
+    head: LogHead;
+} | {
+    status: 'failure';
+    reason: string;
+};
+/** Without a Log, rotation is refused ('log-missing'); an encounter-only
+ *  holder needs no dummy. */
+export interface Log {
+    head(): Promise<LogHead>;
+    /** the entry of the lineage the head stands on that introduced
+     *  generation `gen` (≥ 2), or null where the log holds none: lets a
+     *  rotation whose append answer was lost recognize its entry after the
+     *  log moved on, and tell that from a fork */
+    at(gen: number): Promise<LogEntryRef | null>;
+    /** `overHead` is the entryId the entry extends, null over an empty log */
+    append(entry: Json, overHead: string | null): Promise<AppendResult>;
+}
+/** The holder's materialized view of one group (Access), as the group
+ *  star's reception needs it (Trust 5.2b). `isMember` and `resolve` of
+ *  one GroupAccess MUST describe one and the same materialized snapshot
+ *  of the group, stable for as long as the object is used. */
+export interface GroupAccess {
+    /** the group's genesis digest */
+    group: string;
+    /** is this anchor a current member? */
+    isMember(anchor: string): boolean;
+    /** the canonical admission (or genesis) an oid names: its subject and card key */
+    resolve(oid: string): {
+        subject: string;
+        keyAgreement: string;
+    } | null;
+}
+export interface Access {
+    /** every group the holder is a current member of */
+    memberships(): Promise<GroupAccess[]>;
+    membership(group: string): Promise<GroupAccess | null>;
+}
+/** Receiver refusal codes an adapter may convey (VTI mediator profile). */
+export type ReceiverRefusalCode = 'malformedRequest' | 'unsupportedType' | 'proofRequired' | 'proofInvalid' | 'wrongRecipient' | 'identityMismatch';
+/** Sender failure reasons, closed (Delivery §6.1). An adapter's or the
+ *  holder's own give-up is `expired-by-adapter-policy`. */
+export type DeliveryFailure = 'unroutable' | 'oversize' | 'expired-by-adapter-policy' | 'rejected-by-receiver';
+/** Why a submission still waits before the trias (Delivery §6.1). */
+export type PreTransportReason = 'offline' | 'transport-unreachable' | 'carrier-refused-retriable';
+/** A report about a submission the service has taken: the status trias. */
+export type TriasReport = {
+    digest: string;
+    status: 'accepted';
+} | {
+    digest: string;
+    status: 'delivered';
+    late: boolean;
+} | {
+    digest: string;
+    status: 'failed';
+    reason: Exclude<DeliveryFailure, 'rejected-by-receiver'>;
+} | {
+    digest: string;
+    status: 'failed';
+    reason: 'rejected-by-receiver';
+    code: ReceiverRefusalCode;
+};
+/** A report before the trias: an adapter condition, never a verdict and
+ *  never a fourth state; it ends when the submission enters the trias. */
+export interface PreTransportReport {
+    digest: string;
+    status: 'awaiting-transport';
+    reason: PreTransportReason;
+}
+/**
+ * One adapter report about one submitted document, keyed by its digest
+ * (Delivery §6.1). Idempotent per (digest, status); monotone except
+ * failed → delivered on a late ack. `accepted` never arises from a
+ * local commit. An adapter's `delivered` is its claim about transport:
+ * it never stands in for the receive core's verification of the
+ * delivery-ack, which alone completes a star salt (5660) or any effect.
+ */
+export type DeliveryReport = TriasReport | PreTransportReport;
+/** The adapter's mapping from its submission ids to document digests. */
+export interface SubmissionRef {
+    submissionId: string;
+    digest: string;
+}
+/** Whom a document goes to. `rkid` is the own key-agreement id of the
+ *  tuple it travels on (the app's sending relationship, Delivery §5a), or
+ *  of the own key it is sent from where no tuple carries it (a member
+ *  anchor, Membership 3.1); `keyAgreement` the counterpart key the
+ *  envelope is sealed to; `anchor`, set where no tuple carries the
+ *  document, the anchor it is addressed to (its ack's issuer, 4.2). */
+/** `via`: where `rkid` is no tuple's (a member key, Membership), the own
+ *  rkid of the relationship tuple the contact was named through — what a
+ *  split of the contact's entry follows (Trust 2080). */
+export interface Recipient {
+    contactId: string;
+    rkid: string;
+    keyAgreement: string;
+    anchor?: string;
+    via?: string;
+}
+/** A sealed document for the app to send. `digest` keys report();
+ *  attempt > 1 is a retry. Pure JSON. */
+export interface Outbound {
+    digest: string;
+    envelope: Envelope;
+    type: string;
+    threadId: string;
+    recipient: Recipient;
+    attempt: number;
+}
+export interface RetryPolicy {
+    /** delay before attempt n+1 after attempt n, in ms; finite and
+     *  non-negative, rounded up to whole ms */
+    backoff(attempt: number): number;
+    /** the holder's own give-up: this long after the first submission every
+     *  non-terminal item (submitted, accepted, or held by the adapter as
+     *  awaiting-transport) becomes failed(expired-by-adapter-policy).
