@swal/edge-mesh 0.0.0-stage → 0.1.0

package/dist/web/trust/types.d.ts

@@ -0,0 +1,134 @@
+import type { SigAlg } from "./keys.js";
+/** Per-module access level. Ordered: ver < editar < administrar. */
+export type Level = "ver" | "editar" | "administrar";
+export declare const LEVELS: readonly Level[];
+export declare const levelRank: (l: Level | undefined) => number;
+export declare const isLevel: (x: unknown) => x is Level;
+/** Resolved permissions: module -> level. Missing module = no access. */
+export type Permissions = Readonly<Record<string, Level>>;
+export interface RolePreset {
+    permissions: Permissions;
+    /** Delegation budget (see Grant.delegate). Default 0. */
+    delegate?: number;
+}
+/** App-defined schema: the core never hard-codes modules or roles. */
+export interface TrustSchema {
+    /** Every module a grant may name. Grants naming other modules are rejected. */
+    modules: readonly string[];
+    /** Role templates (label -> permissions). Grants store resolved permissions, not the template. */
+    roles?: Readonly<Record<string, RolePreset>>;
+    /** Level an op `action` needs in `module` (web/oplog gate). Default: "editar". */
+    actionLevel?: (module: string, action: string) => Level;
+    /** Max chain length root -> ... -> device grant. Default 2 (owner/root -> admin -> staff). */
+    maxDepth?: number;
+}
+export interface DeviceRef {
+    /** fingerprint of `pub` (verified on ingest) */
+    fp: string;
+    /** public signing key (ECDSA P-256 JWK) */
+    /** base64url ML-DSA-65 public signing key */
+    pub: string;
+    /** optional raw P-256 ECDH public key (base64url) for module-key wraps (web/keyring, T5) */
+    ecdh?: string;
+    /** optional base64url ML-KEM-768 encapsulation key (hybrid key wraps) */
+    kem?: string;
+}
+export interface GrantBody {
+    t: "grant";
+    v: 1;
+    alg: SigAlg;
+    /** instance / tenant id (e.g. Fize `local-<fp>`): docs of another instance are rejected */
+    inst: string;
+    subject: DeviceRef;
+    /** display name, informational */
+    name?: string;
+    /** role label, informational (permissions are what counts) */
+    role: string;
+    permissions: Permissions;
+    /**
+     * Delegation budget. 0 = cannot issue grants. A child grant must have `delegate < issuer.delegate` and
+     * `permissions ⊆ issuer.permissions`. Root-issued grants may have at most `maxDepth - 1`.
+     * (`canGrant` ≡ `delegate > 0`.) With the default depth 2: root(owner) -> admin(1) -> staff(0).
+     */
+    delegate: number;
+    /** ms; compared with the op's HLC wall time, never with the receiver's clock */
+    notBefore: number;
+    /** ms (exclusive). Soft control: the hard cut is a revocation. */
+    expiresAt?: number;
+    /** this grant authorizes only ops with `seq <= seqCutoff` of the subject's log */
+    seqCutoff?: number;
+    /** issuer fingerprint: the root fp or the subject fp of `parent` */
+    issuer: string;
