fold-agent 0.1.0

package/dist/deploy/public-origin.js

@@ -0,0 +1,59 @@
+import { normalizeServerUrl } from '../rooms/room-reference.js';
+export function resolvePublicOrigin(options) {
+    const env = options.env ?? process.env;
+    const providerUrl = publicOriginFromProviderEnv(env);
+    const appUrl = options.appUrl
+        ?? options.serverUrl
+        ?? options.syncUrl
+        ?? env.FOLD_PUBLIC_APP_URL
+        ?? env.FOLD_PUBLIC_URL
+        ?? providerUrl
+        ?? options.defaultUrl;
+    const syncUrl = options.syncUrl
+        ?? options.serverUrl
+        ?? options.appUrl
+        ?? env.FOLD_PUBLIC_SYNC_URL
+        ?? env.FOLD_PUBLIC_URL
+        ?? providerUrl
+        ?? options.defaultUrl;
+    return {
+        appUrl: normalizeServerUrl(appUrl),
+        syncUrl: normalizeServerUrl(syncUrl),
+        source: publicOriginSource(options, env, providerUrl),
+    };
+}
+export function publicOriginFromProviderEnv(env = process.env) {
+    return firstPresent(env.RENDER_EXTERNAL_URL, env.URL, env.DEPLOY_PRIME_URL, withHttps(env.RAILWAY_PUBLIC_DOMAIN), withHttps(env.VERCEL_URL), withHttps(env.FLY_APP_NAME ? `${env.FLY_APP_NAME}.fly.dev` : undefined));
+}
+export function hostedPortFromEnv(env = process.env, fallback = 3000) {
+    const raw = env.PORT;
+    if (!raw)
+        return fallback;
+    const port = Number(raw);
+    if (!Number.isInteger(port) || port < 0 || port > 65535) {
+        throw new Error(`Invalid PORT value: ${raw}`);
+    }
+    return port;
+}
+function firstPresent(...values) {
+    return values.find((value) => value && value.trim().length > 0);
+}
+function withHttps(value) {
+    if (!value)
+        return undefined;
+    if (/^https?:\/\//.test(value))
+        return value;
+    return `https://${value}`;
+}
+function publicOriginSource(options, env, providerUrl) {
+    if (options.appUrl || options.syncUrl || options.serverUrl)
+        return 'explicit';
+    if (env.FOLD_PUBLIC_APP_URL || env.FOLD_PUBLIC_SYNC_URL)
+        return 'split-environment';
+    if (env.FOLD_PUBLIC_URL)
+        return 'fold-public-url';
+    if (providerUrl)
+        return 'provider';
+    return 'default';
+}
+//# sourceMappingURL=public-origin.js.map

package/dist/deploy/public-origin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-origin.js","sourceRoot":"","sources":["../../../../src/deploy/public-origin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAgBhE,MAAM,UAAU,mBAAmB,CAAC,OAA4B;IAC9D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,WAAW,GAAG,2BAA2B,CAAC,GAAG,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM;WACxB,OAAO,CAAC,SAAS;WACjB,OAAO,CAAC,OAAO;WACf,GAAG,CAAC,mBAAmB;WACvB,GAAG,CAAC,eAAe;WACnB,WAAW;WACX,OAAO,CAAC,UAAU,CAAC;IACxB,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO;WAC1B,OAAO,CAAC,SAAS;WACjB,OAAO,CAAC,MAAM;WACd,GAAG,CAAC,oBAAoB;WACxB,GAAG,CAAC,eAAe;WACnB,WAAW;WACX,OAAO,CAAC,UAAU,CAAC;IAExB,OAAO;QACL,MAAM,EAAE,kBAAkB,CAAC,MAAM,CAAC;QAClC,OAAO,EAAE,kBAAkB,CAAC,OAAO,CAAC;QACpC,MAAM,EAAE,kBAAkB,CAAC,OAAO,EAAE,GAAG,EAAE,WAAW,CAAC;KACtD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,MAA0C,OAAO,CAAC,GAAG;IAC/F,OAAO,YAAY,CACjB,GAAG,CAAC,mBAAmB,EACvB,GAAG,CAAC,GAAG,EACP,GAAG,CAAC,gBAAgB,EACpB,SAAS,CAAC,GAAG,CAAC,qBAAqB,CAAC,EACpC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,EACzB,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,YAAY,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,CACxE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAA0C,OAAO,CAAC,GAAG,EAAE,QAAQ,GAAG,IAAI;IACtG,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC;IACrB,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAC;IAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,GAAG,MAAiC;IACxD,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,SAAS,CAAC,KAAyB;IAC1C,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,OAAO,WAAW,KAAK,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,kBAAkB,CACzB,OAA4B,EAC5B,GAAuC,EACvC,WAA+B;IAE/B,IAAI,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS;QAAE,OAAO,UAAU,CAAC;IAC9E,IAAI,GAAG,CAAC,mBAAmB,IAAI,GAAG,CAAC,oBAAoB;QAAE,OAAO,mBAAmB,CAAC;IACpF,IAAI,GAAG,CAAC,eAAe;QAAE,OAAO,iBAAiB,CAAC;IAClD,IAAI,WAAW;QAAE,OAAO,UAAU,CAAC;IACnC,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/rooms/append-log-api.d.ts