+     *  Within Delivery's give-up range [P1D, P90D]. It also sets the
+     *  retention of effects and the act journal, max(P90D, horizonMs) —
+     *  Delivery §7 key-retention. There is no attempt-count give-up:
+     *  re-emissions are local and say nothing about transport. */
+    horizonMs: number;
+    /** CAS attempts of one act before InfraError('commit-conflict'); default 8 */
+    commitAttempts?: number;
+}
+//# sourceMappingURL=ports.d.ts.map

package/dist/ports.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ports.d.ts","sourceRoot":"","sources":["../src/ports.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACrC,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AAC7C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAInD;;6EAE6E;AAC7E,MAAM,WAAW,aAAa;IAAG,KAAK,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE;AAEzE,MAAM,MAAM,YAAY,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE,CAAA;AAE5F;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,KAAK;IACpB,IAAI,IAAK,OAAO,CAAC,aAAa,CAAC,CAAA;IAC/B,MAAM,CAAE,OAAO,EAAE,MAAM,GAAG,IAAI,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;CAChF;AAID;;gDAEgD;AAChD,MAAM,MAAM,UAAU,GAAG,CAAC,IAAI,EAAE,MAAM,KAClC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACjC;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GACrB;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,CAAA;AAEzB;;4EAE4E;AAC5E,MAAM,MAAM,SAAS,GACjB;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE,GAC3C;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GACrB;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,GACrB;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,CAAA;AAEzB,oFAAoF;AACpF,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,CAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;CAC9C;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,gEAAgE;IAChE,QAAQ,CAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC3E,qDAAqD;IACrD,IAAI,CAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;IAC5D,+EAA+E;IAC/E,KAAK,CAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC9E,wEAAwE;IACxE,gBAAgB,CAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;CAC3E;AAID;8EAC8E;AAC9E,MAAM,MAAM,OAAO,GACf;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC/E;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,IAAI,CAAA;CAAE,CAAA;AAEpC,sEAAsE;AACtE,MAAM,WAAW,WAAW;IAAG,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AAE9E;;2DAE2D;AAC3D,MAAM,MAAM,YAAY,GACpB;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GACrC;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GACnC;IAAE,MAAM,EAAE,eAAe,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GAC1C;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAEzC;6BAC6B;AAC7B,MAAM,WAAW,GAAG;IAClB,IAAI,IAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IACzB;;;kDAG8C;IAC9C,EAAE,CAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAA;IAC7C,0EAA0E;IAC1E,MAAM,CAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;CACrE;AAID;;;8DAG8D;AAC9D,MAAM,WAAW,WAAW;IAC1B,iCAAiC;IACjC,KAAK,EAAE,MAAM,CAAA;IACb,uCAAuC;IACvC,QAAQ,CAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAA;IAClC,kFAAkF;IAClF,OAAO,CAAE,GAAG,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;CACxE;AAED,MAAM,WAAW,MAAM;IACrB,oDAAoD;IACpD,WAAW,IAAK,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;IACtC,UAAU,CAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAA;CACxD;AAID,2EAA2E;AAC3E,MAAM,MAAM,mBAAmB,GAC3B,kBAAkB,GAAG,iBAAiB,GAAG,eAAe,GACxD,cAAc,GAAG,gBAAgB,GAAG,kBAAkB,CAAA;AAE1D;2DAC2D;AAC3D,MAAM,MAAM,eAAe,GAAG,YAAY,GAAG,UAAU,GAAG,2BAA2B,GAAG,sBAAsB,CAAA;AAE9G,qEAAqE;AACrE,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,uBAAuB,GAAG,2BAA2B,CAAA;AAElG,2EAA2E;AAC3E,MAAM,MAAM,WAAW,GACnB;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE,GACtC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,GACtD;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,OAAO,CAAC,eAAe,EAAE,sBAAsB,CAAC,CAAA;CAAE,GAC9F;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,sBAAsB,CAAC;IAAC,IAAI,EAAE,mBAAmB,CAAA;CAAE,CAAA;AAEnG;0EAC0E;AAC1E,MAAM,WAAW,kBAAkB;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,oBAAoB,CAAC;IAAC,MAAM,EAAE,kBAAkB,CAAA;CAAE;AAEhH;;;;;;;GAOG;AACH,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,kBAAkB,CAAA;AAE7D,yEAAyE;AACzE,MAAM,WAAW,aAAa;IAAG,YAAY,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AAIvE;;;;;uEAKuE;AACvE;;yDAEyD;AACzD,MAAM,WAAW,SAAS;IAAG,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE;AAEnH;yCACyC;AACzC,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,QAAQ,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,SAAS,CAAA;IACpB,OAAO,EAAE,MAAM,CAAA;CAChB;AAID,MAAM,WAAW,WAAW;IAC1B;+CAC2C;IAC3C,OAAO,CAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAAA;IACjC;;;;;;kEAM8D;IAC9D,SAAS,EAAE,MAAM,CAAA;IACjB,8EAA8E;IAC9E,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB"}

package/dist/ports.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ports.js.map

package/dist/ports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ports.js","sourceRoot":"","sources":["../src/ports.ts"],"names":[],"mappings":"","sourcesContent":["// ports — what the library needs from its host (lib Stage 2, note §3).\n//\n// The library defines the ports, the app implements them; each is cut\n// to what its one user needs. There is no send port: results carry\n// Outbound[], input arrives through receive, adapter reports through\n// report, retries through resume. Types only.\nimport type { Json } from './core.js'\nimport type { Envelope } from './delivery.js'\nimport type { OpaqueHolderState } from './state.js'\n\n// ── Store (user: the engine) ───────────────────────────────────────────\n\n/** A deep, independent snapshot. `state` is raw stored JSON (or null for\n *  an empty store) — the engine decodes it (decodeState), the store\n *  never migrates. `version` is an opaque token, null for an empty store. */\nexport interface StoreSnapshot { state: unknown, version: string | null }\n\nexport type CommitResult = { ok: true, version: string } | { ok: false, reason: 'conflict' }\n\n/**\n * Durable holder state with compare-and-swap. `commit(version, next)`\n * succeeds only if the store is still at `version` (null: still empty),\n * stores a copy atomically and returns the new version; otherwise it\n * writes nothing. The version token serves CAS and nothing else: a store\n * MUST NEVER reuse a token within its lifetime, reopening included, even\n * when the content returns to an earlier value (no ABA). What the holder\n * journals and announces is its own `commitSeq`, written inside `next`\n * (state.ts), because the token is known only after the commit.\n * Durability: visible to every later reader of the same store instance;\n * persistent adapters additionally across process loss.\n * Stage 2 assumes ONE writer per holder; the adapter guarantees it.\n * A commit whose outcome is unknown surfaces as InfraError\n * 'unknown-commit-outcome' and is resolved by re-reading (act journal).\n */\nexport interface Store {\n  read (): Promise<StoreSnapshot>\n  commit (version: string | null, next: OpaqueHolderState): Promise<CommitResult>\n}\n\n// ── KeyProvider (user: act preparation) ────────────────────────────────\n\n/** The engine's release of an rkid, read from `addresses` (Delivery §5):\n *  the label it derives under, a tombstone, or unknown. The provider\n *  never revives a retired key from a cache. */\nexport type KeyRelease = (rkid: string) =>\n  | { status: 'live', label: string }\n  | { status: 'retired' }\n  | { status: 'unknown' }\n\n/** Outcome of a key agreement: the raw X25519 shared secret, or why not.\n *  `invalid`: the epk is not 32 bytes or yields the all-zero secret (a\n *  low-order point, Delivery §5) — the sender's fault, never the host's. */\nexport type Agreement =\n  | { status: 'available', shared: Uint8Array }\n  | { status: 'retired' }\n  | { status: 'unknown' }\n  | { status: 'invalid' }\n\n/** A carrier-relationship principal (Identity §7a.4) with its signing operation. */\nexport interface CarrierKey {\n  principal: string\n  sign (bytes: Uint8Array): Promise<Uint8Array>\n}\n\n/**\n * Key operations over the holder's secret. Reads no state; modules never\n * see a seed. The library's default is seedKeys(seed); an app may bind a\n * keystore, secure enclave or passkey instead.