agent-comms 8.6.2 → 8.7.0

package/dist/test/account-ledger-replication.integration.test.js

@@ -0,0 +1,145 @@
+/**
+ * Integration tests for the account's replicated grant ledger over a real mesh (agent-comms#344): two machines holding the same account key, each with its own user-identity.json and ledger store, connected directly. A grant minted on one reaches the other by data-domain fan-out, and the other can then revoke it, which a machine-local ledger could never do.
+ */
+import * as fs from "node:fs";
+import * as path from "node:path";
+import { tmpdir } from "node:os";
+import { afterEach, describe, expect, it } from "vitest";
+import { createMemoryStorage } from "wire-mesh-core/adapters/memory-storage";
+import { createSystemClock } from "wire-mesh-core/adapters/system-clock";
+import { createRevocationView, } from "wire-mesh-core/domain/revocation-view";
+import { MeshStore } from "../core/mesh-store.js";
+import { openAccountLedger } from "../core/account-ledger-store.js";
+import { generateIdentity } from "../core/identity.js";
+import { loadOrCreateUserIdentity } from "../core/user-identity.js";
+import { deviceIdToHex } from "wire-mesh-core/domain/device-id";
+import { freeLocalPort, TeardownStack } from "./hub-helpers.js";
+import { waitFor, wireTestTransportWithHub } from "./test-transport.js";
+/** Short enough that the ledger's announcement round, which rides the re-advertise cadence, fires many times within a test's wait budget. */
+const FAST_GOSSIP_INTERVAL_MS = 50;
+const cleanups = new TeardownStack();
+const dirs = [];
+afterEach(async () => {
+    await cleanups.run();
+    for (const dir of dirs.splice(0)) {
+        fs.rmSync(dir, { recursive: true, force: true });
+    }
+});
+function userDir() {
+    const dir = fs.mkdtempSync(path.join(tmpdir(), "ledger-replication-user-"));
+    dirs.push(dir);
+    return dir;
+}
+/** Gives `toDir` a copy of the account key in `fromDir` and nothing else, as a deliberate copy of the key to a second machine would. */
+function copyAccountKey(fromDir, toDir) {
+    const parsed = JSON.parse(fs.readFileSync(path.join(fromDir, "user-identity.json"), "utf-8"));
+    if (typeof parsed !== "object" ||
+        parsed === null ||
+        !("privateKey" in parsed) ||
+        !("certificate" in parsed) ||
+        !("expiresAt" in parsed)) {
+        throw new Error("user-identity.json has no key material");
+    }
+    const { privateKey, certificate, expiresAt } = parsed;
+    fs.writeFileSync(path.join(toDir, "user-identity.json"), JSON.stringify({ privateKey, certificate, expiresAt }), { mode: 0o600 });
+}
+async function machine(coordinatorPort, userIdentityDir, name) {
+    const store = new MeshStore({ coordinatorPort });
+    const revocation = createRevocationView();
+    const dataStorage = createMemoryStorage();
+    const { transport } = await wireTestTransportWithHub(store, {
+        presenceReadvertiseIntervalMs: FAST_GOSSIP_INTERVAL_MS,
+        userIdentityOptions: { dir: userIdentityDir },
+        revocation,
+        dataStorage,
+    });
+    await store.init();
+    cleanups.push(async () => store.shutdown());
+    // A visible agent's advert carries its device's membership proof, which is how the other machine recognises it as holding the same account and offers it the ledger.
+    await store.registerAgent({
+        name,
+        harness: "test",
+        cwd: `/test/${name}`,
+        pid: process.pid,
+        visibility: "visible",
+        tags: [],
+    });
+    return { store, transport, revocation, dataStorage };
+}
+/** Another handle on a machine's ledger store, the way a second bridge on that machine would open it. */
+async function ledgerOn(dir) {
+    return openAccountLedger({
+        userIdentityOptions: { dir },
+        userIdentity: loadOrCreateUserIdentity({ dir }),
+        clock: createSystemClock(),
+    });
+}
+async function outstandingDm(ledger, bearer) {
+    const grants = await ledger.outstandingGrants("dm", bearer);
+    return grants.map((grant) => Buffer.from(grant.tokenId).toString("hex"));
+}
+describe("account ledger replication", () => {
+    it("revokes on a second machine a DM grant minted on the first", async () => {
+        const port = await freeLocalPort();
+        const dirA = userDir();
+        const dirB = userDir();
+        loadOrCreateUserIdentity({ dir: dirA });
+        copyAccountKey(dirA, dirB);
+        const { store: a } = await machine(port, dirA, "machine-a");
+        const { store: b } = await machine(port, dirB, "machine-b");
+        expect(b.getUserPrincipalId()).toBe(a.getUserPrincipalId());
+        const bearer = deviceIdToHex(Uint8Array.from(generateIdentity().deviceId));
+        await a.admitAgentForDm(bearer);
+        const ledgerA = await ledgerOn(dirA);
+        const ledgerB = await ledgerOn(dirB);
+        const [minted] = await outstandingDm(ledgerA, bearer);
+        if (minted === undefined)
+            throw new Error("expected A to record its grant");
+        await waitFor(async () => (await outstandingDm(ledgerB, bearer)).includes(minted), "B's ledger to hold the grant A minted");
+        await b.revokeAgentDmAccess(bearer);
+        expect(await outstandingDm(ledgerB, bearer)).toEqual([]);
+        await waitFor(async () => (await outstandingDm(ledgerA, bearer)).length === 0, "A's ledger to learn B's revocation");
+        expect(await ledgerA.revocations()).toHaveLength(1);
+    });
+    it("teaches a machine a revocation made on another through the replicated ledger alone", async () => {
+        const port = await freeLocalPort();
+        const dirA = userDir();
+        const dirB = userDir();
+        loadOrCreateUserIdentity({ dir: dirA });
+        copyAccountKey(dirA, dirB);
+        const a = await machine(port, dirA, "machine-a");
+        const b = await machine(port, dirB, "machine-b");
+        const bearer = deviceIdToHex(Uint8Array.from(generateIdentity().deviceId));
+        // The gossiped revocation-announce never leaves B, so the only way A can learn of the revocation is B's writer log.