@@ -0,0 +1,16 @@
+import type { EncryptedUpdateRecord, IncomingEncryptedUpdate } from '../server/append-log.js';
+import type { RoomAccess } from './room-reference.js';
+export interface RoomStatusResponse {
+    roomId: string;
+    recordCount: number;
+    latestSeq: number | null;
+}
+export interface AppendEncryptedUpdateResponse {
+    record: EncryptedUpdateRecord;
+}
+export interface ListEncryptedUpdatesResponse {
+    updates: EncryptedUpdateRecord[];
+}
+export declare function appendEncryptedUpdate(access: RoomAccess, update: IncomingEncryptedUpdate): Promise<EncryptedUpdateRecord>;
+export declare function listEncryptedUpdates(access: RoomAccess): Promise<EncryptedUpdateRecord[]>;
+export declare function fetchRoomStatus(access: RoomAccess): Promise<RoomStatusResponse>;

package/dist/rooms/append-log-api.js

@@ -0,0 +1,72 @@
+export async function appendEncryptedUpdate(access, update) {
+    const response = await fetch(roomApiUrl(access, 'updates'), {
+        method: 'POST',
+        headers: { 'content-type': 'application/json' },
+        body: JSON.stringify({ update }),
+    });
+    const json = await readJsonResponse(response);
+    if (!isEncryptedUpdateRecord(json.record)) {
+        throw new Error('Server returned an invalid encrypted append-log record');
+    }
+    return json.record;
+}
+export async function listEncryptedUpdates(access) {
+    const response = await fetch(roomApiUrl(access, 'updates'));
+    const json = await readJsonResponse(response);
+    if (!Array.isArray(json.updates) || !json.updates.every(isEncryptedUpdateRecord)) {
+        throw new Error('Server returned invalid encrypted append-log updates');
+    }
+    return json.updates;
+}
+export async function fetchRoomStatus(access) {
+    const response = await fetch(roomApiUrl(access, 'status'));
+    const json = await readJsonResponse(response);
+    if (!isRoomStatusResponse(json)) {
+        throw new Error('Server returned invalid room status');
+    }
+    return json;
+}
+function roomApiUrl(access, endpoint) {
+    const base = new URL(access.syncUrl ?? access.serverUrl);
+    const basePath = base.pathname.replace(/\/+$/, '');
+    base.pathname = `${basePath}/rooms/${encodeURIComponent(access.roomId)}/${endpoint}`;
+    base.search = '';
+    base.hash = '';
+    return base.toString();
+}
+async function readJsonResponse(response) {
+    const text = await response.text();
+    if (!response.ok) {
+        throw new Error(`Server returned ${response.status}: ${text}`);
+    }
+    try {
+        return JSON.parse(text);
+    }
+    catch (error) {
+        throw new Error('Server returned invalid JSON', { cause: error });
+    }
+}
+function isEncryptedUpdateRecord(value) {
+    if (!value || typeof value !== 'object')
+        return false;
+    const record = value;
+    return (typeof record.roomId === 'string' &&
+        Number.isSafeInteger(record.seq) &&
+        typeof record.senderId === 'string' &&
+        isEncryptedPayload(record));
+}
+function isEncryptedPayload(value) {
+    if (!value || typeof value !== 'object')
+        return false;
+    const payload = value;
+    return typeof payload.nonce === 'string' && typeof payload.ciphertext === 'string';
+}
+function isRoomStatusResponse(value) {
+    if (!value || typeof value !== 'object')
+        return false;
+    const status = value;
+    return (typeof status.roomId === 'string' &&
+        Number.isSafeInteger(status.recordCount) &&
+        (status.latestSeq === null || Number.isSafeInteger(status.latestSeq)));
+}
+//# sourceMappingURL=append-log-api.js.map

package/dist/rooms/append-log-api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"append-log-api.js","sourceRoot":"","sources":["../../../../src/rooms/append-log-api.ts"],"names":[],"mappings":"AAkBA,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAkB,EAClB,MAA+B;IAE/B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE;QAC1D,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;KACjC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAgC,QAAQ,CAAC,CAAC;IAC7E,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,MAAkB;IAC3D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;IAC5D,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAA+B,QAAQ,CAAC,CAAC;IAC5E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,uBAAuB,CAAC,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAkB;IACtD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAqB,QAAQ,CAAC,CAAC;IAClE,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,MAAkB,EAAE,QAA8B;IACpE,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACnD,IAAI,CAAC,QAAQ,GAAG,GAAG,QAAQ,UAAU,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;IACrF,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC;IACjB,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;IACf,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;AACzB,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAI,QAAkB;IACnD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,mBAAmB,QAAQ,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,8BAA8B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC7C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,MAAM,GAAG,KAAuC,CAAC;IACvD,OAAO,CACL,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;QACjC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC;QAChC,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;QACnC,kBAAkB,CAAC,MAAM,CAAC,CAC3B,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,OAAO,GAAG,KAAkC,CAAC;IACnD,OAAO,OAAO,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC;AACrF,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,MAAM,GAAG,KAAoC,CAAC;IACpD,OAAO,CACL,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;QACjC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,WAAW,CAAC;QACxC,CAAC,MAAM,CAAC,SAAS,KAAK,IAAI,IAAI,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CACtE,CAAC;AACJ,CAAC"}

