cojson-core-wasm 0.20.7 → 0.20.8

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "cojson-core-wasm",
   "type": "module",
-  "version": "0.20.7",
+  "version": "0.20.8",
   "files": [
     "public/cojson_core_wasm.js",
     "public/cojson_core_wasm.d.ts",

package/public/cojson_core_wasm.d.ts

@@ -1,68 +1,92 @@
 /* tslint:disable */
 /* eslint-disable */
 /**
- * WASM-exposed function to derive the public key from an Ed25519 signing key.
- * - `signing_key`: 32 bytes of signing key material
- * Returns 32 bytes of public key material or throws JsError if key is invalid.
+ * Compute a short hash of a stable-stringified JSON value.
+ * The input should already be serialized using stableStringify on the JS side.
+ * Returns a string prefixed with "shortHash_z" followed by base58-encoded hash.
  */
-export function ed25519SigningKeyToPublic(signing_key: Uint8Array): Uint8Array;
+export function shortHash(value: string): string;
 /**
- * WASM-exposed function to validate and copy Ed25519 signing key bytes.
- * - `bytes`: 32 bytes of signing key material to validate
- * Returns the same 32 bytes if valid or throws JsError if invalid.
+ * Generate a 24-byte nonce from input material using BLAKE3.
+ * - `nonce_material`: Raw bytes to derive the nonce from
+ * Returns 24 bytes suitable for use as a nonce in cryptographic operations.
+ * This function is deterministic - the same input will produce the same nonce.
  */
-export function ed25519SigningKeyFromBytes(bytes: Uint8Array): Uint8Array;
+export function generateNonce(nonce_material: Uint8Array): Uint8Array;
 /**
- * WASM-exposed function to sign a message using Ed25519.
- * - `signing_key`: 32 bytes of signing key material
- * - `message`: Raw bytes to sign
- * Returns 64 bytes of signature material or throws JsError if signing fails.
+ * Hash data once using BLAKE3.
+ * - `data`: Raw bytes to hash
+ * Returns 32 bytes of hash output.
+ * This is the simplest way to compute a BLAKE3 hash of a single piece of data.
  */
-export function ed25519Sign(signing_key: Uint8Array, message: Uint8Array): Uint8Array;
+export function blake3HashOnce(data: Uint8Array): Uint8Array;
 /**
- * Generate a new Ed25519 signing key using secure random number generation.
- * Returns 32 bytes of raw key material suitable for use with other Ed25519 functions.
+ * Hash data once using BLAKE3 with a context prefix.
+ * - `data`: Raw bytes to hash
+ * - `context`: Context bytes to prefix to the data
+ * Returns 32 bytes of hash output.
+ * This is useful for domain separation - the same data hashed with different contexts will produce different outputs.
  */
-export function newEd25519SigningKey(): Uint8Array;
+export function blake3HashOnceWithContext(data: Uint8Array, context: Uint8Array): Uint8Array;
 /**
- * WASM-exposed function to validate and copy Ed25519 signature bytes.
- * - `bytes`: 64 bytes of signature material to validate
- * Returns the same 64 bytes if valid or throws JsError if invalid.
+ * WASM-exposed function to encrypt bytes with a key secret and nonce material.
+ * - `value`: The raw bytes to encrypt
+ * - `key_secret`: A base58-encoded key secret with "keySecret_z" prefix
+ * - `nonce_material`: Raw bytes used to generate the nonce
+ * Returns the encrypted bytes or throws a JsError if encryption fails.
  */
-export function ed25519SignatureFromBytes(bytes: Uint8Array): Uint8Array;
+export function encrypt(value: Uint8Array, key_secret: string, nonce_material: Uint8Array): Uint8Array;
 /**
- * WASM-exposed function to derive an Ed25519 verifying key from a signing key.
- * - `signing_key`: 32 bytes of signing key material
- * Returns 32 bytes of verifying key material or throws JsError if key is invalid.
+ * WASM-exposed function to decrypt bytes with a key secret and nonce material.
