cojson 0.0.7 → 0.0.9

package/dist/crypto.js

@@ -0,0 +1,156 @@
+import { ed25519, x25519 } from "@noble/curves/ed25519";
+import { xsalsa20_poly1305, xsalsa20 } from "@noble/ciphers/salsa";
+import { base58, base64url } from "@scure/base";
+import stableStringify from "fast-json-stable-stringify";
+import { blake3 } from "@noble/hashes/blake3";
+import { randomBytes } from "@noble/ciphers/webcrypto/utils";
+const textEncoder = new TextEncoder();
+const textDecoder = new TextDecoder();
+export function newRandomSignatory() {
+    return `signatorySecret_z${base58.encode(ed25519.utils.randomPrivateKey())}`;
+}
+export function signatorySecretToBytes(secret) {
+    return base58.decode(secret.substring("signatorySecret_z".length));
+}
+export function signatorySecretFromBytes(bytes) {
+    return `signatorySecret_z${base58.encode(bytes)}`;
+}
+export function getSignatoryID(secret) {
+    return `signatory_z${base58.encode(ed25519.getPublicKey(base58.decode(secret.substring("signatorySecret_z".length))))}`;
+}
+export function sign(secret, message) {
+    const signature = ed25519.sign(textEncoder.encode(stableStringify(message)), base58.decode(secret.substring("signatorySecret_z".length)));
+    return `signature_z${base58.encode(signature)}`;
+}
+export function verify(signature, message, id) {
+    return ed25519.verify(base58.decode(signature.substring("signature_z".length)), textEncoder.encode(stableStringify(message)), base58.decode(id.substring("signatory_z".length)));
+}
+export function newRandomRecipient() {
+    return `recipientSecret_z${base58.encode(x25519.utils.randomPrivateKey())}`;
+}
+export function recipientSecretToBytes(secret) {
+    return base58.decode(secret.substring("recipientSecret_z".length));
+}
+export function recipientSecretFromBytes(bytes) {
+    return `recipientSecret_z${base58.encode(bytes)}`;
+}
+export function getRecipientID(secret) {
+    return `recipient_z${base58.encode(x25519.getPublicKey(base58.decode(secret.substring("recipientSecret_z".length))))}`;
+}
+export function seal(message, from, to, nOnceMaterial) {
+    const nOnce = blake3(textEncoder.encode(stableStringify(nOnceMaterial))).slice(0, 24);
+    const recipientsSorted = Array.from(to).sort();
+    const recipientPubs = recipientsSorted.map((recipient) => {
+        return base58.decode(recipient.substring("recipient_z".length));
+    });
+    const senderPriv = base58.decode(from.substring("recipientSecret_z".length));
+    const plaintext = textEncoder.encode(stableStringify(message));
+    const sealedSet = {};
+    for (let i = 0; i < recipientsSorted.length; i++) {
+        const recipient = recipientsSorted[i];
+        const sharedSecret = x25519.getSharedSecret(senderPriv, recipientPubs[i]);
+        const sealedBytes = xsalsa20_poly1305(sharedSecret, nOnce).encrypt(plaintext);
+        sealedSet[recipient] = `sealed_U${base64url.encode(sealedBytes)}`;
+    }
+    return sealedSet;
+}
+export function openAs(sealedSet, recipient, from, nOnceMaterial) {
+    const nOnce = blake3(textEncoder.encode(stableStringify(nOnceMaterial))).slice(0, 24);
+    const recipientPriv = base58.decode(recipient.substring("recipientSecret_z".length));
+    const senderPub = base58.decode(from.substring("recipient_z".length));
+    const sealed = sealedSet[getRecipientID(recipient)];
+    if (!sealed) {
+        return undefined;
+    }