package/dist/rooms/append-log-validation.d.ts

@@ -0,0 +1,2 @@
+import type { EncryptedUpdateRecord } from '../server/append-log.js';
+export declare function assertContiguousRecords(records: EncryptedUpdateRecord[], roomId: string): void;

package/dist/rooms/append-log-validation.js

@@ -0,0 +1,16 @@
+export function assertContiguousRecords(records, roomId) {
+    let expectedSeq = 1;
+    for (const record of records) {
+        if (record.roomId !== roomId) {
+            throw new Error(`Received update for unexpected room ${JSON.stringify(record.roomId)}`);
+        }
+        if (!Number.isSafeInteger(record.seq) || record.seq < 1) {
+            throw new Error(`Received invalid append-log sequence ${record.seq}`);
+        }
+        if (record.seq !== expectedSeq) {
+            throw new Error(`Detected missing, duplicate, or reordered append-log sequence ${record.seq}; expected ${expectedSeq}`);
+        }
+        expectedSeq += 1;
+    }
+}
+//# sourceMappingURL=append-log-validation.js.map

package/dist/rooms/append-log-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"append-log-validation.js","sourceRoot":"","sources":["../../../../src/rooms/append-log-validation.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,uBAAuB,CAAC,OAAgC,EAAE,MAAc;IACtF,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,uCAAuC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC1F,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,wCAAwC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,MAAM,CAAC,GAAG,KAAK,WAAW,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,iEAAiE,MAAM,CAAC,GAAG,cAAc,WAAW,EAAE,CAAC,CAAC;QAC1H,CAAC;QAED,WAAW,IAAI,CAAC,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/rooms/comments.d.ts

@@ -0,0 +1,63 @@
+import type { EncryptedUpdateRecord, IncomingEncryptedUpdate } from '../server/append-log.js';
+import type { RoomPersona } from './personas.js';
+import type { RoomAccess } from './room-reference.js';
+export declare const COMMENT_EVENT_SENDER_ID_PREFIX = "web-client:comment-event";
+export declare const COMMENT_SENDER_ID_PREFIX = "web-client:comment";
+export declare const CLI_COMMENT_EVENT_SENDER_ID_PREFIX = "fold-cli:comment-event";
+export declare const CLI_COMMENT_SENDER_ID_PREFIX = "fold-cli:comment";
+export type ThreadAnchorType = 'text-range' | 'insertion-point' | 'block' | 'document';
+export type ThreadType = 'note' | 'request';
+export interface CommentReply {
+    id: string;
+    authorPersonaId: string;
+    persona: RoomPersona;
+    text: string;
+    createdAt: string;
+    parentId?: string;
+    parentAuthorPersonaId?: string;
+    parentAuthorName?: string;
+    parentText?: string;
+}
+export interface RoomComment {
+    id: string;
+    authorPersonaId: string;
+    persona: RoomPersona;
+    filePath?: string;
+    text: string;
+    replies?: CommentReply[];
+    createdAt: string;
+    resolvedAt?: string;
+    resolvedByPersonaId?: string;
+    type: ThreadType;
+    anchorType?: ThreadAnchorType;
+    selectedQuote?: string;
+    createdFromMarkdown?: string;
+    beforeContext?: string;
+    afterContext?: string;
+}
+export interface CommentEvent {
+    id: string;
+    type: 'comment_replied' | 'comment_resolved' | 'comment_reopened';
+    createdAt: string;
+    actorPersonaId: string;
+    message: string;
+    commentId: string;
+    filePath?: string;
+    reply?: CommentReply;
+}
+export declare function createEncryptedCommentRecord(access: RoomAccess, comment: RoomComment): Promise<IncomingEncryptedUpdate>;
+export declare function createEncryptedCommentEvent(access: RoomAccess, event: CommentEvent): Promise<IncomingEncryptedUpdate>;
+export declare function createComment(input: {
+    persona: RoomPersona;
+    text: string;
+    markdown: string;
+    filePath: string;
+    selectedQuote?: string;
+    type?: ThreadType;
+}): RoomComment;
+export declare function createCommentReplyEvent(input: {
+    comment: RoomComment;
+    persona: RoomPersona;
+    text: string;
+}): CommentEvent;
+export declare function replayCommentsFromRecords(access: RoomAccess, records: EncryptedUpdateRecord[]): Promise<RoomComment[]>;

