@swal/edge-mesh 0.0.0-stage → 0.1.1

package/dist/types/index.d.ts

@@ -0,0 +1,293 @@
+export declare const TIPO_MENSAJE: {
+    readonly SYNC: "sync";
+    readonly ACK: "ack";
+    readonly HEARTBEAT: "heartbeat";
+    readonly HALLAZGO: "hallazgo";
+    readonly VOTACION: "votacion";
+    readonly SNAPSHOT: "snapshot";
+    readonly OP_LOG: "op_log";
+    readonly AUTHZ: "authz";
+    readonly NAMESPACE: "namespace";
+    readonly GOVERNANCE: "governance";
+    readonly IDENTITY: "identity";
+    readonly ERROR: "error";
+    /** Presentación, solicitud y respuesta de una `CredencialMedica`. */
+    readonly CREDENCIAL: "credencial";
+    /** Aval de un par (`Aval`) y su revocación. */
+    readonly AVAL: "aval";
+    /** Instantánea de un registro nacional, direccionada por hash. */
+    readonly REGISTRO: "registro";
+    readonly PQC_HANDSHAKE: "pqc_handshake";
+    readonly KEM_REPLY: "kem_reply";
+    readonly PQC_ACK: "pqc_ack";
+    readonly PEER_LIST_UPDATE: "peer_list_update";
+    readonly GOSSIP: "gossip";
+};
+export type TipoMensaje = (typeof TIPO_MENSAJE)[keyof typeof TIPO_MENSAJE];
+export declare const ESTADO_NODO: {
+    readonly OFFLINE: "offline";
+    readonly CONECTANDO: "conectando";
+    readonly ONLINE: "online";
+    readonly SUSPENDIDO: "suspendido";
+    readonly RECONECTANDO: "reconectando";
+    readonly ELIMINADO: "eliminado";
+};
+export type EstadoNodo = (typeof ESTADO_NODO)[keyof typeof ESTADO_NODO];
+export declare const ESTADO_SALUD: {
+    readonly SALUDABLE: "saludable";
+    readonly LENTO: "lento";
+    readonly FALLANDO: "fallando";
+    readonly DESCONOCIDO: "desconocido";
+};
+export type EstadoSalud = (typeof ESTADO_SALUD)[keyof typeof ESTADO_SALUD];
+export declare const POLITICA_GOBERNANZA: {
+    readonly DEMOCRATICA: "democratica";
+    readonly AUTORITARIA: "autoritaria";
+    readonly CONSENSO: "consenso";
+    readonly PLURALIDAD: "pluralidad";
+};
+export type PoliticaGobernanza = (typeof POLITICA_GOBERNANZA)[keyof typeof POLITICA_GOBERNANZA];
+export declare const TIPO_TRANSPORTE: {
+    readonly PEERJS: "peerjs";
+    readonly WEBSOCKET: "websocket";
+    readonly MEMORIA: "memoria";
+    readonly TOR: "tor";
+};
+export type TipoTransporte = (typeof TIPO_TRANSPORTE)[keyof typeof TIPO_TRANSPORTE];
+export declare function isTipoMensaje(valor: unknown): valor is TipoMensaje;
+export declare function isEstadoNodo(valor: unknown): valor is EstadoNodo;
+export type NodoId = string & {
+    readonly __brand: "NodoId";
+};
+export type ParPublico = Uint8Array;
+export interface Envolvente {
+    readonly id: string;
+    readonly tipo: TipoMensaje;
+    readonly origen: NodoId;
+    readonly destino: NodoId | "*";
+    readonly timestamp: number;
+    readonly firma: Uint8Array | null;
+    readonly payload: unknown;
+    readonly version: number;
+    readonly nonce: string;
+}
+export type PayloadSync = {
+    readonly tipoSync: "estado" | "delta" | "solicitud";
+    readonly docId: string;
+    readonly datos: Uint8Array;
+    readonly clock: number;
+};
+export type PayloadHeartbeat = {
+    readonly nodoId: NodoId;
+    readonly timestamp: number;
+    readonly secuencia: number;
+};
+export type PayloadHallazgo = {
+    readonly id: string;
+    readonly tipo: string;
+    readonly datos: unknown;
+    readonly nodoOrigen: NodoId;
+    readonly ttl: number;
+};
+export type PayloadVotacion = {
+    readonly propuesta: string;
+    readonly voto: "a_favor" | "en_contra" | "abstencion";
+    readonly nodoId: NodoId;
+    readonly peso: number;
+    readonly justificacion: string | null;
+    readonly firma?: Uint8Array | number[] | string | null;
+    readonly timestamp?: number;
+};
+export interface VerificadorVotos {
+    obtenerClavePublica(nodoId: NodoId): ParPublico | Uint8Array | undefined | null;
+    verificarFirma(mensaje: Uint8Array, firma: Uint8Array, clave: ParPublico | Uint8Array): boolean | Promise<boolean>;
+}
+export type PayloadSnapshot = {
+    readonly docId: string;
+    readonly version: number;
+    readonly datos: Uint8Array;
+    readonly nodosConfirmados: readonly NodoId[];
+};
+export type PayloadOpLog = {
+    readonly docId: string;
+    readonly operaciones: readonly Operacion[];
+    readonly desde: number;
+    readonly hasta: number;
+};
+export type PayloadAuthz = {
+    readonly accion: "conceder" | "revocar" | "verificar";
+    readonly espacio: string;
+    readonly sujeto: NodoId;
+    readonly capacidad: string;
+};
+export type PayloadNamespace = {
+    readonly accion: "crear" | "unir" | "abandonar" | "listar";
+    readonly espacio: string;
+    readonly nodoId: NodoId;
+};
+export type PayloadIdentity = {
+    readonly nodoId: NodoId;
+    readonly parPublico: ParPublico;
+    readonly algoritmo: string;
+    readonly prueba: Uint8Array;
+};
+export type PayloadError = {
+    readonly codigo: number;
+    readonly mensaje: string;
+    readonly origen: NodoId | null;
+    readonly idMensajeOriginal: string | null;
+};
+export interface Operacion {
+    readonly id: string;
+    readonly tipo: string;
+    readonly datos: unknown;
+    readonly timestamp: number;
+    readonly autor: NodoId;
+    readonly secuencia: number;
+}
+export interface GovernancePolicy {
+    readonly politica: PoliticaGobernanza;
+    readonly umbral: number;
+    readonly ventanaMs: number;
+    readonly pesoNodo: Readonly<Record<string, number>>;