+ * - `ciphertext`: The encrypted bytes to decrypt
+ * - `key_secret`: A base58-encoded key secret with "keySecret_z" prefix
+ * - `nonce_material`: Raw bytes used to generate the nonce (must match encryption)
+ * Returns the decrypted bytes or throws a JsError if decryption fails.
  */
-export function ed25519VerifyingKey(signing_key: Uint8Array): Uint8Array;
+export function decrypt(ciphertext: Uint8Array, key_secret: string, nonce_material: Uint8Array): Uint8Array;
 /**
- * WASM-exposed function to sign a message with an Ed25519 signing key.
- * - `signing_key`: 32 bytes of signing key material
- * - `message`: Raw bytes to sign
- * Returns 64 bytes of signature material or throws JsError if signing fails.
+ * Generate a new X25519 private key using secure random number generation.
+ * Returns 32 bytes of raw key material suitable for use with other X25519 functions.
+ * This key can be reused for multiple Diffie-Hellman exchanges.
  */
-export function ed25519SigningKeySign(signing_key: Uint8Array, message: Uint8Array): Uint8Array;
+export function newX25519PrivateKey(): Uint8Array;
 /**
- * WASM-exposed function to validate and copy Ed25519 verifying key bytes.
- * - `bytes`: 32 bytes of verifying key material to validate
- * Returns the same 32 bytes if valid or throws JsError if invalid.
+ * WASM-exposed function to derive an X25519 public key from a private key.
+ * - `private_key`: 32 bytes of private key material
+ * Returns 32 bytes of public key material or throws JsError if key is invalid.
  */
-export function ed25519VerifyingKeyFromBytes(bytes: Uint8Array): Uint8Array;
+export function x25519PublicKey(private_key: Uint8Array): Uint8Array;
 /**
- * WASM-exposed function to verify an Ed25519 signature.
- * - `verifying_key`: 32 bytes of verifying key material
- * - `message`: Raw bytes that were signed
- * - `signature`: 64 bytes of signature material
- * Returns true if signature is valid, false otherwise, or throws JsError if verification fails.
+ * WASM-exposed function to perform X25519 Diffie-Hellman key exchange.
+ * - `private_key`: 32 bytes of private key material
+ * - `public_key`: 32 bytes of public key material
+ * Returns 32 bytes of shared secret material or throws JsError if key exchange fails.
  */
-export function ed25519Verify(verifying_key: Uint8Array, message: Uint8Array, signature: Uint8Array): boolean;
+export function x25519DiffieHellman(private_key: Uint8Array, public_key: Uint8Array): Uint8Array;
 /**
- * WASM-exposed function to derive a signer ID from a signing key.
- * - `secret`: Raw Ed25519 signing key bytes
- * Returns base58-encoded verifying key with "signer_z" prefix or throws JsError if derivation fails.
+ * WASM-exposed function to derive a sealer ID from a sealer secret.
+ * - `secret`: Raw bytes of the sealer secret
+ * Returns a base58-encoded sealer ID with "sealer_z" prefix or throws JsError if derivation fails.
  */
-export function getSignerId(secret: Uint8Array): string;
+export function getSealerId(secret: Uint8Array): string;
+/**
+ * WASM-exposed function for XSalsa20 encryption without authentication.
+ * - `key`: 32-byte key for encryption
+ * - `nonce_material`: Raw bytes used to generate a 24-byte nonce via BLAKE3
+ * - `plaintext`: Raw bytes to encrypt
+ * Returns the encrypted bytes or throws a JsError if encryption fails.
+ * Note: This function does not provide authentication. Use encrypt_xsalsa20_poly1305 for authenticated encryption.
+ */
+export function encryptXsalsa20(key: Uint8Array, nonce_material: Uint8Array, plaintext: Uint8Array): Uint8Array;
+/**
+ * WASM-exposed function for XSalsa20 decryption without authentication.
