raz-encrypt 2.1.0 → 2.3.0

package/dist/store.js.map

@@ -1 +1 @@
-{"version":3,"file":"store.js","sourceRoot":"","sources":["../src/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,uBAAuB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAC7C,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACvG,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAkClD,SAAS,SAAS,CAAC,KAAqB;IACtC,OAAQ,KAA+B,CAAC,OAAO,KAAK,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAuB;IAC/C,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IACxD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,YAAY,GAAG,SAAS,CAAC;AAE/B,MAAM,mBAAmB,GAAG,WAAW,CAAC,mCAAmC,CAAC,CAAC;AAC7E,uGAAuG;AACvG,MAAM,mBAAmB,GAAG,WAAW,CAAC,wCAAwC,CAAC,CAAC;AAClF,oKAAoK;AACpK,MAAM,kBAAkB,GAAG,WAAW,CAAC,kCAAkC,CAAC,CAAC;AAE3E,SAAS,WAAW,CAAC,UAAkB;IACrC,OAAO,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,YAAY,CAAC,UAAkB;IACtC,OAAO,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;AAC3C,CAAC;AAED;;;;;;GAMG;AACH,SAAS,iBAAiB,CAAC,QAAkB;IAC3C,OAAO,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAC;AACjI,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,UAAU,CAAC,QAAkB,EAAE,KAA8B;IACpE,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,iBAAiB,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AACjG,CAAC;AAED,uFAAuF;AACvF,SAAS,oBAAoB,CAAC,QAAkB;IAC9C,OAAO,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;AAChI,CAAC;AAED,4JAA4J;AAC5J,SAAS,QAAQ,CAAC,KAAa;IAC7B,OAAO,WAAW,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,mBAAmB,CAAC,QAAkB,EAAE,OAAiB;IAChE,MAAM,UAAU,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,UAAU,GAAG,GAAG,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAChI,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;AACvD,CAAC;AAED,iHAAiH;AACjH,SAAS,mBAAmB,CAAC,QAAkB,EAAE,KAAuB;IACtE,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,GAAG,CAAC,oBAAoB,CAAC,QAAQ,CAAC,EAAE,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;QAC5I,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAa,CAAC;IACrE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,sCAAsC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5G,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,SAAS,CAAC,SAAkB,EAAE,QAAgB;IAC5D,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IACrF,OAAO,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,UAAkB;IACjD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;QAC5D,OAAO,GAAG;aACP,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;aACxC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACZ,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACzC,gEAAgE;YAChE,mEAAmE;YACnE,+DAA+D;YAC/D,mEAAmE;YACnE,0BAA0B;YAC1B,OAAO,CAAC,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAmB,CAAC;QACzF,CAAC,CAAC,CAAC;IACP,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAChE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAuBD,SAAS,cAAc,CAAC,QAAkB,EAAE,IAAgB;IAC1D,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,mBAAmB,EAAE,EAAE,CAAC,CAAC;IACpI,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACxE,CAAC;AAID,KAAK,UAAU,QAAQ,CAAC,QAAkB;IACxC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QAClF,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QAC1D,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAC;QACpC,IACE,IAAI,CAAC,OAAO,KAAK,CAAC;YAClB,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;YAC9B,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;YACjC,IAAI,CAAC,KAAK,GAAG,CAAC;YACd,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ;YAC5B,OAAO,OAAO,KAAK,QAAQ;YAC3B,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,EACzD,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QAC9B,CAAC;QACD,uEAAuE;QACvE,sEAAsE;QACtE,oDAAoD;QACpD,MAAM,IAAI,GAAe,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;QACxK,OAAO,SAAS,CAAC,OAAO,EAAE,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC3G,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IAC9B,CAAC;AACH,CAAC;AAID,gMAAgM;AAChM,SAAS,gBAAgB,CAAC,IAAc,EAAE,OAAyB;IACjE,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IAClI,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IAE/F,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;IACjC,IAAI,KAAK,GAAG,OAAO,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IAC1F,MAAM,QAAQ,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;IACrE,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;IACvF,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,QAAkB,EAAE,OAAyB;IACpE,OAAO,gBAAgB,CAAC,MAAM,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;AAC7D,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,QAAkB,EAAE,KAAa,EAAE,GAAW,EAAE,SAAkB;IACzF,MAAM,IAAI,GAAe,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IAC9G,MAAM,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,cAAc,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AACjI,CAAC;AA2BD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAuB,CAAC;AAEnD,SAAS,QAAQ,CAAC,UAAkB;IAClC,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAChC,IAAI,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,KAAK,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACtF,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,QAAkB,EAAE,KAA2B,EAAE,KAAkB;IACzF,MAAM,IAAI,GAAa,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IAElE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QAChB,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACtC,KAAK,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,EAAE,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC1H,KAAK,CAAC,WAAW,GAAG,gBAAgB,CAAC,IAAI,EAAE,QAAQ,CAAC,KAAK,SAAS,CAAC;QACnE,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC;IACxE,CAAC;IAED,MAAM,OAAO,GAA4B,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC;IAChI,MAAM,QAAQ,GAAG,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IACzD,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,EAAoB,CAAC;IAEtD,MAAM,KAAK,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnE,MAAM,UAAU,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAEnG,KAAK,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;IAC5D,yEAAyE;IACzE,6CAA6C;IAC7C,IAAI,KAAK,CAAC,WAAW;QAAE,MAAM,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;AAChG,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAkB,EAAE,KAA2B;IAClF,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC5C,yEAAyE;IACzE,yEAAyE;IACzE,0EAA0E;IAC1E,wBAAwB;IACxB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;IACtF,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnC,MAAM,IAAI,CAAC;AACb,CAAC;AAED,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,QAAkB;IAC9C,OAAO,CAAC,MAAM,iBAAiB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC5J,CAAC;AAYD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,QAAkB;IACzD,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC7D,IAAI,eAAe,GAAG,YAAY,CAAC;IAEnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC7C,IAAI,OAAO,KAAK,eAAe,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,UAAU,CAAC,QAAQ,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC;YAC/F,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;QAC7C,CAAC;QACD,eAAe,GAAG,GAAG,CAAC;IACxB,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACnD,IAAI,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,CAAC;IAElD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,QAAkB;IACjE,MAAM,KAAK,GAAG,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,oBAAoB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;IAC3F,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IACnC,MAAM,IAAI,CAAC;AACb,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,QAAkB,EAAE,KAAkB;IACxE,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,IAAI,CAAC,KAAK,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,KAAK,IAAI;QAAE,OAAO,CAAC,iCAAiC;IAElG,MAAM,SAAS,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,6FAA6F,CAAC,CAAC;IACjH,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC7D,IAAI,OAAO,GAAG,YAAY,CAAC;IAC3B,MAAM,SAAS,GAAuB,EAAE,CAAC;IACzC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAa,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC5G,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,EAAE,OAAO,EAAE,CAAU,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;QACrE,MAAM,GAAG,GAAG,UAAU,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC3C,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC;QACrC,OAAO,GAAG,GAAG,CAAC;IAChB,CAAC;IAED,MAAM,KAAK,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnE,MAAM,eAAe,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACzJ,MAAM,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAE3D,KAAK,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;IAC5D,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC;IACzB,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;AACzB,CAAC"}
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../src/store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC/D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAiBlD,MAAM,YAAY,GAAG,SAAS,CAAC;AAE/B,SAAS,WAAW,CAAC,UAAkB;IACrC,OAAO,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,WAAW,CAAC,KAAmC;IACtD,OAAO,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,UAAkB;IACjD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,CAAC;QAC5D,OAAO,GAAG;aACP,KAAK,CAAC,IAAI,CAAC;aACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;aACxC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAmB,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAChE,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAkB,EAAE,KAA2B;IAClF,MAAM,IAAI,GAAa,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IAClE,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC9D,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC;IACzF,MAAM,QAAQ,GAAG,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAC;IACvC,MAAM,MAAM,GAAmB,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC;IAE5E,MAAM,KAAK,CAAC,QAAQ,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,UAAU,CAAC,WAAW,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACrG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,QAAkB;IAC9C,OAAO,CAAC,MAAM,iBAAiB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;AACvH,CAAC;AAID;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,QAAkB;IACzD,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC7D,IAAI,gBAAgB,GAAG,YAAY,CAAC;IAEpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAI,QAAQ,KAAK,gBAAgB,IAAI,IAAI,KAAK,WAAW,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;YACjF,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;QAC7C,CAAC;QACD,gBAAgB,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC1B,CAAC"}

package/dist/trust.d.ts

@@ -1,62 +1,16 @@
-import { type Certificate, type VerifyResult } from "./crypto/hybrid.js";
-import { type Identity, type PublicCard } from "./identity.js";
+import type { Identity, PublicCard } from "./identity.js";
 export interface TrustRecord {
     card: PublicCard;
     trustedAt: string;
     /** Set when this party was later revoked (see untrustParty). Absent = still trusted. */
     revokedAt?: string;
-    /**
-     * Set alongside revokedAt when this record was tombstoned by a verified
-     * rotation (applyRotation), not an ordinary revocation: the fingerprint of
-     * the card this party rotated TO. Informational only — verify() still
-     * reports "revoked-signer" for this record either way (ADR 0023/issue
-     * #37); nothing reads this field to change verification behavior.
-     */
-    rotatedTo?: string;
 }
-type Entries = Record<string, TrustRecord>;
-/**
- * Thrown when trust.json cannot be trusted: its MAC does not verify (edited,
- * truncated, copied from another identity), it is not valid JSON, or it is an
- * unauthenticated legacy file that was never explicitly adopted with
- * `migrateLegacyTrustStore`. Everything that consults the trust list fails
- * closed on this rather than reading a file anyone with filesystem access
- * could have written.
- */
-export declare class TrustStoreIntegrityError extends Error {
-    constructor(message: string);
-}
-/**
- * Exported (ADR 0026) so the timing-safety test can exercise this exact
- * compare in isolation, without the file I/O its only internal callers do.