+    /** grant id of the issuer's own grant; absent iff issued by the root */
+    parent?: string;
+    /** ms, informational; makes re-issued grants distinct */
+    issuedAt: number;
+    /**
+     * web/provider: the mesh key epoch the issuer handed over with this grant when pairing the subject (absent when no
+     * key was handed over, e.g. a re-anchored grant). Lets the owner see who still needs the current key.
+     */
+    epoch?: number;
+}
+export interface Grant extends GrantBody {
+    /** base64url(SHA-256(canonicalJson(body))) */
+    id: string;
+    /** ML-DSA-65 over canonicalJson(body) by the issuer key, base64url */
+    sig: string;
+}
+export interface RevocationBody {
+    t: "revoke";
+    v: 1;
+    alg: SigAlg;
+    inst: string;
+    /** grant id being revoked. Always cascades to the grants issued under it. */
+    target: string;
+    /** ops of the target's subject with seq > lastSeq are no longer authorized by the target grant */
+    lastSeq: number;
+    /**
+     * S3: id of the subject's op at `lastSeq` (the revoker's head). Receivers then accept the subject's ops <= lastSeq
+     * only if their hash chain ends at this op: a revoked key cannot fork its own history to replicas that had not seen
+     * it. Omitted = no anchor (weaker; `prepareRevocation` fills it when given op ids).
+     */
+    lastId?: string;
+    /**
+     * Cut-offs of the cascaded (descendant) grants, by GRANT ID (S2): only grants that existed when the revocation was
+     * signed can keep history. A descendant grant missing here (e.g. one the revoked issuer mints afterwards, even
+     * backdated, for a subject listed before) is cut at 0. Fill it with `TrustStore.prepareRevocation` from your log
+     * heads.
+     */
+    upTo?: Readonly<Record<string, number>>;
+    /** S3: anchor op id at `upTo[grantId]` for each cascaded grant's subject (same role as `lastId`) */
+    upToIds?: Readonly<Record<string, string>>;
+    reason?: string;
+    issuer: string;
+    /** issuer's grant id; absent iff issued by the root */
+    parent?: string;
+    issuedAt: number;
+}
+export interface Revocation extends RevocationBody {
+    id: string;
+    sig: string;
+}
+export type TrustDoc = Grant | Revocation;
+/** Point at which an authorization question is asked: an op's seq in its author's log and its HLC wall time. */
+export interface At {
+    /** omitted = "now/next": only grants not cut by any revocation count */
+    seq?: number;
+    /** ms; omitted = TrustStore clock */
+    time?: number;
+}
+export type AddStatus = "accepted" | "duplicate" | "pending" | "rejected";
+export interface AddResult {
+    status: AddStatus;
+    id?: string;
+    reason?: string;
+}
+export type Decision = {
+    ok: true;
+    grant: Grant;
+} | {
+    ok: false;
+    reason: DenyReason;
+};
+export type DenyReason = "no-grant" | "invalid-chain" | "revoked" | "not-yet-valid" | "expired" | "insufficient-level";
+//# sourceMappingURL=types.d.ts.map

