@weaveprotocol/core 0.1.0

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,oFAAoF;AACpF,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,eAAe,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAChD;;;OAGG;IACH,qBAAqB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACtE,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACnE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACxF,eAAe,CAAC,GAAG,EAAE,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACrD,eAAe,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IACvD,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;CACzD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC;CAChC;AAED,iEAAiE;AACjE,MAAM,WAAW,gBAAgB,CAAC,KAAK,GAAG,OAAO,EAAE,MAAM,GAAG,KAAK;IAC/D,QAAQ,CAAC,WAAW,EAAE;QACpB,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,oBAAoB,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5G,QAAQ,CAAC,KAAK,CAAC,EAAE;YACf,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;YACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;SACzB,CAAC;KACH,CAAC;CACH;AAED;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB,CAAC,KAAK,GAAG,OAAO,EAAE,MAAM,GAAG,KAAK;IACnE,QAAQ,CAAC,WAAW,EAAE;QACpB,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,KAAK,CAAC,EAAE;YAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;YAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC;QACpE,QAAQ,CAAC,UAAU,EAAE;YACnB,QAAQ,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE;gBAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;aAAE,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACrI,QAAQ,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;gBAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;aAAE,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;SACvI,CAAC;KACH,CAAC;CACH;AAED,MAAM,MAAM,oBAAoB,CAAC,MAAM,IACnC;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,CAAA;CAAE,GACvD;IAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,mBAAmB,CAAC,CAAA;CAAE,CAAC;AAExF,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,WAAW,CAAC,CAAC;CAC5C;AAED,gFAAgF;AAChF,MAAM,WAAW,IAAI;IACnB,4DAA4D;IAC5D,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,yCAAyC;IACzC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED,wCAAwC;AACxC,MAAM,WAAW,UAAU,CAAC,CAAC,GAAG,OAAO;IACrC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACjB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,uEAAuE;IACvE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,8FAA8F;IAC9F,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,4DAA4D;IAC5D,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,mGAAmG;IACnG,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC;IACvB;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACtC,wDAAwD;IACxD,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC;IACxB;;;OAGG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB,CAAC,CAAC,GAAG,OAAO;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,kFAAkF;IAClF,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACjB,kFAAkF;IAClF,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,uEAAuE;IACvE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,8FAA8F;IAC9F,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,4DAA4D;IAC5D,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,mGAAmG;IACnG,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC;IACvB;;;;;OAKG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACtC,wDAAwD;IACxD,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC;IACxB;;;OAGG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC;CACtC;AAED,qEAAqE;AACrE,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEnD,2DAA2D;AAC3D,MAAM,WAAW,SAAS;IACxB,+CAA+C;IAC/C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,mCAAmC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,uDAAuD;IACvD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CAC7C;AAED;;;;;GAKG;AACH,MAAM,WAAW,KAAK;IACpB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,mEAAmE;IACnE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,yEAAyE;IACzE,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IACzC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,oDAAoD;IACpD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,wHAAwH;IACxH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,4BAA4B;AAC5B,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;CACnC;AAED,gBAAgB;AAChB,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,iBAAiB;AACjB,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,gCAAgC;AAChC,MAAM,WAAW,cAAc;IAC7B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAC7C,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACzC,sCAAsC;IACtC,gBAAgB,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAC7F,0BAA0B;IAC1B,aAAa,CAAC,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrD,8BAA8B;IAC9B,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IACtD,iCAAiC;IACjC,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,uBAAuB;IACvB,KAAK,CAAC,GAAG,EAAE,aAAa,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,MAAM,MAAM,OAAO,GACf;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GAC1E;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtD,+BAA+B;AAC/B,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,+CAA+C;AAC/C,MAAM,MAAM,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,KAAK,IAC3B;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GACxC;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;CAAE,CAAC;AAE9C,eAAO,MAAM,EAAE,GAAI,CAAC,EAAE,OAAO,CAAC,KAAG,MAAM,CAAC,CAAC,EAAE,KAAK,CAA0B,CAAC;AAC3E,eAAO,MAAM,GAAG,GAAI,CAAC,EAAE,OAAO,CAAC,KAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAA2B,CAAC"}

package/dist/types.js

@@ -0,0 +1,7 @@
+/**
+ * Core protocol types used across all modules.
+ * @module types
+ */
+export const ok = (value) => ({ ok: true, value });
+export const err = (error) => ({ ok: false, error });
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AA2OH,MAAM,CAAC,MAAM,EAAE,GAAG,CAAI,KAAQ,EAAoB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC3E,MAAM,CAAC,MAAM,GAAG,GAAG,CAAI,KAAQ,EAAoB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC"}