+ * - `key`: 32-byte key for decryption (must match encryption key)
+ * - `nonce_material`: Raw bytes used to generate a 24-byte nonce (must match encryption)
+ * - `ciphertext`: Encrypted bytes to decrypt
+ * Returns the decrypted bytes or throws a JsError if decryption fails.
+ * Note: This function does not provide authentication. Use decrypt_xsalsa20_poly1305 for authenticated decryption.
+ */
+export function decryptXsalsa20(key: Uint8Array, nonce_material: Uint8Array, ciphertext: Uint8Array): Uint8Array;
 /**
  * WASM-exposed function to sign a message using Ed25519.
  * - `message`: Raw bytes to sign
@@ -79,45 +103,21 @@ export function sign(message: Uint8Array, secret: Uint8Array): string;
  */
 export function verify(signature: Uint8Array, message: Uint8Array, id: Uint8Array): boolean;
 /**
- * Generate a 24-byte nonce from input material using BLAKE3.
- * - `nonce_material`: Raw bytes to derive the nonce from
- * Returns 24 bytes suitable for use as a nonce in cryptographic operations.
- * This function is deterministic - the same input will produce the same nonce.
- */
-export function generateNonce(nonce_material: Uint8Array): Uint8Array;
-/**
- * Hash data once using BLAKE3.
- * - `data`: Raw bytes to hash
- * Returns 32 bytes of hash output.
- * This is the simplest way to compute a BLAKE3 hash of a single piece of data.
- */
-export function blake3HashOnce(data: Uint8Array): Uint8Array;
-/**
- * Hash data once using BLAKE3 with a context prefix.
- * - `data`: Raw bytes to hash
- * - `context`: Context bytes to prefix to the data
- * Returns 32 bytes of hash output.
- * This is useful for domain separation - the same data hashed with different contexts will produce different outputs.
- */
-export function blake3HashOnceWithContext(data: Uint8Array, context: Uint8Array): Uint8Array;
-/**
- * WASM-exposed function for XSalsa20 decryption without authentication.
- * - `key`: 32-byte key for decryption (must match encryption key)
- * - `nonce_material`: Raw bytes used to generate a 24-byte nonce (must match encryption)
- * - `ciphertext`: Encrypted bytes to decrypt
- * Returns the decrypted bytes or throws a JsError if decryption fails.
- * Note: This function does not provide authentication. Use decrypt_xsalsa20_poly1305 for authenticated decryption.
+ * WASM-exposed function to derive a signer ID from a signing key.
+ * - `secret`: Raw Ed25519 signing key bytes
+ * Returns base58-encoded verifying key with "signer_z" prefix or throws JsError if derivation fails.
  */
-export function decryptXsalsa20(key: Uint8Array, nonce_material: Uint8Array, ciphertext: Uint8Array): Uint8Array;
+export function getSignerId(secret: Uint8Array): string;
 /**
- * WASM-exposed function for XSalsa20 encryption without authentication.
- * - `key`: 32-byte key for encryption
- * - `nonce_material`: Raw bytes used to generate a 24-byte nonce via BLAKE3
- * - `plaintext`: Raw bytes to encrypt
- * Returns the encrypted bytes or throws a JsError if encryption fails.
- * Note: This function does not provide authentication. Use encrypt_xsalsa20_poly1305 for authenticated encryption.
+ * WASM-exposed function for sealing a message using X25519 + XSalsa20-Poly1305.
+ * Provides authenticated encryption with perfect forward secrecy.
+ * - `message`: Raw bytes to seal
+ * - `sender_secret`: Base58-encoded sender's private key with "sealerSecret_z" prefix
+ * - `recipient_id`: Base58-encoded recipient's public key with "sealer_z" prefix
+ * - `nonce_material`: Raw bytes used to generate the nonce
+ * Returns sealed bytes or throws JsError if sealing fails.
  */
-export function encryptXsalsa20(key: Uint8Array, nonce_material: Uint8Array, plaintext: Uint8Array): Uint8Array;
+export function seal(message: Uint8Array, sender_secret: string, recipient_id: string, nonce_material: Uint8Array): Uint8Array;
 /**
  * WASM-exposed function for unsealing a message using X25519 + XSalsa20-Poly1305.
