agent-comms 8.6.1 → 8.7.0

package/dist/core/account-ledger-crypto.js

@@ -0,0 +1,101 @@
+/**
+ * The confidentiality layer of the account's replicated grant ledger (agent-comms#344). A `core/data` entry is opaque bytes to the transport and is replicated to whoever asks for it, so every ledger entry is sealed with a key only a holder of the account's private key can derive: AES-256-GCM under an HKDF-SHA256 key from the account key, with the log it belongs to and its sequence number bound in as associated data so a relayer can neither read an entry nor move one to another log or position. The same derivation gives each machine's writer log an id that any account holder recognises and nobody else can distinguish from a random device-id.
+ */
+import { createCipheriv, createDecipheriv, createHmac, createPrivateKey, hkdfSync, randomBytes, timingSafeEqual, } from "node:crypto";
+/** AES-256 takes a 256-bit key. */
+const KEY_BYTES = 32;
+/** The 96-bit IV GCM is specified for; any other length is hashed into one, which weakens its guarantees. */
+const IV_BYTES = 12;
+/** GCM's full-length authentication tag. */
+const TAG_BYTES = 16;
+/** The first byte of every sealed entry, so a later format can be told apart from this one. */
+const SEALED_ENTRY_VERSION = 1;
+const VERSION_BYTES = 1;
+/** A data-domain log id is a device-id, which is a SHA-256 digest. */
+export const WRITER_LOG_ID_BYTES = 32;
+/** The random half of a writer log id; the other half authenticates it. */
+export const WRITER_NONCE_BYTES = WRITER_LOG_ID_BYTES / 2;
+/** A sequence number is bound into the associated data as a 64-bit big-endian integer. */
+const SEQ_BYTES = 8;
+const ENTRY_KEY_INFO = "agent-comms/account-ledger/entry/v1";
+const WRITER_KEY_INFO = "agent-comms/account-ledger/writer/v1";
+const ASSOCIATED_DATA_LABEL = "agent-comms/account-ledger/v1";
+/** Derives the ledger's keys from the account's PEM private key. Every copy of the same account key derives the same keys, which is what lets every machine holding it read what any of them wrote. */
+export function deriveAccountLedgerKeys(accountPrivateKeyPem) {
+    const ikm = createPrivateKey(accountPrivateKeyPem).export({
+        format: "der",
+        type: "pkcs8",
+    });
+    const derive = (info) => Buffer.from(hkdfSync("sha256", ikm, Buffer.alloc(0), info, KEY_BYTES));
+    return {
+        entryKey: derive(ENTRY_KEY_INFO),
+        writerKey: derive(WRITER_KEY_INFO),
+    };
+}
+function writerTag(writerKey, nonce) {
+    return createHmac("sha256", writerKey)
+        .update(nonce)
+        .digest()
+        .subarray(0, WRITER_LOG_ID_BYTES - WRITER_NONCE_BYTES);
+}
+/** A fresh random writer nonce, generated once per machine. */
+export function generateWriterNonce() {
+    return Uint8Array.from(randomBytes(WRITER_NONCE_BYTES));
+}
+/** The log id a machine with this writer nonce appends the account's ledger entries under: the nonce followed by a truncated HMAC of it under the account's writer key. */
+export function writerLogId(keys, nonce) {
+    if (nonce.length !== WRITER_NONCE_BYTES) {
+        throw new Error(`a writer nonce is ${String(WRITER_NONCE_BYTES)} bytes, got ${String(nonce.length)}`);
+    }
+    const id = new Uint8Array(WRITER_LOG_ID_BYTES);
+    id.set(nonce, 0);
+    id.set(writerTag(keys.writerKey, nonce), WRITER_NONCE_BYTES);
+    return id;
+}
+/** Whether a log id is one of this account's writer logs. Only a holder of the account key can tell; to anyone else it is indistinguishable from a device-id. */
+export function isWriterLogId(keys, logId) {
+    if (logId.length !== WRITER_LOG_ID_BYTES)
+        return false;
+    const expected = writerTag(keys.writerKey, logId.subarray(0, WRITER_NONCE_BYTES));
+    return timingSafeEqual(expected, logId.subarray(WRITER_NONCE_BYTES));
+}
+function associatedData(logId, seq) {
+    const seqBytes = Buffer.alloc(SEQ_BYTES);
+    seqBytes.writeBigUInt64BE(BigInt(seq));
+    return Buffer.concat([Buffer.from(ASSOCIATED_DATA_LABEL), logId, seqBytes]);
+}
+/** Seals one ledger entry's plaintext for position `seq` of log `logId`: version, IV, tag, then ciphertext. */
+export function sealLedgerEntry(keys, logId, seq, plaintext) {
+    const iv = randomBytes(IV_BYTES);
+    const cipher = createCipheriv("aes-256-gcm", keys.entryKey, iv);
+    cipher.setAAD(associatedData(logId, seq));
+    const ciphertext = Buffer.concat([cipher.update(plaintext), cipher.final()]);
+    return Uint8Array.from(Buffer.concat([
+        Buffer.from([SEALED_ENTRY_VERSION]),
+        iv,
+        cipher.getAuthTag(),
+        ciphertext,
+    ]));
+}
+/** Opens a sealed entry, or returns undefined if it was not sealed by a holder of this account key for exactly this log and position (tampered, moved, truncated, or someone else's). */
+export function openLedgerEntry(keys, logId, seq, sealed) {
+    const headerBytes = VERSION_BYTES + IV_BYTES + TAG_BYTES;
+    if (sealed.length < headerBytes || sealed[0] !== SEALED_ENTRY_VERSION) {
+        return undefined;
+    }
+    const iv = sealed.subarray(VERSION_BYTES, VERSION_BYTES + IV_BYTES);
+    const tag = sealed.subarray(VERSION_BYTES + IV_BYTES, headerBytes);
+    const decipher = createDecipheriv("aes-256-gcm", keys.entryKey, iv);
+    decipher.setAAD(associatedData(logId, seq));
+    decipher.setAuthTag(tag);
+    try {
+        return Uint8Array.from(Buffer.concat([
+            decipher.update(sealed.subarray(headerBytes)),
+            decipher.final(),
+        ]));
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=account-ledger-crypto.js.map

