@tienne/gestalt 0.108.0 → 0.110.0

package/dist/src/peer/roster.js

@@ -0,0 +1,160 @@
+import { isRawKey } from './keys.js';
+import { canonical, signText, verifyText } from './seal.js';
+const PERSON = /^[\p{L}\p{N}._-]{1,32}$/u;
+export function isPersonName(value) {
+    return typeof value === 'string' && PERSON.test(value);
+}
+export function isRelayUrl(value) {
+    if (typeof value !== 'string' || value.length > 512)
+        return false;
+    try {
+        const u = new URL(value);
+        return (u.protocol === 'ws:' || u.protocol === 'wss:') && u.host !== '';
+    }
+    catch {
+        return false;
+    }
+}
+/** 서명할 바이트. 목적 문자열을 앞에 붙여 다른 서명과 섞이지 않게 한다 */
+function rosterSigned(roster) {
+    return `gestalt-peer-roster-v1\n${canonical(roster)}`;
+}
+export function signRoster(roster, key) {
+    if (roster.issuer !== key.id)
+        throw new Error('명단의 issuer와 서명하는 키가 달라요');
+    return { roster, sig: signText(key, rosterSigned(roster)) };
+}
+export function memberOf(roster, machineKey) {
+    return roster.members.find((m) => m.machineKey === machineKey);
+}
+export function isAdmin(roster, machineKey) {
+    return memberOf(roster, machineKey)?.role === 'admin';
+}
+/**
+ * 새 명단을 받을지 정한다.
+ *
+ * - 지금 명단이 없으면 `anchor`(팀 id나 초대한 관리자 id)가 서명하고 그 키가 새 명단의
+ *   관리자여야 한다.
+ * - 지금 명단이 있으면 판이 더 높고 지금 명단의 관리자가 서명해야 한다. 같은 판은 다시
+ *   받지 않는다 — 같은 판에 다른 내용을 서명해 돌리는 걸 막는다.
+ */
+export function checkRosterUpdate(current, incoming, expect) {
+    const shape = checkShape(incoming);
+    if (!shape.ok)
+        return shape;
+    const { roster, sig } = incoming;
+    if (roster.team !== expect.team)
+        return { ok: false, reason: '다른 팀의 명단이에요' };
+    if (!verifyText(roster.issuer, rosterSigned(roster), sig)) {
+        return { ok: false, reason: '명단 서명이 맞지 않아요' };
+    }
+    if (!isAdmin(roster, roster.issuer)) {
+        return { ok: false, reason: '서명한 키가 새 명단의 관리자가 아니에요' };
+    }
+    if (!current) {
+        if (roster.issuer !== expect.anchor) {
+            return { ok: false, reason: '믿을 수 있는 관리자가 서명한 명단이 아니에요' };
+        }
+        return { ok: true };
+    }
+    if (roster.epoch <= current.roster.epoch) {
+        return {
+            ok: false,
+            reason: `판이 낮거나 같아요 (지금 ${current.roster.epoch}, 받은 것 ${roster.epoch})`,
+        };
+    }
+    if (!isAdmin(current.roster, roster.issuer)) {
+        return { ok: false, reason: '지금 명단의 관리자가 서명하지 않았어요' };
+    }
+    return { ok: true };
+}
+function checkShape(value) {
+    const bad = (reason) => ({ ok: false, reason: `명단 형식: ${reason}` });
+    if (typeof value !== 'object' || value === null)
+        return bad('객체가 아니에요');
+    const { roster, sig } = value;
+    if (typeof sig !== 'string')
+        return bad('서명이 없어요');
+    if (typeof roster !== 'object' || roster === null)
+        return bad('명단이 없어요');
+    if (roster.v !== 1)
+        return bad('버전');
+    if (!isRawKey(roster.team) || !isRawKey(roster.issuer))
+        return bad('키');
+    if (!Number.isSafeInteger(roster.epoch) || roster.epoch < 1)
+        return bad('판');
+    if (!Number.isSafeInteger(roster.issuedAt))
+        return bad('시각');
+    if (!isRelayUrl(roster.relay))
+        return bad('릴레이 주소');
+    if (!Array.isArray(roster.members) || roster.members.length === 0)
+        return bad('멤버');
+    if (roster.members.length > 1000)
+        return bad('멤버가 너무 많아요');
+    const seen = new Set();
+    for (const m of roster.members) {
+        if (typeof m !== 'object' || m === null)
+            return bad('멤버');
+        if (!isPersonName(m.person))
+            return bad('이름');
+        if (!isRawKey(m.machineKey) || !isRawKey(m.boxKey))
+            return bad('멤버 키');
+        if (m.role !== 'admin' && m.role !== 'member')
+            return bad('역할');
+        if (!Number.isSafeInteger(m.addedAt))
+            return bad('추가 시각');
+        if (seen.has(m.machineKey))
+            return bad('같은 기기가 두 번 있어요');
+        seen.add(m.machineKey);
+    }
+    return { ok: true };
+}
+/** 같은 내용을 다시 서명하지 않고 한 판 올린 새 명단을 만든다 */
+export function nextRoster(current, members, issuer, now = Date.now()) {
+    return { ...current, epoch: current.epoch + 1, members, issuedAt: now, issuer };
+}
+const INVITE_PREFIX = 'gpi1.';
+export function encodeInvite(invite) {
+    return INVITE_PREFIX + Buffer.from(JSON.stringify(invite), 'utf8').toString('base64url');
+}
+export function decodeInvite(code) {
+    const trimmed = code.trim();
+    if (!trimmed.startsWith(INVITE_PREFIX))
+        throw new Error('초대 코드 꼴이 아니에요');
+    let v;
+    try {
+        v = JSON.parse(Buffer.from(trimmed.slice(INVITE_PREFIX.length), 'base64url').toString('utf8'));
+    }
+    catch {
+        throw new Error('초대 코드를 못 읽었어요');
+    }
+    if (v.v !== 1 ||
+        !isRawKey(v.team) ||
+        !isRawKey(v.admin) ||
+        !isRawKey(v.adminBox) ||
+        !isRelayUrl(v.relay) ||
+        typeof v.id !== 'string' ||
+        !/^[A-Za-z0-9_-]{8,64}$/.test(v.id) ||
+        typeof v.secret !== 'string' ||
+        !/^[A-Za-z0-9_-]{43}$/.test(v.secret) ||
+        !isPersonName(v.person) ||
+        !Number.isSafeInteger(v.expiresAt)) {
+        throw new Error('초대 코드 내용이 맞지 않아요');
+    }
+    return v;
+}
+/** join 요청에 싣는 증명. 초대 코드를 가진 사람만 만든다 */
+export function joinProofText(inviteId, machineKey, boxKey) {
+    return canonical({ p: 'gestalt-peer-join-v1', invite: inviteId, key: machineKey, box: boxKey });
+}
+const LINK = /^gestalt:\/\/peer\/([^/#?\s]{1,255})\/([A-Za-z0-9_-]{1,64})#([A-Za-z0-9_-]{43})$/;
+export function formatShareLink(relayUrl, shareId, shareKey) {
+    return `gestalt://peer/${new URL(relayUrl).host}/${shareId}#${shareKey}`;
+}
+export function parseShareLink(link) {
+    const m = LINK.exec(link.trim());
+    if (!m)
+        throw new Error('공유 링크 꼴이 아니에요 (gestalt://peer/<릴레이>/<공유 id>#<키>)');
+    return { relayHost: m[1], shareId: m[2], shareKey: m[3] };
+}
+//# sourceMappingURL=roster.js.map