  * Provides authenticated decryption with perfect forward secrecy.
@@ -129,135 +129,231 @@ export function encryptXsalsa20(key: Uint8Array, nonce_material: Uint8Array, pla
  */
 export function unseal(sealed_message: Uint8Array, recipient_secret: string, sender_id: string, nonce_material: Uint8Array): Uint8Array;
 /**
- * WASM-exposed function for sealing a message using X25519 + XSalsa20-Poly1305.
- * Provides authenticated encryption with perfect forward secrecy.
+ * WASM-exposed function for sealing a message for a group (anonymous box pattern).
+ * Uses an ephemeral key pair, so no sender authentication is provided.
  * - `message`: Raw bytes to seal
- * - `sender_secret`: Base58-encoded sender's private key with "sealerSecret_z" prefix
- * - `recipient_id`: Base58-encoded recipient's public key with "sealer_z" prefix
+ * - `recipient_id`: Base58-encoded recipient's public key with "sealer_z" prefix (the group's sealer)
  * - `nonce_material`: Raw bytes used to generate the nonce
- * Returns sealed bytes or throws JsError if sealing fails.
+ * Returns ephemeral_public_key (32 bytes) || ciphertext, or throws JsError if sealing fails.
  */
-export function seal(message: Uint8Array, sender_secret: string, recipient_id: string, nonce_material: Uint8Array): Uint8Array;
+export function sealForGroup(message: Uint8Array, recipient_id: string, nonce_material: Uint8Array): Uint8Array;
 /**
- * WASM-exposed function to encrypt bytes with a key secret and nonce material.
- * - `value`: The raw bytes to encrypt
- * - `key_secret`: A base58-encoded key secret with "keySecret_z" prefix
- * - `nonce_material`: Raw bytes used to generate the nonce
- * Returns the encrypted bytes or throws a JsError if encryption fails.
+ * WASM-exposed function for unsealing a message sealed for a group (anonymous box pattern).
+ * Extracts the ephemeral public key and decrypts the message.
+ * - `sealed_message`: ephemeral_public_key (32 bytes) || ciphertext
+ * - `recipient_secret`: Base58-encoded recipient's private key with "sealerSecret_z" prefix
+ * - `nonce_material`: Raw bytes used to generate the nonce (must match sealing)
+ * Returns unsealed bytes or throws JsError if unsealing fails.
  */
-export function encrypt(value: Uint8Array, key_secret: string, nonce_material: Uint8Array): Uint8Array;
+export function unsealForGroup(sealed_message: Uint8Array, recipient_secret: string, nonce_material: Uint8Array): Uint8Array;
 /**
- * WASM-exposed function to decrypt bytes with a key secret and nonce material.
- * - `ciphertext`: The encrypted bytes to decrypt
- * - `key_secret`: A base58-encoded key secret with "keySecret_z" prefix
- * - `nonce_material`: Raw bytes used to generate the nonce (must match encryption)
- * Returns the decrypted bytes or throws a JsError if decryption fails.
+ * Generate a new Ed25519 signing key using secure random number generation.
+ * Returns 32 bytes of raw key material suitable for use with other Ed25519 functions.
  */
-export function decrypt(ciphertext: Uint8Array, key_secret: string, nonce_material: Uint8Array): Uint8Array;
+export function newEd25519SigningKey(): Uint8Array;
 /**
- * WASM-exposed function to derive an X25519 public key from a private key.
- * - `private_key`: 32 bytes of private key material
+ * WASM-exposed function to derive an Ed25519 verifying key from a signing key.
+ * - `signing_key`: 32 bytes of signing key material
+ * Returns 32 bytes of verifying key material or throws JsError if key is invalid.
+ */
+export function ed25519VerifyingKey(signing_key: Uint8Array): Uint8Array;
+/**
+ * WASM-exposed function to sign a message using Ed25519.