package/dist/core/account-ledger-crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-ledger-crypto.js","sourceRoot":"","sources":["../../src/core/account-ledger-crypto.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,UAAU,EACV,gBAAgB,EAChB,QAAQ,EACR,WAAW,EACX,eAAe,GAChB,MAAM,aAAa,CAAC;AAGrB,mCAAmC;AACnC,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,6GAA6G;AAC7G,MAAM,QAAQ,GAAG,EAAE,CAAC;AACpB,4CAA4C;AAC5C,MAAM,SAAS,GAAG,EAAE,CAAC;AACrB,+FAA+F;AAC/F,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAC/B,MAAM,aAAa,GAAG,CAAC,CAAC;AACxB,sEAAsE;AACtE,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AACtC,2EAA2E;AAC3E,MAAM,CAAC,MAAM,kBAAkB,GAAG,mBAAmB,GAAG,CAAC,CAAC;AAC1D,0FAA0F;AAC1F,MAAM,SAAS,GAAG,CAAC,CAAC;AAEpB,MAAM,cAAc,GAAG,qCAAqC,CAAC;AAC7D,MAAM,eAAe,GAAG,sCAAsC,CAAC;AAC/D,MAAM,qBAAqB,GAAG,+BAA+B,CAAC;AAU9D,uMAAuM;AACvM,MAAM,UAAU,uBAAuB,CACrC,oBAA4B;IAE5B,MAAM,GAAG,GAAG,gBAAgB,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC;QACxD,MAAM,EAAE,KAAK;QACb,IAAI,EAAE,OAAO;KACd,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,CAAC,IAAY,EAAU,EAAE,CACtC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;IACzE,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,cAAc,CAAC;QAChC,SAAS,EAAE,MAAM,CAAC,eAAe,CAAC;KACnC,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,SAAiB,EAAE,KAAiB;IACrD,OAAO,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC;SACnC,MAAM,CAAC,KAAK,CAAC;SACb,MAAM,EAAE;SACR,QAAQ,CAAC,CAAC,EAAE,mBAAmB,GAAG,kBAAkB,CAAC,CAAC;AAC3D,CAAC;AAED,+DAA+D;AAC/D,MAAM,UAAU,mBAAmB;IACjC,OAAO,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,2KAA2K;AAC3K,MAAM,UAAU,WAAW,CACzB,IAAiC,EACjC,KAAiB;IAEjB,IAAI,KAAK,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CACb,qBAAqB,MAAM,CAAC,kBAAkB,CAAC,eAAe,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CACrF,CAAC;IACJ,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,UAAU,CAAC,mBAAmB,CAAC,CAAC;IAC/C,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACjB,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,kBAAkB,CAAC,CAAC;IAC7D,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,iKAAiK;AACjK,MAAM,UAAU,aAAa,CAC3B,IAAiC,EACjC,KAAiB;IAEjB,IAAI,KAAK,CAAC,MAAM,KAAK,mBAAmB;QAAE,OAAO,KAAK,CAAC;IACvD,MAAM,QAAQ,GAAG,SAAS,CACxB,IAAI,CAAC,SAAS,EACd,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,kBAAkB,CAAC,CACtC,CAAC;IACF,OAAO,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,cAAc,CAAC,KAAiB,EAAE,GAAW;IACpD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACzC,QAAQ,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACvC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,+GAA+G;AAC/G,MAAM,UAAU,eAAe,CAC7B,IAAiC,EACjC,KAAiB,EACjB,GAAW,EACX,SAAqB;IAErB,MAAM,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAChE,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC7E,OAAO,UAAU,CAAC,IAAI,CACpB,MAAM,CAAC,MAAM,CAAC;QACZ,MAAM,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,CAAC;QACnC,EAAE;QACF,MAAM,CAAC,UAAU,EAAE;QACnB,UAAU;KACX,CAAC,CACH,CAAC;AACJ,CAAC;AAED,yLAAyL;AACzL,MAAM,UAAU,eAAe,CAC7B,IAAiC,EACjC,KAAiB,EACjB,GAAW,EACX,MAAkB;IAElB,MAAM,WAAW,GAAG,aAAa,GAAG,QAAQ,GAAG,SAAS,CAAC;IACzD,IAAI,MAAM,CAAC,MAAM,GAAG,WAAW,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,oBAAoB,EAAE,CAAC;QACtE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,aAAa,EAAE,aAAa,GAAG,QAAQ,CAAC,CAAC;IACpE,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,aAAa,GAAG,QAAQ,EAAE,WAAW,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACpE,QAAQ,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IAC5C,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,IAAI,CACpB,MAAM,CAAC,MAAM,CAAC;YACZ,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC7C,QAAQ,CAAC,KAAK,EAAE;SACjB,CAAC,CACH,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/core/account-ledger-store.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Opens this machine's copy of the account's replicated grant ledger (account-ledger.ts): a filesystem store beside user-identity.json, shared by every bridge on the machine, and the one-time migration of a pre-ledger user-identity.json's own issued-grant maps into it.
+ */
+import type { Clock } from "wire-mesh-core/ports/clock";
+import { AccountLedger } from "./account-ledger.js";
+import type { PeerIdentity } from "./identity.js";
+import { type UserIdentityOptions } from "./user-identity.js";
+export interface OpenAccountLedgerOptions {
+    /** Where user-identity.json lives; the ledger is kept beside it. */
+    userIdentityOptions: Readonly<UserIdentityOptions>;
+    /** The account's identity as loadOrCreateUserIdentity returned it. */
+    userIdentity: Readonly<PeerIdentity>;
+    clock: Clock;
+}
+/** The directory an account's ledger is stored in on this machine. Named by the account's device-id, so a machine that imports a different account starts that account's ledger afresh instead of mixing two accounts' logs. */
+export declare function accountLedgerDir(userIdentityOptions: Readonly<UserIdentityOptions>, userIdentity: Readonly<PeerIdentity>): string;
+/**
+ * Opens the account ledger for this machine and migrates any grants a pre-ledger build recorded in user-identity.json into it, so an existing user-identity.json needs no manual step: every grant it knew about stays revocable, now from any machine holding the key. The legacy maps are removed only after their grants are in the ledger, so a crash between the two re-migrates them on the next start, which is harmless because the ledger folds a grant recorded twice into one.
+ */
+export declare function openAccountLedger(options: Readonly<OpenAccountLedgerOptions>): Promise<AccountLedger>;
+//# sourceMappingURL=account-ledger-store.d.ts.map

package/dist/core/account-ledger-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-ledger-store.d.ts","sourceRoot":"","sources":["../../src/core/account-ledger-store.ts"],"names":[],"mappings":"AAAA;;GAEG;AAKH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAC;AAExD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElD,OAAO,EAKL,KAAK,mBAAmB,EACzB,MAAM,oBAAoB,CAAC;AAE5B,MAAM,WAAW,wBAAwB;IACvC,oEAAoE;IACpE,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IACnD,sEAAsE;IACtE,YAAY,EAAE,QAAQ,CAAC,YAAY,CAAC,CAAC;IACrC,KAAK,EAAE,KAAK,CAAC;CACd;AAED,gOAAgO;AAChO,wBAAgB,gBAAgB,CAC9B,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB,CAAC,EAClD,YAAY,EAAE,QAAQ,CAAC,YAAY,CAAC,GACnC,MAAM,CAKR;AAED;;GAEG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,QAAQ,CAAC,wBAAwB,CAAC,GAC1C,OAAO,CAAC,aAAa,CAAC,CAqBxB"}

package/dist/core/account-ledger-store.js

@@ -0,0 +1,34 @@
+/**
+ * Opens this machine's copy of the account's replicated grant ledger (account-ledger.ts): a filesystem store beside user-identity.json, shared by every bridge on the machine, and the one-time migration of a pre-ledger user-identity.json's own issued-grant maps into it.
+ */
+import * as path from "node:path";
+import { createNodeFsStorage } from "wire-mesh-core/adapters/node-fs-storage";
+import { deviceIdToHex } from "wire-mesh-core/domain/device-id";
+import { generateWriterNonce } from "./account-ledger-crypto.js";
+import { AccountLedger } from "./account-ledger.js";
+import { createFileLedgerLock } from "./ledger-lock.js";
+import { clearLegacyIssuedGrants, loadOrCreateLedgerWriterNonce, readLegacyIssuedGrants, userIdentityDir, } from "./user-identity.js";
+/** The directory an account's ledger is stored in on this machine. Named by the account's device-id, so a machine that imports a different account starts that account's ledger afresh instead of mixing two accounts' logs. */
+export function accountLedgerDir(userIdentityOptions, userIdentity) {
+    return path.join(userIdentityDir(userIdentityOptions), `account-ledger-${deviceIdToHex(Uint8Array.from(userIdentity.deviceId))}`);
+}
+/**
+ * Opens the account ledger for this machine and migrates any grants a pre-ledger build recorded in user-identity.json into it, so an existing user-identity.json needs no manual step: every grant it knew about stays revocable, now from any machine holding the key. The legacy maps are removed only after their grants are in the ledger, so a crash between the two re-migrates them on the next start, which is harmless because the ledger folds a grant recorded twice into one.
+ */
+export async function openAccountLedger(options) {
+    const dir = accountLedgerDir(options.userIdentityOptions, options.userIdentity);
+    const ledger = new AccountLedger({
+        accountPrivateKey: options.userIdentity.privateKey,
+        writerNonce: loadOrCreateLedgerWriterNonce(options.userIdentityOptions, generateWriterNonce),
+        storage: createNodeFsStorage({ dir }),
+        lock: createFileLedgerLock(`${dir}.lock`),
+        clock: options.clock,
+    });
+    const legacy = readLegacyIssuedGrants(options.userIdentityOptions);
+    if (legacy.length > 0) {
+        await ledger.recordGrants(legacy);
+        clearLegacyIssuedGrants(options.userIdentityOptions, legacy);
+    }
+    return ledger;
+}
+//# sourceMappingURL=account-ledger-store.js.map