package/dist/src/peer/roster.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"roster.js","sourceRoot":"","sources":["../../../src/peer/roster.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAsC5D,MAAM,MAAM,GAAG,0BAA0B,CAAC;AAE1C,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,KAAK,CAAC;IAClE,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QACzB,OAAO,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,8CAA8C;AAC9C,SAAS,YAAY,CAAC,MAAc;IAClC,OAAO,2BAA2B,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,GAAe;IACxD,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACzE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,MAAc,EAAE,UAAkB;IACzD,OAAO,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,MAAc,EAAE,UAAkB;IACxD,OAAO,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,IAAI,KAAK,OAAO,CAAC;AACxD,CAAC;AAID;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAA4B,EAC5B,QAAiB,EACjB,MAAwC;IAExC,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IAC5B,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,QAAwB,CAAC;IACjD,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAC7E,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;QAC1D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAChD,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACpC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,wBAAwB,EAAE,CAAC;IACzD,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;YACpC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;QAC5D,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IACD,IAAI,MAAM,CAAC,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACzC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,kBAAkB,OAAO,CAAC,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,KAAK,GAAG;SACxE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IACxD,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,MAAM,GAAG,GAAG,CAAC,MAAc,EAAiB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,MAAM,EAAE,EAAE,CAAC,CAAC;IAC3F,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC,UAAU,CAAC,CAAC;IACxE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,KAA8B,CAAC;IACvD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,SAAS,CAAC,CAAC;IACnD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC,SAAS,CAAC,CAAC;IACzE,IAAI,MAAM,CAAC,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IACxE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,GAAG,CAAC;QAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;IAC7E,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;IAC7D,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;IACpF,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI;QAAE,OAAO,GAAG,CAAC,YAAY,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1D,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC;QACvE,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;QAChE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO,CAAC;YAAE,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC;QAC1D,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC;YAAE,OAAO,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACzD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,UAAU,CACxB,OAAe,EACf,OAAuB,EACvB,MAAc,EACd,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,OAAO,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,GAAG,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;AAClF,CAAC;AAmBD,MAAM,aAAa,GAAG,OAAO,CAAC;AAE9B,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,OAAO,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC3F,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACzE,IAAI,CAAkB,CAAC;IACvB,IAAI,CAAC;QACH,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACjG,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACnC,CAAC;IACD,IACE,CAAC,CAAC,CAAC,KAAK,CAAC;QACT,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;QACjB,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;QAClB,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QACrB,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC;QACpB,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;QACxB,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;QAC5B,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;QACrC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC;QACvB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,EAClC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,CAAW,CAAC;AACrB,CAAC;AAED,wCAAwC;AACxC,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,UAAkB,EAAE,MAAc;IAChF,OAAO,SAAS,CAAC,EAAE,CAAC,EAAE,sBAAsB,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;AAClG,CAAC;AAYD,MAAM,IAAI,GAAG,kFAAkF,CAAC;AAEhG,MAAM,UAAU,eAAe,CAAC,QAAgB,EAAE,OAAe,EAAE,QAAgB;IACjF,OAAO,kBAAkB,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACjC,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IAC5E,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,CAAC;AAC/D,CAAC"}