package/dist/web/trust/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/web/trust/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAExC,oEAAoE;AACpE,MAAM,MAAM,KAAK,GAAG,KAAK,GAAG,QAAQ,GAAG,aAAa,CAAC;AACrD,eAAO,MAAM,MAAM,EAAE,SAAS,KAAK,EAAqC,CAAC;AACzE,eAAO,MAAM,SAAS,MAAO,KAAK,GAAG,SAAS,KAAG,MACnB,CAAC;AAC/B,eAAO,MAAM,OAAO,MAAO,OAAO,KAAG,CAAC,IAAI,KACyB,CAAC;AAEpE,yEAAyE;AACzE,MAAM,MAAM,WAAW,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAE1D,MAAM,WAAW,UAAU;IAC1B,WAAW,EAAE,WAAW,CAAC;IACzB,yDAAyD;IACzD,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,sEAAsE;AACtE,MAAM,WAAW,WAAW;IAC3B,+EAA+E;IAC/E,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,kGAAkG;IAClG,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;IAC7C,kFAAkF;IAClF,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,KAAK,CAAC;IACxD,8FAA8F;IAC9F,QAAQ,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,SAAS;IACzB,gDAAgD;IAChD,EAAE,EAAE,MAAM,CAAC;IACX,2CAA2C;IAC3C,6CAA6C;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,4FAA4F;IAC5F,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,yEAAyE;IACzE,GAAG,CAAC,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,SAAS;IACzB,CAAC,EAAE,OAAO,CAAC;IACX,CAAC,EAAE,CAAC,CAAC;IACL,GAAG,EAAE,MAAM,CAAC;IACZ,2FAA2F;IAC3F,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,SAAS,CAAC;IACnB,kCAAkC;IAClC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8DAA8D;IAC9D,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,WAAW,CAAC;IACzB;;;;OAIG;IACH,QAAQ,EAAE,MAAM,CAAC;IACjB,gFAAgF;IAChF,SAAS,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kFAAkF;IAClF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oEAAoE;IACpE,MAAM,EAAE,MAAM,CAAC;IACf,wEAAwE;IACxE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,QAAQ,EAAE,MAAM,CAAC;IACjB;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,KAAM,SAAQ,SAAS;IACvC,8CAA8C;IAC9C,EAAE,EAAE,MAAM,CAAC;IACX,sEAAsE;IACtE,GAAG,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,cAAc;IAC9B,CAAC,EAAE,QAAQ,CAAC;IACZ,CAAC,EAAE,CAAC,CAAC;IACL,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,MAAM,EAAE,MAAM,CAAC;IACf,kGAAkG;IAClG,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACxC,oGAAoG;IACpG,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,uDAAuD;IACvD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,UAAW,SAAQ,cAAc;IACjD,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,MAAM,QAAQ,GAAG,KAAK,GAAG,UAAU,CAAC;AAE1C,gHAAgH;AAChH,MAAM,WAAW,EAAE;IAClB,wEAAwE;IACxE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,qCAAqC;IACrC,IAAI,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,MAAM,SAAS,GAAG,UAAU,GAAG,WAAW,GAAG,SAAS,GAAG,UAAU,CAAC;AAC1E,MAAM,WAAW,SAAS;IACzB,MAAM,EAAE,SAAS,CAAC;IAClB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,QAAQ,GACjB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,KAAK,CAAA;CAAE,GAC1B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,UAAU,CAAA;CAAE,CAAC;AACrC,MAAM,MAAM,UAAU,GACnB,UAAU,GACV,eAAe,GACf,SAAS,GACT,eAAe,GACf,SAAS,GACT,oBAAoB,CAAC"}

