@swal/edge-mesh 0.0.0-stage → 0.1.0

package/dist/web/admission.js

@@ -0,0 +1,41 @@
+// Identity of mesh devices and the trust anchor. Membership and authority themselves live in web/trust (signed
+// grants and revocations, see `secstate.ts`): this module only keeps what every layer shares.
+import { deviceIdOf } from "./pq.js";
+import { b64uDecode, isCanonicalB64u } from "./util.js";
+/** A deviceId is the fingerprint of the device's ML-DSA-65 identity key (`deviceIdOf`): 43 base64url characters. */
+export const DEVICE_ID_RE = /^[A-Za-z0-9_-]{43}$/;
+export const isDeviceId = (x) => typeof x === "string" && DEVICE_ID_RE.test(x);
+const fpCache = new Map();
+/** True iff `deviceId` is the fingerprint of the base64url identity key `pub` (the binding every check relies on). */
+export async function idMatchesPub(deviceId, pub) {
+    // R4-N3: a key is accepted only in its canonical encoding (the string is what web/trust documents carry)
+    if (!isDeviceId(deviceId) || typeof pub !== "string" || !isCanonicalB64u(pub))
+        return false;
+    let fp = fpCache.get(pub);
+    if (fp === undefined) {
+        try {
+            fp = await deviceIdOf(b64uDecode(pub));
+        }
+        catch {
+            return false;
+        }
+        if (fpCache.size >= 4096)
+            fpCache.clear();
+        fpCache.set(pub, fp);
+    }
+    return fp === deviceId;
+}
+/** SF1: epochs stay far below any integer edge (u32 on the wire, safe integers in JS). */
+export const MAX_EPOCH = 2 ** 31 - 1;
+/** SF1: a received rotation may skip at most this many epochs ahead of the local one. */
+export const MAX_EPOCH_SKIP = 8;
+export const isEpoch = (x) => typeof x === "number" && Number.isSafeInteger(x) && x >= 0 && x <= MAX_EPOCH;
+/** Who may admit whom: the owner admits admins and members, an admin admits members, members admit nobody. */
+export function canIssue(issuer, subject) {
+    if (subject === "owner")
+        return false;
+    if (issuer === "owner")
+        return true;
+    return issuer === "admin" && subject === "member";
+}
+//# sourceMappingURL=admission.js.map

package/dist/web/admission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admission.js","sourceRoot":"","sources":["../../src/web/admission.ts"],"names":[],"mappings":"AAAA,+GAA+G;AAC/G,8FAA8F;AAC9F,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAExD,oHAAoH;AACpH,MAAM,CAAC,MAAM,YAAY,GAAG,qBAAqB,CAAC;AAClD,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAU,EAAe,EAAE,CACrD,OAAO,CAAC,KAAK,QAAQ,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAE/C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;AAC1C,sHAAsH;AACtH,MAAM,CAAC,KAAK,UAAU,YAAY,CACjC,QAAgB,EAChB,GAAW;IAEX,yGAAyG;IACzG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;QAC5E,OAAO,KAAK,CAAC;IACd,IAAI,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;QACtB,IAAI,CAAC;YACJ,EAAE,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,KAAK,CAAC;QACd,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,IAAI,IAAI;YAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,EAAE,KAAK,QAAQ,CAAC;AACxB,CAAC;AAeD,0FAA0F;AAC1F,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACrC,yFAAyF;AACzF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC;AAChC,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAU,EAAe,EAAE,CAClD,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC;AAE9E,8GAA8G;AAC9G,MAAM,UAAU,QAAQ,CAAC,MAAY,EAAE,OAAa;IACnD,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,MAAM,KAAK,OAAO,IAAI,OAAO,KAAK,QAAQ,CAAC;AACnD,CAAC"}

package/dist/web/crypto.d.ts

@@ -0,0 +1,18 @@
+import { equalBytes } from "./util.js";
+export declare const NONCE_LEN = 12;
+export declare function hkdf(ikm: Uint8Array, info: string, salt?: Uint8Array): Promise<Uint8Array>;
+export declare function importAesKey(raw: Uint8Array): Promise<CryptoKey>;
+/** Doc material = HKDF(meshKey, "swal-doc/v1|" + topic) (32 raw bytes). Never used directly to seal. */
+export declare function deriveDocMaterial(meshKey: Uint8Array, topicName: string): Promise<Uint8Array>;
+/** Sender key = HKDF(docMaterial, "swal-doc/v1|" + topic + "|sender|" + deviceId) -> AES-256-GCM. Each sender seals under its own key. */
+export declare function deriveSenderKey(docMaterial: Uint8Array, topicName: string, deviceId: string): Promise<CryptoKey>;
+/** Convenience (single-writer use / tests): the topic-level key without a sender component. */
+export declare function deriveDocKey(meshKey: Uint8Array, topicName: string): Promise<CryptoKey>;
+/** Test hook: position the counter of `key` (e.g. right before the wrap). */
+export declare function __setNonceCounter(key: CryptoKey, n: number): void;
+/** Returns nonce(12) | ciphertext+tag. */
+export declare function sealUpdate(docKey: CryptoKey, bytes: Uint8Array, aad?: Uint8Array | string): Promise<Uint8Array>;
+/** Throws on tampering / wrong key / wrong aad. */
+export declare function openUpdate(docKey: CryptoKey, sealed: Uint8Array, aad?: Uint8Array | string): Promise<Uint8Array>;
+export { equalBytes };
+//# sourceMappingURL=crypto.d.ts.map