+    readonly reglas: readonly string[];
+}
+export interface NamespacePartition {
+    readonly id: string;
+    readonly nombre: string;
+    readonly nodos: readonly NodoId[];
+    readonly fechaCreacion: number;
+    readonly metadatos: Readonly<Record<string, string>>;
+}
+export interface NamespaceCapabilityGrant {
+    readonly id: string;
+    readonly espacio: string;
+    readonly sujeto: NodoId;
+    readonly capacidad: string;
+    readonly fechaEmision: number;
+    readonly fechaExpiracion: number;
+    readonly firma: Uint8Array;
+}
+export interface HealthStatus {
+    readonly nodoId: NodoId;
+    readonly estado: EstadoSalud;
+    readonly ultimoHeartbeat: number;
+    readonly latenciaMs: number;
+    readonly fallosConsecutivos: number;
+}
+export interface EdgeMeshEventMap {
+    nodoConectado: CustomEvent<{
+        readonly nodoId: NodoId;
+    }>;
+    nodoDesconectado: CustomEvent<{
+        readonly nodoId: NodoId;
+    }>;
+    mensajeRecibido: CustomEvent<{
+        readonly envolvente: Envolvente;
+    }>;
+    syncCompletado: CustomEvent<{
+        readonly docId: string;
+        readonly clock: number;
+    }>;
+    error: CustomEvent<{
+        readonly mensaje: string;
+        readonly error?: Error;
+    }>;
+    estadoCambiado: CustomEvent<{
+        readonly estadoAnterior: EstadoNodo;
+        readonly estadoNuevo: EstadoNodo;
+    }>;
+    hallazgoRecibido: CustomEvent<{
+        readonly hallazgo: PayloadHallazgo;
+    }>;
+    votacionRecibida: CustomEvent<{
+        readonly votacion: PayloadVotacion;
+    }>;
+    saludCambiada: CustomEvent<{
+        readonly nodoId: NodoId;
+        readonly salud: EstadoSalud;
+    }>;
+    failover: CustomEvent<{
+        readonly antiguoMaster: NodoId | null;
+        readonly nuevoMaster: NodoId;
+        readonly razon: "timeout" | "forced" | "manual";
+    }>;
+}
+export type EdgeMeshEvent = EdgeMeshEventMap[keyof EdgeMeshEventMap];
+export interface StorageEntry<T = unknown> {
+    readonly key: string;
+    readonly valor: T;
+    readonly timestamp: number;
+    readonly version: number;
+}
+export type StorageFilter = {
+    readonly prefijo?: string;
+    readonly desde?: number;
+    readonly hasta?: number;
+    readonly limite?: number;
+};
+export interface EdgeMeshConfig {
+    readonly nodoId: NodoId;
+    /**
+     * When set, EdgeMesh opens its own PeerJS transport with this id.
+     * Prefer omitting this when the host app already owns PeerJS (e.g. Shelf p2p-mesh-core).
+     */
+    readonly peerId?: string;
+    /** Serialized keypair bytes from `serializeKeypair`, not a raw private key. */
+    readonly identitySecret?: Uint8Array;
+    readonly heartbeatIntervalMs?: number;
+    readonly heartbeatTimeoutMs?: number;
+    readonly snapshotInterval?: number;
+    readonly snapshotConfig?: any;
+    readonly storagePrefix?: string;
+    readonly storageBackend?: "mem" | "idb";
+    readonly governancePolicy?: GovernancePolicy;
+    readonly transportConfig?: Record<string, unknown>;
+    readonly maxReconnectAttempts?: number;
+    readonly logLevel?: "debug" | "info" | "warn" | "error";
+    /**
+     * When true (default), remote SYNC requires write/sync capability for the origin peer.
+     * Remote AUTHZ grants require a valid signature from a registered admin/master key.
+     */
+    readonly requireAuthz?: boolean;
+    /**
+     * When true (default), remote SYNC/AUTHZ envelopes must carry a verifiable ML-DSA signature from a peer
+     * key registered with `registrarClavePublica`. Set to false only for legacy/unsigned deployments.
+     */
+    readonly requireSignedEnvelopes?: boolean;
+    /**
+     * Namespace used when authorizing generic CRDT sync writes.
+     * Defaults to "global".
+     */
+    readonly defaultSyncNamespace?: string;
+    /**
+     * Optional external Yjs document (Phase B: share host app CRDT doc).
+     * When provided, EdgeMesh does **not** destroy it on `detener()`.
+     * Use a structural type to avoid forcing yjs types on pure type consumers.
+     */
+    readonly yDoc?: {
+        on: (...args: never[]) => unknown;
+        off: (...args: never[]) => unknown;
+        getMap: (name: string) => unknown;
+        destroy: () => void;
+        [key: string]: unknown;
+    };
+    /**
+     * When true, local Yjs updates are relayed over the attached ITransport.
+     * Default: `false` if `yDoc` is provided (host app owns YJS broadcast, e.g. p2pManager),
+     * otherwise `true`.
+     */
+    readonly relayLocalYjs?: boolean;
+    /**
+     * When true (or omitted/undefined), PQC Handshake and encryption on SYNC path are enabled.
+     * Set to false to disable/simulate fallback behavior.
+     */
+    readonly enablePqcEncryption?: boolean;
+    readonly initialMaster?: NodoId;
+    readonly authorityTimeoutMs?: number;
+    readonly sybilThreshold?: number;
+    readonly requireSignedVotes?: boolean;
+    readonly gossipFanOut?: number;
