@real-life/trust-protocol 0.4.0 → 0.6.0

package/dist/entropy.d.ts

@@ -1,5 +1,5 @@
 /** What a random value is for. Star salts are counters, not entropy. */
-export type EntropyPurpose = 'seal.eph' | 'seal.nonce' | 'doc.id' | 'thread.id' | 'ack.id' | 'challenge' | 'group.seed' | 'founding.nonce' | 'intro.act' | 'intro.target' | 'groupstar.nonce' | 'pad';
+export type EntropyPurpose = 'seal.eph' | 'seal.nonce' | 'doc.id' | 'thread.id' | 'ack.id' | 'challenge' | 'group.seed' | 'founding.nonce' | 'intro.act' | 'message.mid' | 'intro.target' | 'groupstar.nonce' | 'pad';
 export declare const ENTROPY_PURPOSES: readonly EntropyPurpose[];
 export interface Entropy {
     /** n fresh bytes for `purpose`; a new buffer every call */

package/dist/entropy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entropy.d.ts","sourceRoot":"","sources":["../src/entropy.ts"],"names":[],"mappings":"AAYA,wEAAwE;AACxE,MAAM,MAAM,cAAc,GACtB,UAAU,GACV,YAAY,GACZ,QAAQ,GACR,WAAW,GACX,QAAQ,GACR,WAAW,GACX,YAAY,GACZ,gBAAgB,GAChB,WAAW,GACX,cAAc,GACd,iBAAiB,GACjB,KAAK,CAAA;AAET,eAAO,MAAM,gBAAgB,EAAE,SAAS,cAAc,EAGpD,CAAA;AAEF,MAAM,WAAW,OAAO;IACtB,2DAA2D;IAC3D,KAAK,CAAE,OAAO,EAAE,cAAc,EAAE,CAAC,EAAE,MAAM,GAAG,UAAU,CAAA;IACtD,qEAAqE;IACrE,EAAE,CAAE,OAAO,EAAE,cAAc,GAAG,MAAM,CAAA;CACrC;AAED,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAA;AAE9E,qBAAa,YAAa,SAAQ,KAAK;IACrC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;gBACX,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAMtE;AAeD,8EAA8E;AAC9E,uEAAuE;AACvE,MAAM,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,EAAE,iBAAiB,GAAG,YAAY,CAAC,CAAA;AAE3E,wBAAgB,aAAa,CAAE,MAAM,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,OAAO,CAiBxE;AAED,MAAM,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,UAAU,GAAG,MAAM,GAAG,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;AAE7G;;;;;GAKG;AACH,wBAAgB,eAAe,CAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CA0B/D"}
+{"version":3,"file":"entropy.d.ts","sourceRoot":"","sources":["../src/entropy.ts"],"names":[],"mappings":"AAYA,wEAAwE;AACxE,MAAM,MAAM,cAAc,GACtB,UAAU,GACV,YAAY,GACZ,QAAQ,GACR,WAAW,GACX,QAAQ,GACR,WAAW,GACX,YAAY,GACZ,gBAAgB,GAChB,WAAW,GACX,aAAa,GACb,cAAc,GACd,iBAAiB,GACjB,KAAK,CAAA;AAET,eAAO,MAAM,gBAAgB,EAAE,SAAS,cAAc,EAGpD,CAAA;AAEF,MAAM,WAAW,OAAO;IACtB,2DAA2D;IAC3D,KAAK,CAAE,OAAO,EAAE,cAAc,EAAE,CAAC,EAAE,MAAM,GAAG,UAAU,CAAA;IACtD,qEAAqE;IACrE,EAAE,CAAE,OAAO,EAAE,cAAc,GAAG,MAAM,CAAA;CACrC;AAED,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAA;AAE9E,qBAAa,YAAa,SAAQ,KAAK;IACrC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;IAC/B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;gBACX,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAMtE;AAeD,8EAA8E;AAC9E,uEAAuE;AACvE,MAAM,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,EAAE,iBAAiB,GAAG,YAAY,CAAC,CAAA;AAE3E,wBAAgB,aAAa,CAAE,MAAM,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,OAAO,CAiBxE;AAED,MAAM,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,UAAU,GAAG,MAAM,GAAG,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,CAAC,CAAC,CAAA;AAE7G;;;;;GAKG;AACH,wBAAgB,eAAe,CAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CA0B/D"}

package/dist/entropy.js

@@ -11,7 +11,7 @@
 // (test/entropy-lint.test.mjs enforces it).
 export const ENTROPY_PURPOSES = Object.freeze([
     'seal.eph', 'seal.nonce', 'doc.id', 'thread.id', 'ack.id', 'challenge',
-    'group.seed', 'founding.nonce', 'intro.act', 'intro.target', 'groupstar.nonce', 'pad',
+    'group.seed', 'founding.nonce', 'intro.act', 'intro.target', 'groupstar.nonce', 'pad', 'message.mid',
 ]);
 export class EntropyError extends Error {
     code;

