@weaveprotocol/core 0.1.1 → 0.2.0

package/dist/session/hosting.js

@@ -0,0 +1,160 @@
+import { createP256Provider } from '../identity/crypto-p256.js';
+import { didToPublicKey, publicKeyToDid, P256_MULTICODEC } from '../identity/did.js';
+import { base64UrlDecode, base64UrlEncode, utf8Encode } from '../utils/encoding.js';
+import { sha256 } from '../utils/hash.js';
+/** Where the account keeps the hosts it uses, in its registry: one record each */
+export const HOSTING_COLLECTION = 'sys.hosting';
+/** How far a signed request's time may be from the host's, in seconds */
+export const REQUEST_WINDOW_SECONDS = 300;
+/** A fresh seed for a subscription key */
+export function newSubscriptionSeed() {
+    return globalThis.crypto.getRandomValues(new Uint8Array(32));
+}
+/** The subscription key a seed stands for */
+export async function subscriptionKey(seed, provider = createP256Provider()) {
+    const pair = await provider.deriveKeyPairFromSeed(seed);
+    return { did: publicKeyToDid(await provider.exportPublicKey(pair.publicKey), P256_MULTICODEC), privateKey: pair.privateKey };
+}
+async function requestText(method, path, at, body) {
+    const bodyHash = base64UrlEncode(await sha256(utf8Encode(body)));
+    return utf8Encode(`weave-host/v1\n${method.toUpperCase()}\n${path}\n${at}\n${bodyHash}`);
+}
+/**
+ * The `Authorization` header for a request.
+ * @param path The path and query, as the host will see it
+ */
+export async function signRequest(key, method, path, body = '', provider = createP256Provider(), at = Math.floor(Date.now() / 1000)) {
+    const sig = base64UrlEncode(await provider.sign(key.privateKey, await requestText(method, path, at, body)));
+    return `Weave did=${key.did}, at=${at}, sig=${sig}`;
+}
+/**
+ * Which subscription signed a request, or null when it isn't signed, is
+ * signed by someone else, or too far from now.
+ */
+export async function verifyRequest(header, method, path, body, provider = createP256Provider(), now = Math.floor(Date.now() / 1000)) {
+    const match = /^Weave did=(did:key:z[1-9A-HJ-NP-Za-km-z]{1,120}), at=(\d{1,12}), sig=([A-Za-z0-9_-]{1,200})$/.exec(header ?? '');
+    if (!match)
+        return null;
+    const [, did, atText, sig] = match;
+    const at = Number(atText);
+    if (Math.abs(now - at) > REQUEST_WINDOW_SECONDS)
+        return null;
+    try {
+        const publicKey = await provider.importPublicKey(didToPublicKey(did).publicKeyBytes);
+        return (await provider.verify(publicKey, base64UrlDecode(sig), await requestText(method, path, at, body))) ? did : null;
+    }
+    catch {
+        return null;
+    }
+}
+/** Where a host's description is */
+export const HOST_DESCRIPTION_PATH = '/.well-known/weave-host';
+/** How long a pay link works, in seconds */
+export const PAY_LINK_SECONDS = 3600;
+const statusText = (payload) => utf8Encode(`weave-host-status/v1\n${payload}`);
+const payText = (host, subscription, at) => utf8Encode(`weave-pay/v1\n${host}\n${subscription}\n${at}`);
+/** Signs a status with the host's key */
+export async function signStatus(status, privateKey, provider = createP256Provider()) {
+    const payload = JSON.stringify(status);
+    return { payload, sig: base64UrlEncode(await provider.sign(privateKey, statusText(payload))) };
+}
+/** The status a signed one says, when `host` signed it; null when it didn't */
+export async function readStatus(signed, host, provider = createP256Provider()) {
+    try {
+        const publicKey = await provider.importPublicKey(didToPublicKey(host).publicKeyBytes);
+        if (!(await provider.verify(publicKey, base64UrlDecode(signed.sig), statusText(signed.payload))))
+            return null;
+        const status = JSON.parse(signed.payload);
+        return status.host === host ? status : null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * A link to a host's pay page that lets whoever opens it pay for one
+ * subscription, at that host only, for an hour. The signature is in the
+ * fragment, which browsers never send to a server.
+ * @param pay The pay page's address, absolute
+ * @param host The host's key
+ */
+export async function payLink(pay, host, key, provider = createP256Provider(), at = Math.floor(Date.now() / 1000)) {
+    const sig = base64UrlEncode(await provider.sign(key.privateKey, payText(host, key.did, at)));
+    const url = new URL(pay);
+    url.hash = new URLSearchParams({ s: key.did, at: String(at), sig }).toString();
+    return url.toString();
+}
+/**
+ * The subscription a pay page's call is for — its `Authorization: WeavePay
+ * s=…, at=…, sig=…` header, from a pay link to this host (`host`, its key)
+ * that is less than an hour old. Null otherwise.
+ */
+export async function verifyPayLink(header, host, provider = createP256Provider(), now = Math.floor(Date.now() / 1000)) {
+    const match = /^WeavePay s=(did:key:z[1-9A-HJ-NP-Za-km-z]{1,120}), at=(\d{1,12}), sig=([A-Za-z0-9_-]{1,200})$/.exec(header ?? '');
+    if (!match)
+        return null;
+    const [, did, atText, sig] = match;
+    const at = Number(atText);
+    if (now - at > PAY_LINK_SECONDS || at - now > REQUEST_WINDOW_SECONDS)
+        return null;
+    try {
+        const publicKey = await provider.importPublicKey(didToPublicKey(did).publicKeyBytes);
+        return (await provider.verify(publicKey, base64UrlDecode(sig), payText(host, did, at))) ? did : null;
+    }
+    catch {
+        return null;
+    }
+}
+/** Why a host said no: its status code, and what it said */
+export class HostError extends Error {
+    status;
+    constructor(status, message) {
+        super(message);
+        this.status = status;
+    }
+}
+async function answerOf(response) {
+    const answer = (await response.json().catch(() => ({})));
+    if (!response.ok)
+        throw new HostError(response.status, answer.error ?? `The host answered ${response.status}`);
+    return answer;
+}
+/**
+ * What a host at an address says about itself.
+ * @param url The host's address, https://
+ */
+export async function describeHost(url) {
+    const description = await answerOf(await fetch(`${url.replace(/\/+$/, '')}${HOST_DESCRIPTION_PATH}`));
+    if (description.weave !== 'host/1' || typeof description.did !== 'string' || !description.did.startsWith('did:key:')) {
+        throw new Error("That address doesn't answer as a Weave host");
+    }
+    return description;
+}
+/**
+ * A client for one host, signing as one subscription.
+ * @param url The host's address, https://
+ * @param host The host's key: every status must be signed by it
+ */
+export function createHostClient(url, host, key, provider = createP256Provider()) {
+    const base = url.replace(/\/+$/, '');
+    async function call(method, path, body) {
+        const text = body === undefined ? '' : JSON.stringify(body);
+        const headers = { authorization: await signRequest(key, method, path, text, provider) };
+        if (body !== undefined)
+            headers['content-type'] = 'application/json';
+        return answerOf(await fetch(`${base}${path}`, { method, headers, ...(body === undefined ? {} : { body: text }) }));
+    }
+    const checked = async (receipt) => {
+        const status = await readStatus(receipt, host, provider);
+        if (!status || status.subscription !== key.did)
+            throw new Error("The host's answer isn't signed by the host this account uses");
+        return { status, receipt };
+    };
+    const mine = `/host/subscriptions/${encodeURIComponent(key.did)}`;
+    return Object.freeze({
+        status: async () => checked(await call('GET', mine)),
+        attach: async (account, invite) => checked(await call('PUT', `${mine}/carry`, { account, invite })),
+        detach: async () => void (await call('DELETE', `${mine}/carry`)),
+    });
+}
+//# sourceMappingURL=hosting.js.map