package/dist/utils/encoding.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Utility functions for encoding and decoding data.
+ * @module encoding
+ */
+/**
+ * Encodes a string to a UTF-8 Uint8Array.
+ * @param {string} str - The string to encode.
+ * @returns {Uint8Array} The UTF-8 encoded bytes.
+ */
+export declare function utf8Encode(str: string): Uint8Array;
+/**
+ * Decodes a UTF-8 Uint8Array to a string.
+ * @param {Uint8Array} bytes - The bytes to decode.
+ * @returns {string} The decoded string.
+ */
+export declare function utf8Decode(bytes: Uint8Array): string;
+/**
+ * Encodes a Uint8Array to a base64url string without padding.
+ * @param {Uint8Array} bytes - The bytes to encode.
+ * @returns {string} The base64url encoded string.
+ */
+export declare function base64UrlEncode(bytes: Uint8Array): string;
+/**
+ * Decodes a base64url string to a Uint8Array.
+ * @param {string} str - The base64url string to decode.
+ * @returns {Uint8Array} The decoded bytes.
+ */
+export declare function base64UrlDecode(str: string): Uint8Array;
+/**
+ * Concatenates multiple Uint8Arrays into a single Uint8Array.
+ * @param {...Uint8Array[]} arrays - The arrays to concatenate.
+ * @returns {Uint8Array} The concatenated array.
+ */
+export declare function concatBytes(...arrays: readonly Uint8Array[]): Uint8Array;
+/**
+ * Encodes a number as an unsigned LEB128 varint.
+ * @param {number} n - The number to encode.
+ * @returns {Uint8Array} The varint encoded bytes.
+ */
+export declare function varintEncode(n: number): Uint8Array;
+/**
+ * Decodes an unsigned LEB128 varint from a Uint8Array.
+ * @param {Uint8Array} bytes - The bytes to decode.
+ * @param {number} [offset=0] - The offset to start decoding from.
+ * @returns {{ value: number; bytesRead: number }} The decoded number and the number of bytes read.
+ */
+export declare function varintDecode(bytes: Uint8Array, offset?: number): {
+    readonly value: number;
+    readonly bytesRead: number;
+};
+/**
+ * Encodes a Uint8Array to a hex string.
+ * @param {Uint8Array} bytes - The bytes to encode.
+ * @returns {string} The hex string.
+ */
+export declare function bytesToHex(bytes: Uint8Array): string;
+/**
+ * Decodes a hex string to a Uint8Array.
+ * @param {string} hex - The hex string to decode.
+ * @returns {Uint8Array} The decoded bytes.
+ */
+export declare function hexToBytes(hex: string): Uint8Array;
+//# sourceMappingURL=encoding.d.ts.map

package/dist/utils/encoding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"encoding.d.ts","sourceRoot":"","sources":["../../src/utils/encoding.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAElD;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAEpD;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAIzD;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CAWvD;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,GAAG,MAAM,EAAE,SAAS,UAAU,EAAE,GAAG,UAAU,CASxE;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAAE,MAAM,GAAG,UAAU,CAYlD;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,GAAE,MAAU,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAiB1H;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAEpD;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,CASlD"}