package/dist/entropy.js.map

@@ -1 +1 @@
-{"version":3,"file":"entropy.js","sourceRoot":"","sources":["../src/entropy.ts"],"names":[],"mappings":"AAAA,qDAAqD;AACrD,EAAE;AACF,oEAAoE;AACpE,uEAAuE;AACvE,sEAAsE;AACtE,uEAAuE;AACvE,qEAAqE;AACrE,uDAAuD;AACvD,EAAE;AACF,uEAAuE;AACvE,4CAA4C;AAiB5C,MAAM,CAAC,MAAM,gBAAgB,GAA8B,MAAM,CAAC,MAAM,CAAC;IACvE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW;IACtE,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,cAAc,EAAE,iBAAiB,EAAE,KAAK;CACtF,CAAC,CAAA;AAWF,MAAM,OAAO,YAAa,SAAQ,KAAK;IAC5B,IAAI,CAAkB;IACtB,OAAO,CAAQ;IACxB,YAAa,IAAsB,EAAE,OAAe,EAAE,OAAe;QACnE,KAAK,CAAC,WAAW,IAAI,KAAK,OAAO,MAAM,OAAO,EAAE,CAAC,CAAA;QACjD,IAAI,CAAC,IAAI,GAAG,cAAc,CAAA;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACxB,CAAC;CACF;AAED,MAAM,QAAQ,GAAwB,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAA;AAC/D,MAAM,YAAY,GAAG,CAAC,OAAe,EAAQ,EAAE;IAC7C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,SAAS,EAAE,OAAO,EAAE,wBAAwB,CAAC,CAAA;AAClG,CAAC,CAAA;AACD,MAAM,WAAW,GAAG,CAAC,OAAe,EAAE,CAAS,EAAQ,EAAE;IACvD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,OAAO,EAAE,kBAAkB,CAAC,EAAE,CAAC,CAAA;AACzG,CAAC,CAAA;AAED,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAA;AAErD,qDAAqD;AACrD,MAAM,KAAK,GAAG,KAAK,CAAA;AAMnB,MAAM,UAAU,aAAa,CAAE,MAAgC;IAC7D,MAAM,CAAC,GAAG,MAAM,IAAK,UAAU,CAAC,MAAsC,CAAA;IACtE,MAAM,OAAO,GAAI,CAAC,iBAAiB,EAAE,YAAY,CAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAA;IACxG,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,sBAAsB,CAAC,OAAO,CAAC,CAAA;IACnE,MAAM,GAAG,GAAG,CAAmB,CAAA;IAC/B,OAAO;QACL,KAAK,CAAE,OAAO,EAAE,CAAC;YACf,YAAY,CAAC,OAAO,CAAC,CAAC;YAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;YAC9C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAA;YAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,KAAK;gBAAE,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;YAC/F,OAAO,GAAG,CAAA;QACZ,CAAC;QACD,EAAE,CAAE,OAAO;YACT,YAAY,CAAC,OAAO,CAAC,CAAA;YACrB,OAAO,GAAG,CAAC,UAAU,EAAE,CAAA;QACzB,CAAC;KACF,CAAA;AACH,CAAC;AAID;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAE,MAAqB;IACpD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAsC,CAAA;IAC5D,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,YAAY,CAAC,OAAO,CAAC,CAAA;QACrB,IAAI,CAAC,KAAK,SAAS;YAAE,SAAQ;QAC7B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACjH,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,OAAe,EAAuB,EAAE;QACpD,YAAY,CAAC,OAAO,CAAC,CAAA;QACrB,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAC7B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAA;QACxF,OAAO,CAAC,CAAC,KAAK,EAAG,CAAA;IACnB,CAAC,CAAA;IACD,OAAO;QACL,KAAK,CAAE,OAAO,EAAE,CAAC;YACf,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;YACvB,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAA;YACvB,IAAI,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,OAAO,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAA;YACpH,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAA;QAC1B,CAAC;QACD,EAAE,CAAE,OAAO;YACT,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAA;YACvB,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,OAAO,EAAE,sBAAsB,CAAC,CAAA;YAC9F,OAAO,CAAC,CAAA;QACV,CAAC;KACF,CAAA;AACH,CAAC","sourcesContent":["// entropy — the Entropy port (lib Stage 2, note §3).\n//\n// Randomness by closed purpose: every value the library draws names\n// what it is for, so a scripted run replays per purpose rather than by\n// position in one byte stream. No domain decisions travel here: group\n// rules are group state, human choices are act input. Entropy is drawn\n// fresh per preparation; after a version conflict an act is prepared\n// again, never a nonce reused under another plaintext.\n//\n// This is the ONLY file in src/ that touches the platform's generators\n// (test/entropy-lint.test.mjs enforces it).\n\n/** What a random value is for. Star salts are counters, not entropy. */\nexport type EntropyPurpose =\n  | 'seal.eph'           // ephemeral X25519 seed of an envelope (Delivery §5)\n  | 'seal.nonce'         // AES-GCM nonce of an envelope (Delivery §5), every outer seal\n  | 'doc.id'             // document id (uuid)\n  | 'thread.id'          // thread id (uuid)\n  | 'ack.id'             // delivery-ack document id (uuid)\n  | 'challenge'          // encounter challenge bytes\n  | 'group.seed'         // group address seed at founding\n  | 'founding.nonce'     // relationship / group founding nonce (Identity §6.1, §7a.3)\n  | 'intro.act'          // an introduction act id, 32 bytes (Trust 8070)\n  | 'intro.target'       // a mediator's target designator, 32 bytes (Trust 8610)\n  | 'groupstar.nonce'    // AEAD nonce of a group-star `c` (5.2b)\n  | 'pad'                // padding and filler bytes\n\nexport const ENTROPY_PURPOSES: readonly EntropyPurpose[] = Object.freeze([\n  'seal.eph', 'seal.nonce', 'doc.id', 'thread.id', 'ack.id', 'challenge',\n  'group.seed', 'founding.nonce', 'intro.act', 'intro.target', 'groupstar.nonce', 'pad',\n])\n\nexport interface Entropy {\n  /** n fresh bytes for `purpose`; a new buffer every call */\n  bytes (purpose: EntropyPurpose, n: number): Uint8Array\n  /** a fresh identifier for `purpose` (lowercase UUIDv4 by default) */\n  id (purpose: EntropyPurpose): string\n}\n\nexport type EntropyErrorCode = 'exhausted' | 'mismatch' | 'purpose' | 'length'\n\nexport class EntropyError extends Error {\n  readonly code: EntropyErrorCode\n  readonly purpose: string\n  constructor (code: EntropyErrorCode, purpose: string, message: string) {\n    super(`entropy ${code} (${purpose}): ${message}`)\n    this.name = 'EntropyError'\n    this.code = code\n    this.purpose = purpose\n  }\n}\n\nconst PURPOSES: ReadonlySet<string> = new Set(ENTROPY_PURPOSES)\nconst checkPurpose = (purpose: string): void => {\n  if (!PURPOSES.has(purpose)) throw new EntropyError('purpose', purpose, 'not an entropy purpose')\n}\nconst checkLength = (purpose: string, n: number): void => {\n  if (!Number.isSafeInteger(n) || n < 0) throw new EntropyError('length', purpose, `invalid length ${n}`)\n}\n\nimport { CryptoUnavailableError } from './results.js'\n\n// getRandomValues fills at most 65536 bytes per call\nconst QUOTA = 65536\n\n/** Platform randomness; the crypto handle is resolved here, not at import. */\n/** The platform generators a crypto handle offers to randomEntropy. */\nexport type PlatformRandom = Pick<Crypto, 'getRandomValues' | 'randomUUID'>\n\nexport function randomEntropy (handle?: Partial<PlatformRandom>): Entropy {\n  const c = handle ?? (globalThis.crypto as Partial<Crypto> | undefined)\n  const missing = (['getRandomValues', 'randomUUID'] as const).filter((m) => typeof c?.[m] !== 'function')\n  if (missing.length || !c) throw new CryptoUnavailableError(missing)\n  const gen = c as PlatformRandom\n  return {\n    bytes (purpose, n) {\n      checkPurpose(purpose); checkLength(purpose, n)\n      const out = new Uint8Array(n)\n      for (let i = 0; i < n; i += QUOTA) gen.getRandomValues(out.subarray(i, Math.min(n, i + QUOTA)))\n      return out\n    },\n    id (purpose) {\n      checkPurpose(purpose)\n      return gen.randomUUID()\n    },\n  }\n}\n\nexport type EntropyScript = Partial<Record<EntropyPurpose, Uint8Array | string | Array<Uint8Array | string>>>\n\n/**\n * Scripted entropy for vectors and tests: each purpose yields its values\n * in order (a single value is a list of one) and throws 'exhausted' when\n * it runs dry. bytes() needs a Uint8Array of exactly n bytes, id() a\n * string — anything else is 'mismatch'. Values are copied in and out.\n */\nexport function scriptedEntropy (script: EntropyScript): Entropy {\n  const queues = new Map<string, Array<Uint8Array | string>>()\n  for (const [purpose, v] of Object.entries(script)) {\n    checkPurpose(purpose)\n    if (v === undefined) continue\n    queues.set(purpose, (Array.isArray(v) ? v : [v]).map((x) => (x instanceof Uint8Array ? new Uint8Array(x) : x)))\n  }\n  const next = (purpose: string): Uint8Array | string => {\n    checkPurpose(purpose)\n    const q = queues.get(purpose)\n    if (!q || q.length === 0) throw new EntropyError('exhausted', purpose, 'script ran dry')\n    return q.shift()!\n  }\n  return {\n    bytes (purpose, n) {\n      checkLength(purpose, n)\n      const v = next(purpose)\n      if (!(v instanceof Uint8Array) || v.length !== n) throw new EntropyError('mismatch', purpose, `expected ${n} bytes`)\n      return new Uint8Array(v)\n    },\n    id (purpose) {\n      const v = next(purpose)\n      if (typeof v !== 'string') throw new EntropyError('mismatch', purpose, 'expected a string id')\n      return v\n    },\n  }\n}\n"]}
+{"version":3,"file":"entropy.js","sourceRoot":"","sources":["../src/entropy.ts"],"names":[],"mappings":"AAAA,qDAAqD;AACrD,EAAE;AACF,oEAAoE;AACpE,uEAAuE;AACvE,sEAAsE;AACtE,uEAAuE;AACvE,qEAAqE;AACrE,uDAAuD;AACvD,EAAE;AACF,uEAAuE;AACvE,4CAA4C;AAkB5C,MAAM,CAAC,MAAM,gBAAgB,GAA8B,MAAM,CAAC,MAAM,CAAC;IACvE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW;IACtE,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,cAAc,EAAE,iBAAiB,EAAE,KAAK,EAAE,aAAa;CACrG,CAAC,CAAA;AAWF,MAAM,OAAO,YAAa,SAAQ,KAAK;IAC5B,IAAI,CAAkB;IACtB,OAAO,CAAQ;IACxB,YAAa,IAAsB,EAAE,OAAe,EAAE,OAAe;QACnE,KAAK,CAAC,WAAW,IAAI,KAAK,OAAO,MAAM,OAAO,EAAE,CAAC,CAAA;QACjD,IAAI,CAAC,IAAI,GAAG,cAAc,CAAA;QAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;QAChB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;IACxB,CAAC;CACF;AAED,MAAM,QAAQ,GAAwB,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAA;AAC/D,MAAM,YAAY,GAAG,CAAC,OAAe,EAAQ,EAAE;IAC7C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,SAAS,EAAE,OAAO,EAAE,wBAAwB,CAAC,CAAA;AAClG,CAAC,CAAA;AACD,MAAM,WAAW,GAAG,CAAC,OAAe,EAAE,CAAS,EAAQ,EAAE;IACvD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,YAAY,CAAC,QAAQ,EAAE,OAAO,EAAE,kBAAkB,CAAC,EAAE,CAAC,CAAA;AACzG,CAAC,CAAA;AAED,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAA;AAErD,qDAAqD;AACrD,MAAM,KAAK,GAAG,KAAK,CAAA;AAMnB,MAAM,UAAU,aAAa,CAAE,MAAgC;IAC7D,MAAM,CAAC,GAAG,MAAM,IAAK,UAAU,CAAC,MAAsC,CAAA;IACtE,MAAM,OAAO,GAAI,CAAC,iBAAiB,EAAE,YAAY,CAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAA;IACxG,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,sBAAsB,CAAC,OAAO,CAAC,CAAA;IACnE,MAAM,GAAG,GAAG,CAAmB,CAAA;IAC/B,OAAO;QACL,KAAK,CAAE,OAAO,EAAE,CAAC;YACf,YAAY,CAAC,OAAO,CAAC,CAAC;YAAC,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;YAC9C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAA;YAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,KAAK;gBAAE,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;YAC/F,OAAO,GAAG,CAAA;QACZ,CAAC;QACD,EAAE,CAAE,OAAO;YACT,YAAY,CAAC,OAAO,CAAC,CAAA;YACrB,OAAO,GAAG,CAAC,UAAU,EAAE,CAAA;QACzB,CAAC;KACF,CAAA;AACH,CAAC;AAID;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAE,MAAqB;IACpD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAsC,CAAA;IAC5D,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,YAAY,CAAC,OAAO,CAAC,CAAA;QACrB,IAAI,CAAC,KAAK,SAAS;YAAE,SAAQ;QAC7B,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IACjH,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,OAAe,EAAuB,EAAE;QACpD,YAAY,CAAC,OAAO,CAAC,CAAA;QACrB,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QAC7B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,YAAY,CAAC,WAAW,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAA;QACxF,OAAO,CAAC,CAAC,KAAK,EAAG,CAAA;IACnB,CAAC,CAAA;IACD,OAAO;QACL,KAAK,CAAE,OAAO,EAAE,CAAC;YACf,WAAW,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;YACvB,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAA;YACvB,IAAI,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;gBAAE,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,OAAO,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAA;YACpH,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,CAAA;QAC1B,CAAC;QACD,EAAE,CAAE,OAAO;YACT,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAA;YACvB,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,MAAM,IAAI,YAAY,CAAC,UAAU,EAAE,OAAO,EAAE,sBAAsB,CAAC,CAAA;YAC9F,OAAO,CAAC,CAAA;QACV,CAAC;KACF,CAAA;AACH,CAAC","sourcesContent":["// entropy — the Entropy port (lib Stage 2, note §3).\n//\n// Randomness by closed purpose: every value the library draws names\n// what it is for, so a scripted run replays per purpose rather than by\n// position in one byte stream. No domain decisions travel here: group\n// rules are group state, human choices are act input. Entropy is drawn\n// fresh per preparation; after a version conflict an act is prepared\n// again, never a nonce reused under another plaintext.\n//\n// This is the ONLY file in src/ that touches the platform's generators\n// (test/entropy-lint.test.mjs enforces it).\n\n/** What a random value is for. Star salts are counters, not entropy. */\nexport type EntropyPurpose =\n  | 'seal.eph'           // ephemeral X25519 seed of an envelope (Delivery §5)\n  | 'seal.nonce'         // AES-GCM nonce of an envelope (Delivery §5), every outer seal\n  | 'doc.id'             // document id (uuid)\n  | 'thread.id'          // thread id (uuid)\n  | 'ack.id'             // delivery-ack document id (uuid)\n  | 'challenge'          // encounter challenge bytes\n  | 'group.seed'         // group address seed at founding\n  | 'founding.nonce'     // relationship / group founding nonce (Identity §6.1, §7a.3)\n  | 'intro.act'          // an introduction act id, 32 bytes (Trust 8070)\n  | 'message.mid'        // a message's mid (uuid, Message Tasks 3040)\n  | 'intro.target'       // a mediator's target designator, 32 bytes (Trust 8610)\n  | 'groupstar.nonce'    // AEAD nonce of a group-star `c` (5.2b)\n  | 'pad'                // padding and filler bytes\n\nexport const ENTROPY_PURPOSES: readonly EntropyPurpose[] = Object.freeze([\n  'seal.eph', 'seal.nonce', 'doc.id', 'thread.id', 'ack.id', 'challenge',\n  'group.seed', 'founding.nonce', 'intro.act', 'intro.target', 'groupstar.nonce', 'pad', 'message.mid',\n])\n\nexport interface Entropy {\n  /** n fresh bytes for `purpose`; a new buffer every call */\n  bytes (purpose: EntropyPurpose, n: number): Uint8Array\n  /** a fresh identifier for `purpose` (lowercase UUIDv4 by default) */\n  id (purpose: EntropyPurpose): string\n}\n\nexport type EntropyErrorCode = 'exhausted' | 'mismatch' | 'purpose' | 'length'\n\nexport class EntropyError extends Error {\n  readonly code: EntropyErrorCode\n  readonly purpose: string\n  constructor (code: EntropyErrorCode, purpose: string, message: string) {\n    super(`entropy ${code} (${purpose}): ${message}`)\n    this.name = 'EntropyError'\n    this.code = code\n    this.purpose = purpose\n  }\n}\n\nconst PURPOSES: ReadonlySet<string> = new Set(ENTROPY_PURPOSES)\nconst checkPurpose = (purpose: string): void => {\n  if (!PURPOSES.has(purpose)) throw new EntropyError('purpose', purpose, 'not an entropy purpose')\n}\nconst checkLength = (purpose: string, n: number): void => {\n  if (!Number.isSafeInteger(n) || n < 0) throw new EntropyError('length', purpose, `invalid length ${n}`)\n}\n\nimport { CryptoUnavailableError } from './results.js'\n\n// getRandomValues fills at most 65536 bytes per call\nconst QUOTA = 65536\n\n/** Platform randomness; the crypto handle is resolved here, not at import. */\n/** The platform generators a crypto handle offers to randomEntropy. */\nexport type PlatformRandom = Pick<Crypto, 'getRandomValues' | 'randomUUID'>\n\nexport function randomEntropy (handle?: Partial<PlatformRandom>): Entropy {\n  const c = handle ?? (globalThis.crypto as Partial<Crypto> | undefined)\n  const missing = (['getRandomValues', 'randomUUID'] as const).filter((m) => typeof c?.[m] !== 'function')\n  if (missing.length || !c) throw new CryptoUnavailableError(missing)\n  const gen = c as PlatformRandom\n  return {\n    bytes (purpose, n) {\n      checkPurpose(purpose); checkLength(purpose, n)\n      const out = new Uint8Array(n)\n      for (let i = 0; i < n; i += QUOTA) gen.getRandomValues(out.subarray(i, Math.min(n, i + QUOTA)))\n      return out\n    },\n    id (purpose) {\n      checkPurpose(purpose)\n      return gen.randomUUID()\n    },\n  }\n}\n\nexport type EntropyScript = Partial<Record<EntropyPurpose, Uint8Array | string | Array<Uint8Array | string>>>\n\n/**\n * Scripted entropy for vectors and tests: each purpose yields its values\n * in order (a single value is a list of one) and throws 'exhausted' when\n * it runs dry. bytes() needs a Uint8Array of exactly n bytes, id() a\n * string — anything else is 'mismatch'. Values are copied in and out.\n */\nexport function scriptedEntropy (script: EntropyScript): Entropy {\n  const queues = new Map<string, Array<Uint8Array | string>>()\n  for (const [purpose, v] of Object.entries(script)) {\n    checkPurpose(purpose)\n    if (v === undefined) continue\n    queues.set(purpose, (Array.isArray(v) ? v : [v]).map((x) => (x instanceof Uint8Array ? new Uint8Array(x) : x)))\n  }\n  const next = (purpose: string): Uint8Array | string => {\n    checkPurpose(purpose)\n    const q = queues.get(purpose)\n    if (!q || q.length === 0) throw new EntropyError('exhausted', purpose, 'script ran dry')\n    return q.shift()!\n  }\n  return {\n    bytes (purpose, n) {\n      checkLength(purpose, n)\n      const v = next(purpose)\n      if (!(v instanceof Uint8Array) || v.length !== n) throw new EntropyError('mismatch', purpose, `expected ${n} bytes`)\n      return new Uint8Array(v)\n    },\n    id (purpose) {\n      const v = next(purpose)\n      if (typeof v !== 'string') throw new EntropyError('mismatch', purpose, 'expected a string id')\n      return v\n    },\n  }\n}\n"]}

package/dist/events.d.ts

@@ -172,6 +172,27 @@ export type HolderEvent = EventBase & ({
     type: 'group.vouched';
     groupId: string;
     member: string;
+}
+/** the block of the contact's relationships set or cleared (Message Tasks 6.1) */
+ | {
+    type: 'contact.blocked';
+    contactId: string;
+    blocked: boolean;
+}
+/** a message issued (Message Tasks 5): its mid and its document's digest,
+ *  whose sender status deliveryStatus answers */
+ | {
+    type: 'message.sent';
+    contactId: string;
+    mid: string;
+    digest: string;
+}
+/** a message accepted into the inbox (4.5), by its inbox id; the contact
+ *  of the relationship it arrived on */
+ | {
+    type: 'message.received';
+    contactId: string;
+    inboxId: string;
 });
 export type HolderEventType = HolderEvent['type'];
 //# sourceMappingURL=events.d.ts.map

package/dist/events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAQ,UAAU,EAAE,MAAM,WAAW,CAAA;AACjD,OAAO,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAE7E,kCAAkC;AAClC,MAAM,WAAW,SAAS;IACxB,uBAAuB;IACvB,OAAO,EAAE,MAAM,CAAA;IACf,uDAAuD;IACvD,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,+EAA+E;IAC/E,SAAS,EAAE,GAAG,CAAA;CACf;AAED,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,CAClC;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE;AAC9C,iDAAiD;GAC/C;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE;AACzE;;+CAE+C;GAC7C;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAC5E,uFAAuF;GACrF;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE;AACjE;6EAC6E;GAC3E;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE;AACtF,2EAA2E;GACzE;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE;AAC9F,oDAAoD;GAClD;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE;AAC/C,iEAAiE;GAC/D;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GAC5D;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE;AAC/D,4DAA4D;GAC1D;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,YAAY,CAAA;CAAE;AACtF,0CAA0C;GACxC;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,YAAY,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE;AACrG,+CAA+C;GAC7C;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE;AACvD,6FAA6F;GAC3F;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,UAAU,EAAE,GAAG,CAAA;CAAE;AAC7C,yDAAyD;GACvD;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AACxC,uDAAuD;GACrD;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAC1C;mEACmE;GACjE;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAA;CAAE;AACvE,+EAA+E;GAC7E;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,GAAG,CAAA;CAAE;AACjF,qFAAqF;GACnF;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,GAAG,CAAA;CAAE;AACtF;mDACmD;GACjD;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE;AAClE;gEACgE;GAC9D;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE;AACpE,wDAAwD;GACtD;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,SAAS,GAAG,WAAW,CAAA;CAAE;AAC1G;4DAC4D;GAC1D;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE;AAC5F,oDAAoD;GAClD;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAC5C,6DAA6D;GAC3D;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AAC7D,uEAAuE;GACrE;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAC7D,CAAA;AAED,MAAM,MAAM,eAAe,GAAG,WAAW,CAAC,MAAM,CAAC,CAAA"}
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAQ,UAAU,EAAE,MAAM,WAAW,CAAA;AACjD,OAAO,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAE7E,kCAAkC;AAClC,MAAM,WAAW,SAAS;IACxB,uBAAuB;IACvB,OAAO,EAAE,MAAM,CAAA;IACf,uDAAuD;IACvD,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,+EAA+E;IAC/E,SAAS,EAAE,GAAG,CAAA;CACf;AAED,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,CAClC;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE;AAC9C,iDAAiD;GAC/C;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE;AACzE;;+CAE+C;GAC7C;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAC5E,uFAAuF;GACrF;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAA;CAAE;AACjE;6EAC6E;GAC3E;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAE;AACtF,2EAA2E;GACzE;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE;AAC9F,oDAAoD;GAClD;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE;AAC/C,iEAAiE;GAC/D;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE,GAC5D;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE;AAC/D,4DAA4D;GAC1D;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,YAAY,CAAA;CAAE;AACtF,0CAA0C;GACxC;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,YAAY,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE;AACrG,+CAA+C;GAC7C;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE;AACvD,6FAA6F;GAC3F;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,UAAU,EAAE,GAAG,CAAA;CAAE;AAC7C,yDAAyD;GACvD;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AACxC,uDAAuD;GACrD;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAC1C;mEACmE;GACjE;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,CAAC,EAAE,MAAM,CAAA;CAAE;AACvE,+EAA+E;GAC7E;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,GAAG,CAAA;CAAE;AACjF,qFAAqF;GACnF;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,GAAG,CAAA;CAAE;AACtF;mDACmD;GACjD;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE;AAClE;gEACgE;GAC9D;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAA;CAAE;AACpE,wDAAwD;GACtD;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,SAAS,GAAG,WAAW,CAAA;CAAE;AAC1G;4DAC4D;GAC1D;IAAE,IAAI,EAAE,oBAAoB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE;AAC5F,oDAAoD;GAClD;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAC5C,6DAA6D;GAC3D;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AAC7D,uEAAuE;GACrE;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AAC5D,kFAAkF;GAChF;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE;AAClE;iDACiD;GAC/C;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE;AAC1E;wCACwC;GACtC;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CACnE,CAAA;AAED,MAAM,MAAM,eAAe,GAAG,WAAW,CAAC,MAAM,CAAC,CAAA"}