package/dist/web/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../src/web/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,UAAU,EAAqB,MAAM,WAAW,CAAC;AAEtE,eAAO,MAAM,SAAS,KAAK,CAAC;AAE5B,wBAAsB,IAAI,CACzB,GAAG,EAAE,UAAU,EACf,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,UAA+B,GACnC,OAAO,CAAC,UAAU,CAAC,CAUrB;AAED,wBAAsB,YAAY,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAKtE;AAED,wGAAwG;AACxG,wBAAsB,iBAAiB,CACtC,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,MAAM,GACf,OAAO,CAAC,UAAU,CAAC,CAErB;AAED,0IAA0I;AAC1I,wBAAsB,eAAe,CACpC,WAAW,EAAE,UAAU,EACvB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,GACd,OAAO,CAAC,SAAS,CAAC,CAIpB;AAED,+FAA+F;AAC/F,wBAAsB,YAAY,CACjC,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,MAAM,GACf,OAAO,CAAC,SAAS,CAAC,CAEpB;AAwBD,6EAA6E;AAC7E,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAOjE;AAED,0CAA0C;AAC1C,wBAAsB,UAAU,CAC/B,MAAM,EAAE,SAAS,EACjB,KAAK,EAAE,UAAU,EACjB,GAAG,GAAE,UAAU,GAAG,MAA0B,GAC1C,OAAO,CAAC,UAAU,CAAC,CASrB;AAED,mDAAmD;AACnD,wBAAsB,UAAU,CAC/B,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,UAAU,EAClB,GAAG,GAAE,UAAU,GAAG,MAA0B,GAC1C,OAAO,CAAC,UAAU,CAAC,CAcrB;AAED,OAAO,EAAE,UAAU,EAAE,CAAC"}

package/dist/web/crypto.js

@@ -0,0 +1,78 @@
+import { bs, concat, equalBytes, randomBytes, utf8 } from "./util.js";
+export const NONCE_LEN = 12;
+export async function hkdf(ikm, info, salt = new Uint8Array(32)) {
+    const k = await crypto.subtle.importKey("raw", bs(ikm), "HKDF", false, [
+        "deriveBits",
+    ]);
+    const bits = await crypto.subtle.deriveBits({ name: "HKDF", hash: "SHA-256", salt: bs(salt), info: bs(utf8(info)) }, k, 256);
+    return new Uint8Array(bits);
+}
+export async function importAesKey(raw) {
+    return crypto.subtle.importKey("raw", bs(raw), "AES-GCM", false, [
+        "encrypt",
+        "decrypt",
+    ]);
+}
+/** Doc material = HKDF(meshKey, "swal-doc/v1|" + topic) (32 raw bytes). Never used directly to seal. */
+export async function deriveDocMaterial(meshKey, topicName) {
+    return hkdf(meshKey, `swal-doc/v1|${topicName}`);
+}
+/** Sender key = HKDF(docMaterial, "swal-doc/v1|" + topic + "|sender|" + deviceId) -> AES-256-GCM. Each sender seals under its own key. */
+export async function deriveSenderKey(docMaterial, topicName, deviceId) {
+    return importAesKey(await hkdf(docMaterial, `swal-doc/v1|${topicName}|sender|${deviceId}`));
+}
+/** Convenience (single-writer use / tests): the topic-level key without a sender component. */
+export async function deriveDocKey(meshKey, topicName) {
+    return importAesKey(await deriveDocMaterial(meshKey, topicName));
+}
+// Nonce = 8B random prefix | 4B big-endian counter. A sealing key is already unique per
+// sender (see deriveSenderKey); the random prefix additionally separates sessions/reloads
+// of the same sender, and the prefix is regenerated before the 32-bit counter can wrap.
+const COUNTER_MAX = 0xffffffff;
+const counters = new WeakMap();
+function nextNonce(key) {
+    let st = counters.get(key);
+    if (!st) {
+        st = { prefix: randomBytes(8), n: 0 };
+        counters.set(key, st);
+    }
+    if (st.n >= COUNTER_MAX) {
+        st.prefix = randomBytes(8);
+        st.n = 0;
+    }
+    st.n += 1;
+    const nonce = new Uint8Array(NONCE_LEN);
+    nonce.set(st.prefix, 0);
+    new DataView(nonce.buffer).setUint32(8, st.n, false);
+    return nonce;
+}
+/** Test hook: position the counter of `key` (e.g. right before the wrap). */
+export function __setNonceCounter(key, n) {
+    let st = counters.get(key);
+    if (!st) {
+        st = { prefix: randomBytes(8), n: 0 };
+        counters.set(key, st);
+    }
+    st.n = n;
+}
+/** Returns nonce(12) | ciphertext+tag. */
+export async function sealUpdate(docKey, bytes, aad = new Uint8Array(0)) {
+    const nonce = nextNonce(docKey);
+    const additionalData = typeof aad === "string" ? utf8(aad) : aad;
+    const ct = await crypto.subtle.encrypt({ name: "AES-GCM", iv: bs(nonce), additionalData: bs(additionalData) }, docKey, bs(bytes));
+    return concat(nonce, new Uint8Array(ct));
+}
+/** Throws on tampering / wrong key / wrong aad. */
+export async function openUpdate(docKey, sealed, aad = new Uint8Array(0)) {
+    if (sealed.length < NONCE_LEN + 16)
+        throw new Error("sealed payload too short");
+    const additionalData = typeof aad === "string" ? utf8(aad) : aad;
+    const pt = await crypto.subtle.decrypt({
+        name: "AES-GCM",
+        iv: bs(sealed.subarray(0, NONCE_LEN)),
+        additionalData: bs(additionalData),
+    }, docKey, bs(sealed.subarray(NONCE_LEN)));
+    return new Uint8Array(pt);
+}
+export { equalBytes };
+//# sourceMappingURL=crypto.js.map