package/dist/src/peer/seal.d.ts

@@ -0,0 +1,37 @@
+import type { MachineKey } from './keys.js';
+/**
+ * 봉인과 서명. 전부 `node:crypto`다.
+ *
+ * - box: 받는 기기의 X25519 공개키로 봉인하고 보낸 기기의 Ed25519 키로 서명한다.
+ *   보낼 때마다 임시 X25519 키를 만들어서 같은 두 기기 사이에도 키가 매번 다르다.
+ * - aead: 공유 세션 키 하나로 여는 AES-256-GCM. 공유 스트림 프레임에 쓴다.
+ */
+/** 키를 정렬한 JSON. 서명할 바이트를 두 쪽이 똑같이 만들려고 쓴다 */
+export declare function canonical(value: unknown): string;
+export declare function signText(key: MachineKey, text: string): string;
+/** 서명이 맞는지. 키나 서명 꼴이 틀려도 던지지 않고 false */
+export declare function verifyText(signer: string, text: string, sig: unknown): boolean;
+export declare function deriveKey(ikm: Buffer, salt: Buffer, info: string): Buffer;
+export declare function hmac(key: Buffer, text: string): string;
+export declare function safeEqual(a: unknown, b: string): boolean;
+/** nonce 12바이트 + 암호문 + 태그 16바이트를 base64url 한 줄로 */
+export declare function aeadSeal(key: Buffer, plaintext: Buffer, aad: string): string;
+/** 열지 못하면 null. 키가 틀렸거나 누가 바꿨거나 aad가 다르다 */
+export declare function aeadOpen(key: Buffer, sealed: unknown, aad: string): Buffer | null;
+export interface Box {
+    k: 'box';
+    /** 임시 X25519 공개키 */
+    e: string;
+    /** aeadSeal 결과 */
+    c: string;
+    /** 보낸 기기의 서명 */
+    s: string;
+}
+/**
+ * `to`(받는 기기 id)와 `toBox`(그 기기의 X25519 공개키)에게 봉인한다. 서명에 받는 기기
+ * id를 넣어서 다른 기기에게 간 봉인을 그대로 옮겨 보내도 서명이 안 맞는다.
+ */
+export declare function sealBox(from: MachineKey, to: string, toBox: string, plaintext: string): Box;
+/** 보낸 기기 서명이 맞고 열리면 평문. 아니면 null */
+export declare function openBox(me: MachineKey, from: string, box: unknown): string | null;
+//# sourceMappingURL=seal.d.ts.map

package/dist/src/peer/seal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seal.d.ts","sourceRoot":"","sources":["../../../src/peer/seal.ts"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE5C;;;;;;GAMG;AAEH,6CAA6C;AAC7C,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAQhD;AAED,wBAAgB,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED,yCAAyC;AACzC,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAY9E;AAED,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEzE;AAED,wBAAgB,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,wBAAgB,SAAS,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAKxD;AAED,mDAAmD;AACnD,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAM5E;AAED,4CAA4C;AAC5C,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAYjF;AAED,MAAM,WAAW,GAAG;IAClB,CAAC,EAAE,KAAK,CAAC;IACT,oBAAoB;IACpB,CAAC,EAAE,MAAM,CAAC;IACV,kBAAkB;IAClB,CAAC,EAAE,MAAM,CAAC;IACV,gBAAgB;IAChB,CAAC,EAAE,MAAM,CAAC;CACX;AAID;;;GAGG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,GAAG,CAM3F;AAED,oCAAoC;AACpC,wBAAgB,OAAO,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAWjF"}