package/dist/utils/encoding.js

@@ -0,0 +1,130 @@
+/**
+ * Utility functions for encoding and decoding data.
+ * @module encoding
+ */
+const encoder = new TextEncoder();
+const decoder = new TextDecoder();
+/**
+ * Encodes a string to a UTF-8 Uint8Array.
+ * @param {string} str - The string to encode.
+ * @returns {Uint8Array} The UTF-8 encoded bytes.
+ */
+export function utf8Encode(str) {
+    return encoder.encode(str);
+}
+/**
+ * Decodes a UTF-8 Uint8Array to a string.
+ * @param {Uint8Array} bytes - The bytes to decode.
+ * @returns {string} The decoded string.
+ */
+export function utf8Decode(bytes) {
+    return decoder.decode(bytes);
+}
+/**
+ * Encodes a Uint8Array to a base64url string without padding.
+ * @param {Uint8Array} bytes - The bytes to encode.
+ * @returns {string} The base64url encoded string.
+ */
+export function base64UrlEncode(bytes) {
+    const binString = Array.from(bytes, (byte) => String.fromCharCode(byte)).join('');
+    const base64 = globalThis.btoa(binString);
+    return base64.replace(/\+/g, '-').replace(/\//g, '_').replace(/=/g, '');
+}
+/**
+ * Decodes a base64url string to a Uint8Array.
+ * @param {string} str - The base64url string to decode.
+ * @returns {Uint8Array} The decoded bytes.
+ */
+export function base64UrlDecode(str) {
+    let base64 = str.replace(/-/g, '+').replace(/_/g, '/');
+    while (base64.length % 4) {
+        base64 += '=';
+    }
+    const binString = globalThis.atob(base64);
+    const bytes = new Uint8Array(binString.length);
+    for (let i = 0; i < binString.length; i++) {
+        bytes[i] = binString.charCodeAt(i);
+    }
+    return bytes;
+}
+/**
+ * Concatenates multiple Uint8Arrays into a single Uint8Array.
+ * @param {...Uint8Array[]} arrays - The arrays to concatenate.
+ * @returns {Uint8Array} The concatenated array.
+ */
+export function concatBytes(...arrays) {
+    const totalLength = arrays.reduce((sum, arr) => sum + arr.length, 0);
+    const result = new Uint8Array(totalLength);
+    let offset = 0;
+    for (const arr of arrays) {
+        result.set(arr, offset);
+        offset += arr.length;
+    }
+    return result;
+}
+/**
+ * Encodes a number as an unsigned LEB128 varint.
+ * @param {number} n - The number to encode.
+ * @returns {Uint8Array} The varint encoded bytes.
+ */
+export function varintEncode(n) {
+    const bytes = [];
+    let value = n;
+    do {
+        let byte = value & 0x7f;
+        value >>>= 7;
+        if (value !== 0) {
+            byte |= 0x80;
+        }
+        bytes.push(byte);
+    } while (value !== 0);
+    return new Uint8Array(bytes);
+}
+/**
+ * Decodes an unsigned LEB128 varint from a Uint8Array.
+ * @param {Uint8Array} bytes - The bytes to decode.
+ * @param {number} [offset=0] - The offset to start decoding from.
+ * @returns {{ value: number; bytesRead: number }} The decoded number and the number of bytes read.
+ */
+export function varintDecode(bytes, offset = 0) {
+    let value = 0;
+    let shift = 0;
+    let bytesRead = 0;
+    while (true) {
+        if (offset + bytesRead >= bytes.length) {
+            throw new Error('Varint decode out of bounds');
+        }
+        const byte = bytes[offset + bytesRead];
+        bytesRead++;
+        value |= (byte & 0x7f) << shift;
+        if ((byte & 0x80) === 0) {
+            break;
+        }
+        shift += 7;
+    }
+    return { value, bytesRead };
+}
+/**
+ * Encodes a Uint8Array to a hex string.
+ * @param {Uint8Array} bytes - The bytes to encode.
+ * @returns {string} The hex string.
+ */
+export function bytesToHex(bytes) {
+    return Array.from(bytes, (byte) => byte.toString(16).padStart(2, '0')).join('');
+}
+/**
+ * Decodes a hex string to a Uint8Array.
+ * @param {string} hex - The hex string to decode.
+ * @returns {Uint8Array} The decoded bytes.
+ */
+export function hexToBytes(hex) {
+    if (hex.length % 2 !== 0) {
+        throw new Error('Hex string must have an even length');
+    }
+    const bytes = new Uint8Array(hex.length / 2);
+    for (let i = 0; i < bytes.length; i++) {
+        bytes[i] = parseInt(hex.slice(i * 2, i * 2 + 2), 16);
+    }
+    return bytes;
+}
+//# sourceMappingURL=encoding.js.map

package/dist/utils/encoding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encoding.js","sourceRoot":"","sources":["../../src/utils/encoding.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAClC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAElC;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,OAAO,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,KAAiB;IAC1C,OAAO,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,KAAiB;IAC/C,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClF,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,IAAI,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,CAAC;IAChB,CAAC;IACD,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC/C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,KAAK,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,GAAG,MAA6B;IAC1D,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC;IAC3C,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACxB,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC;IACvB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,CAAS;IACpC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,GAAG,CAAC;QACF,IAAI,IAAI,GAAG,KAAK,GAAG,IAAI,CAAC;QACxB,KAAK,MAAM,CAAC,CAAC;QACb,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAChB,IAAI,IAAI,IAAI,CAAC;QACf,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC,QAAQ,KAAK,KAAK,CAAC,EAAE;IACtB,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,KAAiB,EAAE,SAAiB,CAAC;IAChE,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,MAAM,GAAG,SAAS,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjD,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,GAAG,SAAS,CAAE,CAAC;QACxC,SAAS,EAAE,CAAC;QACZ,KAAK,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,CAAC;QAChC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM;QACR,CAAC;QACD,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,KAAiB;IAC1C,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAClF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,KAAK,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/utils/errors.d.ts