+    readonly gossipTTL?: number;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,YAAY;aACxB,IAAI,EAAE,MAAM;aACZ,GAAG,EAAE,KAAK;aACV,SAAS,EAAE,WAAW;aAKtB,QAAQ,EAAE,UAAU;aACpB,QAAQ,EAAE,UAAU;aACpB,QAAQ,EAAE,UAAU;aACpB,MAAM,EAAE,QAAQ;aAChB,KAAK,EAAE,OAAO;aACd,SAAS,EAAE,WAAW;aACtB,UAAU,EAAE,YAAY;aACxB,QAAQ,EAAE,UAAU;aACpB,KAAK,EAAE,OAAO;IAQd,qEAAqE;aACrE,UAAU,EAAE,YAAY;IACxB,+CAA+C;aAC/C,IAAI,EAAE,MAAM;IACZ,kEAAkE;aAClE,QAAQ,EAAE,UAAU;aACpB,aAAa,EAAE,eAAe;aAC9B,SAAS,EAAE,WAAW;aACtB,OAAO,EAAE,SAAS;aAClB,gBAAgB,EAAE,kBAAkB;aACpC,MAAM,EAAE,QAAQ;CACP,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAE3E,eAAO,MAAM,WAAW;aACvB,OAAO,EAAE,SAAS;aAClB,UAAU,EAAE,YAAY;aACxB,MAAM,EAAE,QAAQ;aAChB,UAAU,EAAE,YAAY;aACxB,YAAY,EAAE,cAAc;aAC5B,SAAS,EAAE,WAAW;CACb,CAAC;AAEX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,WAAW,CAAC,CAAC;AAExE,eAAO,MAAM,YAAY;aACxB,SAAS,EAAE,WAAW;aACtB,KAAK,EAAE,OAAO;aACd,QAAQ,EAAE,UAAU;aACpB,WAAW,EAAE,aAAa;CACjB,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAE3E,eAAO,MAAM,mBAAmB;aAC/B,WAAW,EAAE,aAAa;aAC1B,WAAW,EAAE,aAAa;aAC1B,QAAQ,EAAE,UAAU;aACpB,UAAU,EAAE,YAAY;CACf,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAC7B,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,eAAe;aAC3B,MAAM,EAAE,QAAQ;aAChB,SAAS,EAAE,WAAW;aACtB,OAAO,EAAE,SAAS;aAClB,GAAG,EAAE,KAAK;CACD,CAAC;AAEX,MAAM,MAAM,cAAc,GACzB,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,OAAO,eAAe,CAAC,CAAC;AAIxD,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,WAAW,CAKlE;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,UAAU,CAKhE;AAID,MAAM,MAAM,MAAM,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAA;CAAE,CAAC;AAE7D,MAAM,MAAM,UAAU,GAAG,UAAU,CAAC;AAIpC,MAAM,WAAW,UAAU;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,GAAG,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACvB;AAID,MAAM,MAAM,WAAW,GAAG;IACzB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,GAAG,WAAW,CAAC;IACpD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,WAAW,GAAG,YAAY,CAAC;IACtD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,GAAG,MAAM,EAAE,GAAG,MAAM,GAAG,IAAI,CAAC;IACvD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC5B,CAAC;AAEF,MAAM,WAAW,gBAAgB;IAChC,mBAAmB,CAClB,MAAM,EAAE,MAAM,GACZ,UAAU,GAAG,UAAU,GAAG,SAAS,GAAG,IAAI,CAAC;IAC9C,cAAc,CACb,OAAO,EAAE,UAAU,EACnB,KAAK,EAAE,UAAU,EACjB,KAAK,EAAE,UAAU,GAAG,UAAU,GAC5B,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC9B;AAED,MAAM,MAAM,eAAe,GAAG;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7C,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,SAAS,SAAS,EAAE,CAAC;IAC3C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IAC1B,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,SAAS,GAAG,WAAW,CAAC;IACtD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC9B,QAAQ,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,WAAW,GAAG,QAAQ,CAAC;IAC3D,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1C,CAAC;AAIF,MAAM,WAAW,SAAS;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC3B;AAID,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAID,MAAM,WAAW,kBAAkB;IAClC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACrD;AAID,MAAM,WAAW,wBAAwB;IACxC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;CAC3B;AAID,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACpC;AAID,MAAM,WAAW,gBAAgB;IAChC,aAAa,EAAE,WAAW,CAAC;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACxD,gBAAgB,EAAE,WAAW,CAAC;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC3D,eAAe,EAAE,WAAW,CAAC;QAAE,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;IAClE,cAAc,EAAE,WAAW,CAAC;QAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;KACvB,CAAC,CAAC;IACH,KAAK,EAAE,WAAW,CAAC;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAA;KAAE,CAAC,CAAC;IACzE,cAAc,EAAE,WAAW,CAAC;QAC3B,QAAQ,CAAC,cAAc,EAAE,UAAU,CAAC;QACpC,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAC;KACjC,CAAC,CAAC;IACH,gBAAgB,EAAE,WAAW,CAAC;QAAE,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAA;KAAE,CAAC,CAAC;IACtE,gBAAgB,EAAE,WAAW,CAAC;QAAE,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAA;KAAE,CAAC,CAAC;IACtE,aAAa,EAAE,WAAW,CAAC;QAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;KAC5B,CAAC,CAAC;IACH,QAAQ,EAAE,WAAW,CAAC;QACrB,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;QACtC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,QAAQ,GAAG,QAAQ,CAAC;KAChD,CAAC,CAAC;CACH;AAED,MAAM,MAAM,aAAa,GAAG,gBAAgB,CAAC,MAAM,gBAAgB,CAAC,CAAC;AAIrE,MAAM,WAAW,YAAY,CAAC,CAAC,GAAG,OAAO;IACxC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;IAClB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,MAAM,aAAa,GAAG;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CACzB,CAAC;AAIF,MAAM,WAAW,cAAc;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,+EAA+E;IAC/E,QAAQ,CAAC,cAAc,CAAC,EAAE,UAAU,CAAC;IACrC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,cAAc,CAAC,EAAE,GAAG,CAAC;IAC9B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC;IACxC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IAC7C,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnD,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACxD;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC;;;OAGG;IACH,QAAQ,CAAC,sBAAsB,CAAC,EAAE,OAAO,CAAC;IAC1C;;;OAGG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IACvC;;;;OAIG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE;QACf,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,OAAO,CAAC;QAClC,GAAG,EAAE,CAAC,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,OAAO,CAAC;QACnC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;QAClC,OAAO,EAAE,MAAM,IAAI,CAAC;QACpB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;KACvB,CAAC;IACF;;;;OAIG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAC;IACjC;;;OAGG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,CAAC;IACtC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC5B"}

