@sempdev/semp 0.4.3

package/dist/session/rekey.js

@@ -0,0 +1,207 @@
+/**
+ * Rekey driver per SESSION.md §3.3.
+ *
+ * Both peers can initiate. The flow:
+ *
+ *   1. Initiator generates a new ephemeral X25519 keypair + a
+ *      32-byte rekey nonce. Builds RekeyInit, seals under the
+ *      current session's directional keys, sends.
+ *   2. Responder receives + opens the sealed init. Generates its
+ *      own new ephemeral + a 32-byte responder nonce + a new
+ *      session_id. Computes the new shared secret via X25519,
+ *      derives the five new session keys via HKDF-SHA-512 with
+ *      salt = rekey_nonce || responder_nonce.
+ *   3. Responder builds RekeyAccepted, seals under the current
+ *      session's directional keys, sends.
+ *   4. Both call session.applyRekey() to swap in the new keys
+ *      and new session_id atomically.
+ *
+ * On rejection (session_expired, rekey_unsupported, rate_limited),
+ * the responder sends a sealed RekeyRejected; the caller sees a
+ * RekeyRejectedError.
+ *
+ * Rekey messages carry no separate identity signature: receiving
+ * a valid sealed message is itself authentication, since only a
+ * holder of the live session keys can forge one.
+ *
+ * @module
+ */
+import { marshal as canonicalMarshal } from "../canonical/index.js";
+import { deriveRekeyKeys, newHKDFSHA512, x25519Agree, x25519PublicKey, } from "../crypto/index.js";
+import { fingerprint } from "../keys/index.js";
+import { openRekeyMessage, sealRekeyMessage, } from "./rekey_seal.js";
+/** Error thrown when the responder rejects a rekey attempt. */
+export class RekeyRejectedError extends Error {
+    reasonCode;
+    reason;
+    constructor(reasonCode, reason) {
+        super(`rekey rejected: ${reasonCode}${reason !== undefined ? ` (${reason})` : ""}`);
+        this.reasonCode = reasonCode;
+        this.reason = reason;
+    }
+}
+/**
+ * Initiate a rekey. The session installs new keys + a new
+ * session_id on success and resolves with the new session_id.
+ *
+ * @throws RekeyRejectedError when the responder sends a sealed
+ * RekeyRejected.
+ */
+export async function rekeyClient(session, options = {}) {
+    const direction = directionFromRole(session.role);
+    const oppositeDir = otherDirection(direction);
+    // Step 1: build + send RekeyInit.
+    const ephPriv = options.ephemeralPriv ?? randomBytes(32);
+    const ephPub = x25519PublicKey(ephPriv);
+    const rekeyNonce = options.rekeyNonce ?? randomBytes(32);
+    const init = {
+        type: "SEMP_REKEY",
+        step: "rekey-init",
+        version: "1.0.0",
+        session_id: session.sessionId,
+        new_ephemeral_key: {
+            algorithm: "x25519-chacha20-poly1305",
+            key: base64Encode(ephPub),
+            key_id: fingerprint(ephPub),
+        },
+        rekey_nonce: base64Encode(rekeyNonce),
+    };
+    const sealed = sealRekeyMessage(session, direction, canonicalMarshal(init));
+    await session.send(new TextEncoder().encode(JSON.stringify(sealed)));
+    // Step 2: receive + open the response.
+    const respBytes = await session.receive();
+    if (respBytes === null) {
+        throw new Error("rekey: connection closed waiting for response");
+    }
+    const wrapper = JSON.parse(new TextDecoder().decode(respBytes));
+    if (wrapper.type !== "SEMP_REKEY") {
+        throw new Error(`rekey: expected SEMP_REKEY, got ${wrapper.type}`);
+    }
+    if (wrapper.direction !== oppositeDir) {
+        throw new Error(`rekey: expected response direction=${oppositeDir}, got ${wrapper.direction}`);
+    }
+    const respPlain = openRekeyMessage(session, wrapper);
+    const respBody = JSON.parse(new TextDecoder().decode(respPlain));
+    // Discriminate on `step` defensively; the wire body could carry
+    // either an accepted or rejected outcome.