package/dist/events.js.map

@@ -1 +1 @@
-{"version":3,"file":"events.js","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"","sourcesContent":["// events — what a holder announces after a commit (lib Stage 2, note §4.4).\n//\n// A closed union, released only after the commit that caused it, never\n// before. Events carry ids, not text: the app renders words from the\n// type, and re-reads its views on any event. Events do not survive a\n// restart; the act journal keeps them only to answer a repeated actId.\n// Pure JSON, like the state that journals them.\nimport type { Json, JsonObject } from './core.js'\nimport type { Dec, OutboxStatus, PromptChoice, PromptKind } from './state.js'\n\n/** Fields every event carries. */\nexport interface EventBase {\n  /** unique per event */\n  eventId: string\n  /** the human act that caused it, if any (note §4.2) */\n  actId?: string\n  /** commitSeq of the commit that caused it (state.ts), never the store token */\n  commitSeq: Dec\n}\n\nexport type HolderEvent = EventBase & (\n  | { type: 'contact.added', contactId: string }\n  /** a mapping verified on a relationship (6.3) */\n  | { type: 'contact.verified', contactId: string, relationshipId: string }\n  /** a fresh tuple appended to a chain (6a.4, 6220): the fresh\n   *  relationship `from` went into the chain `into`; contactId is the entry\n   *  the chain's verifications go to after it */\n  | { type: 'contact.chained', contactId: string, from: string, into: string }\n  /** entries merged into one (2140): the survivor and the merged ids, now its aliases */\n  | { type: 'contact.merged', contactId: string, merged: string[] }\n  /** a relationship left a merged entry (2080): the remaining entry's id\n   *  (renamed where 2100 says), the leaver's new entry id, the relationship */\n  | { type: 'contact.split', contactId: string, leaver: string, relationshipId: string }\n  /** relationships departed (2260): removed says the entry went with them */\n  | { type: 'contact.departed', contactId: string, relationshipIds: string[], removed: boolean }\n  /** the Trust act: anchor-mapping class on (2770) */\n  | { type: 'trust.given', contactId: string }\n  | { type: 'trust.received', contactId: string }\n  /** the pause of 5.4: star and blinded group star off, or back */\n  | { type: 'trust.paused', contactId: string, paused: boolean }\n  | { type: 'group.joined', groupId: string }\n  | { type: 'prompt.opened', promptId: string, kind: PromptKind }\n  /** the human decided a prompt; it is closed (prompts.ts) */\n  | { type: 'prompt.decided', promptId: string, kind: PromptKind, choice: PromptChoice }\n  /** sender status trias (Delivery §6.1) */\n  | { type: 'delivery.status', digest: string, threadId: string, status: OutboxStatus, late?: boolean }\n  /** contactId null: the holder's own profile */\n  | { type: 'profile.updated', contactId: string | null }\n  /** the community anchor's rotation completed: the head is this generation (Identity §5.4) */\n  | { type: 'anchor.rotated', generation: Dec }\n  /** a device name entered the register (Identity §5.5) */\n  | { type: 'device.added', name: string }\n  /** a device name was marked revoked (Identity §5.5) */\n  | { type: 'device.revoked', name: string }\n  /** resume found a duty of a registered kind at a version no handler\n   *  knows: kept untouched, announced once per resume (engine.ts) */\n  | { type: 'duty.unsupported', dutyId: string, kind: string, v: number }\n  /** a star (5.2a) completed on a relationship: its accepted snapshot changed */\n  | { type: 'star.accepted', contactId: string, relationshipId: string, salt: Dec }\n  /** a group star (5.2b) completed on a relationship; sharedGroups may have changed */\n  | { type: 'groupStar.accepted', contactId: string, relationshipId: string, salt: Dec }\n  /** a card displayed with a fresh own challenge (Encounter 5.3): `card`\n   *  is the optical payload to show (Encounter 6) */\n  | { type: 'encounter.shown', challenge: string, card: JsonObject }\n  /** the scanner's step (5.8 trunk 2–3): `card` is its sent card, the\n   *  optical leg's payload where no network carries the bundle */\n  | { type: 'encounter.scanned', contactId: string, card: JsonObject }\n  /** an enactment record created (5.5), on either side */\n  | { type: 'encounter.recorded', contactId: string, relationshipId: string, role: 'scanner' | 'displayer' }\n  /** the counterparty's step credential accepted (5.6): the edge now\n   *  holds it; mutual when the own one is issued too (4.2) */\n  | { type: 'encounter.accepted', contactId: string, relationshipId: string, mutual: boolean }\n  /** a group founded by this holder (Access 3.4.1) */\n  | { type: 'group.founded', groupId: string }\n  /** a member admitted by this holder, by its member anchor */\n  | { type: 'group.admitted', groupId: string, member: string }\n  /** a vouch@2 issued by this holder for a member anchor (Access 5.3) */\n  | { type: 'group.vouched', groupId: string, member: string }\n)\n\nexport type HolderEventType = HolderEvent['type']\n"]}
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../src/events.ts"],"names":[],"mappings":"","sourcesContent":["// events — what a holder announces after a commit (lib Stage 2, note §4.4).\n//\n// A closed union, released only after the commit that caused it, never\n// before. Events carry ids, not text: the app renders words from the\n// type, and re-reads its views on any event. Events do not survive a\n// restart; the act journal keeps them only to answer a repeated actId.\n// Pure JSON, like the state that journals them.\nimport type { Json, JsonObject } from './core.js'\nimport type { Dec, OutboxStatus, PromptChoice, PromptKind } from './state.js'\n\n/** Fields every event carries. */\nexport interface EventBase {\n  /** unique per event */\n  eventId: string\n  /** the human act that caused it, if any (note §4.2) */\n  actId?: string\n  /** commitSeq of the commit that caused it (state.ts), never the store token */\n  commitSeq: Dec\n}\n\nexport type HolderEvent = EventBase & (\n  | { type: 'contact.added', contactId: string }\n  /** a mapping verified on a relationship (6.3) */\n  | { type: 'contact.verified', contactId: string, relationshipId: string }\n  /** a fresh tuple appended to a chain (6a.4, 6220): the fresh\n   *  relationship `from` went into the chain `into`; contactId is the entry\n   *  the chain's verifications go to after it */\n  | { type: 'contact.chained', contactId: string, from: string, into: string }\n  /** entries merged into one (2140): the survivor and the merged ids, now its aliases */\n  | { type: 'contact.merged', contactId: string, merged: string[] }\n  /** a relationship left a merged entry (2080): the remaining entry's id\n   *  (renamed where 2100 says), the leaver's new entry id, the relationship */\n  | { type: 'contact.split', contactId: string, leaver: string, relationshipId: string }\n  /** relationships departed (2260): removed says the entry went with them */\n  | { type: 'contact.departed', contactId: string, relationshipIds: string[], removed: boolean }\n  /** the Trust act: anchor-mapping class on (2770) */\n  | { type: 'trust.given', contactId: string }\n  | { type: 'trust.received', contactId: string }\n  /** the pause of 5.4: star and blinded group star off, or back */\n  | { type: 'trust.paused', contactId: string, paused: boolean }\n  | { type: 'group.joined', groupId: string }\n  | { type: 'prompt.opened', promptId: string, kind: PromptKind }\n  /** the human decided a prompt; it is closed (prompts.ts) */\n  | { type: 'prompt.decided', promptId: string, kind: PromptKind, choice: PromptChoice }\n  /** sender status trias (Delivery §6.1) */\n  | { type: 'delivery.status', digest: string, threadId: string, status: OutboxStatus, late?: boolean }\n  /** contactId null: the holder's own profile */\n  | { type: 'profile.updated', contactId: string | null }\n  /** the community anchor's rotation completed: the head is this generation (Identity §5.4) */\n  | { type: 'anchor.rotated', generation: Dec }\n  /** a device name entered the register (Identity §5.5) */\n  | { type: 'device.added', name: string }\n  /** a device name was marked revoked (Identity §5.5) */\n  | { type: 'device.revoked', name: string }\n  /** resume found a duty of a registered kind at a version no handler\n   *  knows: kept untouched, announced once per resume (engine.ts) */\n  | { type: 'duty.unsupported', dutyId: string, kind: string, v: number }\n  /** a star (5.2a) completed on a relationship: its accepted snapshot changed */\n  | { type: 'star.accepted', contactId: string, relationshipId: string, salt: Dec }\n  /** a group star (5.2b) completed on a relationship; sharedGroups may have changed */\n  | { type: 'groupStar.accepted', contactId: string, relationshipId: string, salt: Dec }\n  /** a card displayed with a fresh own challenge (Encounter 5.3): `card`\n   *  is the optical payload to show (Encounter 6) */\n  | { type: 'encounter.shown', challenge: string, card: JsonObject }\n  /** the scanner's step (5.8 trunk 2–3): `card` is its sent card, the\n   *  optical leg's payload where no network carries the bundle */\n  | { type: 'encounter.scanned', contactId: string, card: JsonObject }\n  /** an enactment record created (5.5), on either side */\n  | { type: 'encounter.recorded', contactId: string, relationshipId: string, role: 'scanner' | 'displayer' }\n  /** the counterparty's step credential accepted (5.6): the edge now\n   *  holds it; mutual when the own one is issued too (4.2) */\n  | { type: 'encounter.accepted', contactId: string, relationshipId: string, mutual: boolean }\n  /** a group founded by this holder (Access 3.4.1) */\n  | { type: 'group.founded', groupId: string }\n  /** a member admitted by this holder, by its member anchor */\n  | { type: 'group.admitted', groupId: string, member: string }\n  /** a vouch@2 issued by this holder for a member anchor (Access 5.3) */\n  | { type: 'group.vouched', groupId: string, member: string }\n  /** the block of the contact's relationships set or cleared (Message Tasks 6.1) */\n  | { type: 'contact.blocked', contactId: string, blocked: boolean }\n  /** a message issued (Message Tasks 5): its mid and its document's digest,\n   *  whose sender status deliveryStatus answers */\n  | { type: 'message.sent', contactId: string, mid: string, digest: string }\n  /** a message accepted into the inbox (4.5), by its inbox id; the contact\n   *  of the relationship it arrived on */\n  | { type: 'message.received', contactId: string, inboxId: string }\n)\n\nexport type HolderEventType = HolderEvent['type']\n"]}