package/dist/src/peer/seal.js

@@ -0,0 +1,115 @@
+import { createCipheriv, createDecipheriv, createHmac, diffieHellman, generateKeyPairSync, hkdfSync, randomBytes, sign, timingSafeEqual, verify, } from 'node:crypto';
+import { boxPublicKey, isRawKey, signPublicKey } from './keys.js';
+/**
+ * 봉인과 서명. 전부 `node:crypto`다.
+ *
+ * - box: 받는 기기의 X25519 공개키로 봉인하고 보낸 기기의 Ed25519 키로 서명한다.
+ *   보낼 때마다 임시 X25519 키를 만들어서 같은 두 기기 사이에도 키가 매번 다르다.
+ * - aead: 공유 세션 키 하나로 여는 AES-256-GCM. 공유 스트림 프레임에 쓴다.
+ */
+/** 키를 정렬한 JSON. 서명할 바이트를 두 쪽이 똑같이 만들려고 쓴다 */
+export function canonical(value) {
+    if (value === null || typeof value !== 'object')
+        return JSON.stringify(value);
+    if (Array.isArray(value))
+        return `[${value.map(canonical).join(',')}]`;
+    const obj = value;
+    const keys = Object.keys(obj)
+        .filter((k) => obj[k] !== undefined)
+        .sort();
+    return `{${keys.map((k) => `${JSON.stringify(k)}:${canonical(obj[k])}`).join(',')}}`;
+}
+export function signText(key, text) {
+    return sign(null, Buffer.from(text, 'utf8'), key.signPrivate).toString('base64url');
+}
+/** 서명이 맞는지. 키나 서명 꼴이 틀려도 던지지 않고 false */
+export function verifyText(signer, text, sig) {
+    if (!isRawKey(signer) || typeof sig !== 'string')
+        return false;
+    try {
+        return verify(null, Buffer.from(text, 'utf8'), signPublicKey(signer), Buffer.from(sig, 'base64url'));
+    }
+    catch {
+        return false;
+    }
+}
+export function deriveKey(ikm, salt, info) {
+    return Buffer.from(hkdfSync('sha256', ikm, salt, Buffer.from(info, 'utf8'), 32));
+}
+export function hmac(key, text) {
+    return createHmac('sha256', key).update(text, 'utf8').digest('base64url');
+}
+export function safeEqual(a, b) {
+    if (typeof a !== 'string')
+        return false;
+    const x = Buffer.from(a);
+    const y = Buffer.from(b);
+    return x.length === y.length && timingSafeEqual(x, y);
+}
+/** nonce 12바이트 + 암호문 + 태그 16바이트를 base64url 한 줄로 */
+export function aeadSeal(key, plaintext, aad) {
+    const nonce = randomBytes(12);
+    const cipher = createCipheriv('aes-256-gcm', key, nonce);
+    cipher.setAAD(Buffer.from(aad, 'utf8'));
+    const body = Buffer.concat([cipher.update(plaintext), cipher.final()]);
+    return Buffer.concat([nonce, body, cipher.getAuthTag()]).toString('base64url');
+}
+/** 열지 못하면 null. 키가 틀렸거나 누가 바꿨거나 aad가 다르다 */
+export function aeadOpen(key, sealed, aad) {
+    if (typeof sealed !== 'string')
+        return null;
+    const raw = Buffer.from(sealed, 'base64url');
+    if (raw.length < 28)
+        return null;
+    try {
+        const decipher = createDecipheriv('aes-256-gcm', key, raw.subarray(0, 12));
+        decipher.setAAD(Buffer.from(aad, 'utf8'));
+        decipher.setAuthTag(raw.subarray(raw.length - 16));
+        return Buffer.concat([decipher.update(raw.subarray(12, raw.length - 16)), decipher.final()]);
+    }
+    catch {
+        return null;
+    }
+}
+const BOX_INFO = 'gestalt-peer-box-v1';
+/**
+ * `to`(받는 기기 id)와 `toBox`(그 기기의 X25519 공개키)에게 봉인한다. 서명에 받는 기기
+ * id를 넣어서 다른 기기에게 간 봉인을 그대로 옮겨 보내도 서명이 안 맞는다.
+ */
+export function sealBox(from, to, toBox, plaintext) {
+    const eph = generateKeyPairSync('x25519');
+    const e = eph.publicKey.export({ format: 'jwk' }).x;
+    const key = boxKey(eph.privateKey, boxPublicKey(toBox), e, toBox);
+    const c = aeadSeal(key, Buffer.from(plaintext, 'utf8'), `${BOX_INFO}|${from.id}|${to}`);
+    return { k: 'box', e, c, s: signText(from, boxSigned(from.id, to, e, c)) };
+}
+/** 보낸 기기 서명이 맞고 열리면 평문. 아니면 null */
+export function openBox(me, from, box) {
+    if (!isBox(box))
+        return null;
+    if (!verifyText(from, boxSigned(from, me.id, box.e, box.c), box.s))
+        return null;
+    let key;
+    try {
+        key = boxKey(me.boxPrivate, boxPublicKey(box.e), box.e, me.boxKey);
+    }
+    catch {
+        return null;
+    }
+    const plain = aeadOpen(key, box.c, `${BOX_INFO}|${from}|${me.id}`);
+    return plain ? plain.toString('utf8') : null;
+}
+function boxSigned(from, to, e, c) {
+    return `${BOX_INFO}\n${from}\n${to}\n${e}\n${c}`;
+}
+function boxKey(priv, pub, ephRaw, recipientRaw) {
+    const shared = diffieHellman({ privateKey: priv, publicKey: pub });
+    return deriveKey(shared, Buffer.from(ephRaw + recipientRaw, 'utf8'), BOX_INFO);
+}
+function isBox(v) {
+    if (typeof v !== 'object' || v === null)
+        return false;
+    const b = v;
+    return b.k === 'box' && isRawKey(b.e) && typeof b.c === 'string' && typeof b.s === 'string';
+}
+//# sourceMappingURL=seal.js.map

