ts-mls 1.0.1

package/dist/src/secretTree.js

@@ -0,0 +1,146 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createSecretTree = createSecretTree;
+exports.deriveNonce = deriveNonce;
+exports.deriveKey = deriveKey;
+exports.ratchetUntil = ratchetUntil;
+exports.derivePrivateMessageNonce = derivePrivateMessageNonce;
+exports.ratchetToGeneration = ratchetToGeneration;
+exports.consumeRatchet = consumeRatchet;
+const kdf_1 = require("./crypto/kdf");
+const mlsError_1 = require("./mlsError");
+const treemath_1 = require("./treemath");
+const array_1 = require("./util/array");
+const repeat_1 = require("./util/repeat");
+function scaffoldSecretTree(leafWidth, encryptionSecret, kdf) {
+    const tree = new Array((0, treemath_1.nodeWidth)(leafWidth));
+    const rootIndex = (0, treemath_1.root)(leafWidth);
+    const parentInhabited = (0, array_1.updateArray)(tree, rootIndex, encryptionSecret);
+    return deriveChildren(parentInhabited, rootIndex, kdf);
+}
+async function createSecretTree(leafWidth, encryptionSecret, kdf) {
+    const tree = await scaffoldSecretTree(leafWidth, encryptionSecret, kdf);
+    return await Promise.all(tree.map(async (secret) => {
+        const application = await createRatchetRoot(secret, "application", kdf);
+        const handshake = await createRatchetRoot(secret, "handshake", kdf);
+        return { handshake, application };
+    }));
+}
+async function deriveChildren(tree, nodeIndex, kdf) {
+    if ((0, treemath_1.isLeaf)(nodeIndex))
+        return tree;
+    const l = (0, treemath_1.left)(nodeIndex);
+    const r = (0, treemath_1.right)(nodeIndex);
+    const parentSecret = tree[nodeIndex];
+    if (parentSecret === undefined)
+        throw new mlsError_1.InternalError("Bad node index for secret tree");
+    const leftSecret = await (0, kdf_1.expandWithLabel)(parentSecret, "tree", new TextEncoder().encode("left"), kdf.size, kdf);
+    const rightSecret = await (0, kdf_1.expandWithLabel)(parentSecret, "tree", new TextEncoder().encode("right"), kdf.size, kdf);
+    const currentTree = (0, array_1.updateArray)((0, array_1.updateArray)(tree, l, leftSecret), r, rightSecret);
+    return deriveChildren(await deriveChildren(currentTree, l, kdf), r, kdf);
+}
+async function deriveNonce(secret, generation, cs) {
+    return await (0, kdf_1.deriveTreeSecret)(secret, "nonce", generation, cs.hpke.nonceLength, cs.kdf);
+}
+async function deriveKey(secret, generation, cs) {
+    return await (0, kdf_1.deriveTreeSecret)(secret, "key", generation, cs.hpke.keyLength, cs.kdf);
+}
+async function ratchetUntil(current, desiredGen, config, kdf) {
+    const generationDifference = desiredGen - current.generation;
+    if (generationDifference > config.maximumForwardRatchetSteps)
+        throw new mlsError_1.ValidationError("Desired generation too far in the future");
+    return await (0, repeat_1.repeatAsync)(async (s) => {
+        const nextSecret = await (0, kdf_1.deriveTreeSecret)(s.secret, "secret", s.generation, kdf.size, kdf);
+        return {
+            secret: nextSecret,
+            generation: s.generation + 1,
+            unusedGenerations: newFunction(s, config.retainKeysForGenerations),
+        };
+    }, current, generationDifference);
+}
+function newFunction(s, retainGenerationsMax) {
+    const withNew = { ...s.unusedGenerations, [s.generation]: s.secret };
+    const generations = Object.keys(withNew);
+    const result = generations.length >= retainGenerationsMax ? removeOldGenerations(withNew, retainGenerationsMax) : withNew;
+    return result;
+}
+function removeOldGenerations(historicalReceiverData, max) {
+    const sortedGenerations = Object.keys(historicalReceiverData)
+        .map(Number)
+        .sort((a, b) => (a < b ? -1 : 1));
+    return Object.fromEntries(sortedGenerations.slice(-max).map((generation) => [generation, historicalReceiverData[generation]]));
+}
+async function derivePrivateMessageNonce(secret, generation, reuseGuard, cs) {
+    const nonce = await deriveNonce(secret, generation, cs);
+    if (nonce.length >= 4 && reuseGuard.length >= 4) {
+        for (let i = 0; i < 4; i++) {
+            nonce[i] ^= reuseGuard[i];
+        }
+    }
+    else
+        throw new mlsError_1.ValidationError("Reuse guard or nonce incorrect length");
+    return nonce;
+}
+async function ratchetToGeneration(tree, senderData, contentType, config, cs) {
+    const index = (0, treemath_1.leafToNodeIndex)(senderData.leafIndex);
+    const node = tree[index];
+    if (node === undefined)
+        throw new mlsError_1.InternalError("Bad node index for secret tree");
+    const ratchet = ratchetForContentType(node, contentType);
+    if (ratchet.generation > senderData.generation) {
+        const desired = ratchet.unusedGenerations[senderData.generation];
+        if (desired !== undefined) {
+            const { [senderData.generation]: _, ...removedDesiredGen } = ratchet.unusedGenerations;
+            const ratchetState = { ...ratchet, unusedGenerations: removedDesiredGen };
+            return await createRatchetResultWithSecret(node, index, desired, senderData.generation, senderData.reuseGuard, tree, contentType, cs, ratchetState);
+        }
+        throw new mlsError_1.ValidationError("Desired gen in the past");
+    }
+    const currentSecret = await ratchetUntil(ratchetForContentType(node, contentType), senderData.generation, config, cs.kdf);
+    return createRatchetResult(node, index, currentSecret, senderData.reuseGuard, tree, contentType, cs);
+}
+async function consumeRatchet(tree, index, contentType, cs) {
+    const node = tree[index];
+    if (node === undefined)
+        throw new mlsError_1.InternalError("Bad node index for secret tree");
+    const currentSecret = ratchetForContentType(node, contentType);
+    const reuseGuard = cs.rng.randomBytes(4);
+    return createRatchetResult(node, index, currentSecret, reuseGuard, tree, contentType, cs);
+}
+async function createRatchetResult(node, index, currentSecret, reuseGuard, tree, contentType, cs) {
+    const nextSecret = await (0, kdf_1.deriveTreeSecret)(currentSecret.secret, "secret", currentSecret.generation, cs.kdf.size, cs.kdf);
+    const ratchetState = { ...currentSecret, secret: nextSecret, generation: currentSecret.generation + 1 };
+    return await createRatchetResultWithSecret(node, index, currentSecret.secret, currentSecret.generation, reuseGuard, tree, contentType, cs, ratchetState);
+}
+async function createRatchetResultWithSecret(node, index, secret, generation, reuseGuard, tree, contentType, cs, ratchetState) {
+    const { nonce, key } = await createKeyAndNonce(secret, generation, reuseGuard, cs);
+    const newNode = contentType === "application" ? { ...node, application: ratchetState } : { ...node, handshake: ratchetState };
+    const newTree = (0, array_1.updateArray)(tree, index, newNode);
+    return {
+        generation: generation,
+        reuseGuard,
+        nonce,
+        key,
+        newTree,
+    };
+}
+async function createKeyAndNonce(secret, generation, reuseGuard, cs) {
+    const key = await deriveKey(secret, generation, cs);
+    const nonce = await derivePrivateMessageNonce(secret, generation, reuseGuard, cs);
+    return { nonce, key };
+}
+function ratchetForContentType(node, contentType) {
+    switch (contentType) {
+        case "application":
+            return node.application;
+        case "proposal":
+            return node.handshake;
+        case "commit":
+            return node.handshake;
+    }
+}
+async function createRatchetRoot(node, label, kdf) {
+    const secret = await (0, kdf_1.expandWithLabel)(node, label, new Uint8Array(), kdf.size, kdf);
+    return { secret: secret, generation: 0, unusedGenerations: {} };
+}
+//# sourceMappingURL=secretTree.js.map