package/dist/session/hosting.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosting.js","sourceRoot":"","sources":["../../src/session/hosting.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrF,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACpF,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,kFAAkF;AAClF,MAAM,CAAC,MAAM,kBAAkB,GAAG,aAAa,CAAC;AAuBhD,yEAAyE;AACzE,MAAM,CAAC,MAAM,sBAAsB,GAAG,GAAG,CAAC;AAE1C,0CAA0C;AAC1C,MAAM,UAAU,mBAAmB;IACjC,OAAO,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,6CAA6C;AAC7C,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAgB,EAAE,WAA2B,kBAAkB,EAAE;IACrG,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC;IACxD,OAAO,EAAE,GAAG,EAAE,cAAc,CAAC,MAAM,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;AAC/H,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,MAAc,EAAE,IAAY,EAAE,EAAU,EAAE,IAAY;IAC/E,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACjE,OAAO,UAAU,CAAC,kBAAkB,MAAM,CAAC,WAAW,EAAE,KAAK,IAAI,KAAK,EAAE,KAAK,QAAQ,EAAE,CAAC,CAAC;AAC3F,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAoB,EACpB,MAAc,EACd,IAAY,EACZ,IAAI,GAAG,EAAE,EACT,WAA2B,kBAAkB,EAAE,EAC/C,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAElC,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5G,OAAO,aAAa,GAAG,CAAC,GAAG,QAAQ,EAAE,SAAS,GAAG,EAAE,CAAC;AACtD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAA0B,EAC1B,MAAc,EACd,IAAY,EACZ,IAAY,EACZ,WAA2B,kBAAkB,EAAE,EAC/C,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAEnC,MAAM,KAAK,GAAG,+FAA+F,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IACjI,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,GAAG,KAAoD,CAAC;IAClF,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,sBAAsB;QAAE,OAAO,IAAI,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC;QACrF,OAAO,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,MAAM,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1H,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AA+CD,oCAAoC;AACpC,MAAM,CAAC,MAAM,qBAAqB,GAAG,yBAAyB,CAAC;AAE/D,4CAA4C;AAC5C,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAErC,MAAM,UAAU,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,UAAU,CAAC,yBAAyB,OAAO,EAAE,CAAC,CAAC;AACvF,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,YAAoB,EAAE,EAAU,EAAE,EAAE,CAAC,UAAU,CAAC,iBAAiB,IAAI,KAAK,YAAY,KAAK,EAAE,EAAE,CAAC,CAAC;AAEhI,yCAAyC;AACzC,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAkB,EAAE,UAAqB,EAAE,WAA2B,kBAAkB,EAAE;IACzH,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACvC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,eAAe,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;AACjG,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAoB,EAAE,IAAY,EAAE,WAA2B,kBAAkB,EAAE;IAClH,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,cAAc,CAAC,CAAC;QACtF,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9G,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAe,CAAC;QACxD,OAAO,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,GAAW,EACX,IAAY,EACZ,GAAoB,EACpB,WAA2B,kBAAkB,EAAE,EAC/C,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAElC,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7F,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACzB,GAAG,CAAC,IAAI,GAAG,IAAI,eAAe,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC/E,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAA0B,EAC1B,IAAY,EACZ,WAA2B,kBAAkB,EAAE,EAC/C,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAEnC,MAAM,KAAK,GAAG,gGAAgG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IAClI,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,GAAG,KAAoD,CAAC;IAClF,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,GAAG,GAAG,EAAE,GAAG,gBAAgB,IAAI,EAAE,GAAG,GAAG,GAAG,sBAAsB;QAAE,OAAO,IAAI,CAAC;IAClF,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC;QACrF,OAAO,CAAC,MAAM,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACvG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,4DAA4D;AAC5D,MAAM,OAAO,SAAU,SAAQ,KAAK;IAEvB;IADX,YACW,MAAc,EACvB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,WAAM,GAAN,MAAM,CAAQ;IAIzB,CAAC;CACF;AAED,KAAK,UAAU,QAAQ,CAAI,QAAkB;IAC3C,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAA2B,CAAC;IACnF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,IAAI,qBAAqB,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IAC/G,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAW;IAC5C,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAkB,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,qBAAqB,EAAE,CAAC,CAAC,CAAC;IACvH,IAAI,WAAW,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,WAAW,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACrH,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAWD;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW,EAAE,IAAY,EAAE,GAAoB,EAAE,WAA2B,kBAAkB,EAAE;IAC/H,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACrC,KAAK,UAAU,IAAI,CAAI,MAAc,EAAE,IAAY,EAAE,IAAc;QACjE,MAAM,IAAI,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC5D,MAAM,OAAO,GAA2B,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;QAChH,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QACrE,OAAO,QAAQ,CAAI,MAAM,KAAK,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACxH,CAAC;IACD,MAAM,OAAO,GAAG,KAAK,EAAE,OAAqB,EAAE,EAAE;QAC9C,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QACzD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,YAAY,KAAK,GAAG,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;QAChI,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC7B,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,uBAAuB,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;IAClE,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,IAAI,CAAe,KAAK,EAAE,IAAI,CAAC,CAAC;QAClE,MAAM,EAAE,KAAK,EAAE,OAAe,EAAE,MAAc,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,IAAI,CAAe,KAAK,EAAE,GAAG,IAAI,QAAQ,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;QACjI,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,QAAQ,CAAC,CAAC;KACjE,CAAC,CAAC;AACL,CAAC"}