+    const sealedBytes = base64url.decode(sealed.substring("sealed_U".length));
+    const sharedSecret = x25519.getSharedSecret(recipientPriv, senderPub);
+    const plaintext = xsalsa20_poly1305(sharedSecret, nOnce).decrypt(sealedBytes);
+    try {
+        return JSON.parse(textDecoder.decode(plaintext));
+    }
+    catch (e) {
+        console.error("Failed to decrypt/parse sealed message", e);
+        return undefined;
+    }
+}
+export function secureHash(value) {
+    return `hash_z${base58.encode(blake3(textEncoder.encode(stableStringify(value))))}`;
+}
+export class StreamingHash {
+    constructor(fromClone) {
+        this.state = fromClone || blake3.create({});
+    }
+    update(value) {
+        this.state.update(textEncoder.encode(stableStringify(value)));
+    }
+    digest() {
+        const hash = this.state.digest();
+        return `hash_z${base58.encode(hash)}`;
+    }
+    clone() {
+        return new StreamingHash(this.state.clone());
+    }
+}
+export function shortHash(value) {
+    return `shortHash_z${base58.encode(blake3(textEncoder.encode(stableStringify(value))).slice(0, 19))}`;
+}
+export function newRandomKeySecret() {
+    return {
+        secret: `keySecret_z${base58.encode(randomBytes(32))}`,
+        id: `key_z${base58.encode(randomBytes(12))}`,
+    };
+}
+function encrypt(value, keySecret, nOnceMaterial) {
+    const keySecretBytes = base58.decode(keySecret.substring("keySecret_z".length));
+    const nOnce = blake3(textEncoder.encode(stableStringify(nOnceMaterial))).slice(0, 24);
+    const plaintext = textEncoder.encode(stableStringify(value));
+    const ciphertext = xsalsa20(keySecretBytes, nOnce, plaintext);
+    return `encrypted_U${base64url.encode(ciphertext)}`;
+}
+export function encryptForTransaction(value, keySecret, nOnceMaterial) {
+    return encrypt(value, keySecret, nOnceMaterial);
+}
+export function sealKeySecret(keys) {
+    const nOnceMaterial = {
+        sealed: keys.toSeal.id,
+        sealing: keys.sealing.id,
+    };
+    return {
+        sealed: keys.toSeal.id,
+        sealing: keys.sealing.id,
+        encrypted: encrypt(keys.toSeal.secret, keys.sealing.secret, nOnceMaterial),
+    };
+}
+function decrypt(encrypted, keySecret, nOnceMaterial) {
+    const keySecretBytes = base58.decode(keySecret.substring("keySecret_z".length));
+    const nOnce = blake3(textEncoder.encode(stableStringify(nOnceMaterial))).slice(0, 24);
+    const ciphertext = base64url.decode(encrypted.substring("encrypted_U".length));
+    const plaintext = xsalsa20(keySecretBytes, nOnce, ciphertext);
+    try {
+        return JSON.parse(textDecoder.decode(plaintext));
+    }
+    catch (e) {
+        return undefined;
+    }
+}
+export function decryptForTransaction(encrypted, keySecret, nOnceMaterial) {
+    return decrypt(encrypted, keySecret, nOnceMaterial);
+}
+export function unsealKeySecret(sealedInfo, sealingSecret) {
+    const nOnceMaterial = {
+        sealed: sealedInfo.sealed,
+        sealing: sealedInfo.sealing,
+    };
+    return decrypt(sealedInfo.encrypted, sealingSecret, nOnceMaterial);
+}
+export function uniquenessForHeader() {
+    return `z${base58.encode(randomBytes(12))}`;
+}
+export function createdNowUnique() {
+    const createdAt = (new Date()).toISOString();
+    return {
+        createdAt,
+        uniqueness: uniquenessForHeader(),
+    };
+}
+//# sourceMappingURL=crypto.js.map