+ * - `signing_key`: 32 bytes of signing key material
+ * - `message`: Raw bytes to sign
+ * Returns 64 bytes of signature material or throws JsError if signing fails.
+ */
+export function ed25519Sign(signing_key: Uint8Array, message: Uint8Array): Uint8Array;
+/**
+ * WASM-exposed function to verify an Ed25519 signature.
+ * - `verifying_key`: 32 bytes of verifying key material
+ * - `message`: Raw bytes that were signed
+ * - `signature`: 64 bytes of signature material
+ * Returns true if signature is valid, false otherwise, or throws JsError if verification fails.
+ */
+export function ed25519Verify(verifying_key: Uint8Array, message: Uint8Array, signature: Uint8Array): boolean;
+/**
+ * WASM-exposed function to validate and copy Ed25519 signing key bytes.
+ * - `bytes`: 32 bytes of signing key material to validate
+ * Returns the same 32 bytes if valid or throws JsError if invalid.
+ */
+export function ed25519SigningKeyFromBytes(bytes: Uint8Array): Uint8Array;
+/**
+ * WASM-exposed function to derive the public key from an Ed25519 signing key.
+ * - `signing_key`: 32 bytes of signing key material
  * Returns 32 bytes of public key material or throws JsError if key is invalid.
  */
-export function x25519PublicKey(private_key: Uint8Array): Uint8Array;
+export function ed25519SigningKeyToPublic(signing_key: Uint8Array): Uint8Array;
 /**
- * WASM-exposed function to perform X25519 Diffie-Hellman key exchange.
- * - `private_key`: 32 bytes of private key material
- * - `public_key`: 32 bytes of public key material
- * Returns 32 bytes of shared secret material or throws JsError if key exchange fails.
+ * WASM-exposed function to sign a message with an Ed25519 signing key.
+ * - `signing_key`: 32 bytes of signing key material
+ * - `message`: Raw bytes to sign
+ * Returns 64 bytes of signature material or throws JsError if signing fails.
  */
-export function x25519DiffieHellman(private_key: Uint8Array, public_key: Uint8Array): Uint8Array;
+export function ed25519SigningKeySign(signing_key: Uint8Array, message: Uint8Array): Uint8Array;
 /**
- * WASM-exposed function to derive a sealer ID from a sealer secret.
- * - `secret`: Raw bytes of the sealer secret
- * Returns a base58-encoded sealer ID with "sealer_z" prefix or throws JsError if derivation fails.
+ * WASM-exposed function to validate and copy Ed25519 verifying key bytes.
+ * - `bytes`: 32 bytes of verifying key material to validate
+ * Returns the same 32 bytes if valid or throws JsError if invalid.
  */
-export function getSealerId(secret: Uint8Array): string;
+export function ed25519VerifyingKeyFromBytes(bytes: Uint8Array): Uint8Array;
 /**
- * Generate a new X25519 private key using secure random number generation.
- * Returns 32 bytes of raw key material suitable for use with other X25519 functions.
- * This key can be reused for multiple Diffie-Hellman exchanges.
+ * WASM-exposed function to validate and copy Ed25519 signature bytes.
+ * - `bytes`: 64 bytes of signature material to validate
+ * Returns the same 64 bytes if valid or throws JsError if invalid.
  */
-export function newX25519PrivateKey(): Uint8Array;
+export function ed25519SignatureFromBytes(bytes: Uint8Array): Uint8Array;
 export class Blake3Hasher {
   free(): void;
   constructor();
-  clone(): Blake3Hasher;
   update(data: Uint8Array): void;
   finalize(): Uint8Array;
+  clone(): Blake3Hasher;
 }
-export class SessionLog {
+export class SessionMap {
   free(): void;
   /**
-   * Commit pending transactions to the main state.
-   * If skip_validate is false, validates the signature first.
-   * If skip_validate is true, commits without validation.