package/dist/space/account-registry.d.ts

@@ -61,4 +61,10 @@ export interface Carrier {
  * @param owner The account's DID
  */
 export declare function deriveAccountRegistry(accountKey: Uint8Array, owner: string, provider?: CryptoProvider): Promise<SpaceRecord>;
+/**
+ * The account's contacts space, derived the same way: one `std.contact` per
+ * person (`schemas/contacts.ts`). Its own space, not part of the registry, so
+ * an app can be given the contacts without the whole account.
+ */
+export declare function deriveContactsSpace(accountKey: Uint8Array, owner: string, provider?: CryptoProvider): Promise<SpaceRecord>;
 //# sourceMappingURL=account-registry.d.ts.map

package/dist/space/account-registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"account-registry.d.ts","sourceRoot":"","sources":["../../src/space/account-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,cAAc,EAAS,MAAM,aAAa,CAAC;AACzD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAQtD;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,eAAe,CAAC;AAElD;;;GAGG;AACH,eAAO,MAAM,kBAAkB,gBAAgB,CAAC;AAEhD,kEAAkE;AAClE,eAAO,MAAM,WAAW,YAAY,CAAC;AAErC,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,wGAAwG;AACxG,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,gBAAgB,CAAC;AAEhD,8BAA8B;AAC9B,MAAM,WAAW,OAAO;IACtB,qCAAqC;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,uFAAuF;IACvF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,oDAAoD;IACpD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,4BAA4B;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAYD;;;;GAIG;AACH,wBAAsB,qBAAqB,CACzC,UAAU,EAAE,UAAU,EACtB,KAAK,EAAE,MAAM,EACb,QAAQ,GAAE,cAAqC,GAC9C,OAAO,CAAC,WAAW,CAAC,CA8BtB"}
+{"version":3,"file":"account-registry.d.ts","sourceRoot":"","sources":["../../src/space/account-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,KAAK,EAAE,cAAc,EAAS,MAAM,aAAa,CAAC;AACzD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAQtD;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,eAAe,CAAC;AAElD;;;GAGG;AACH,eAAO,MAAM,kBAAkB,gBAAgB,CAAC;AAEhD,kEAAkE;AAClE,eAAO,MAAM,WAAW,YAAY,CAAC;AAErC,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,wGAAwG;AACxG,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,gBAAgB,CAAC;AAEhD,8BAA8B;AAC9B,MAAM,WAAW,OAAO;IACtB,qCAAqC;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,uFAAuF;IACvF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,oDAAoD;IACpD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,4BAA4B;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAYD;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,UAAU,EACtB,KAAK,EAAE,MAAM,EACb,QAAQ,GAAE,cAAqC,GAC9C,OAAO,CAAC,WAAW,CAAC,CAEtB;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,UAAU,EACtB,KAAK,EAAE,MAAM,EACb,QAAQ,GAAE,cAAqC,GAC9C,OAAO,CAAC,WAAW,CAAC,CAEtB"}