package/dist/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../src/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEnE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,eAAe,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAW7D,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AACtC,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AAEtC,MAAM,UAAU,kBAAkB;IAC9B,OAAO,oBAAoB,MAAM,CAAC,MAAM,CACpC,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,CACnC,EAAE,CAAC;AACR,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAuB;IAC1D,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAiB;IACtD,OAAO,oBAAoB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAuB;IAClD,OAAO,cAAc,MAAM,CAAC,MAAM,CAC9B,OAAO,CAAC,YAAY,CAChB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAC9D,CACJ,EAAE,CAAC;AACR,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,MAAuB,EAAE,OAAkB;IAC5D,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAC1B,WAAW,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,EAC5C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAC9D,CAAC;IACF,OAAO,cAAc,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,MAAM,CAClB,SAAoB,EACpB,OAAkB,EAClB,EAAe;IAEf,OAAO,OAAO,CAAC,MAAM,CACjB,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,EACxD,WAAW,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,EAC5C,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CACpD,CAAC;AACN,CAAC;AAED,MAAM,UAAU,kBAAkB;IAC9B,OAAO,oBAAoB,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,EAAE,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAuB;IAC1D,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,KAAiB;IACtD,OAAO,oBAAoB,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAuB;IAClD,OAAO,cAAc,MAAM,CAAC,MAAM,CAC9B,MAAM,CAAC,YAAY,CACf,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAC9D,CACJ,EAAE,CAAC;AACR,CAAC;AAMD,MAAM,UAAU,IAAI,CAChB,OAAU,EACV,IAAqB,EACrB,EAAoB,EACpB,aAAsD;IAEtD,MAAM,KAAK,GAAG,MAAM,CAChB,WAAW,CAAC,MAAM,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC,CACrD,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEf,MAAM,gBAAgB,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,MAAM,aAAa,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE;QACrD,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAC5B,IAAI,CAAC,SAAS,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAC7C,CAAC;IAEF,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;IAE/D,MAAM,SAAS,GAAiB,EAAE,CAAC;IAEnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,gBAAgB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QAC9C,MAAM,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAE,CAAC;QACvC,MAAM,YAAY,GAAG,MAAM,CAAC,eAAe,CACvC,UAAU,EACV,aAAa,CAAC,CAAC,CAAE,CACpB,CAAC;QAEF,MAAM,WAAW,GAAG,iBAAiB,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,OAAO,CAC9D,SAAS,CACZ,CAAC;QAEF,SAAS,CAAC,SAAS,CAAC,GAAG,WAAW,SAAS,CAAC,MAAM,CAC9C,WAAW,CACd,EAAe,CAAC;KACpB;IAED,OAAO,SAAS,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,MAAM,CAClB,SAAuB,EACvB,SAA0B,EAC1B,IAAiB,EACjB,aAAsD;IAEtD,MAAM,KAAK,GAAG,MAAM,CAChB,WAAW,CAAC,MAAM,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC,CACrD,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEf,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAC/B,SAAS,CAAC,SAAS,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAClD,CAAC;IAEF,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;IAEtE,MAAM,MAAM,GAAG,SAAS,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;IAEpD,IAAI,CAAC,MAAM,EAAE;QACT,OAAO,SAAS,CAAC;KACpB;IAED,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IAE1E,MAAM,YAAY,GAAG,MAAM,CAAC,eAAe,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IAEtE,MAAM,SAAS,GAAG,iBAAiB,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,OAAO,CAC5D,WAAW,CACd,CAAC;IAEF,IAAI;QACA,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;KACpD;IAAC,OAAO,CAAC,EAAE;QACR,OAAO,CAAC,KAAK,CAAC,wCAAwC,EAAE,CAAC,CAAC,CAAC;QAC3D,OAAO,SAAS,CAAC;KACpB;AACL,CAAC;AAID,MAAM,UAAU,UAAU,CAAC,KAAgB;IACvC,OAAO,SAAS,MAAM,CAAC,MAAM,CACzB,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CACrD,EAAE,CAAC;AACR,CAAC;AAED,MAAM,OAAO,aAAa;IAGtB,YAAY,SAA4C;QACpD,IAAI,CAAC,KAAK,GAAG,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,CAAC,KAAgB;QACnB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,MAAM;QACF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QACjC,OAAO,SAAS,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;IAC1C,CAAC;IAED,KAAK;QACD,OAAO,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;IACjD,CAAC;CACJ;AAID,MAAM,UAAU,SAAS,CAAC,KAAgB;IACtC,OAAO,cAAc,MAAM,CAAC,MAAM,CAC9B,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAClE,EAAE,CAAC;AACR,CAAC;AAUD,MAAM,UAAU,kBAAkB;IAC9B,OAAO;QACH,MAAM,EAAE,cAAc,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,EAAE;QACtD,EAAE,EAAE,QAAQ,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,EAAE;KAC/C,CAAC;AACN,CAAC;AAED,SAAS,OAAO,CACZ,KAAQ,EACR,SAAoB,EACpB,aAAgB;IAEhB,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAChC,SAAS,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CAC5C,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,CAChB,WAAW,CAAC,MAAM,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC,CACrD,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEf,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7D,MAAM,UAAU,GAAG,QAAQ,CAAC,cAAc,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;IAC9D,OAAO,cAAc,SAAS,CAAC,MAAM,CAAC,UAAU,CAAC,EAAqB,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,qBAAqB,CACjC,KAAQ,EACR,SAAoB,EACpB,aAAsD;IAEtD,OAAO,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,IAG7B;IAKG,MAAM,aAAa,GAAG;QAClB,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;QACtB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;KAC3B,CAAC;IAEF,OAAO;QACH,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE;QACtB,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE;QACxB,SAAS,EAAE,OAAO,CACd,IAAI,CAAC,MAAM,CAAC,MAAM,EAClB,IAAI,CAAC,OAAO,CAAC,MAAM,EACnB,aAAa,CAChB;KACJ,CAAC;AACN,CAAC;AAED,SAAS,OAAO,CACZ,SAA0B,EAC1B,SAAoB,EACpB,aAAgB;IAEhB,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAChC,SAAS,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CAC5C,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,CAChB,WAAW,CAAC,MAAM,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC,CACrD,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEf,MAAM,UAAU,GAAG,SAAS,CAAC,MAAM,CAC/B,SAAS,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CAC5C,CAAC;IACF,MAAM,SAAS,GAAG,QAAQ,CAAC,cAAc,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IAE9D,IAAI;QACA,OAAO,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;KACpD;IAAC,OAAO,CAAC,EAAE;QACR,OAAO,SAAS,CAAC;KACpB;AACL,CAAC;AAED,MAAM,UAAU,qBAAqB,CACjC,SAAgE,EAChE,SAAoB,EACpB,aAAsD;IAEtD,OAAO,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,UAAU,eAAe,CAC3B,UAIC,EACD,aAAwB;IAExB,MAAM,aAAa,GAAG;QAClB,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,OAAO,EAAE,UAAU,CAAC,OAAO;KAC9B,CAAC;IAEF,OAAO,OAAO,CAAC,UAAU,CAAC,SAAS,EAAE,aAAa,EAAE,aAAa,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,mBAAmB;IAC/B,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC5B,MAAM,SAAS,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAkB,CAAC;IAC7D,OAAO;QACH,SAAS;QACT,UAAU,EAAE,mBAAmB,EAAE;KACpC,CAAA;AACL,CAAC"}