@@ -0,0 +1,43 @@
+/**
+ * @module errors
+ * Typed errors, so callers can branch on what went wrong instead of matching
+ * on message text.
+ */
+export type ProtocolErrorCode = 
+/** The authenticator produced no PRF secret, so no key can be derived from it */
+'PRF_UNSUPPORTED'
+/** The user dismissed or cancelled a passkey ceremony */
+ | 'PASSKEY_CANCELLED'
+/** WebAuthn is not available in this environment at all */
+ | 'WEBAUTHN_UNAVAILABLE'
+/** This browser has no File System Access API, so no folder can be opened */
+ | 'FOLDER_UNAVAILABLE'
+/** The chosen folder holds an account file this version cannot read */
+ | 'FOLDER_ACCOUNT_UNREADABLE'
+/** The passkey, passphrase or code offered did not open the folder */
+ | 'VAULT_UNLOCK_FAILED'
+/** Removing that wrap would leave no way into the folder */
+ | 'VAULT_LAST_WRAP'
+/** A pairing link or handover payload could not be read */
+ | 'PAIRING_TICKET_UNREADABLE';
+export interface ProtocolError extends Error {
+    readonly code: ProtocolErrorCode;
+    /** What the caller can suggest doing about it */
+    readonly hint?: string;
+}
+/**
+ * Creates a tagged protocol error.
+ * @param code Machine-readable cause
+ * @param message Human-readable description
+ * @param hint Optional remedy to surface in a UI
+ * @returns The error, ready to throw
+ */
+export declare function protocolError(code: ProtocolErrorCode, message: string, hint?: string): ProtocolError;
+/**
+ * Narrows an unknown thrown value to a protocol error.
+ * @param error The caught value
+ * @param code Optionally require a specific code
+ * @returns Whether it is a protocol error (of that code)
+ */
+export declare function isProtocolError(error: unknown, code?: ProtocolErrorCode): error is ProtocolError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/utils/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/utils/errors.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,MAAM,iBAAiB;AAC3B,iFAAiF;AAC/E,iBAAiB;AACnB,yDAAyD;GACvD,mBAAmB;AACrB,2DAA2D;GACzD,sBAAsB;AACxB,6EAA6E;GAC3E,oBAAoB;AACtB,uEAAuE;GACrE,2BAA2B;AAC7B,sEAAsE;GACpE,qBAAqB;AACvB,4DAA4D;GAC1D,iBAAiB;AACnB,2DAA2D;GACzD,2BAA2B,CAAC;AAEhC,MAAM,WAAW,aAAc,SAAQ,KAAK;IAC1C,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,iDAAiD;IACjD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,aAAa,CAEpG;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,iBAAiB,GAAG,KAAK,IAAI,aAAa,CAKhG"}

package/dist/utils/errors.js

@@ -0,0 +1,28 @@
+/**
+ * @module errors
+ * Typed errors, so callers can branch on what went wrong instead of matching
+ * on message text.
+ */
+/**
+ * Creates a tagged protocol error.
+ * @param code Machine-readable cause
+ * @param message Human-readable description
+ * @param hint Optional remedy to surface in a UI
+ * @returns The error, ready to throw
+ */
+export function protocolError(code, message, hint) {
+    return Object.assign(new Error(message), { code, ...(hint ? { hint } : {}) });
+}
+/**
+ * Narrows an unknown thrown value to a protocol error.
+ * @param error The caught value
+ * @param code Optionally require a specific code
+ * @returns Whether it is a protocol error (of that code)
+ */
+export function isProtocolError(error, code) {
+    if (!(error instanceof Error) || typeof error.code !== 'string') {
+        return false;
+    }
+    return code === undefined || error.code === code;
+}
+//# sourceMappingURL=errors.js.map

package/dist/utils/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/utils/errors.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AA0BH;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,IAAuB,EAAE,OAAe,EAAE,IAAa;IACnF,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AAChF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,KAAc,EAAE,IAAwB;IACtE,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC,IAAI,OAAQ,KAAuB,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACnF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,KAAK,SAAS,IAAK,KAAuB,CAAC,IAAI,KAAK,IAAI,CAAC;AACtE,CAAC"}