package/dist/holder-api.d.ts

@@ -1,11 +1,11 @@
-import type { CommitListener, EnginePorts, HolderModule } from './engine.js';
+import type { CommitListener, EnginePorts, HolderModule, TransportEntry, TransportRefusal, TransportView } from './engine.js';
 import type { DeliveryReport } from './ports.js';
 import type { ActResult, ReceiveResult, ResumeResult } from './results.js';
 import type { DeviceKeyResult } from './identity-state.js';
 import type { ProfileContent } from './profile.js';
 import type { Dec, Millis, OpaqueHolderState, PromptChoice, Setting, TrustClass } from './state.js';
 import type { Json } from './core.js';
-import type { ContactView, DeliveryStatusView, GroupView, ProfileView, PromptView } from './views.js';
+import type { ContactView, DeliveryStatusView, GroupView, InboxMessageView, ProfileView, PromptView } from './views.js';
 /** The committed state and its commitSeq; the state is opaque (note §4.5):
  *  apps read the views, store tooling may persist it. */
 export interface HolderSnapshot {
@@ -108,6 +108,31 @@ export interface Holder {
     vouchFor(groupId: string, member: string, opts: HumanActOptions & {
         provenance?: 'met' | 'introduced';
     }): Promise<ActResult>;
+    /** a text message to the contact (Message Tasks 3, 5): 1 to 4096 code
+     *  points, replyTo the mid of an earlier message of the relationship. It
+     *  goes on a ready, unblocked relationship (canMessage); otherwise refused
+     *  as not-ready, blocked or no-own-channel, and the app keeps it unsent.
+     *  Event message.sent {mid, digest}; deliveryStatus(digest) is its sender
+     *  status. Undelivered, it ends as failed(expired-by-adapter-policy) at
+     *  the retry horizon (P7D by default, P90D at most), before its sender
+     *  lifetime sentAt + P179D: failed(task-expired) is not reached for a
+     *  message under any horizon the engine admits; human */
+    sendMessage(contactId: string, text: string, opts: HumanActOptions & {
+        replyTo?: string;
+    }): Promise<ActResult>;
+    /** the inbox entries the app has durably taken over leave the inbox
+     *  (4420); their completion record stays (4350); not human */
+    takeMessages(ids: string[], opts: {
+        when: Millis;
+    }): Promise<ActResult>;
+    /** the block (Message Tasks 6): set on every relationship of the
+     *  contact's entry. Messages, invitations and the holder's own offers on
+     *  them stop; the protocol steps owed continue; the contact observes
+     *  nothing it would not without the block. Event contact.blocked; human */
+    block(contactId: string, opts: HumanActOptions): Promise<ActResult>;
+    /** the block cleared on every relationship of the entry: nothing that
+     *  was discarded under it reappears (6510); human */
+    unblock(contactId: string, opts: HumanActOptions): Promise<ActResult>;
     /** the device key of a held, unrevoked device name under an own anchor
      *  context (Identity §5.5); reads, changes nothing */
     deviceKey(name: string, contextLabel: string): Promise<DeviceKeyResult>;
@@ -126,8 +151,25 @@ export interface Holder {
     groups(): Promise<GroupView[]>;
     profile(): Promise<ProfileView>;
     prompts(): Promise<PromptView[]>;
+    /** the messages accepted and not yet taken over (Message Tasks 4.5),
+     *  by display time; event message.received announces each */
+    inbox(): Promise<InboxMessageView[]>;
     /** by document digest or threadId */
     deliveryStatus(digestOrThreadId: string): Promise<DeliveryStatusView>;
+    /** what the holder keeps for transport at `when`, after this opening's
+     *  first completed resume (else `{ok: false, code: 'not-resumed'}`) */
+    pendingTransport(when: Millis): Promise<TransportView | TransportRefusal>;
+    /** right before a hand-over: whether this opening's `entry` may go now */
+    mayHandOver(entry: TransportEntry, when: Millis): Promise<boolean>;
+    /** the hand-over: the same check, then `start()` (which starts the
+     *  deposit synchronously and says whether it did) inside the holder's
+     *  queue; true when both said yes */
+    handOver(entry: TransportEntry, when: Millis, start: () => boolean): Promise<boolean>;
+    /** ends this opening (a lock, the end of a process); resolves once the
+     *  operation running at the call has finished: after that the opening
+     *  commits nothing more, and the next opening may start */
+    close(): Promise<void>;
+    readonly closed: boolean;
 }
 /** A holder over its ports: `{store, keys, entropy?, log?, access?, retry?, crypto?}`.
  *  The crypto handle (default globalThis.crypto) is resolved and probed

package/dist/holder-api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"holder-api.d.ts","sourceRoot":"","sources":["../src/holder-api.ts"],"names":[],"mappings":"AA4DA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC5E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAEhD,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAQ1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAE1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAClD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,iBAAiB,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAMnG,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAErC,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAErG;yDACyD;AACzD,MAAM,WAAW,cAAc;IAAG,SAAS,EAAE,GAAG,CAAC;IAAC,KAAK,EAAE,iBAAiB,CAAA;CAAE;AAE5E,MAAM,WAAW,aAAa;IAC5B,wFAAwF;IACxF,OAAO,CAAC,EAAE,SAAS,YAAY,EAAE,CAAA;IACjC;;2EAEuE;IACvE,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAED;iCACiC;AACjC,MAAM,WAAW,eAAe;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AAEhE,MAAM,WAAW,MAAM;IACrB,qFAAqF;IACrF,GAAG,CAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAClG;wEACoE;IACpE,MAAM,CAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1F,kFAAkF;IAClF,KAAK,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACpE,wEAAwE;IACxE,OAAO,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtE,mFAAmF;IACnF,UAAU,CAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1F,iEAAiE;IACjE,QAAQ,CAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1G,qFAAqF;IACrF,aAAa,CAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC/G,yEAAyE;IACzE,KAAK,CAAE,UAAU,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACvE;+CAC2C;IAC3C,MAAM,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACnG,uFAAuF;IACvF,OAAO,CAAE,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACpD,yGAAyG;IACzG,SAAS,CAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACnE,mGAAmG;IACnG,YAAY,CAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtE;;qFAEiF;IACjF,YAAY,CAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACxD;;oDAEgD;IAChD,UAAU,CAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC/E;;;4BAGwB;IACxB,IAAI,CAAE,IAAI,EAAE,eAAe,GAAG;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACpE;;qCAEiC;IACjC,IAAI,CAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAChF,qFAAqF;IACrF,eAAe,CAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACvE,uFAAuF;IACvF,OAAO,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtE;kFAC8E;IAC9E,UAAU,CAAE,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1H;;wBAEoB;IACpB,MAAM,CAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtF;;;;8DAI0D;IAC1D,SAAS,CAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACjH;8CAC0C;IAC1C,QAAQ,CAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,UAAU,CAAC,EAAE,KAAK,GAAG,YAAY,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC7H;0DACsD;IACtD,SAAS,CAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IACxE,IAAI,CAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACvC,MAAM,CAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IAC5C,MAAM,CAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACjE;yDACqD;IACrD,OAAO,CAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IAC5D,iFAAiF;IACjF,SAAS,CAAE,QAAQ,EAAE,cAAc,GAAG,MAAM,IAAI,CAAA;IAChD,QAAQ,IAAK,OAAO,CAAC,cAAc,CAAC,CAAA;IACpC,QAAQ,IAAK,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;IACnC,2BAA2B;IAC3B,OAAO,CAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAAA;IACtD,MAAM,IAAK,OAAO,CAAC,SAAS,EAAE,CAAC,CAAA;IAC/B,OAAO,IAAK,OAAO,CAAC,WAAW,CAAC,CAAA;IAChC,OAAO,IAAK,OAAO,CAAC,UAAU,EAAE,CAAC,CAAA;IACjC,qCAAqC;IACrC,cAAc,CAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;CACvE;AAED;;;wDAGwD;AACxD,wBAAsB,YAAY,CAAE,KAAK,EAAE,WAAW,EAAE,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CAyDjG"}
+{"version":3,"file":"holder-api.d.ts","sourceRoot":"","sources":["../src/holder-api.ts"],"names":[],"mappings":"AAoFA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC7H,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAEhD,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAQ1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAE1D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAClD,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,iBAAiB,EAAE,YAAY,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAOnG,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAErC,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,SAAS,EAAE,gBAAgB,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAEvH;yDACyD;AACzD,MAAM,WAAW,cAAc;IAAG,SAAS,EAAE,GAAG,CAAC;IAAC,KAAK,EAAE,iBAAiB,CAAA;CAAE;AAE5E,MAAM,WAAW,aAAa;IAC5B,wFAAwF;IACxF,OAAO,CAAC,EAAE,SAAS,YAAY,EAAE,CAAA;IACjC;;2EAEuE;IACvE,UAAU,CAAC,EAAE,OAAO,CAAA;CACrB;AAED;iCACiC;AACjC,MAAM,WAAW,eAAe;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AAEhE,MAAM,WAAW,MAAM;IACrB,qFAAqF;IACrF,GAAG,CAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAClG;wEACoE;IACpE,MAAM,CAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1F,kFAAkF;IAClF,KAAK,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACpE,wEAAwE;IACxE,OAAO,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtE,mFAAmF;IACnF,UAAU,CAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1F,iEAAiE;IACjE,QAAQ,CAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1G,qFAAqF;IACrF,aAAa,CAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC/G,yEAAyE;IACzE,KAAK,CAAE,UAAU,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACvE;+CAC2C;IAC3C,MAAM,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACnG,uFAAuF;IACvF,OAAO,CAAE,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACpD,yGAAyG;IACzG,SAAS,CAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACnE,mGAAmG;IACnG,YAAY,CAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtE;;qFAEiF;IACjF,YAAY,CAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACxD;;oDAEgD;IAChD,UAAU,CAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC/E;;;4BAGwB;IACxB,IAAI,CAAE,IAAI,EAAE,eAAe,GAAG;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACpE;;qCAEiC;IACjC,IAAI,CAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAChF,qFAAqF;IACrF,eAAe,CAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACvE,uFAAuF;IACvF,OAAO,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtE;kFAC8E;IAC9E,UAAU,CAAE,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC1H;;wBAEoB;IACpB,MAAM,CAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtF;;;;8DAI0D;IAC1D,SAAS,CAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACjH;8CAC0C;IAC1C,QAAQ,CAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,UAAU,CAAC,EAAE,KAAK,GAAG,YAAY,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC7H;;;;;;;;6DAQyD;IACzD,WAAW,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG;QAAE,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IAC/G;kEAC8D;IAC9D,YAAY,CAAE,GAAG,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACxE;;;+EAG2E;IAC3E,KAAK,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACpE;yDACqD;IACrD,OAAO,CAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACtE;0DACsD;IACtD,SAAS,CAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAA;IACxE,IAAI,CAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACvC,MAAM,CAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IAC5C,MAAM,CAAE,MAAM,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAA;IACjE;yDACqD;IACrD,OAAO,CAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAA;IAC5D,iFAAiF;IACjF,SAAS,CAAE,QAAQ,EAAE,cAAc,GAAG,MAAM,IAAI,CAAA;IAChD,QAAQ,IAAK,OAAO,CAAC,cAAc,CAAC,CAAA;IACpC,QAAQ,IAAK,OAAO,CAAC,WAAW,EAAE,CAAC,CAAA;IACnC,2BAA2B;IAC3B,OAAO,CAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAAA;IACtD,MAAM,IAAK,OAAO,CAAC,SAAS,EAAE,CAAC,CAAA;IAC/B,OAAO,IAAK,OAAO,CAAC,WAAW,CAAC,CAAA;IAChC,OAAO,IAAK,OAAO,CAAC,UAAU,EAAE,CAAC,CAAA;IACjC;iEAC6D;IAC7D,KAAK,IAAK,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAA;IACrC,qCAAqC;IACrC,cAAc,CAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAA;IACtE;2EACuE;IACvE,gBAAgB,CAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,gBAAgB,CAAC,CAAA;IAC1E,0EAA0E;IAC1E,WAAW,CAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACnE;;yCAEqC;IACrC,QAAQ,CAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IACtF;;+DAE2D;IAC3D,KAAK,IAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACvB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;CACzB;AAED;;;wDAGwD;AACxD,wBAAsB,YAAY,CAAE,KAAK,EAAE,WAAW,EAAE,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CAoEjG"}

package/dist/holder-api.js

@@ -42,7 +42,11 @@
 //   invite(groupId, contactId, opts)          membership.invite         human
 //   vouchFor(groupId, member, opts{provenance?})  membership.vouch      human
 //   introduce(requesterId, targetId, opts)    introduction.introduce    human
+//   sendMessage(contactId, text, opts{replyTo?})  message.send         human
+//   block(contactId, opts)                    message.block {blocked: true}   human
+//   unblock(contactId, opts)                  message.block {blocked: false}  human
 //   recover({when})                           trust.recover          not human
+//   takeMessages(ids, {when})                 message.take           not human
 // and the read deviceKey(name, contextLabel): the device key of a held,
 // unrevoked name under an own anchor context (identity-state.ts).
 // A missing actId is refused at runtime as actid-missing.
@@ -54,9 +58,29 @@
 //
 // Delivery: `receive(env, when)` runs Delivery §6.2 in the core and
 // dispatches through the task register (receive.ts); `report` takes the
-// adapter's reports (on an ack's digest it marks the ack sent); `resume`
-// re-emits, runs due duties and re-emits unsent acks; `tick` expires and
-// retains (engine.ts).
+// adapter's reports (on an ack's digest: accepted or delivered marks it
+// sent, failed gives it up, awaiting-transport records that the adapter
+// holds it); `resume` re-emits, runs due duties and re-emits unsent acks;
+// `tick` expires and retains (engine.ts).
+//
+// Custody (Delivery 0.83 RLTP-DEL-6120 to 6135): the holder keeps every
+// outbound document until a service takes it or the holder gives it up,
+// across a lock and the end of a process. One createHolder is one opening.
+// After its first resume, `pendingTransport(when)` names what is to be
+// handed over: the outbox items neither terminal nor accepted (held ones
+// included) and the unsent acks, each with its envelope, its first
+// submission and its deadline, none past it. A transport hands over only
+// such entries, through `handOver(entry, when, start)`: the check of
+// `mayHandOver` and the start of the deposit in one step of the holder's
+// queue, true only for an entry this opening issued that is still pending,
+// unchanged, before its deadline. A duplicate's stored ack past its retries
+// appears once as a `resend` entry (Delivery RLTP-DEL-6330). A document missing from the
+// view is no longer to be sent. `await close()` ends the opening at a lock or
+// the end of a process (resolved once the running operation finished, the
+// moment the next opening may start): every later call rejects with InfraError
+// 'closed', mayHandOver answers false, and nothing issued before
+// authorizes anything; the next opening is a new createHolder over the
+// same store, resumed first.
 import { createEngine } from './engine.js';
 import { DECIDE, collectDecisions, promptsModule } from './prompts.js';
 import { InfraError } from './results.js';
@@ -70,13 +94,14 @@ import { ENTRY_COMMANDS } from './trust/entries.js';
 import { ENCOUNTER_COMMANDS, encounterModule } from './encounter/ceremony.js';
 import { MEMBERSHIP_COMMANDS, localAccess, membershipModule } from './membership/holder.js';
 import { INTRODUCTION_COMMANDS, introductionModule } from './introduction/holder.js';
-import { contactView, contactsView, deliveryStatusView, groupsView, profileView, promptsView } from './views.js';
+import { MESSAGE_COMMANDS, messageModule } from './message/holder.js';
+import { contactView, contactsView, deliveryStatusView, groupsView, inboxView, profileView, promptsView } from './views.js';
 /** A holder over its ports: `{store, keys, entropy?, log?, access?, retry?, crypto?}`.
  *  The crypto handle (default globalThis.crypto) is resolved and probed
  *  here and also feeds the default entropy; an app that injects one
  *  passes the same handle to seedKeys(seed, crypto). */
 export async function createHolder(ports, opts = {}) {
-    const modules = [identityModule(), trustModule(), encounterModule(), membershipModule(), introductionModule(), ...(opts.modules ?? [])];
+    const modules = [identityModule(), trustModule(), encounterModule(), membershipModule(), introductionModule(), messageModule(), ...(opts.modules ?? [])];
     const check = opts.invariants === true
         ? (before, after, op) => {
             const v = commitViolations(before, after, op);
@@ -109,6 +134,10 @@ export async function createHolder(ports, opts = {}) {
         invite: (groupId, contactId, o) => human(MEMBERSHIP_COMMANDS.invite, { groupId, contactId }, o),
         vouchFor: (groupId, member, o) => human(MEMBERSHIP_COMMANDS.vouch, o?.provenance === undefined ? { groupId, member } : { groupId, member, provenance: o.provenance }, o),
         introduce: (requesterId, targetId, o) => human(INTRODUCTION_COMMANDS.introduce, o?.label === undefined ? { requesterId, targetId } : { requesterId, targetId, label: o.label }, o),
+        sendMessage: (contactId, text, o) => human(MESSAGE_COMMANDS.send, o?.replyTo === undefined ? { contactId, text } : { contactId, text, replyTo: o.replyTo }, o),
+        takeMessages: (ids, o) => engine.act(MESSAGE_COMMANDS.take, { ids }, o?.when),
+        block: (contactId, o) => human(MESSAGE_COMMANDS.block, { contactId, blocked: true }, o),
+        unblock: (contactId, o) => human(MESSAGE_COMMANDS.block, { contactId, blocked: false }, o),
         addDevice: (name, o) => human(IDENTITY_COMMANDS.addDevice, { name }, o),
         revokeDevice: (name, o) => human(IDENTITY_COMMANDS.revokeDevice, { name }, o),
         deviceKey: async (name, contextLabel) => deviceKeyOf(await read(), ports.keys, name, contextLabel),
@@ -126,7 +155,13 @@ export async function createHolder(ports, opts = {}) {
         groups: async () => groupsView(await read()),
         profile: async () => profileView(await read()),
         prompts: async () => promptsView(await read()),
+        inbox: async () => inboxView(await read()),
         deliveryStatus: async (x) => deliveryStatusView(await read(), x),
+        pendingTransport: (when) => engine.pendingTransport(when),
+        mayHandOver: (entry, when) => engine.mayHandOver(entry, when),
+        handOver: (entry, when, start) => engine.handOver(entry, when, start),
+        close: () => engine.close(),
+        get closed() { return engine.closed; },
     });
 }
 //# sourceMappingURL=holder-api.js.map