package/dist/crypto.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/crypto.test.js

@@ -0,0 +1,115 @@
+import { getRecipientID, getSignatoryID, secureHash, newRandomRecipient, newRandomSignatory, seal, sign, openAs, verify, shortHash, newRandomKeySecret, encryptForTransaction, decryptForTransaction, sealKeySecret, unsealKeySecret, } from './crypto.js';
+import { base58, base64url } from "@scure/base";
+import { x25519 } from "@noble/curves/ed25519";
+import { xsalsa20_poly1305 } from "@noble/ciphers/salsa";
+import { blake3 } from "@noble/hashes/blake3";
+import stableStringify from "fast-json-stable-stringify";
+test("Signatures round-trip and use stable stringify", () => {
+    const data = { b: "world", a: "hello" };
+    const signatory = newRandomSignatory();
+    const signature = sign(signatory, data);
+    expect(signature).toMatch(/^signature_z/);
+    expect(verify(signature, { a: "hello", b: "world" }, getSignatoryID(signatory))).toBe(true);
+});
+test("Invalid signatures don't verify", () => {
+    const data = { b: "world", a: "hello" };
+    const signatory = newRandomSignatory();
+    const signatory2 = newRandomSignatory();
+    const wrongSignature = sign(signatory2, data);
+    expect(verify(wrongSignature, data, getSignatoryID(signatory))).toBe(false);
+});
+test("Sealing round-trips, but invalid receiver can't unseal", () => {
+    const data = { b: "world", a: "hello" };
+    const sender = newRandomRecipient();
+    const recipient1 = newRandomRecipient();
+    const recipient2 = newRandomRecipient();
+    const recipient3 = newRandomRecipient();
+    const nOnceMaterial = {
+        in: "co_zTEST",
+        tx: { sessionID: "co_agent_zTEST_session_zTEST", txIndex: 0 },
+    };
+    const sealed = seal(data, sender, new Set([getRecipientID(recipient1), getRecipientID(recipient2)]), nOnceMaterial);
+    expect(sealed[getRecipientID(recipient1)]).toMatch(/^sealed_U/);
+    expect(sealed[getRecipientID(recipient2)]).toMatch(/^sealed_U/);
+    expect(openAs(sealed, recipient1, getRecipientID(sender), nOnceMaterial)).toEqual(data);
+    expect(openAs(sealed, recipient2, getRecipientID(sender), nOnceMaterial)).toEqual(data);
+    expect(openAs(sealed, recipient3, getRecipientID(sender), nOnceMaterial)).toBeUndefined();
+    // trying with wrong recipient secret, by hand
+    const nOnce = blake3(new TextEncoder().encode(stableStringify(nOnceMaterial))).slice(0, 24);
+    const recipient3priv = base58.decode(recipient3.substring("recipientSecret_z".length));
+    const senderPub = base58.decode(getRecipientID(sender).substring("recipient_z".length));
+    const sealedBytes = base64url.decode(sealed[getRecipientID(recipient1)].substring("sealed_U".length));
+    const sharedSecret = x25519.getSharedSecret(recipient3priv, senderPub);
+    expect(() => {
+        const _ = xsalsa20_poly1305(sharedSecret, nOnce).decrypt(sealedBytes);
+    }).toThrow("Wrong tag");
+});
+test("Hashing is deterministic", () => {
+    expect(secureHash({ b: "world", a: "hello" })).toEqual(secureHash({ a: "hello", b: "world" }));
+    expect(shortHash({ b: "world", a: "hello" })).toEqual(shortHash({ a: "hello", b: "world" }));
+});
+test("Encryption for transactions round-trips", () => {
+    const { secret } = newRandomKeySecret();
+    const encrypted1 = encryptForTransaction({ a: "hello" }, secret, {
+        in: "co_zTEST",
+        tx: { sessionID: "co_agent_zTEST_session_zTEST", txIndex: 0 },
+    });
+    const encrypted2 = encryptForTransaction({ b: "world" }, secret, {
+        in: "co_zTEST",
+        tx: { sessionID: "co_agent_zTEST_session_zTEST", txIndex: 1 },
+    });
+    const decrypted1 = decryptForTransaction(encrypted1, secret, {
+        in: "co_zTEST",
+        tx: { sessionID: "co_agent_zTEST_session_zTEST", txIndex: 0 },
+    });
+    const decrypted2 = decryptForTransaction(encrypted2, secret, {
+        in: "co_zTEST",
+        tx: { sessionID: "co_agent_zTEST_session_zTEST", txIndex: 1 },
+    });
+    expect([decrypted1, decrypted2]).toEqual([{ a: "hello" }, { b: "world" }]);
+});
+test("Encryption for transactions doesn't decrypt with a wrong key", () => {
+    const { secret } = newRandomKeySecret();
+    const { secret: secret2 } = newRandomKeySecret();
+    const encrypted1 = encryptForTransaction({ a: "hello" }, secret, {
+        in: "co_zTEST",
+        tx: { sessionID: "co_agent_zTEST_session_zTEST", txIndex: 0 },
+    });
+    const encrypted2 = encryptForTransaction({ b: "world" }, secret, {
+        in: "co_zTEST",
+        tx: { sessionID: "co_agent_zTEST_session_zTEST", txIndex: 1 },
+    });
+    const decrypted1 = decryptForTransaction(encrypted1, secret2, {
+        in: "co_zTEST",
+        tx: { sessionID: "co_agent_zTEST_session_zTEST", txIndex: 0 },
+    });
+    const decrypted2 = decryptForTransaction(encrypted2, secret2, {
+        in: "co_zTEST",
+        tx: { sessionID: "co_agent_zTEST_session_zTEST", txIndex: 1 },
+    });
+    expect([decrypted1, decrypted2]).toEqual([undefined, undefined]);
+});
+test("Encryption of keySecrets round-trips", () => {
+    const toSeal = newRandomKeySecret();
+    const sealing = newRandomKeySecret();
+    const keys = {
+        toSeal,
+        sealing,
+    };
+    const sealed = sealKeySecret(keys);
+    const unsealed = unsealKeySecret(sealed, sealing.secret);
+    expect(unsealed).toEqual(toSeal.secret);
+});
+test("Encryption of keySecrets doesn't unseal with a wrong key", () => {
+    const toSeal = newRandomKeySecret();
+    const sealing = newRandomKeySecret();
+    const sealingWrong = newRandomKeySecret();
+    const keys = {
+        toSeal,
+        sealing,
+    };
+    const sealed = sealKeySecret(keys);
+    const unsealed = unsealKeySecret(sealed, sealingWrong.secret);
+    expect(unsealed).toBeUndefined();
+});
+//# sourceMappingURL=crypto.test.js.map