package/dist/core/account-ledger-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-ledger-store.js","sourceRoot":"","sources":["../../src/core/account-ledger-store.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAEhE,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EACL,uBAAuB,EACvB,6BAA6B,EAC7B,sBAAsB,EACtB,eAAe,GAEhB,MAAM,oBAAoB,CAAC;AAU5B,gOAAgO;AAChO,MAAM,UAAU,gBAAgB,CAC9B,mBAAkD,EAClD,YAAoC;IAEpC,OAAO,IAAI,CAAC,IAAI,CACd,eAAe,CAAC,mBAAmB,CAAC,EACpC,kBAAkB,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE,CAC1E,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAA2C;IAE3C,MAAM,GAAG,GAAG,gBAAgB,CAC1B,OAAO,CAAC,mBAAmB,EAC3B,OAAO,CAAC,YAAY,CACrB,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC;QAC/B,iBAAiB,EAAE,OAAO,CAAC,YAAY,CAAC,UAAU;QAClD,WAAW,EAAE,6BAA6B,CACxC,OAAO,CAAC,mBAAmB,EAC3B,mBAAmB,CACpB;QACD,OAAO,EAAE,mBAAmB,CAAC,EAAE,GAAG,EAAE,CAAC;QACrC,IAAI,EAAE,oBAAoB,CAAC,GAAG,GAAG,OAAO,CAAC;QACzC,KAAK,EAAE,OAAO,CAAC,KAAK;KACrB,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACnE,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAClC,uBAAuB,CAAC,OAAO,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/core/account-ledger.d.ts

@@ -0,0 +1,80 @@
+/**
+ * The account's issued-grant ledger as a replicated object (agent-comms#344), following wire-mesh's replicated issuer grant ledger pattern (spec/PATTERNS.md). A token-id never appears on the wire except inside the grant it names, so the only record that a grant exists is what its issuer kept; with the ledger in one machine's user-identity.json, only that machine could revoke what it minted. Here every grant the account's user principal mints, and every revocation of one, is an entry in a `core/data` log, and the logs replicate by data-domain fan-out to every machine holding the account key, so any of them sees every admission and can revoke it.
+ *
+ * Each machine appends to a writer log of its own rather than all of them sharing one: a data-domain log is single-writer, and two machines appending to one log while apart would both write the same sequence number and fork it, silently losing one side's grants. A writer log's id is self-authenticating (account-ledger-crypto.ts), so any account holder recognises every writer log it is offered without a roster, and the ledger is the union of all of them.
+ *
+ * Holding a replica grants no authority: an entry is sealed under a key derived from the account key, so a replica held by anyone else is ciphertext they can neither read nor forge, and minting or revoking still needs the account's private key.
+ */
+import { type DataEntriesFrame, type DataHaveFrame, type DataRequestFrame, type DeviceId, type RevocationEntry } from "wire-mesh-core/generated/protocol";
+import type { RevocationView } from "wire-mesh-core/domain/revocation-view";
+import type { Clock } from "wire-mesh-core/ports/clock";
+import type { IdentityPort } from "wire-mesh-core/ports/identity";
+import type { KeyValueStorage } from "wire-mesh-core/ports/storage";
+import type { LedgerLock } from "./ledger-lock.js";
+/** Which of the principal's grant kinds an entry is about: a device's own group:member admission (device-membership.ts), or a dm:send grant (room-lifecycle.ts, dm-send-delegation.ts). Each kind is keyed by the grant's bearer, so the two never share a namespace. */
+export type IssuedGrantKind = "device" | "dm";
+/** One grant the ledger records as issued and not revoked. */
+export interface OutstandingGrant {
+    tokenId: Uint8Array<ArrayBuffer>;
+    /** When it was recorded (epoch ms, the recording machine's clock). */
+    at: number;
+}
+export interface AccountLedgerDeps {
+    /** The account's PEM private key: every ledger key is derived from it. */
+    accountPrivateKey: string;
+    /** This machine's writer nonce, persisted once per machine (user-identity.ts). */
+    writerNonce: Uint8Array;
+    /** Holds every account writer log this machine has, its own included. Shared by every bridge on the machine. */
+    storage: KeyValueStorage;
+    /** Serialises every read and write of `storage` across every bridge sharing it: appends to this machine's writer log, replicated entries stored for another machine's, and every read of either. The store's writes are not atomic (a file is truncated, then written), so a read racing another bridge's write could see an empty head and treat a log as empty. */
+    lock: LedgerLock;
+    clock: Clock;
+}
+/** Answers and stores the data-domain frames for the account's writer logs; what a transport needs of the ledger to replicate it. */
+export interface AccountLedgerReplica {
+    /** Whether `peer` names one of this account's writer logs. */
+    ownsLog: (peer: DeviceId) => boolean;
+    /** Answers a have or request for an account log, or stores entries for one after checking every entry was sealed for exactly that log and position. Returns the frame to send back, or null for none. */
+    handleDataFrame: (frame: Readonly<DataHaveFrame | DataRequestFrame | DataEntriesFrame>) => Promise<DataHaveFrame | DataRequestFrame | DataEntriesFrame | null>;
+    /** A data-have for every account log this machine holds, to offer peers. */
+    announcements: () => Promise<DataHaveFrame[]>;
+}
+export declare class AccountLedger implements AccountLedgerReplica {
+    private readonly deps;
+    /** This machine's own writer log. */
+    readonly writerLog: DeviceId;
+    private readonly keys;
+    private readonly revocationListeners;
+    constructor(deps: Readonly<AccountLedgerDeps>);
+    /** Records that the principal minted `tokenId` for `subjectHex`. */
+    recordGrant(kind: IssuedGrantKind, subjectHex: string, tokenId: Uint8Array<ArrayBuffer>): Promise<void>;
+    /** Records grants migrated from a pre-ledger user-identity.json in one append, so a restart part-way through leaves nothing half-recorded worth caring about: a grant recorded twice folds to one. */
+    recordGrants(grants: readonly Readonly<{
+        kind: IssuedGrantKind;
+        subject: string;
+        tokenId: Uint8Array<ArrayBuffer>;
+    }>[]): Promise<void>;
+    /** Records the revocation of `tokenId`, carrying the signed revocation entry itself so every replica can feed it into its own RevocationView. */
+    recordRevocation(kind: IssuedGrantKind, subjectHex: string, tokenId: Uint8Array<ArrayBuffer>, revocation: RevocationEntry): Promise<void>;
+    /** Every grant of `kind` for `subjectHex` that some machine of the account recorded and none has revoked, oldest first. */
+    outstandingGrants(kind: IssuedGrantKind, subjectHex: string): Promise<OutstandingGrant[]>;
+    /** Every revocation entry the ledger holds, from every machine, for a RevocationView to learn at start-up. */
+    revocations(): Promise<RevocationEntry[]>;
+    ownsLog(peer: DeviceId): boolean;
+    /** Calls `listener` with each revocation entry another machine's replicated log brings in, so a RevocationView learns it even if the gossiped revocation-announce never reached this node. Returns the unsubscribe. */
+    onReplicatedRevocation(listener: (entry: RevocationEntry) => void): () => void;
+    announcements(): Promise<DataHaveFrame[]>;
+    handleDataFrame(frame: Readonly<DataHaveFrame | DataRequestFrame | DataEntriesFrame>): Promise<DataHaveFrame | DataRequestFrame | DataEntriesFrame | null>;
+    private append;
+    /** Every account writer log in storage, this machine's own included once it has written anything. Called only under the lock. */
+    private heldLogs;
+    /** Every record in every held writer log. Throws on an entry that does not open: handleDataFrame and append never store one, so it means the storage was damaged outside the ledger, and carrying on would hide grants that can then never be revoked. */
+    private records;
+}
+/** Feeds every revocation the account ledger holds, and each one another machine's log brings in later, into a store's RevocationView, so a grant any machine of the account revoked is refused there even if the gossiped revocation-announce never reached it. A revocation that fails to verify, or a ledger that cannot be read, is reported rather than recorded. Returns the unsubscribe, for a store that replaces its ledger on joining another account. */
+export declare function followLedgerRevocations(identity: Readonly<{
+    accountLedger: AccountLedger;
+    revocation: RevocationView;
+    identity: IdentityPort;
+}>, onError: (error: Error) => void): () => void;
+//# sourceMappingURL=account-ledger.d.ts.map