package/dist/utils/events.d.ts

@@ -0,0 +1,19 @@
+/**
+ * @module events
+ * The one way modules here let others listen to them.
+ */
+type Listener = (...args: any[]) => void;
+export interface Emitter<Events extends {
+    [K in keyof Events]: Listener;
+}> {
+    on<K extends keyof Events>(event: K, callback: Events[K]): void;
+    off<K extends keyof Events>(event: K, callback: Events[K]): void;
+    /** Calls every listener; one that throws is reported and does not stop the rest. */
+    emit<K extends keyof Events>(event: K, ...args: Parameters<Events[K]>): void;
+}
+/** Creates an emitter for a map of event names to listener signatures. */
+export declare function createEmitter<Events extends {
+    [K in keyof Events]: Listener;
+}>(): Emitter<Events>;
+export {};
+//# sourceMappingURL=events.d.ts.map

package/dist/utils/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/utils/events.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,KAAK,QAAQ,GAAG,CAAC,GAAG,IAAI,EAAE,GAAG,EAAE,KAAK,IAAI,CAAC;AAEzC,MAAM,WAAW,OAAO,CAAC,MAAM,SAAS;KAAG,CAAC,IAAI,MAAM,MAAM,GAAG,QAAQ;CAAE;IACvE,EAAE,CAAC,CAAC,SAAS,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAChE,GAAG,CAAC,CAAC,SAAS,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IACjE,oFAAoF;IACpF,IAAI,CAAC,CAAC,SAAS,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,IAAI,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;CAC9E;AAED,0EAA0E;AAC1E,wBAAgB,aAAa,CAAC,MAAM,SAAS;KAAG,CAAC,IAAI,MAAM,MAAM,GAAG,QAAQ;CAAE,KAAK,OAAO,CAAC,MAAM,CAAC,CAmBjG"}

package/dist/utils/events.js

@@ -0,0 +1,27 @@
+/**
+ * @module events
+ * The one way modules here let others listen to them.
+ */
+/** Creates an emitter for a map of event names to listener signatures. */
+export function createEmitter() {
+    const listeners = new Map();
+    return {
+        on(event, callback) {
+            (listeners.get(event) ?? listeners.set(event, new Set()).get(event)).add(callback);
+        },
+        off(event, callback) {
+            listeners.get(event)?.delete(callback);
+        },
+        emit(event, ...args) {
+            for (const callback of [...(listeners.get(event) ?? [])]) {
+                try {
+                    callback(...args);
+                }
+                catch (error) {
+                    console.error(`Error in a listener for ${String(event)}:`, error);
+                }
+            }
+        },
+    };
+}
+//# sourceMappingURL=events.js.map

package/dist/utils/events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../src/utils/events.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAYH,0EAA0E;AAC1E,MAAM,UAAU,aAAa;IAC3B,MAAM,SAAS,GAAG,IAAI,GAAG,EAA+B,CAAC;IACzD,OAAO;QACL,EAAE,CAAC,KAAK,EAAE,QAAQ;YAChB,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAE,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACtF,CAAC;QACD,GAAG,CAAC,KAAK,EAAE,QAAQ;YACjB,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI;YACjB,KAAK,MAAM,QAAQ,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;gBACzD,IAAI,CAAC;oBACH,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC;gBACpB,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,CAAC,KAAK,CAAC,2BAA2B,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBACpE,CAAC;YACH,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/utils/hash.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Hashing utilities.
+ * @module hash
+ */
+/**
+ * Computes the SHA-256 hash of the given data.
+ * @param {Uint8Array} data - The data to hash.
+ * @returns {Promise<Uint8Array>} A promise that resolves to the hash bytes.
+ */
+export declare function sha256(data: Uint8Array): Promise<Uint8Array>;
+/**
+ * Encodes bytes to a base32 string without padding.
+ * @param {Uint8Array} bytes - The bytes to encode.
+ * @returns {string} The base32 encoded string.
+ */
+export declare function base32Encode(bytes: Uint8Array): string;
+/**
+ * Creates a CID-like content identifier (base32 of SHA-256).
+ * @param {Uint8Array} data - The data to compute the identifier for.
+ * @returns {Promise<string>} A promise that resolves to the CID-like string.
+ */
+export declare function cidFromBytes(data: Uint8Array): Promise<string>;
+//# sourceMappingURL=hash.d.ts.map