+        b.transport.broadcastRevocation = async () => { };
+        await a.store.admitAgentForDm(bearer);
+        const ledgerB = await ledgerOn(dirB);
+        await waitFor(async () => (await outstandingDm(ledgerB, bearer)).length === 1, "B's ledger to hold the grant A minted");
+        const [minted] = await ledgerB.outstandingGrants("dm", bearer);
+        if (minted === undefined)
+            throw new Error("expected the minted grant");
+        await b.store.revokeAgentDmAccess(bearer);
+        await waitFor(async () => (await a.revocation.entriesFor(minted.tokenId)).length > 0, "A's RevocationView to refuse the grant B revoked");
+    });
+    it("never offers the ledger to a device of another account", async () => {
+        const port = await freeLocalPort();
+        const dirA = userDir();
+        const dirB = userDir();
+        const dirOther = userDir();
+        loadOrCreateUserIdentity({ dir: dirA });
+        copyAccountKey(dirA, dirB);
+        const a = await machine(port, dirA, "machine-a");
+        const b = await machine(port, dirB, "machine-b");
+        const other = await machine(port, dirOther, "other-account");
+        const bearer = deviceIdToHex(Uint8Array.from(generateIdentity().deviceId));
+        await a.store.admitAgentForDm(bearer);
+        const ledgerB = await ledgerOn(dirB);
+        await waitFor(async () => (await outstandingDm(ledgerB, bearer)).length === 1, "B's ledger to hold the grant A minted");
+        const [writerLog] = await (await ledgerOn(dirA)).announcements();
+        if (writerLog === undefined)
+            throw new Error("expected A's writer log");
+        // Every announcement round that reached B also passed the other account's device, so by now it would have asked for and stored the log if it had been offered.
+        expect(await other.dataStorage.keys(`data/${deviceIdToHex(writerLog.peer)}/`)).toEqual([]);
+    });
+});
+//# sourceMappingURL=account-ledger-replication.integration.test.js.map

package/dist/test/account-ledger-replication.integration.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-ledger-replication.integration.test.js","sourceRoot":"","sources":["../../src/test/account-ledger-replication.integration.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAEzE,OAAO,EACL,oBAAoB,GAErB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAElD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AAEpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAChE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAExE,6IAA6I;AAC7I,MAAM,uBAAuB,GAAG,EAAE,CAAC;AAEnC,MAAM,QAAQ,GAAG,IAAI,aAAa,EAAE,CAAC;AACrC,MAAM,IAAI,GAAa,EAAE,CAAC;AAE1B,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC;IACrB,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;QACjC,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,SAAS,OAAO;IACd,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC;IAC5E,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACf,OAAO,GAAG,CAAC;AACb,CAAC;AAED,wIAAwI;AACxI,SAAS,cAAc,CAAC,OAAe,EAAE,KAAa;IACpD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAChC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,oBAAoB,CAAC,EAAE,OAAO,CAAC,CACnE,CAAC;IACF,IACE,OAAO,MAAM,KAAK,QAAQ;QAC1B,MAAM,KAAK,IAAI;QACf,CAAC,CAAC,YAAY,IAAI,MAAM,CAAC;QACzB,CAAC,CAAC,aAAa,IAAI,MAAM,CAAC;QAC1B,CAAC,CAAC,WAAW,IAAI,MAAM,CAAC,EACxB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IACtD,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,oBAAoB,CAAC,EACtC,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,EACtD,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;AACJ,CAAC;AAUD,KAAK,UAAU,OAAO,CACpB,eAAuB,EACvB,eAAuB,EACvB,IAAY;IAEZ,MAAM,KAAK,GAAG,IAAI,SAAS,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC;IACjD,MAAM,UAAU,GAAG,oBAAoB,EAAE,CAAC;IAC1C,MAAM,WAAW,GAAG,mBAAmB,EAAE,CAAC;IAC1C,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,wBAAwB,CAAC,KAAK,EAAE;QAC1D,6BAA6B,EAAE,uBAAuB;QACtD,mBAAmB,EAAE,EAAE,GAAG,EAAE,eAAe,EAAE;QAC7C,UAAU;QACV,WAAW;KACZ,CAAC,CAAC;IACH,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;IACnB,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC5C,qKAAqK;IACrK,MAAM,KAAK,CAAC,aAAa,CAAC;QACxB,IAAI;QACJ,OAAO,EAAE,MAAM;QACf,GAAG,EAAE,SAAS,IAAI,EAAE;QACpB,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,UAAU,EAAE,SAAS;QACrB,IAAI,EAAE,EAAE;KACT,CAAC,CAAC;IACH,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;AACvD,CAAC;AAED,yGAAyG;AACzG,KAAK,UAAU,QAAQ,CAAC,GAAW;IACjC,OAAO,iBAAiB,CAAC;QACvB,mBAAmB,EAAE,EAAE,GAAG,EAAE;QAC5B,YAAY,EAAE,wBAAwB,CAAC,EAAE,GAAG,EAAE,CAAC;QAC/C,KAAK,EAAE,iBAAiB,EAAE;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,aAAa,CAC1B,MAAqB,EACrB,MAAc;IAEd,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,IAAI,GAAG,MAAM,aAAa,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;QACvB,wBAAwB,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAE3B,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;QAC5D,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;QAC5D,MAAM,CAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,EAAE,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE3E,MAAM,CAAC,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QAChC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACtD,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAE5E,MAAM,OAAO,CACX,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EACnE,uCAAuC,CACxC,CAAC;QACF,MAAM,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAEpC,MAAM,CAAC,MAAM,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACzD,MAAM,OAAO,CACX,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAC/D,oCAAoC,CACrC,CAAC;QACF,MAAM,CAAC,MAAM,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oFAAoF,EAAE,KAAK,IAAI,EAAE;QAClG,MAAM,IAAI,GAAG,MAAM,aAAa,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;QACvB,wBAAwB,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC3B,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;QACjD,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC3E,oHAAoH;QACpH,CAAC,CAAC,SAAS,CAAC,mBAAmB,GAAG,KAAK,IAAI,EAAE,GAAE,CAAC,CAAC;QAEjD,MAAM,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,OAAO,CACX,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAC/D,uCAAuC,CACxC,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/D,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QACvE,MAAM,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;QAE1C,MAAM,OAAO,CACX,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EACtE,kDAAkD,CACnD,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,IAAI,GAAG,MAAM,aAAa,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;QACvB,MAAM,QAAQ,GAAG,OAAO,EAAE,CAAC;QAC3B,wBAAwB,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC3B,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;QACjD,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;QACjD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;QAE3E,MAAM,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,OAAO,CACX,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAC/D,uCAAuC,CACxC,CAAC;QACF,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACjE,IAAI,SAAS,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;QAExE,+JAA+J;QAC/J,MAAM,CACJ,MAAM,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,aAAa,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CACvE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/account-ledger.unit.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Unit tests for the account's replicated grant ledger (agent-comms#344): its sealing and writer-log recognition, replication between two machines holding the same account key by plain data-domain frame exchange, revocation from a machine other than the one that minted the grant, and migration of a pre-ledger user-identity.json.
+ */
+export {};
+//# sourceMappingURL=account-ledger.unit.test.d.ts.map

package/dist/test/account-ledger.unit.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-ledger.unit.test.d.ts","sourceRoot":"","sources":["../../src/test/account-ledger.unit.test.ts"],"names":[],"mappings":"AAAA;;GAEG"}

package/dist/test/account-ledger.unit.test.js

@@ -0,0 +1,317 @@
+/**
+ * Unit tests for the account's replicated grant ledger (agent-comms#344): its sealing and writer-log recognition, replication between two machines holding the same account key by plain data-domain frame exchange, revocation from a machine other than the one that minted the grant, and migration of a pre-ledger user-identity.json.