package/dist/core/account-ledger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-ledger.d.ts","sourceRoot":"","sources":["../../src/core/account-ledger.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAmBH,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,QAAQ,EACb,KAAK,eAAe,EACrB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uCAAuC,CAAC;AAC5E,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,4BAA4B,CAAC;AACxD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAUpE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,yQAAyQ;AACzQ,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,IAAI,CAAC;AAqC9C,8DAA8D;AAC9D,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;IACjC,sEAAsE;IACtE,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,MAAM,WAAW,iBAAiB;IAChC,0EAA0E;IAC1E,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kFAAkF;IAClF,WAAW,EAAE,UAAU,CAAC;IACxB,gHAAgH;IAChH,OAAO,EAAE,eAAe,CAAC;IACzB,qWAAqW;IACrW,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,EAAE,KAAK,CAAC;CACd;AAED,qIAAqI;AACrI,MAAM,WAAW,oBAAoB;IACnC,8DAA8D;IAC9D,OAAO,EAAE,CAAC,IAAI,EAAE,QAAQ,KAAK,OAAO,CAAC;IACrC,yMAAyM;IACzM,eAAe,EAAE,CACf,KAAK,EAAE,QAAQ,CAAC,aAAa,GAAG,gBAAgB,GAAG,gBAAgB,CAAC,KACjE,OAAO,CAAC,aAAa,GAAG,gBAAgB,GAAG,gBAAgB,GAAG,IAAI,CAAC,CAAC;IACzE,4EAA4E;IAC5E,aAAa,EAAE,MAAM,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;CAC/C;AAMD,qBAAa,aAAc,YAAW,oBAAoB;IAQ5C,OAAO,CAAC,QAAQ,CAAC,IAAI;IAPjC,qCAAqC;IACrC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC;IAC7B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAoB;IACzC,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAEhC;gBAEyB,IAAI,EAAE,QAAQ,CAAC,iBAAiB,CAAC;IAK9D,oEAAoE;IAC9D,WAAW,CACf,IAAI,EAAE,eAAe,EACrB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,UAAU,CAAC,WAAW,CAAC,GAC/B,OAAO,CAAC,IAAI,CAAC;IAahB,sMAAsM;IAChM,YAAY,CAChB,MAAM,EAAE,SAAS,QAAQ,CAAC;QACxB,IAAI,EAAE,eAAe,CAAC;QACtB,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;KAClC,CAAC,EAAE,GACH,OAAO,CAAC,IAAI,CAAC;IAchB,iJAAiJ;IAC3I,gBAAgB,CACpB,IAAI,EAAE,eAAe,EACrB,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,UAAU,CAAC,WAAW,CAAC,EAChC,UAAU,EAAE,eAAe,GAC1B,OAAO,CAAC,IAAI,CAAC;IAchB,2HAA2H;IACrH,iBAAiB,CACrB,IAAI,EAAE,eAAe,EACrB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAqB9B,8GAA8G;IACxG,WAAW,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;IAM/C,OAAO,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO;IAIhC,uNAAuN;IACvN,sBAAsB,CACpB,QAAQ,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,GACzC,MAAM,IAAI;IAOP,aAAa,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;IAczC,eAAe,CACnB,KAAK,EAAE,QAAQ,CAAC,aAAa,GAAG,gBAAgB,GAAG,gBAAgB,CAAC,GACnE,OAAO,CAAC,aAAa,GAAG,gBAAgB,GAAG,gBAAgB,GAAG,IAAI,CAAC;YA+BxD,MAAM;IAoBpB,iIAAiI;YACnH,QAAQ;IAWtB,0PAA0P;YAC5O,OAAO;CAyBtB;AAUD,ocAAoc;AACpc,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,QAAQ,CAAC;IACjB,aAAa,EAAE,aAAa,CAAC;IAC7B,UAAU,EAAE,cAAc,CAAC;IAC3B,QAAQ,EAAE,YAAY,CAAC;CACxB,CAAC,EACF,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,GAC9B,MAAM,IAAI,CAsBZ"}