package/dist/rooms/comments.js

@@ -0,0 +1,136 @@
+import { randomUUID } from 'node:crypto';
+import { decryptJsonRecord, encryptJsonRecord } from './encrypted-records.js';
+import { assertContiguousRecords } from './append-log-validation.js';
+export const COMMENT_EVENT_SENDER_ID_PREFIX = 'web-client:comment-event';
+export const COMMENT_SENDER_ID_PREFIX = 'web-client:comment';
+export const CLI_COMMENT_EVENT_SENDER_ID_PREFIX = 'fold-cli:comment-event';
+export const CLI_COMMENT_SENDER_ID_PREFIX = 'fold-cli:comment';
+export async function createEncryptedCommentRecord(access, comment) {
+    return encryptJsonRecord(access, `${CLI_COMMENT_SENDER_ID_PREFIX}:${comment.id}`, comment);
+}
+export async function createEncryptedCommentEvent(access, event) {
+    return encryptJsonRecord(access, `${CLI_COMMENT_EVENT_SENDER_ID_PREFIX}:${event.id}`, event);
+}
+export function createComment(input) {
+    return {
+        id: randomUUID().slice(0, 12),
+        authorPersonaId: input.persona.id,
+        persona: input.persona,
+        filePath: input.filePath,
+        text: input.text,
+        createdAt: new Date().toISOString(),
+        type: input.type ?? 'note',
+        ...createCommentAnchor(input.markdown, input.selectedQuote ?? ''),
+    };
+}
+export function createCommentReplyEvent(input) {
+    const createdAt = new Date().toISOString();
+    const reply = {
+        id: randomUUID().slice(0, 12),
+        authorPersonaId: input.persona.id,
+        persona: input.persona,
+        text: input.text,
+        createdAt,
+    };
+    return {
+        id: `ev-comment-reply-${input.comment.id}-${reply.id}`,
+        type: 'comment_replied',
+        createdAt,
+        actorPersonaId: input.persona.id,
+        commentId: input.comment.id,
+        filePath: input.comment.filePath,
+        message: `Replied to ${input.comment.type === 'request' ? 'request' : 'comment'} on ${input.comment.selectedQuote || input.comment.filePath || 'document'}`,
+        reply,
+    };
+}
+export async function replayCommentsFromRecords(access, records) {
+    assertContiguousRecords(records, access.roomId);
+    let comments = [];
+    for (const record of records) {
+        if (isCommentEventSender(record.senderId)) {
+            const value = await decryptJsonRecord(access, record, record.senderId);
+            if (isCommentEvent(value))
+                comments = applyCommentEvent(comments, value);
+            continue;
+        }
+        if (isCommentSender(record.senderId)) {
+            const value = await decryptJsonRecord(access, record, record.senderId);
+            if (isRoomComment(value))
+                comments = upsertComment(comments, value);
+        }
+    }
+    return comments.sort((left, right) => right.createdAt.localeCompare(left.createdAt));
+}
+function upsertComment(comments, next) {
+    if (comments.some((comment) => comment.id === next.id))
+        return comments;
+    return [{ ...next, replies: sortReplies(next.replies || []) }, ...comments];
+}
+function applyCommentEvent(comments, event) {
+    return comments.map((comment) => {
+        if (comment.id !== event.commentId)
+            return comment;
+        if (event.type === 'comment_replied' && event.reply) {
+            const replies = comment.replies || [];
+            if (replies.some((reply) => reply.id === event.reply?.id))
+                return comment;
+            return { ...comment, replies: sortReplies([...replies, event.reply]) };
+        }
+        if (event.type === 'comment_resolved') {
+            return { ...comment, resolvedAt: event.createdAt, resolvedByPersonaId: event.actorPersonaId };
+        }
+        if (event.type === 'comment_reopened') {
+            const { resolvedAt, resolvedByPersonaId, ...reopened } = comment;
+            return reopened;
+        }
+        return comment;
+    });
+}
+function createCommentAnchor(markdown, selectedQuote) {
+    const quote = selectedQuote.trim();
+    if (!quote)
+        return { anchorType: 'document', createdFromMarkdown: markdown.slice(0, 320) };
+    const index = markdown.indexOf(quote);
+    if (index === -1) {
+        return { anchorType: 'text-range', selectedQuote: quote, createdFromMarkdown: markdown.slice(0, 320) };
+    }
+    return {
+        anchorType: 'text-range',
+        selectedQuote: quote,
+        createdFromMarkdown: markdown.slice(Math.max(0, index - 160), index + quote.length + 160),
+        beforeContext: markdown.slice(Math.max(0, index - 120), index),
+        afterContext: markdown.slice(index + quote.length, index + quote.length + 120),
+    };
+}
+function sortReplies(replies) {
+    return [...replies].sort((left, right) => left.createdAt.localeCompare(right.createdAt));
+}
+function isRoomComment(value) {
+    if (!value || typeof value !== 'object')
+        return false;
+    const candidate = value;
+    return typeof candidate.id === 'string'
+        && typeof candidate.authorPersonaId === 'string'
+        && candidate.persona?.schema === 'fold.persona.v1'
+        && typeof candidate.text === 'string'
+        && typeof candidate.createdAt === 'string'
+        && (candidate.type === 'note' || candidate.type === 'request');
+}
+function isCommentSender(senderId) {
+    return senderId.startsWith(COMMENT_SENDER_ID_PREFIX) || senderId.startsWith(CLI_COMMENT_SENDER_ID_PREFIX);
+}
+function isCommentEventSender(senderId) {
+    return senderId.startsWith(COMMENT_EVENT_SENDER_ID_PREFIX) || senderId.startsWith(CLI_COMMENT_EVENT_SENDER_ID_PREFIX);
+}
+function isCommentEvent(value) {
+    if (!value || typeof value !== 'object')
+        return false;
+    const candidate = value;
+    return typeof candidate.id === 'string'
+        && (candidate.type === 'comment_replied' || candidate.type === 'comment_resolved' || candidate.type === 'comment_reopened')
+        && typeof candidate.createdAt === 'string'
+        && typeof candidate.actorPersonaId === 'string'
+        && typeof candidate.commentId === 'string'
+        && typeof candidate.message === 'string';
+}
+//# sourceMappingURL=comments.js.map