package/dist/space/account-registry.js

@@ -32,9 +32,21 @@ async function expand(accountKey, info) {
  * @param accountKey The account's vault key bytes (`deriveVaultKeyBytes(seed)`)
  * @param owner The account's DID
  */
-export async function deriveAccountRegistry(accountKey, owner, provider = createP256Provider()) {
-    const nonce = base64UrlEncode((await expand(accountKey, 'weave/account-registry/nonce/v1')).subarray(0, 12));
-    const keyBytes = await expand(accountKey, 'weave/account-registry/key/v1');
+export function deriveAccountRegistry(accountKey, owner, provider = createP256Provider()) {
+    return deriveAccountSpace(accountKey, owner, 'weave/account-registry', 'Account registry', provider);
+}
+/**
+ * The account's contacts space, derived the same way: one `std.contact` per
+ * person (`schemas/contacts.ts`). Its own space, not part of the registry, so
+ * an app can be given the contacts without the whole account.
+ */
+export function deriveContactsSpace(accountKey, owner, provider = createP256Provider()) {
+    return deriveAccountSpace(accountKey, owner, 'weave/contacts', 'Contacts', provider);
+}
+/** A private space only the account can find: its key and nonce derived from the vault key under `label`. */
+async function deriveAccountSpace(accountKey, owner, label, name, provider) {
+    const nonce = base64UrlEncode((await expand(accountKey, `${label}/nonce/v1`)).subarray(0, 12));
+    const keyBytes = await expand(accountKey, `${label}/key/v1`);
     const cryptoKey = await globalThis.crypto.subtle.importKey('raw', keyBytes, { name: 'AES-GCM', length: 256 }, true, [
         'encrypt',
         'decrypt',
@@ -59,7 +71,7 @@ export async function deriveAccountRegistry(accountKey, owner, provider = create
     const space = Object.freeze({
         id: await spaceIdOf(spaceGenesis(fixed)),
         ...fixed,
-        name: 'Account registry',
+        name,
     });
     return { space, key, invite: null, role: solo.creatorRole };
 }

package/dist/space/account-registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"account-registry.js","sourceRoot":"","sources":["../../src/space/account-registry.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAEpC;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAAY,CAAC;AAElD;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,aAAa,CAAC;AAEhD,kEAAkE;AAClE,MAAM,CAAC,MAAM,WAAW,GAAG,SAAS,CAAC;AAYrC;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,aAAa,CAAC;AAehD,KAAK,UAAU,MAAM,CAAC,UAAsB,EAAE,IAAY;IACxD,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,UAA0B,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;IAC5H,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CACpD,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,CAAiB,EAAE,EAClG,QAAQ,EACR,GAAG,CACJ,CAAC;IACF,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,UAAsB,EACtB,KAAa,EACb,WAA2B,kBAAkB,EAAE;IAE/C,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,MAAM,MAAM,CAAC,UAAU,EAAE,iCAAiC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC7G,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,+BAA+B,CAAC,CAAC;IAC3E,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,QAAwB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE;QAClI,SAAS;QACT,SAAS;KACV,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,iDAAiD;IAC9F,MAAM,GAAG,GAAa,MAAM,CAAC,MAAM,CAAC;QAClC,EAAE,EAAE,eAAe,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC3C,GAAG,EAAE,SAAS;QACd,SAAS;QACT,OAAO,EAAE,CAAC;KACX,CAAC,CAAC;IACH,MAAM,KAAK,GAAG;QACZ,UAAU,EAAE,SAAkB;QAC9B,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,SAAS;QACT,KAAK;QACL,OAAO,EAAE,CAAC,MAAM,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG;QACjD,eAAe,EAAE,GAAG,CAAC,EAAE;KACxB,CAAC;IACF,MAAM,KAAK,GAAU,MAAM,CAAC,MAAM,CAAC;QACjC,EAAE,EAAE,MAAM,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACxC,GAAG,KAAK;QACR,IAAI,EAAE,kBAAkB;KACzB,CAAC,CAAC;IACH,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;AAC9D,CAAC"}
+{"version":3,"file":"account-registry.js","sourceRoot":"","sources":["../../src/space/account-registry.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAC3E,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC;AAEpC;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAAY,CAAC;AAElD;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,aAAa,CAAC;AAEhD,kEAAkE;AAClE,MAAM,CAAC,MAAM,WAAW,GAAG,SAAS,CAAC;AAYrC;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,aAAa,CAAC;AAehD,KAAK,UAAU,MAAM,CAAC,UAAsB,EAAE,IAAY;IACxD,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,UAA0B,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;IAC5H,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CACpD,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,CAAiB,EAAE,EAClG,QAAQ,EACR,GAAG,CACJ,CAAC;IACF,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,UAAsB,EACtB,KAAa,EACb,WAA2B,kBAAkB,EAAE;IAE/C,OAAO,kBAAkB,CAAC,UAAU,EAAE,KAAK,EAAE,wBAAwB,EAAE,kBAAkB,EAAE,QAAQ,CAAC,CAAC;AACvG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,UAAsB,EACtB,KAAa,EACb,WAA2B,kBAAkB,EAAE;IAE/C,OAAO,kBAAkB,CAAC,UAAU,EAAE,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;AACvF,CAAC;AAED,6GAA6G;AAC7G,KAAK,UAAU,kBAAkB,CAC/B,UAAsB,EACtB,KAAa,EACb,KAAa,EACb,IAAY,EACZ,QAAwB;IAExB,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,MAAM,MAAM,CAAC,UAAU,EAAE,GAAG,KAAK,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC/F,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,UAAU,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,QAAwB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE;QAClI,SAAS;QACT,SAAS;KACV,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,iDAAiD;IAC9F,MAAM,GAAG,GAAa,MAAM,CAAC,MAAM,CAAC;QAClC,EAAE,EAAE,eAAe,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC3C,GAAG,EAAE,SAAS;QACd,SAAS;QACT,OAAO,EAAE,CAAC;KACX,CAAC,CAAC;IACH,MAAM,KAAK,GAAG;QACZ,UAAU,EAAE,SAAkB;QAC9B,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,SAAS;QACT,KAAK;QACL,OAAO,EAAE,CAAC,MAAM,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,GAAG;QACjD,eAAe,EAAE,GAAG,CAAC,EAAE;KACxB,CAAC;IACF,MAAM,KAAK,GAAU,MAAM,CAAC,MAAM,CAAC;QACjC,EAAE,EAAE,MAAM,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACxC,GAAG,KAAK;QACR,IAAI;KACL,CAAC,CAAC;IACH,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;AAC9D,CAAC"}