package/dist/crypto.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.test.js","sourceRoot":"","sources":["../src/crypto.test.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,cAAc,EACd,cAAc,EACd,UAAU,EACV,kBAAkB,EAClB,kBAAkB,EAClB,IAAI,EACJ,IAAI,EACJ,MAAM,EACN,MAAM,EACN,SAAS,EACT,kBAAkB,EAClB,qBAAqB,EACrB,qBAAqB,EACrB,aAAa,EACb,eAAe,GAClB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,eAAe,MAAM,4BAA4B,CAAC;AAEzD,IAAI,CAAC,gDAAgD,EAAE,GAAG,EAAE;IACxD,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;IACxC,MAAM,SAAS,GAAG,kBAAkB,EAAE,CAAC;IACvC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAExC,MAAM,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAC1C,MAAM,CACF,MAAM,CAAC,SAAS,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC,CAC3E,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACjB,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,iCAAiC,EAAE,GAAG,EAAE;IACzC,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;IACxC,MAAM,SAAS,GAAG,kBAAkB,EAAE,CAAC;IACvC,MAAM,UAAU,GAAG,kBAAkB,EAAE,CAAC;IACxC,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;IAE9C,MAAM,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAChF,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,wDAAwD,EAAE,GAAG,EAAE;IAChE,MAAM,IAAI,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;IACpC,MAAM,UAAU,GAAG,kBAAkB,EAAE,CAAC;IACxC,MAAM,UAAU,GAAG,kBAAkB,EAAE,CAAC;IACxC,MAAM,UAAU,GAAG,kBAAkB,EAAE,CAAC;IAExC,MAAM,aAAa,GAAG;QAClB,EAAE,EAAE,UAAU;QACd,EAAE,EAAE,EAAE,SAAS,EAAE,8BAA8B,EAAE,OAAO,EAAE,CAAC,EAAE;KACvD,CAAC;IAEX,MAAM,MAAM,GAAG,IAAI,CACf,IAAI,EACJ,MAAM,EACN,IAAI,GAAG,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC,EACjE,aAAa,CAChB,CAAC;IAEF,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAChE,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAChE,MAAM,CACF,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,CACpE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAChB,MAAM,CACF,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,CACpE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAChB,MAAM,CACF,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,cAAc,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,CACpE,CAAC,aAAa,EAAE,CAAC;IAElB,8CAA8C;IAC9C,MAAM,KAAK,GAAG,MAAM,CAChB,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC,CAC3D,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACf,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAChC,UAAU,CAAC,SAAS,CAAC,mBAAmB,CAAC,MAAM,CAAC,CACnD,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAC3B,cAAc,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CACzD,CAAC;IACF,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAChC,MAAM,CAAC,cAAc,CAAC,UAAU,CAAC,CAAE,CAAC,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,CACnE,CAAC;IACF,MAAM,YAAY,GAAG,MAAM,CAAC,eAAe,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IAEvE,MAAM,CAAC,GAAG,EAAE;QACR,MAAM,CAAC,GAAG,iBAAiB,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;AAC5B,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0BAA0B,EAAE,GAAG,EAAE;IAClC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAClD,UAAU,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CACzC,CAAC;IAEF,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CACjD,SAAS,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CACxC,CAAC;AACN,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACjD,MAAM,EAAE,MAAM,EAAE,GAAG,kBAAkB,EAAE,CAAC;IAExC,MAAM,UAAU,GAAI,qBAAqB,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE;QAC9D,EAAE,EAAE,UAAU;QACd,EAAE,EAAE,EAAE,SAAS,EAAE,8BAA8B,EAAE,OAAO,EAAE,CAAC,EAAE;KAChE,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,qBAAqB,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE;QAC7D,EAAE,EAAE,UAAU;QACd,EAAE,EAAE,EAAE,SAAS,EAAE,8BAA8B,EAAE,OAAO,EAAE,CAAC,EAAE;KAChE,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE;QACzD,EAAE,EAAE,UAAU;QACd,EAAE,EAAE,EAAE,SAAS,EAAE,8BAA8B,EAAE,OAAO,EAAE,CAAC,EAAE;KAChE,CAAC,CAAC;IAEH,MAAM,UAAU,GAAI,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE;QAC1D,EAAE,EAAE,UAAU;QACd,EAAE,EAAE,EAAE,SAAS,EAAE,8BAA8B,EAAE,OAAO,EAAE,CAAC,EAAE;KAChE,CAAC,CAAC;IAEH,MAAM,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;AAC/E,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,8DAA8D,EAAE,GAAG,EAAE;IACtE,MAAM,EAAE,MAAM,EAAE,GAAG,kBAAkB,EAAE,CAAC;IACxC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,kBAAkB,EAAE,CAAC;IAEjD,MAAM,UAAU,GAAI,qBAAqB,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE;QAC9D,EAAE,EAAE,UAAU;QACd,EAAE,EAAE,EAAE,SAAS,EAAE,8BAA8B,EAAE,OAAO,EAAE,CAAC,EAAE;KAChE,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,qBAAqB,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE;QAC7D,EAAE,EAAE,UAAU;QACd,EAAE,EAAE,EAAE,SAAS,EAAE,8BAA8B,EAAE,OAAO,EAAE,CAAC,EAAE;KAChE,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,qBAAqB,CAAC,UAAU,EAAE,OAAO,EAAE;QAC1D,EAAE,EAAE,UAAU;QACd,EAAE,EAAE,EAAE,SAAS,EAAE,8BAA8B,EAAE,OAAO,EAAE,CAAC,EAAE;KAChE,CAAC,CAAC;IAEH,MAAM,UAAU,GAAI,qBAAqB,CAAC,UAAU,EAAE,OAAO,EAAE;QAC3D,EAAE,EAAE,UAAU;QACd,EAAE,EAAE,EAAE,SAAS,EAAE,8BAA8B,EAAE,OAAO,EAAE,CAAC,EAAE;KAChE,CAAC,CAAC;IAEH,MAAM,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AACrE,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,sCAAsC,EAAE,GAAG,EAAE;IAC9C,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;IACpC,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;IAErC,MAAM,IAAI,GAAG;QACT,MAAM;QACN,OAAO;KACV,CAAC;IAEF,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAEnC,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAEzD,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC5C,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,0DAA0D,EAAE,GAAG,EAAE;IAClE,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;IACpC,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;IACrC,MAAM,YAAY,GAAG,kBAAkB,EAAE,CAAC;IAE1C,MAAM,IAAI,GAAG;QACT,MAAM;QACN,OAAO;KACV,CAAC;IAEF,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAEnC,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;IAE9D,MAAM,CAAC,QAAQ,CAAC,CAAC,aAAa,EAAE,CAAC;AACrC,CAAC,CAAC,CAAC"}