package/dist/utils/hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.d.ts","sourceRoot":"","sources":["../../src/utils/hash.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;GAIG;AACH,wBAAsB,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAGlE;AAOD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAmBtD;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAGpE"}

package/dist/utils/hash.js

@@ -0,0 +1,49 @@
+/**
+ * Hashing utilities.
+ * @module hash
+ */
+/**
+ * Computes the SHA-256 hash of the given data.
+ * @param {Uint8Array} data - The data to hash.
+ * @returns {Promise<Uint8Array>} A promise that resolves to the hash bytes.
+ */
+export async function sha256(data) {
+    const buffer = await globalThis.crypto.subtle.digest('SHA-256', data);
+    return new Uint8Array(buffer);
+}
+/**
+ * Base32 encoding alphabet (RFC 4648).
+ */
+const BASE32_ALPHABET = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ234567';
+/**
+ * Encodes bytes to a base32 string without padding.
+ * @param {Uint8Array} bytes - The bytes to encode.
+ * @returns {string} The base32 encoded string.
+ */
+export function base32Encode(bytes) {
+    let bits = 0;
+    let value = 0;
+    let output = '';
+    for (let i = 0; i < bytes.length; i++) {
+        value = (value << 8) | bytes[i];
+        bits += 8;
+        while (bits >= 5) {
+            output += BASE32_ALPHABET[(value >>> (bits - 5)) & 31];
+            bits -= 5;
+        }
+    }
+    if (bits > 0) {
+        output += BASE32_ALPHABET[(value << (5 - bits)) & 31];
+    }
+    return output.toLowerCase();
+}
+/**
+ * Creates a CID-like content identifier (base32 of SHA-256).
+ * @param {Uint8Array} data - The data to compute the identifier for.
+ * @returns {Promise<string>} A promise that resolves to the CID-like string.
+ */
+export async function cidFromBytes(data) {
+    const hashBytes = await sha256(data);
+    return 'b' + base32Encode(hashBytes);
+}
+//# sourceMappingURL=hash.js.map

package/dist/utils/hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.js","sourceRoot":"","sources":["../../src/utils/hash.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAgB;IAC3C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAoB,CAAC,CAAC;IACtF,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC;AAED;;GAEG;AACH,MAAM,eAAe,GAAG,kCAAkC,CAAC;AAE3D;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,KAAiB;IAC5C,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,MAAM,GAAG,EAAE,CAAC;IAEhB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACjC,IAAI,IAAI,CAAC,CAAC;QACV,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC;YACjB,MAAM,IAAI,eAAe,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAE,CAAC;YACxD,IAAI,IAAI,CAAC,CAAC;QACZ,CAAC;IACH,CAAC;IAED,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACb,MAAM,IAAI,eAAe,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,EAAE,CAAE,CAAC;IACzD,CAAC;IAED,OAAO,MAAM,CAAC,WAAW,EAAE,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAgB;IACjD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;IACrC,OAAO,GAAG,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;AACvC,CAAC"}

package/dist/utils/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Barrel export of all utilities.
+ * @module utils
+ */
+export * from './encoding.js';
+export * from './hash.js';
+export * from './events.js';
+export * from './errors.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/utils/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,cAAc,eAAe,CAAC;AAC9B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC"}

package/dist/utils/index.js

@@ -0,0 +1,9 @@
+/**
+ * Barrel export of all utilities.
+ * @module utils
+ */
+export * from './encoding.js';
+export * from './hash.js';
+export * from './events.js';
+export * from './errors.js';
+//# sourceMappingURL=index.js.map

package/dist/utils/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,cAAc,eAAe,CAAC;AAC9B,cAAc,WAAW,CAAC;AAC1B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC"}