package/dist/web/trust/types.js

@@ -0,0 +1,4 @@
+export const LEVELS = ["ver", "editar", "administrar"];
+export const levelRank = (l) => l ? LEVELS.indexOf(l) + 1 : 0;
+export const isLevel = (x) => typeof x === "string" && LEVELS.includes(x);
+//# sourceMappingURL=types.js.map

package/dist/web/trust/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/web/trust/types.ts"],"names":[],"mappings":"AAIA,MAAM,CAAC,MAAM,MAAM,GAAqB,CAAC,KAAK,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;AACzE,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAoB,EAAU,EAAE,CACzD,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/B,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAU,EAAc,EAAE,CACjD,OAAO,CAAC,KAAK,QAAQ,IAAK,MAA4B,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC"}

package/dist/web/types.d.ts

@@ -0,0 +1,115 @@
+import type { Role } from "./admission.js";
+import type { MeshStore } from "./store.js";
+/** Minimal vault contract. An adapter comes from @swal/vault/web (not a dependency here). */
+export interface VaultClient {
+    /** `deviceIdOf(devicePublicKey)` (web/pq): 43 base64url characters. */
+    readonly deviceId: string;
+    /** ML-DSA-65 public identity key of this device (raw, 1952 bytes). Any other algorithm is refused. */
+    readonly devicePublicKey: Uint8Array;
+    getOrCreateMeshKey(): Promise<Uint8Array>;
+    setMeshKey(raw: Uint8Array): Promise<void>;
+    /** ML-DSA-65 signature (FIPS 204, pure, empty context; 3309 bytes) of `data` with the identity key. */
+    sign(data: Uint8Array): Promise<Uint8Array>;
+    /**
+     * Ignored since the ML-DSA-65 migration: the mesh verifies every identity signature itself (`identityVerify`),
+     * so a vault can no longer widen what is accepted. Kept optional for source compatibility.
+     * @deprecated
+     */
+    verify?(publicKey: Uint8Array, data: Uint8Array, signature: Uint8Array): Promise<boolean>;
+    /**
+     * Optional: persistent static P-256 ECDH key of this device (non-extractable private key + raw public key),
+     * used to wrap rotated mesh keys pairwise. Without it the mesh keeps an in-memory key for the session only,
+     * so a device that reloads while peers hold wraps for its old key cannot catch up: provide it in production.
+     */
+    getEcdhIdentity?(): Promise<{
+        privateKey: CryptoKey;
+        publicKey: Uint8Array;
+    }>;
+    /**
+     * Optional: persistent static ML-KEM-768 key pair of this device (raw bytes: encapsulation key 1184 B,
+     * decapsulation key 2400 B), the post-quantum half of the hybrid rotation wraps (AGENTS.md §2). Keep the
+     * decapsulation key encrypted at rest. Without it the mesh keeps an in-memory key for the session only (same
+     * caveat as `getEcdhIdentity`).
+     */
+    getKemIdentity?(): Promise<{
+        publicKey: Uint8Array;
+        secretKey: Uint8Array;
+    }>;
+    /**
+     * Optional: persist the rotation epoch (otherwise it lives in the mesh's device-local store). The epoch is never
+     * taken from the shared doc.
+     */
+    getEpoch?(): Promise<number> | number;
+    setEpoch?(epoch: number): Promise<void> | void;
+    /**
+     * Optional: persistent, device-local key/value store for the mesh's trust state (pinned root, verified
+     * admissions, revocations). Used when MeshOptions.store is not given. Without either (and without
+     * persist:'idb') that state lives in memory only and a reloaded device must be paired again.
+     */
+    store?: MeshStore;
+}
+/** A bidirectional message pipe to one remote peer (WebRTC data channel, loopback, ...). */
+export interface PeerLink {
+    readonly id: string;
+    send(data: Uint8Array): void;
+    onMessage(cb: (data: Uint8Array) => void): void;
+    onClose(cb: () => void): void;
+    close(): void;
+    /**
+     * Optional backpressure (BL3): resolves when the link's own send queue is low again. The mesh awaits it before
+     * handing over each frame, so a large message is paced by the peer instead of piling up in memory.
+     */
+    drain?(): Promise<void>;
+    /**
+     * Optional (finding 4): send ahead of the link's own queued data, at the next message boundary. Used for control
+     * frames (rotations, link handshake), so they never wait behind bulk data towards a slow peer.
+     */
+    sendPriority?(data: Uint8Array): void;
+}
+/** Wire message of the signaling protocol (see docs/SIGNALING-PROTOCOL.md). */