package/dist/space/notify.d.ts

@@ -0,0 +1,88 @@
+/**
+ * @module space/notify
+ * Subscriptions: "let me know when…", across spaces, by nodes that can't read.
+ *
+ * A person says what they want to hear about — new records in a collection,
+ * in some spaces or all of them, perhaps only those with a topic value
+ * ("mentions me", "in #design"), perhaps only other people's. That is kept in
+ * the account registry, sealed, value and all (`NOTIFY_COLLECTION`).
+ *
+ * The account's carriers — its extension, its hosts — are the ones online to
+ * notice, and they can't read. So every device holding the account key copies
+ * each subscription into each carry space with the value replaced by that
+ * space's topic tag (`records/topics.ts`): a carrier learns "tag X, in Club",
+ * never what X stands for. It matches arriving records by space, collection,
+ * author and tag, all on the outside of a record, and says so; the extension
+ * shows a notification. The label is the person's own words, shown as is.
+ *
+ * The same split as a query in a space held in part (BLOCK-22): the part a
+ * blind node can check runs there, the rest where the keys are.
+ */
+import type { Expression } from '../types.js';
+import type { SpaceKey } from '../privacy/space-encryption.js';
+/** Subscriptions as the person made them, in the account registry: key `notify:<id>` */
+export declare const NOTIFY_COLLECTION = "sys.notify";
+/** Subscriptions as a carrier holds them, in its carry space: the same key, values replaced by tags */
+export declare const SUBSCRIPTION_COLLECTION = "sys.subscription";
+/** Spaces a subscription looks at: every space of the account, or these */
+export type NotifySpaces = 'all' | ReadonlyArray<string>;
+/** A subscription as the person made it */
+export interface NotifyWhen {
+    /** What the notification says, in the person's words: "Mentioned in Club" */
+    readonly label: string;
+    /** New records in this collection */
+    readonly collection: string;
+    readonly spaces: NotifySpaces;
+    /** Only records whose topic field holds this value — `{ field: 'mentions', value: <my did> }` */
+    readonly topic?: {
+        readonly field: string;
+        readonly value: string | number | boolean;
+    };
+    /** Only records other people wrote. Default true. */
+    readonly others?: boolean;
+    /** Where clicking the notification goes: an app's address. Default: the account home. */
+    readonly open?: string;
+    /** Kept, but quiet */
+    readonly paused?: boolean;
+    /** When it was made: nothing written before it notifies */
+    readonly since: string;
+}
+/** A subscription as a carrier holds it: no values, only tags */
+export interface CarriedSubscription {
+    readonly v: 1;
+    readonly label: string;
+    readonly collection: string;
+    readonly spaces: NotifySpaces;
+    /** Per space: a record matches when it carries any of these. Absent: no topic, every record matches. */
+    readonly tags?: Readonly<Record<string, ReadonlyArray<string>>>;
+    readonly others: boolean;
+    readonly open?: string;
+    readonly paused: boolean;
+    readonly since: string;
+}
+/** Why a subscription can't be kept, or null */
+export declare function checkNotify(when: unknown): string | null;
+/** A space the account follows, as far as a subscription needs: its id, and its current key when private */
+export interface NotifySpace {
+    readonly id: string;
+    readonly key: SpaceKey | null;
+    readonly visibility: 'public' | 'private';
+}
+/**
+ * What a carrier gets: the subscription with its value replaced by each
+ * space's tag. A private space whose key this device doesn't hold gets none,
+ * so it never matches — better quiet than wrong.
+ */
+export declare function carriedFor(when: NotifyWhen, spaces: ReadonlyArray<NotifySpace>): Promise<CarriedSubscription>;
+/** A carried subscription as read back from a carry space, or null when it isn't one */
+export declare function readCarried(body: unknown): CarriedSubscription | null;
+/** Who a version was written for: the account at the root of its note, else its own key */
+export declare function rootOf(version: Expression): string;
+/** How long after it was written a record may still notify: a carrier catching up on last week stays quiet */
+export declare const NOTIFY_WITHIN_MS: number;
+/**
+ * Whether a record that just arrived in a space is one a subscription asks
+ * about — decided from its outside alone.
+ */
+export declare function matchesSubscription(sub: CarriedSubscription, spaceId: string, version: Expression, account: string, now?: number): boolean;
+//# sourceMappingURL=notify.d.ts.map