package/dist/web/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/web/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEtE,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC;AAE5B,MAAM,CAAC,KAAK,UAAU,IAAI,CACzB,GAAe,EACf,IAAY,EACZ,IAAI,GAAe,IAAI,UAAU,CAAC,EAAE,CAAC;IAErC,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE;QACtE,YAAY;KACZ,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,CAC1C,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,EACvE,CAAC,EACD,GAAG,CACH,CAAC;IACF,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAe;IACjD,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE;QAChE,SAAS;QACT,SAAS;KACT,CAAC,CAAC;AACJ,CAAC;AAED,wGAAwG;AACxG,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,OAAmB,EACnB,SAAiB;IAEjB,OAAO,IAAI,CAAC,OAAO,EAAE,eAAe,SAAS,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,0IAA0I;AAC1I,MAAM,CAAC,KAAK,UAAU,eAAe,CACpC,WAAuB,EACvB,SAAiB,EACjB,QAAgB;IAEhB,OAAO,YAAY,CAClB,MAAM,IAAI,CAAC,WAAW,EAAE,eAAe,SAAS,WAAW,QAAQ,EAAE,CAAC,CACtE,CAAC;AACH,CAAC;AAED,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,YAAY,CACjC,OAAmB,EACnB,SAAiB;IAEjB,OAAO,YAAY,CAAC,MAAM,iBAAiB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,wFAAwF;AACxF,0FAA0F;AAC1F,wFAAwF;AACxF,MAAM,WAAW,GAAG,UAAU,CAAC;AAC/B,MAAM,QAAQ,GAAG,IAAI,OAAO,EAAgD,CAAC;AAC7E,SAAS,SAAS,CAAC,GAAc;IAChC,IAAI,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,CAAC,EAAE,EAAE,CAAC;QACT,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QACtC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,EAAE,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC;QACzB,EAAE,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAC3B,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;IACV,CAAC;IACD,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACV,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;IACxC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACxB,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACrD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,iBAAiB,CAAC,GAAc,EAAE,CAAS;IAC1D,IAAI,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,CAAC,EAAE,EAAE,CAAC;QACT,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QACtC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACvB,CAAC;IACD,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;AACV,CAAC;AAED,0CAA0C;AAC1C,MAAM,CAAC,KAAK,UAAU,UAAU,CAC/B,MAAiB,EACjB,KAAiB,EACjB,GAAG,GAAwB,IAAI,UAAU,CAAC,CAAC,CAAC;IAE5C,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,cAAc,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACjE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACrC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,cAAc,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,EACtE,MAAM,EACN,EAAE,CAAC,KAAK,CAAC,CACT,CAAC;IACF,OAAO,MAAM,CAAC,KAAK,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,mDAAmD;AACnD,MAAM,CAAC,KAAK,UAAU,UAAU,CAC/B,MAAiB,EACjB,MAAkB,EAClB,GAAG,GAAwB,IAAI,UAAU,CAAC,CAAC,CAAC;IAE5C,IAAI,MAAM,CAAC,MAAM,GAAG,SAAS,GAAG,EAAE;QACjC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC7C,MAAM,cAAc,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACjE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACrC;QACC,IAAI,EAAE,SAAS;QACf,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACrC,cAAc,EAAE,EAAE,CAAC,cAAc,CAAC;KAClC,EACD,MAAM,EACN,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAC9B,CAAC;IACF,OAAO,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;AAC3B,CAAC;AAED,OAAO,EAAE,UAAU,EAAE,CAAC"}

package/dist/web/exchange.d.ts

@@ -0,0 +1,23 @@
+import type { Mesh } from "./provider.js";
+export declare const HEALTH_SCHEMA_PREFIX = "swal.health/v1";
+export interface HealthRecord {
+    /** e.g. "swal.health/v1" or "swal.health/v1.weight" */
+    schema: string;
+    [k: string]: unknown;
+}
+export declare function isHealthRecord(r: unknown): r is HealthRecord;
+/** Topic carrying cross-app health records for one subject (`subj_<ULID>`). */
+export declare const exchangeTopic: (subject: string) => string;
+export interface Exchange {
+    topic: string;
+    send(record: HealthRecord): string;
+    onReceive(cb: (record: HealthRecord) => void): () => void;
+    destroy(): void;
+}
+/**
+ * Cross-app exchange over a dedicated mesh (created with topic = exchangeTopic(subject)).
+ * Records live in an append-only Y.Array 'records'; receivers see only entries added remotely
+ * (or by any writer after subscription), de-duplicated by record id.
+ */
+export declare function exchange(mesh: Mesh, doc: import("yjs").Doc, subject: string): Exchange;
+//# sourceMappingURL=exchange.d.ts.map

package/dist/web/exchange.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exchange.d.ts","sourceRoot":"","sources":["../../src/web/exchange.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAG1C,eAAO,MAAM,oBAAoB,mBAAmB,CAAC;AAErD,MAAM,WAAW,YAAY;IAC5B,uDAAuD;IACvD,MAAM,EAAE,MAAM,CAAC;IACf,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACrB;AAED,wBAAgB,cAAc,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,YAAY,CAO5D;AAED,+EAA+E;AAC/E,eAAO,MAAM,aAAa,YAAa,MAAM,WACR,CAAC;AAEtC,MAAM,WAAW,QAAQ;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAAC;IACnC,SAAS,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IAC1D,OAAO,IAAI,IAAI,CAAC;CAChB;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,CACvB,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,OAAO,KAAK,EAAE,GAAG,EACtB,OAAO,EAAE,MAAM,GACb,QAAQ,CAyCV"}