package/dist/types/index.js

@@ -0,0 +1,73 @@
+// ─── CONST OBJECT PATTERNS ────────────────────────────────────────────────
+export const TIPO_MENSAJE = {
+    SYNC: "sync",
+    ACK: "ack",
+    HEARTBEAT: "heartbeat",
+    // La clave estaba mal escrita (`HALLazGO`); el valor de cable nunca lo estuvo,
+    // así que corregirla no rompe a ningún par. Se renombra porque una clave de enum
+    // mal escrita es la clase de defecto que sobrevive años y luego alguien
+    // empareja mal contra ella.
+    HALLAZGO: "hallazgo",
+    VOTACION: "votacion",
+    SNAPSHOT: "snapshot",
+    OP_LOG: "op_log",
+    AUTHZ: "authz",
+    NAMESPACE: "namespace",
+    GOVERNANCE: "governance",
+    IDENTITY: "identity",
+    ERROR: "error",
+    // ── CAPA MÉDICA (docs/medico/protocolo.md §7) ──
+    //
+    // El tráfico de credenciales NO pasa por AUTHZ a propósito: una concesión
+    // authz es estado de *capacidad local*, mientras que una credencial es una
+    // *afirmación replicada*. Confundirlas vuelve ambas inauditables — una
+    // concesión se puede revocar sin tocar el registro que la replicó, y un
+    // registro parece revocable cuando no lo es.
+    /** Presentación, solicitud y respuesta de una `CredencialMedica`. */
+    CREDENCIAL: "credencial",
+    /** Aval de un par (`Aval`) y su revocación. */
+    AVAL: "aval",
+    /** Instantánea de un registro nacional, direccionada por hash. */
+    REGISTRO: "registro",
+    PQC_HANDSHAKE: "pqc_handshake",
+    KEM_REPLY: "kem_reply",
+    PQC_ACK: "pqc_ack",
+    PEER_LIST_UPDATE: "peer_list_update",
+    GOSSIP: "gossip",
+};
+export const ESTADO_NODO = {
+    OFFLINE: "offline",
+    CONECTANDO: "conectando",
+    ONLINE: "online",
+    SUSPENDIDO: "suspendido",
+    RECONECTANDO: "reconectando",
+    ELIMINADO: "eliminado",
+};
+export const ESTADO_SALUD = {
+    SALUDABLE: "saludable",
+    LENTO: "lento",
+    FALLANDO: "fallando",
+    DESCONOCIDO: "desconocido",
+};
+export const POLITICA_GOBERNANZA = {
+    DEMOCRATICA: "democratica",
+    AUTORITARIA: "autoritaria",
+    CONSENSO: "consenso",
+    PLURALIDAD: "pluralidad",
+};
+export const TIPO_TRANSPORTE = {
+    PEERJS: "peerjs",
+    WEBSOCKET: "websocket",
+    MEMORIA: "memoria",
+    TOR: "tor",
+};
+// ─── TYPE GUARDS ───────────────────────────────────────────────────────────
+export function isTipoMensaje(valor) {
+    return (typeof valor === "string" &&
+        Object.values(TIPO_MENSAJE).includes(valor));
+}
+export function isEstadoNodo(valor) {
+    return (typeof valor === "string" &&
+        Object.values(ESTADO_NODO).includes(valor));
+}
+//# sourceMappingURL=index.js.map

