selfstore 1.8.32 → 1.8.34

package/dist/{chunk-TB3CKC6Z.js → chunk-HQSK7HK3.js}

@@ -1,5 +1,5 @@
-import { createNode, createMeta, gcTombstones, stamp, merge, unsyncableCounts, idPathFor, detectConflicts, changes } from './chunk-GSZSZGSD.js';
-import { inspect, checkPasswordPolicy, writeBox, BACKUP_MIME, readBoxWithSync, asBytes } from './chunk-7U5XMKVP.js';
+import { createNode, createMeta, gcTombstones, stamp, merge, unsyncableCounts, idPathFor, detectConflicts, changes } from './chunk-A2RRJLIF.js';
+import { inspect, checkPasswordPolicy, writeBox, BACKUP_MIME, readBoxWithSync, asBytes } from './chunk-E4S77JSN.js';
 import { seal, isEnvelope, unseal, newDeviceKey } from './chunk-QBCU7OOP.js';
 import { openManifest, GROUP_KEYING } from './chunk-F4ZZEJ5H.js';
 import { mintSlot, MAX_KEY_SLOTS, mintExternalSlot, openSlot } from './chunk-H2T4S3KM.js';
@@ -253,8 +253,12 @@ function createLocalStore(opts) {
     subs.forEach((f) => f());
   };
   const locked = () => durableKind() && encrypted && !pass && !envelope && !group;
-  const ownGroupRead = () => group ? { identity: group.identity, authors: [group.identity.sigPub] } : void 0;
-  const peerGroupRead = () => group ? { identity: group.identity, authors: group.manifest.members.map((m) => m.sig) } : void 0;
+  const ownGroupRead = () => group ? { identity: group.identity, authors: [group.identity.sigPub], group: group.manifest.group } : void 0;
+  const peerGroupRead = () => group ? {
+    identity: group.identity,
+    authors: group.manifest.members.map((m) => m.sig),
+    group: group.manifest.group
+  } : void 0;
   const groupSeqKey = (id) => `groupSeq:${id}`;
   async function persistGroupSeq(id, seq) {
     await kv.set(groupSeqKey(id), seq);
@@ -349,7 +353,8 @@ function createLocalStore(opts) {
       recipients: [
         .../* @__PURE__ */ new Set([...group.manifest.members.map((m) => m.enc), group.identity.encPub])
       ],
-      sign: { pub: group.identity.sigPub, priv: group.identity.sigPriv }
+      sign: { pub: group.identity.sigPub, priv: group.identity.sigPriv },
+      id: group.manifest.group
     } : void 0;
     const bytes = await writeBox(
       { collections: snap.collections, files: snap.files },
@@ -1894,6 +1899,24 @@ function memoryCache() {
 var COLLECTIONS_KEY = "__collections";
 var DEVICE_KEY = "__deviceKey";
 var CACHE_KDF = "__cacheKdf";
+async function sealFile(k, meta, bytes) {
+  const sealedMeta = await seal(k, new TextEncoder().encode(JSON.stringify(meta)));
+  return { meta: sealedMeta, ...await seal(k, bytes) };
+}
+async function openFileMeta(k, v) {
+  if (!("meta" in v)) return { name: v.name, mime: v.mime };
+  if (!isEnvelope(v.meta)) {
+    throw new SelfstoreError("BAD_FORMAT", "Unrecognized cache record (not a sealed envelope).");
+  }
+  const meta = JSON.parse(new TextDecoder().decode(await unseal(k, v.meta)));
+  if (typeof meta.name !== "string" || typeof meta.mime !== "string") {
+    throw new SelfstoreError(
+      "BAD_FORMAT",
+      "Unrecognized cache record (file name or type missing)."
+    );
+  }
+  return { name: meta.name, mime: meta.mime };
+}
 function indexedDbCache(name, opts) {
   let _db = null;
   const db = () => _db ??= openDB(name, 1, {
@@ -1930,8 +1953,10 @@ function indexedDbCache(name, opts) {
     if (!isEnvelope(v)) {
       throw new SelfstoreError("BAD_FORMAT", "Unrecognized cache record (not a sealed envelope).");
     }
-    const bytes = await unseal(await key(), v);
-    return { name: v.name, mime: v.mime, blob: new Blob([bytes], { type: v.mime }) };
+    const k = await key();
+    const { name: name2, mime } = await openFileMeta(k, v);
+    const bytes = await unseal(k, v);
+    return { name: name2, mime, blob: new Blob([bytes], { type: mime }) };
   }
   const kv = {
     async get(key2) {
@@ -1978,8 +2003,8 @@ function indexedDbCache(name, opts) {
       const k = await key();
       const fresh = await Promise.all(
         files.filter((f) => !have.has(f.id)).map(async (f) => {
-          const env = await seal(k, new Uint8Array(await f.blob.arrayBuffer()));
-          return { id: f.id, rec: { name: f.name, mime: f.mime, ...env } };
+          const bytes = new Uint8Array(await f.blob.arrayBuffer());
+          return { id: f.id, rec: await sealFile(k, { name: f.name, mime: f.mime }, bytes) };
         })
       );
       const tx = d.transaction("files", "readwrite");
@@ -2031,11 +2056,8 @@ function indexedDbCache(name, opts) {
       for (const fileKey of await d.getAllKeys("files")) {
         const v = await d.get("files", fileKey);
         if (!v) continue;
-        const bytes = await unseal(previous, v);
-        files.push({
-          id: fileKey,
-          rec: { name: v.name, mime: v.mime, ...await seal(next, bytes) }
-        });
+        const meta = await openFileMeta(previous, v);
+        files.push({ id: fileKey, rec: await sealFile(next, meta, await unseal(previous, v)) });
       }
       const tx = d.transaction(["kv", "files"], "readwrite");
       const store = tx.objectStore("kv");
@@ -2203,5 +2225,5 @@ function gisDriveAuth(opts) {
 }
 
 export { RESERVED_STORE_MODES, createLocalStore, deriveStatus, gisDriveAuth, indexedDbCache, isLockableCache, isReservedStoreMode, memoryCache, preloadGoogleIdentity };
-//# sourceMappingURL=chunk-TB3CKC6Z.js.map
-//# sourceMappingURL=chunk-TB3CKC6Z.js.map
+//# sourceMappingURL=chunk-HQSK7HK3.js.map
+//# sourceMappingURL=chunk-HQSK7HK3.js.map