+   * Create a new SessionMap for a CoValue
+   * `max_tx_size` is the threshold for recording in-between signatures (default: 100KB)
+   * Create a new SessionMap for a CoValue.
+   * Validates the header and verifies that `co_id` matches the hash of the header.
+   * `max_tx_size` is the threshold for recording in-between signatures (default: 100KB)
+   * `skip_verify` if true, skips uniqueness and ID validation (for trusted storage shards)
+   */
+  constructor(co_id: string, header_json: string, max_tx_size?: number | null, skip_verify?: boolean | null);
+  /**
+   * Get the header as JSON
+   */
+  getHeader(): string;
+  /**
+   * Add transactions to a session
+   */
+  addTransactions(session_id: string, signer_id: string | null | undefined, transactions_json: string, signature: string, skip_verify: boolean): void;
+  /**
+   * Create new private transaction (for local writes)
+   * Returns JSON: { signature: string, transaction: Transaction }
+   */
+  makeNewPrivateTransaction(session_id: string, signer_secret: string, changes_json: string, key_id: string, key_secret: string, meta_json: string | null | undefined, made_at: number): string;
+  /**
+   * Create new trusting transaction (for local writes)
+   * Returns JSON: { signature: string, transaction: Transaction }
+   */
+  makeNewTrustingTransaction(session_id: string, signer_secret: string, changes_json: string, meta_json: string | null | undefined, made_at: number): string;
+  /**
+   * Get all session IDs as native array
+   */
+  getSessionIds(): string[];
+  /**
+   * Get transaction count for a session (returns -1 if session not found)
+   */
+  getTransactionCount(session_id: string): number;
+  /**
+   * Get single transaction by index as JSON string (returns undefined if not found)
+   */
+  getTransaction(session_id: string, tx_index: number): string | undefined;
+  /**
+   * Get transactions for a session from index as JSON strings (returns undefined if session not found)
+   */
+  getSessionTransactions(session_id: string, from_index: number): string[] | undefined;
+  /**
+   * Get last signature for a session (returns undefined if session not found)
+   */
+  getLastSignature(session_id: string): string | undefined;
+  /**
+   * Get signature after specific transaction index
+   */
+  getSignatureAfter(session_id: string, tx_index: number): string | undefined;
+  /**
+   * Get the last signature checkpoint index (-1 if no checkpoints, undefined if session not found)
+   */
+  getLastSignatureCheckpoint(session_id: string): number | undefined;
+  /**
+   * Get the known state as a native JavaScript object
+   */
+  getKnownState(): any;
+  /**
+   * Get the known state with streaming as a native JavaScript object
+   */
+  getKnownStateWithStreaming(): any;
+  /**
+   * Set streaming known state
+   */
+  setStreamingKnownState(streaming_json: string): void;
+  /**
+   * Mark this CoValue as deleted
+   */
+  markAsDeleted(): void;
+  /**
+   * Check if this CoValue is deleted
    */
-  commitTransactions(new_signature_str: string, skip_validate: boolean): void;
-  addNewPrivateTransaction(changes_json: string, signer_secret: string, encryption_key: string, key_id: string, made_at: number, meta?: string | null): string;
-  addNewTrustingTransaction(changes_json: string, signer_secret: string, made_at: number, meta?: string | null): string;
+  isDeleted(): boolean;
   /**
-   * Add an existing private transaction to the staging area.
-   * The transaction is NOT committed until commitTransactions() succeeds.
-   * Note: made_at uses f64 because JavaScript's number type is f64.
+   * Decrypt transaction changes
    */
-  addExistingPrivateTransaction(encrypted_changes: string, key_used: string, made_at: number, meta?: string | null): void;
+  decryptTransaction(session_id: string, tx_index: number, key_secret: string): string | undefined;
   /**
-   * Add an existing trusting transaction to the staging area.
-   * The transaction is NOT committed until commitTransactions() succeeds.
-   * Note: made_at uses f64 because JavaScript's number type is f64.