+    const step = respBody.step;
+    if (step === "rekey-rejected") {
+        const r = respBody;
+        throw new RekeyRejectedError(r.reason_code, r.reason);
+    }
+    if (step !== "rekey-accepted") {
+        throw new Error(`rekey: expected step=rekey-accepted, got ${step}`);
+    }
+    const accepted = respBody;
+    // Step 3: derive + apply new keys.
+    const responderPub = base64Decode(accepted.new_ephemeral_key.key);
+    const sharedSecret = x25519Agree(ephPriv, responderPub);
+    const responderNonce = base64Decode(accepted.responder_nonce);
+    const kdf = newHKDFSHA512();
+    const newKeys = deriveRekeyKeys(kdf, sharedSecret, rekeyNonce, responderNonce);
+    session.applyRekey({
+        newSessionId: accepted.new_session_id,
+        newKeys,
+    });
+    return accepted.new_session_id;
+}
+/**
+ * Respond to a rekey. Reads one sealed message off the session
+ * transport, validates it as a RekeyInit, derives new keys,
+ * sends a sealed RekeyAccepted, and applies the rekey to the
+ * session. Resolves with the new session_id.
+ *
+ * Production callers wire this into their session-message
+ * dispatcher: when an inbound SEMP_REKEY arrives, route the
+ * sealed bytes here.
+ */
+export async function rekeyServer(session, options) {
+    const initDir = directionFromRole(otherRole(session.role));
+    const respDir = otherDirection(initDir);
+    // Step 1: receive + open the init.
+    const initBytes = await session.receive();
+    if (initBytes === null) {
+        throw new Error("rekey: connection closed waiting for init");
+    }
+    const wrapper = JSON.parse(new TextDecoder().decode(initBytes));
+    if (wrapper.type !== "SEMP_REKEY") {
+        throw new Error(`rekey: expected SEMP_REKEY, got ${wrapper.type}`);
+    }
+    if (wrapper.direction !== initDir) {
+        throw new Error(`rekey: expected init direction=${initDir}, got ${wrapper.direction}`);
+    }
+    const initPlain = openRekeyMessage(session, wrapper);
+    const init = JSON.parse(new TextDecoder().decode(initPlain));
+    if (init.step !== "rekey-init") {
+        throw new Error(`rekey: expected step=rekey-init, got ${init.step}`);
+    }
+    // Step 2: ephemeral + responder nonce + new session_id.
+    const ephPriv = options.ephemeralPriv ?? randomBytes(32);
+    const ephPub = x25519PublicKey(ephPriv);
+    const responderNonce = options.responderNonce ?? randomBytes(32);
+    const newSessionId = options.generateSessionId();
+    // Step 3: derive new keys.
+    const initiatorPub = base64Decode(init.new_ephemeral_key.key);
+    const rekeyNonce = base64Decode(init.rekey_nonce);
+    const sharedSecret = x25519Agree(ephPriv, initiatorPub);
+    const kdf = newHKDFSHA512();
+    const newKeys = deriveRekeyKeys(kdf, sharedSecret, rekeyNonce, responderNonce);
+    // Step 4: build + send RekeyAccepted.
+    const accepted = {
+        type: "SEMP_REKEY",
+        step: "rekey-accepted",
+        version: "1.0.0",
+        session_id: session.sessionId,
+        new_session_id: newSessionId,
+        new_ephemeral_key: {
+            algorithm: "x25519-chacha20-poly1305",
+            key: base64Encode(ephPub),
+            key_id: fingerprint(ephPub),
+        },
+        rekey_nonce: init.rekey_nonce,
+        responder_nonce: base64Encode(responderNonce),
+    };
+    const sealedResp = sealRekeyMessage(session, respDir, canonicalMarshal(accepted));
+    await session.send(new TextEncoder().encode(JSON.stringify(sealedResp)));
+    // Step 5: apply rekey.