package/dist/space/notify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notify.d.ts","sourceRoot":"","sources":["../../src/space/notify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAI/D,wFAAwF;AACxF,eAAO,MAAM,iBAAiB,eAAe,CAAC;AAC9C,uGAAuG;AACvG,eAAO,MAAM,uBAAuB,qBAAqB,CAAC;AAE1D,2EAA2E;AAC3E,MAAM,MAAM,YAAY,GAAG,KAAK,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;AAEzD,2CAA2C;AAC3C,MAAM,WAAW,UAAU;IACzB,6EAA6E;IAC7E,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,qCAAqC;IACrC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,iGAAiG;IACjG,QAAQ,CAAC,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAA;KAAE,CAAC;IACvF,qDAAqD;IACrD,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,yFAAyF;IACzF,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,sBAAsB;IACtB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,2DAA2D;IAC3D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,iEAAiE;AACjE,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;IACd,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,wGAAwG;IACxG,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAChE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAID,gDAAgD;AAChD,wBAAgB,WAAW,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAyBxD;AAED,4GAA4G;AAC5G,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,UAAU,EAAE,QAAQ,GAAG,SAAS,CAAC;CAC3C;AAED;;;;GAIG;AACH,wBAAsB,UAAU,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAsBnH;AAED,wFAAwF;AACxF,wBAAgB,WAAW,CAAC,IAAI,EAAE,OAAO,GAAG,mBAAmB,GAAG,IAAI,CAUrE;AAED,2FAA2F;AAC3F,wBAAgB,MAAM,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CAOlD;AAED,8GAA8G;AAC9G,eAAO,MAAM,gBAAgB,QAAsB,CAAC;AAEpD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,OAAO,CAY9I"}

package/dist/space/notify.js

@@ -0,0 +1,127 @@
+import { parseUCAN } from '../identity/ucan.js';
+import { checkTopics, topicKey, topicTag } from '../records/topics.js';
+/** Subscriptions as the person made them, in the account registry: key `notify:<id>` */
+export const NOTIFY_COLLECTION = 'sys.notify';
+/** Subscriptions as a carrier holds them, in its carry space: the same key, values replaced by tags */
+export const SUBSCRIPTION_COLLECTION = 'sys.subscription';
+const COLLECTION = /^[a-z][a-z0-9-]*(\.[a-z0-9-]+)+$/;
+/** Why a subscription can't be kept, or null */
+export function checkNotify(when) {
+    const w = when;
+    if (typeof w !== 'object' || w === null)
+        return 'A subscription must be an object';
+    if (typeof w.label !== 'string' || !w.label.trim() || w.label.length > 120)
+        return 'label is what the notification says: some text, at most 120 characters';
+    if (typeof w.collection !== 'string' || !COLLECTION.test(w.collection) || w.collection.startsWith('sys.'))
+        return 'collection must be one of the space’s collections, like "app.chat.message"';
+    if (w.spaces !== 'all' && !(Array.isArray(w.spaces) && w.spaces.length > 0 && w.spaces.length <= 256 && w.spaces.every((s) => typeof s === 'string'))) {
+        return 'spaces must be "all" or a list of space ids';
+    }
+    if (w.topic !== undefined) {
+        const t = w.topic;
+        if (typeof t !== 'object' || t === null || typeof t.field !== 'string' || checkTopics([t.field]) !== null)
+            return 'topic.field must be a field name';
+        if (!['string', 'number', 'boolean'].includes(typeof t.value))
+            return 'topic.value must be text, a number or yes/no';
+    }
+    if (w.others !== undefined && typeof w.others !== 'boolean')
+        return 'others must be true or false';
+    if (w.paused !== undefined && typeof w.paused !== 'boolean')
+        return 'paused must be true or false';
+    if (w.open !== undefined) {
+        try {
+            const url = new URL(w.open);
+            if (url.protocol !== 'https:' && !(url.protocol === 'http:' && ['localhost', '127.0.0.1'].includes(url.hostname)))
+                return 'open must be an https:// address';
+        }
+        catch {
+            return 'open must be a web address';
+        }
+    }
+    if (typeof w.since !== 'string' || !Number.isFinite(Date.parse(w.since)))
+        return 'since must be a date';
+    return null;
+}
+/**
+ * What a carrier gets: the subscription with its value replaced by each
+ * space's tag. A private space whose key this device doesn't hold gets none,
+ * so it never matches — better quiet than wrong.
+ */
+export async function carriedFor(when, spaces) {
+    let tags;
+    if (when.topic) {
+        tags = {};
+        const looked = when.spaces === 'all' ? spaces : spaces.filter((s) => when.spaces.includes(s.id));
+        for (const space of looked) {
+            if (space.visibility === 'private' && !space.key)
+                continue;
+            const key = await topicKey(space.visibility === 'private' ? { spaceKey: space.key.key } : { spaceId: space.id });
+            tags[space.id] = [await topicTag(key, when.collection, when.topic.field, when.topic.value)];
+        }
+    }
+    return {
+        v: 1,
+        label: when.label,
+        collection: when.collection,
+        spaces: when.spaces,
+        ...(tags ? { tags } : {}),
+        others: when.others ?? true,
+        ...(when.open ? { open: when.open } : {}),
+        paused: when.paused ?? false,
+        since: when.since,
+    };
+}
+/** A carried subscription as read back from a carry space, or null when it isn't one */
+export function readCarried(body) {
+    const b = body;
+    if (typeof b !== 'object' || b === null || b.v !== 1)
+        return null;
+    const problem = checkNotify({ ...b, others: b.others, topic: undefined });
+    if (problem)
+        return null;
+    if (b.tags !== undefined) {
+        if (typeof b.tags !== 'object' || b.tags === null)
+            return null;
+        for (const list of Object.values(b.tags))
+            if (!Array.isArray(list) || !list.every((t) => typeof t === 'string'))
+                return null;
+    }
+    return b;
+}
+/** Who a version was written for: the account at the root of its note, else its own key */
+export function rootOf(version) {
+    if (!version.proof)
+        return version.author;
+    try {
+        return parseUCAN(version.proof).payload.iss;
+    }
+    catch {
+        return version.author;
+    }
+}
+/** How long after it was written a record may still notify: a carrier catching up on last week stays quiet */
+export const NOTIFY_WITHIN_MS = 24 * 60 * 60 * 1000;
+/**
+ * Whether a record that just arrived in a space is one a subscription asks
+ * about — decided from its outside alone.
+ */
+export function matchesSubscription(sub, spaceId, version, account, now = Date.now()) {
+    if (sub.paused || version.collection !== sub.collection)
+        return false;
+    if (version.seq !== 0 || version.deleted)
+        return false;
+    if (sub.spaces !== 'all' && !sub.spaces.includes(spaceId))
+        return false;
+    const written = Date.parse(version.createdAt);
+    if (!Number.isFinite(written) || written < Date.parse(sub.since) || now - written > NOTIFY_WITHIN_MS)
+        return false;
+    if (sub.others && rootOf(version) === account)
+        return false;
+    if (sub.tags) {
+        const wanted = sub.tags[spaceId];
+        if (!wanted?.length || !version.tags?.some((tag) => wanted.includes(tag)))
+            return false;
+    }
+    return true;
+}
+//# sourceMappingURL=notify.js.map