package/dist/web/exchange.js

@@ -0,0 +1,54 @@
+import { topic } from "./rooms.js";
+export const HEALTH_SCHEMA_PREFIX = "swal.health/v1";
+export function isHealthRecord(r) {
+    return (typeof r === "object" &&
+        r !== null &&
+        typeof r.schema === "string" &&
+        r.schema.startsWith(HEALTH_SCHEMA_PREFIX));
+}
+/** Topic carrying cross-app health records for one subject (`subj_<ULID>`). */
+export const exchangeTopic = (subject) => topic("health", "exchange", subject);
+/**
+ * Cross-app exchange over a dedicated mesh (created with topic = exchangeTopic(subject)).
+ * Records live in an append-only Y.Array 'records'; receivers see only entries added remotely
+ * (or by any writer after subscription), de-duplicated by record id.
+ */
+export function exchange(mesh, doc, subject) {
+    const arr = doc.getArray("records");
+    const cbs = new Set();
+    const seen = new Set();
+    const obs = (ev) => {
+        if (ev.transaction.local)
+            return;
+        for (const item of ev.changes.added) {
+            for (const e of item.content.getContent()) {
+                if (seen.has(e.id) || !isHealthRecord(e.record))
+                    continue;
+                seen.add(e.id);
+                for (const cb of cbs)
+                    cb(e.record);
+            }
+        }
+    };
+    arr.observe(obs);
+    return {
+        topic: exchangeTopic(subject),
+        send(record) {
+            if (!isHealthRecord(record))
+                throw new Error(`record.schema must start with "${HEALTH_SCHEMA_PREFIX}"`);
+            const id = crypto.randomUUID();
+            seen.add(id);
+            arr.push([{ id, record }]);
+            return id;
+        },
+        onReceive(cb) {
+            cbs.add(cb);
+            return () => void cbs.delete(cb);
+        },
+        destroy() {
+            arr.unobserve(obs);
+            cbs.clear();
+        },
+    };
+}
+//# sourceMappingURL=exchange.js.map

package/dist/web/exchange.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exchange.js","sourceRoot":"","sources":["../../src/web/exchange.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEnC,MAAM,CAAC,MAAM,oBAAoB,GAAG,gBAAgB,CAAC;AAQrD,MAAM,UAAU,cAAc,CAAC,CAAU;IACxC,OAAO,CACN,OAAO,CAAC,KAAK,QAAQ;QACrB,CAAC,KAAK,IAAI;QACV,OAAQ,CAAkB,CAAC,MAAM,KAAK,QAAQ;QAC7C,CAAkB,CAAC,MAAM,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAC3D,CAAC;AACH,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAe,EAAE,EAAE,CAChD,KAAK,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;AAStC;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CACvB,IAAU,EACV,GAAsB,EACtB,OAAe;IAEf,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAuC,SAAS,CAAC,CAAC;IAC1E,MAAM,GAAG,GAAG,IAAI,GAAG,EAA6B,CAAC;IACjD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAG,CACX,EAAmE,EAClE,EAAE;QACH,IAAI,EAAE,CAAC,WAAW,CAAC,KAAK;YAAE,OAAO;QACjC,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACrC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,EAGrC,EAAE,CAAC;gBACJ,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC;oBAAE,SAAS;gBAC1D,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACf,KAAK,MAAM,EAAE,IAAI,GAAG;oBAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YACpC,CAAC;QACF,CAAC;IACF,CAAC,CAAC;IACF,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjB,OAAO;QACN,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC;QAC7B,IAAI,CAAC,MAAM;YACV,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;gBAC1B,MAAM,IAAI,KAAK,CACd,kCAAkC,oBAAoB,GAAG,CACzD,CAAC;YACH,MAAM,EAAE,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;YAC/B,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;YAC3B,OAAO,EAAE,CAAC;QACX,CAAC;QACD,SAAS,CAAC,EAAE;YACX,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACZ,OAAO,GAAG,EAAE,CAAC,KAAK,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClC,CAAC;QACD,OAAO;YACN,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YACnB,GAAG,CAAC,KAAK,EAAE,CAAC;QACb,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/web/fragment.d.ts

@@ -0,0 +1,58 @@
+export declare const F_FRAG = 4;
+export declare const FRAG_HEADER: number;
+export declare const DEFAULT_MAX_FRAME: number;
+export declare const DEFAULT_MAX_MESSAGE: number;
+/** Split `msg` into frames of at most `maxFrame` bytes; a message that already fits is returned as is. */
+export declare function fragment(msg: Uint8Array, maxFrame?: number): Promise<Uint8Array[]>;
+/** A byte budget shared by several reassemblers (e.g. every not-yet-authenticated link of a mesh). */
+export interface ByteBudget {
+    used: number;
+    readonly max: number;
+}
+export interface ReassemblerOptions {
+    /** Largest message accepted (declared length). Default 64 MiB. */
+    maxMessageBytes?: number;
+    /** Sum of declared lengths of all partial messages; the oldest partials are evicted beyond it. Default = maxMessageBytes. */
+    maxPendingBytes?: number;
+    /** A partial message older than this is dropped. Default 30 s. */
+    timeoutMs?: number;
+    now?: () => number;
+    onDrop?: (reason: string) => void;
+    /** Also charge every partial message to this shared budget (dropped when it would overflow). */
+    shared?: ByteBudget;
+}
+/** Reassembles fragments arriving on ONE link. Not shared between links (a peer cannot complete another's message). */
+export declare class Reassembler {
+    private o;
+    private partials;
+    private declared;
+    private timer;
+    private maxMessage;
+    private maxPendingBytes;
+    private shared?;
+    private readonly timeoutMs;
+    private readonly now;
+    constructor(o?: ReassemblerOptions);
+    /**
+     * Change the limits (e.g. once the link is authenticated). `shared: null` stops charging NEW partials to the
+     * shared budget; partials already charged release it when they complete or are dropped.
+     */
+    setLimits(o: {
+        maxMessageBytes?: number;
+        maxPendingBytes?: number;
+        shared?: ByteBudget | null;
+    }): void;
+    get pending(): number;
+    get pendingBytes(): number;
+    /** Returns the whole message once its last fragment arrives and the hash matches; null otherwise. */
+    push(frame: Uint8Array): Promise<Uint8Array | null>;
+    /** Drop partial messages older than the timeout. */
+    sweep(): void;
+    clear(): void;
+    private evictOldest;
+    private remove;
+    private drop;
+    /** Free memory of stalled partials even if no further fragment ever arrives. */
+    private arm;
+}
+//# sourceMappingURL=fragment.d.ts.map