\n */\nexport interface KeyProvider {\n  /** the anchor and key-agreement Multikey of a register label */\n  anchorOf (label: string): Promise<{ anchor: string, keyAgreement: string }>\n  /** Ed25519 signature under the label's anchor key */\n  sign (label: string, bytes: Uint8Array): Promise<Uint8Array>\n  /** X25519 with the private key behind `rkid`, only if `allowed` releases it */\n  agree (rkid: string, epk: Uint8Array, allowed: KeyRelease): Promise<Agreement>\n  /** Identity §7a.4: nonce is the relationship's 32-byte carrier nonce */\n  carrierPrincipal (nonce: Uint8Array, carrier: string): Promise<CarrierKey>\n}\n\n// ── Log (user: rotation; optional) ─────────────────────────────────────\n\n/** Head of the community anchor's log (Identity §5.4): its entry, the\n *  generation, the head anchor and the pre-rotation binding commit(gen+1). */\nexport type LogHead =\n  | { genesis: string, entryId: string, gen: number, next: string, commit: string }\n  | { genesis: string, empty: true }\n\n/** One entry of the lineage: the one that introduced a generation. */\nexport interface LogEntryRef { entryId: string, next: string, commit: string }\n\n/** Idempotent over exactly (entry, overHead): the same closure again\n *  answers `exists` (a restart's repeat); the same entry over another head\n *  is `head-conflict` (read the head, and at(), again). */\nexport type AppendResult =\n  | { status: 'appended', head: LogHead }\n  | { status: 'exists', head: LogHead }\n  | { status: 'head-conflict', head: LogHead }\n  | { status: 'failure', reason: string }\n\n/** Without a Log, rotation is refused ('log-missing'); an encounter-only\n *  holder needs no dummy. */\nexport interface Log {\n  head (): Promise<LogHead>\n  /** the entry of the lineage the head stands on that introduced\n   *  generation `gen` (≥ 2), or null where the log holds none: lets a\n   *  rotation whose append answer was lost recognize its entry after the\n   *  log moved on, and tell that from a fork */\n  at (gen: number): Promise<LogEntryRef | null>\n  /** `overHead` is the entryId the entry extends, null over an empty log */\n  append (entry: Json, overHead: string | null): Promise<AppendResult>\n}\n\n// ── Access (user: group star, membership) ──────────────────────────────\n\n/** The holder's materialized view of one group (Access), as the group\n *  star's reception needs it (Trust 5.2b). `isMember` and `resolve` of\n *  one GroupAccess MUST describe one and the same materialized snapshot\n *  of the group, stable for as long as the object is used. */\nexport interface GroupAccess {\n  /** the group's genesis digest */\n  group: string\n  /** is this anchor a current member? */\n  isMember (anchor: string): boolean\n  /** the canonical admission (or genesis) an oid names: its subject and card key */\n  resolve (oid: string): { subject: string, keyAgreement: string } | null\n}\n\nexport interface Access {\n  /** every group the holder is a current member of */\n  memberships (): Promise<GroupAccess[]>\n  membership (group: string): Promise<GroupAccess | null>\n}\n\n// ── Delivery reports (user: report) ────────────────────────────────────\n\n/** Receiver refusal codes an adapter may convey (VTI mediator profile). */\nexport type ReceiverRefusalCode =\n  | 'malformedRequest' | 'unsupportedType' | 'proofRequired'\n  | 'proofInvalid' | 'wrongRecipient' | 'identityMismatch'\n\n/** Sender failure reasons, closed (Delivery §6.1). An adapter's or the\n *  holder's own give-up is `expired-by-adapter-policy`. */\nexport type DeliveryFailure = 'unroutable' | 'oversize' | 'expired-by-adapter-policy' | 'rejected-by-receiver'\n\n/** Why a submission still waits before the trias (Delivery §6.1). */\nexport type PreTransportReason = 'offline' | 'transport-unreachable' | 'carrier-refused-retriable'\n\n/** A report about a submission the service has taken: the status trias. */\nexport type TriasReport =\n  | { digest: string, status: 'accepted' }\n  | { digest: string, status: 'delivered', late: boolean }\n  | { digest: string, status: 'failed', reason: Exclude<DeliveryFailure, 'rejected-by-receiver'> }\n  | { digest: string, status: 'failed', reason: 'rejected-by-receiver', code: ReceiverRefusalCode }\n\n/** A report before the trias: an adapter condition, never a verdict and\n *  never a fourth state; it ends when the submission enters the trias. */\nexport interface PreTransportReport { digest: string, status: 'awaiting-transport', reason: PreTransportReason }\n\n/**\n * One adapter report about one submitted document, keyed by its digest\n * (Delivery §6.1). Idempotent per (digest, status); monotone except\n * failed → delivered on a late ack. `accepted` never arises from a\n * local commit. An adapter's `delivered` is its claim about transport:\n * it never stands in for the receive core's verification of the\n * delivery-ack, which alone completes a star salt (5660) or any effect.\n */\nexport type DeliveryReport = TriasReport | PreTransportReport\n\n/** The adapter's mapping from its submission ids to document digests. */\nexport interface SubmissionRef { submissionId: string, digest: string }\n\n// ── Outbound ───────────────────────────────────────────────────────────\n\n/** Whom a document goes to. `rkid` is the own key-agreement id of the\n *  tuple it travels on (the app's sending relationship, Delivery §5a), or\n *  of the own key it is sent from where no tuple carries it (a member\n *  anchor, Membership 3.1); `keyAgreement` the counterpart key the\n *  envelope is sealed to; `anchor`, set where no tuple carries the\n *  document, the anchor it is addressed to (its ack's issuer, 4.2). */\n/** `via`: where `rkid` is no tuple's (a member key, Membership), the own\n *  rkid of the relationship tuple the contact was named through — what a\n *  split of the contact's entry follows (Trust 2080). */\nexport interface Recipient { contactId: string, rkid: string, keyAgreement: string, anchor?: string, via?: string }\n\n/** A sealed document for the app to send. `digest` keys report();\n *  attempt > 1 is a retry. Pure JSON. */\nexport interface Outbound {\n  digest: string\n  envelope: Envelope\n  type: string\n  threadId: string\n  recipient: Recipient\n  attempt: number\n}\n\n// ── Retry policy (parameter of createHolder) ───────────────────────────\n\nexport interface RetryPolicy {\n  /** delay before attempt n+1 after attempt n, in ms; finite and\n   *  non-negative, rounded up to whole ms */\n  backoff (attempt: number): number\n  /** the holder's own give-up: this long after the first submission every\n   *  non-terminal item (submitted, accepted, or held by the adapter as\n   *  awaiting-transport) becomes failed(expired-by-adapter-policy).\n   *  Within Delivery's give-up range [P1D, P90D]. It also sets the\n   *  retention of effects and the act journal, max(P90D, horizonMs) —\n   *  Delivery §7 key-retention. There is no attempt-count give-up:\n   *  re-emissions are local and say nothing about transport. */\n  horizonMs: number\n  /** CAS attempts of one act before InfraError('commit-conflict'); default 8 */\n  commitAttempts?: number\n}\n"]}

package/dist/profile.d.ts

@@ -0,0 +1,56 @@
+/** The registered task type that carries profile@1 (6495, Delivery §4.4). */
+export declare const PROFILE_TYPE = "https://real-life.org/trust-tasks/profile/0.1";
+/** The bounds of 6435. */
+export declare const PROFILE_LIMITS: Readonly<{
+    name: 64;
+    text: 256;
+    imageChars: 60000;
+    pixels: 1024;
+}>;
+/** The content of a profile as the human sets it (6b.1, without type and revision). */
+export interface ProfileContent {
+    name: string;
+    image?: string;
+    text?: string;
+}
+export interface ProfileBody extends ProfileContent {
+    type: 'profile@1';
+    revision: string;
+}
+export interface ProfileArtifact {
+    body: ProfileBody;
+    proof: {
+        mac: string;
+    };
+}
+/** 6430, 6435 (the schema): a closed body, a closed proof, the bounds. */
+export declare const profileSchemaOk: (a: unknown) => boolean;
+export interface Dimensions {
+    width: number;
+    height: number;
+}
+/** A plain picture's dimensions, or a VP8X container's canvas and frame. */
+export type ImageDimensions = Dimensions | {
+    canvas: Dimensions;
+    frame: Dimensions;
+};
+/**
+ * The dimensions a data URI's picture declares in its header, read before
+ * any decoding (6475): for WebP the frame, or a VP8X container's canvas
+ * and frame; for JPEG the first SOFn. null: not an admitted media type, not
+ * base64, not a single still picture of the declared type, or unreadable.