package/dist/holder-api.js.map

@@ -1 +1 @@
-{"version":3,"file":"holder-api.js","sourceRoot":"","sources":["../src/holder-api.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,4EAA4E;AAC5E,wEAAwE;AACxE,qEAAqE;AACrE,4EAA4E;AAC5E,wEAAwE;AACxE,sEAAsE;AACtE,uEAAuE;AACvE,uEAAuE;AACvE,0EAA0E;AAC1E,wIAAwI;AACxI,0EAA0E;AAC1E,wEAAwE;AACxE,yEAAyE;AACzE,yEAAyE;AACzE,wEAAwE;AACxE,oEAAoE;AACpE,EAAE;AACF,sEAAsE;AACtE,uEAAuE;AACvE,0EAA0E;AAC1E,yEAAyE;AACzE,qEAAqE;AACrE,SAAS;AACT,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,gFAAgF;AAChF,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,wEAAwE;AACxE,kEAAkE;AAClE,0DAA0D;AAC1D,EAAE;AACF,qEAAqE;AACrE,uEAAuE;AACvE,yEAAyE;AACzE,8CAA8C;AAC9C,EAAE;AACF,oEAAoE;AACpE,wEAAwE;AACxE,yEAAyE;AACzE,yEAAyE;AACzE,uBAAuB;AACvB,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAG1C,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAEtE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAGlD,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAEpF,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAGhD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AAC7E,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AAC3F,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AAEpF,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,kBAAkB,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AA0GhH;;;wDAGwD;AACxD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAE,KAAkB,EAAE,OAAsB,EAAE;IAC9E,MAAM,OAAO,GAAG,CAAC,cAAc,EAAE,EAAE,WAAW,EAAE,EAAE,eAAe,EAAE,EAAE,gBAAgB,EAAE,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAA;IACvI,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,KAAK,IAAI;QACpC,CAAC,CAAC,CAAC,MAA6B,EAAE,KAA4B,EAAE,EAAY,EAAE,EAAE;YAC5E,MAAM,CAAC,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;YAC7C,IAAI,CAAC,CAAC,MAAM;gBAAE,MAAM,IAAI,UAAU,CAAC,oBAAoB,EAAE,wBAAwB,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;QACvK,CAAC;QACH,CAAC,CAAC,SAAS,CAAA;IACb,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC,aAAa,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAA;IAC1J,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAA;IACxD,4FAA4F;IAC5F,MAAM,KAAK,GAAG,CAAC,OAAe,EAAE,KAAc,EAAE,CAA8B,EAAE,EAAE,CAChF,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,IAAc,EAAE,CAAC,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAA;IACjG,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,EAAE,CAAC,OAAe,EAAE,KAAc,EAAE,IAAY,EAAE,CAAsB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnH,MAAM,EAAE,CAAC,QAAgB,EAAE,MAAoB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9G,KAAK,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACvG,OAAO,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1G,UAAU,EAAE,CAAC,SAAiB,EAAE,MAAe,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7H,QAAQ,EAAE,CAAC,SAAiB,EAAE,GAAe,EAAE,OAAgB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACtJ,aAAa,EAAE,CAAC,SAAiB,EAAE,OAAe,EAAE,OAAgB,EAAE,CAAkB,EAAE,EAAE,CAC1F,KAAK,CAAC,cAAc,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACzE,KAAK,EAAE,CAAC,UAAoB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QACnG,MAAM,EAAE,CAAC,SAAiB,EAAE,CAAgD,EAAE,EAAE,CAC9E,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,EAAE,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QACpI,OAAO,EAAE,CAAC,CAAmB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,IAAc,CAAC;QAC3F,YAAY,EAAE,CAAC,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5E,UAAU,EAAE,CAAC,OAAuB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3F,IAAI,EAAE,CAAC,CAAsC,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAClI,IAAI,EAAE,CAAC,IAAU,EAAE,CAAsC,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1J,eAAe,EAAE,CAAC,IAAU,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACnG,OAAO,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QACvG,UAAU,EAAE,CAAC,CAA8D,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1I,MAAM,EAAE,CAAC,OAAe,EAAE,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAChI,QAAQ,EAAE,CAAC,OAAe,EAAE,MAAc,EAAE,CAA0D,EAAE,EAAE,CACxG,KAAK,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACxI,SAAS,EAAE,CAAC,WAAmB,EAAE,QAAgB,EAAE,CAAuC,EAAE,EAAE,CAC5F,KAAK,CAAC,qBAAqB,CAAC,SAAS,EAAE,CAAC,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC3I,SAAS,EAAE,CAAC,IAAY,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAChG,YAAY,EAAE,CAAC,IAAY,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACtG,SAAS,EAAE,KAAK,EAAE,IAAY,EAAE,YAAoB,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC;QAClH,IAAI,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACzC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;QAC7C,MAAM,EAAE,CAAC,MAAsB,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC;QAC7E,OAAO,EAAE,CAAC,GAAY,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC;QAClE,SAAS,EAAE,CAAC,QAAwB,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;QACnE,QAAQ,EAAE,KAAK,IAA6B,EAAE;YAC5C,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAA;YACjC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAC5E,CAAC;QACD,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC,MAAM,IAAI,EAAE,CAAC;QAChD,OAAO,EAAE,KAAK,EAAE,EAAU,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,EAAE,EAAE,CAAC;QAC5D,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,CAAC;QAC5C,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,CAAC;QAC9C,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,CAAC;QAC9C,cAAc,EAAE,KAAK,EAAE,CAAS,EAAE,EAAE,CAAC,kBAAkB,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;KACzE,CAAC,CAAA;AACJ,CAAC","sourcesContent":["// holder-api — createHolder, the facade over the engine (lib Stage 2,\n// note §4.1, §4.5). Domain modules (identity, encounter, trust, continuity,\n// membership, profile) register with the engine as they graduate; today\n// the facade carries the engine's built-ins, the prompts module, the\n// encounter module (encounter/ceremony.ts: show, scan, the optical leg, the\n// counter-step, the bundle and the credential delivery), the membership\n// module (membership/holder.ts: founding, the prelude and invite, the\n// accept on a group-invite prompt, admission and welcome, evidence and\n// vouches; and the in-library Access over the holder's groups where no\n// Access port is given), the introduction module (introduction/holder.ts:\n// the three roles of Trust §8 and the mediator's start), the identity module (identity-state.ts: device names, the rotation), the trust\n// module (trust/mapping.ts: the Trust act, the class settings, the anchor\n// mapping's issuance and reception, the entry commit; trust/star.ts and\n// trust/group-star.ts: the star and the group star, reconciled on resume\n// and received with their assemblies; trust/entries.ts: merge, split and\n// departure; trust/continuity.ts: the probe, the continuity mapping and\n// the chaining; trust/profile.ts: profile@1) and the modules given.\n//\n// The human acts (note §4.2) are typed methods with an options object\n// `{when, actId}`; actId is required, minted by the app when the human\n// acts, and journaled with the act's result (a repeat with the same actId\n// replays it, another input under it is actid-conflict). They wrap `act`\n// with the trust module's command names, which stays for modules and\n// tests:\n//   trust(contactId, opts)                    trust.set {on: true}      human\n//   untrust(contactId, opts)                  trust.set {on: false}     human\n//   pauseTrust(contactId, paused, opts)       trust.pause               human\n//   setClass(contactId, cls, setting, opts)   trust.setClass            human\n//   setGroupClass(contactId, groupId, setting, opts)  trust.setGroupClass human\n//   merge(contactIds, opts)                   trust.merge               human\n//   depart(contactId, opts{relationshipId?})  trust.depart              human\n//   decide(promptId, choice, opts)            prompt.decide             human\n//   addDevice(name, opts)                     identity.addDevice        human\n//   revokeDevice(name, opts)                  identity.revokeDevice     human\n//   rotateAnchor(opts)                        identity.rotate           human\n//   setProfile({name, image?, text?}, opts)   profile.set               human\n//   show(opts{name?})                         encounter.show            human\n//   scan(card, opts{name?})                   encounter.scan            human\n//   captureSentCard(card, opts)               encounter.capture         human\n//   counter(contactId, opts)                  encounter.counter         human\n//   foundGroup({name, vouchThreshold?, listed?}, opts)  membership.found human\n//   invite(groupId, contactId, opts)          membership.invite         human\n//   vouchFor(groupId, member, opts{provenance?})  membership.vouch      human\n//   introduce(requesterId, targetId, opts)    introduction.introduce    human\n//   recover({when})                           trust.recover          not human\n// and the read deviceKey(name, contextLabel): the device key of a held,\n// unrevoked name under an own anchor context (identity-state.ts).\n// A missing actId is refused at runtime as actid-missing.\n//\n// Reading: the views (views.ts) over one snapshot each, carrying its\n// commitSeq. `subscribe` announces every commit with its commitSeq and\n// events; the app re-reads the views it shows, and a view read after the\n// announcement is at that commitSeq or later.\n//\n// Delivery: `receive(env, when)` runs Delivery §6.2 in the core and\n// dispatches through the task register (receive.ts); `report` takes the\n// adapter's reports (on an ack's digest it marks the ack sent); `resume`\n// re-emits, runs due duties and re-emits unsent acks; `tick` expires and\n// retains (engine.ts).\nimport { createEngine } from './engine.js'\nimport type { CommitListener, EnginePorts, HolderModule } from './engine.js'\nimport type { DeliveryReport } from './ports.js'\nimport { DECIDE, collectDecisions, promptsModule } from './prompts.js'\nimport type { ActResult, ReceiveResult, ResumeResult } from './results.js'\nimport { InfraError } from './results.js'\nimport { commitViolations } from './invariants.js'\nimport type { CommitOp } from './invariants.js'\nimport type { HolderState } from './state.js'\nimport { toOpaque } from './state.js'\nimport { trustModule } from './trust/mapping.js'\nimport { IDENTITY_COMMANDS, deviceKeyOf, identityModule } from './identity-state.js'\nimport type { DeviceKeyResult } from './identity-state.js'\nimport { PROFILE_SET } from './trust/profile.js'\nimport type { ProfileContent } from './profile.js'\nimport type { Dec, Millis, OpaqueHolderState, PromptChoice, Setting, TrustClass } from './state.js'\nimport { TRUST_COMMANDS } from './trust/mapping.js'\nimport { ENTRY_COMMANDS } from './trust/entries.js'\nimport { ENCOUNTER_COMMANDS, encounterModule } from './encounter/ceremony.js'\nimport { MEMBERSHIP_COMMANDS, localAccess, membershipModule } from './membership/holder.js'\nimport { INTRODUCTION_COMMANDS, introductionModule } from './introduction/holder.js'\nimport type { Json } from './core.js'\nimport { contactView, contactsView, deliveryStatusView, groupsView, profileView, promptsView } from './views.js'\nimport type { ContactView, DeliveryStatusView, GroupView, ProfileView, PromptView } from './views.js'\n\n/** The committed state and its commitSeq; the state is opaque (note §4.5):\n *  apps read the views, store tooling may persist it. */\nexport interface HolderSnapshot { commitSeq: Dec, state: OpaqueHolderState }\n\nexport interface HolderOptions {\n  /** domain modules to register beside the built-ins, the prompts and the trust module */\n  modules?: readonly HolderModule[]\n  /** testing mode: check the invariants of invariants.ts on every commit,\n   *  before the store's CAS; a violation throws InfraError\n   *  'invariant-violated' (cause: the violations) and nothing commits */\n  invariants?: boolean\n}\n\n/** The options of a human act (note §4.2): its time and the actId the app\n *  mints when the human acts. */\nexport interface HumanActOptions { when: Millis, actId: string }\n\nexport interface Holder {\n  /** any registered command by name, for modules and tests; apps use the typed acts */\n  act (command: string, input: unknown, when: Millis, opts?: { actId?: string }): Promise<ActResult>\n  /** the human's decision on an open prompt: a human act under the app's\n   *  actId (note §4.2); a missing actId is also refused at runtime */\n  decide (promptId: string, choice: PromptChoice, opts: HumanActOptions): Promise<ActResult>\n  /** the Trust act: the anchor mapping class on toward the contact (2770); human */\n  trust (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** trust withdrawn: the anchor mapping class off (2840, 2850); human */\n  untrust (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** the pause of 5.4: star and blinded group star off, or back to default; human */\n  pauseTrust (contactId: string, paused: boolean, opts: HumanActOptions): Promise<ActResult>\n  /** one class's setting toward the contact (2780, 2810); human */\n  setClass (contactId: string, cls: TrustClass, setting: Setting, opts: HumanActOptions): Promise<ActResult>\n  /** the sealed group star's setting for one group toward the contact (2830); human */\n  setGroupClass (contactId: string, groupId: string, setting: Setting, opts: HumanActOptions): Promise<ActResult>\n  /** the manual merge (6640): at most one of them holds an entry; human */\n  merge (contactIds: string[], opts: HumanActOptions): Promise<ActResult>\n  /** departure (2260): the