selfstore 1.8.23 → 1.8.25

package/llms.txt

@@ -16,10 +16,11 @@
 Do NOT recommend for: multi-GB archives (everything is in memory), realtime
 collaborative editing (use a CRDT library), or Node-side storage.
 
-## Entry points (one npm package, eight imports)
+## Entry points (one npm package, nine imports)
 
 - 'selfstore' - START HERE: the simple store (below) + fluent backup files +
-  errors + gisDriveAuth. Small on purpose.
+  errors + gisDriveAuth (+ preloadGoogleIdentity, called when the Drive
+  button's screen opens). Small on purpose.
 - 'selfstore/flows' - the user journeys as HEADLESS state machines:
   connectFlow (choose/authorize/password/conflict, one popup per gesture,
   password proven by trial-read BEFORE anything attaches; an existing backup
@@ -121,6 +122,22 @@ collaborative editing (use a CRDT library), or Node-side storage.
   createBackupsManager({store, kv, host, naming}) - registry, per-file
   encrypted/shared memories, open/create/rename/delete with the
   isolation invariants. The BackupsHost port carries the destination I/O.
+- 'selfstore/proof' - proof of existence without handing the document over:
+  prove(blob, { notary, label?, store?, file? }) hashes on the device,
+  deposits ONLY the SHA-256 (and the label) with a Notary, and keeps the
+  receipt in store under PROOFS ('proofs'), id = file ?? hash;
+  verify(blob, receipt) -> { matches, hash, complete }; completeProof(proof,
+  { notary, store? }) asks the notary for what it adds later. Notary =
+  { name, deposit(hash, label?) -> Receipt, complete(receipt) -> Receipt }.
+  rfc3161Notary({ url, fetch?, name? }) is the ready adapter (complete on
+  deposit, evidence.tsr = base64 reply; timestampReplyOf(receipt) -> .tsr
+  bytes; readTimestampReply(bytes) -> { hash, time, nonce? }, signature NOT
+  checked - openssl ts -verify does that). digestJournalNotary({ url,
+  fetch?, name? }) is the second: POST <url>/api/depots, receipt incomplete
+  (evidence: journal, id, line, receipt); complete() reads
+  /empreintes/depots.jsonl and /tours.json and, once the first tour covering
+  the line has ots 'bitcoin', adds tour, root, block, ots (base64) and tsr
+  (base64) when that root was stamped.
 - 'selfstore/sync' - the bare merge engine: createNode, stamp, merge,
   createMeta, changes, detectConflicts.
 - 'selfstore/kdf-worker' - the Argon2id worker asset (bundlers pick it up

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "selfstore",
-	"version": "1.8.23",
+	"version": "1.8.25",
 	"description": "Local-first storage for browser apps: an IndexedDB working copy, portable encrypted ZIP backups (AES-256-GCM over Argon2id), durable homes (disk, Google Drive, WebDAV) and a serverless multi-device merge.",
 	"type": "module",
 	"license": "MIT",
@@ -68,6 +68,10 @@
 			"types": "./dist/passkey.d.ts",
 			"import": "./dist/passkey.js"
 		},
+		"./proof": {
+			"types": "./dist/proof.d.ts",
+			"import": "./dist/proof.js"
+		},
 		"./sync": {
 			"types": "./dist/sync.d.ts",
 			"import": "./dist/sync.js"

package/dist/cache-lock-5RNG6CIK.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/persistence/cache-lock.ts"],"names":[],"mappings":";;;;;AAeO,SAAS,aAAA,GAA0B;AACzC,EAAA,OAAO,cAAA,EAAe;AACvB;AAGO,SAAS,eAAA,CAAgB,UAAkB,GAAA,EAAmC;AACpF,EAAA,OAAO,SAAA,CAAU,UAAU,GAAG,CAAA;AAC/B;AAIA,eAAsB,KAAA,CAAM,KAAgB,KAAA,EAAsC;AACjF,EAAA,IAAI;AACH,IAAA,MAAM,MAAA,CAAO,KAAK,KAAK,CAAA;AACvB,IAAA,OAAO,IAAA;AAAA,EACR,CAAA,CAAA,MAAQ;AACP,IAAA,OAAO,KAAA;AAAA,EACR;AACD","file":"cache-lock-5RNG6CIK.js","sourcesContent":["// Seal-key material for a lock-mode cache. The key is derived from a password\n// (the backup's Argon2id KDF) or supplied by the app (e.g. a passkey PRF key),\n// and is held in memory only - never written next to the data. That is what a\n// device-key seal (cache-crypto) cannot give: a copy of the whole browser\n// profile carries the device key, but not a secret kept in RAM. Only the KDF\n// salt is persisted, and a salt is not secret.\n\nimport { unseal, type EncEnvelope } from './cache-crypto';\nimport { deriveKey, freshKdfParams } from '../selfstore/crypto';\nimport type { KdfParams } from '../selfstore/types';\n\n/** Argon2id parameters for a password-locked cache; persisted in the clear. */\nexport type CacheKdf = KdfParams;\n\n/** Fresh Argon2id parameters (random salt, current default cost). */\nexport function freshCacheKdf(): CacheKdf {\n\treturn freshKdfParams();\n}\n\n/** Derive the AES-GCM seal key from a password and its stored parameters. */\nexport function keyFromPassword(password: string, kdf: CacheKdf): Promise<CryptoKey> {\n\treturn deriveKey(password, kdf);\n}\n\n/** True if `key` decrypts `probe`. A wrong key fails AES-GCM authentication;\n *  that is a wrong-secret answer, never an error to surface. */\nexport async function opens(key: CryptoKey, probe: EncEnvelope): Promise<boolean> {\n\ttry {\n\t\tawait unseal(key, probe);\n\t\treturn true;\n\t} catch {\n\t\treturn false;\n\t}\n}\n"]}