+   * Decrypt transaction meta
    */
-  addExistingTrustingTransaction(changes: string, made_at: number, meta?: string | null): void;
-  decryptNextTransactionMetaJson(tx_index: number, encryption_key: string): string | undefined;
-  decryptNextTransactionChangesJson(tx_index: number, encryption_key: string): string;
-  constructor(co_id: string, session_id: string, signer_id?: string | null);
-  clone(): SessionLog;
+  decryptTransactionMeta(session_id: string, tx_index: number, key_secret: string): string | undefined;
 }
 
 export type InitInput = RequestInfo | URL | Response | BufferSource | WebAssembly.Module;
 
 export interface InitOutput {
   readonly memory: WebAssembly.Memory;
-  readonly __wbg_sessionlog_free: (a: number, b: number) => void;
-  readonly sessionlog_addExistingPrivateTransaction: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number) => [number, number];
-  readonly sessionlog_addExistingTrustingTransaction: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number];
-  readonly sessionlog_addNewPrivateTransaction: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number) => [number, number, number, number];
-  readonly sessionlog_addNewTrustingTransaction: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number) => [number, number, number, number];
-  readonly sessionlog_clone: (a: number) => number;
-  readonly sessionlog_commitTransactions: (a: number, b: number, c: number, d: number) => [number, number];
-  readonly sessionlog_decryptNextTransactionChangesJson: (a: number, b: number, c: number, d: number) => [number, number, number, number];
-  readonly sessionlog_decryptNextTransactionMetaJson: (a: number, b: number, c: number, d: number) => [number, number, number, number];
-  readonly sessionlog_new: (a: number, b: number, c: number, d: number, e: number, f: number) => number;
-  readonly ed25519Sign: (a: number, b: number, c: number, d: number) => [number, number, number, number];
-  readonly ed25519SignatureFromBytes: (a: number, b: number) => [number, number, number, number];
-  readonly ed25519SigningKeyFromBytes: (a: number, b: number) => [number, number, number, number];
-  readonly ed25519SigningKeyToPublic: (a: number, b: number) => [number, number, number, number];
-  readonly ed25519Verify: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number];
-  readonly ed25519VerifyingKey: (a: number, b: number) => [number, number, number, number];
-  readonly ed25519VerifyingKeyFromBytes: (a: number, b: number) => [number, number, number, number];
-  readonly newEd25519SigningKey: () => [number, number];
-  readonly ed25519SigningKeySign: (a: number, b: number, c: number, d: number) => [number, number, number, number];
-  readonly getSignerId: (a: number, b: number) => [number, number, number, number];
-  readonly sign: (a: number, b: number, c: number, d: number) => [number, number, number, number];
-  readonly verify: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number];
-  readonly __wbg_blake3hasher_free: (a: number, b: number) => void;
+  readonly __wbg_sessionmap_free: (a: number, b: number) => void;
+  readonly sessionmap_new: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number];
+  readonly sessionmap_getHeader: (a: number) => [number, number];
+  readonly sessionmap_addTransactions: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number) => [number, number];
+  readonly sessionmap_makeNewPrivateTransaction: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: number, n: number) => [number, number, number, number];
+  readonly sessionmap_makeNewTrustingTransaction: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number) => [number, number, number, number];
+  readonly sessionmap_getSessionIds: (a: number) => [number, number];
+  readonly sessionmap_getTransactionCount: (a: number, b: number, c: number) => number;
+  readonly sessionmap_getTransaction: (a: number, b: number, c: number, d: number) => [number, number];
+  readonly sessionmap_getSessionTransactions: (a: number, b: number, c: number, d: number) => [number, number];
+  readonly sessionmap_getLastSignature: (a: number, b: number, c: number) => [number, number];
+  readonly sessionmap_getSignatureAfter: (a: number, b: number, c: number, d: number) => [number, number];
+  readonly sessionmap_getLastSignatureCheckpoint: (a: number, b: number, c: number) => number;
+  readonly sessionmap_getKnownState: (a: number) => any;
+  readonly sessionmap_getKnownStateWithStreaming: (a: number) => any;
+  readonly sessionmap_setStreamingKnownState: (a: number, b: number, c: number) => [number, number];