package/dist/space/notify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notify.js","sourceRoot":"","sources":["../../src/space/notify.ts"],"names":[],"mappings":"AAsBA,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEvE,wFAAwF;AACxF,MAAM,CAAC,MAAM,iBAAiB,GAAG,YAAY,CAAC;AAC9C,uGAAuG;AACvG,MAAM,CAAC,MAAM,uBAAuB,GAAG,kBAAkB,CAAC;AAsC1D,MAAM,UAAU,GAAG,kCAAkC,CAAC;AAEtD,gDAAgD;AAChD,MAAM,UAAU,WAAW,CAAC,IAAa;IACvC,MAAM,CAAC,GAAG,IAAkC,CAAC;IAC7C,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,kCAAkC,CAAC;IACnF,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,wEAAwE,CAAC;IAC5J,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,4EAA4E,CAAC;IAC/L,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,EAAE,CAAC;QACtJ,OAAO,6CAA6C,CAAC;IACvD,CAAC;IACD,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,CAAC,CAAC,KAAyD,CAAC;QACtE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI;YAAE,OAAO,kCAAkC,CAAC;QACrJ,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,8CAA8C,CAAC;IACvH,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,8BAA8B,CAAC;IACnG,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,8BAA8B,CAAC;IACnG,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5B,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAAE,OAAO,kCAAkC,CAAC;QAC/J,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,4BAA4B,CAAC;QACtC,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,sBAAsB,CAAC;IACxG,OAAO,IAAI,CAAC;AACd,CAAC;AASD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAgB,EAAE,MAAkC;IACnF,IAAI,IAA0C,CAAC;IAC/C,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QACf,IAAI,GAAG,EAAE,CAAC;QACV,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAE,IAAI,CAAC,MAAgC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5H,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,GAAG;gBAAE,SAAS;YAC3D,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YAClH,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IACD,OAAO;QACL,CAAC,EAAE,CAAC;QACJ,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,IAAI;QAC3B,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzC,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,KAAK;QAC5B,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC;AACJ,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,WAAW,CAAC,IAAa;IACvC,MAAM,CAAC,GAAG,IAA2C,CAAC;IACtD,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClE,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAC1E,IAAI,OAAO;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACzB,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC/D,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;gBAAE,OAAO,IAAI,CAAC;IAC/H,CAAC;IACD,OAAO,CAAwB,CAAC;AAClC,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,MAAM,CAAC,OAAmB;IACxC,IAAI,CAAC,OAAO,CAAC,KAAK;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC;IAC1C,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC,MAAM,CAAC;IACxB,CAAC;AACH,CAAC;AAED,8GAA8G;AAC9G,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEpD;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAwB,EAAE,OAAe,EAAE,OAAmB,EAAE,OAAe,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACnI,IAAI,GAAG,CAAC,MAAM,IAAI,OAAO,CAAC,UAAU,KAAK,GAAG,CAAC,UAAU;QAAE,OAAO,KAAK,CAAC;IACtE,IAAI,OAAO,CAAC,GAAG,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IACvD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACxE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,GAAG,OAAO,GAAG,gBAAgB;QAAE,OAAO,KAAK,CAAC;IACnH,IAAI,GAAG,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAC5D,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QACb,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IAC1F,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/space/pass.d.ts