+export interface SigMessage {
+    type: "join" | "signal" | "leave";
+    rid: string;
+    from: string;
+    to?: string;
+    /** opaque, base64url, encrypted client-side; the server never parses it */
+    payload?: string;
+}
+/** A signaling server/channel: peers exchange SigMessages, we build WebRTC links on top. */
+export interface SignalingChannel {
+    readonly kind: "signal";
+    readonly name: string;
+    join(rid: string, selfId: string): Promise<void>;
+    send(msg: SigMessage): void;
+    onMessage(cb: (msg: SigMessage) => void): () => void;
+    leave(rid: string): void;
+    close(): void;
+}
+/** A transport that hands out ready PeerLinks itself (qr-sdp, in-memory loopback). `rid` is '' when room-less. */
+export interface LinkTransport {
+    readonly kind: "link";
+    readonly name: string;
+    join(rid: string, selfId: string): Promise<void>;
+    onLink(cb: (link: PeerLink, rid: string) => void): () => void;
+    leave(rid: string): void;
+    close(): void;
+}
+export type SigTransport = SignalingChannel | LinkTransport;
+export interface Device {
+    deviceId: string;
+    /** base64url identity public key */
+    pub: string;
+    name: string;
+    addedAt: number;
+    /** Role from the device's verified admission (set by `Mesh.devices()`). */
+    role?: Role;
+    /** deviceId of the admitting device (set by `Mesh.devices()`). */
+    admittedBy?: string;
+}
+export interface RtcOptions {
+    /** Default [] = host candidates only (no public STUN). */
+    iceServers?: RTCIceServer[];
+    /** Injectable for tests / non-browser runtimes. */
+    RTCPeerConnection?: typeof RTCPeerConnection;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/web/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/web/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAC3C,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAE5C,6FAA6F;AAC7F,MAAM,WAAW,WAAW;IAC3B,uEAAuE;IACvE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,sGAAsG;IACtG,QAAQ,CAAC,eAAe,EAAE,UAAU,CAAC;IACrC,kBAAkB,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC;IAC1C,UAAU,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3C,uGAAuG;IACvG,IAAI,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAC5C;;;;OAIG;IACH,MAAM,CAAC,CACN,SAAS,EAAE,UAAU,EACrB,IAAI,EAAE,UAAU,EAChB,SAAS,EAAE,UAAU,GACnB,OAAO,CAAC,OAAO,CAAC,CAAC;IACpB;;;;OAIG;IACH,eAAe,CAAC,IAAI,OAAO,CAAC;QAAE,UAAU,EAAE,SAAS,CAAC;QAAC,SAAS,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;IAC9E;;;;;OAKG;IACH,cAAc,CAAC,IAAI,OAAO,CAAC;QAAE,SAAS,EAAE,UAAU,CAAC;QAAC,SAAS,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;IAC7E;;;OAGG;IACH,QAAQ,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;IACtC,QAAQ,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC/C;;;;OAIG;IACH,KAAK,CAAC,EAAE,SAAS,CAAC;CAClB;AAED,4FAA4F;AAC5F,MAAM,WAAW,QAAQ;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI,CAAC;IAC7B,SAAS,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,UAAU,KAAK,IAAI,GAAG,IAAI,CAAC;IAChD,OAAO,CAAC,EAAE,EAAE,MAAM,IAAI,GAAG,IAAI,CAAC;IAC9B,KAAK,IAAI,IAAI,CAAC;IACd;;;OAGG;IACH,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB;;;OAGG;IACH,YAAY,CAAC,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI,CAAC;CACtC;AAED,+EAA+E;AAC/E,MAAM,WAAW,UAAU;IAC1B,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,OAAO,CAAC;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,2EAA2E;IAC3E,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,4FAA4F;AAC5F,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,CAAC,GAAG,EAAE,UAAU,GAAG,IAAI,CAAC;IAC5B,SAAS,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,UAAU,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IACrD,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,IAAI,IAAI,CAAC;CACd;AAED,kHAAkH;AAClH,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,MAAM,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IAC9D,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,IAAI,IAAI,CAAC;CACd;AAED,MAAM,MAAM,YAAY,GAAG,gBAAgB,GAAG,aAAa,CAAC;AAE5D,MAAM,WAAW,MAAM;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,oCAAoC;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,2EAA2E;IAC3E,IAAI,CAAC,EAAE,IAAI,CAAC;IACZ,kEAAkE;IAClE,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IAC1B,0DAA0D;IAC1D,UAAU,CAAC,EAAE,YAAY,EAAE,CAAC;IAC5B,mDAAmD;IACnD,iBAAiB,CAAC,EAAE,OAAO,iBAAiB,CAAC;CAC7C"}