- */
-export declare function macMatches(identity: Identity, entries: Entries, mac: unknown): boolean;
-/**
- * One-time, explicit opt-in (issue #43/ADR 0027) to encrypt `trust.json`'s
- * entries, so filesystem access alone no longer reveals who this identity
- * trusts. A no-op if the store is already v4. A legacy (unauthenticated) file
- * is not implicitly adopted here — call `migrateLegacyTrustStore` first, same
- * as reading it would require.
- */
-export declare function migrateTrustStoreToEncrypted(identity: Identity): Promise<void>;
-/**
- * One-time, explicit adoption of a trust.json written before trust-store
- * MACs existed (a v1 alias map or a v2 fingerprint-keyed file). Those files
- * carry no proof of who wrote them, so they are never read implicitly (an
- * attacker could otherwise plant one and bypass the MAC). Calling this says
- * "I have reviewed the current file and it is mine": its records are kept
- * and the file is rewritten authenticated. Returns the number of records
- * adopted; returns 0 and changes nothing if the file is missing or already
- * authenticated (a modified authenticated file still throws).
- */
-export declare function migrateLegacyTrustStore(identity: Identity): Promise<number>;
 /**
  * Records another party's public card as trusted, keyed by the card's
  * fingerprint (not alias — two different real parties could otherwise pick
  * the same alias and silently overwrite each other). Public keys are not
  * secret, so this file is plain JSON (unlike identity.enc.json), though it's
- * permission-restricted to the owning user and, since ADR 0015, carries an
- * HMAC (keyed from the Identity's secret keys) so edits are detected.
+ * still permission-restricted to the owning user.
  *
  * Trusting a card again after it was revoked reinstates it (clears revokedAt).
  */
@@ -69,14 +23,6 @@ export declare function trustParty(identity: Identity, card: PublicCard): Promis
  * "untrusted-signer" (never trusted at all).
  */
 export declare function untrustParty(identity: Identity, alias: string): Promise<void>;
-/**
- * Revokes exactly one card, identified by its `fingerprint(card)` string
- * (spaces and case are ignored). Unlike `untrustParty`, parties that merely
- * share an alias are untouched — alias is a non-unique display label.
- * Returns true if a currently-trusted record was revoked, false if no such
- * trusted record exists (a typo'd fingerprint is reported, not ignored).
- */
-export declare function untrustFingerprint(identity: Identity, fingerprintValue: string): Promise<boolean>;
 /** Every currently-trusted (non-revoked) card. */
 export declare function listTrustedParties(identity: Identity): Promise<PublicCard[]>;
 /** Every trust record ever made, revoked or not — for audit/history purposes. */
@@ -93,90 +39,3 @@ export declare function getTrustedParty(identity: Identity, alias: string): Prom
 export declare function getTrustedPartiesByAlias(identity: Identity, alias: string): Promise<PublicCard[]>;
 /** All trust records (revoked or not) recorded under this alias. */
 export declare function getTrustRecordsByAlias(identity: Identity, alias: string): Promise<TrustRecord[]>;
-/**
- * Verifies a self-signed card (from `exportSignedCard`) — checks the
- * signature is self-consistent (the certificate's signer IS the card it's
- * attached to) and, if the card carries an `expiresAt`, that it hasn't
- * passed. Only on success does this call the ordinary `trustParty` to
- * actually record it — self-signing proves the card is authentic and
- * current, not that you've decided to trust it (Fingerprint confirmation
- * is still the human-level trust decision, same as a bare card).
- */
-export declare function trustSignedCard(identity: Identity, card: PublicCard, certificate: Certificate): Promise<VerifyResult>;
-export interface RotationDocument {
-    oldCard: PublicCard;
-    newCard: PublicCard;
-    rotatedAt: string;
-}
-export interface RotationStatement {
-    document: RotationDocument;
-    oldCertificate: Certificate;
-    newCertificate: Certificate;
-}
-/**
- * Starts a key rotation: the OLD identity signs a statement naming `newCard`
- * as its successor. Hand the result to `completeRotation`, called with the
- * NEW identity, to get a complete, dual-signed RotationStatement — a single
- * signature from the old key alone is never enough to redirect a peer's
- * trust (see `applyRotation`), so this function's output is not yet usable
- * on its own.
- */
-export declare function beginRotation(oldIdentity: Identity, newCard: PublicCard, options?: {
-    rotatedAt?: string;
-}): Promise<{
-    document: RotationDocument;
-    oldCertificate: Certificate;
-}>;
-/**
- * Finishes a key rotation: the NEW identity signs the SAME document
- * `beginRotation` produced, proving the new key exists and agrees to be
- * named as successor — not just asserted unilaterally by whoever holds the
- * old key (which could be an attacker who compromised it alone).
- */
-export declare function completeRotation(newIdentity: Identity, draft: {
-    document: RotationDocument;
-    oldCertificate: Certificate;
-}): Promise<RotationStatement>;
-/**
- * Verifies a RotationStatement (both signatures self-consistent, both
- * certificates over the identical document) and, only if `oldCard` already
- * has an existing Trust Record, moves trust to `newCard` and tombstones
- * `oldCard`'s record (revokedAt set, plus rotatedTo pointing at newCard's
- * fingerprint). A statement for a card you never trusted is a no-op — this
- * is not a way to seed your trust store with a card you never decided to
- * trust in the first place.