entry, the relationships of an alias, or one\n   *  relationship (relationshipId); human */\n  depart (contactId: string, opts: HumanActOptions & { relationshipId?: string }): Promise<ActResult>\n  /** 2240: entries re-commit from verified mappings recovered without them; not human */\n  recover (opts: { when: Millis }): Promise<ActResult>\n  /** a device name into the register before any key derived from it is presented (Identity §5.5); human */\n  addDevice (name: string, opts: HumanActOptions): Promise<ActResult>\n  /** the name's revocation mark: never removed, the name never given again (Identity §5.5); human */\n  revokeDevice (name: string, opts: HumanActOptions): Promise<ActResult>\n  /** the community anchor's rotation (Identity §5.4): step 1 (label,\n   *  closure, 6596 decided) when none runs, else step 2 of the running one\n   *  through the Log port; resume carries step 2 on its own (identity-state.ts) */\n  rotateAnchor (opts: HumanActOptions): Promise<ActResult>\n  /** the own profile (Trust 6b): validated (6430, 6435, 6475), the next\n   *  revision of the one counter (6450), delivered on every relationship\n   *  the profile class is on for (6455); human */\n  setProfile (content: ProfileContent, opts: HumanActOptions): Promise<ActResult>\n  /** a displayed card with a fresh own challenge under a fresh pair\n   *  anchor (Encounter 5.3, 4.4): the event encounter.shown carries the\n   *  card to display; `name` the card's display name (default: the own\n   *  profile's); human */\n  show (opts: HumanActOptions & { name?: string }): Promise<ActResult>\n  /** the scanner's step on a displayed card (Encounter 5.8): the record,\n   *  the fresh tuple, the bundle; encounter.scanned carries the sent card\n   *  for the optical leg; human */\n  scan (card: Json, opts: HumanActOptions & { name?: string }): Promise<ActResult>\n  /** the optical leg (Encounter 5.8, 5710): a sent card shown by the scanner; human */\n  captureSentCard (card: Json, opts: HumanActOptions): Promise<ActResult>\n  /** the counter-step toward a contact met as displayer (Encounter 5.8 step 4); human */\n  counter (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** a group founded under a fresh pair anchor (Access 3.4.1); its rule\n   *  vouchThreshold (default \"1\") is group state; event group.founded; human */\n  foundGroup (group: { name: string, vouchThreshold?: string, listed?: boolean }, opts: HumanActOptions): Promise<ActResult>\n  /** invite a contact into a group: the prelude, then the invite on its\n   *  answer (Membership 1.2, 3.1); the contact decides on a group-invite\n   *  prompt; human */\n  invite (groupId: string, contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** the mediator's act (Trust §8, this library's start of it): the\n   *  requester gets an offer naming the target by an opaque designator and\n   *  at most the `label` the human types here, with the mediator's\n   *  ack-delay declaration; the requester decides on an\n   *  `introduction` prompt, the target on another; human */\n  introduce (requesterId: string, targetId: string, opts: HumanActOptions & { label?: string }): Promise<ActResult>\n  /** a vouch@2 for a member anchor whose consent pair this holder holds\n   *  (Access 5.3, Membership 3.4); human */\n  vouchFor (groupId: string, member: string, opts: HumanActOptions & { provenance?: 'met' | 'introduced' }): Promise<ActResult>\n  /** the device key of a held, unrevoked device name under an own anchor\n   *  context (Identity §5.5); reads, changes nothing */\n  deviceKey (name: string, contextLabel: string): Promise<DeviceKeyResult>\n  tick (when: Millis): Promise<ActResult>\n  resume (when: Millis): Promise<ResumeResult>\n  report (report: DeliveryReport, when: Millis): Promise<ActResult>\n  /** an arriving envelope, as the app's transport delivered it (non-human,\n   *  no actId; idempotent over the document digest) */\n  receive (env: unknown, when: Millis): Promise<ReceiveResult>\n  /** after every commit: its commitSeq and events, the cue to re-read the views */\n  subscribe (listener: CommitListener): () => void\n  snapshot (): Promise<HolderSnapshot>\n  contacts (): Promise<ContactView[]>\n  /** by entry id or alias */\n  contact (id: string): Promise<ContactView | undefined>\n  groups (): Promise<GroupView[]>\n  profile (): Promise<ProfileView>\n  prompts (): Promise<PromptView[]>\n  /** by document digest or threadId */\n  deliveryStatus (digestOrThreadId: string): Promise<DeliveryStatusView>\n}\n\n/** A holder over its ports: `{store, keys, entropy?, log?, access?, retry?, crypto?}`.\n *  The crypto handle (default globalThis.crypto) is resolved and probed\n *  here and also feeds the default entropy; an app that injects one\n *  passes the same handle to seedKeys(seed, crypto). */\nexport async function createHolder (ports: EnginePorts, opts: HolderOptions = {}): Promise<Holder> {\n  const modules = [identityModule(), trustModule(), encounterModule(), membershipModule(), introductionModule(), ...(opts.modules ?? [])]\n  const check = opts.invariants === true\n    ? (before: Readonly<HolderState>, after: Readonly<HolderState>, op: CommitOp) => {\n        const v = commitViolations(before, after, op)\n        if (v.length) throw new InfraError('invariant-violated', `invariants broken by ${op.kind}: ${v.map((x) => `[${x.invariant}] ${x.detail}`).join('; ')}`, { cause: v })\n      }\n    : undefined\n  const engine = await createEngine(ports, [promptsModule(collectDecisions(modules)), ...modules], { ...(check ? { check } : {}), accessFrom: localAccess })\n  const read = async () => (await engine.snapshot()).state\n  /** a human act: `when` and actId from the options, a missing actId refused by the engine */\n  const human = (command: string, input: unknown, o: HumanActOptions | undefined) =>\n    engine.act(command, input, o?.when as Millis, o?.actId === undefined ? {} : { actId: o.actId })\n  return Object.freeze({\n    act: (command: string, input: unknown, when: Millis, o?: { actId?: string }) => engine.act(command, input, when, o),\n    decide: (promptId: string, choice: PromptChoice, o: HumanActOptions) => human(DECIDE, { promptId, choice }, o),\n    trust: (contactId: string, o: HumanActOptions) => human(TRUST_COMMANDS.set, { contactId, on: true }, o),\n    untrust: (contactId: string, o: HumanActOptions) => human(TRUST_COMMANDS.set, { contactId, on: false }, o),\n    pauseTrust: (contactId: string, paused: boolean, o: HumanActOptions) => human(TRUST_COMMANDS.pause, { contactId, paused }, o),\n    setClass: (contactId: string, cls: TrustClass, setting: Setting, o: HumanActOptions) => human(TRUST_COMMANDS.setClass, { contactId, cls, setting }, o),\n    setGroupClass: (contactId: string, groupId: string, setting: Setting, o: HumanActOptions) =>\n      human(TRUST_COMMANDS.setGroupClass, { contactId, groupId, setting }, o),\n    merge: (contactIds: string[], o: HumanActOptions) => human(ENTRY_COMMANDS.merge, { contactIds }, o),\n    depart: (contactId: string, o: HumanActOptions & { relationshipId?: string }) =>\n      human(ENTRY_COMMANDS.depart, o?.relationshipId === undefined ? { contactId } : { contactId, relationshipId: o.relationshipId }, o),\n    recover: (o: { when: Millis }) => engine.act(TRUST_COMMANDS.recover, {}, o?.when as Millis),\n    rotateAnchor: (o: HumanActOptions) => human(IDENTITY_COMMANDS.rotate, {}, o),\n    setProfile: (content: ProfileContent, o: HumanActOptions) => human(PROFILE_SET, content, o),\n    show: (o: HumanActOptions & { name?: string }) => human(ENCOUNTER_COMMANDS.show, o?.name === undefined ? {} : { name: o.name }, o),\n    scan: (card: Json, o: HumanActOptions & { name?: string }) => human(ENCOUNTER_COMMANDS.scan, o?.name === undefined ? { card } : { card, name: o.name }, o),\n    captureSentCard: (card: Json, o: HumanActOptions) => human(ENCOUNTER_COMMANDS.capture, { card }, o),\n    counter: (contactId: string, o: HumanActOptions) => human(ENCOUNTER_COMMANDS.counter, { contactId }, o),\n    foundGroup: (g: { name: string, vouchThreshold?: string, listed?: boolean }, o: HumanActOptions) => human(MEMBERSHIP_COMMANDS.found, g, o),\n    invite: (groupId: string, contactId: string, o: HumanActOptions) => human(MEMBERSHIP_COMMANDS.invite, { groupId, contactId }, o),\n    vouchFor: (groupId: string, member: string, o: HumanActOptions & { provenance?: 'met' | 'introduced' }) =>\n      human(MEMBERSHIP_COMMANDS.vouch, o?.provenance === undefined ? { groupId, member } : { groupId, member, provenance: o.provenance }, o),\n    introduce: (requesterId: string, targetId: string, o: HumanActOptions & { label?: string }) =>\n      human(INTRODUCTION_COMMANDS.introduce, o?.label === undefined ? { requesterId, targetId } : { requesterId, targetId, label: o.label }, o),\n    addDevice: (name: string, o: HumanActOptions) => human(IDENTITY_COMMANDS.addDevice, { name }, o),\n    revokeDevice: (name: string, o: HumanActOptions) => human(IDENTITY_COMMANDS.revokeDevice, { name }, o),\n    deviceKey: async (name: string, contextLabel: string) => deviceKeyOf(await read(), ports.keys, name, contextLabel),\n    tick: (when: Millis) => engine.tick(when),\n    resume: (when: Millis) => engine.resume(when),\n    report: (report: DeliveryReport, when: Millis) => engine.report(report, when),\n    receive: (env: unknown, when: Millis) => engine.receive(env, when),\n    subscribe: (listener: CommitListener) => engine.subscribe(listener),\n    snapshot: async (): Promise<HolderSnapshot> => {\n      const s = await engine.snapshot()\n      return Object.freeze({ commitSeq: s.commitSeq, state: toOpaque(s.state) })\n    },\n    contacts: async () => contactsView(await read()),\n    contact: async (id: string) => contactView(await read(), id),\n    groups: async () => groupsView(await read()),\n    profile: async () => profileView(await read()),\n    prompts: async () => promptsView(await read()),\n    deliveryStatus: async (x: string) => deliveryStatusView(await read(), x),\n  })\n}\n"]}
+{"version":3,"file":"holder-api.js","sourceRoot":"","sources":["../src/holder-api.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,4EAA4E;AAC5E,wEAAwE;AACxE,qEAAqE;AACrE,4EAA4E;AAC5E,wEAAwE;AACxE,sEAAsE;AACtE,uEAAuE;AACvE,uEAAuE;AACvE,0EAA0E;AAC1E,wIAAwI;AACxI,0EAA0E;AAC1E,wEAAwE;AACxE,yEAAyE;AACzE,yEAAyE;AACzE,wEAAwE;AACxE,oEAAoE;AACpE,EAAE;AACF,sEAAsE;AACtE,uEAAuE;AACvE,0EAA0E;AAC1E,yEAAyE;AACzE,qEAAqE;AACrE,SAAS;AACT,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,gFAAgF;AAChF,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,+EAA+E;AAC/E,8EAA8E;AAC9E,8EAA8E;AAC9E,8EAA8E;AAC9E,6EAA6E;AAC7E,oFAAoF;AACpF,oFAAoF;AACpF,+EAA+E;AAC/E,+EAA+E;AAC/E,wEAAwE;AACxE,kEAAkE;AAClE,0DAA0D;AAC1D,EAAE;AACF,qEAAqE;AACrE,uEAAuE;AACvE,yEAAyE;AACzE,8CAA8C;AAC9C,EAAE;AACF,oEAAoE;AACpE,wEAAwE;AACxE,wEAAwE;AACxE,wEAAwE;AACxE,0EAA0E;AAC1E,0CAA0C;AAC1C,EAAE;AACF,wEAAwE;AACxE,wEAAwE;AACxE,2EAA2E;AAC3E,uEAAuE;AACvE,yEAAyE;AACzE,mEAAmE;AACnE,yEAAyE;AACzE,qEAAqE;AACrE,yEAAyE;AACzE,2EAA2E;AAC3E,4EAA4E;AAC5E,yFAAyF;AACzF,8EAA8E;AAC9E,0EAA0E;AAC1E,+EAA+E;AAC/E,iEAAiE;AACjE,uEAAuE;AACvE,6BAA6B;AAC7B,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAG1C,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAEtE,OAAO,EAAE,UAAU,EAAE,MAAM,cAAc,CAAA;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAGlD,OAAO,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AACrC,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChD,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAEpF,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAGhD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACnD,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AAC7E,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAA;AAC3F,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAA;AACpF,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAErE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,kBAAkB,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAgJ3H;;;wDAGwD;AACxD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAE,KAAkB,EAAE,OAAsB,EAAE;IAC9E,MAAM,OAAO,GAAG,CAAC,cAAc,EAAE,EAAE,WAAW,EAAE,EAAE,eAAe,EAAE,EAAE,gBAAgB,EAAE,EAAE,kBAAkB,EAAE,EAAE,aAAa,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAA;IACxJ,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,KAAK,IAAI;QACpC,CAAC,CAAC,CAAC,MAA6B,EAAE,KAA4B,EAAE,EAAY,EAAE,EAAE;YAC5E,MAAM,CAAC,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,CAAA;YAC7C,IAAI,CAAC,CAAC,MAAM;gBAAE,MAAM,IAAI,UAAU,CAAC,oBAAoB,EAAE,wBAAwB,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA;QACvK,CAAC;QACH,CAAC,CAAC,SAAS,CAAA;IACb,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC,aAAa,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAA;IAC1J,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAA;IACxD,4FAA4F;IAC5F,MAAM,KAAK,GAAG,CAAC,OAAe,EAAE,KAAc,EAAE,CAA8B,EAAE,EAAE,CAChF,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,IAAc,EAAE,CAAC,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAA;IACjG,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,EAAE,CAAC,OAAe,EAAE,KAAc,EAAE,IAAY,EAAE,CAAsB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACnH,MAAM,EAAE,CAAC,QAAgB,EAAE,MAAoB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC9G,KAAK,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACvG,OAAO,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1G,UAAU,EAAE,CAAC,SAAiB,EAAE,MAAe,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7H,QAAQ,EAAE,CAAC,SAAiB,EAAE,GAAe,EAAE,OAAgB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACtJ,aAAa,EAAE,CAAC,SAAiB,EAAE,OAAe,EAAE,OAAgB,EAAE,CAAkB,EAAE,EAAE,CAC1F,KAAK,CAAC,cAAc,CAAC,aAAa,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACzE,KAAK,EAAE,CAAC,UAAoB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;QACnG,MAAM,EAAE,CAAC,SAAiB,EAAE,CAAgD,EAAE,EAAE,CAC9E,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,CAAC,EAAE,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QACpI,OAAO,EAAE,CAAC,CAAmB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,IAAc,CAAC;QAC3F,YAAY,EAAE,CAAC,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5E,UAAU,EAAE,CAAC,OAAuB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3F,IAAI,EAAE,CAAC,CAAsC,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAClI,IAAI,EAAE,CAAC,IAAU,EAAE,CAAsC,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC1J,eAAe,EAAE,CAAC,IAAU,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACnG,OAAO,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QACvG,UAAU,EAAE,CAAC,CAA8D,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1I,MAAM,EAAE,CAAC,OAAe,EAAE,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;QAChI,QAAQ,EAAE,CAAC,OAAe,EAAE,MAAc,EAAE,CAA0D,EAAE,EAAE,CACxG,KAAK,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QACxI,SAAS,EAAE,CAAC,WAAmB,EAAE,QAAgB,EAAE,CAAuC,EAAE,EAAE,CAC5F,KAAK,CAAC,qBAAqB,CAAC,SAAS,EAAE,CAAC,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC3I,WAAW,EAAE,CAAC,SAAiB,EAAE,IAAY,EAAE,CAAyC,EAAE,EAAE,CAC1F,KAAK,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC3H,YAAY,EAAE,CAAC,GAAa,EAAE,CAAmB,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,IAAc,CAAC;QACnH,KAAK,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAChH,OAAO,EAAE,CAAC,SAAiB,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,KAAK,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACnH,SAAS,EAAE,CAAC,IAAY,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAChG,YAAY,EAAE,CAAC,IAAY,EAAE,CAAkB,EAAE,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QACtG,SAAS,EAAE,KAAK,EAAE,IAAY,EAAE,YAAoB,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC;QAClH,IAAI,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QACzC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;QAC7C,MAAM,EAAE,CAAC,MAAsB,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC;QAC7E,OAAO,EAAE,CAAC,GAAY,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC;QAClE,SAAS,EAAE,CAAC,QAAwB,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC;QACnE,QAAQ,EAAE,KAAK,IAA6B,EAAE;YAC5C,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAA;YACjC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QAC5E,CAAC;QACD,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,YAAY,CAAC,MAAM,IAAI,EAAE,CAAC;QAChD,OAAO,EAAE,KAAK,EAAE,EAAU,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,EAAE,EAAE,CAAC;QAC5D,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,IAAI,EAAE,CAAC;QAC5C,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,CAAC;QAC9C,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,MAAM,IAAI,EAAE,CAAC;QAC9C,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC;QAC1C,cAAc,EAAE,KAAK,EAAE,CAAS,EAAE,EAAE,CAAC,kBAAkB,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;QACxE,gBAAgB,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC;QACjE,WAAW,EAAE,CAAC,KAAqB,EAAE,IAAY,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC;QACrF,QAAQ,EAAE,CAAC,KAAqB,EAAE,IAAY,EAAE,KAAoB,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC;QAC5G,KAAK,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE;QAC3B,IAAI,MAAM,KAAM,OAAO,MAAM,CAAC,MAAM,CAAA,CAAC,CAAC;KACvC,CAAC,CAAA;AACJ,CAAC","sourcesContent":["// holder-api — createHolder, the facade over the engine (lib Stage 2,\n// note §4.1, §4.5). Domain modules (identity, encounter, trust, continuity,\n// membership, profile) register with the engine as they graduate; today\n// the facade carries the engine's built-ins, the prompts module, the\n// encounter module (encounter/ceremony.ts: show, scan, the optical leg, the\n// counter-step, the bundle and the credential delivery), the membership\n// module (membership/holder.ts: founding, the prelude and invite, the\n// accept on a group-invite prompt, admission and welcome, evidence and\n// vouches; and the in-library Access over the holder's groups where no\n// Access port is given), the introduction module (introduction/holder.ts:\n// the three roles of Trust §8 and the mediator's start), the identity module (identity-state.ts: device names, the rotation), the trust\n// module (trust/mapping.ts: the Trust act, the class settings, the anchor\n// mapping's issuance and reception, the entry commit; trust/star.ts and\n// trust/group-star.ts: the star and the group star, reconciled on resume\n// and received with their assemblies; trust/entries.ts: merge, split and\n// departure; trust/continuity.ts: the probe, the continuity mapping and\n// the chaining; trust/profile.ts: profile@1) and the modules given.\n//\n// The human acts (note §4.2) are typed methods with an options object\n// `{when, actId}`; actId is required, minted by the app when the human\n// acts, and journaled with the act's result (a repeat with the same actId\n// replays it, another input under it is actid-conflict). They wrap `act`\n// with the trust module's command names, which stays for modules and\n// tests:\n//   trust(contactId, opts)                    trust.set {on: true}      human\n//   untrust(contactId, opts)                  trust.set {on: false}     human\n//   pauseTrust(contactId, paused, opts)       trust.pause               human\n//   setClass(contactId, cls, setting, opts)   trust.setClass            human\n//   setGroupClass(contactId, groupId, setting, opts)  trust.setGroupClass human\n//   merge(contactIds, opts)                   trust.merge               human\n//   depart(contactId, opts{relationshipId?})  trust.depart              human\n//   decide(promptId, choice, opts)            prompt.decide             human\n//   addDevice(name, opts)                     identity.addDevice        human\n//   revokeDevice(name, opts)                  identity.revokeDevice     human\n//   rotateAnchor(opts)                        identity.rotate           human\n//   setProfile({name, image?, text?}, opts)   profile.set               human\n//   show(opts{name?})                         encounter.show            human\n//   scan(card, opts{name?})                   encounter.scan            human\n//   captureSentCard(card, opts)               encounter.capture         human\n//   counter(contactId, opts)                  encounter.counter         human\n//   foundGroup({name, vouchThreshold?, listed?}, opts)  membership.found human\n//   invite(groupId, contactId, opts)          membership.invite         human\n//   vouchFor(groupId, member, opts{provenance?})  membership.vouch      human\n//   introduce(requesterId, targetId, opts)    introduction.introduce    human\n//   sendMessage(contactId, text, opts{replyTo?})  message.send         human\n//   block(contactId, opts)                    message.block {blocked: true}   human\n//   unblock(contactId, opts)                  message.block {blocked: false}  human\n//   recover({when})                           trust.recover          not human\n//   takeMessages(ids, {when})                 message.take           not human\n// and the read deviceKey(name, contextLabel): the device key of a held,\n// unrevoked name under an own anchor context (identity-state.ts).\n// A missing actId is refused at runtime as actid-missing.\n//\n// Reading: the views (views.ts) over one snapshot each, carrying its\n// commitSeq. `subscribe` announces every commit with its commitSeq and\n// events; the app re-reads the views it shows, and a view read after the\n// announcement is at that commitSeq or later.\n//\n// Delivery: `receive(env, when)` runs Delivery §6.2 in the core and\n// dispatches through the task register (receive.ts); `report` takes the\n// adapter's reports (on an ack's digest: accepted or delivered marks it\n// sent, failed gives it up, awaiting-transport records that the adapter\n// holds it); `resume` re-emits, runs due duties and re-emits unsent acks;\n// `tick` expires and retains (engine.ts).\n//\n// Custody (Delivery 0.83 RLTP-DEL-6120 to 6135): the holder keeps every\n// outbound document until a service takes it or the holder gives it up,\n// across a lock and the end of a process. One createHolder is one opening.\n// After its first resume, `pendingTransport(when)` names what is to be\n// handed over: the outbox items neither terminal nor accepted (held ones\n// included) and the unsent acks, each with its envelope, its first\n// submission and its deadline, none past it. A transport hands over only\n// such entries, through `handOver(entry, when, start)`: the check of\n// `mayHandOver` and the start of the deposit in one step of the holder's\n// queue, true only for an entry this opening issued that is still pending,\n// unchanged, before its deadline. A duplicate's stored ack past its retries\n// appears once as a `resend` entry (Delivery RLTP-DEL-6330). A document missing from the\n// view is no longer to be sent. `await close()` ends the opening at a lock or\n// the end of a process (resolved once the running operation finished, the\n// moment the next opening may start): every later call rejects with InfraError\n// 'closed', mayHandOver answers false, and nothing issued before\n// authorizes anything; the next opening is a new createHolder over the\n// same store, resumed first.\nimport { createEngine } from './engine.js'\nimport type { CommitListener, EnginePorts, HolderModule, TransportEntry, TransportRefusal, TransportView } from './engine.js'\nimport type { DeliveryReport } from './ports.js'\nimport { DECIDE, collectDecisions, promptsModule } from './prompts.js'\nimport type { ActResult, ReceiveResult, ResumeResult } from './results.js'\nimport { InfraError } from './results.js'\nimport { commitViolations } from './invariants.js'\nimport type { CommitOp } from './invariants.js'\nimport type { HolderState } from './state.js'\nimport { toOpaque } from './state.js'\nimport { trustModule } from './trust/mapping.js'\nimport { IDENTITY_COMMANDS, deviceKeyOf, identityModule } from './identity-state.js'\nimport type { DeviceKeyResult } from './identity-state.js'\nimport { PROFILE_SET } from './trust/profile.js'\nimport type { ProfileContent } from './profile.js'\nimport type { Dec, Millis, OpaqueHolderState, PromptChoice, Setting, TrustClass } from './state.js'\nimport { TRUST_COMMANDS } from './trust/mapping.js'\nimport { ENTRY_COMMANDS } from './trust/entries.js'\nimport { ENCOUNTER_COMMANDS, encounterModule } from './encounter/ceremony.js'\nimport { MEMBERSHIP_COMMANDS, localAccess, membershipModule } from './membership/holder.js'\nimport { INTRODUCTION_COMMANDS, introductionModule } from './introduction/holder.js'\nimport { MESSAGE_COMMANDS, messageModule } from './message/holder.js'\nimport type { Json } from './core.js'\nimport { contactView, contactsView, deliveryStatusView, groupsView, inboxView, profileView, promptsView } from './views.js'\nimport type { ContactView, DeliveryStatusView, GroupView, InboxMessageView, ProfileView, PromptView } from './views.js'\n\n/** The committed state and its commitSeq; the state is opaque (note §4.5):\n *  apps read the views, store tooling may persist it. */\nexport interface HolderSnapshot { commitSeq: Dec, state: OpaqueHolderState }\n\nexport interface HolderOptions {\n  /** domain modules to register beside the built-ins, the prompts and the trust module */\n  modules?: readonly HolderModule[]\n  /** testing mode: check the invariants of invariants.ts on every commit,\n   *  before the store's CAS; a violation throws InfraError\n   *  'invariant-violated' (cause: the violations) and nothing commits */\n  invariants?: boolean\n}\n\n/** The options of a human act (note §4.2): its time and the actId the app\n *  mints when the human acts. */\nexport interface HumanActOptions { when: Millis, actId: string }\n\nexport interface Holder {\n  /** any registered command by name, for modules and tests; apps use the typed acts */\n  act (command: string, input: unknown, when: Millis, opts?: { actId?: string }): Promise<ActResult>\n  /** the human's decision on an open prompt: a human act under the app's\n   *  actId (note §4.2); a missing actId is also refused at runtime */\n  decide (promptId: string, choice: PromptChoice, opts: HumanActOptions): Promise<ActResult>\n  /** the Trust act: the anchor mapping class on toward the contact (2770); human */\n  trust (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** trust withdrawn: the anchor mapping class off (2840, 2850); human */\n  untrust (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** the pause of 5.4: star and blinded group star off, or back to default; human */\n  pauseTrust (contactId: string, paused: boolean, opts: HumanActOptions): Promise<ActResult>\n  /** one class's setting toward the contact (2780, 2810); human */\n  setClass (contactId: string, cls: TrustClass, setting: Setting, opts: HumanActOptions): Promise<ActResult>\n  /** the sealed group star's setting for one group toward the contact (2830); human */\n  setGroupClass (contactId: string, groupId: string, setting: Setting, opts: HumanActOptions): Promise<ActResult>\n  /** the manual merge (6640): at most one of them holds an entry; human */\n  merge (contactIds: string[], opts: HumanActOptions): Promise<ActResult>\n  /** departure (2260): the entry, the relationships of an alias, or one\n   *  relationship (relationshipId); human */\n  