package/dist/web/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/web/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/web/types.ts"],"names":[],"mappings":""}

package/dist/web/util.d.ts

@@ -0,0 +1,12 @@
+export declare const utf8: (s: string) => Uint8Array;
+export declare const fromUtf8: (b: Uint8Array) => string;
+export declare function b64uEncode(bytes: Uint8Array): string;
+export declare function b64uDecode(str: string): Uint8Array;
+/** R4-N3: the one encoding of some bytes (no padding, no stray bits in the last character, no '+'/'/'). */
+export declare function isCanonicalB64u(s: string): boolean;
+export declare function concat(...parts: Uint8Array[]): Uint8Array;
+export declare function randomBytes(n: number): Uint8Array;
+export declare function equalBytes(a: Uint8Array, b: Uint8Array): boolean;
+/** WebCrypto wants BufferSource; TS 5.7+/7 types Uint8Array<ArrayBufferLike> strictly. */
+export declare const bs: (b: Uint8Array) => BufferSource;
+//# sourceMappingURL=util.d.ts.map

package/dist/web/util.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../../src/web/util.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,IAAI,MAAO,MAAM,KAAG,UAA2B,CAAC;AAC7D,eAAO,MAAM,QAAQ,MAAO,UAAU,KAAG,MAAuB,CAAC;AAEjE,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAMpD;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAMlD;AAED,2GAA2G;AAC3G,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAOlD;AAED,wBAAgB,MAAM,CAAC,GAAG,KAAK,EAAE,UAAU,EAAE,GAAG,UAAU,CAQzD;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,GAAG,UAAU,CAEjD;AAED,wBAAgB,UAAU,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,GAAG,OAAO,CAKhE;AAED,0FAA0F;AAC1F,eAAO,MAAM,EAAE,MAAO,UAAU,KAAG,YAA4C,CAAC"}

package/dist/web/util.js

@@ -0,0 +1,54 @@
+// Browser-safe byte helpers (no Buffer, no node:*).
+const enc = new TextEncoder();
+const dec = new TextDecoder();
+export const utf8 = (s) => enc.encode(s);
+export const fromUtf8 = (b) => dec.decode(b);
+export function b64uEncode(bytes) {
+    let s = "";
+    for (let i = 0; i < bytes.length; i += 0x8000) {
+        s += String.fromCharCode(...bytes.subarray(i, i + 0x8000));
+    }
+    return btoa(s).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+export function b64uDecode(str) {
+    const b64 = str.replace(/-/g, "+").replace(/_/g, "/");
+    const bin = atob(b64 + "=".repeat((4 - (b64.length % 4)) % 4));
+    const out = new Uint8Array(bin.length);
+    for (let i = 0; i < bin.length; i++)
+        out[i] = bin.charCodeAt(i);
+    return out;
+}
+/** R4-N3: the one encoding of some bytes (no padding, no stray bits in the last character, no '+'/'/'). */
+export function isCanonicalB64u(s) {
+    if (!/^[A-Za-z0-9_-]*$/.test(s))
+        return false;
+    try {
+        return b64uEncode(b64uDecode(s)) === s;
+    }
+    catch {
+        return false;
+    }
+}
+export function concat(...parts) {
+    const out = new Uint8Array(parts.reduce((n, p) => n + p.length, 0));
+    let o = 0;
+    for (const p of parts) {
+        out.set(p, o);
+        o += p.length;
+    }
+    return out;
+}
+export function randomBytes(n) {
+    return crypto.getRandomValues(new Uint8Array(n));
+}
+export function equalBytes(a, b) {
+    if (a.length !== b.length)
+        return false;
+    let d = 0;
+    for (let i = 0; i < a.length; i++)
+        d |= a[i] ^ b[i];
+    return d === 0;
+}
+/** WebCrypto wants BufferSource; TS 5.7+/7 types Uint8Array<ArrayBufferLike> strictly. */
+export const bs = (b) => b;
+//# sourceMappingURL=util.js.map