package/dist/core/account-ledger.js

@@ -0,0 +1,247 @@
+/**
+ * The account's issued-grant ledger as a replicated object (agent-comms#344), following wire-mesh's replicated issuer grant ledger pattern (spec/PATTERNS.md). A token-id never appears on the wire except inside the grant it names, so the only record that a grant exists is what its issuer kept; with the ledger in one machine's user-identity.json, only that machine could revoke what it minted. Here every grant the account's user principal mints, and every revocation of one, is an entry in a `core/data` log, and the logs replicate by data-domain fan-out to every machine holding the account key, so any of them sees every admission and can revoke it.
+ *
+ * Each machine appends to a writer log of its own rather than all of them sharing one: a data-domain log is single-writer, and two machines appending to one log while apart would both write the same sequence number and fork it, silently losing one side's grants. A writer log's id is self-authenticating (account-ledger-crypto.ts), so any account holder recognises every writer log it is offered without a roster, and the ledger is the union of all of them.
+ *
+ * Holding a replica grants no authority: an entry is sealed under a key derived from the account key, so a replica held by anyone else is ciphertext they can neither read nor forge, and minting or revoking still needs the account's private key.
+ */
+import { decode as cborDecode, encode as cborEncode, cdeEncodeOptions, } from "cbor2";
+import { z } from "zod";
+import { handleDataEntries, handleDataHave, handleDataRequest, headSeqFor, readEntries, } from "wire-mesh-core/domain/data-sync";
+import { deviceIdFromHex, deviceIdToHex, } from "wire-mesh-core/domain/device-id";
+import { revocationEntrySchema, } from "wire-mesh-core/generated/protocol";
+import { deriveAccountLedgerKeys, isWriterLogId, openLedgerEntry, sealLedgerEntry, writerLogId, } from "./account-ledger-crypto.js";
+import { DATA_ENTRIES_RESPONSE_LIMIT } from "./data-frame-routing.js";
+const LEDGER_RECORD_VERSION = 1;
+const bytesSchema = z.instanceof(Uint8Array);
+const kindSchema = z.enum(["device", "dm"]);
+const grantRecordSchema = z
+    .object({
+    v: z.literal(LEDGER_RECORD_VERSION),
+    op: z.literal("grant"),
+    kind: kindSchema,
+    subject: z.string(),
+    tokenId: bytesSchema,
+    at: z.number(),
+})
+    .strict();
+const revokeRecordSchema = z
+    .object({
+    v: z.literal(LEDGER_RECORD_VERSION),
+    op: z.literal("revoke"),
+    kind: kindSchema,
+    subject: z.string(),
+    tokenId: bytesSchema,
+    at: z.number(),
+    revocation: revocationEntrySchema,
+})
+    .strict();
+const ledgerRecordSchema = z.discriminatedUnion("op", [
+    grantRecordSchema,
+    revokeRecordSchema,
+]);
+const versionProbeSchema = z.object({ v: z.number() });
+const HEAD_KEY_PATTERN = /^data\/([0-9a-f]+)\/head$/;
+export class AccountLedger {
+    deps;
+    /** This machine's own writer log. */
+    writerLog;
+    keys;
+    revocationListeners = new Set();
+    constructor(deps) {
+        this.deps = deps;
+        this.keys = deriveAccountLedgerKeys(deps.accountPrivateKey);
+        this.writerLog = writerLogId(this.keys, deps.writerNonce);
+    }
+    /** Records that the principal minted `tokenId` for `subjectHex`. */
+    async recordGrant(kind, subjectHex, tokenId) {
+        await this.append([
+            {
+                v: LEDGER_RECORD_VERSION,
+                op: "grant",
+                kind,
+                subject: subjectHex,
+                tokenId,
+                at: this.deps.clock.now(),
+            },
+        ]);
+    }
+    /** Records grants migrated from a pre-ledger user-identity.json in one append, so a restart part-way through leaves nothing half-recorded worth caring about: a grant recorded twice folds to one. */
+    async recordGrants(grants) {
+        const at = this.deps.clock.now();
+        await this.append(grants.map((grant) => ({
+            v: LEDGER_RECORD_VERSION,
+            op: "grant",
+            kind: grant.kind,
+            subject: grant.subject,
+            tokenId: grant.tokenId,
+            at,
+        })));
+    }
+    /** Records the revocation of `tokenId`, carrying the signed revocation entry itself so every replica can feed it into its own RevocationView. */
+    async recordRevocation(kind, subjectHex, tokenId, revocation) {
+        await this.append([
+            {
+                v: LEDGER_RECORD_VERSION,
+                op: "revoke",
+                kind,
+                subject: subjectHex,
+                tokenId,
+                at: this.deps.clock.now(),
+                revocation,
+            },
+        ]);
+    }
+    /** Every grant of `kind` for `subjectHex` that some machine of the account recorded and none has revoked, oldest first. */
+    async outstandingGrants(kind, subjectHex) {
+        const granted = new Map();
+        const revoked = new Set();
+        for (const record of await this.records()) {
+            if (record.kind !== kind || record.subject !== subjectHex)
+                continue;
+            const key = Buffer.from(record.tokenId).toString("hex");
+            if (record.op === "revoke") {
+                revoked.add(key);
+            }
+            else if (!granted.has(key)) {
+                granted.set(key, {
+                    tokenId: Uint8Array.from(record.tokenId),
+                    at: record.at,
+                });
+            }
+        }
+        return [...granted]
+            .filter(([key]) => !revoked.has(key))
+            .map(([, grant]) => grant)
+            .sort((a, b) => a.at - b.at);
+    }
+    /** Every revocation entry the ledger holds, from every machine, for a RevocationView to learn at start-up. */
+    async revocations() {
+        return (await this.records()).flatMap((record) => record.op === "revoke" ? [record.revocation] : []);
+    }
+    ownsLog(peer) {
+        return isWriterLogId(this.keys, peer);
+    }
+    /** Calls `listener` with each revocation entry another machine's replicated log brings in, so a RevocationView learns it even if the gossiped revocation-announce never reached this node. Returns the unsubscribe. */
+    onReplicatedRevocation(listener) {
+        this.revocationListeners.add(listener);
+        return () => {
+            this.revocationListeners.delete(listener);
+        };
+    }
+    async announcements() {
+        return this.deps.lock.run(async () => {
+            const frames = [];
+            for (const log of await this.heldLogs()) {
+                frames.push({
+                    type: "data-have",
+                    peer: log,
+                    "head-seq": await headSeqFor(this.deps.storage, log),
+                });
+            }
+            return frames;
+        });
+    }
+    async handleDataFrame(frame) {
+        const { storage, lock } = this.deps;
+        if (frame.type === "data-have") {
+            return lock.run(async () => handleDataHave(storage, frame));
+        }
+        if (frame.type === "data-request") {
+            return lock.run(async () => handleDataRequest(storage, frame, DATA_ENTRIES_RESPONSE_LIMIT));
+        }
+        // Every entry must open for exactly its log and position before any is stored: a forged or moved entry would otherwise take a sequence number the real one can then never fill.
+        const firstSeq = frame["from-seq"] + 1;
+        const opened = frame.entries.map((entry, index) => openLedgerEntry(this.keys, frame.peer, firstSeq + index, entry));
+        const plaintexts = opened.filter((plaintext) => plaintext !== undefined);
+        if (plaintexts.length !== opened.length)
+            return null;
+        const stored = await lock.run(async () => handleDataEntries(storage, frame));
+        if (!stored.ok)
+            return null;
+        for (const plaintext of plaintexts) {
+            const record = decodeRecord(plaintext);
+            if (record?.op !== "revoke")
+                continue;
+            for (const listener of this.revocationListeners) {
+                listener(record.revocation);
+            }
+        }
+        return null;
+    }
+    async append(records) {
+        await this.deps.lock.run(async () => {
+            const head = await headSeqFor(this.deps.storage, this.writerLog);
+            const entries = records.map((record, index) => sealLedgerEntry(this.keys, this.writerLog, head + 1 + index, Uint8Array.from(cborEncode(record, cdeEncodeOptions))));
+            await handleDataEntries(this.deps.storage, {
+                type: "data-entries",
+                peer: this.writerLog,
+                "from-seq": head,
+                entries,
+            });
+        });
+    }
+    /** Every account writer log in storage, this machine's own included once it has written anything. Called only under the lock. */
+    async heldLogs() {
+        const logs = [];
+        for (const key of await this.deps.storage.keys("data/")) {
+            const match = HEAD_KEY_PATTERN.exec(key);
+            if (match?.[1] === undefined)
+                continue;
+            const log = deviceIdFromHex(match[1]);
+            if (this.ownsLog(log))
+                logs.push(log);
+        }
+        return logs;
+    }
+    /** Every record in every held writer log. Throws on an entry that does not open: handleDataFrame and append never store one, so it means the storage was damaged outside the ledger, and carrying on would hide grants that can then never be revoked. */
+    async records() {
+        const held = await this.deps.lock.run(async () => Promise.all((await this.heldLogs()).map(async (log) => ({
+            log,
+            entries: await readEntries(this.deps.storage, log, 0),
+        }))));
+        const records = [];
+        for (const { log, entries } of held) {
+            entries.forEach((sealed, index) => {
+                const seq = index + 1;
+                const plaintext = openLedgerEntry(this.keys, log, seq, sealed);
+                if (plaintext === undefined) {
+                    throw new Error(`account ledger entry ${String(seq)} of writer log ${deviceIdToHex(log)} does not open under this account's key`);
+                }
+                const record = decodeRecord(plaintext);
+                if (record !== undefined)
+                    records.push(record);
+            });
+        }
+        return records;
+    }
+}
+/** The record a sealed entry's plaintext holds, or undefined for a record of a later format version than this build knows, written by a newer build on another machine. A record claiming this build's version that does not match its schema throws: it can only be damage. */
+function decodeRecord(plaintext) {
+    const decoded = cborDecode(plaintext);
+    const probe = versionProbeSchema.parse(decoded);
+    if (probe.v !== LEDGER_RECORD_VERSION)
+        return undefined;
+    return ledgerRecordSchema.parse(decoded);
+}
+/** Feeds every revocation the account ledger holds, and each one another machine's log brings in later, into a store's RevocationView, so a grant any machine of the account revoked is refused there even if the gossiped revocation-announce never reached it. A revocation that fails to verify, or a ledger that cannot be read, is reported rather than recorded. Returns the unsubscribe, for a store that replaces its ledger on joining another account. */
+export function followLedgerRevocations(identity, onError) {
+    const report = (error) => {
+        onError(error instanceof Error ? error : new Error(String(error)));
+    };
+    const learn = (entry) => {
+        identity.revocation
+            .record(entry, { identity: identity.identity })
+            .then((verdict) => {
+            if (!verdict.ok) {
+                report(new Error(`account ledger revocation did not verify: ${verdict.reason}`));
+            }
+        }, report);
+    };
+    const unsubscribe = identity.accountLedger.onReplicatedRevocation(learn);
+    identity.accountLedger.revocations().then((entries) => {
+        entries.forEach(learn);
+    }, report);
+    return unsubscribe;
+}
+//# sourceMappingURL=account-ledger.js.map