package/dist/types/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAE7E,MAAM,CAAC,MAAM,YAAY,GAAG;IAC3B,IAAI,EAAE,MAAM;IACZ,GAAG,EAAE,KAAK;IACV,SAAS,EAAE,WAAW;IACtB,+EAA+E;IAC/E,iFAAiF;IACjF,wEAAwE;IACxE,4BAA4B;IAC5B,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;IACpB,MAAM,EAAE,QAAQ;IAChB,KAAK,EAAE,OAAO;IACd,SAAS,EAAE,WAAW;IACtB,UAAU,EAAE,YAAY;IACxB,QAAQ,EAAE,UAAU;IACpB,KAAK,EAAE,OAAO;IACd,kDAAkD;IAClD,EAAE;IACF,0EAA0E;IAC1E,2EAA2E;IAC3E,uEAAuE;IACvE,wEAAwE;IACxE,6CAA6C;IAC7C,qEAAqE;IACrE,UAAU,EAAE,YAAY;IACxB,+CAA+C;IAC/C,IAAI,EAAE,MAAM;IACZ,kEAAkE;IAClE,QAAQ,EAAE,UAAU;IACpB,aAAa,EAAE,eAAe;IAC9B,SAAS,EAAE,WAAW;IACtB,OAAO,EAAE,SAAS;IAClB,gBAAgB,EAAE,kBAAkB;IACpC,MAAM,EAAE,QAAQ;CACP,CAAC;AAIX,MAAM,CAAC,MAAM,WAAW,GAAG;IAC1B,OAAO,EAAE,SAAS;IAClB,UAAU,EAAE,YAAY;IACxB,MAAM,EAAE,QAAQ;IAChB,UAAU,EAAE,YAAY;IACxB,YAAY,EAAE,cAAc;IAC5B,SAAS,EAAE,WAAW;CACb,CAAC;AAIX,MAAM,CAAC,MAAM,YAAY,GAAG;IAC3B,SAAS,EAAE,WAAW;IACtB,KAAK,EAAE,OAAO;IACd,QAAQ,EAAE,UAAU;IACpB,WAAW,EAAE,aAAa;CACjB,CAAC;AAIX,MAAM,CAAC,MAAM,mBAAmB,GAAG;IAClC,WAAW,EAAE,aAAa;IAC1B,WAAW,EAAE,aAAa;IAC1B,QAAQ,EAAE,UAAU;IACpB,UAAU,EAAE,YAAY;CACf,CAAC;AAKX,MAAM,CAAC,MAAM,eAAe,GAAG;IAC9B,MAAM,EAAE,QAAQ;IAChB,SAAS,EAAE,WAAW;IACtB,OAAO,EAAE,SAAS;IAClB,GAAG,EAAE,KAAK;CACD,CAAC;AAKX,8EAA8E;AAE9E,MAAM,UAAU,aAAa,CAAC,KAAc;IAC3C,OAAO,CACN,OAAO,KAAK,KAAK,QAAQ;QACzB,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,KAAoB,CAAC,CAC1D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc;IAC1C,OAAO,CACN,OAAO,KAAK,KAAK,QAAQ;QACzB,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,KAAmB,CAAC,CACxD,CAAC;AACH,CAAC"}

package/dist/web/admission.d.ts

@@ -0,0 +1,24 @@
+/** A deviceId is the fingerprint of the device's ML-DSA-65 identity key (`deviceIdOf`): 43 base64url characters. */
+export declare const DEVICE_ID_RE: RegExp;
+export declare const isDeviceId: (x: unknown) => x is string;
+/** True iff `deviceId` is the fingerprint of the base64url identity key `pub` (the binding every check relies on). */
+export declare function idMatchesPub(deviceId: string, pub: string): Promise<boolean>;
+/**
+ * Mesh role of a device: the root of the mesh's web/trust store is the owner; a grant that may delegate
+ * (`delegate >= 1`) makes an admin; any other grant a member.
+ */
+export type Role = "owner" | "admin" | "member";
+/** The locally pinned trust anchor (never read from the shared doc): the mesh owner's identity. */
+export interface TrustRoot {
+    mid: string;
+    deviceId: string;
+    pub: string;
+}
+/** SF1: epochs stay far below any integer edge (u32 on the wire, safe integers in JS). */
+export declare const MAX_EPOCH: number;
+/** SF1: a received rotation may skip at most this many epochs ahead of the local one. */
+export declare const MAX_EPOCH_SKIP = 8;
+export declare const isEpoch: (x: unknown) => x is number;
+/** Who may admit whom: the owner admits admins and members, an admin admits members, members admit nobody. */
+export declare function canIssue(issuer: Role, subject: Role): boolean;
+//# sourceMappingURL=admission.d.ts.map

package/dist/web/admission.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"admission.d.ts","sourceRoot":"","sources":["../../src/web/admission.ts"],"names":[],"mappings":"AAKA,oHAAoH;AACpH,eAAO,MAAM,YAAY,QAAwB,CAAC;AAClD,eAAO,MAAM,UAAU,MAAO,OAAO,KAAG,CAAC,IAAI,MACC,CAAC;AAG/C,sHAAsH;AACtH,wBAAsB,YAAY,CACjC,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,GACT,OAAO,CAAC,OAAO,CAAC,CAelB;AAED;;;GAGG;AACH,MAAM,MAAM,IAAI,GAAG,OAAO,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEhD,mGAAmG;AACnG,MAAM,WAAW,SAAS;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;CACZ;AAED,0FAA0F;AAC1F,eAAO,MAAM,SAAS,QAAc,CAAC;AACrC,yFAAyF;AACzF,eAAO,MAAM,cAAc,IAAI,CAAC;AAChC,eAAO,MAAM,OAAO,MAAO,OAAO,KAAG,CAAC,IAAI,MACmC,CAAC;AAE9E,8GAA8G;AAC9G,wBAAgB,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,GAAG,OAAO,CAI7D"}