package/dist/src/peer/seal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"seal.js","sourceRoot":"","sources":["../../../src/peer/seal.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,UAAU,EACV,aAAa,EACb,mBAAmB,EACnB,QAAQ,EACR,WAAW,EACX,IAAI,EACJ,eAAe,EACf,MAAM,GACP,MAAM,aAAa,CAAC;AAErB,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAGlE;;;;;;GAMG;AAEH,6CAA6C;AAC7C,MAAM,UAAU,SAAS,CAAC,KAAc;IACtC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACvE,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;SAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;SACnC,IAAI,EAAE,CAAC;IACV,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AACvF,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,GAAe,EAAE,IAAY;IACpD,OAAO,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACtF,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,IAAY,EAAE,GAAY;IACnE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC/D,IAAI,CAAC;QACH,OAAO,MAAM,CACX,IAAI,EACJ,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EACzB,aAAa,CAAC,MAAM,CAAC,EACrB,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAC9B,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAW,EAAE,IAAY,EAAE,IAAY;IAC/D,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AACnF,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,GAAW,EAAE,IAAY;IAC5C,OAAO,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,CAAU,EAAE,CAAS;IAC7C,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzB,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACzB,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,QAAQ,CAAC,GAAW,EAAE,SAAiB,EAAE,GAAW;IAClE,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACzD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACvE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACjF,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,QAAQ,CAAC,GAAW,EAAE,MAAe,EAAE,GAAW;IAChE,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAC7C,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,IAAI,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC3E,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1C,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;QACnD,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC/F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAYD,MAAM,QAAQ,GAAG,qBAAqB,CAAC;AAEvC;;;GAGG;AACH,MAAM,UAAU,OAAO,CAAC,IAAgB,EAAE,EAAU,EAAE,KAAa,EAAE,SAAiB;IACpF,MAAM,GAAG,GAAG,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAC1C,MAAM,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAE,CAAC;IACrD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAClE,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,GAAG,QAAQ,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACxF,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAC7E,CAAC;AAED,oCAAoC;AACpC,MAAM,UAAU,OAAO,CAAC,EAAc,EAAE,IAAY,EAAE,GAAY;IAChE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAChF,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC,UAAU,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,EAAE,GAAG,QAAQ,IAAI,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACnE,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC;AAED,SAAS,SAAS,CAAC,IAAY,EAAE,EAAU,EAAE,CAAS,EAAE,CAAS;IAC/D,OAAO,GAAG,QAAQ,KAAK,IAAI,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;AACnD,CAAC;AAED,SAAS,MAAM,CAAC,IAAe,EAAE,GAAc,EAAE,MAAc,EAAE,YAAoB;IACnF,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC,CAAC;IACnE,OAAO,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,YAAY,EAAE,MAAM,CAAC,EAAE,QAAQ,CAAC,CAAC;AACjF,CAAC;AAED,SAAS,KAAK,CAAC,CAAU;IACvB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,CAAC,GAAG,CAAiB,CAAC;IAC5B,OAAO,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC;AAC9F,CAAC"}