package/dist/rooms/comments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"comments.js","sourceRoot":"","sources":["../../../../src/rooms/comments.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC9E,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAErE,MAAM,CAAC,MAAM,8BAA8B,GAAG,0BAA0B,CAAC;AACzE,MAAM,CAAC,MAAM,wBAAwB,GAAG,oBAAoB,CAAC;AAC7D,MAAM,CAAC,MAAM,kCAAkC,GAAG,wBAAwB,CAAC;AAC3E,MAAM,CAAC,MAAM,4BAA4B,GAAG,kBAAkB,CAAC;AA8C/D,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,MAAkB,EAClB,OAAoB;IAEpB,OAAO,iBAAiB,CAAC,MAAM,EAAE,GAAG,4BAA4B,IAAI,OAAO,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;AAC7F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,MAAkB,EAClB,KAAmB;IAEnB,OAAO,iBAAiB,CAAC,MAAM,EAAE,GAAG,kCAAkC,IAAI,KAAK,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;AAC/F,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAO7B;IACC,OAAO;QACL,EAAE,EAAE,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAC7B,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE;QACjC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,MAAM;QAC1B,GAAG,mBAAmB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC;KAClE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAIvC;IACC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,KAAK,GAAiB;QAC1B,EAAE,EAAE,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAC7B,eAAe,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE;QACjC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS;KACV,CAAC;IACF,OAAO;QACL,EAAE,EAAE,oBAAoB,KAAK,CAAC,OAAO,CAAC,EAAE,IAAI,KAAK,CAAC,EAAE,EAAE;QACtD,IAAI,EAAE,iBAAiB;QACvB,SAAS;QACT,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE;QAChC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE;QAC3B,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ;QAChC,OAAO,EAAE,cAAc,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,OAAO,KAAK,CAAC,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,IAAI,UAAU,EAAE;QAC3J,KAAK;KACN,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAkB,EAClB,OAAgC;IAEhC,uBAAuB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,QAAQ,GAAkB,EAAE,CAAC;IACjC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1C,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YACvE,IAAI,cAAc,CAAC,KAAK,CAAC;gBAAE,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACzE,SAAS;QACX,CAAC;QACD,IAAI,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;YACvE,IAAI,aAAa,CAAC,KAAK,CAAC;gBAAE,QAAQ,GAAG,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,aAAa,CAAC,QAAuB,EAAE,IAAiB;IAC/D,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAAE,OAAO,QAAQ,CAAC;IACxE,OAAO,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,EAAE,GAAG,QAAQ,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAuB,EAAE,KAAmB;IACrE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE;QAC9B,IAAI,OAAO,CAAC,EAAE,KAAK,KAAK,CAAC,SAAS;YAAE,OAAO,OAAO,CAAC;QACnD,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YACpD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;YACtC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;gBAAE,OAAO,OAAO,CAAC;YAC1E,OAAO,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC,GAAG,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACzE,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YACtC,OAAO,EAAE,GAAG,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,mBAAmB,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;QAChG,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;YACtC,MAAM,EAAE,UAAU,EAAE,mBAAmB,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAC;YACjE,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAgB,EAAE,aAAqB;IAClE,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,mBAAmB,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IAE3F,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACtC,IAAI,KAAK,KAAK,CAAC,CAAC,EAAE,CAAC;QACjB,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,EAAE,mBAAmB,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IACzG,CAAC;IAED,OAAO;QACL,UAAU,EAAE,YAAY;QACxB,aAAa,EAAE,KAAK;QACpB,mBAAmB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC;QACzF,aAAa,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,GAAG,CAAC,EAAE,KAAK,CAAC;QAC9D,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC;KAC/E,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,OAAuB;IAC1C,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;AAC3F,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,SAAS,GAAG,KAA6B,CAAC;IAChD,OAAO,OAAO,SAAS,CAAC,EAAE,KAAK,QAAQ;WAClC,OAAO,SAAS,CAAC,eAAe,KAAK,QAAQ;WAC7C,SAAS,CAAC,OAAO,EAAE,MAAM,KAAK,iBAAiB;WAC/C,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ;WAClC,OAAO,SAAS,CAAC,SAAS,KAAK,QAAQ;WACvC,CAAC,SAAS,CAAC,IAAI,KAAK,MAAM,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,eAAe,CAAC,QAAgB;IACvC,OAAO,QAAQ,CAAC,UAAU,CAAC,wBAAwB,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,4BAA4B,CAAC,CAAC;AAC5G,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB;IAC5C,OAAO,QAAQ,CAAC,UAAU,CAAC,8BAA8B,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,kCAAkC,CAAC,CAAC;AACxH,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACtD,MAAM,SAAS,GAAG,KAA8B,CAAC;IACjD,OAAO,OAAO,SAAS,CAAC,EAAE,KAAK,QAAQ;WAClC,CAAC,SAAS,CAAC,IAAI,KAAK,iBAAiB,IAAI,SAAS,CAAC,IAAI,KAAK,kBAAkB,IAAI,SAAS,CAAC,IAAI,KAAK,kBAAkB,CAAC;WACxH,OAAO,SAAS,CAAC,SAAS,KAAK,QAAQ;WACvC,OAAO,SAAS,CAAC,cAAc,KAAK,QAAQ;WAC5C,OAAO,SAAS,CAAC,SAAS,KAAK,QAAQ;WACvC,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ,CAAC;AAC7C,CAAC"}