package/dist/core/account-ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-ledger.js","sourceRoot":"","sources":["../../src/core/account-ledger.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,MAAM,IAAI,UAAU,EACpB,MAAM,IAAI,UAAU,EACpB,gBAAgB,GACjB,MAAM,OAAO,CAAC;AACf,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,iBAAiB,EACjB,UAAU,EACV,WAAW,GACZ,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,eAAe,EACf,aAAa,GACd,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACL,qBAAqB,GAMtB,MAAM,mCAAmC,CAAC;AAK3C,OAAO,EACL,uBAAuB,EACvB,aAAa,EACb,eAAe,EACf,eAAe,EACf,WAAW,GAEZ,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAMtE,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEhC,MAAM,WAAW,GAAG,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;AAC7C,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;AAE5C,MAAM,iBAAiB,GAAG,CAAC;KACxB,MAAM,CAAC;IACN,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;IACnC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACtB,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,OAAO,EAAE,WAAW;IACpB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;CACf,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,kBAAkB,GAAG,CAAC;KACzB,MAAM,CAAC;IACN,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;IACnC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACvB,IAAI,EAAE,UAAU;IAChB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,OAAO,EAAE,WAAW;IACpB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE;IACd,UAAU,EAAE,qBAAqB;CAClC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,kBAAkB,GAAG,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE;IACpD,iBAAiB;IACjB,kBAAkB;CACnB,CAAC,CAAC;AAmCH,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAEvD,MAAM,gBAAgB,GAAG,2BAA2B,CAAC;AAErD,MAAM,OAAO,aAAa;IAQK;IAP7B,qCAAqC;IAC5B,SAAS,CAAW;IACZ,IAAI,CAAoB;IACxB,mBAAmB,GAAG,IAAI,GAAG,EAE3C,CAAC;IAEJ,YAA6B,IAAiC;QAAjC,SAAI,GAAJ,IAAI,CAA6B;QAC5D,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC5D,IAAI,CAAC,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IAC5D,CAAC;IAED,oEAAoE;IACpE,KAAK,CAAC,WAAW,CACf,IAAqB,EACrB,UAAkB,EAClB,OAAgC;QAEhC,MAAM,IAAI,CAAC,MAAM,CAAC;YAChB;gBACE,CAAC,EAAE,qBAAqB;gBACxB,EAAE,EAAE,OAAO;gBACX,IAAI;gBACJ,OAAO,EAAE,UAAU;gBACnB,OAAO;gBACP,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;aAC1B;SACF,CAAC,CAAC;IACL,CAAC;IAED,sMAAsM;IACtM,KAAK,CAAC,YAAY,CAChB,MAII;QAEJ,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QACjC,MAAM,IAAI,CAAC,MAAM,CACf,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACrB,CAAC,EAAE,qBAAqB;YACxB,EAAE,EAAE,OAAO;YACX,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,EAAE;SACH,CAAC,CAAC,CACJ,CAAC;IACJ,CAAC;IAED,iJAAiJ;IACjJ,KAAK,CAAC,gBAAgB,CACpB,IAAqB,EACrB,UAAkB,EAClB,OAAgC,EAChC,UAA2B;QAE3B,MAAM,IAAI,CAAC,MAAM,CAAC;YAChB;gBACE,CAAC,EAAE,qBAAqB;gBACxB,EAAE,EAAE,QAAQ;gBACZ,IAAI;gBACJ,OAAO,EAAE,UAAU;gBACnB,OAAO;gBACP,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;gBACzB,UAAU;aACX;SACF,CAAC,CAAC;IACL,CAAC;IAED,2HAA2H;IAC3H,KAAK,CAAC,iBAAiB,CACrB,IAAqB,EACrB,UAAkB;QAElB,MAAM,OAAO,GAAG,IAAI,GAAG,EAA4B,CAAC;QACpD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,KAAK,MAAM,MAAM,IAAI,MAAM,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;YAC1C,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,UAAU;gBAAE,SAAS;YACpE,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,MAAM,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;gBAC3B,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACnB,CAAC;iBAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC7B,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE;oBACf,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;oBACxC,EAAE,EAAE,MAAM,CAAC,EAAE;iBACd,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,OAAO,CAAC,GAAG,OAAO,CAAC;aAChB,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;aACpC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC;aACzB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;IACjC,CAAC;IAED,8GAA8G;IAC9G,KAAK,CAAC,WAAW;QACf,OAAO,CAAC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,EAAE,CAC/C,MAAM,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAClD,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,IAAc;QACpB,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxC,CAAC;IAED,uNAAuN;IACvN,sBAAsB,CACpB,QAA0C;QAE1C,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACvC,OAAO,GAAG,EAAE;YACV,IAAI,CAAC,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5C,CAAC,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;YACnC,MAAM,MAAM,GAAoB,EAAE,CAAC;YACnC,KAAK,MAAM,GAAG,IAAI,MAAM,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;gBACxC,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,WAAW;oBACjB,IAAI,EAAE,GAAG;oBACT,UAAU,EAAE,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC;iBACrD,CAAC,CAAC;YACL,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,KAAoE;QAEpE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;QACpC,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC/B,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CACzB,iBAAiB,CAAC,OAAO,EAAE,KAAK,EAAE,2BAA2B,CAAC,CAC/D,CAAC;QACJ,CAAC;QACD,gLAAgL;QAChL,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAChD,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,QAAQ,GAAG,KAAK,EAAE,KAAK,CAAC,CAChE,CAAC;QACF,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;QACzE,IAAI,UAAU,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACrD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CACvC,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,CAClC,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC5B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;YACvC,IAAI,MAAM,EAAE,EAAE,KAAK,QAAQ;gBAAE,SAAS;YACtC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAChD,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,OAAgC;QACnD,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;YAClC,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACjE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAC5C,eAAe,CACb,IAAI,CAAC,IAAI,EACT,IAAI,CAAC,SAAS,EACd,IAAI,GAAG,CAAC,GAAG,KAAK,EAChB,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC,CACtD,CACF,CAAC;YACF,MAAM,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE;gBACzC,IAAI,EAAE,cAAc;gBACpB,IAAI,EAAE,IAAI,CAAC,SAAS;gBACpB,UAAU,EAAE,IAAI;gBAChB,OAAO;aACR,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,iIAAiI;IACzH,KAAK,CAAC,QAAQ;QACpB,MAAM,IAAI,GAAe,EAAE,CAAC;QAC5B,KAAK,MAAM,GAAG,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACxD,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS;gBAAE,SAAS;YACvC,MAAM,GAAG,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACtC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;gBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,0PAA0P;IAClP,KAAK,CAAC,OAAO;QACnB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAC/C,OAAO,CAAC,GAAG,CACT,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YAC1C,GAAG;YACH,OAAO,EAAE,MAAM,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;SACtD,CAAC,CAAC,CACJ,CACF,CAAC;QACF,MAAM,OAAO,GAAmB,EAAE,CAAC;QACnC,KAAK,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC;YACpC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;gBAChC,MAAM,GAAG,GAAG,KAAK,GAAG,CAAC,CAAC;gBACtB,MAAM,SAAS,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;gBAC/D,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;oBAC5B,MAAM,IAAI,KAAK,CACb,wBAAwB,MAAM,CAAC,GAAG,CAAC,kBAAkB,aAAa,CAAC,GAAG,CAAC,yCAAyC,CACjH,CAAC;gBACJ,CAAC;gBACD,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;gBACvC,IAAI,MAAM,KAAK,SAAS;oBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACjD,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAED,gRAAgR;AAChR,SAAS,YAAY,CAAC,SAAqB;IACzC,MAAM,OAAO,GAAY,UAAU,CAAC,SAAS,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,CAAC,KAAK,qBAAqB;QAAE,OAAO,SAAS,CAAC;IACxD,OAAO,kBAAkB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAC3C,CAAC;AAED,ocAAoc;AACpc,MAAM,UAAU,uBAAuB,CACrC,QAIE,EACF,OAA+B;IAE/B,MAAM,MAAM,GAAG,CAAC,KAAc,EAAQ,EAAE;QACtC,OAAO,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,KAAsB,EAAQ,EAAE;QAC7C,QAAQ,CAAC,UAAU;aAChB,MAAM,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC;aAC9C,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;YAChB,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;gBAChB,MAAM,CACJ,IAAI,KAAK,CACP,6CAA6C,OAAO,CAAC,MAAM,EAAE,CAC9D,CACF,CAAC;YACJ,CAAC;QACH,CAAC,EAAE,MAAM,CAAC,CAAC;IACf,CAAC,CAAC;IACF,MAAM,WAAW,GAAG,QAAQ,CAAC,aAAa,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;IACzE,QAAQ,CAAC,aAAa,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;QACpD,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC,EAAE,MAAM,CAAC,CAAC;IACX,OAAO,WAAW,CAAC;AACrB,CAAC"}