package/dist/web/fragment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fragment.d.ts","sourceRoot":"","sources":["../../src/web/fragment.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,MAAM,IAAI,CAAC;AACxB,eAAO,MAAM,WAAW,QAAyB,CAAC;AAClD,eAAO,MAAM,iBAAiB,QAAY,CAAC;AAC3C,eAAO,MAAM,mBAAmB,QAAmB,CAAC;AAMpD,0GAA0G;AAC1G,wBAAsB,QAAQ,CAC7B,GAAG,EAAE,UAAU,EACf,QAAQ,SAAoB,GAC1B,OAAO,CAAC,UAAU,EAAE,CAAC,CAsBvB;AAED,sGAAsG;AACtG,MAAM,WAAW,UAAU;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IAClC,kEAAkE;IAClE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,6HAA6H;IAC7H,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,IAAI,CAAC;IAClC,gGAAgG;IAChG,MAAM,CAAC,EAAE,UAAU,CAAC;CACpB;AAaD,uHAAuH;AACvH,qBAAa,WAAW;IAUX,OAAO,CAAC,CAAC;IATrB,OAAO,CAAC,QAAQ,CAA8B;IAC9C,OAAO,CAAC,QAAQ,CAAK;IACrB,OAAO,CAAC,KAAK,CAA8C;IAC3D,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,MAAM,CAAC,CAAa;IAC5B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IAEnC,YAAoB,CAAC,GAAE,kBAAuB,EAM7C;IAED;;;OAGG;IACH,SAAS,CAAC,CAAC,EAAE;QACZ,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,MAAM,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;KAC3B,GAAG,IAAI,CAKP;IAED,IAAI,OAAO,IAAI,MAAM,CAEpB;IACD,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED,qGAAqG;IAC/F,IAAI,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CA8DxD;IAED,oDAAoD;IACpD,KAAK,IAAI,IAAI,CAIZ;IAED,KAAK,IAAI,IAAI,CAOZ;IAED,OAAO,CAAC,WAAW;IAKnB,OAAO,CAAC,MAAM;IAYd,OAAO,CAAC,IAAI;IAMZ,gFAAgF;IAChF,OAAO,CAAC,GAAG;CASX"}