+ */
+import * as fs from "node:fs";
+import { tmpdir } from "node:os";
+import path from "node:path";
+import { describe, expect, it } from "vitest";
+import { createMemoryStorage } from "wire-mesh-core/adapters/memory-storage";
+import { createNodeFsStorage } from "wire-mesh-core/adapters/node-fs-storage";
+import { createSystemClock } from "wire-mesh-core/adapters/system-clock";
+import { mintRevocationEntry } from "wire-mesh-core/domain/tokens";
+import { deriveAccountLedgerKeys, generateWriterNonce, isWriterLogId, openLedgerEntry, sealLedgerEntry, writerLogId, } from "../core/account-ledger-crypto.js";
+import { AccountLedger } from "../core/account-ledger.js";
+import { openAccountLedger } from "../core/account-ledger-store.js";
+import { generateIdentity } from "../core/identity.js";
+import { createFileLedgerLock, createInProcessLedgerLock, } from "../core/ledger-lock.js";
+import { randomId } from "../core/random-id.js";
+import { loadOrCreateUserIdentity, readLegacyIssuedGrants, } from "../core/user-identity.js";
+import { toIdentityPort } from "../core/wire-mesh-identity.js";
+/** Enough appends in flight at once that two unserialised writers would all but certainly read the same head at least once. */
+const CONCURRENT_APPENDS = 8;
+/** One machine's copy of an account's ledger: its own storage and writer nonce, the account key it shares with every other machine of the account. */
+function machineLedger(account) {
+    return new AccountLedger({
+        accountPrivateKey: account.privateKey,
+        writerNonce: generateWriterNonce(),
+        storage: createMemoryStorage(),
+        lock: createInProcessLedgerLock(),
+        clock: createSystemClock(),
+    });
+}
+/** Wraps `inner` so a test can stop a data log's head write half-way, the way a filesystem write that truncates and then writes can be caught between the two by a reader in another process: the head is left empty until the test releases it. */
+function pausingHeadWrites(inner) {
+    let pending;
+    const storage = {
+        get: async (key) => inner.get(key),
+        delete: async (key) => inner.delete(key),
+        keys: async (prefix) => inner.keys(prefix),
+        set: async (key, value) => {
+            const pause = key.endsWith("/head") ? pending : undefined;
+            if (pause !== undefined) {
+                pending = undefined;
+                await inner.set(key, new Uint8Array());
+                pause.arrive();
+                await pause.released;
+            }
+            await inner.set(key, value);
+        },
+    };
+    return {
+        storage,
+        pauseNextHeadWrite: () => {
+            const reached = Promise.withResolvers();
+            const released = Promise.withResolvers();
+            pending = {
+                arrive: () => {
+                    reached.resolve(undefined);
+                },
+                released: released.promise,
+            };
+            return {
+                reached: reached.promise,
+                release: () => {
+                    released.resolve(undefined);
+                },
+            };
+        },
+    };
+}
+/** Runs the data-domain exchange a transport would between two connected machines until `to` holds everything `from` offers: have, then request and entries until caught up. */
+async function replicate(from, to) {
+    for (const have of await from.announcements()) {
+        let next = await to.handleDataFrame(have);
+        while (next !== null && next.type === "data-request") {
+            const entries = await from.handleDataFrame(next);
+            if (entries === null)
+                break;
+            await to.handleDataFrame(entries);
+            next = await to.handleDataFrame(have);
+        }
+    }
+}
+async function tokenIds(ledger, kind, subject) {
+    const grants = await ledger.outstandingGrants(kind, subject);
+    return grants.map((grant) => grant.tokenId);
+}
+describe("account ledger sealing", () => {
+    const account = generateIdentity();
+    const keys = deriveAccountLedgerKeys(account.privateKey);
+    const log = writerLogId(keys, generateWriterNonce());
+    const plaintext = randomId();
+    it("opens an entry sealed for the same log and position", () => {
+        const sealed = sealLedgerEntry(keys, log, 1, plaintext);
+        expect(openLedgerEntry(keys, log, 1, sealed)).toEqual(plaintext);
+    });
+    it("does not open an entry moved to another position, another log, or under another account", () => {
+        const sealed = sealLedgerEntry(keys, log, 1, plaintext);
+        const otherLog = writerLogId(keys, generateWriterNonce());
+        const otherKeys = deriveAccountLedgerKeys(generateIdentity().privateKey);
+        expect(openLedgerEntry(keys, log, 2, sealed)).toBeUndefined();
+        expect(openLedgerEntry(keys, otherLog, 1, sealed)).toBeUndefined();
+        expect(openLedgerEntry(otherKeys, log, 1, sealed)).toBeUndefined();
+    });
+    it("recognises its own writer logs and nothing else", () => {
+        const otherKeys = deriveAccountLedgerKeys(generateIdentity().privateKey);
+        expect(isWriterLogId(keys, log)).toBe(true);
+        expect(isWriterLogId(otherKeys, log)).toBe(false);
+        expect(isWriterLogId(keys, randomId())).toBe(false);
+    });