package/dist/core/bridge-mesh.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bridge-mesh.d.ts","sourceRoot":"","sources":["../../src/core/bridge-mesh.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAG5C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGtC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAMlD,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,SAAS,CAAC;IACjB,IAAI,EAAE,SAAS,CAAC;CACjB;AAED,MAAM,WAAW,cAAe,SAAQ,UAAU;IAChD,iSAAiS;IACjS,cAAc,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACrC;AAED,4gBAA4gB;AAC5gB,MAAM,WAAW,iBAAiB;IAChC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,kBAAkB,CAAC,EAAE,CAAC,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,GAAG,SAAS,CAAC;IACrE,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAED,sSAAsS;AACtS,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,QAAQ,CAAC,YAAY,CAAC,EAC5B,OAAO,CAAC,EAAE,iBAAiB,GAC1B,cAAc,CAMhB;AAED;;GAEG;AACH,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE,YAAY,EACtB,IAAI,EAAE,QAAQ,CAAC,YAAY,CAAC,EAC5B,OAAO,CAAC,EAAE,iBAAiB,GAC1B,cAAc,CA8DhB;AAED,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,QAAQ,CAAC,YAAY,CAAC,EAC5B,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,UAAU,CAAC,CAIrB;AAED,6JAA6J;AAC7J,wBAAsB,4BAA4B,CAChD,QAAQ,EAAE,YAAY,EACtB,IAAI,EAAE,QAAQ,CAAC,YAAY,CAAC,EAC5B,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,UAAU,CAAC,CAQrB"}
+{"version":3,"file":"bridge-mesh.d.ts","sourceRoot":"","sources":["../../src/core/bridge-mesh.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAG5C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAItC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAExD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAMlD,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,SAAS,CAAC;IACjB,IAAI,EAAE,SAAS,CAAC;CACjB;AAED,MAAM,WAAW,cAAe,SAAQ,UAAU;IAChD,iSAAiS;IACjS,cAAc,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;CACrC;AAED,4gBAA4gB;AAC5gB,MAAM,WAAW,iBAAiB;IAChC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,kBAAkB,CAAC,EAAE,CAAC,MAAM,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,GAAG,SAAS,CAAC;IACrE,gBAAgB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACvC;AAED,sSAAsS;AACtS,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,QAAQ,CAAC,YAAY,CAAC,EAC5B,OAAO,CAAC,EAAE,iBAAiB,GAC1B,cAAc,CAMhB;AAED;;GAEG;AACH,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE,YAAY,EACtB,IAAI,EAAE,QAAQ,CAAC,YAAY,CAAC,EAC5B,OAAO,CAAC,EAAE,iBAAiB,GAC1B,cAAc,CAwEhB;AAED,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,QAAQ,CAAC,YAAY,CAAC,EAC5B,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,UAAU,CAAC,CAIrB;AAED,6JAA6J;AAC7J,wBAAsB,4BAA4B,CAChD,QAAQ,EAAE,YAAY,EACtB,IAAI,EAAE,QAAQ,CAAC,YAAY,CAAC,EAC5B,OAAO,CAAC,EAAE,iBAAiB,GAC1B,OAAO,CAAC,UAAU,CAAC,CAQrB"}

package/dist/core/bridge-mesh.js

@@ -23,6 +23,7 @@ import { FIRST_CONTACT_PORT } from "./first-contact.js";
 import { CommsTool } from "./tool.js";
 import { WireMeshTransport } from "./wire-mesh-transport.js";
 import { loadOrCreateIdentity, oplogDirFor } from "./identity-store.js";
+import { openAccountLedger } from "./account-ledger-store.js";
 import { toIdentityPort } from "./wire-mesh-identity.js";
 import { VersionDriftChecker } from "./version-check.js";
 import { getOwnPackageVersion } from "./package-version.js";
@@ -60,6 +61,10 @@ export function createBridgeMeshSyncFromIdentity(identity, slot, options) {
         getHostedRooms: () => store.hostedRooms,
         dataStorage,
         getSelfAgentAdvert: () => store.selfAgentAdvert,
+        accountReplication: {
+            getLedger: () => store.accountLedger,
+            isAccountMember: async (claim) => store.membership.isAccountMember(claim),
+        },
         gatewayTrust: store.gatewayTrust,
     });
     transport.getCcPeerVersion = () => store.getCcPeerVersion?.();
@@ -79,13 +84,19 @@ export function createBridgeMeshSyncFromIdentity(identity, slot, options) {
         store,
         tool,
         attachIdentity: async () => {
+            const clock = createSystemClock();
             store.setIdentity({
                 identity: await toIdentityPort(identity),
-                clock: createSystemClock(),
+                clock,
                 slot,
                 revocation,
                 dataStorage,
                 userIdentity: await toIdentityPort(userIdentity),
+                accountLedger: await openAccountLedger({
+                    userIdentityOptions,
+                    userIdentity,
+                    clock,
+                }),
                 userIdentityOptions,
                 machineIdentity: await toIdentityPort(machineIdentity),
                 machineIdentityOptions,