+    session.applyRekey({ newSessionId, newKeys });
+    return newSessionId;
+}
+// ---------------------------------------------------------------------------
+// Helpers
+function directionFromRole(role) {
+    return role === "client" ? "c2s" : "s2c";
+}
+function otherDirection(d) {
+    return d === "c2s" ? "s2c" : "c2s";
+}
+function otherRole(r) {
+    return r === "client" ? "server" : "client";
+}
+function randomBytes(n) {
+    const out = new Uint8Array(n);
+    globalThis.crypto.getRandomValues(out);
+    return out;
+}
+function base64Encode(b) {
+    if (typeof Buffer !== "undefined") {
+        return Buffer.from(b).toString("base64");
+    }
+    let bin = "";
+    for (let i = 0; i < b.length; i++) {
+        bin += String.fromCharCode(b[i] ?? 0);
+    }
+    return btoa(bin);
+}
+function base64Decode(s) {
+    if (typeof Buffer !== "undefined") {
+        return new Uint8Array(Buffer.from(s, "base64"));
+    }
+    const bin = atob(s);
+    const out = new Uint8Array(bin.length);
+    for (let i = 0; i < bin.length; i++) {
+        out[i] = bin.charCodeAt(i);
+    }
+    return out;
+}
+//# sourceMappingURL=rekey.js.map

package/dist/session/rekey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rekey.js","sourceRoot":"","sources":["../../src/session/rekey.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH,OAAO,EAAE,OAAO,IAAI,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,EACL,eAAe,EACf,aAAa,EACb,WAAW,EACX,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAG/C,OAAO,EAEL,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,iBAAiB,CAAC;AAkCzB,+DAA+D;AAC/D,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAClC,UAAU,CAAS;IACnB,MAAM,CAAqB;IACpC,YAAY,UAAkB,EAAE,MAA0B;QACxD,KAAK,CAAC,mBAAmB,UAAU,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACpF,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAUD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAgB,EAChB,UAA8B,EAAE;IAEhC,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,WAAW,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IAE9C,kCAAkC;IAClC,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;IACzD,MAAM,IAAI,GAAc;QACtB,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,iBAAiB,EAAE;YACjB,SAAS,EAAE,0BAA0B;YACrC,GAAG,EAAE,YAAY,CAAC,MAAM,CAAC;YACzB,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC;SAC5B;QACD,WAAW,EAAE,YAAY,CAAC,UAAU,CAAC;KACtC,CAAC;IACF,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,EAAE,SAAS,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5E,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAErE,uCAAuC;IACvC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;IAC1C,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAgB,CAAC;IAC/E,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,mCAAmC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,KAAK,WAAW,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,sCAAsC,WAAW,SAAS,OAAO,CAAC,SAAS,EAAE,CAC9E,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAE9C,CAAC;IAElB,gEAAgE;IAChE,0CAA0C;IAC1C,MAAM,IAAI,GAAI,QAA6B,CAAC,IAAI,CAAC;IACjD,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAC9B,MAAM,CAAC,GAAG,QAAyB,CAAC;QACpC,MAAM,IAAI,kBAAkB,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IACxD,CAAC;IACD,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,4CAA4C,IAAI,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,MAAM,QAAQ,GAAG,QAAyB,CAAC;IAE3C,mCAAmC;IACnC,MAAM,YAAY,GAAG,YAAY,CAAC,QAAQ,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAClE,MAAM,YAAY,GAAG,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACxD,MAAM,cAAc,GAAG,YAAY,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,EAAE,YAAY,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;IAE/E,OAAO,CAAC,UAAU,CAAC;QACjB,YAAY,EAAE,QAAQ,CAAC,cAAc;QACrC,OAAO;KACR,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC,cAAc,CAAC;AACjC,CAAC;AAYD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAgB,EAChB,OAA2B;IAE3B,MAAM,OAAO,GAAG,iBAAiB,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;IAExC,mCAAmC;IACnC,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;IAC1C,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAgB,CAAC;IAC/E,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,mCAAmC