package/dist/web/util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"util.js","sourceRoot":"","sources":["../../src/web/util.ts"],"names":[],"mappings":"AAAA,oDAAoD;AACpD,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;AAC9B,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;AAE9B,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,CAAS,EAAc,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAC7D,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAa,EAAU,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAEjE,MAAM,UAAU,UAAU,CAAC,KAAiB;IAC3C,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,MAAM,EAAE,CAAC;QAC/C,CAAC,IAAI,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAW;IACrC,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAChE,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,2GAA2G;AAC3G,MAAM,UAAU,eAAe,CAAC,CAAS;IACxC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,IAAI,CAAC;QACJ,OAAO,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,GAAG,KAAmB;IAC5C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACpE,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACvB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACd,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;IACf,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,CAAS;IACpC,OAAO,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,CAAa,EAAE,CAAa;IACtD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,KAAK,CAAC,CAAC;AAChB,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAa,EAAgB,EAAE,CAAC,CAA4B,CAAC"}

package/dist/web/webrtc.d.ts

@@ -0,0 +1,35 @@
+import type { PeerLink, RtcOptions, SignalingChannel } from "./types.js";
+/**
+ * S5/BL3: bytes waiting in OUR queue (above SCTP's buffer). Exceeding it is fine while the peer keeps draining (a
+ * legit message may be up to 64 MiB); a link that is over it AND made no progress for `stallMs` is closed.
+ */
+export declare const MAX_SEND_QUEUE: number;
+export interface DataChannelLinkOptions {
+    /** clock for stall detection. Default Date.now */
+    now?: () => number;
+    /** a link above MAX_SEND_QUEUE without any drain progress for this long is closed. Default 15 s */
+    stallMs?: number;
+}
+/**
+ * Wrap an RTCDataChannel as a PeerLink, chunking messages (1 flag byte: 1 = more follows). Reassembly is bounded
+ * (a peer streaming "more follows" forever gets the link closed) and sends respect `bufferedAmount`, so a burst
+ * of large messages never overflows the browser's send queue (which would close the channel).
+ */
+export declare function dataChannelLink(id: string, dc: RTCDataChannel, o?: DataChannelLinkOptions): PeerLink;
+export declare function resolveRtc(o: RtcOptions | undefined): typeof RTCPeerConnection;
+export interface SignalingConnectOptions {
+    rid: string;
+    selfId: string;
+    /** AES key protecting signal payloads (SDP/ICE) end-to-end, so the server sees opaque bytes. */
+    key: CryptoKey;
+    rtc?: RtcOptions;
+    gatherTimeoutMs?: number;
+    onLink(link: PeerLink): void;
+    onError?(e: unknown): void;
+}
+/**
+ * Establishes WebRTC data channels to every peer present in `rid`, using `channel` for
+ * signaling. The peer with the lexicographically smaller id sends the offer.
+ */
+export declare function connectViaSignaling(channel: SignalingChannel, o: SignalingConnectOptions): Promise<() => void>;
+//# sourceMappingURL=webrtc.d.ts.map

package/dist/web/webrtc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webrtc.d.ts","sourceRoot":"","sources":["../../src/web/webrtc.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AASzE;;;GAGG;AACH,eAAO,MAAM,cAAc,QAAmB,CAAC;AAK/C,MAAM,WAAW,sBAAsB;IACtC,kDAAkD;IAClD,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,mGAAmG;IACnG,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAC9B,EAAE,EAAE,MAAM,EACV,EAAE,EAAE,cAAc,EAClB,CAAC,GAAE,sBAA2B,GAC5B,QAAQ,CAuIV;AAED,wBAAgB,UAAU,CACzB,CAAC,EAAE,UAAU,GAAG,SAAS,GACvB,OAAO,iBAAiB,CAQ1B;AAED,MAAM,WAAW,uBAAuB;IACvC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,gGAAgG;IAChG,GAAG,EAAE,SAAS,CAAC;IACf,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,MAAM,CAAC,IAAI,EAAE,QAAQ,GAAG,IAAI,CAAC;IAC7B,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;CAC3B;AAID;;;GAGG;AACH,wBAAsB,mBAAmB,CACxC,OAAO,EAAE,gBAAgB,EACzB,CAAC,EAAE,uBAAuB,GACxB,OAAO,CAAC,MAAM,IAAI,CAAC,CAsIrB"}