package/dist/rooms/crypto.d.ts

@@ -0,0 +1,11 @@
+export interface EncryptedPayload {
+    nonce: string;
+    ciphertext: string;
+}
+export interface EncryptedUpdateMetadata {
+    roomId: string;
+    senderId: string;
+}
+export declare function deriveRoomKey(roomId: string, roomSecret: string): Promise<CryptoKey>;
+export declare function encryptUpdate(update: Uint8Array, key: CryptoKey, metadata: EncryptedUpdateMetadata): Promise<EncryptedPayload>;
+export declare function decryptUpdate(payload: EncryptedPayload, key: CryptoKey, metadata: EncryptedUpdateMetadata): Promise<Uint8Array>;

package/dist/rooms/crypto.js

@@ -0,0 +1,44 @@
+import { webcrypto } from 'node:crypto';
+const encoder = new TextEncoder();
+export async function deriveRoomKey(roomId, roomSecret) {
+    const inputKey = await webcrypto.subtle.importKey('raw', encoder.encode(roomSecret), 'HKDF', false, ['deriveKey']);
+    return webcrypto.subtle.deriveKey({
+        name: 'HKDF',
+        hash: 'SHA-256',
+        salt: encoder.encode(`fold:${roomId}`),
+        info: encoder.encode('yjs-update-append-log:v1'),
+    }, inputKey, { name: 'AES-GCM', length: 256 }, false, ['encrypt', 'decrypt']);
+}
+export async function encryptUpdate(update, key, metadata) {
+    const nonce = webcrypto.getRandomValues(new Uint8Array(12));
+    const ciphertext = await webcrypto.subtle.encrypt({
+        name: 'AES-GCM',
+        iv: nonce,
+        additionalData: metadataAdditionalData(metadata),
+    }, key, update);
+    return {
+        nonce: toBase64Url(nonce),
+        ciphertext: toBase64Url(new Uint8Array(ciphertext)),
+    };
+}
+export async function decryptUpdate(payload, key, metadata) {
+    const plaintext = await webcrypto.subtle.decrypt({
+        name: 'AES-GCM',
+        iv: fromBase64Url(payload.nonce),
+        additionalData: metadataAdditionalData(metadata),
+    }, key, fromBase64Url(payload.ciphertext));
+    return new Uint8Array(plaintext);
+}
+function metadataAdditionalData(metadata) {
+    return encoder.encode(JSON.stringify({
+        roomId: metadata.roomId,
+        senderId: metadata.senderId,
+    }));
+}
+function toBase64Url(bytes) {
+    return Buffer.from(bytes).toString('base64url');
+}
+function fromBase64Url(value) {
+    return new Uint8Array(Buffer.from(value, 'base64url'));
+}
+//# sourceMappingURL=crypto.js.map

package/dist/rooms/crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.js","sourceRoot":"","sources":["../../../../src/rooms/crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAYlC,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAc,EAAE,UAAkB;IACpE,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,SAAS,CAC/C,KAAK,EACL,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAC1B,MAAM,EACN,KAAK,EACL,CAAC,WAAW,CAAC,CACd,CAAC;IAEF,OAAO,SAAS,CAAC,MAAM,CAAC,SAAS,CAC/B;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,MAAM,EAAE,CAAC;QACtC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,0BAA0B,CAAC;KACjD,EACD,QAAQ,EACR,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAChC,KAAK,EACL,CAAC,SAAS,EAAE,SAAS,CAAC,CACvB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAkB,EAClB,GAAc,EACd,QAAiC;IAEjC,MAAM,KAAK,GAAG,SAAS,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5D,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,OAAO,CAC/C;QACE,IAAI,EAAE,SAAS;QACf,EAAE,EAAE,KAAK;QACT,cAAc,EAAE,sBAAsB,CAAC,QAAQ,CAAC;KACjD,EACD,GAAG,EACH,MAAM,CACP,CAAC;IAEF,OAAO;QACL,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC;QACzB,UAAU,EAAE,WAAW,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC;KACpD,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAyB,EACzB,GAAc,EACd,QAAiC;IAEjC,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,OAAO,CAC9C;QACE,IAAI,EAAE,SAAS;QACf,EAAE,EAAE,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC;QAChC,cAAc,EAAE,sBAAsB,CAAC,QAAQ,CAAC;KACjD,EACD,GAAG,EACH,aAAa,CAAC,OAAO,CAAC,UAAU,CAAC,CAClC,CAAC;IAEF,OAAO,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAiC;IAC/D,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;QACnC,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;KAC5B,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,WAAW,CAAC,KAAiB;IACpC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC;AACzD,CAAC"}