depart (contactId: string, opts: HumanActOptions & { relationshipId?: string }): Promise<ActResult>\n  /** 2240: entries re-commit from verified mappings recovered without them; not human */\n  recover (opts: { when: Millis }): Promise<ActResult>\n  /** a device name into the register before any key derived from it is presented (Identity §5.5); human */\n  addDevice (name: string, opts: HumanActOptions): Promise<ActResult>\n  /** the name's revocation mark: never removed, the name never given again (Identity §5.5); human */\n  revokeDevice (name: string, opts: HumanActOptions): Promise<ActResult>\n  /** the community anchor's rotation (Identity §5.4): step 1 (label,\n   *  closure, 6596 decided) when none runs, else step 2 of the running one\n   *  through the Log port; resume carries step 2 on its own (identity-state.ts) */\n  rotateAnchor (opts: HumanActOptions): Promise<ActResult>\n  /** the own profile (Trust 6b): validated (6430, 6435, 6475), the next\n   *  revision of the one counter (6450), delivered on every relationship\n   *  the profile class is on for (6455); human */\n  setProfile (content: ProfileContent, opts: HumanActOptions): Promise<ActResult>\n  /** a displayed card with a fresh own challenge under a fresh pair\n   *  anchor (Encounter 5.3, 4.4): the event encounter.shown carries the\n   *  card to display; `name` the card's display name (default: the own\n   *  profile's); human */\n  show (opts: HumanActOptions & { name?: string }): Promise<ActResult>\n  /** the scanner's step on a displayed card (Encounter 5.8): the record,\n   *  the fresh tuple, the bundle; encounter.scanned carries the sent card\n   *  for the optical leg; human */\n  scan (card: Json, opts: HumanActOptions & { name?: string }): Promise<ActResult>\n  /** the optical leg (Encounter 5.8, 5710): a sent card shown by the scanner; human */\n  captureSentCard (card: Json, opts: HumanActOptions): Promise<ActResult>\n  /** the counter-step toward a contact met as displayer (Encounter 5.8 step 4); human */\n  counter (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** a group founded under a fresh pair anchor (Access 3.4.1); its rule\n   *  vouchThreshold (default \"1\") is group state; event group.founded; human */\n  foundGroup (group: { name: string, vouchThreshold?: string, listed?: boolean }, opts: HumanActOptions): Promise<ActResult>\n  /** invite a contact into a group: the prelude, then the invite on its\n   *  answer (Membership 1.2, 3.1); the contact decides on a group-invite\n   *  prompt; human */\n  invite (groupId: string, contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** the mediator's act (Trust §8, this library's start of it): the\n   *  requester gets an offer naming the target by an opaque designator and\n   *  at most the `label` the human types here, with the mediator's\n   *  ack-delay declaration; the requester decides on an\n   *  `introduction` prompt, the target on another; human */\n  introduce (requesterId: string, targetId: string, opts: HumanActOptions & { label?: string }): Promise<ActResult>\n  /** a vouch@2 for a member anchor whose consent pair this holder holds\n   *  (Access 5.3, Membership 3.4); human */\n  vouchFor (groupId: string, member: string, opts: HumanActOptions & { provenance?: 'met' | 'introduced' }): Promise<ActResult>\n  /** a text message to the contact (Message Tasks 3, 5): 1 to 4096 code\n   *  points, replyTo the mid of an earlier message of the relationship. It\n   *  goes on a ready, unblocked relationship (canMessage); otherwise refused\n   *  as not-ready, blocked or no-own-channel, and the app keeps it unsent.\n   *  Event message.sent {mid, digest}; deliveryStatus(digest) is its sender\n   *  status. Undelivered, it ends as failed(expired-by-adapter-policy) at\n   *  the retry horizon (P7D by default, P90D at most), before its sender\n   *  lifetime sentAt + P179D: failed(task-expired) is not reached for a\n   *  message under any horizon the engine admits; human */\n  sendMessage (contactId: string, text: string, opts: HumanActOptions & { replyTo?: string }): Promise<ActResult>\n  /** the inbox entries the app has durably taken over leave the inbox\n   *  (4420); their completion record stays (4350); not human */\n  takeMessages (ids: string[], opts: { when: Millis }): Promise<ActResult>\n  /** the block (Message Tasks 6): set on every relationship of the\n   *  contact's entry. Messages, invitations and the holder's own offers on\n   *  them stop; the protocol steps owed continue; the contact observes\n   *  nothing it would not without the block. Event contact.blocked; human */\n  block (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** the block cleared on every relationship of the entry: nothing that\n   *  was discarded under it reappears (6510); human */\n  unblock (contactId: string, opts: HumanActOptions): Promise<ActResult>\n  /** the device key of a held, unrevoked device name under an own anchor\n   *  context (Identity §5.5); reads, changes nothing */\n  deviceKey (name: string, contextLabel: string): Promise<DeviceKeyResult>\n  tick (when: Millis): Promise<ActResult>\n  resume (when: Millis): Promise<ResumeResult>\n  report (report: DeliveryReport, when: Millis): Promise<ActResult>\n  /** an arriving envelope, as the app's transport delivered it (non-human,\n   *  no actId; idempotent over the document digest) */\n  receive (env: unknown, when: Millis): Promise<ReceiveResult>\n  /** after every commit: its commitSeq and events, the cue to re-read the views */\n  subscribe (listener: CommitListener): () => void\n  snapshot (): Promise<HolderSnapshot>\n  contacts (): Promise<ContactView[]>\n  /** by entry id or alias */\n  contact (id: string): Promise<ContactView | undefined>\n  groups (): Promise<GroupView[]>\n  profile (): Promise<ProfileView>\n  prompts (): Promise<PromptView[]>\n  /** the messages accepted and not yet taken over (Message Tasks 4.5),\n   *  by display time; event message.received announces each */\n  inbox (): Promise<InboxMessageView[]>\n  /** by document digest or threadId */\n  deliveryStatus (digestOrThreadId: string): Promise<DeliveryStatusView>\n  /** what the holder keeps for transport at `when`, after this opening's\n   *  first completed resume (else `{ok: false, code: 'not-resumed'}`) */\n  pendingTransport (when: Millis): Promise<TransportView | TransportRefusal>\n  /** right before a hand-over: whether this opening's `entry` may go now */\n  mayHandOver (entry: TransportEntry, when: Millis): Promise<boolean>\n  /** the hand-over: the same check, then `start()` (which starts the\n   *  deposit synchronously and says whether it did) inside the holder's\n   *  queue; true when both said yes */\n  handOver (entry: TransportEntry, when: Millis, start: () => boolean): Promise<boolean>\n  /** ends this opening (a lock, the end of a process); resolves once the\n   *  operation running at the call has finished: after that the opening\n   *  commits nothing more, and the next opening may start */\n  close (): Promise<void>\n  readonly closed: boolean\n}\n\n/** A holder over its ports: `{store, keys, entropy?, log?, access?, retry?, crypto?}`.\n *  The crypto handle (default globalThis.crypto) is resolved and probed\n *  here and also feeds the default entropy; an app that injects one\n *  passes the same handle to seedKeys(seed, crypto). */\nexport async function createHolder (ports: EnginePorts, opts: HolderOptions = {}): Promise<Holder> {\n  const modules = [identityModule(), trustModule(), encounterModule(), membershipModule(), introductionModule(), messageModule(), ...(opts.modules ?? [])]\n  const check = opts.invariants === true\n    ? (before: Readonly<HolderState>, after: Readonly<HolderState>, op: CommitOp) => {\n        const v = commitViolations(before, after, op)\n        if (v.length) throw new InfraError('invariant-violated', `invariants broken by ${op.kind}: ${v.map((x) => `[${x.invariant}] ${x.detail}`).join('; ')}`, { cause: v })\n      }\n    : undefined\n  const engine = await createEngine(ports, [promptsModule(collectDecisions(modules)), ...modules], { ...(check ? { check } : {}), accessFrom: localAccess })\n  const read = async () => (await engine.snapshot()).state\n  /** a human act: `when` and actId from the options, a missing actId refused by the engine */\n  const human = (command: string, input: unknown, o: HumanActOptions | undefined) =>\n    engine.act(command, input, o?.when as Millis, o?.actId === undefined ? {} : { actId: o.actId })\n  return Object.freeze({\n    act: (command: string, input: unknown, when: Millis, o?: { actId?: string }) => engine.act(command, input, when, o),\n    decide: (promptId: string, choice: PromptChoice, o: HumanActOptions) => human(DECIDE, { promptId, choice }, o),\n    trust: (contactId: string, o: HumanActOptions) => human(TRUST_COMMANDS.set, { contactId, on: true }, o),\n    untrust: (contactId: string, o: HumanActOptions) => human(TRUST_COMMANDS.set, { contactId, on: false }, o),\n    pauseTrust: (contactId: string, paused: boolean, o: HumanActOptions) => human(TRUST_COMMANDS.pause, { contactId, paused }, o),\n    setClass: (contactId: string, cls: TrustClass, setting: Setting, o: HumanActOptions) => human(TRUST_COMMANDS.setClass, { contactId, cls, setting }, o),\n    setGroupClass: (contactId: string, groupId: string, setting: Setting, o: HumanActOptions) =>\n      human(TRUST_COMMANDS.setGroupClass, { contactId, groupId, setting }, o),\n    merge: (contactIds: string[], o: HumanActOptions) => human(ENTRY_COMMANDS.merge, { contactIds }, o),\n    depart: (contactId: string, o: HumanActOptions & { relationshipId?: string }) =>\n      human(ENTRY_COMMANDS.depart, o?.relationshipId === undefined ? { contactId } : { contactId, relationshipId: o.relationshipId }, o),\n    recover: (o: { when: Millis }) => engine.act(TRUST_COMMANDS.recover, {}, o?.when as Millis),\n    rotateAnchor: (o: HumanActOptions) => human(IDENTITY_COMMANDS.rotate, {}, o),\n    setProfile: (content: ProfileContent, o: HumanActOptions) => human(PROFILE_SET, content, o),\n    show: (o: HumanActOptions & { name?: string }) => human(ENCOUNTER_COMMANDS.show, o?.name === undefined ? {} : { name: o.name }, o),\n    scan: (card: Json, o: HumanActOptions & { name?: string }) => human(ENCOUNTER_COMMANDS.scan, o?.name === undefined ? { card } : { card, name: o.name }, o),\n    captureSentCard: (card: Json, o: HumanActOptions) => human(ENCOUNTER_COMMANDS.capture, { card }, o),\n    counter: (contactId: string, o: HumanActOptions) => human(ENCOUNTER_COMMANDS.counter, { contactId }, o),\n    foundGroup: (g: { name: string, vouchThreshold?: string, listed?: boolean }, o: HumanActOptions) => human(MEMBERSHIP_COMMANDS.found, g, o),\n    invite: (groupId: string, contactId: string, o: HumanActOptions) => human(MEMBERSHIP_COMMANDS.invite, { groupId, contactId }, o),\n    vouchFor: (groupId: string, member: string, o: HumanActOptions & { provenance?: 'met' | 'introduced' }) =>\n      human(MEMBERSHIP_COMMANDS.vouch, o?.provenance === undefined ? { groupId, member } : { groupId, member, provenance: o.provenance }, o),\n    introduce: (requesterId: string, targetId: string, o: HumanActOptions & { label?: string }) =>\n      human(INTRODUCTION_COMMANDS.introduce, o?.label === undefined ? { requesterId, targetId } : { requesterId, targetId, label: o.label }, o),\n    sendMessage: (contactId: string, text: string, o: HumanActOptions & { replyTo?: string }) =>\n      human(MESSAGE_COMMANDS.send, o?.replyTo === undefined ? { contactId, text } : { contactId, text, replyTo: o.replyTo }, o),\n    takeMessages: (ids: string[], o: { when: Millis }) => engine.act(MESSAGE_COMMANDS.take, { ids }, o?.when as Millis),\n    block: (contactId: string, o: HumanActOptions) => human(MESSAGE_COMMANDS.block, { contactId, blocked: true }, o),\n    unblock: (contactId: string, o: HumanActOptions) => human(MESSAGE_COMMANDS.block, { contactId, blocked: false }, o),\n    addDevice: (name: string, o: HumanActOptions) => human(IDENTITY_COMMANDS.addDevice, { name }, o),\n    revokeDevice: (name: string, o: HumanActOptions) => human(IDENTITY_COMMANDS.revokeDevice, { name }, o),\n    deviceKey: async (name: string, contextLabel: string) => deviceKeyOf(await read(), ports.keys, name, contextLabel),\n    tick: (when: Millis) => engine.tick(when),\n    resume: (when: Millis) => engine.resume(when),\n    report: (report: DeliveryReport, when: Millis) => engine.report(report, when),\n    receive: (env: unknown, when: Millis) => engine.receive(env, when),\n    subscribe: (listener: CommitListener) => engine.subscribe(listener),\n    snapshot: async (): Promise<HolderSnapshot> => {\n      const s = await engine.snapshot()\n      return Object.freeze({ commitSeq: s.commitSeq, state: toOpaque(s.state) })\n    },\n    contacts: async () => contactsView(await read()),\n    contact: async (id: string) => contactView(await read(), id),\n    groups: async () => groupsView(await read()),\n    profile: async () => profileView(await read()),\n    prompts: async () => promptsView(await read()),\n    inbox: async () => inboxView(await read()),\n    deliveryStatus: async (x: string) => deliveryStatusView(await read(), x),\n    pendingTransport: (when: Millis) => engine.pendingTransport(when),\n    mayHandOver: (entry: TransportEntry, when: Millis) => engine.mayHandOver(entry, when),\n    handOver: (entry: TransportEntry, when: Millis, start: () => boolean) => engine.handOver(entry, when, start),\n    close: () => engine.close(),\n    get closed () { return engine.closed },\n  })\n}\n"]}