package/dist/web/admission.js

@@ -0,0 +1,41 @@
+// Identity of mesh devices and the trust anchor. Membership and authority themselves live in web/trust (signed
+// grants and revocations, see `secstate.ts`): this module only keeps what every layer shares.
+import { deviceIdOf } from "./pq.js";
+import { b64uDecode, isCanonicalB64u } from "./util.js";
+/** A deviceId is the fingerprint of the device's ML-DSA-65 identity key (`deviceIdOf`): 43 base64url characters. */
+export const DEVICE_ID_RE = /^[A-Za-z0-9_-]{43}$/;
+export const isDeviceId = (x) => typeof x === "string" && DEVICE_ID_RE.test(x);
+const fpCache = new Map();
+/** True iff `deviceId` is the fingerprint of the base64url identity key `pub` (the binding every check relies on). */
+export async function idMatchesPub(deviceId, pub) {
+    // R4-N3: a key is accepted only in its canonical encoding (the string is what web/trust documents carry)
+    if (!isDeviceId(deviceId) || typeof pub !== "string" || !isCanonicalB64u(pub))
+        return false;
+    let fp = fpCache.get(pub);
+    if (fp === undefined) {
+        try {
+            fp = await deviceIdOf(b64uDecode(pub));
+        }
+        catch {
+            return false;
+        }
+        if (fpCache.size >= 4096)
+            fpCache.clear();
+        fpCache.set(pub, fp);
+    }
+    return fp === deviceId;
+}
+/** SF1: epochs stay far below any integer edge (u32 on the wire, safe integers in JS). */
+export const MAX_EPOCH = 2 ** 31 - 1;
+/** SF1: a received rotation may skip at most this many epochs ahead of the local one. */
+export const MAX_EPOCH_SKIP = 8;
+export const isEpoch = (x) => typeof x === "number" && Number.isSafeInteger(x) && x >= 0 && x <= MAX_EPOCH;
+/** Who may admit whom: the owner admits admins and members, an admin admits members, members admit nobody. */
+export function canIssue(issuer, subject) {
+    if (subject === "owner")
+        return false;
+    if (issuer === "owner")
+        return true;
+    return issuer === "admin" && subject === "member";
+}
+//# sourceMappingURL=admission.js.map

package/dist/web/admission.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admission.js","sourceRoot":"","sources":["../../src/web/admission.ts"],"names":[],"mappings":"AAAA,+GAA+G;AAC/G,8FAA8F;AAC9F,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAExD,oHAAoH;AACpH,MAAM,CAAC,MAAM,YAAY,GAAG,qBAAqB,CAAC;AAClD,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAU,EAAe,EAAE,CACrD,OAAO,CAAC,KAAK,QAAQ,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAE/C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;AAC1C,sHAAsH;AACtH,MAAM,CAAC,KAAK,UAAU,YAAY,CACjC,QAAgB,EAChB,GAAW;IAEX,yGAAyG;IACzG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;QAC5E,OAAO,KAAK,CAAC;IACd,IAAI,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;QACtB,IAAI,CAAC;YACJ,EAAE,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,KAAK,CAAC;QACd,CAAC;QACD,IAAI,OAAO,CAAC,IAAI,IAAI,IAAI;YAAE,OAAO,CAAC,KAAK,EAAE,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACtB,CAAC;IACD,OAAO,EAAE,KAAK,QAAQ,CAAC;AACxB,CAAC;AAeD,0FAA0F;AAC1F,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACrC,yFAAyF;AACzF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC;AAChC,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAU,EAAe,EAAE,CAClD,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC;AAE9E,8GAA8G;AAC9G,MAAM,UAAU,QAAQ,CAAC,MAAY,EAAE,OAAa;IACnD,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,MAAM,KAAK,OAAO,IAAI,OAAO,KAAK,QAAQ,CAAC;AACnD,CAAC"}

package/dist/web/crypto.d.ts

@@ -0,0 +1,18 @@
+import { equalBytes } from "./util.js";
+export declare const NONCE_LEN = 12;
+export declare function hkdf(ikm: Uint8Array, info: string, salt?: Uint8Array): Promise<Uint8Array>;
+export declare function importAesKey(raw: Uint8Array): Promise<CryptoKey>;
+/** Doc material = HKDF(meshKey, "swal-doc/v1|" + topic) (32 raw bytes). Never used directly to seal. */
+export declare function deriveDocMaterial(meshKey: Uint8Array, topicName: string): Promise<Uint8Array>;
+/** Sender key = HKDF(docMaterial, "swal-doc/v1|" + topic + "|sender|" + deviceId) -> AES-256-GCM. Each sender seals under its own key. */
+export declare function deriveSenderKey(docMaterial: Uint8Array, topicName: string, deviceId: string): Promise<CryptoKey>;
+/** Convenience (single-writer use / tests): the topic-level key without a sender component. */
+export declare function deriveDocKey(meshKey: Uint8Array, topicName: string): Promise<CryptoKey>;
+/** Test hook: position the counter of `key` (e.g. right before the wrap). */
+export declare function __setNonceCounter(key: CryptoKey, n: number): void;
+/** Returns nonce(12) | ciphertext+tag. */
+export declare function sealUpdate(docKey: CryptoKey, bytes: Uint8Array, aad?: Uint8Array | string): Promise<Uint8Array>;
+/** Throws on tampering / wrong key / wrong aad. */
+export declare function openUpdate(docKey: CryptoKey, sealed: Uint8Array, aad?: Uint8Array | string): Promise<Uint8Array>;
+export { equalBytes };
+//# sourceMappingURL=crypto.d.ts.map