+ */
+export declare function imageDimensions(uri: string): ImageDimensions | null;
+/** 6435, 6475: every declared dimension within 1024 × 1024, the header readable. */
+export declare const imageWithinBounds: (d: ImageDimensions | null) => boolean;
+/** Why a profile body (or artifact) is refused: its rule, or null if it passes. */
+export declare function profileProblem(artifact: unknown): 'RLTP-TRU-6430' | 'RLTP-TRU-6475' | null;
+/** The info string of k_pr: sender first (the direction, 6440). */
+export declare const profileInfo: (senderPairAnchor: string, recipientPairAnchor: string) => string;
+/** k_pr from the X25519 shared secret of the two pair keys (6440). */
+export declare const profileKey: (shared: Uint8Array, senderPairAnchor: string, recipientPairAnchor: string, subtle?: SubtleCrypto) => Promise<Uint8Array>;
+/** profile@1 under k_pr: the body and its mac over JCS(body) (6430, 6440). */
+export declare function assembleProfile(body: ProfileBody, shared: Uint8Array, senderPairAnchor: string, recipientPairAnchor: string, subtle?: SubtleCrypto): Promise<ProfileArtifact>;
+/** Whether the artifact's mac verifies under k_pr of (sender → recipient). */
+export declare function profileMacOk(a: ProfileArtifact, shared: Uint8Array, senderPairAnchor: string, recipientPairAnchor: string, subtle?: SubtleCrypto): Promise<boolean>;
+//# sourceMappingURL=profile.d.ts.map

package/dist/profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.d.ts","sourceRoot":"","sources":["../src/profile.ts"],"names":[],"mappings":"AAgCA,6EAA6E;AAC7E,eAAO,MAAM,YAAY,kDAAkD,CAAA;AAE3E,0BAA0B;AAC1B,eAAO,MAAM,cAAc;;;;;EAA2E,CAAA;AAEtG,uFAAuF;AACvF,MAAM,WAAW,cAAc;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE;AAC/E,MAAM,WAAW,WAAY,SAAQ,cAAc;IAAG,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE;AAC3F,MAAM,WAAW,eAAe;IAAG,IAAI,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE;AAI9E,0EAA0E;AAC1E,eAAO,MAAM,eAAe,GAAI,GAAG,OAAO,KAAG,OAAuE,CAAA;AAIpH,MAAM,WAAW,UAAU;IAAG,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AAC7D,4EAA4E;AAC5E,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAE,CAAA;AA4FpF;;;;;GAKG;AACH,wBAAgB,eAAe,CAAE,GAAG,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAOpE;AAGD,oFAAoF;AACpF,eAAO,MAAM,iBAAiB,GAAI,GAAG,eAAe,GAAG,IAAI,KAAG,OACmB,CAAA;AAEjF,mFAAmF;AACnF,wBAAgB,cAAc,CAAE,QAAQ,EAAE,OAAO,GAAG,eAAe,GAAG,eAAe,GAAG,IAAI,CAK3F;AAID,mEAAmE;AACnE,eAAO,MAAM,WAAW,GAAI,kBAAkB,MAAM,EAAE,qBAAqB,MAAM,KAAG,MACV,CAAA;AAE1E,sEAAsE;AACtE,eAAO,MAAM,UAAU,GAAI,QAAQ,UAAU,EAAE,kBAAkB,MAAM,EAAE,qBAAqB,MAAM,EAAE,SAAQ,YAA+B,KAAG,OAAO,CAAC,UAAU,CACpF,CAAA;AAE9E,8EAA8E;AAC9E,wBAAsB,eAAe,CAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,GAAE,YAA+B,GAAG,OAAO,CAAC,eAAe,CAAC,CAGtM;AAED,8EAA8E;AAC9E,wBAAsB,YAAY,CAAE,CAAC,EAAE,eAAe,EAAE,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,GAAE,YAA+B,GAAG,OAAO,CAAC,OAAO,CAAC,CAG5L"}

package/dist/profile.js

@@ -0,0 +1,193 @@
+// profile — profile@1 as wire (Trust Layer 0.31 §6b): the directional key
+// k_pr, the MAC, the closed body with its bounds, and the picture's
+// dimensions read from its encoded header before any decoding. Pure: no
+// state, no transport; the holder's profile duty and task
+// (trust/profile.ts) build and verify through here, and the vector
+// vectors/profile.json reproduces through here byte for byte.
+//
+//   · body  { type: 'profile@1', revision, name, image?, text? }, proof
+//     { mac } (6430); name ≤ 64, text ≤ 256 characters, image a base64
+//     data URI of image/jpeg or image/webp of ≤ 60 000 characters (6435) —
+//     the schema trust-profile.schema.json
+//   · k_pr = HKDF-SHA-256(X25519(pairX_sender, pairX_recipient), salt
+//     empty, info "rltp/visibility/mac/profile/" || senderPairAnchor ||
+//     "/" || recipientPairAnchor, 32 bytes); mac = macU(k_pr, JCS(body))
+//     (6440, 2.1)
+//   · the picture (6435, 6475): one still picture of the declared media
+//     type whose every declared dimension is within 1024 × 1024, read from
+//     the header alone, the container's structure checked as far as the
+//     header goes — WebP: every chunk within the RIFF container, the whole
+//     container scanned, the VP8 or VP8L frame, and in the extended (VP8X)
+//     container both its canvas and its one frame; JPEG: the markers up to
+//     the scan, exactly one non-differential frame header, no hierarchical
+//     image. An animated profile is not allowed (6435 asks for one still
+//     picture): the VP8X animation flag, ANIM and ANMF are rejected.