package/dist/web/fragment.js

@@ -0,0 +1,198 @@
+// Transport-independent fragmentation of mesh messages (H5). Browsers cap a DataChannel message
+// (RTCSctpTransport.maxMessageSize, ~256 KiB in Chrome) and other link transports may cap lower, while an
+// initial sync or a pairing grant can be megabytes. Messages above `maxFrame` are split into self-describing
+// fragments and reassembled with integrity (sequence + total + length + SHA-256), bounded memory and a timeout.
+//
+// Fragment: F_FRAG | msgId(8) | seq(u32) | total(u32) | len(u32) | sha256(32) | chunk
+import { bs, concat, equalBytes, randomBytes } from "./util.js";
+export const F_FRAG = 4;
+export const FRAG_HEADER = 1 + 8 + 4 + 4 + 4 + 32;
+export const DEFAULT_MAX_FRAME = 64 * 1024;
+export const DEFAULT_MAX_MESSAGE = 64 * 1024 * 1024;
+const MAX_FRAGMENTS = 1 << 20;
+const sha256 = async (b) => new Uint8Array(await crypto.subtle.digest("SHA-256", bs(b)));
+/** Split `msg` into frames of at most `maxFrame` bytes; a message that already fits is returned as is. */
+export async function fragment(msg, maxFrame = DEFAULT_MAX_FRAME) {
+    if (msg.length <= maxFrame)
+        return [msg];
+    const chunk = maxFrame - FRAG_HEADER;
+    if (chunk < 1)
+        throw new Error("maxFrame too small");
+    const total = Math.ceil(msg.length / chunk);
+    const id = randomBytes(8);
+    const hash = await sha256(msg);
+    const out = [];
+    for (let seq = 0; seq < total; seq++) {
+        const body = msg.subarray(seq * chunk, (seq + 1) * chunk);
+        const f = new Uint8Array(FRAG_HEADER + body.length);
+        const dv = new DataView(f.buffer);
+        f[0] = F_FRAG;
+        f.set(id, 1);
+        dv.setUint32(9, seq);
+        dv.setUint32(13, total);
+        dv.setUint32(17, msg.length);
+        f.set(hash, 21);
+        f.set(body, FRAG_HEADER);
+        out.push(f);
+    }
+    return out;
+}
+/** Reassembles fragments arriving on ONE link. Not shared between links (a peer cannot complete another's message). */
+export class Reassembler {
+    o;
+    partials = new Map();
+    declared = 0;
+    timer = null;
+    maxMessage;
+    maxPendingBytes;
+    shared;
+    timeoutMs;
+    now;
+    constructor(o = {}) {
+        this.o = o;
+        this.maxMessage = o.maxMessageBytes ?? DEFAULT_MAX_MESSAGE;
+        this.maxPendingBytes = o.maxPendingBytes ?? this.maxMessage;
+        this.shared = o.shared;
+        this.timeoutMs = o.timeoutMs ?? 30_000;
+        this.now = o.now ?? (() => Date.now());
+    }
+    /**
+     * Change the limits (e.g. once the link is authenticated). `shared: null` stops charging NEW partials to the
+     * shared budget; partials already charged release it when they complete or are dropped.
+     */
+    setLimits(o) {
+        if (o.maxMessageBytes !== undefined)
+            this.maxMessage = o.maxMessageBytes;
+        if (o.maxPendingBytes !== undefined)
+            this.maxPendingBytes = o.maxPendingBytes;
+        if (o.shared !== undefined)
+            this.shared = o.shared ?? undefined;
+    }
+    get pending() {
+        return this.partials.size;
+    }
+    get pendingBytes() {
+        return this.declared;
+    }
+    /** Returns the whole message once its last fragment arrives and the hash matches; null otherwise. */
+    async push(frame) {
+        this.sweep();
+        if (frame.length <= FRAG_HEADER || frame[0] !== F_FRAG)
+            return this.drop(null, "malformed fragment");
+        const dv = new DataView(frame.buffer, frame.byteOffset, frame.byteLength);
+        const key = Array.from(frame.subarray(1, 9)).join(",");
+        const seq = dv.getUint32(9);
+        const total = dv.getUint32(13);
+        const len = dv.getUint32(17);
+        const hash = frame.subarray(21, FRAG_HEADER);
+        const body = frame.subarray(FRAG_HEADER);
+        let p = this.partials.get(key);
+        if (!p) {
+            if (len > this.maxMessage)
+                return this.drop(null, "message too large");
+            if (total < 2 || total > MAX_FRAGMENTS || total > len || seq >= total)
+                return this.drop(null, "malformed fragment");
+            while (this.partials.size > 0 &&
+                this.declared + len > this.maxPendingBytes)
+                this.evictOldest();
+            const shared = this.shared;
+            if (shared) {
+                while (this.partials.size > 0 && shared.used + len > shared.max)
+                    this.evictOldest();
+                if (shared.used + len > shared.max)
+                    return this.drop(null, "shared budget exhausted");
+                shared.used += len;
+            }
+            p = {
+                total,
+                len,
+                hash: hash.slice(),
+                parts: new Map(),
+                got: 0,
+                started: this.now(),
+                shared,
+            };
+            this.partials.set(key, p);
+            this.declared += len;
+            this.arm();
+        }
+        else if (p.total !== total ||
+            p.len !== len ||
+            !equalBytes(p.hash, hash) ||
+            seq >= total) {
+            return this.drop(key, "inconsistent fragment");
+        }
+        if (p.parts.has(seq))
+            return null; // duplicate
+        if (p.got + body.length > p.len)
+            return this.drop(key, "fragment overflow");
+        p.parts.set(seq, body.slice());
+        p.got += body.length;
+        if (p.parts.size < p.total)
+            return null;
+        this.remove(key);
+        if (p.got !== p.len)
+            return this.drop(null, "length mismatch");
+        const parts = [];
+        for (let i = 0; i < p.total; i++)
+            parts.push(p.parts.get(i));
+        const msg = concat(...parts);
+        if (!equalBytes(await sha256(msg), p.hash))
+            return this.drop(null, "hash mismatch");
+        return msg;
+    }
+    /** Drop partial messages older than the timeout. */
+    sweep() {
+        const limit = this.now() - this.timeoutMs;
+        for (const [k, p] of this.partials)
+            if (p.started <= limit)
+                this.drop(k, "timeout");
+    }
+    clear() {
+        for (const p of this.partials.values())
+            if (p.shared)
+                p.shared.used -= p.len;
+        this.partials.clear();
+        this.declared = 0;
+        if (this.timer)
+            clearTimeout(this.timer);
+        this.timer = null;
+    }
+    evictOldest() {
+        const first = this.partials.keys().next();
+        if (!first.done)
+            this.drop(first.value, "evicted");
+    }
+    remove(key) {
+        const p = this.partials.get(key);
+        if (!p)
+            return;
+        this.partials.delete(key);
+        this.declared -= p.len;
+        if (p.shared)
+            p.shared.used -= p.len;
+        if (this.partials.size === 0 && this.timer) {
+            clearTimeout(this.timer);
+            this.timer = null;
+        }
+    }
+    drop(key, reason) {
+        if (key !== null)
+            this.remove(key);
+        this.o.onDrop?.(reason);
+        return null;
+    }
+    /** Free memory of stalled partials even if no further fragment ever arrives. */
+    arm() {
+        if (this.timer || this.o.now)
+            return; // an injected clock means the caller sweeps
+        this.timer = setTimeout(() => {
+            this.timer = null;
+            this.sweep();
+            if (this.partials.size > 0)
+                this.arm();
+        }, this.timeoutMs);
+        this.timer.unref?.();
+    }
+}
+//# sourceMappingURL=fragment.js.map