package/dist/src/peer/share.d.ts

@@ -0,0 +1,41 @@
+import type { TailOptions } from './tail.js';
+import type { RedactOptions, ToolsLevel } from './redact.js';
+import { ShareFeed } from './feed.js';
+export { DEFAULT_MAX_BACKLOG_BYTES } from './feed.js';
+export type { BacklogSlice, ShareFrame, ShareListener, ShareStatus } from './feed.js';
+export interface ShareStreamOptions extends RedactOptions {
+    id: string;
+    transcriptPath: string;
+    tools: ToolsLevel;
+    /** 들고 있는 이벤트의 직렬화 바이트 상한. 테스트가 작게 준다 */
+    maxBacklogBytes?: number;
+    tail?: Omit<TailOptions, 'startOffset'>;
+}
+/**
+ * 공유 하나. 대화 기록을 따라 읽어 바꾼 이벤트를 메모리에 쌓고 붙은 뷰어에 흘린다.
+ *
+ * 바꾼 결과만 메모리에 들고 원문 줄은 들지 않는다. 디스크에는 아무것도 안 쓴다.
+ * 처음 붙는 뷰어가 앞부분을 받아야 해서 바꾼 이벤트를 직렬화한 글자로 상한까지 남긴다.
+ */
+export declare class ShareStream extends ShareFeed {
+    readonly transcriptPath: string;
+    readonly tools: ToolsLevel;
+    private tail;
+    private transformer;
+    private title;
+    private lastUnknown;
+    constructor(options: ShareStreamOptions);
+    get unknownLines(): number;
+    get failedLines(): number;
+    get oversizedLines(): number;
+    get claudeVersion(): string | undefined;
+    get sessionTitle(): string | undefined;
+    /**
+     * 새로 쓰인 줄을 읽어 흘린다. 데몬이 주기적으로 부른다.
+     * 모르는 줄 수가 늘었으면 true — 데몬이 감사 로그에 버전을 남길 때 쓴다.
+     */
+    poll(): {
+        unknownGrew: boolean;
+    };
+}
+//# sourceMappingURL=share.d.ts.map

package/dist/src/peer/share.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"share.d.ts","sourceRoot":"","sources":["../../../src/peer/share.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAc,MAAM,WAAW,CAAC;AAEzD,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGtC,OAAO,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAC;AACtD,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAEtF,MAAM,WAAW,kBAAmB,SAAQ,aAAa;IACvD,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,UAAU,CAAC;IAClB,wCAAwC;IACxC,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,IAAI,CAAC,EAAE,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;CACzC;AAED;;;;;GAKG;AACH,qBAAa,WAAY,SAAQ,SAAS;IACxC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAE3B,OAAO,CAAC,IAAI,CAAiB;IAC7B,OAAO,CAAC,WAAW,CAAwB;IAC3C,OAAO,CAAC,KAAK,CAAqB;IAClC,OAAO,CAAC,WAAW,CAAK;gBAEZ,OAAO,EAAE,kBAAkB;IAQvC,IAAa,YAAY,IAAI,MAAM,CAElC;IAED,IAAI,WAAW,IAAI,MAAM,CAExB;IAED,IAAI,cAAc,IAAI,MAAM,CAE3B;IAED,IAAI,aAAa,IAAI,MAAM,GAAG,SAAS,CAEtC;IAED,IAAI,YAAY,IAAI,MAAM,GAAG,SAAS,CAErC;IAED;;;OAGG;IACH,IAAI,IAAI;QAAE,WAAW,EAAE,OAAO,CAAA;KAAE;CAwBjC"}