package/dist/ids.d.ts

@@ -0,0 +1,7 @@
+export type RawCoValueID = `co_z${string}` | `co_${string}_z${string}`;
+export type TransactionID = {
+    sessionID: SessionID;
+    txIndex: number;
+};
+export type AgentID = `co_agent${string}_z${string}`;
+export type SessionID = `${AgentID}_session_z${string}`;

package/dist/ids.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ids.js.map

package/dist/ids.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ids.js","sourceRoot":"","sources":["../src/ids.ts"],"names":[],"mappings":""}

package/dist/index.d.ts

@@ -0,0 +1,19 @@
+import { CoValue, agentCredentialFromBytes, agentCredentialToBytes, getAgent, getAgentID, newRandomAgentCredential, newRandomSessionID } from './coValue.js';
+import { LocalNode } from './node.js';
+import { CoMap } from './contentTypes/coMap.js';
+import type { AgentCredential } from './coValue.js';
+import type { AgentID, SessionID } from './ids.js';
+import type { CoValueID, ContentType } from './contentType.js';
+import type { JsonValue } from './jsonValue.js';
+import type { SyncMessage } from './sync.js';
+type Value = JsonValue | ContentType;
+declare const internals: {
+    agentCredentialToBytes: typeof agentCredentialToBytes;
+    agentCredentialFromBytes: typeof agentCredentialFromBytes;
+    getAgent: typeof getAgent;
+    getAgentID: typeof getAgentID;
+    newRandomAgentCredential: typeof newRandomAgentCredential;
+    newRandomSessionID: typeof newRandomSessionID;
+};
+export { LocalNode, CoValue, CoMap, internals };
+export type { Value, JsonValue, ContentType, CoValueID, AgentCredential, SessionID, AgentID, SyncMessage };

package/dist/index.js

@@ -0,0 +1,13 @@
+import { CoValue, agentCredentialFromBytes, agentCredentialToBytes, getAgent, getAgentID, newRandomAgentCredential, newRandomSessionID, } from './coValue.js';
+import { LocalNode } from './node.js';
+import { CoMap } from './contentTypes/coMap.js';
+const internals = {
+    agentCredentialToBytes,
+    agentCredentialFromBytes,
+    getAgent,
+    getAgentID,
+    newRandomAgentCredential,
+    newRandomSessionID,
+};
+export { LocalNode, CoValue, CoMap, internals };
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,OAAO,EACP,wBAAwB,EACxB,sBAAsB,EACtB,QAAQ,EACR,UAAU,EACV,wBAAwB,EACxB,kBAAkB,GACrB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,KAAK,EAAE,MAAM,yBAAyB,CAAC;AAUhD,MAAM,SAAS,GAAG;IACd,sBAAsB;IACtB,wBAAwB;IACxB,QAAQ;IACR,UAAU;IACV,wBAAwB;IACxB,kBAAkB;CACrB,CAAC;AAEF,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC"}

package/dist/jsonValue.d.ts

@@ -0,0 +1,7 @@
+import { CoValueID, ContentType } from './contentType.js';
+export type JsonAtom = string | number | boolean | null;
+export type JsonValue = JsonAtom | JsonArray | JsonObject | CoValueID<ContentType>;
+export type JsonArray = JsonValue[];
+export type JsonObject = {
+    [key: string]: JsonValue;
+};

package/dist/jsonValue.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=jsonValue.js.map

package/dist/jsonValue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jsonValue.js","sourceRoot":"","sources":["../src/jsonValue.ts"],"names":[],"mappings":""}

package/dist/node.d.ts

@@ -0,0 +1,33 @@
+import { CoValue, AgentCredential, Agent, CoValueHeader } from './coValue.js';
+import { Team } from './permissions.js';
+import { SyncManager } from './sync.js';
+import { AgentID, RawCoValueID, SessionID } from './ids.js';
+import { CoValueID, ContentType } from './contentType.js';
+export declare class LocalNode {
+    coValues: {
+        [key: RawCoValueID]: CoValueState;
+    };
+    agentCredential: AgentCredential;
+    agentID: AgentID;
+    ownSessionID: SessionID;
+    sync: SyncManager;
+    constructor(agentCredential: AgentCredential, ownSessionID: SessionID);
+    createCoValue(header: CoValueHeader): CoValue;
+    loadCoValue(id: RawCoValueID): Promise<CoValue>;
+    load<T extends ContentType>(id: CoValueID<T>): Promise<T>;
+    expectCoValueLoaded(id: RawCoValueID, expectation?: string): CoValue;
+    createAgent(publicNickname: string): AgentCredential;
+    expectAgentLoaded(id: AgentID, expectation?: string): Agent;
+    createTeam(): Team;
+    testWithDifferentCredentials(agentCredential: AgentCredential, ownSessionID: SessionID): LocalNode;
+}
+type CoValueState = {
+    state: "loading";
+    done: Promise<CoValue>;
+    resolve: (coValue: CoValue) => void;
+} | {
+    state: "loaded";
+    coValue: CoValue;
+};
+export declare function newLoadingState(): CoValueState;
+export {};