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,KAAK,OAAO,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,kCAAkC,OAAO,SAAS,OAAO,CAAC,SAAS,EAAE,CACtE,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAc,CAAC;IAC1E,IAAI,IAAI,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,wCAAwC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,wDAAwD;IACxD,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;IACjE,MAAM,YAAY,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC;IAEjD,2BAA2B;IAC3B,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,aAAa,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,EAAE,YAAY,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC;IAE/E,sCAAsC;IACtC,MAAM,QAAQ,GAAkB;QAC9B,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,gBAAgB;QACtB,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,cAAc,EAAE,YAAY;QAC5B,iBAAiB,EAAE;YACjB,SAAS,EAAE,0BAA0B;YACrC,GAAG,EAAE,YAAY,CAAC,MAAM,CAAC;YACzB,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC;SAC5B;QACD,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,eAAe,EAAE,YAAY,CAAC,cAAc,CAAC;KAC9C,CAAC;IACF,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAClF,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAEzE,uBAAuB;IACvB,OAAO,CAAC,UAAU,CAAC,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9C,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,8EAA8E;AAC9E,UAAU;AAEV,SAAS,iBAAiB,CAAC,IAAyB;IAClD,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;AAC3C,CAAC;AAED,SAAS,cAAc,CAAC,CAAgB;IACtC,OAAO,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;AACrC,CAAC;AAED,SAAS,SAAS,CAAC,CAAsB;IACvC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC9C,CAAC;AAED,SAAS,WAAW,CAAC,CAAS;IAC5B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAC9B,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,CAAa;IACjC,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/session/rekey_seal.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Sealed-rekey wire format per SESSION.md §3.2.
+ *
+ * Rekey messages are AEAD-encrypted under the CURRENT session's
+ * directional keys. Receiving a valid sealed rekey is itself the
+ * authentication — only a holder of the live session keys can
+ * forge one — so the rekey messages carry no separate identity
+ * signature.
+ *
+ * Wire shape:
+ *
+ *   {
+ *     "type":      "SEMP_REKEY",
+ *     "sealed":    true,
+ *     "direction": "c2s" | "s2c",
+ *     "version":   "1.0.0",
+ *     "session_id": "<current session_id>",
+ *     "nonce":     "<base64 12-byte AEAD nonce>",
+ *     "ciphertext":"<base64 AEAD ciphertext (RekeyInit/Accepted/Rejected JSON)>"
+ *   }
+ *
+ * AEAD: ChaCha20-Poly1305 (12-byte nonce). The AAD is a
+ * length-prefixed concatenation of:
+ *
+ *   AAD = LP(direction) || LP(session_id) || LP(directional_mac_key)
+ *
+ * where LP(x) prepends a 4-byte big-endian length to x. Mixing the
+ * MAC key into the AAD ensures that compromising the encryption
+ * key alone is insufficient — an attacker would also need the MAC
+ * key, which satisfies the spec's "MACed under the MAC key"
+ * requirement.
+ *
+ * @module
+ */
+import type { Session } from "./session.js";
+/** Wire shape of a sealed rekey message. */
+export interface SealedRekey {
+    type: "SEMP_REKEY";
+    sealed: true;
+    direction: "c2s" | "s2c";
+    version: "1.0.0";
+    session_id: string;
+    nonce: string;
+    ciphertext: string;
+}
+/**
+ * Seal a rekey-message body. The body is the canonical JSON of
+ * RekeyInit / RekeyAccepted / RekeyRejected. Returns the wire
+ * envelope.
+ *
+ * @param session the CURRENT session (pre-rekey).
+ * @param direction "c2s" if the caller is the side that sent INIT
+ *   in the original handshake (or for federation: the side that
+ *   opened the connection); "s2c" otherwise.
+ * @param plaintext the canonical message body bytes.
+ * @param nonce optional 12-byte nonce; production callers omit
+ *   this and let the function source fresh entropy.
+ */
+export declare function sealRekeyMessage(session: Session, direction: "c2s" | "s2c", plaintext: Uint8Array, nonce?: Uint8Array): SealedRekey;
+/**
+ * Open a sealed rekey message. Returns the plaintext body bytes.
+ * Throws on tag mismatch, direction mismatch, or session_id
+ * mismatch.