package/dist/src/peer/share.js

@@ -0,0 +1,70 @@
+import { TranscriptTail } from './tail.js';
+import { TranscriptTransformer } from './transform.js';
+import { ShareFeed } from './feed.js';
+export { DEFAULT_MAX_BACKLOG_BYTES } from './feed.js';
+/**
+ * 공유 하나. 대화 기록을 따라 읽어 바꾼 이벤트를 메모리에 쌓고 붙은 뷰어에 흘린다.
+ *
+ * 바꾼 결과만 메모리에 들고 원문 줄은 들지 않는다. 디스크에는 아무것도 안 쓴다.
+ * 처음 붙는 뷰어가 앞부분을 받아야 해서 바꾼 이벤트를 직렬화한 글자로 상한까지 남긴다.
+ */
+export class ShareStream extends ShareFeed {
+    transcriptPath;
+    tools;
+    tail;
+    transformer;
+    title;
+    lastUnknown = 0;
+    constructor(options) {
+        super(options.id, options.maxBacklogBytes);
+        this.transcriptPath = options.transcriptPath;
+        this.tools = options.tools;
+        this.tail = new TranscriptTail(options.transcriptPath, options.tail);
+        this.transformer = new TranscriptTransformer({ tools: options.tools, home: options.home });
+    }
+    get unknownLines() {
+        return this.transformer.unknownLines;
+    }
+    get failedLines() {
+        return this.transformer.failedLines;
+    }
+    get oversizedLines() {
+        return this.tail.oversizedLines;
+    }
+    get claudeVersion() {
+        return this.transformer.version;
+    }
+    get sessionTitle() {
+        return this.title;
+    }
+    /**
+     * 새로 쓰인 줄을 읽어 흘린다. 데몬이 주기적으로 부른다.
+     * 모르는 줄 수가 늘었으면 true — 데몬이 감사 로그에 버전을 남길 때 쓴다.
+     */
+    poll() {
+        if (this.isClosed || this.status === 'truncated') {
+            return { unknownGrew: false };
+        }
+        const { lines, status } = this.tail.read();
+        this.setStatus(toShareStatus(status));
+        for (const line of lines) {
+            for (const event of this.transformer.push(line)) {
+                if (event.kind === 'title')
+                    this.title = event.text;
+                this.pushEvent(JSON.stringify(event));
+            }
+        }
+        this.trim();
+        const unknown = this.transformer.unknownLines;
+        const unknownGrew = unknown > this.lastUnknown;
+        if (unknownGrew) {
+            this.lastUnknown = unknown;
+            this.emit({ type: 'stats', unknownLines: unknown });
+        }
+        return { unknownGrew };
+    }
+}
+function toShareStatus(status) {
+    return status === 'ok' ? 'live' : status;
+}
+//# sourceMappingURL=share.js.map

package/dist/src/peer/share.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"share.js","sourceRoot":"","sources":["../../../src/peer/share.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGtC,OAAO,EAAE,yBAAyB,EAAE,MAAM,WAAW,CAAC;AAYtD;;;;;GAKG;AACH,MAAM,OAAO,WAAY,SAAQ,SAAS;IAC/B,cAAc,CAAS;IACvB,KAAK,CAAa;IAEnB,IAAI,CAAiB;IACrB,WAAW,CAAwB;IACnC,KAAK,CAAqB;IAC1B,WAAW,GAAG,CAAC,CAAC;IAExB,YAAY,OAA2B;QACrC,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;QAC3C,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC;QAC7C,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,IAAI,cAAc,CAAC,OAAO,CAAC,cAAc,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACrE,IAAI,CAAC,WAAW,GAAG,IAAI,qBAAqB,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,IAAa,YAAY;QACvB,OAAO,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC;IACvC,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC;IACtC,CAAC;IAED,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC;IAClC,CAAC;IAED,IAAI,aAAa;QACf,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC;IAClC,CAAC;IAED,IAAI,YAAY;QACd,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED;;;OAGG;IACH,IAAI;QACF,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACjD,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;QAChC,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC3C,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;QAEtC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;oBAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC;gBACpD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YACxC,CAAC;QACH,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,CAAC;QAEZ,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,YAAY,CAAC;QAC9C,MAAM,WAAW,GAAG,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC;QAC/C,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC;YAC3B,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,EAAE,WAAW,EAAE,CAAC;IACzB,CAAC;CACF;AAED,SAAS,aAAa,CAAC,MAAkB;IACvC,OAAO,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;AAC3C,CAAC"}