package/dist/web/crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.d.ts","sourceRoot":"","sources":["../../src/web/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,UAAU,EAAqB,MAAM,WAAW,CAAC;AAEtE,eAAO,MAAM,SAAS,KAAK,CAAC;AAE5B,wBAAsB,IAAI,CACzB,GAAG,EAAE,UAAU,EACf,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,UAA+B,GACnC,OAAO,CAAC,UAAU,CAAC,CAUrB;AAED,wBAAsB,YAAY,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAKtE;AAED,wGAAwG;AACxG,wBAAsB,iBAAiB,CACtC,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,MAAM,GACf,OAAO,CAAC,UAAU,CAAC,CAErB;AAED,0IAA0I;AAC1I,wBAAsB,eAAe,CACpC,WAAW,EAAE,UAAU,EACvB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,GACd,OAAO,CAAC,SAAS,CAAC,CAIpB;AAED,+FAA+F;AAC/F,wBAAsB,YAAY,CACjC,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,MAAM,GACf,OAAO,CAAC,SAAS,CAAC,CAEpB;AAwBD,6EAA6E;AAC7E,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAOjE;AAED,0CAA0C;AAC1C,wBAAsB,UAAU,CAC/B,MAAM,EAAE,SAAS,EACjB,KAAK,EAAE,UAAU,EACjB,GAAG,GAAE,UAAU,GAAG,MAA0B,GAC1C,OAAO,CAAC,UAAU,CAAC,CASrB;AAED,mDAAmD;AACnD,wBAAsB,UAAU,CAC/B,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,UAAU,EAClB,GAAG,GAAE,UAAU,GAAG,MAA0B,GAC1C,OAAO,CAAC,UAAU,CAAC,CAcrB;AAED,OAAO,EAAE,UAAU,EAAE,CAAC"}

package/dist/web/crypto.js

@@ -0,0 +1,78 @@
+import { bs, concat, equalBytes, randomBytes, utf8 } from "./util.js";
+export const NONCE_LEN = 12;
+export async function hkdf(ikm, info, salt = new Uint8Array(32)) {
+    const k = await crypto.subtle.importKey("raw", bs(ikm), "HKDF", false, [
+        "deriveBits",
+    ]);
+    const bits = await crypto.subtle.deriveBits({ name: "HKDF", hash: "SHA-256", salt: bs(salt), info: bs(utf8(info)) }, k, 256);
+    return new Uint8Array(bits);
+}
+export async function importAesKey(raw) {
+    return crypto.subtle.importKey("raw", bs(raw), "AES-GCM", false, [
+        "encrypt",
+        "decrypt",
+    ]);
+}
+/** Doc material = HKDF(meshKey, "swal-doc/v1|" + topic) (32 raw bytes). Never used directly to seal. */
+export async function deriveDocMaterial(meshKey, topicName) {
+    return hkdf(meshKey, `swal-doc/v1|${topicName}`);
+}
+/** Sender key = HKDF(docMaterial, "swal-doc/v1|" + topic + "|sender|" + deviceId) -> AES-256-GCM. Each sender seals under its own key. */
+export async function deriveSenderKey(docMaterial, topicName, deviceId) {
+    return importAesKey(await hkdf(docMaterial, `swal-doc/v1|${topicName}|sender|${deviceId}`));
+}
+/** Convenience (single-writer use / tests): the topic-level key without a sender component. */
+export async function deriveDocKey(meshKey, topicName) {
+    return importAesKey(await deriveDocMaterial(meshKey, topicName));
+}
+// Nonce = 8B random prefix | 4B big-endian counter. A sealing key is already unique per
+// sender (see deriveSenderKey); the random prefix additionally separates sessions/reloads
+// of the same sender, and the prefix is regenerated before the 32-bit counter can wrap.
+const COUNTER_MAX = 0xffffffff;
+const counters = new WeakMap();
+function nextNonce(key) {
+    let st = counters.get(key);
+    if (!st) {
+        st = { prefix: randomBytes(8), n: 0 };
+        counters.set(key, st);
+    }
+    if (st.n >= COUNTER_MAX) {
+        st.prefix = randomBytes(8);
+        st.n = 0;
+    }
+    st.n += 1;
+    const nonce = new Uint8Array(NONCE_LEN);
+    nonce.set(st.prefix, 0);
+    new DataView(nonce.buffer).setUint32(8, st.n, false);
+    return nonce;
+}
+/** Test hook: position the counter of `key` (e.g. right before the wrap). */
+export function __setNonceCounter(key, n) {
+    let st = counters.get(key);
+    if (!st) {
+        st = { prefix: randomBytes(8), n: 0 };
+        counters.set(key, st);
+    }
+    st.n = n;
+}
+/** Returns nonce(12) | ciphertext+tag. */
+export async function sealUpdate(docKey, bytes, aad = new Uint8Array(0)) {
+    const nonce = nextNonce(docKey);
+    const additionalData = typeof aad === "string" ? utf8(aad) : aad;
+    const ct = await crypto.subtle.encrypt({ name: "AES-GCM", iv: bs(nonce), additionalData: bs(additionalData) }, docKey, bs(bytes));
+    return concat(nonce, new Uint8Array(ct));
+}
+/** Throws on tampering / wrong key / wrong aad. */
+export async function openUpdate(docKey, sealed, aad = new Uint8Array(0)) {
+    if (sealed.length < NONCE_LEN + 16)
+        throw new Error("sealed payload too short");
+    const additionalData = typeof aad === "string" ? utf8(aad) : aad;
+    const pt = await crypto.subtle.decrypt({
+        name: "AES-GCM",
+        iv: bs(sealed.subarray(0, NONCE_LEN)),
+        additionalData: bs(additionalData),
+    }, docKey, bs(sealed.subarray(NONCE_LEN)));
+    return new Uint8Array(pt);
+}
+export { equalBytes };
+//# sourceMappingURL=crypto.js.map