+ */
+export declare function openRekeyMessage(session: Session, msg: SealedRekey): Uint8Array;
+//# sourceMappingURL=rekey_seal.d.ts.map

package/dist/session/rekey_seal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rekey_seal.d.ts","sourceRoot":"","sources":["../../src/session/rekey_seal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5C,4CAA4C;AAC5C,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,EAAE,IAAI,CAAC;IACb,SAAS,EAAE,KAAK,GAAG,KAAK,CAAC;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,KAAK,GAAG,KAAK,EACxB,SAAS,EAAE,UAAU,EACrB,KAAK,CAAC,EAAE,UAAU,GACjB,WAAW,CAiBb;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,WAAW,GAAG,UAAU,CAiB/E"}

package/dist/session/rekey_seal.js

@@ -0,0 +1,153 @@
+/**
+ * Sealed-rekey wire format per SESSION.md §3.2.
+ *
+ * Rekey messages are AEAD-encrypted under the CURRENT session's
+ * directional keys. Receiving a valid sealed rekey is itself the
+ * authentication — only a holder of the live session keys can
+ * forge one — so the rekey messages carry no separate identity
+ * signature.
+ *
+ * Wire shape:
+ *
+ *   {
+ *     "type":      "SEMP_REKEY",
+ *     "sealed":    true,
+ *     "direction": "c2s" | "s2c",
+ *     "version":   "1.0.0",
+ *     "session_id": "<current session_id>",
+ *     "nonce":     "<base64 12-byte AEAD nonce>",
+ *     "ciphertext":"<base64 AEAD ciphertext (RekeyInit/Accepted/Rejected JSON)>"
+ *   }
+ *
+ * AEAD: ChaCha20-Poly1305 (12-byte nonce). The AAD is a
+ * length-prefixed concatenation of:
+ *
+ *   AAD = LP(direction) || LP(session_id) || LP(directional_mac_key)
+ *
+ * where LP(x) prepends a 4-byte big-endian length to x. Mixing the
+ * MAC key into the AAD ensures that compromising the encryption
+ * key alone is insufficient — an attacker would also need the MAC
+ * key, which satisfies the spec's "MACed under the MAC key"
+ * requirement.
+ *
+ * @module
+ */
+import { aeadOpen, aeadSeal } from "../crypto/index.js";
+/**
+ * Seal a rekey-message body. The body is the canonical JSON of
+ * RekeyInit / RekeyAccepted / RekeyRejected. Returns the wire
+ * envelope.
+ *
+ * @param session the CURRENT session (pre-rekey).
+ * @param direction "c2s" if the caller is the side that sent INIT
+ *   in the original handshake (or for federation: the side that
+ *   opened the connection); "s2c" otherwise.
+ * @param plaintext the canonical message body bytes.
+ * @param nonce optional 12-byte nonce; production callers omit
+ *   this and let the function source fresh entropy.
+ */
+export function sealRekeyMessage(session, direction, plaintext, nonce) {
+    const { encKey, macKey } = pickRekeyKeys(session, direction);
+    const n = nonce ?? randomBytes(12);
+    if (n.length !== 12) {
+        throw new Error(`sealRekeyMessage: nonce must be 12 bytes, got ${n.length}`);
+    }
+    const aad = rekeyAAD(direction, session.sessionId, macKey);
+    const ct = aeadSeal("chacha20-poly1305", encKey, n, plaintext, aad);
+    return {
+        type: "SEMP_REKEY",
+        sealed: true,
+        direction,
+        version: "1.0.0",
+        session_id: session.sessionId,
+        nonce: base64Encode(n),
+        ciphertext: base64Encode(ct),
+    };
+}
+/**
+ * Open a sealed rekey message. Returns the plaintext body bytes.
+ * Throws on tag mismatch, direction mismatch, or session_id
+ * mismatch.