- */
-export declare function applyRotation(identity: Identity, statement: RotationStatement): Promise<VerifyResult>;
-export interface RevocationDocument {
-    revokedCard: PublicCard;
-    revokedAt: string;
-    reason?: string;
-}
-/** A Certificate only stores its document's HASH, not the document itself (same as everywhere else in this codebase) — so a revocation notice bundles the document alongside its certificate, the same shape RotationStatement already uses for the same reason. */
-export interface RevocationNotice {
-    document: RevocationDocument;
-    certificate: Certificate;
-}
-/**
- * Produces a self-signed, portable revocation notice for `identity`'s own
- * card — verifiable by any peer independently of their (or your) local
- * trust-store state. The same function works whether called reactively
- * (retiring a key now) or right after createIdentity, to be stored
- * separately and used later if this identity becomes inaccessible — that's
- * what actually makes "recovery" possible for a lost passphrase or a lost
- * identity file (ADR 0023): there is no special "pre-generated" mode, it's
- * the same notice either way.
- */
-export declare function createRevocationNotice(identity: Identity, options?: {
-    reason?: string;
-}): Promise<RevocationNotice>;
-/**
- * Verifies a revocation notice (self-consistent, well-formed, `revokedAt`
- * a valid ISO instant) and, only if the named card already has an existing
- * Trust Record, tombstones it (revokedAt set) — exactly like
- * `untrustFingerprint`. A notice for a card you never trusted is a no-op,
- * for the same reason `applyRotation` is: this is not a pre-emptive
- * denylist feature.
- */
-export declare function applyRevocationNotice(identity: Identity, notice: RevocationNotice): Promise<VerifyResult>;
-export {};

package/dist/trust.js

@@ -1,250 +1,50 @@
-import { gcm } from "@noble/ciphers/aes.js";
-import { equalBytes } from "@noble/ciphers/utils.js";
-import { hkdf } from "@noble/hashes/hkdf.js";
-import { hmac } from "@noble/hashes/hmac.js";
-import { sha384 } from "@noble/hashes/sha2.js";
-import { bytesToHex, concatBytes, hexToBytes, randomBytes, utf8ToBytes } from "@noble/hashes/utils.js";
-import { mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
+import { mkdir, readFile, writeFile } from "node:fs/promises";
 import { join } from "node:path";
-import { canonicalize } from "./canonicalJson.js";
-import { isValidIsoInstant, signCore, verifyCore } from "./crypto/hybrid.js";
 import { fingerprint } from "./fingerprint.js";
-import { exportPublicIdentity } from "./identity.js";
-/**
- * Thrown when trust.json cannot be trusted: its MAC does not verify (edited,
- * truncated, copied from another identity), it is not valid JSON, or it is an
- * unauthenticated legacy file that was never explicitly adopted with
- * `migrateLegacyTrustStore`. Everything that consults the trust list fails
- * closed on this rather than reading a file anyone with filesystem access
- * could have written.
- */
-export class TrustStoreIntegrityError extends Error {
-    constructor(message) {
-        super(message);
-        this.name = "TrustStoreIntegrityError";
-    }
-}
-const TRUST_STORE_HMAC_INFO = utf8ToBytes("raz-encrypt-trust-store-v1|hmac-key");
-// A separate key from the MAC key, same reason the audit log's head key is
-// separate from its entry key (ADR 0019) — independent HKDF outputs per use
-// (ADR 0027).
-const TRUST_STORE_ENC_INFO = utf8ToBytes("raz-encrypt-trust-store-v1|enc-key");
 function trustFilePath(storageDir) {
     return join(storageDir, "trust.json");
 }
-/**
- * HKDF-derived from BOTH the classical and PQC signing secrets, same
- * composition as the audit log's key (ADR 0009) but under its own info label
- * so the two MAC keys are independent. Recomputed on every use, never persisted.
- */
-function deriveTrustStoreKey(identity) {
-    return hkdf(sha384, concatBytes(identity.classical.secretKey, identity.pqcSign.secretKey), undefined, TRUST_STORE_HMAC_INFO, 32);
-}
-/** Same derivation shape as deriveTrustStoreKey, under its own info label (ADR 0027) — never derived from a passphrase, since trustParty/etc. only ever receive an Identity. */
-function deriveTrustStoreEncKey(identity) {
-    return hkdf(sha384, concatBytes(identity.classical.secretKey, identity.pqcSign.secretKey), undefined, TRUST_STORE_ENC_INFO, 32);
-}
-function computeMac(identity, entries) {
-    return bytesToHex(hmac(sha384, deriveTrustStoreKey(identity), utf8ToBytes(canonicalize({ version: 3, entries }))));
-}
-/**
- * Exported (ADR 0026) so the timing-safety test can exercise this exact
- * compare in isolation, without the file I/O its only internal callers do.