+    it("derives the same keys from every copy of the account key", () => {
+        const copy = deriveAccountLedgerKeys(account.privateKey);
+        const sealed = sealLedgerEntry(keys, log, 1, plaintext);
+        expect(openLedgerEntry(copy, log, 1, sealed)).toEqual(plaintext);
+    });
+});
+describe("account ledger replication", () => {
+    it("lets a second machine holding the account key revoke a grant the first minted", async () => {
+        const account = generateIdentity();
+        const accountPort = await toIdentityPort(account);
+        const first = machineLedger(account);
+        const second = machineLedger(account);
+        const tokenId = randomId();
+        await first.recordGrant("device", "device-a", tokenId);
+        await replicate(first, second);
+        expect(await tokenIds(second, "device", "device-a")).toEqual([tokenId]);
+        const revocation = await mintRevocationEntry({
+            identity: accountPort,
+            tokenId,
+            revokedAt: Date.now(),
+        });
+        await second.recordRevocation("device", "device-a", tokenId, revocation);
+        const learned = [];
+        first.onReplicatedRevocation((entry) => {
+            learned.push(entry);
+        });
+        await replicate(second, first);
+        expect(await tokenIds(first, "device", "device-a")).toEqual([]);
+        expect(learned).toEqual([revocation]);
+        expect(await first.revocations()).toEqual([revocation]);
+    });
+    it("keeps both machines' grants when each appends while apart", async () => {
+        const account = generateIdentity();
+        const first = machineLedger(account);
+        const second = machineLedger(account);
+        const fromFirst = randomId();
+        const fromSecond = randomId();
+        await first.recordGrant("dm", "bearer", fromFirst);
+        await second.recordGrant("dm", "bearer", fromSecond);
+        await replicate(first, second);
+        await replicate(second, first);
+        for (const ledger of [first, second]) {
+            expect(await tokenIds(ledger, "dm", "bearer")).toEqual(expect.arrayContaining([fromFirst, fromSecond]));
+            expect(await tokenIds(ledger, "dm", "bearer")).toHaveLength(2);
+        }
+    });
+    it("refuses entries for one of its writer logs that were not sealed under the account key", async () => {
+        const account = generateIdentity();
+        const ledger = machineLedger(account);
+        const keys = deriveAccountLedgerKeys(account.privateKey);
+        const log = writerLogId(keys, generateWriterNonce());
+        const forged = sealLedgerEntry(deriveAccountLedgerKeys(generateIdentity().privateKey), log, 1, Uint8Array.from([0]));
+        await ledger.handleDataFrame({
+            type: "data-entries",
+            peer: log,
+            "from-seq": 0,
+            entries: [forged],
+        });
+        expect(ledger.ownsLog(log)).toBe(true);
+        expect(await ledger.announcements()).toEqual([]);
+    });
+    it("gives no reading to a machine without the account key", async () => {
+        const account = generateIdentity();
+        const ledger = machineLedger(account);
+        const stranger = machineLedger(generateIdentity());
+        await ledger.recordGrant("device", "device-a", randomId());
+        const [have] = await ledger.announcements();
+        if (have === undefined)
+            throw new Error("expected an announcement");
+        expect(stranger.ownsLog(have.peer)).toBe(false);
+    });
+    it("never misses a replicated grant while another bridge on the machine is storing that log", async () => {
+        const account = generateIdentity();
+        const origin = machineLedger(account);
+        const dir = fs.mkdtempSync(path.join(tmpdir(), "agent-comms-ledger-fs-"));
+        const tornWrite = pausingHeadWrites(createNodeFsStorage({ dir }));
+        const machineLock = `${dir}.lock`;
+        const replicator = new AccountLedger({
+            accountPrivateKey: account.privateKey,
+            writerNonce: generateWriterNonce(),
+            storage: tornWrite.storage,
+            lock: createFileLedgerLock(machineLock),
+            clock: createSystemClock(),
+        });
+        const readerQueued = Promise.withResolvers();
+        const readerLock = createFileLedgerLock(machineLock);
+        const reader = new AccountLedger({
+            accountPrivateKey: account.privateKey,
+            writerNonce: generateWriterNonce(),
+            storage: tornWrite.storage,
+            lock: {
+                run: async (critical) => {
+                    readerQueued.resolve(undefined);
+                    return readerLock.run(critical);
+                },
+            },
+            clock: createSystemClock(),
+        });
+        await origin.recordGrant("dm", "bearer", randomId());
+        await replicate(origin, replicator);
+        await origin.recordGrant("dm", "bearer", randomId());
+        const paused = tornWrite.pauseNextHeadWrite();
+        const replicating = replicate(origin, replicator);
+        await paused.reached;
+        const reading = reader.outstandingGrants("dm", "bearer");
+        // The read either finishes while the head is torn, or is queued behind the write; only then does the write complete.