package/dist/node.js

@@ -0,0 +1,113 @@
+import { createdNowUnique, newRandomKeySecret, seal } from './crypto.js';
+import { CoValue, getAgent, getAgentID, getAgentCoValueHeader, newRandomAgentCredential, } from './coValue.js';
+import { Team, expectTeamContent } from './permissions.js';
+import { SyncManager } from './sync.js';
+export class LocalNode {
+    constructor(agentCredential, ownSessionID) {
+        this.coValues = {};
+        this.sync = new SyncManager(this);
+        this.agentCredential = agentCredential;
+        const agent = getAgent(agentCredential);
+        const agentID = getAgentID(agent);
+        this.agentID = agentID;
+        this.ownSessionID = ownSessionID;
+        const agentCoValue = new CoValue(getAgentCoValueHeader(agent), this);
+        this.coValues[agentCoValue.id] = {
+            state: "loaded",
+            coValue: agentCoValue,
+        };
+    }
+    createCoValue(header) {
+        const coValue = new CoValue(header, this);
+        this.coValues[coValue.id] = { state: "loaded", coValue: coValue };
+        void this.sync.syncCoValue(coValue);
+        return coValue;
+    }
+    loadCoValue(id) {
+        let entry = this.coValues[id];
+        if (!entry) {
+            entry = newLoadingState();
+            this.coValues[id] = entry;
+            this.sync.loadFromPeers(id);
+        }
+        if (entry.state === "loaded") {
+            return Promise.resolve(entry.coValue);
+        }
+        return entry.done;
+    }
+    async load(id) {
+        return (await this.loadCoValue(id)).getCurrentContent();
+    }
+    expectCoValueLoaded(id, expectation) {
+        const entry = this.coValues[id];
+        if (!entry) {
+            throw new Error(`${expectation ? expectation + ": " : ""}Unknown CoValue ${id}`);
+        }
+        if (entry.state === "loading") {
+            throw new Error(`${expectation ? expectation + ": " : ""}CoValue ${id} not yet loaded`);
+        }
+        return entry.coValue;
+    }
+    createAgent(publicNickname) {
+        const agentCredential = newRandomAgentCredential(publicNickname);
+        this.createCoValue(getAgentCoValueHeader(getAgent(agentCredential)));
+        return agentCredential;
+    }
+    expectAgentLoaded(id, expectation) {
+        const coValue = this.expectCoValueLoaded(id, expectation);
+        if (coValue.header.type !== "comap" || coValue.header.ruleset.type !== "agent") {
+            throw new Error(`${expectation ? expectation + ": " : ""}CoValue ${id} is not an agent`);
+        }
+        return {
+            recipientID: coValue.header.ruleset.initialRecipientID,
+            signatoryID: coValue.header.ruleset.initialSignatoryID,
+            publicNickname: coValue.header.publicNickname?.replace("agent-", ""),
+        };
+    }
+    createTeam() {
+        const teamCoValue = this.createCoValue({
+            type: "comap",
+            ruleset: { type: "team", initialAdmin: this.agentID },
+            meta: null,
+            ...createdNowUnique(),
+            publicNickname: "team",
+        });
+        let teamContent = expectTeamContent(teamCoValue.getCurrentContent());
+        teamContent = teamContent.edit((editable) => {
+            editable.set(this.agentID, "admin", "trusting");
+            const readKey = newRandomKeySecret();
+            const revelation = seal(readKey.secret, this.agentCredential.recipientSecret, new Set([getAgent(this.agentCredential).recipientID]), {
+                in: teamCoValue.id,
+                tx: teamCoValue.nextTransactionID(),
+            });
+            editable.set("readKey", { keyID: readKey.id, revelation }, "trusting");
+        });
+        return new Team(teamContent, this);
+    }
+    testWithDifferentCredentials(agentCredential, ownSessionID) {
+        const newNode = new LocalNode(agentCredential, ownSessionID);
+        newNode.coValues = Object.fromEntries(Object.entries(this.coValues)
+            .map(([id, entry]) => {
+            if (entry.state === "loading") {
+                return undefined;
+            }
+            const newCoValue = new CoValue(entry.coValue.header, newNode);
+            newCoValue.sessions = entry.coValue.sessions;
+            return [id, { state: "loaded", coValue: newCoValue }];
+        })
+            .filter((x) => !!x));
+        return newNode;
+    }
+}
+export function newLoadingState() {
+    let resolve;
+    const promise = new Promise((r) => {
+        resolve = r;
+    });
+    return {
+        state: "loading",
+        done: promise,
+        resolve: resolve,
+    };
+}
+//# sourceMappingURL=node.js.map