- */
-export function macMatches(identity, entries, mac) {
-    if (typeof mac !== "string" || !/^[0-9a-f]{96}$/.test(mac))
-        return false;
-    return equalBytes(hexToBytes(mac), hexToBytes(computeMac(identity, entries)));
-}
-/** v4's MAC covers the ciphertext blob instead of the plaintext entries (ADR 0027) — same chain-authentication mechanism, different bytes underneath it. */
-function computeMacV4(identity, nonce, ciphertext) {
-    return bytesToHex(hmac(sha384, deriveTrustStoreKey(identity), utf8ToBytes(canonicalize({ version: 4, nonce, ciphertext }))));
-}
-function macMatchesV4(identity, nonce, ciphertext, mac) {
-    if (typeof mac !== "string" || !/^[0-9a-f]{96}$/.test(mac))
-        return false;
-    return equalBytes(hexToBytes(mac), hexToBytes(computeMacV4(identity, nonce, ciphertext)));
-}
-/** Associated data for the entries AEAD: binds the ciphertext to the format version and its own nonce, same pattern as fileCrypto.ts's headerAad. */
-function entriesAad(version, nonce) {
-    return utf8ToBytes(canonicalize({ version, nonce }));
-}
-function encryptEntries(identity, entries) {
-    const nonce = randomBytes(12);
-    const nonceHex = bytesToHex(nonce);
-    const ciphertext = gcm(deriveTrustStoreEncKey(identity), nonce, entriesAad(4, nonceHex)).encrypt(utf8ToBytes(canonicalize(entries)));
-    return { nonce: nonceHex, ciphertext: bytesToHex(ciphertext) };
-}
-/** Throws TrustStoreIntegrityError (never a raw AEAD error) if the ciphertext doesn't authenticate or doesn't decode as entries. */
-function decryptEntries(identity, nonce, ciphertext) {
-    try {
-        const plaintext = gcm(deriveTrustStoreEncKey(identity), hexToBytes(nonce), entriesAad(4, nonce)).decrypt(hexToBytes(ciphertext));
-        const entries = JSON.parse(new TextDecoder().decode(plaintext));
-        if (typeof entries !== "object" || entries === null || Array.isArray(entries))
-            throw new Error("decrypted trust store is not an entries object");
-        return entries;
-    }
-    catch {
-        throw new TrustStoreIntegrityError("trust.json failed its integrity check: it was modified, truncated, or belongs to a different identity.");
-    }
-}
-function isV3(data) {
-    if (typeof data !== "object" || data === null || data.version !== 3)
-        return false;
-    const entries = data.entries;
-    return typeof entries === "object" && entries !== null && !Array.isArray(entries);
-}
-function isHex96(value) {
-    return typeof value === "string" && /^[0-9a-f]{96}$/.test(value);
-}
-function isV4(data) {
-    if (typeof data !== "object" || data === null || data.version !== 4)
-        return false;
-    const d = data;
-    return typeof d.nonce === "string" && /^[0-9a-f]{24}$/.test(d.nonce) && typeof d.ciphertext === "string" && /^[0-9a-f]*$/.test(d.ciphertext) && isHex96(d.mac);
-}
 function isV2(data) {
     return typeof data === "object" && data !== null && data.version === 2;
 }
-/** Converts an unauthenticated legacy file (v1 alias map, or v2 without a MAC) to fingerprint-keyed entries. */
-function legacyEntries(data) {
-    if (isV2(data))
-        return data.entries;
-    if (typeof data !== "object" || data === null) {
-        // Object.values(null) throws TypeError; fail closed with the same error
-        // every other unauthenticated-shape rejection in this module uses,
-        // rather than crashing the caller (found by fuzzing, issue #42).