+ */
+export function openRekeyMessage(session, msg) {
+    if (msg.type !== "SEMP_REKEY") {
+        throw new Error(`openRekeyMessage: type=${msg.type}, want SEMP_REKEY`);
+    }
+    if (!msg.sealed) {
+        throw new Error("openRekeyMessage: cleartext rekey not supported");
+    }
+    if (msg.session_id !== session.sessionId) {
+        throw new Error(`openRekeyMessage: session_id ${msg.session_id} does not match current ${session.sessionId}`);
+    }
+    const { encKey, macKey } = pickRekeyKeys(session, msg.direction);
+    const nonce = base64Decode(msg.nonce);
+    const ct = base64Decode(msg.ciphertext);
+    const aad = rekeyAAD(msg.direction, session.sessionId, macKey);
+    return aeadOpen("chacha20-poly1305", encKey, nonce, ct, aad);
+}
+/**
+ * Pick the (encryption_key, mac_key) pair for the given
+ * direction, mirroring semp-go's session.pickRekeyKeys. The
+ * session keys are owned by both endpoints, so the same
+ * (direction, sessionId) pair selects the same pair on both sides.
+ */
+function pickRekeyKeys(session, direction) {
+    switch (direction) {
+        case "c2s":
+            return { encKey: session.keys.encC2S, macKey: session.keys.macC2S };
+        case "s2c":
+            return { encKey: session.keys.encS2C, macKey: session.keys.macS2C };
+    }
+}
+/**
+ * Length-prefixed AAD per the rekey wire format. Each component
+ * is preceded by a 4-byte big-endian length so an attacker can't
+ * shift the boundary between fields.
+ */
+function rekeyAAD(direction, sessionId, macKey) {
+    const dirBytes = new TextEncoder().encode(direction);
+    const idBytes = new TextEncoder().encode(sessionId);
+    const total = 4 + dirBytes.length + 4 + idBytes.length + 4 + macKey.length;
+    const out = new Uint8Array(total);
+    let off = 0;
+    off = appendLP(out, off, dirBytes);
+    off = appendLP(out, off, idBytes);
+    appendLP(out, off, macKey);
+    return out;
+}
+function appendLP(buf, off, b) {
+    const n = b.length;
+    buf[off++] = (n >>> 24) & 0xff;
+    buf[off++] = (n >>> 16) & 0xff;
+    buf[off++] = (n >>> 8) & 0xff;
+    buf[off++] = n & 0xff;
+    buf.set(b, off);
+    return off + n;
+}
+function randomBytes(n) {
+    const out = new Uint8Array(n);
+    globalThis.crypto.getRandomValues(out);
+    return out;
+}
+function base64Encode(b) {
+    if (typeof Buffer !== "undefined") {
+        return Buffer.from(b).toString("base64");
+    }
+    let bin = "";
+    for (let i = 0; i < b.length; i++) {
+        bin += String.fromCharCode(b[i] ?? 0);
+    }
+    return btoa(bin);
+}
+function base64Decode(s) {
+    if (typeof Buffer !== "undefined") {
+        return new Uint8Array(Buffer.from(s, "base64"));
+    }
+    const bin = atob(s);
+    const out = new Uint8Array(bin.length);
+    for (let i = 0; i < bin.length; i++) {
+        out[i] = bin.charCodeAt(i);
+    }
+    return out;
+}
+//# sourceMappingURL=rekey_seal.js.map

package/dist/session/rekey_seal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rekey_seal.js","sourceRoot":"","sources":["../../src/session/rekey_seal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAcxD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAgB,EAChB,SAAwB,EACxB,SAAqB,EACrB,KAAkB;IAElB,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC7D,MAAM,CAAC,GAAG,KAAK,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC;IACnC,IAAI,CAAC,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC3D,MAAM,EAAE,GAAG,QAAQ,CAAC,mBAAmB,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IACpE,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE,IAAI;QACZ,SAAS;QACT,OAAO,EAAE,OAAO;QAChB,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;QACtB,UAAU,EAAE,YAAY,CAAC,EAAE,CAAC;KAC7B,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAgB,EAAE,GAAgB;IACjE,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,CAAC,IAAI,mBAAmB,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,KAAK,OAAO,CAAC,SAAS,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CACb,gCAAgC,GAAG,CAAC,UAAU,2BAA2B,OAAO,CAAC,SAAS,EAAE,CAC7F,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC/D,OAAO,QAAQ,CAAC,mBAAmB,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;AAC/D,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CACpB,OAAgB,EAChB,SAAwB;IAExB,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,KAAK;YACR,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACtE,KAAK,KAAK;YACR,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;IACxE,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,QAAQ,CAAC,SAAiB,EAAE,SAAiB,EAAE,MAAkB;IACxE,MAAM,QAAQ,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3E,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,CAAC;IACnC,GAAG,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAClC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAC3B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,QAAQ,CAAC,GAAe,EAAE,GAAW,EAAE,CAAa;IAC3D,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IACnB,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC;IAC/B,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC;IAC/B,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC;IAC9B,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IACtB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAChB,OAAO,GAAG,GAAG,CAAC,CAAC;AACjB,CAAC;AAED,SAAS,WAAW,CAAC,CAAS;IAC5B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAC9B,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;IACvC,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,YAAY,CAAC,CAAa;IACjC,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC;AACnB,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC7B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/session/resume.d.ts

@@ -0,0 +1,125 @@
+/**
+ * Session resumption driver per HANDSHAKE.md §2.8 / SESSION.md §2.7.