package/dist/src/peer/state.d.ts

@@ -0,0 +1,68 @@
+import type { ToolsLevel } from './redact.js';
+import type { SignedRoster } from './roster.js';
+export type ShareCloseReason = 'unshare' | 'expired' | 'daemon_stop' | 'daemon_restart' | 'error';
+export interface ShareRow {
+    id: string;
+    sessionId: string | null;
+    transcriptPath: string;
+    tools: ToolsLevel;
+    createdAt: number;
+    expiresAt: number;
+    closedAt: number | null;
+    closeReason: string | null;
+}
+export type AuditAction = 'share_open' | 'share_close' | 'viewer_connect' | 'viewer_disconnect' | 'unknown_lines' | 'team_init' | 'team_join' | 'invite_create' | 'member_join' | 'member_remove' | 'roster_accept' | 'roster_reject' | 'remote_watch' | 'remote_watch_end' | 'watch_open' | 'watch_close';
+/** 이 기기가 든 팀. 한 기기는 팀 하나에만 든다 */
+export interface TeamConfig {
+    team: string;
+    relay: string;
+    person: string;
+    /** 명단을 하나도 못 들고 있을 때 믿을 관리자 키. 팀을 만든 기기면 자기 자신이다 */
+    anchor: string;
+}
+export interface InviteRow {
+    id: string;
+    secret: string;
+    person: string;
+    createdAt: number;
+    expiresAt: number;
+    usedAt: number | null;
+    usedBy: string | null;
+}
+export interface AuditRow {
+    at: number;
+    shareId: string | null;
+    action: AuditAction;
+    detail: string | null;
+}
+/**
+ * 공유 목록, 팀 설정과 명단, 초대, 감사 로그. 대화 내용은 한 글자도 여기 안 들어온다 —
+ * 줄 수나 버전 같은 숫자와 이름만 남긴다. 공유 토큰과 공유 키도 저장하지 않는다. 데몬이
+ * 다시 뜨면 이전 공유는 종료된 걸로 치고 새로 연다.
+ *
+ * 초대 비밀은 저장한다. 관리자 데몬이 나중에 온 join 요청의 증명을 맞춰 봐야 해서다.
+ * 파일은 0600이고 쓰고 나면 used_at이 찬다.
+ */
+export declare class PeerState {
+    private db;
+    constructor(path: string);
+    insertShare(row: Omit<ShareRow, 'closedAt' | 'closeReason'>): void;
+    closeShare(id: string, reason: ShareCloseReason, at?: number): void;
+    /** 데몬이 죽어서 종료 기록 없이 남은 공유를 종료한다. 종료한 id 목록을 돌려준다 */
+    closeDangling(reason: ShareCloseReason, at?: number): string[];
+    getShare(id: string): ShareRow | undefined;
+    getTeam(): TeamConfig | null;
+    setTeam(team: TeamConfig): void;
+    /** 받은 명단 중 가장 새것. 받을지는 부르는 쪽이 checkRosterUpdate로 정한 뒤다 */
+    getRoster(): SignedRoster | null;
+    setRoster(roster: SignedRoster): void;
+    insertInvite(row: Omit<InviteRow, 'usedAt' | 'usedBy'>): void;
+    getInvite(id: string): InviteRow | undefined;
+    useInvite(id: string, machineKey: string, at?: number): void;
+    private getJson;
+    private setJson;
+    audit(action: AuditAction, shareId: string | null, detail?: string, at?: number): void;
+    auditLog(shareId?: string): AuditRow[];
+    close(): void;
+}
+//# sourceMappingURL=state.d.ts.map

package/dist/src/peer/state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../../src/peer/state.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AA0BhD,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,SAAS,GAAG,aAAa,GAAG,gBAAgB,GAAG,OAAO,CAAC;AAElG,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,UAAU,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B;AAED,MAAM,MAAM,WAAW,GACnB,YAAY,GACZ,aAAa,GACb,gBAAgB,GAChB,mBAAmB,GACnB,eAAe,GACf,WAAW,GACX,WAAW,GACX,eAAe,GACf,aAAa,GACb,eAAe,GACf,eAAe,GACf,eAAe,GACf,cAAc,GACd,kBAAkB,GAClB,YAAY,GACZ,aAAa,CAAC;AAElB,iCAAiC;AACjC,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,oDAAoD;IACpD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED;;;;;;;GAOG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,EAAE,CAAiB;gBAEf,IAAI,EAAE,MAAM;IA2CxB,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,EAAE,UAAU,GAAG,aAAa,CAAC,GAAG,IAAI;IASlE,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,SAAa,GAAG,IAAI;IAQvE,oDAAoD;IACpD,aAAa,CAAC,MAAM,EAAE,gBAAgB,EAAE,EAAE,SAAa,GAAG,MAAM,EAAE;IAQlE,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS;IAK1C,OAAO,IAAI,UAAU,GAAG,IAAI;IAI5B,OAAO,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI;IAI/B,0DAA0D;IAC1D,SAAS,IAAI,YAAY,GAAG,IAAI;IAIhC,SAAS,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI;IAIrC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,GAAG,QAAQ,CAAC,GAAG,IAAI;IAQ7D,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS;IAwB5C,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,SAAa,GAAG,IAAI;IAMhE,OAAO,CAAC,OAAO;IAOf,OAAO,CAAC,OAAO;IAQf,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,SAAa,GAAG,IAAI;IAM1F,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,QAAQ,EAAE;IAStC,KAAK,IAAI,IAAI;CAGd"}