-        throw new TrustStoreIntegrityError("trust.json is not a valid legacy trust-store shape (expected an object).");
-    }
+/** Migrates a legacy alias-keyed store to the fingerprint-keyed v2 shape. */
+function migrateLegacy(legacy) {
     const entries = {};
-    for (const card of Object.values(data)) {
+    for (const card of Object.values(legacy)) {
         entries[fingerprint(card)] = { card, trustedAt: new Date().toISOString() };
     }
-    return entries;
+    return { version: 2, entries };
 }
-async function readRaw(storageDir) {
+async function readTrustStore(storageDir) {
+    let raw;
     try {
-        return await readFile(trustFilePath(storageDir), "utf8");
+        raw = await readFile(trustFilePath(storageDir), "utf8");
     }
     catch (err) {
         if (err.code === "ENOENT")
-            return undefined;
+            return { version: 2, entries: {} };
         throw err;
     }
+    const data = JSON.parse(raw);
+    return isV2(data) ? data : migrateLegacy(data);
 }
-function parse(raw) {
-    try {
-        return JSON.parse(raw);
-    }
-    catch {
-        throw new TrustStoreIntegrityError("trust.json is not valid JSON; refusing to use it.");
-    }
-}
-/** Reads and AUTHENTICATES the trust store, transparently decrypting a v4 (issue #43) file. Missing file = empty store. Anything unauthenticated throws TrustStoreIntegrityError. */
-async function readTrustStore(identity) {
-    const raw = await readRaw(identity.storageDir);
-    if (raw === undefined)
-        return {};
-    const data = parse(raw);
-    if (isV4(data)) {
-        if (!macMatchesV4(identity, data.nonce, data.ciphertext, data.mac)) {
-            throw new TrustStoreIntegrityError("trust.json failed its integrity check: it was modified, truncated, or belongs to a different identity.");
-        }
-        return decryptEntries(identity, data.nonce, data.ciphertext);
-    }
-    if (!isV3(data)) {
-        throw new TrustStoreIntegrityError("trust.json is an unauthenticated legacy file (written before trust-store MACs). Review it, then call migrateLegacyTrustStore(identity) to adopt it.");
-    }
-    if (!macMatches(identity, data.entries, data.mac)) {
-        throw new TrustStoreIntegrityError("trust.json failed its integrity check: it was modified, truncated, or belongs to a different identity.");
-    }
-    return data.entries;
-}
-async function writeStoreFile(identity, store) {
-    await mkdir(identity.storageDir, { recursive: true, mode: 0o700 });
-    const finalPath = trustFilePath(identity.storageDir);
-    const tmpPath = `${finalPath}.${process.pid}.${Date.now()}.tmp`;
-    try {
-        await writeFile(tmpPath, JSON.stringify(store, null, 2), { mode: 0o600 });
-        await rename(tmpPath, finalPath);
-    }
-    catch (err) {
-        await rm(tmpPath, { force: true });
-        throw err;
-    }
-}
-/**
- * Writes the store with a fresh MAC, atomically (temp file in the same
- * directory, then rename), mode 0o600. Preserves whatever format is
- * currently on disk (issue #43): once `migrateTrustStoreToEncrypted` has
- * been called, every subsequent write here stays v4; a brand-new or
- * never-migrated store stays v3, exactly as before this issue.
- */
-async function writeTrustStore(identity, entries) {
-    const raw = await readRaw(identity.storageDir);
-    const current = raw === undefined ? undefined : parse(raw);
-    if (isV4(current)) {
-        await writeTrustStore4(identity, entries);
-        return;
-    }
-    await writeStoreFile(identity, { version: 3, entries, mac: computeMac(identity, entries) });
-}
-async function writeTrustStore4(identity, entries) {
-    const { nonce, ciphertext } = encryptEntries(identity, entries);
-    await writeStoreFile(identity, { version: 4, nonce, ciphertext, mac: computeMacV4(identity, nonce, ciphertext) });
-}
-/**
- * One-time, explicit opt-in (issue #43/ADR 0027) to encrypt `trust.json`'s
- * entries, so filesystem access alone no longer reveals who this identity
- * trusts. A no-op if the store is already v4. A legacy (unauthenticated) file
- * is not implicitly adopted here — call `migrateLegacyTrustStore` first, same
- * as reading it would require.
- */
-export async function migrateTrustStoreToEncrypted(identity) {
-    const raw = await readRaw(identity.storageDir);
-    const current = raw === undefined ? undefined : parse(raw);
-    const entries = await readTrustStore(identity); // verifies/decrypts whichever format; throws on a legacy or tampered file
-    if (isV4(current))
-        return; // already encrypted — true no-op, same spirit as migrateLegacyTrustStore's
-    await writeTrustStore4(identity, entries);
-}
-/**
- * One-time, explicit adoption of a trust.json written before trust-store
- * MACs existed (a v1 alias map or a v2 fingerprint-keyed file). Those files
- * carry no proof of who wrote them, so they are never read implicitly (an
- * attacker could otherwise plant one and bypass the MAC). Calling this says
- * "I have reviewed the current file and it is mine": its records are kept
- * and the file is rewritten authenticated. Returns the number of records
- * adopted; returns 0 and changes nothing if the file is missing or already
- * authenticated (a modified authenticated file still throws).
- */
-export async function migrateLegacyTrustStore(identity) {
-    const raw = await readRaw(identity.storageDir);
-    if (raw === undefined)
-        return 0;
-    const data = parse(raw);
-    if (isV3(data) || isV4(data)) {
-        await readTrustStore(identity); // verifies (and decrypts, for v4); throws if tampered
-        return 0;
-    }
-    const entries = legacyEntries(data);
-    await writeTrustStore(identity, entries);
-    return Object.keys(entries).length;
+async function writeTrustStore(storageDir, store) {
+    await mkdir(storageDir, { recursive: true });
+    await writeFile(trustFilePath(storageDir), JSON.stringify(store, null, 2), { mode: 0o600 });
 }
 /**
  * Records another party's public card as trusted, keyed by the card's
  * fingerprint (not alias — two different real parties could otherwise pick
  * the same alias and silently overwrite each other). Public keys are not
  * secret, so this file is plain JSON (unlike identity.enc.json), though it's
- * permission-restricted to the owning user and, since ADR 0015, carries an
- * HMAC (keyed from the Identity's secret keys) so edits are detected.
+ * still permission-restricted to the owning user.