package/dist/validation/capability-gate.d.ts

@@ -0,0 +1,50 @@
+import type { CryptoProvider, Expression } from '../types.js';
+import type { GateResult } from './crypto-gate.js';
+import { type Capability, type ProofResolver } from '../identity/ucan.js';
+export interface CapabilityGateConfig {
+    /** Crypto provider used to verify the UCANs in the chain */
+    readonly provider: CryptoProvider;
+    /** The capability an author must hold to write this expression */
+    readonly requiredCapability: (expression: Expression) => Capability;
+    /**
+     * Looks up a parent UCAN by CID when a proof chain is longer than one link.
+     * Expressions usually carry a single delegation, which needs no resolver.
+     */
+    readonly resolveProof?: ProofResolver;
+    /**
+     * Decides whether a root identity may write this expression at all — space
+     * membership, an allow-list, or whatever the application's policy is.
+     * Defaults to accepting any root: the signature still proves who wrote it.
+     */
+    readonly isTrustedRoot?: (rootDid: string, expression: Expression) => boolean | Promise<boolean>;
+}
+export interface CapabilityGate {
+    validate(expression: Expression): Promise<GateResult>;
+}
+/**
+ * How far ahead of this machine's clock a record may be dated. Clocks disagree
+ * by seconds routinely; minutes is generous without letting a record claim a
+ * time when a delegation it does not yet hold will be valid.
+ */
+export declare const MAX_CLOCK_SKEW_SECONDS = 300;
+/**
+ * Creates a gate that checks an author was *authorized* to write an expression.
+ *
+ * The crypto gate proves an expression came from the key it claims. This one
+ * answers the next question: may that key write here? An expression signed by a
+ * delegated key carries a UCAN in `proof`, and the gate walks it back to a root
+ * identity, refusing anything that is expired, misaddressed, over-broad, or
+ * rooted in an identity the application does not trust.
+ *
+ * "Expired" means expired **when the record was signed**, judged by its
+ * `createdAt`. A record stays valid after its session ends, which is what lets a
+ * peer that shows up next week accept last week's data. The cost is that a
+ * leaked session key could backdate records into its own window — which is why
+ * session keys live in memory and are short-lived. A record dated in the future
+ * is refused outright.
+ *
+ * @param config Gate configuration
+ * @returns A CapabilityGate instance
+ */
+export declare function createCapabilityGate(config: CapabilityGateConfig): CapabilityGate;
+//# sourceMappingURL=capability-gate.d.ts.map

package/dist/validation/capability-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-gate.d.ts","sourceRoot":"","sources":["../../src/validation/capability-gate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAGL,KAAK,UAAU,EACf,KAAK,aAAa,EACnB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,WAAW,oBAAoB;IACnC,4DAA4D;IAC5D,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,kEAAkE;IAClE,QAAQ,CAAC,kBAAkB,EAAE,CAAC,UAAU,EAAE,UAAU,KAAK,UAAU,CAAC;IACpE;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,aAAa,CAAC;IACtC;;;;OAIG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAClG;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,UAAU,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CACvD;AAID;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,MAAM,CAAC;AAE1C;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,oBAAoB,GAAG,cAAc,CAiDjF"}

package/dist/validation/capability-gate.js

@@ -0,0 +1,71 @@
+import { isCapabilitySubset, resolveDelegationRoot, } from '../identity/ucan.js';
+const fail = (reason) => ({ passed: false, gate: 'capability', reason });
+/**
+ * How far ahead of this machine's clock a record may be dated. Clocks disagree
+ * by seconds routinely; minutes is generous without letting a record claim a
+ * time when a delegation it does not yet hold will be valid.
+ */
+export const MAX_CLOCK_SKEW_SECONDS = 300;
+/**
+ * Creates a gate that checks an author was *authorized* to write an expression.
+ *
+ * The crypto gate proves an expression came from the key it claims. This one
+ * answers the next question: may that key write here? An expression signed by a
+ * delegated key carries a UCAN in `proof`, and the gate walks it back to a root
+ * identity, refusing anything that is expired, misaddressed, over-broad, or
+ * rooted in an identity the application does not trust.
+ *
+ * "Expired" means expired **when the record was signed**, judged by its
+ * `createdAt`. A record stays valid after its session ends, which is what lets a
+ * peer that shows up next week accept last week's data. The cost is that a
+ * leaked session key could backdate records into its own window — which is why
+ * session keys live in memory and are short-lived. A record dated in the future
+ * is refused outright.
+ *
+ * @param config Gate configuration
+ * @returns A CapabilityGate instance
+ */
+export function createCapabilityGate(config) {
+    const { provider, requiredCapability, resolveProof = () => null, isTrustedRoot } = config;
+    return {
+        async validate(expression) {
+            try {
+                const required = requiredCapability(expression);
+                // No proof: the author is acting for itself, not on anyone's behalf.
+                if (!expression.proof) {
+                    if (isTrustedRoot && !(await isTrustedRoot(expression.author, expression))) {
+                        return fail(`Author ${expression.author} is not authorized here`);
+                    }
+                    return { passed: true, gate: 'capability' };
+                }
+                const signedAt = Math.floor(Date.parse(expression.createdAt) / 1000);
+                if (!Number.isFinite(signedAt)) {
+                    return fail('Expression has no valid creation time');
+                }
+                if (signedAt > Math.floor(Date.now() / 1000) + MAX_CLOCK_SKEW_SECONDS) {
+                    return fail('Expression is dated in the future');
+                }
+                const chain = await resolveDelegationRoot(expression.proof, resolveProof, provider, { at: signedAt });
+                if (!chain.valid || chain.rootDid === null) {
+                    return fail(chain.reason ?? 'Invalid delegation chain');
+                }
+                // The delegation has to name this author as its audience, or anyone
+                // could attach someone else's valid UCAN to their own expression.
+                if (chain.audience !== expression.author) {
+                    return fail('Proof was issued to a different key than the author');
+                }
+                if (!chain.capabilities.some((granted) => isCapabilitySubset(granted, required))) {
+                    return fail(`Proof does not grant ${required.can} on ${required.with}`);
+                }
+                if (isTrustedRoot && !(await isTrustedRoot(chain.rootDid, expression))) {
+                    return fail(`Root identity ${chain.rootDid} is not authorized here`);
+                }
+                return { passed: true, gate: 'capability' };
+            }
+            catch (error) {
+                return fail(error instanceof Error ? error.message : 'Capability check failed');
+            }
+        },
+    };
+}
+//# sourceMappingURL=capability-gate.js.map