package/dist/rooms/encrypted-records.d.ts

@@ -0,0 +1,5 @@
+import type { IncomingEncryptedUpdate } from '../server/append-log.js';
+import { type EncryptedPayload } from './crypto.js';
+import type { RoomAccess } from './room-reference.js';
+export declare function encryptJsonRecord(access: RoomAccess, senderId: string, value: unknown): Promise<IncomingEncryptedUpdate>;
+export declare function decryptJsonRecord(access: RoomAccess, payload: EncryptedPayload, senderId: string): Promise<unknown>;

package/dist/rooms/encrypted-records.js

@@ -0,0 +1,21 @@
+import { decryptUpdate, deriveRoomKey, encryptUpdate } from './crypto.js';
+export async function encryptJsonRecord(access, senderId, value) {
+    const roomKey = await deriveRoomKey(access.roomId, access.roomSecret);
+    const encrypted = await encryptUpdate(Buffer.from(JSON.stringify(value), 'utf8'), roomKey, {
+        roomId: access.roomId,
+        senderId,
+    });
+    return {
+        senderId,
+        ...encrypted,
+    };
+}
+export async function decryptJsonRecord(access, payload, senderId) {
+    const roomKey = await deriveRoomKey(access.roomId, access.roomSecret);
+    const bytes = await decryptUpdate(payload, roomKey, {
+        roomId: access.roomId,
+        senderId,
+    });
+    return JSON.parse(Buffer.from(bytes).toString('utf8'));
+}
+//# sourceMappingURL=encrypted-records.js.map

package/dist/rooms/encrypted-records.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encrypted-records.js","sourceRoot":"","sources":["../../../../src/rooms/encrypted-records.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAyB,MAAM,aAAa,CAAC;AAGjG,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAkB,EAClB,QAAgB,EAChB,KAAc;IAEd,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IACtE,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE;QACzF,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ;KACT,CAAC,CAAC;IACH,OAAO;QACL,QAAQ;QACR,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAkB,EAClB,OAAyB,EACzB,QAAgB;IAEhB,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IACtE,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE;QAClD,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ;KACT,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAY,CAAC;AACpE,CAAC"}

package/dist/rooms/markdown-snapshot.d.ts

@@ -0,0 +1,23 @@
+import { type EncryptedPayload } from './crypto.js';
+import type { EncryptedUpdateRecord, IncomingEncryptedUpdate } from '../server/append-log.js';
+import type { RoomAccess } from './room-reference.js';
+export declare const MARKDOWN_YTEXT_NAME = "markdown";
+export declare const MARKDOWN_CANONICAL = "y.text:markdown";
+export declare const ENCRYPTED_SNAPSHOT_FORMAT = "encrypted-yjs-update-v1";
+export declare const DOCUMENT_UPDATE_SENDER_ID = "fold-cli:document";
+export interface EncryptedMarkdownSnapshot extends EncryptedPayload {
+    format: typeof ENCRYPTED_SNAPSHOT_FORMAT;
+    senderId: string;
+}
+export interface MarkdownDocumentSummary {
+    canonical: typeof MARKDOWN_CANONICAL;
+    bytes: number;
+    sha256: string;
+}
+export declare function createEncryptedMarkdownSnapshot(markdown: string, access: RoomAccess, senderId: string): Promise<EncryptedMarkdownSnapshot>;
+export declare function createEncryptedMarkdownUpdate(markdown: string, access: RoomAccess, senderId?: string): Promise<IncomingEncryptedUpdate>;
+export declare function createEncryptedMarkdownReplacementUpdate(currentMarkdown: string, replacementMarkdown: string, access: RoomAccess, senderId?: string): Promise<IncomingEncryptedUpdate>;
+export declare function createEncryptedMarkdownReplacementUpdateFromRecords(records: EncryptedUpdateRecord[], replacementMarkdown: string, access: RoomAccess, senderId?: string): Promise<IncomingEncryptedUpdate>;
+export declare function decryptMarkdownSnapshot(snapshot: EncryptedMarkdownSnapshot, access: RoomAccess): Promise<string>;
+export declare function decryptMarkdownFromRecords(records: EncryptedUpdateRecord[], access: RoomAccess): Promise<string>;
+export declare function summarizeMarkdown(markdown: string): MarkdownDocumentSummary;