package/dist/core/bridge-mesh.js.map

@@ -1 +1 @@
-{"version":3,"file":"bridge-mesh.js","sourceRoot":"","sources":["../../src/core/bridge-mesh.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAC9E,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAExE,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAEzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AAoBpE,sSAAsS;AACtS,MAAM,UAAU,oBAAoB,CAClC,IAA4B,EAC5B,OAA2B;IAE3B,OAAO,gCAAgC,CACrC,oBAAoB,CAAC,IAAI,CAAC,EAC1B,IAAI,EACJ,OAAO,CACR,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gCAAgC,CAC9C,QAAsB,EACtB,IAA4B,EAC5B,OAA2B;IAE3B,MAAM,EACJ,eAAe,EACf,MAAM,GAAG,eAAe,EACxB,kBAAkB,EAClB,gBAAgB,GAAG,kBAAkB,GACtC,GAAG,OAAO,IAAI,EAAE,CAAC;IAClB,+RAA+R;IAC/R,MAAM,mBAAmB,GAAG,EAAE,CAAC;IAC/B,MAAM,YAAY,GAAG,wBAAwB,CAAC,mBAAmB,CAAC,CAAC;IACnE,+IAA+I;IAC/I,MAAM,sBAAsB,GAAG,EAAE,CAAC;IAClC,MAAM,eAAe,GAAG,2BAA2B,CAAC,sBAAsB,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC;QAC1B,eAAe;QACf,MAAM;QACN,IAAI;QACJ,gBAAgB;KACjB,CAAC,CAAC;IACH,KAAK,CAAC,MAAM,GAAG,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjE,wRAAwR;IACxR,MAAM,WAAW,GAAG,mBAAmB,CAAC,EAAE,GAAG,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,IAAI,iBAAiB,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE;QAC9D,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;QAC1D,gBAAgB,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC;QACjE,kBAAkB,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,UAAU;QAC1C,cAAc,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,WAAW;QACvC,WAAW;QACX,kBAAkB,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,eAAe;QAC/C,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;IACH,SAAS,CAAC,gBAAgB,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,CAAC;IAC9D,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IAC9B,MAAM,cAAc,GAAG,IAAI,mBAAmB,CAAC;QAC7C,cAAc,EAAE,oBAAoB,EAAE;QACtC,GAAG,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpE,CAAC,CAAC;IACH,cAAc,CAAC,KAAK,EAAE,CAAC;IACvB,MAAM,IAAI,GAAG,IAAI,SAAS,CAAC,KAAK,EAAE;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,oBAAoB,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,oBAAoB,EAAE;KAClE,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,oBAAoB,EAAE,CAAC;IAC1C,OAAO;QACL,KAAK;QACL,IAAI;QACJ,cAAc,EAAE,KAAK,IAAI,EAAE;YACzB,KAAK,CAAC,WAAW,CAAC;gBAChB,QAAQ,EAAE,MAAM,cAAc,CAAC,QAAQ,CAAC;gBACxC,KAAK,EAAE,iBAAiB,EAAE;gBAC1B,IAAI;gBACJ,UAAU;gBACV,WAAW;gBACX,YAAY,EAAE,MAAM,cAAc,CAAC,YAAY,CAAC;gBAChD,mBAAmB;gBACnB,eAAe,EAAE,MAAM,cAAc,CAAC,eAAe,CAAC;gBACtD,sBAAsB;aACvB,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAA4B,EAC5B,OAA2B;IAE3B,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC5E,MAAM,cAAc,EAAE,CAAC;IACvB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,6JAA6J;AAC7J,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,QAAsB,EACtB,IAA4B,EAC5B,OAA2B;IAE3B,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,gCAAgC,CACtE,QAAQ,EACR,IAAI,EACJ,OAAO,CACR,CAAC;IACF,MAAM,cAAc,EAAE,CAAC;IACvB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC"}
+{"version":3,"file":"bridge-mesh.js","sourceRoot":"","sources":["../../src/core/bridge-mesh.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAC9E,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAE9D,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAEzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,2BAA2B,EAAE,MAAM,uBAAuB,CAAC;AAoBpE,sSAAsS;AACtS,MAAM,UAAU,oBAAoB,CAClC,IAA4B,EAC5B,OAA2B;IAE3B,OAAO,gCAAgC,CACrC,oBAAoB,CAAC,IAAI,CAAC,EAC1B,IAAI,EACJ,OAAO,CACR,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gCAAgC,CAC9C,QAAsB,EACtB,IAA4B,EAC5B,OAA2B;IAE3B,MAAM,EACJ,eAAe,EACf,MAAM,GAAG,eAAe,EACxB,kBAAkB,EAClB,gBAAgB,GAAG,kBAAkB,GACtC,GAAG,OAAO,IAAI,EAAE,CAAC;IAClB,+RAA+R;IAC/R,MAAM,mBAAmB,GAAG,EAAE,CAAC;IAC/B,MAAM,YAAY,GAAG,wBAAwB,CAAC,mBAAmB,CAAC,CAAC;IACnE,+IAA+I;IAC/I,MAAM,sBAAsB,GAAG,EAAE,CAAC;IAClC,MAAM,eAAe,GAAG,2BAA2B,CAAC,sBAAsB,CAAC,CAAC;IAC5E,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC;QAC1B,eAAe;QACf,MAAM;QACN,IAAI;QACJ,gBAAgB;KACjB,CAAC,CAAC;IACH,KAAK,CAAC,MAAM,GAAG,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACjE,wRAAwR;IACxR,MAAM,WAAW,GAAG,mBAAmB,CAAC,EAAE,GAAG,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,IAAI,iBAAiB,CAAC,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE;QAC9D,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,yBAAyB,EAAE,KAAK,CAAC,yBAAyB;QAC1D,gBAAgB,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC;QACjE,kBAAkB,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,UAAU;QAC1C,cAAc,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,WAAW;QACvC,WAAW;QACX,kBAAkB,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,eAAe;QAC/C,kBAAkB,EAAE;YAClB,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,aAAa;YACpC,eAAe,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,eAAe,CAAC,KAAK,CAAC;SAC1E;QACD,YAAY,EAAE,KAAK,CAAC,YAAY;KACjC,CAAC,CAAC;IACH,SAAS,CAAC,gBAAgB,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,gBAAgB,EAAE,EAAE,CAAC;IAC9D,KAAK,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC;IAC9B,MAAM,cAAc,GAAG,IAAI,mBAAmB,CAAC;QAC7C,cAAc,EAAE,oBAAoB,EAAE;QACtC,GAAG,CAAC,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpE,CAAC,CAAC;IACH,cAAc,CAAC,KAAK,EAAE,CAAC;IACvB,MAAM,IAAI,GAAG,IAAI,SAAS,CAAC,KAAK,EAAE;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,oBAAoB,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,oBAAoB,EAAE;KAClE,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,oBAAoB,EAAE,CAAC;IAC1C,OAAO;QACL,KAAK;QACL,IAAI;QACJ,cAAc,EAAE,KAAK,IAAI,EAAE;YACzB,MAAM,KAAK,GAAG,iBAAiB,EAAE,CAAC;YAClC,KAAK,CAAC,WAAW,CAAC;gBAChB,QAAQ,EAAE,MAAM,cAAc,CAAC,QAAQ,CAAC;gBACxC,KAAK;gBACL,IAAI;gBACJ,UAAU;gBACV,WAAW;gBACX,YAAY,EAAE,MAAM,cAAc,CAAC,YAAY,CAAC;gBAChD,aAAa,EAAE,MAAM,iBAAiB,CAAC;oBACrC,mBAAmB;oBACnB,YAAY;oBACZ,KAAK;iBACN,CAAC;gBACF,mBAAmB;gBACnB,eAAe,EAAE,MAAM,cAAc,CAAC,eAAe,CAAC;gBACtD,sBAAsB;aACvB,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAA4B,EAC5B,OAA2B;IAE3B,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC5E,MAAM,cAAc,EAAE,CAAC;IACvB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,6JAA6J;AAC7J,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,QAAsB,EACtB,IAA4B,EAC5B,OAA2B;IAE3B,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,gCAAgC,CACtE,QAAQ,EACR,IAAI,EACJ,OAAO,CACR,CAAC;IACF,MAAM,cAAc,EAAE,CAAC;IACvB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACzB,CAAC"}