@@ -39,6 +39,12 @@ export interface SpacePass {
     readonly space: Space;
     /** A private space's read key seed, base64url. Absent for a public space. */
     readonly read?: string;
+    /**
+     * The public half of that read key, once the space's key has changed since
+     * it began. Then the space itself can't vouch for it — the space's history
+     * does, and a read key it doesn't name gets the carrier nowhere.
+     */
+    readonly readKey?: string;
 }
 /** A pass, checked and ready to open a space with */
 export interface OpenedPass {

package/dist/space/pass.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pass.d.ts","sourceRoot":"","sources":["../../src/space/pass.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAA+C,KAAK,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAInG,yCAAyC;AACzC,eAAO,MAAM,eAAe,aAAa,CAAC;AAE1C;;;GAGG;AACH,eAAO,MAAM,gBAAgB,iBAAiB,CAAC;AAE/C,wBAAwB;AACxB,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;IACd,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,6EAA6E;IAC7E,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,qDAAqD;AACrD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI,CAAC;CACpC;AAED,uCAAuC;AACvC,wBAAsB,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAG9D;AAED;;;GAGG;AACH,wBAAsB,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,CAItE;AAED;;;;GAIG;AACH,wBAAsB,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAYnG;AAED,2EAA2E;AAC3E,wBAAgB,aAAa,CAAC,IAAI,EAAE,UAAU,GAAG,WAAW,CAE3D"}
+{"version":3,"file":"pass.d.ts","sourceRoot":"","sources":["../../src/space/pass.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAA+C,KAAK,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAKnG,yCAAyC;AACzC,eAAO,MAAM,eAAe,aAAa,CAAC;AAE1C;;;GAGG;AACH,eAAO,MAAM,gBAAgB,iBAAiB,CAAC;AAE/C,wBAAwB;AACxB,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;IACd,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,6EAA6E;IAC7E,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,qDAAqD;AACrD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI,CAAC;CACpC;AAED,uCAAuC;AACvC,wBAAsB,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAG9D;AAED;;;GAGG;AACH,wBAAsB,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,CAMtE;AAED;;;;GAIG;AACH,wBAAsB,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAYnG;AAED,2EAA2E;AAC3E,wBAAgB,aAAa,CAAC,IAAI,EAAE,UAAU,GAAG,WAAW,CAE3D"}

package/dist/space/pass.js

@@ -1,6 +1,7 @@
 import { checkSpace, deriveReadSeed, readKeyFromSeed } from './space-access.js';
 import { base64UrlDecode, base64UrlEncode, utf8Encode } from '../utils/encoding.js';
 import { sha256 } from '../utils/hash.js';
+import { createP256Provider } from '../identity/crypto-p256.js';
 /** Where passes live in a carry space */
 export const PASS_COLLECTION = 'sys.pass';
 /**
@@ -22,7 +23,9 @@ export async function makePass(record) {
         return { v: 1, space: record.space };
     if (!record.key)
         throw new Error(`"${record.space.name}" is held here without its key, so it cannot be passed on`);
-    return { v: 1, space: record.space, read: base64UrlEncode(await deriveReadSeed(record.key)) };
+    const seed = await deriveReadSeed(record.key);
+    const pass = { v: 1, space: record.space, read: base64UrlEncode(seed) };
+    return record.key.id === record.space.encryptionKeyId ? pass : { ...pass, readKey: (await readKeyFromSeed(seed, createP256Provider())).did };
 }
 /**
  * Checks a pass someone handed over: the space must hash to its id, and the
@@ -41,7 +44,7 @@ export async function openPass(value, provider) {
         return null;
     try {
         const read = await readKeyFromSeed(base64UrlDecode(pass.read), provider);
-        return read.did === pass.space.readKey ? { space: pass.space, read } : null;
+        return read.did === pass.space.readKey || (pass.readKey !== undefined && read.did === pass.readKey) ? { space: pass.space, read } : null;
     }
     catch {
         return null;

package/dist/space/pass.js.map

@@ -1 +1 @@
-{"version":3,"file":"pass.js","sourceRoot":"","sources":["../../src/space/pass.ts"],"names":[],"mappings":"AA2BA,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,eAAe,EAAqB,MAAM,mBAAmB,CAAC;AACnG,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACpF,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,yCAAyC;AACzC,MAAM,CAAC,MAAM,eAAe,GAAG,UAAU,CAAC;AAE1C;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,cAAc,CAAC;AAgB/C,uCAAuC;AACvC,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAAe;IAC3C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IACjD,OAAO,QAAQ,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AACvG,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,MAAmB;IAChD,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IAC/E,IAAI,CAAC,MAAM,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,2DAA2D,CAAC,CAAC;IACnH,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,eAAe,CAAC,MAAM,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;AAChG,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,KAAc,EAAE,QAAwB;IACrE,MAAM,IAAI,GAAG,KAAkC,CAAC;IAChD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACtD,IAAI,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACzD,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjF,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;QACzE,OAAO,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,aAAa,CAAC,IAAgB;IAC5C,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;AACrF,CAAC"}
+{"version":3,"file":"pass.js","sourceRoot":"","sources":["../../src/space/pass.ts"],"names":[],"mappings":"AA2BA,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,eAAe,EAAqB,MAAM,mBAAmB,CAAC;AACnG,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACpF,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAEhE,yCAAyC;AACzC,MAAM,CAAC,MAAM,eAAe,GAAG,UAAU,CAAC;AAE1C;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,cAAc,CAAC;AAsB/C,uCAAuC;AACvC,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,OAAe;IAC3C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;IACjD,OAAO,QAAQ,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AACvG,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,MAAmB;IAChD,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IAC/E,IAAI,CAAC,MAAM,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,2DAA2D,CAAC,CAAC;IACnH,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC9C,MAAM,IAAI,GAAc,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE,CAAC;IACnF,OAAO,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,MAAM,eAAe,CAAC,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;AAC/I,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,KAAc,EAAE,QAAwB;IACrE,MAAM,IAAI,GAAG,KAAkC,CAAC;IAChD,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACtD,IAAI,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACzD,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjF,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;QACzE,OAAO,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3I,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,aAAa,CAAC,IAAgB;IAC5C,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;AACrF,CAAC"}