package/dist/rooms/markdown-snapshot.js

@@ -0,0 +1,126 @@
+import { createHash } from 'node:crypto';
+import * as Y from 'yjs';
+import { decryptUpdate, deriveRoomKey, encryptUpdate, } from './crypto.js';
+import { assertContiguousRecords } from './append-log-validation.js';
+export const MARKDOWN_YTEXT_NAME = 'markdown';
+export const MARKDOWN_CANONICAL = 'y.text:markdown';
+export const ENCRYPTED_SNAPSHOT_FORMAT = 'encrypted-yjs-update-v1';
+export const DOCUMENT_UPDATE_SENDER_ID = 'fold-cli:document';
+export async function createEncryptedMarkdownSnapshot(markdown, access, senderId) {
+    const encrypted = await createEncryptedMarkdownUpdate(markdown, access, senderId);
+    return {
+        format: ENCRYPTED_SNAPSHOT_FORMAT,
+        senderId,
+        nonce: encrypted.nonce,
+        ciphertext: encrypted.ciphertext,
+    };
+}
+export async function createEncryptedMarkdownUpdate(markdown, access, senderId = DOCUMENT_UPDATE_SENDER_ID) {
+    const doc = new Y.Doc();
+    try {
+        doc.getText(MARKDOWN_YTEXT_NAME).insert(0, markdown);
+        const update = Y.encodeStateAsUpdate(doc);
+        return encryptMarkdownYjsUpdate(update, access, senderId);
+    }
+    finally {
+        doc.destroy();
+    }
+}
+export async function createEncryptedMarkdownReplacementUpdate(currentMarkdown, replacementMarkdown, access, senderId = DOCUMENT_UPDATE_SENDER_ID) {
+    const doc = new Y.Doc();
+    try {
+        const text = doc.getText(MARKDOWN_YTEXT_NAME);
+        text.insert(0, currentMarkdown);
+        const beforeReplacement = Y.encodeStateVector(doc);
+        text.delete(0, text.length);
+        text.insert(0, replacementMarkdown);
+        const update = Y.encodeStateAsUpdate(doc, beforeReplacement);
+        return encryptMarkdownYjsUpdate(update, access, senderId);
+    }
+    finally {
+        doc.destroy();
+    }
+}
+export async function createEncryptedMarkdownReplacementUpdateFromRecords(records, replacementMarkdown, access, senderId = DOCUMENT_UPDATE_SENDER_ID) {
+    const doc = new Y.Doc();
+    try {
+        assertContiguousRecords(records, access.roomId);
+        const roomKey = await deriveRoomKey(access.roomId, access.roomSecret);
+        for (const record of records) {
+            if (record.senderId !== DOCUMENT_UPDATE_SENDER_ID)
+                continue;
+            const update = await decryptUpdate(record, roomKey, {
+                roomId: record.roomId,
+                senderId: record.senderId,
+            });
+            Y.applyUpdate(doc, update, 'server-replacement');
+        }
+        const text = doc.getText(MARKDOWN_YTEXT_NAME);
+        const beforeReplacement = Y.encodeStateVector(doc);
+        text.delete(0, text.length);
+        text.insert(0, replacementMarkdown);
+        const update = Y.encodeStateAsUpdate(doc, beforeReplacement);
+        return encryptMarkdownYjsUpdate(update, access, senderId);
+    }
+    finally {
+        doc.destroy();
+    }
+}
+export async function decryptMarkdownSnapshot(snapshot, access) {
+    if (snapshot.format !== ENCRYPTED_SNAPSHOT_FORMAT) {
+        throw new Error(`Unsupported encrypted snapshot format ${JSON.stringify(snapshot.format)}`);
+    }
+    const doc = new Y.Doc();
+    try {
+        const roomKey = await deriveRoomKey(access.roomId, access.roomSecret);
+        const update = await decryptUpdate(snapshot, roomKey, {
+            roomId: access.roomId,
+            senderId: snapshot.senderId,
+        });
+        Y.applyUpdate(doc, update, 'local-export');
+        return doc.getText(MARKDOWN_YTEXT_NAME).toString();
+    }
+    finally {
+        doc.destroy();
+    }
+}
+export async function decryptMarkdownFromRecords(records, access) {
+    const doc = new Y.Doc();
+    try {
+        assertContiguousRecords(records, access.roomId);
+        const roomKey = await deriveRoomKey(access.roomId, access.roomSecret);
+        for (const record of records) {
+            if (record.senderId !== DOCUMENT_UPDATE_SENDER_ID)
+                continue;
+            const update = await decryptUpdate(record, roomKey, {
+                roomId: record.roomId,
+                senderId: record.senderId,
+            });
+            Y.applyUpdate(doc, update, 'server-export');
+        }
+        return doc.getText(MARKDOWN_YTEXT_NAME).toString();
+    }
+    finally {
+        doc.destroy();
+    }
+}
+export function summarizeMarkdown(markdown) {
+    const bytes = Buffer.byteLength(markdown, 'utf8');
+    return {
+        canonical: MARKDOWN_CANONICAL,
+        bytes,
+        sha256: createHash('sha256').update(markdown).digest('hex'),
+    };
+}
+async function encryptMarkdownYjsUpdate(update, access, senderId) {
+    const roomKey = await deriveRoomKey(access.roomId, access.roomSecret);
+    const encrypted = await encryptUpdate(update, roomKey, {
+        roomId: access.roomId,
+        senderId,
+    });
+    return {
+        senderId,
+        ...encrypted,
+    };
+}
+//# sourceMappingURL=markdown-snapshot.js.map