package/dist/web/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../src/web/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEtE,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC;AAE5B,MAAM,CAAC,KAAK,UAAU,IAAI,CACzB,GAAe,EACf,IAAY,EACZ,IAAI,GAAe,IAAI,UAAU,CAAC,EAAE,CAAC;IAErC,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE;QACtE,YAAY;KACZ,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,UAAU,CAC1C,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,EACvE,CAAC,EACD,GAAG,CACH,CAAC;IACF,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAe;IACjD,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE;QAChE,SAAS;QACT,SAAS;KACT,CAAC,CAAC;AACJ,CAAC;AAED,wGAAwG;AACxG,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,OAAmB,EACnB,SAAiB;IAEjB,OAAO,IAAI,CAAC,OAAO,EAAE,eAAe,SAAS,EAAE,CAAC,CAAC;AAClD,CAAC;AAED,0IAA0I;AAC1I,MAAM,CAAC,KAAK,UAAU,eAAe,CACpC,WAAuB,EACvB,SAAiB,EACjB,QAAgB;IAEhB,OAAO,YAAY,CAClB,MAAM,IAAI,CAAC,WAAW,EAAE,eAAe,SAAS,WAAW,QAAQ,EAAE,CAAC,CACtE,CAAC;AACH,CAAC;AAED,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,YAAY,CACjC,OAAmB,EACnB,SAAiB;IAEjB,OAAO,YAAY,CAAC,MAAM,iBAAiB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,wFAAwF;AACxF,0FAA0F;AAC1F,wFAAwF;AACxF,MAAM,WAAW,GAAG,UAAU,CAAC;AAC/B,MAAM,QAAQ,GAAG,IAAI,OAAO,EAAgD,CAAC;AAC7E,SAAS,SAAS,CAAC,GAAc;IAChC,IAAI,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,CAAC,EAAE,EAAE,CAAC;QACT,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QACtC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACvB,CAAC;IACD,IAAI,EAAE,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC;QACzB,EAAE,CAAC,MAAM,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAC3B,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;IACV,CAAC;IACD,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IACV,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;IACxC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACxB,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACrD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,iBAAiB,CAAC,GAAc,EAAE,CAAS;IAC1D,IAAI,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,CAAC,EAAE,EAAE,CAAC;QACT,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;QACtC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACvB,CAAC;IACD,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;AACV,CAAC;AAED,0CAA0C;AAC1C,MAAM,CAAC,KAAK,UAAU,UAAU,CAC/B,MAAiB,EACjB,KAAiB,EACjB,GAAG,GAAwB,IAAI,UAAU,CAAC,CAAC,CAAC;IAE5C,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,cAAc,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACjE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACrC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,cAAc,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,EACtE,MAAM,EACN,EAAE,CAAC,KAAK,CAAC,CACT,CAAC;IACF,OAAO,MAAM,CAAC,KAAK,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,mDAAmD;AACnD,MAAM,CAAC,KAAK,UAAU,UAAU,CAC/B,MAAiB,EACjB,MAAkB,EAClB,GAAG,GAAwB,IAAI,UAAU,CAAC,CAAC,CAAC;IAE5C,IAAI,MAAM,CAAC,MAAM,GAAG,SAAS,GAAG,EAAE;QACjC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC7C,MAAM,cAAc,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACjE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACrC;QACC,IAAI,EAAE,SAAS;QACf,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACrC,cAAc,EAAE,EAAE,CAAC,cAAc,CAAC;KAClC,EACD,MAAM,EACN,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAC9B,CAAC;IACF,OAAO,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;AAC3B,CAAC;AAED,OAAO,EAAE,UAAU,EAAE,CAAC"}

package/dist/web/exchange.d.ts

@@ -0,0 +1,23 @@
+import type { Mesh } from "./provider.js";
+export declare const HEALTH_SCHEMA_PREFIX = "swal.health/v1";
+export interface HealthRecord {
+    /** e.g. "swal.health/v1" or "swal.health/v1.weight" */
+    schema: string;
+    [k: string]: unknown;
+}
+export declare function isHealthRecord(r: unknown): r is HealthRecord;
+/** Topic carrying cross-app health records for one subject (`subj_<ULID>`). */
+export declare const exchangeTopic: (subject: string) => string;
+export interface Exchange {
+    topic: string;
+    send(record: HealthRecord): string;
+    onReceive(cb: (record: HealthRecord) => void): () => void;
+    destroy(): void;
+}
+/**
+ * Cross-app exchange over a dedicated mesh (created with topic = exchangeTopic(subject)).
+ * Records live in an append-only Y.Array 'records'; receivers see only entries added remotely
+ * (or by any writer after subscription), de-duplicated by record id.
+ */
+export declare function exchange(mesh: Mesh, doc: import("yjs").Doc, subject: string): Exchange;
+//# sourceMappingURL=exchange.d.ts.map

package/dist/web/exchange.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exchange.d.ts","sourceRoot":"","sources":["../../src/web/exchange.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAG1C,eAAO,MAAM,oBAAoB,mBAAmB,CAAC;AAErD,MAAM,WAAW,YAAY;IAC5B,uDAAuD;IACvD,MAAM,EAAE,MAAM,CAAC;IACf,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CACrB;AAED,wBAAgB,cAAc,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,YAAY,CAO5D;AAED,+EAA+E;AAC/E,eAAO,MAAM,aAAa,YAAa,MAAM,WACR,CAAC;AAEtC,MAAM,WAAW,QAAQ;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,MAAM,EAAE,YAAY,GAAG,MAAM,CAAC;IACnC,SAAS,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IAC1D,OAAO,IAAI,IAAI,CAAC;CAChB;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,CACvB,IAAI,EAAE,IAAI,EACV,GAAG,EAAE,OAAO,KAAK,EAAE,GAAG,EACtB,OAAO,EAAE,MAAM,GACb,QAAQ,CAyCV"}