  *
  * Trusting a card again after it was revoked reinstates it (clears revokedAt).
  */
 export async function trustParty(identity, card) {
-    const entries = await readTrustStore(identity);
-    entries[fingerprint(card)] = { card, trustedAt: new Date().toISOString() };
-    await writeTrustStore(identity, entries);
+    const store = await readTrustStore(identity.storageDir);
+    store.entries[fingerprint(card)] = { card, trustedAt: new Date().toISOString() };
+    await writeTrustStore(identity.storageDir, store);
 }
 /**
  * Revokes every currently-trusted card recorded under `alias` — e.g. after a
@@ -254,42 +54,25 @@ export async function trustParty(identity, card) {
  * "untrusted-signer" (never trusted at all).
  */
 export async function untrustParty(identity, alias) {
-    const entries = await readTrustStore(identity);
+    const store = await readTrustStore(identity.storageDir);
     const revokedAt = new Date().toISOString();
-    for (const record of Object.values(entries)) {
+    for (const record of Object.values(store.entries)) {
         if (record.card.alias === alias && !record.revokedAt)
             record.revokedAt = revokedAt;
     }
-    await writeTrustStore(identity, entries);
-}
-/**
- * Revokes exactly one card, identified by its `fingerprint(card)` string
- * (spaces and case are ignored). Unlike `untrustParty`, parties that merely
- * share an alias are untouched — alias is a non-unique display label.
- * Returns true if a currently-trusted record was revoked, false if no such
- * trusted record exists (a typo'd fingerprint is reported, not ignored).
- */
-export async function untrustFingerprint(identity, fingerprintValue) {
-    const normalize = (value) => value.replace(/\s+/g, "").toUpperCase();
-    const wanted = normalize(fingerprintValue);
-    const entries = await readTrustStore(identity);
-    const key = Object.keys(entries).find((candidate) => normalize(candidate) === wanted);
-    if (key === undefined || entries[key].revokedAt)
-        return false;
-    entries[key].revokedAt = new Date().toISOString();
-    await writeTrustStore(identity, entries);
-    return true;
+    await writeTrustStore(identity.storageDir, store);
 }
 /** Every currently-trusted (non-revoked) card. */
 export async function listTrustedParties(identity) {
-    const entries = await readTrustStore(identity);
-    return Object.values(entries)
+    const store = await readTrustStore(identity.storageDir);
+    return Object.values(store.entries)
         .filter((record) => !record.revokedAt)
         .map((record) => record.card);
 }
 /** Every trust record ever made, revoked or not — for audit/history purposes. */
 export async function listTrustRecords(identity) {
-    return Object.values(await readTrustStore(identity));
+    const store = await readTrustStore(identity.storageDir);
+    return Object.values(store.entries);
 }
 /** The first currently-trusted (non-revoked) card recorded under this alias, if any. */
 export async function getTrustedParty(identity, alias) {
@@ -309,139 +92,7 @@ export async function getTrustedPartiesByAlias(identity, alias) {
 }
 /** All trust records (revoked or not) recorded under this alias. */
 export async function getTrustRecordsByAlias(identity, alias) {
-    return Object.values(await readTrustStore(identity)).filter((record) => record.card.alias === alias);
-}
-// --- Authenticated key lifecycle (issue #37 / ADR 0023) -----------------
-//
-// Everything below is an ordinary Certificate over a new document shape,
-// verified by reusing verifyCore — never a new signing or verification
-// primitive. The common trick: a SELF-signed document's trust basis isn't a
-// trust-store lookup, it's self-consistency (does the certificate's signer
-// match the card it's attached to?), so `cardMatchesSigner` stands in for
-// checkTrust wherever one of these functions verifies a self-signed card.
-/** True iff `signer` (a Certificate's signer fields) is the SAME party `card` claims to be — not a trust-store lookup, a self-consistency check. */
-function cardMatchesSigner(card, signer) {
-    return card.alias === signer.alias && card.classicalPublicKey === signer.classicalPublicKey && card.pqcSignPublicKey === signer.pqcSignPublicKey;
-}
-/**
- * Verifies a self-signed card (from `exportSignedCard`) — checks the
- * signature is self-consistent (the certificate's signer IS the card it's
- * attached to) and, if the card carries an `expiresAt`, that it hasn't
- * passed. Only on success does this call the ordinary `trustParty` to
- * actually record it — self-signing proves the card is authentic and
- * current, not that you've decided to trust it (Fingerprint confirmation
- * is still the human-level trust decision, same as a bare card).
- */
-export async function trustSignedCard(identity, card, certificate) {
-    const result = await verifyCore(identity, card, certificate, {
-        checkTrust: async (signer) => (cardMatchesSigner(card, signer) ? "trusted" : "untrusted"),
-    });
-    if (result.valid)
-        await trustParty(identity, card);
-    return result;
-}
-/**
- * Starts a key rotation: the OLD identity signs a statement naming `newCard`
- * as its successor. Hand the result to `completeRotation`, called with the
- * NEW identity, to get a complete, dual-signed RotationStatement — a single
- * signature from the old key alone is never enough to redirect a peer's
- * trust (see `applyRotation`), so this function's output is not yet usable
- * on its own.