+ *
+ * Resume condenses the full handshake into ONE round trip:
+ *
+ *   client -> server  step=resume     (client_eph + client_nonce +
+ *                                      resumption_ticket from prior session)
+ *   server -> client  step=accepted   (server_eph + server_nonce +
+ *                                      new session_id + new ticket +
+ *                                      server_signature)
+ *
+ * Both peers derive new session keys by mixing the FRESH X25519
+ * shared secret with the K_resumption secret retained from the
+ * previous session. The retained secret proves continuity of
+ * identity, so no separate identity proof is required.
+ *
+ * Production callers use this when they want a low-latency
+ * reconnect after a brief disconnection. If the server has lost
+ * the session state (or the ticket has expired), the server
+ * MUST respond with step=rejected and the client falls back to
+ * a full {@link "../handshake/driver".runClient} handshake.
+ *
+ * @module
+ */
+import { type ResumptionTicket } from "../handshake/messages.js";
+import type { Transport } from "../transport/index.js";
+import { Session } from "./session.js";
+/** Wire shape of step=resume (unsigned). */
+export interface ResumeRequest {
+    type: "SEMP_HANDSHAKE";
+    step: "resume";
+    party: "client";
+    version: "1.0.0";
+    nonce: string;
+    resumption_ticket: string;
+    client_ephemeral_key: {
+        algorithm: string;
+        key: string;
+        key_id: string;
+    };
+    transport: string;
+    extensions: Record<string, unknown>;
+}
+/** Wire shape of step=accepted in the resume flow (signed). */
+export interface ResumeAccepted {
+    type: "SEMP_HANDSHAKE";
+    step: "accepted";
+    party: "server";
+    version: "1.0.0";
+    session_id: string;
+    session_ttl: number;
+    server_nonce: string;
+    server_ephemeral_key: {
+        algorithm: string;
+        key: string;
+        key_id: string;
+    };
+    resumption_ticket: ResumptionTicket;
+    server_signature: string;
+    extensions: Record<string, unknown>;
+}
+export interface ResumeClientConfig {
+    /** Server domain signing public key (32-byte Ed25519). */
+    serverDomainPub: Uint8Array;
+    /** Transport identifier echoed in the resume request. */
+    transport: string;
+    /** K_resumption from the prior session. */
+    kResumption: Uint8Array;
+    /** Opaque resumption_ticket value from the prior session. */
+    resumptionTicket: string;
+    /** Optional pinned ephemeral private (32 bytes) for tests. */
+    clientEphemeralPriv?: Uint8Array;
+    /** Optional pinned 32-byte client nonce for tests. */
+    clientNonce?: Uint8Array;
+    /** Optional extensions to advertise. */
+    extensions?: Record<string, unknown>;
+}
+/**
+ * Drive the client side of a resume. Resolves with a fresh
+ * {@link Session} on success; throws {@link HandshakeRejectedError}
+ * if the server rejects.