package/dist/node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"node.js","sourceRoot":"","sources":["../src/node.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AACzE,OAAO,EACH,OAAO,EAGP,QAAQ,EACR,UAAU,EACV,qBAAqB,EAErB,wBAAwB,GAC3B,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAIxC,MAAM,OAAO,SAAS;IAOlB,YAAY,eAAgC,EAAE,YAAuB;QANrE,aAAQ,GAA0C,EAAE,CAAC;QAIrD,SAAI,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC;QAGzB,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QACvC,MAAM,KAAK,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QAEjC,MAAM,YAAY,GAAG,IAAI,OAAO,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;QACrE,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,GAAG;YAC7B,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,YAAY;SACxB,CAAC;IACN,CAAC;IAED,aAAa,CAAC,MAAqB;QAC/B,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC1C,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;QAElE,KAAK,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAEpC,OAAO,OAAO,CAAC;IACnB,CAAC;IAED,WAAW,CAAC,EAAgB;QACxB,IAAI,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK,EAAE;YACR,KAAK,GAAG,eAAe,EAAE,CAAC;YAE1B,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;YAE1B,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;SAC/B;QACD,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE;YAC1B,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;SACzC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,IAAI,CAAwB,EAAgB;QAC9C,OAAO,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,EAAO,CAAC;IACjE,CAAC;IAED,mBAAmB,CAAC,EAAgB,EAAE,WAAoB;QACtD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK,EAAE;YACR,MAAM,IAAI,KAAK,CACX,GAAG,WAAW,CAAC,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,EAAE,CAClE,CAAC;SACL;QACD,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE;YAC3B,MAAM,IAAI,KAAK,CACX,GACI,WAAW,CAAC,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,EACvC,WAAW,EAAE,iBAAiB,CACjC,CAAC;SACL;QACD,OAAO,KAAK,CAAC,OAAO,CAAC;IACzB,CAAC;IAED,WAAW,CAAC,cAAsB;QAC9B,MAAM,eAAe,GAAG,wBAAwB,CAAC,cAAc,CAAC,CAAC;QAEjE,IAAI,CAAC,aAAa,CAAC,qBAAqB,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAErE,OAAO,eAAe,CAAC;IAC3B,CAAC;IAED,iBAAiB,CAAC,EAAW,EAAE,WAAoB;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,CACpC,EAAE,EACF,WAAW,CACd,CAAC;QAEF,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE;YAC5E,MAAM,IAAI,KAAK,CACX,GACI,WAAW,CAAC,CAAC,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,EACvC,WAAW,EAAE,kBAAkB,CAClC,CAAC;SACL;QAED,OAAO;YACH,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB;YACtD,WAAW,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB;YACtD,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;SACvE,CAAA;IACL,CAAC;IAED,UAAU;QACN,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC;YACnC,IAAI,EAAE,OAAO;YACb,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,CAAC,OAAO,EAAE;YACrD,IAAI,EAAE,IAAI;YACV,GAAG,gBAAgB,EAAE;YACrB,cAAc,EAAE,MAAM;SACzB,CAAC,CAAC;QAEH,IAAI,WAAW,GAAG,iBAAiB,CAAC,WAAW,CAAC,iBAAiB,EAAE,CAAC,CAAC;QAErE,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;YACxC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;YAEhD,MAAM,OAAO,GAAG,kBAAkB,EAAE,CAAC;YACrC,MAAM,UAAU,GAAG,IAAI,CACnB,OAAO,CAAC,MAAM,EACd,IAAI,CAAC,eAAe,CAAC,eAAe,EACpC,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,WAAW,CAAC,CAAC,EACrD;gBACI,EAAE,EAAE,WAAW,CAAC,EAAE;gBAClB,EAAE,EAAE,WAAW,CAAC,iBAAiB,EAAE;aACtC,CACJ,CAAC;YAEF,QAAQ,CAAC,GAAG,CACR,SAAS,EACT,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,UAAU,EAAE,EACjC,UAAU,CACb,CAAC;QACN,CAAC,CAAC,CAAC;QAEH,OAAO,IAAI,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC;IAED,4BAA4B,CACxB,eAAgC,EAChC,YAAuB;QAEvB,MAAM,OAAO,GAAG,IAAI,SAAS,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC;QAE7D,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,WAAW,CACjC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;aACxB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE;YACjB,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE;gBAC3B,OAAO,SAAS,CAAC;aACpB;YAED,MAAM,UAAU,GAAG,IAAI,OAAO,CAC1B,KAAK,CAAC,OAAO,CAAC,MAAM,EACpB,OAAO,CACV,CAAC;YAEF,UAAU,CAAC,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC;YAE7C,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;QAC1D,CAAC,CAAC;aACD,MAAM,CAAC,CAAC,CAAC,EAAqC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAC7D,CAAC;QAEF,OAAO,OAAO,CAAC;IACnB,CAAC;CACJ;AAUD,MAAM,UAAU,eAAe;IAC3B,IAAI,OAAmC,CAAC;IAExC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAU,CAAC,CAAC,EAAE,EAAE;QACvC,OAAO,GAAG,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,OAAO;QACH,KAAK,EAAE,SAAS;QAChB,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,OAAQ;KACpB,CAAC;AACN,CAAC"}

package/dist/permissions.d.ts

@@ -0,0 +1,54 @@
+import { ContentType } from './contentType.js';
+import { CoMap } from './contentTypes/coMap.js';
+import { JsonValue } from './jsonValue.js';
+import { Encrypted, KeyID, KeySecret, RecipientID, SealedSet, SignatoryID } from './crypto.js';
+import { AgentCredential, CoValue, Transaction } from './coValue.js';
+import { LocalNode } from "./node.js";
+import { AgentID, RawCoValueID, SessionID, TransactionID } from './ids.js';
+export type PermissionsDef = {
+    type: "team";
+    initialAdmin: AgentID;
+    parentTeams?: RawCoValueID[];
+} | {
+    type: "ownedByTeam";
+    team: RawCoValueID;
+} | {
+    type: "agent";
+    initialSignatoryID: SignatoryID;
+    initialRecipientID: RecipientID;
+} | {
+    type: "unsafeAllowAll";
+};
+export type Role = "reader" | "writer" | "admin" | "revoked";
+export declare function determineValidTransactions(coValue: CoValue): {
+    txID: TransactionID;
+    tx: Transaction;
+}[];
+export type TeamContent = {
+    [key: AgentID]: Role;
+} & {
+    readKey: {
+        keyID: KeyID;
+        revelation: SealedSet<KeySecret>;
+        previousKeys?: {
+            [key: KeyID]: Encrypted<KeySecret, {
+                sealed: KeyID;
+                sealing: KeyID;
+            }>;
+        };
+    };
+};
+export declare function expectTeamContent(content: ContentType): CoMap<TeamContent, {}>;
+export declare class Team {
+    teamMap: CoMap<TeamContent, {}>;
+    node: LocalNode;
+    constructor(teamMap: CoMap<TeamContent, {}>, node: LocalNode);
+    get id(): RawCoValueID;
+    addMember(agentID: AgentID, role: Role): void;
+    rotateReadKey(): void;
+    removeMember(agentID: AgentID): void;
+    createMap<M extends {
+        [key: string]: JsonValue;
+    }, Meta extends JsonValue>(meta?: M): CoMap<M, Meta>;
+    testWithDifferentCredentials(credential: AgentCredential, sessionId: SessionID): Team;
+}