+        await Promise.race([reading, readerQueued.promise]);
+        paused.release();
+        await replicating;
+        expect(await reading).toHaveLength(2);
+        fs.rmSync(dir, { recursive: true, force: true });
+    });
+    it("does not fork its writer log when several stores on one machine append at once", async () => {
+        const account = generateIdentity();
+        const shared = {
+            accountPrivateKey: account.privateKey,
+            writerNonce: generateWriterNonce(),
+            storage: createMemoryStorage(),
+            lock: createInProcessLedgerLock(),
+            clock: createSystemClock(),
+        };
+        const stores = [new AccountLedger(shared), new AccountLedger(shared)];
+        const issued = Array.from({ length: CONCURRENT_APPENDS }, () => randomId());
+        await Promise.all(issued.map(async (tokenId, index) => stores[index % stores.length]?.recordGrant("dm", "bearer", tokenId)));
+        const [first] = stores;
+        if (first === undefined)
+            throw new Error("expected a store");
+        expect(await tokenIds(first, "dm", "bearer")).toEqual(expect.arrayContaining(issued));
+        expect(await tokenIds(first, "dm", "bearer")).toHaveLength(issued.length);
+    });
+});
+describe("openAccountLedger", () => {
+    function userDir() {
+        return fs.mkdtempSync(path.join(tmpdir(), "agent-comms-account-ledger-"));
+    }
+    function writeLegacyGrants(dir) {
+        const file = path.join(dir, "user-identity.json");
+        const parsed = JSON.parse(fs.readFileSync(file, "utf-8"));
+        if (typeof parsed !== "object" || parsed === null) {
+            throw new Error("user-identity.json is not an object");
+        }
+        fs.writeFileSync(file, JSON.stringify({
+            ...parsed,
+            issuedDeviceGrants: {
+                "device-a": Buffer.from([1, 1]).toString("base64"),
+            },
+            issuedDmGrants: { "bearer-a": Buffer.from([2, 2]).toString("base64") },
+        }));
+    }
+    it("migrates an existing user-identity.json's issued grants into the ledger and removes them from the file", async () => {
+        const dir = userDir();
+        const userIdentity = loadOrCreateUserIdentity({ dir });
+        writeLegacyGrants(dir);
+        const ledger = await openAccountLedger({
+            userIdentityOptions: { dir },
+            userIdentity,
+            clock: createSystemClock(),
+        });
+        expect(await tokenIds(ledger, "device", "device-a")).toEqual([
+            Uint8Array.from([1, 1]),
+        ]);
+        expect(await tokenIds(ledger, "dm", "bearer-a")).toEqual([
+            Uint8Array.from([2, 2]),
+        ]);
+        expect(readLegacyIssuedGrants({ dir })).toEqual([]);
+    });
+    it("keeps migrated grants across a restart without recording them twice", async () => {
+        const dir = userDir();
+        const userIdentity = loadOrCreateUserIdentity({ dir });
+        writeLegacyGrants(dir);
+        const options = {
+            userIdentityOptions: { dir },
+            userIdentity,
+            clock: createSystemClock(),
+        };
+        await openAccountLedger(options);
+        const reopened = await openAccountLedger(options);
+        expect(await tokenIds(reopened, "device", "device-a")).toEqual([
+            Uint8Array.from([1, 1]),
+        ]);
+        const [have] = await reopened.announcements();
+        expect(have?.["head-seq"]).toBe(2);
+    });
+    it("replicates a migrated grant to another machine, which can then revoke it", async () => {
+        const dir = userDir();
+        const userIdentity = loadOrCreateUserIdentity({ dir });
+        writeLegacyGrants(dir);
+        const migrated = await openAccountLedger({
+            userIdentityOptions: { dir },
+            userIdentity,
+            clock: createSystemClock(),
+        });
+        const other = machineLedger(userIdentity);
+        await replicate(migrated, other);
+        const [grant] = await other.outstandingGrants("device", "device-a");
+        if (grant === undefined)
+            throw new Error("expected the migrated grant");
+        const revocation = await mintRevocationEntry({
+            identity: await toIdentityPort(userIdentity),
+            tokenId: grant.tokenId,
+            revokedAt: Date.now(),
+        });
+        await other.recordRevocation("device", "device-a", grant.tokenId, revocation);
+        await replicate(other, migrated);
+        expect(await tokenIds(migrated, "device", "device-a")).toEqual([]);
+    });
+});
+//# sourceMappingURL=account-ledger.unit.test.js.map

package/dist/test/account-ledger.unit.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-ledger.unit.test.js","sourceRoot":"","sources":["../../src/test/account-ledger.unit.test.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,yCAAyC,CAAC;AAC9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAQnE,OAAO,EACL,uBAAuB,EACvB,mBAAmB,EACnB,aAAa,EACb,eAAe,EACf,eAAe,EACf,WAAW,GACZ,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iCAAiC,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAqB,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EACL,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EACL,wBAAwB,EACxB,sBAAsB,GACvB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAI/D,+HAA+H;AAC/H,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAE7B,sJAAsJ;AACtJ,SAAS,aAAa,CAAC,OAA+B;IACpD,OAAO,IAAI,aAAa,CAAC;QACvB,iBAAiB,EAAE,OAAO,CAAC,UAAU;QACrC,WAAW,EAAE,mBAAmB,EAAE;QAClC,OAAO,EAAE,mBAAmB,EAAE;QAC9B,IAAI,EAAE,yBAAyB,EAAE;QACjC,KAAK,EAAE,iBAAiB,EAAE;KAC3B,CAAC,CAAC;AACL,CAAC;AAED,oPAAoP;AACpP,SAAS,iBAAiB,CAAC,KAAgC;IAOzD,IAAI,OAAyE,CAAC;IAC9E,MAAM,OAAO,GAAoB;QAC/B,