+ */
+export declare function resumeClient(transport: Transport, config: ResumeClientConfig): Promise<Session>;
+/** Outcome of a ticket lookup performed by the server. */
+export type TicketLookupResult = {
+    ok: true;
+    /** K_resumption retained from the prior session. */
+    kResumption: Uint8Array;
+    /** Permissions to grant on the resumed session. */
+    permissions: ReadonlyArray<string>;
+} | {
+    ok: false;
+    reasonCode: string;
+    reason?: string;
+};
+export interface ResumeServerConfig {
+    /** 32-byte Ed25519 secret seed for the server domain signing key. */
+    serverDomainSigningSeed: Uint8Array;
+    /**
+     * Look up the resumption_ticket from the request. Production
+     * servers route through a per-process cache + transparent
+     * persistence layer; tests pass an in-memory map.
+     */
+    lookupTicket: (ticket: string) => Promise<TicketLookupResult> | TicketLookupResult;
+    /** Mint a fresh resumption_ticket for the new session. */
+    generateNewTicket: () => ResumptionTicket;
+    /** Mint a fresh session_id for the new session. */
+    generateSessionId: () => string;
+    /** Session TTL in seconds. */
+    sessionTTL: number;
+    /** Optional extensions echoed in the accepted message. */
+    acceptedExtensions?: Record<string, unknown>;
+    /** Optional pinned ephemeral private for tests. */
+    serverEphemeralPriv?: Uint8Array;
+    /** Optional pinned 32-byte server nonce for tests. */
+    serverNonce?: Uint8Array;
+}
+/**
+ * Drive the server side of a resume. Reads the resume request,
+ * looks up the ticket, generates a fresh ephemeral + nonce + new
+ * session_id, builds and signs the accepted response, and returns
+ * a Session.
+ */
+export declare function resumeServer(transport: Transport, config: ResumeServerConfig): Promise<Session>;
+//# sourceMappingURL=resume.d.ts.map

package/dist/session/resume.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resume.d.ts","sourceRoot":"","sources":["../../src/session/resume.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAUH,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,0BAA0B,CAAC;AAElC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAEvD,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,4CAA4C;AAC5C,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,gBAAgB,CAAC;IACvB,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,QAAQ,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACzE,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAED,+DAA+D;AAC/D,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,gBAAgB,CAAC;IACvB,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,EAAE,QAAQ,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC;IACzE,iBAAiB,EAAE,gBAAgB,CAAC;IACpC,gBAAgB,EAAE,MAAM,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAKD,MAAM,WAAW,kBAAkB;IACjC,0DAA0D;IAC1D,eAAe,EAAE,UAAU,CAAC;IAC5B,yDAAyD;IACzD,SAAS,EAAE,MAAM,CAAC;IAClB,2CAA2C;IAC3C,WAAW,EAAE,UAAU,CAAC;IACxB,6DAA6D;IAC7D,gBAAgB,EAAE,MAAM,CAAC;IACzB,8DAA8D;IAC9D,mBAAmB,CAAC,EAAE,UAAU,CAAC;IACjC,sDAAsD;IACtD,WAAW,CAAC,EAAE,UAAU,CAAC;IACzB,wCAAwC;IACxC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAChC,SAAS,EAAE,SAAS,EACpB,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC,OAAO,CAAC,CAWlB;AA6FD,0DAA0D;AAC1D,MAAM,MAAM,kBAAkB,GAC1B;IACE,EAAE,EAAE,IAAI,CAAC;IACT,oDAAoD;IACpD,WAAW,EAAE,UAAU,CAAC;IACxB,mDAAmD;IACnD,WAAW,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CACpC,GACD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvD,MAAM,WAAW,kBAAkB;IACjC,qEAAqE;IACrE,uBAAuB,EAAE,UAAU,CAAC;IACpC;;;;OAIG;IACH,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,kBAAkB,CAAC,GAAG,kBAAkB,CAAC;IACnF,0DAA0D;IAC1D,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;IAC1C,mDAAmD;IACnD,iBAAiB,EAAE,MAAM,MAAM,CAAC;IAChC,8BAA8B;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7C,mDAAmD;IACnD,mBAAmB,CAAC,EAAE,UAAU,CAAC;IACjC,sDAAsD;IACtD,WAAW,CAAC,EAAE,UAAU,CAAC;CAC1B;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CAChC,SAAS,EAAE,SAAS,EACpB,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAAC,OAAO,CAAC,CAWlB"}