package/dist/web/fragment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fragment.js","sourceRoot":"","sources":["../../src/web/fragment.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,0GAA0G;AAC1G,6GAA6G;AAC7G,gHAAgH;AAChH,EAAE;AACF,sFAAsF;AACtF,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAEhE,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,CAAC;AACxB,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;AAClD,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,CAAC;AAC3C,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACpD,MAAM,aAAa,GAAG,CAAC,IAAI,EAAE,CAAC;AAE9B,MAAM,MAAM,GAAG,KAAK,EAAE,CAAa,EAAE,EAAE,CACtC,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE9D,0GAA0G;AAC1G,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC7B,GAAe,EACf,QAAQ,GAAG,iBAAiB;IAE5B,IAAI,GAAG,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,QAAQ,GAAG,WAAW,CAAC;IACrC,IAAI,KAAK,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACrD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC;IAC5C,MAAM,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IAC1B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,GAAG,KAAK,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;QAC1D,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAClC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC;QACd,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACb,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACrB,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QAC7B,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAChB,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACzB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACb,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAgCD,uHAAuH;AACvH,MAAM,OAAO,WAAW;IAUH,CAAC;IATb,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAC;IACtC,QAAQ,GAAG,CAAC,CAAC;IACb,KAAK,GAAyC,IAAI,CAAC;IACnD,UAAU,CAAS;IACnB,eAAe,CAAS;IACxB,MAAM,CAAc;IACX,SAAS,CAAS;IAClB,GAAG,CAAe;IAEnC,YAAoB,CAAC,GAAuB,EAAE;iBAA1B,CAAC;QACpB,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,eAAe,IAAI,mBAAmB,CAAC;QAC3D,IAAI,CAAC,eAAe,GAAG,CAAC,CAAC,eAAe,IAAI,IAAI,CAAC,UAAU,CAAC;QAC5D,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;QACvB,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC;QACvC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACxC,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,CAIT;QACA,IAAI,CAAC,CAAC,eAAe,KAAK,SAAS;YAAE,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,eAAe,CAAC;QACzE,IAAI,CAAC,CAAC,eAAe,KAAK,SAAS;YAClC,IAAI,CAAC,eAAe,GAAG,CAAC,CAAC,eAAe,CAAC;QAC1C,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,SAAS,CAAC;IACjE,CAAC;IAED,IAAI,OAAO;QACV,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC3B,CAAC;IACD,IAAI,YAAY;QACf,OAAO,IAAI,CAAC,QAAQ,CAAC;IACtB,CAAC;IAED,qGAAqG;IACrG,KAAK,CAAC,IAAI,CAAC,KAAiB;QAC3B,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,IAAI,KAAK,CAAC,MAAM,IAAI,WAAW,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM;YACrD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;QAC9C,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;QAC1E,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,KAAK,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC/B,MAAM,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;QACzC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,CAAC,EAAE,CAAC;YACR,IAAI,GAAG,GAAG,IAAI,CAAC,UAAU;gBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;YACvE,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,aAAa,IAAI,KAAK,GAAG,GAAG,IAAI,GAAG,IAAI,KAAK;gBACpE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;YAC9C,OACC,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC;gBACtB,IAAI,CAAC,QAAQ,GAAG,GAAG,GAAG,IAAI,CAAC,eAAe;gBAE1C,IAAI,CAAC,WAAW,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;YAC3B,IAAI,MAAM,EAAE,CAAC;gBACZ,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,GAAG,GAAG,MAAM,CAAC,GAAG;oBAC9D,IAAI,CAAC,WAAW,EAAE,CAAC;gBACpB,IAAI,MAAM,CAAC,IAAI,GAAG,GAAG,GAAG,MAAM,CAAC,GAAG;oBACjC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC;gBACnD,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC;YACpB,CAAC;YACD,CAAC,GAAG;gBACH,KAAK;gBACL,GAAG;gBACH,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE;gBAClB,KAAK,EAAE,IAAI,GAAG,EAAE;gBAChB,GAAG,EAAE,CAAC;gBACN,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE;gBACnB,MAAM;aACN,CAAC;YACF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,QAAQ,IAAI,GAAG,CAAC;YACrB,IAAI,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC;aAAM,IACN,CAAC,CAAC,KAAK,KAAK,KAAK;YACjB,CAAC,CAAC,GAAG,KAAK,GAAG;YACb,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC;YACzB,GAAG,IAAI,KAAK,EACX,CAAC;YACF,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;QAChD,CAAC;QACD,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC,CAAC,YAAY;QAC/C,IAAI,CAAC,CAAC,GAAG,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QAC5E,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;QAC/B,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC;QACrB,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjB,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAiB,EAAE,CAAC;QAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,CAAC;QAC9D,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC;QAC7B,IAAI,CAAC,UAAU,CAAC,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC;YACzC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC;QACzC,OAAO,GAAG,CAAC;IACZ,CAAC;IAED,oDAAoD;IACpD,KAAK;QACJ,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;QAC1C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ;YACjC,IAAI,CAAC,CAAC,OAAO,IAAI,KAAK;gBAAE,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAClD,CAAC;IAED,KAAK;QACJ,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE;YACrC,IAAI,CAAC,CAAC,MAAM;gBAAE,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC;QACtC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;QAClB,IAAI,IAAI,CAAC,KAAK;YAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACnB,CAAC;IAEO,WAAW;QAClB,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;QAC1C,IAAI,CAAC,KAAK,CAAC,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACpD,CAAC;IAEO,MAAM,CAAC,GAAW;QACzB,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,CAAC;YAAE,OAAO;QACf,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC1B,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC;QACvB,IAAI,CAAC,CAAC,MAAM;YAAE,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC;QACrC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC5C,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QACnB,CAAC;IACF,CAAC;IAEO,IAAI,CAAC,GAAkB,EAAE,MAAc;QAC9C,IAAI,GAAG,KAAK,IAAI;YAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACnC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC;QACxB,OAAO,IAAI,CAAC;IACb,CAAC;IAED,gFAAgF;IACxE,GAAG;QACV,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG;YAAE,OAAO,CAAC,4CAA4C;QAClF,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;YAClB,IAAI,CAAC,KAAK,EAAE,CAAC;YACb,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC;gBAAE,IAAI,CAAC,GAAG,EAAE,CAAC;QACxC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAClB,IAAI,CAAC,KAAgC,CAAC,KAAK,EAAE,EAAE,CAAC;IAClD,CAAC;CACD"}