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;QAClC,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC;QACxC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;QAC1C,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;YACxB,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,OAAO,GAAG,SAAS,CAAC;gBACpB,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,UAAU,EAAE,CAAC,CAAC;gBACvC,KAAK,CAAC,MAAM,EAAE,CAAC;gBACf,MAAM,KAAK,CAAC,QAAQ,CAAC;YACvB,CAAC;YACD,MAAM,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9B,CAAC;KACF,CAAC;IACF,OAAO;QACL,OAAO;QACP,kBAAkB,EAAE,GAAG,EAAE;YACvB,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,EAAa,CAAC;YACnD,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,EAAa,CAAC;YACpD,OAAO,GAAG;gBACR,MAAM,EAAE,GAAG,EAAE;oBACX,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAC7B,CAAC;gBACD,QAAQ,EAAE,QAAQ,CAAC,OAAO;aAC3B,CAAC;YACF,OAAO;gBACL,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,OAAO,EAAE,GAAG,EAAE;oBACZ,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAC9B,CAAC;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,gLAAgL;AAChL,KAAK,UAAU,SAAS,CACtB,IAAmB,EACnB,EAAiB;IAEjB,KAAK,MAAM,IAAI,IAAI,MAAM,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QAC9C,IAAI,IAAI,GAAuB,MAAM,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAC9D,OAAO,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YACrD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,OAAO,KAAK,IAAI;gBAAE,MAAM;YAC5B,MAAM,EAAE,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,GAAG,MAAM,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,MAAqB,EACrB,IAAqB,EACrB,OAAe;IAEf,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAC9C,CAAC;AAED,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,uBAAuB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,QAAQ,EAAE,CAAC;IAE7B,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;QACxD,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yFAAyF,EAAE,GAAG,EAAE;QACjG,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;QACxD,MAAM,QAAQ,GAAG,WAAW,CAAC,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC1D,MAAM,SAAS,GAAG,uBAAuB,CAAC,gBAAgB,EAAE,CAAC,UAAU,CAAC,CAAC;QAEzE,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QAC9D,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;QACnE,MAAM,CAAC,eAAe,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,SAAS,GAAG,uBAAuB,CAAC,gBAAgB,EAAE,CAAC,UAAU,CAAC,CAAC;QAEzE,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,MAAM,CAAC,aAAa,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,IAAI,GAAG,uBAAuB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;QAExD,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,EAAE,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;QAC7F,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;QACnC,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,QAAQ,EAAE,CAAC;QAE3B,MAAM,KAAK,CAAC,WAAW,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QACvD,MAAM,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC/B,MAAM,CAAC,MAAM,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAExE,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC;YAC3C,QAAQ,EAAE,WAAW;YACrB,OAAO;YACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,gBAAgB,CAAC,QAAQ,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QACzE,MAAM,OAAO,GAAsB,EAAE,CAAC;QACtC,KAAK,CAAC,sBAAsB,CAAC,CAAC,KAAK,EAAE,EAAE;YACrC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QACH,MAAM,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAE/B,MAAM,CAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,QAAQ,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,QAAQ,EAAE,CAAC;QAE9B,MAAM,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QACnD,MAAM,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QACrD,MAAM,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC/B,MAAM,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAE/B,KAAK,MAAM,MAAM,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;YACrC,MAAM,CAAC,MAAM,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CACpD,MAAM,CAAC,eAAe,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAChD,CAAC;YACF,MAAM,CAAC,MAAM,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACjE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uFAAuF,EAAE,KAAK,IAAI,EAAE;QACrG,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,uBAAuB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACzD,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,eAAe,CAC5B,uBAAuB,CAAC,gBAAgB,EAAE,CAAC,UAAU,CAAC,EACtD,GAAG,EACH,CAAC,EACD,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CACrB,CAAC;QAEF,MAAM,MAAM,CAAC,eAAe,CAAC;YAC3B,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,GAAG;YACT,UAAU,EAAE,CAAC;YACb,OAAO,EAAE,CAAC,MAAM,CAAC;SAClB,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,CAAC,MAAM,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,KAAK,IAAI,EAAE;QACrE,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAG,aAAa,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAEnD,MAAM,MAAM,CAAC,WAAW,CAAC,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC;QAC3D,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,MAAM,CAAC,aAAa,EAAE,CAAC;QAC5C,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAEpE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yFAAyF,EAAE,KAAK,IAAI,EAAE;QACvG,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;QACtC,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,wBAAwB,CAAC,CAAC,CAAC;QAC1E,MAAM,SAAS,GAAG,iBAAiB,CAAC,mBAAmB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QAClE,MAAM,WAAW,GAAG,GAAG,GAAG,OAAO,CAAC;QAClC,MAAM,UAAU,GAAG,IAAI,aAAa,CAAC;YACnC,iBAAiB,EAAE,OAAO,CAAC,UAAU;YACrC,WAAW,EAAE,mBAAmB,EAAE;YAClC,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,IAAI,EAAE,oBAAoB,CAAC,WAAW,CAAC;YACvC,KAAK,EAAE,iBAAiB,EAAE;SAC3B,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,OAAO,CAAC,aAAa,EAAa,CAAC;QACxD,MAAM,UAAU,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;QACrD,MAAM,MAAM,GAAG,IAAI,aAAa,CAAC;YAC/B,iBAAiB,EAAE,OAAO,CAAC,UAAU;YACrC,WAAW,EAAE,mBAAmB,EAAE;YAClC,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,IAAI,EAAE;gBACJ,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE;oBACtB,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;oBAChC,OAAO,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAClC,CAAC;aACF;YACD,KAAK,EAAE,iBAAiB,EAAE;SAC3B,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QACrD,MAAM,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QACpC,MAAM,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;QAErD,MAAM,MAAM,GAAG,SAAS,CAAC,kBAAkB,EAAE,CAAC;QAC9C,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;QAClD,MAAM,MAAM,CAAC,OAAO,CAAC;QACrB,MAAM,OAAO,GAAG,MAAM,CAAC,iBAAiB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACzD,qHAAqH;QACrH,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;QACpD,MAAM,CAAC,OAAO,EAAE,CAAC;QACjB,MAAM,WAAW,CAAC;QAElB,MAAM,CAAC,MAAM,OAAO,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACtC,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gFAAgF,EAAE,KAAK,IAAI,EAAE;QAC9F,MAAM,OAAO,GAAG,gBAAgB,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG;YACb,iBAAiB,EAAE,OAAO,CAAC,UAAU;YACrC,WAAW,EAAE,mBAAmB,EAAE;YAClC,OAAO,EAAE,mBAAmB,EAAE;YAC9B,IAAI,EAAE,yBAAyB,EAAE;YACjC,KAAK,EAAE,iBAAiB,EAAE;SAC3B,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,IAAI,aAAa,CAAC,MAAM,CAAC,EAAE,IAAI,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;QACtE,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC;QAE5E,MAAM,OAAO,CAAC,GAAG,CACf,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAClC,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CACpE,CACF,CAAC;QAEF,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;QACvB,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CACnD,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAC/B,CAAC;QACF,MAAM,CAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,SAAS,OAAO;QACd,OAAO,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,6BAA6B,CAAC,CAAC,CAAC;IAC5E,CAAC;IAED,SAAS,iBAAiB,CAAC,GAAW;QACpC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;QAClD,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QACnE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YAClD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,EAAE,CAAC,aAAa,CACd,IAAI,EACJ,IAAI,CAAC,SAAS,CAAC;YACb,GAAG,MAAM;YACT,kBAAkB,EAAE;gBAClB,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;aACnD;YACD,cAAc,EAAE,EAAE,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;SACvE,CAAC,CACH,CAAC;IACJ,CAAC;IAED,EAAE,CAAC,wGAAwG,EAAE,KAAK,IAAI,EAAE;QACtH,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,MAAM,YAAY,GAAG,wBAAwB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACvD,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAEvB,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC;YACrC,mBAAmB,EAAE,EAAE,GAAG,EAAE;YAC5B,YAAY;YACZ,KAAK,EAAE,iBAAiB,EAAE;SAC3B,CAAC,CAAC;QAEH,MAAM,CAAC,MAAM,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC;YAC3D,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;SACxB,CAAC,CAAC;QACH,MAAM,CAAC,MAAM,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC;YACvD,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;SACxB,CAAC,CAAC;QACH,MAAM,CAAC,sBAAsB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACnF,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,MAAM,YAAY,GAAG,wBAAwB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACvD,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACvB,MAAM,OAAO,GAAG;YACd,mBAAmB,EAAE,EAAE,GAAG,EAAE;YAC5B,YAAY;YACZ,KAAK,EAAE,iBAAiB,EAAE;SAC3B,CAAC;QAEF,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACjC,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAElD,MAAM,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC;YAC7D,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;SACxB,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC9C,MAAM,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,KAAK,IAAI,EAAE;QACxF,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC;QACtB,MAAM,YAAY,GAAG,wBAAwB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACvD,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACvB,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC;YACvC,mBAAmB,EAAE,EAAE,GAAG,EAAE;YAC5B,YAAY;YACZ,KAAK,EAAE,iBAAiB,EAAE;SAC3B,CAAC,CAAC;QACH,MAAM,KAAK,GAAG,aAAa,CAAC,YAAY,CAAC,CAAC;QAE1C,MAAM,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACjC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACpE,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACxE,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC;YAC3C,QAAQ,EAAE,MAAM,cAAc,CAAC,YAAY,CAAC;YAC5C,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC;QACH,MAAM,KAAK,CAAC,gBAAgB,CAC1B,QAAQ,EACR,UAAU,EACV,KAAK,CAAC,OAAO,EACb,UAAU,CACX,CAAC;QACF,MAAM,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAEjC,MAAM,CAAC,MAAM,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/account-transfer.unit.test.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Unit tests for the account key's export and import (agent-comms#344): the passphrase-sealed bundle, the `account export`/`account import` commands built on it, and what importing does to the machine it lands on.
+ */
+export {};
+//# sourceMappingURL=account-transfer.unit.test.d.ts.map

package/dist/test/account-transfer.unit.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-transfer.unit.test.d.ts","sourceRoot":"","sources":["../../src/test/account-transfer.unit.test.ts"],"names":[],"mappings":"AAAA;;GAEG"}