+//     Unreadable is rejected. The library never decodes pixels;
+//     re-encoding without metadata (6445) is the app's duty before
+//     setProfile, as is ignoring metadata when it displays (6485)
+import { jcs, makeValidator } from './core.js';
+import { hkdf, platformSubtle } from './crypto.js';
+import { macU } from './anchor.js';
+import { SCHEMAS } from './schemas.js';
+/** The registered task type that carries profile@1 (6495, Delivery §4.4). */
+export const PROFILE_TYPE = 'https://real-life.org/trust-tasks/profile/0.1';
+/** The bounds of 6435. */
+export const PROFILE_LIMITS = Object.freeze({ name: 64, text: 256, imageChars: 60_000, pixels: 1024 });
+const SCHEMA = 'trust-profile.schema.json';
+const V = makeValidator(SCHEMAS);
+/** 6430, 6435 (the schema): a closed body, a closed proof, the bounds. */
+export const profileSchemaOk = (a) => V.validate(a, SCHEMAS[SCHEMA], SCHEMAS[SCHEMA]).length === 0;
+const base64 = (s) => {
+    if (!/^[A-Za-z0-9+/]*={0,2}$/.test(s) || s.length % 4 !== 0)
+        return null;
+    try {
+        const bin = atob(s);
+        const out = new Uint8Array(bin.length);
+        for (let i = 0; i < bin.length; i++)
+            out[i] = bin.charCodeAt(i);
+        return out;
+    }
+    catch {
+        return null;
+    }
+};
+const u16le = (b, o) => b[o] | (b[o + 1] << 8);
+const u16be = (b, o) => (b[o] << 8) | b[o + 1];
+const u24le = (b, o) => b[o] | (b[o + 1] << 8) | (b[o + 2] << 16);
+const u32le = (b, o) => (b[o] | (b[o + 1] << 8) | (b[o + 2] << 16) | (b[o + 3] << 24)) >>> 0;
+const ascii = (b, o, n) => String.fromCharCode(...b.subarray(o, o + n));
+/** The frame of a VP8L or VP8 chunk at offset o (its payload at o + 8,
+ *  ending at `end`): read only within the chunk. */
+function frameAt(b, o, end) {
+    const fourcc = ascii(b, o, 4), p = o + 8;
+    if (fourcc === 'VP8L' && p + 5 <= end && b[p] === 0x2f) {
+        const v = u32le(b, p + 1);
+        return { width: (v & 0x3fff) + 1, height: ((v >>> 14) & 0x3fff) + 1 };
+    }
+    if (fourcc === 'VP8 ' && p + 10 <= end && b[p + 3] === 0x9d && b[p + 4] === 0x01 && b[p + 5] === 0x2a) {
+        return { width: u16le(b, p + 6) & 0x3fff, height: u16le(b, p + 8) & 0x3fff };
+    }
+    return null;
+}
+/**
+ * WebP: the RIFF container exactly as long as it says, every chunk within
+ * it (its length bounded by the container, padded to even), the whole
+ * container scanned. The simple format is one VP8 or VP8L chunk and
+ * nothing else; the extended format starts with a VP8X chunk of 10 bytes
+ * (canvas) and holds exactly one VP8 or VP8L chunk (frame) — both
+ * declarations count. An animation (the VP8X flag, an ANIM or ANMF chunk
+ * anywhere) is no single still picture.
+ */
+function webp(b) {
+    if (b.length < 20 || ascii(b, 0, 4) !== 'RIFF' || ascii(b, 8, 4) !== 'WEBP' || u32le(b, 4) + 8 !== b.length)
+        return null;
+    const chunks = [];
+    for (let o = 12; o < b.length;) {
+        if (o + 8 > b.length)
+            return null;
+        const size = u32le(b, o + 4);
+        const end = o + 8 + size;
+        if (end > b.length)
+            return null;
+        chunks.push({ fourcc: ascii(b, o, 4), o, end });
+        o = end + (size & 1);
+        if (o > b.length)
+            return null;
+    }
+    if (!chunks.length || chunks.some((c) => c.fourcc === 'ANIM' || c.fourcc === 'ANMF'))
+        return null;
+    const [first, ...rest] = chunks;
+    if (first.fourcc === 'VP8 ' || first.fourcc === 'VP8L')
+        return rest.length ? null : frameAt(b, first.o, first.end);
+    if (first.fourcc !== 'VP8X' || first.end - first.o !== 18 || (b[first.o + 8] & 0x02))
+        return null;
+    const canvas = { width: u24le(b, first.o + 12) + 1, height: u24le(b, first.o + 15) + 1 };
+    const frames = rest.filter((c) => c.fourcc === 'VP8 ' || c.fourcc === 'VP8L');
+    if (frames.length !== 1 || rest.some((c) => c.fourcc === 'VP8X'))
+        return null;
+    const frame = frameAt(b, frames[0].o, frames[0].end);
+    return frame === null ? null : { canvas, frame };
+}
+/**
+ * JPEG: the markers from SOI up to SOS, every segment length at least 2
+ * and within the data. Exactly one frame header: SOF0–3 or SOF9–11; the
+ * differential SOF5–7 and SOF13–15, DHP (a hierarchical image), JPG, a
+ * second SOF, a SOF of the wrong length, restart, SOI or EOI markers
+ * before the scan, and a SOS without a frame are rejected.
+ */
+function jpeg(b) {
+    if (b.length < 4 || b[0] !== 0xff || b[1] !== 0xd8)
+        return null;
+    let frame = null;
+    for (let i = 2;;) {
+        if (i >= b.length || b[i] !== 0xff)
+            return null;
+        while (i < b.length && b[i] === 0xff)
+            i++; // fill bytes
+        if (i >= b.length)
+            return null;
+        const m = b[i++];
+        if (m === 0x00 || m === 0x01 || (m >= 0xd0 && m <= 0xd9))
+            return null;
+        if (i + 2 > b.length)
+            return null;
+        const len = u16be(b, i);
+        if (len < 2 || i + len > b.length)
+            return null;
+        if (m === 0xde)
+            return null; // DHP
+        if (m >= 0xc0 && m <= 0xcf && m !== 0xc4 && m !== 0xcc) {
+            if (!(m <= 0xc3 || (m >= 0xc9 && m <= 0xcb)) || frame !== null || len < 8 || len !== 8 + 3 * b[i + 7])
+                return null;
+            frame = { width: u16be(b, i + 5), height: u16be(b, i + 3) };
+        }
+        if (m === 0xda)
+            return frame; // SOS
+        i += len;
+    }
+}
+/**
+ * The dimensions a data URI's picture declares in its header, read before
+ * any decoding (6475): for WebP the frame, or a VP8X container's canvas
+ * and frame; for JPEG the first SOFn. null: not an admitted media type, not
+ * base64, not a single still picture of the declared type, or unreadable.