package/dist/validation/capability-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-gate.js","sourceRoot":"","sources":["../../src/validation/capability-gate.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,kBAAkB,EAClB,qBAAqB,GAGtB,MAAM,qBAAqB,CAAC;AAwB7B,MAAM,IAAI,GAAG,CAAC,MAAc,EAAc,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;AAE7F;;;;GAIG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAE1C;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAA4B;IAC/D,MAAM,EAAE,QAAQ,EAAE,kBAAkB,EAAE,YAAY,GAAG,GAAG,EAAE,CAAC,IAAI,EAAE,aAAa,EAAE,GAAG,MAAM,CAAC;IAE1F,OAAO;QACL,KAAK,CAAC,QAAQ,CAAC,UAAsB;YACnC,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,kBAAkB,CAAC,UAAU,CAAC,CAAC;gBAEhD,qEAAqE;gBACrE,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;oBACtB,IAAI,aAAa,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;wBAC3E,OAAO,IAAI,CAAC,UAAU,UAAU,CAAC,MAAM,yBAAyB,CAAC,CAAC;oBACpE,CAAC;oBACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;gBAC9C,CAAC;gBAED,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC;gBACrE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC/B,OAAO,IAAI,CAAC,uCAAuC,CAAC,CAAC;gBACvD,CAAC;gBACD,IAAI,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,sBAAsB,EAAE,CAAC;oBACtE,OAAO,IAAI,CAAC,mCAAmC,CAAC,CAAC;gBACnD,CAAC;gBAED,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,UAAU,CAAC,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACtG,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;oBAC3C,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,0BAA0B,CAAC,CAAC;gBAC1D,CAAC;gBAED,oEAAoE;gBACpE,kEAAkE;gBAClE,IAAI,KAAK,CAAC,QAAQ,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;oBACzC,OAAO,IAAI,CAAC,qDAAqD,CAAC,CAAC;gBACrE,CAAC;gBAED,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;oBACjF,OAAO,IAAI,CAAC,wBAAwB,QAAQ,CAAC,GAAG,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC1E,CAAC;gBAED,IAAI,aAAa,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;oBACvE,OAAO,IAAI,CAAC,iBAAiB,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;gBACvE,CAAC;gBAED,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;YAC9C,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,IAAI,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC;YAClF,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/validation/crypto-gate.d.ts

@@ -0,0 +1,16 @@
+import { CryptoProvider, Expression } from '../types.js';
+export interface GateResult {
+    readonly passed: boolean;
+    readonly gate: string;
+    readonly reason?: string;
+}
+export interface CryptoGate {
+    validate(expression: Expression, resolvePublicKey: (did: string) => Promise<CryptoKey>): Promise<GateResult>;
+}
+/**
+ * Creates a gate that performs cryptographic validation of expressions.
+ * @param provider The cryptographic provider to use.
+ * @returns A CryptoGate instance.
+ */
+export declare function createCryptoGate(provider: CryptoProvider): CryptoGate;
+//# sourceMappingURL=crypto-gate.d.ts.map

package/dist/validation/crypto-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto-gate.d.ts","sourceRoot":"","sources":["../../src/validation/crypto-gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,UAAU,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;CAC9G;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,cAAc,GAAG,UAAU,CA8BrE"}