+  readonly sessionmap_markAsDeleted: (a: number) => void;
+  readonly sessionmap_isDeleted: (a: number) => number;
+  readonly sessionmap_decryptTransaction: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
+  readonly sessionmap_decryptTransactionMeta: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
+  readonly shortHash: (a: number, b: number) => [number, number];
+  readonly generateNonce: (a: number, b: number) => [number, number];
   readonly blake3HashOnce: (a: number, b: number) => [number, number];
   readonly blake3HashOnceWithContext: (a: number, b: number, c: number, d: number) => [number, number];
-  readonly blake3hasher_clone: (a: number) => number;
-  readonly blake3hasher_finalize: (a: number) => [number, number];
+  readonly __wbg_blake3hasher_free: (a: number, b: number) => void;
   readonly blake3hasher_new: () => number;
   readonly blake3hasher_update: (a: number, b: number, c: number) => void;
-  readonly decryptXsalsa20: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
-  readonly encryptXsalsa20: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
-  readonly generateNonce: (a: number, b: number) => [number, number];
-  readonly decrypt: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
+  readonly blake3hasher_finalize: (a: number) => [number, number];
+  readonly blake3hasher_clone: (a: number) => number;
   readonly encrypt: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
-  readonly seal: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number) => [number, number, number, number];
-  readonly unseal: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number) => [number, number, number, number];
-  readonly getSealerId: (a: number, b: number) => [number, number, number, number];
+  readonly decrypt: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
   readonly newX25519PrivateKey: () => [number, number];
-  readonly x25519DiffieHellman: (a: number, b: number, c: number, d: number) => [number, number, number, number];
   readonly x25519PublicKey: (a: number, b: number) => [number, number, number, number];
+  readonly x25519DiffieHellman: (a: number, b: number, c: number, d: number) => [number, number, number, number];
+  readonly getSealerId: (a: number, b: number) => [number, number, number, number];
+  readonly encryptXsalsa20: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
+  readonly decryptXsalsa20: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
+  readonly sign: (a: number, b: number, c: number, d: number) => [number, number, number, number];
+  readonly verify: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number];
+  readonly getSignerId: (a: number, b: number) => [number, number, number, number];
+  readonly seal: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number) => [number, number, number, number];
+  readonly unseal: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number) => [number, number, number, number];
+  readonly sealForGroup: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
+  readonly unsealForGroup: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number, number];
+  readonly newEd25519SigningKey: () => [number, number];
+  readonly ed25519VerifyingKey: (a: number, b: number) => [number, number, number, number];
+  readonly ed25519Sign: (a: number, b: number, c: number, d: number) => [number, number, number, number];
+  readonly ed25519Verify: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number];
+  readonly ed25519SigningKeyFromBytes: (a: number, b: number) => [number, number, number, number];
+  readonly ed25519SigningKeyToPublic: (a: number, b: number) => [number, number, number, number];
+  readonly ed25519VerifyingKeyFromBytes: (a: number, b: number) => [number, number, number, number];
+  readonly ed25519SignatureFromBytes: (a: number, b: number) => [number, number, number, number];
+  readonly ed25519SigningKeySign: (a: number, b: number, c: number, d: number) => [number, number, number, number];
   readonly __wbindgen_malloc: (a: number, b: number) => number;
   readonly __wbindgen_realloc: (a: number, b: number, c: number, d: number) => number;
   readonly __wbindgen_exn_store: (a: number) => void;
@@ -265,6 +361,7 @@ export interface InitOutput {
   readonly __wbindgen_export_4: WebAssembly.Table;
   readonly __externref_table_dealloc: (a: number) => void;
   readonly __wbindgen_free: (a: number, b: number, c: number) => void;
+  readonly __externref_drop_slice: (a: number, b: number) => void;
   readonly __wbindgen_start: () => void;
 }