+ */
+export function imageDimensions(uri) {
+    if (typeof uri !== 'string')
+        return null;
+    const m = /^data:(image\/(?:jpeg|webp));base64,/.exec(uri);
+    if (!m)
+        return null;
+    const b = base64(uri.slice(m[0].length));
+    if (b === null)
+        return null;
+    return m[1] === 'image/webp' ? webp(b) : jpeg(b);
+}
+const within = (d) => d.width >= 1 && d.height >= 1 && d.width <= PROFILE_LIMITS.pixels && d.height <= PROFILE_LIMITS.pixels;
+/** 6435, 6475: every declared dimension within 1024 × 1024, the header readable. */
+export const imageWithinBounds = (d) => d !== null && ('canvas' in d ? within(d.canvas) && within(d.frame) : within(d));
+/** Why a profile body (or artifact) is refused: its rule, or null if it passes. */
+export function profileProblem(artifact) {
+    if (!profileSchemaOk(artifact))
+        return 'RLTP-TRU-6430';
+    const image = artifact.body.image;
+    if (image !== undefined && !imageWithinBounds(imageDimensions(image)))
+        return 'RLTP-TRU-6475';
+    return null;
+}
+// ── k_pr and the MAC (6440) ────────────────────────────────────────────
+/** The info string of k_pr: sender first (the direction, 6440). */
+export const profileInfo = (senderPairAnchor, recipientPairAnchor) => `rltp/visibility/mac/profile/${senderPairAnchor}/${recipientPairAnchor}`;
+/** k_pr from the X25519 shared secret of the two pair keys (6440). */
+export const profileKey = (shared, senderPairAnchor, recipientPairAnchor, subtle = platformSubtle()) => hkdf(shared, profileInfo(senderPairAnchor, recipientPairAnchor), 32, subtle);
+/** profile@1 under k_pr: the body and its mac over JCS(body) (6430, 6440). */
+export async function assembleProfile(body, shared, senderPairAnchor, recipientPairAnchor, subtle = platformSubtle()) {
+    const k = await profileKey(shared, senderPairAnchor, recipientPairAnchor, subtle);
+    return { body, proof: { mac: await macU(k, jcs(body), subtle) } };
+}
+/** Whether the artifact's mac verifies under k_pr of (sender → recipient). */
+export async function profileMacOk(a, shared, senderPairAnchor, recipientPairAnchor, subtle = platformSubtle()) {
+    const k = await profileKey(shared, senderPairAnchor, recipientPairAnchor, subtle);
+    return (await macU(k, jcs(a.body), subtle)) === a.proof.mac;
+}
+//# sourceMappingURL=profile.js.map

package/dist/profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.js","sourceRoot":"","sources":["../src/profile.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,oEAAoE;AACpE,wEAAwE;AACxE,0DAA0D;AAC1D,mEAAmE;AACnE,8DAA8D;AAC9D,EAAE;AACF,wEAAwE;AACxE,uEAAuE;AACvE,2EAA2E;AAC3E,2CAA2C;AAC3C,sEAAsE;AACtE,wEAAwE;AACxE,yEAAyE;AACzE,kBAAkB;AAClB,wEAAwE;AACxE,2EAA2E;AAC3E,wEAAwE;AACxE,2EAA2E;AAC3E,2EAA2E;AAC3E,2EAA2E;AAC3E,2EAA2E;AAC3E,yEAAyE;AACzE,qEAAqE;AACrE,gEAAgE;AAChE,mEAAmE;AACnE,kEAAkE;AAClE,OAAO,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AAC9C,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAA;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAA;AAEtC,6EAA6E;AAC7E,MAAM,CAAC,MAAM,YAAY,GAAG,+CAA+C,CAAA;AAE3E,0BAA0B;AAC1B,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAA;AAOtG,MAAM,MAAM,GAAG,2BAA2B,CAAA;AAC1C,MAAM,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,CAAA;AAChC,0EAA0E;AAC1E,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAU,EAAW,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAA;AAQpH,MAAM,MAAM,GAAG,CAAC,CAAS,EAAqB,EAAE;IAC9C,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACxE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;QACnB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;QAC/D,OAAO,GAAG,CAAA;IACZ,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAA;IAAC,CAAC;AACzB,CAAC,CAAA;AACD,MAAM,KAAK,GAAG,CAAC,CAAa,EAAE,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,IAAI,CAAC,CAAC,CAAA;AAC5E,MAAM,KAAK,GAAG,CAAC,CAAa,EAAE,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,CAAA;AAC5E,MAAM,KAAK,GAAG,CAAC,CAAa,EAAE,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,IAAI,EAAE,CAAC,CAAA;AAChG,MAAM,KAAK,GAAG,CAAC,CAAa,EAAE,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAA;AAC5H,MAAM,KAAK,GAAG,CAAC,CAAa,EAAE,CAAS,EAAE,CAAS,EAAU,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;AAE3G;oDACoD;AACpD,SAAS,OAAO,CAAE,CAAa,EAAE,CAAS,EAAE,GAAW;IACrD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACxC,IAAI,MAAM,KAAK,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACvD,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;QACzB,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAA;IACvE,CAAC;IACD,IAAI,MAAM,KAAK,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QACtG,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,EAAE,CAAA;IAC9E,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,IAAI,CAAE,CAAa;IAC1B,IAAI,CAAC,CAAC,MAAM,GAAG,EAAE,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,MAAM,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IACxH,MAAM,MAAM,GAAsD,EAAE,CAAA;IACpE,KAAK,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC;QAC/B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QACjC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;QAC5B,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,CAAA;QACxB,IAAI,GAAG,GAAG,CAAC,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QAC/B,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAA;QAC/C,CAAC,GAAG,GAAG,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC,CAAA;QACpB,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;IAC/B,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC;QAAE,OAAO,IAAI,CAAA;IACjG,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,GAAG,MAAM,CAAA;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAA;IAClH,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,GAAG,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAClG,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,EAAE,CAAA;IACxF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAA;IAC7E,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC;QAAE,OAAO,IAAI,CAAA;IAC7E,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;IACpD,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAA;AAClD,CAAC;AAED;;;;;;GAMG;AACH,SAAS,IAAI,CAAE,CAAa;IAC1B,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC/D,IAAI,KAAK,GAAsB,IAAI,CAAA;IACnC,KAAK,IAAI,CAAC,GAAG,CAAC,IAAK,CAAC;QAClB,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAA;QAC/C,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI;YAAE,CAAC,EAAE,CAAA,CAAqB,aAAa;QAC3E,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QAC9B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAE,CAAA;QACjB,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;QACrE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QACjC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACvB,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QAC9C,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAA,CAAqC,MAAM;QACtE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACvD,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,GAAG,GAAG,CAAC,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAE;gBAAE,OAAO,IAAI,CAAA;YACnH,KAAK,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAA;QAC7D,CAAC;QACD,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,KAAK,CAAA,CAAoC,MAAM;QACtE,CAAC,IAAI,GAAG,CAAA;IACV,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAE,GAAW;IAC1C,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAA;IACxC,MAAM,CAAC,GAAG,sCAAsC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC1D,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAA;IACnB,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;IACxC,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC3B,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AAClD,CAAC;AAED,MAAM,MAAM,GAAG,CAAC,CAAa,EAAW,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,IAAI,cAAc,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,cAAc,CAAC,MAAM,CAAA;AACjJ,oFAAoF;AACpF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAyB,EAAW,EAAE,CACtE,CAAC,KAAK,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;AAEjF,mFAAmF;AACnF,MAAM,UAAU,cAAc,CAAE,QAAiB;IAC/C,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC;QAAE,OAAO,eAAe,CAAA;IACtD,MAAM,KAAK,GAAI,QAA4B,CAAC,IAAI,CAAC,KAAK,CAAA;IACtD,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,eAAe,CAAA;IAC7F,OAAO,IAAI,CAAA;AACb,CAAC;AAED,0EAA0E;AAE1E,mEAAmE;AACnE,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,gBAAwB,EAAE,mBAA2B,EAAU,EAAE,CAC3F,+BAA+B,gBAAgB,IAAI,mBAAmB,EAAE,CAAA;AAE1E,sEAAsE;AACtE,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,MAAkB,EAAE,gBAAwB,EAAE,mBAA2B,EAAE,SAAuB,cAAc,EAAE,EAAuB,EAAE,CACpK,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAA;AAE9E,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,eAAe,CAAE,IAAiB,EAAE,MAAkB,EAAE,gBAAwB,EAAE,mBAA2B,EAAE,SAAuB,cAAc,EAAE;IAC1K,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,CAAC,CAAA;IACjF,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,MAAM,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CAAA;AACnE,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,YAAY,CAAE,CAAkB,EAAE,MAAkB,EAAE,gBAAwB,EAAE,mBAA2B,EAAE,SAAuB,cAAc,EAAE;IACxK,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,MAAM,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,CAAC,CAAA;IACjF,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,CAAA;AAC7D,CAAC","sourcesContent":["// profile — profile@1 as wire (Trust Layer 0.31 §6b): the directional key\n// k_pr, the MAC, the closed body with its bounds, and the picture's\n// dimensions read from its encoded header before any decoding. Pure: no\n// state, no transport; the holder's profile duty and task\n// (trust/profile.ts) build and verify through here, and the vector\n// vectors/profile.json reproduces through here byte for byte.\n//\n//   · body  { type: 'profile@1', revision, name, image?, text? }, proof\n//     { mac } (6430); name ≤ 64, text ≤ 256 characters, image a base64\n//     data URI of image/jpeg or image/webp of ≤ 60 000 characters (6435) —\n//     the schema trust-profile.schema.json\n//   · k_pr = HKDF-SHA-256(X25519(pairX_sender, pairX_recipient), salt\n//     empty, info \"rltp/visibility/mac/profile/\" || senderPairAnchor ||\n//     \"/\" || recipientPairAnchor, 32 bytes); mac = macU(k_pr, JCS(body))\n//     (6440, 2.1)\n//   · the picture (6435, 6475): one still picture of the declared media\n//     type whose every declared dimension is within 1024 × 1024, read from\n//     the header alone, the container's structure checked as far as the\n//     header goes — WebP: every chunk within the RIFF container, the whole\n//     container scanned, the VP8 or VP8L frame, and in the extended (VP8X)\n//     container both its canvas and its one frame; JPEG: the markers up to\n//     the scan, exactly one non-differential frame header, no hierarchical\n//     image. An animated profile is not allowed (6435 asks for one still\n//     picture): the VP8X animation flag, ANIM and ANMF are rejected.\n//     Unreadable is rejected. The library never decodes pixels;\n//     re-encoding without metadata (6445) is the app's duty before\n//     setProfile, as is ignoring metadata when it displays (6485)\nimport { jcs, makeValidator } from './core.js'\nimport { hkdf, platformSubtle } from './crypto.js'\nimport { macU } from './anchor.js'\nimport { SCHEMAS } from './schemas.js'\n\n/** The registered task type that carries profile@1 (6495, Delivery §4.4). */\nexport const PROFILE_TYPE = 'https://real-life.org/trust-tasks/profile/0.1'\n\n/** The bounds of 6435. */\nexport const PROFILE_LIMITS = Object.freeze({ name: 64, text: 256, imageChars: 60_000, pixels: 1024 })\n\n/** The content of a profile as the human sets it (6b.1, without type and revision). */\nexport interface ProfileContent { name: string, image?: string, text?: string }\nexport interface ProfileBody extends ProfileContent { type: 'profile@1', revision: string }\nexport interface ProfileArtifact { body: ProfileBody, proof: { mac: string } }\n\nconst SCHEMA = 'trust-profile.schema.json'\nconst V = makeValidator(SCHEMAS)\n/** 6430, 6435 (the schema): a closed body, a closed proof, the bounds. */\nexport const profileSchemaOk = (a: unknown): boolean => V.validate(a, SCHEMAS[SCHEMA], SCHEMAS[SCHEMA]).length === 0\n\n// ── the picture's header (6475) ────────────────────────────────────────\n\nexport interface Dimensions { width: number, height: number }\n/** A plain picture's dimensions, or a VP8X container's canvas and frame. */\nexport type ImageDimensions = Dimensions | { canvas: Dimensions, frame: Dimensions }\n\nconst base64 = (s: string): Uint8Array | null => {\n  if (!/^[A-Za-z0-9+/]*={0,2}$/.test(s) || s.length % 4 !== 0) return null\n  try {\n    const bin = atob(s)\n    const out = new Uint8Array(bin.length)\n    for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i)\n    return out\n  } catch { return null }\n}\nconst u16le = (b: Uint8Array, o: number): number => b[o]! | (b[o + 1]! << 8)\nconst u16be = (b: Uint8Array, o: number): number => (b[o]! << 8) | b[o + 1]!\nconst u24le = (b: Uint8Array, o: number): number => b[o]! | (b[o + 1]! << 8) | (b[o + 2]! << 16)\nconst u32le = (b: Uint8Array, o: number): number => (b[o]! | (b[o + 1]! << 8) | (b[o + 2]! << 16) | (b[o + 3]! << 24)) >>> 0\nconst ascii = (b: Uint8Array, o: number, n: number): string => String.fromCharCode(...b.subarray(o, o + n))\n\n/** The frame of a VP8L or VP8 chunk at offset o (its payload at o + 8,\n *  ending at `end`): read only within the chunk. */\nfunction frameAt (b: Uint8Array, o: number, end: number): Dimensions | null {\n  const fourcc = ascii(b, o, 4), p = o + 8\n  if (fourcc === 'VP8L' && p + 5 <= end && b[p] === 0x2f) {\n    const v = u32le(b, p + 1)\n    return { width: (v & 0x3fff) + 1, height: ((v >>> 14) & 0x3fff) + 1 }\n  }\n  if (fourcc === 'VP8 ' && p + 10 <= end && b[p + 3] === 0x9d && b[p + 4] === 0x01 && b[p + 5] === 0x2a) {\n    return { width: u16le(b, p + 6) & 0x3fff, height: u16le(b, p + 8) & 0x3fff }\n  }\n  return null\n}\n\n/**\n * WebP: the RIFF container exactly as long as it says, every chunk within\n * it (its length bounded by the container, padded to even), the whole\n * container scanned. The simple format is one VP8 or VP8L chunk and\n * nothing else; the extended format starts with a VP8X chunk of 10 bytes\n * (canvas) and holds exactly one VP8 or VP8L chunk (frame) — both\n * declarations count. An animation (the VP8X flag, an ANIM or ANMF chunk\n * anywhere) is no single still picture.