package/dist/web/index.d.ts

@@ -0,0 +1,25 @@
+export type { Role, TrustRoot } from "./admission.js";
+export { canIssue, idMatchesPub, isDeviceId } from "./admission.js";
+export { deriveDocKey, openUpdate, sealUpdate } from "./crypto.js";
+export type { Exchange, HealthRecord } from "./exchange.js";
+export { exchange, exchangeTopic, HEALTH_SCHEMA_PREFIX, isHealthRecord, } from "./exchange.js";
+export type { PairPayload } from "./pairing.js";
+export { decodePairPayload } from "./pairing.js";
+export { deviceIdOf, IDENTITY_ALG, identityKeygen, identitySign, identityVerify, KEM_ALG, kemKeygen, ML_DSA_PUBLIC_KEY_BYTES, ML_DSA_SIGNATURE_BYTES, ML_KEM_CIPHERTEXT_BYTES, ML_KEM_PUBLIC_KEY_BYTES, } from "./pq.js";
+export type { Mesh, MeshChannel, MeshEvent, MeshOptions, MeshSecurity, MeshStatus, PairHostOptions, PairJoinResult, PairOffer, } from "./provider.js";
+export { createMesh } from "./provider.js";
+export type { TopicScope } from "./rooms.js";
+export { derivePairRoomId, deriveRoomId, fingerprint, legacyNamespace, meshNamespace, topic, } from "./rooms.js";
+export type { RotDoc } from "./rotation.js";
+export { isRotDoc, MAX_ROT_MEMBERS } from "./rotation.js";
+export type { KexDoc, SecDoc } from "./secstate.js";
+export { MAX_MEMBERS_PER_ADMIN, MESH_MODULE, MESH_SCHEMA, SecurityState, } from "./secstate.js";
+export type { MeshStore } from "./store.js";
+export { idbStore, memoryStore } from "./store.js";
+export type { LoopbackHub } from "./transports/loopback.js";
+export { createLoopbackHub } from "./transports/loopback.js";
+export type { QrSdpTransport } from "./transports/qr-sdp.js";
+export { qrSdpTransport } from "./transports/qr-sdp.js";
+export { wsTransport } from "./transports/ws.js";
+export type { Device, LinkTransport, PeerLink, RtcOptions, SigMessage, SignalingChannel, SigTransport, VaultClient, } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/web/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/web/index.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AACtD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACnE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EACN,QAAQ,EACR,aAAa,EACb,oBAAoB,EACpB,cAAc,GACd,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EACN,UAAU,EACV,YAAY,EACZ,cAAc,EACd,YAAY,EACZ,cAAc,EACd,OAAO,EACP,SAAS,EACT,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,EACvB,uBAAuB,GACvB,MAAM,SAAS,CAAC;AACjB,YAAY,EACX,IAAI,EACJ,WAAW,EACX,SAAS,EACT,WAAW,EACX,YAAY,EACZ,UAAU,EACV,eAAe,EACf,cAAc,EACd,SAAS,GACT,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,YAAY,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EACN,gBAAgB,EAChB,YAAY,EACZ,WAAW,EACX,eAAe,EACf,aAAa,EACb,KAAK,GACL,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAC1D,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EACN,qBAAqB,EACrB,WAAW,EACX,WAAW,EACX,aAAa,GACb,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACnD,YAAY,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,YAAY,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,YAAY,EACX,MAAM,EACN,aAAa,EACb,QAAQ,EACR,UAAU,EACV,UAAU,EACV,gBAAgB,EAChB,YAAY,EACZ,WAAW,GACX,MAAM,YAAY,CAAC"}

package/dist/web/index.js

@@ -0,0 +1,14 @@
+export { canIssue, idMatchesPub, isDeviceId } from "./admission.js";
+export { deriveDocKey, openUpdate, sealUpdate } from "./crypto.js";
+export { exchange, exchangeTopic, HEALTH_SCHEMA_PREFIX, isHealthRecord, } from "./exchange.js";
+export { decodePairPayload } from "./pairing.js";
+export { deviceIdOf, IDENTITY_ALG, identityKeygen, identitySign, identityVerify, KEM_ALG, kemKeygen, ML_DSA_PUBLIC_KEY_BYTES, ML_DSA_SIGNATURE_BYTES, ML_KEM_CIPHERTEXT_BYTES, ML_KEM_PUBLIC_KEY_BYTES, } from "./pq.js";
+export { createMesh } from "./provider.js";
+export { derivePairRoomId, deriveRoomId, fingerprint, legacyNamespace, meshNamespace, topic, } from "./rooms.js";
+export { isRotDoc, MAX_ROT_MEMBERS } from "./rotation.js";
+export { MAX_MEMBERS_PER_ADMIN, MESH_MODULE, MESH_SCHEMA, SecurityState, } from "./secstate.js";
+export { idbStore, memoryStore } from "./store.js";
+export { createLoopbackHub } from "./transports/loopback.js";
+export { qrSdpTransport } from "./transports/qr-sdp.js";
+export { wsTransport } from "./transports/ws.js";
+//# sourceMappingURL=index.js.map

package/dist/web/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/web/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACpE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEnE,OAAO,EACN,QAAQ,EACR,aAAa,EACb,oBAAoB,EACpB,cAAc,GACd,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EACN,UAAU,EACV,YAAY,EACZ,cAAc,EACd,YAAY,EACZ,cAAc,EACd,OAAO,EACP,SAAS,EACT,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,EACvB,uBAAuB,GACvB,MAAM,SAAS,CAAC;AAYjB,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE3C,OAAO,EACN,gBAAgB,EAChB,YAAY,EACZ,WAAW,EACX,eAAe,EACf,aAAa,EACb,KAAK,GACL,MAAM,YAAY,CAAC;AAEpB,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAE1D,OAAO,EACN,qBAAqB,EACrB,WAAW,EACX,WAAW,EACX,aAAa,GACb,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE7D,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC"}