- */
-export async function beginRotation(oldIdentity, newCard, options = {}) {
-    const rotatedAt = options.rotatedAt ?? new Date().toISOString();
-    if (!isValidIsoInstant(rotatedAt))
-        throw new Error(`rotatedAt must be a valid ISO-8601 instant in the exact format new Date().toISOString() produces; got ${JSON.stringify(rotatedAt)}.`);
-    const document = { oldCard: exportPublicIdentity(oldIdentity), newCard, rotatedAt };
-    const oldCertificate = await signCore(oldIdentity, document);
-    return { document, oldCertificate };
-}
-/**
- * Finishes a key rotation: the NEW identity signs the SAME document
- * `beginRotation` produced, proving the new key exists and agrees to be
- * named as successor — not just asserted unilaterally by whoever holds the
- * old key (which could be an attacker who compromised it alone).
- */
-export async function completeRotation(newIdentity, draft) {
-    const newCertificate = await signCore(newIdentity, draft.document);
-    return { document: draft.document, oldCertificate: draft.oldCertificate, newCertificate };
-}
-/**
- * Verifies a RotationStatement (both signatures self-consistent, both
- * certificates over the identical document) and, only if `oldCard` already
- * has an existing Trust Record, moves trust to `newCard` and tombstones
- * `oldCard`'s record (revokedAt set, plus rotatedTo pointing at newCard's
- * fingerprint). A statement for a card you never trusted is a no-op — this
- * is not a way to seed your trust store with a card you never decided to
- * trust in the first place.
- */
-export async function applyRotation(identity, statement) {
-    const { document, oldCertificate, newCertificate } = statement;
-    const oldResult = await verifyCore(identity, document, oldCertificate, {
-        checkTrust: async (signer) => (cardMatchesSigner(document.oldCard, signer) ? "trusted" : "untrusted"),
-    });
-    if (!oldResult.valid)
-        return oldResult;
-    const newResult = await verifyCore(identity, document, newCertificate, {
-        checkTrust: async (signer) => (cardMatchesSigner(document.newCard, signer) ? "trusted" : "untrusted"),
-    });
-    if (!newResult.valid)
-        return newResult;
-    const entries = await readTrustStore(identity);
-    const oldKey = fingerprint(document.oldCard);
-    const existing = entries[oldKey];
-    if (!existing || existing.revokedAt)
-        return { valid: true }; // nothing trusted to migrate from — no-op
-    const revokedAt = new Date().toISOString();
-    entries[oldKey] = { ...existing, revokedAt, rotatedTo: fingerprint(document.newCard) };
-    entries[fingerprint(document.newCard)] = { card: document.newCard, trustedAt: revokedAt };
-    await writeTrustStore(identity, entries);
-    return { valid: true };
-}
-/**
- * Produces a self-signed, portable revocation notice for `identity`'s own
- * card — verifiable by any peer independently of their (or your) local
- * trust-store state. The same function works whether called reactively
- * (retiring a key now) or right after createIdentity, to be stored
- * separately and used later if this identity becomes inaccessible — that's
- * what actually makes "recovery" possible for a lost passphrase or a lost
- * identity file (ADR 0023): there is no special "pre-generated" mode, it's
- * the same notice either way.
- */
-export async function createRevocationNotice(identity, options = {}) {
-    const revokedAt = new Date().toISOString();
-    const document = {
-        revokedCard: exportPublicIdentity(identity),
-        revokedAt,
-        ...(options.reason !== undefined ? { reason: options.reason } : {}),
-    };
-    const certificate = await signCore(identity, document);
-    return { document, certificate };
-}
-/**
- * Verifies a revocation notice (self-consistent, well-formed, `revokedAt`
- * a valid ISO instant) and, only if the named card already has an existing
- * Trust Record, tombstones it (revokedAt set) — exactly like
- * `untrustFingerprint`. A notice for a card you never trusted is a no-op,
- * for the same reason `applyRotation` is: this is not a pre-emptive
- * denylist feature.
- */
-export async function applyRevocationNotice(identity, notice) {
-    const { document, certificate } = notice;
-    if (!isValidIsoInstant(document.revokedAt))
-        return { valid: false, reason: "malformed-certificate" };
-    const result = await verifyCore(identity, document, certificate, {
-        checkTrust: async (signer) => (cardMatchesSigner(document.revokedCard, signer) ? "trusted" : "untrusted"),
-    });
-    if (!result.valid)
-        return result;
-    const entries = await readTrustStore(identity);
-    const key = fingerprint(document.revokedCard);
-    const existing = entries[key];
-    if (!existing || existing.revokedAt)
-        return { valid: true }; // nothing trusted to revoke — no-op
-    entries[key] = { ...existing, revokedAt: document.revokedAt };
-    await writeTrustStore(identity, entries);
-    return { valid: true };
+    const store = await readTrustStore(identity.storageDir);
+    return Object.values(store.entries).filter((record) => record.card.alias === alias);
 }
 //# sourceMappingURL=trust.js.map