\n */\nfunction webp (b: Uint8Array): ImageDimensions | null {\n  if (b.length < 20 || ascii(b, 0, 4) !== 'RIFF' || ascii(b, 8, 4) !== 'WEBP' || u32le(b, 4) + 8 !== b.length) return null\n  const chunks: Array<{ fourcc: string, o: number, end: number }> = []\n  for (let o = 12; o < b.length;) {\n    if (o + 8 > b.length) return null\n    const size = u32le(b, o + 4)\n    const end = o + 8 + size\n    if (end > b.length) return null\n    chunks.push({ fourcc: ascii(b, o, 4), o, end })\n    o = end + (size & 1)\n    if (o > b.length) return null\n  }\n  if (!chunks.length || chunks.some((c) => c.fourcc === 'ANIM' || c.fourcc === 'ANMF')) return null\n  const [first, ...rest] = chunks\n  if (first.fourcc === 'VP8 ' || first.fourcc === 'VP8L') return rest.length ? null : frameAt(b, first.o, first.end)\n  if (first.fourcc !== 'VP8X' || first.end - first.o !== 18 || (b[first.o + 8]! & 0x02)) return null\n  const canvas = { width: u24le(b, first.o + 12) + 1, height: u24le(b, first.o + 15) + 1 }\n  const frames = rest.filter((c) => c.fourcc === 'VP8 ' || c.fourcc === 'VP8L')\n  if (frames.length !== 1 || rest.some((c) => c.fourcc === 'VP8X')) return null\n  const frame = frameAt(b, frames[0].o, frames[0].end)\n  return frame === null ? null : { canvas, frame }\n}\n\n/**\n * JPEG: the markers from SOI up to SOS, every segment length at least 2\n * and within the data. Exactly one frame header: SOF0–3 or SOF9–11; the\n * differential SOF5–7 and SOF13–15, DHP (a hierarchical image), JPG, a\n * second SOF, a SOF of the wrong length, restart, SOI or EOI markers\n * before the scan, and a SOS without a frame are rejected.\n */\nfunction jpeg (b: Uint8Array): Dimensions | null {\n  if (b.length < 4 || b[0] !== 0xff || b[1] !== 0xd8) return null\n  let frame: Dimensions | null = null\n  for (let i = 2; ;) {\n    if (i >= b.length || b[i] !== 0xff) return null\n    while (i < b.length && b[i] === 0xff) i++                     // fill bytes\n    if (i >= b.length) return null\n    const m = b[i++]!\n    if (m === 0x00 || m === 0x01 || (m >= 0xd0 && m <= 0xd9)) return null\n    if (i + 2 > b.length) return null\n    const len = u16be(b, i)\n    if (len < 2 || i + len > b.length) return null\n    if (m === 0xde) return null                                     // DHP\n    if (m >= 0xc0 && m <= 0xcf && m !== 0xc4 && m !== 0xcc) {\n      if (!(m <= 0xc3 || (m >= 0xc9 && m <= 0xcb)) || frame !== null || len < 8 || len !== 8 + 3 * b[i + 7]!) return null\n      frame = { width: u16be(b, i + 5), height: u16be(b, i + 3) }\n    }\n    if (m === 0xda) return frame                                    // SOS\n    i += len\n  }\n}\n\n/**\n * The dimensions a data URI's picture declares in its header, read before\n * any decoding (6475): for WebP the frame, or a VP8X container's canvas\n * and frame; for JPEG the first SOFn. null: not an admitted media type, not\n * base64, not a single still picture of the declared type, or unreadable.\n */\nexport function imageDimensions (uri: string): ImageDimensions | null {\n  if (typeof uri !== 'string') return null\n  const m = /^data:(image\\/(?:jpeg|webp));base64,/.exec(uri)\n  if (!m) return null\n  const b = base64(uri.slice(m[0].length))\n  if (b === null) return null\n  return m[1] === 'image/webp' ? webp(b) : jpeg(b)\n}\n\nconst within = (d: Dimensions): boolean => d.width >= 1 && d.height >= 1 && d.width <= PROFILE_LIMITS.pixels && d.height <= PROFILE_LIMITS.pixels\n/** 6435, 6475: every declared dimension within 1024 × 1024, the header readable. */\nexport const imageWithinBounds = (d: ImageDimensions | null): boolean =>\n  d !== null && ('canvas' in d ? within(d.canvas) && within(d.frame) : within(d))\n\n/** Why a profile body (or artifact) is refused: its rule, or null if it passes. */\nexport function profileProblem (artifact: unknown): 'RLTP-TRU-6430' | 'RLTP-TRU-6475' | null {\n  if (!profileSchemaOk(artifact)) return 'RLTP-TRU-6430'\n  const image = (artifact as ProfileArtifact).body.image\n  if (image !== undefined && !imageWithinBounds(imageDimensions(image))) return 'RLTP-TRU-6475'\n  return null\n}\n\n// ── k_pr and the MAC (6440) ────────────────────────────────────────────\n\n/** The info string of k_pr: sender first (the direction, 6440). */\nexport const profileInfo = (senderPairAnchor: string, recipientPairAnchor: string): string =>\n  `rltp/visibility/mac/profile/${senderPairAnchor}/${recipientPairAnchor}`\n\n/** k_pr from the X25519 shared secret of the two pair keys (6440). */\nexport const profileKey = (shared: Uint8Array, senderPairAnchor: string, recipientPairAnchor: string, subtle: SubtleCrypto = platformSubtle()): Promise<Uint8Array> =>\n  hkdf(shared, profileInfo(senderPairAnchor, recipientPairAnchor), 32, subtle)\n\n/** profile@1 under k_pr: the body and its mac over JCS(body) (6430, 6440). */\nexport async function assembleProfile (body: ProfileBody, shared: Uint8Array, senderPairAnchor: string, recipientPairAnchor: string, subtle: SubtleCrypto = platformSubtle()): Promise<ProfileArtifact> {\n  const k = await profileKey(shared, senderPairAnchor, recipientPairAnchor, subtle)\n  return { body, proof: { mac: await macU(k, jcs(body), subtle) } }\n}\n\n/** Whether the artifact's mac verifies under k_pr of (sender → recipient). */\nexport async function profileMacOk (a: ProfileArtifact, shared: Uint8Array, senderPairAnchor: string, recipientPairAnchor: string, subtle: SubtleCrypto = platformSubtle()): Promise<boolean> {\n  const k = await profileKey(shared, senderPairAnchor, recipientPairAnchor, subtle)\n  return (await macU(k, jcs(a.body), subtle)) === a.proof.mac\n}\n"]}

package/dist/prompts.d.ts

@@ -0,0 +1,14 @@
+import type { DecisionHandler, HolderModule } from './engine.js';
+import type { PromptChoice, PromptKind } from './state.js';
+/** The command name of the decision. */
+export declare const DECIDE = "prompt.decide";
+export interface DecideInput {
+    promptId: string;
+    choice: PromptChoice;
+}
+export type Decisions = ReadonlyMap<PromptKind, DecisionHandler>;
+/** The decision handlers of the modules, one per kind at most. */
+export declare function collectDecisions(modules: readonly HolderModule[]): Decisions;
+/** The prompts module createHolder registers, over the modules' decision handlers. */
+export declare function promptsModule(decisions?: Decisions): HolderModule;
+//# sourceMappingURL=prompts.d.ts.map

package/dist/prompts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompts.d.ts","sourceRoot":"","sources":["../src/prompts.ts"],"names":[],"mappings":"AA8BA,OAAO,KAAK,EAAoC,eAAe,EAAc,YAAY,EAAW,MAAM,aAAa,CAAA;AAEvH,OAAO,KAAK,EAAe,YAAY,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAEvE,wCAAwC;AACxC,eAAO,MAAM,MAAM,kBAAkB,CAAA;AAErC,MAAM,WAAW,WAAW;IAAG,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,YAAY,CAAA;CAAE;AAIvE,MAAM,MAAM,SAAS,GAAG,WAAW,CAAC,UAAU,EAAE,eAAe,CAAC,CAAA;AAEhE,kEAAkE;AAClE,wBAAgB,gBAAgB,CAAE,OAAO,EAAE,SAAS,YAAY,EAAE,GAAG,SAAS,CAa7E;AAyCD,sFAAsF;AACtF,wBAAgB,aAAa,CAAE,SAAS,GAAE,SAAqB,GAAG,YAAY,CAE7E"}