package/dist/src/secretTree.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secretTree.js","sourceRoot":"","sources":["../../src/secretTree.ts"],"names":[],"mappings":";;AAgCA,4CAWC;AAmBD,kCAEC;AAED,8BAEC;AAED,oCAuBC;AA0BD,8DAeC;AAED,kDA2CC;AAED,wCAaC;AAhMD,sCAAqE;AAErE,yCAA2D;AAE3D,yCAAkF;AAClF,wCAA0C;AAC1C,0CAA2C;AAgB3C,SAAS,kBAAkB,CAAC,SAAiB,EAAE,gBAA4B,EAAE,GAAQ;IACnF,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,IAAA,oBAAS,EAAC,SAAS,CAAC,CAAC,CAAA;IAC5C,MAAM,SAAS,GAAG,IAAA,eAAI,EAAC,SAAS,CAAC,CAAA;IAEjC,MAAM,eAAe,GAAG,IAAA,mBAAW,EAAC,IAAI,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAA;IACtE,OAAO,cAAc,CAAC,eAAe,EAAE,SAAS,EAAE,GAAG,CAAC,CAAA;AACxD,CAAC;AAEM,KAAK,UAAU,gBAAgB,CAAC,SAAiB,EAAE,gBAA4B,EAAE,GAAQ;IAC9F,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,SAAS,EAAE,gBAAgB,EAAE,GAAG,CAAC,CAAA;IAEvE,OAAO,MAAM,OAAO,CAAC,GAAG,CACtB,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;QACxB,MAAM,WAAW,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,CAAC,CAAA;QACvE,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,CAAA;QAEnE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAA;IACnC,CAAC,CAAC,CACH,CAAA;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAkB,EAAE,SAAiB,EAAE,GAAQ;IAC3E,IAAI,IAAA,iBAAM,EAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAA;IAClC,MAAM,CAAC,GAAG,IAAA,eAAI,EAAC,SAAS,CAAC,CAAA;IAEzB,MAAM,CAAC,GAAG,IAAA,gBAAK,EAAC,SAAS,CAAC,CAAA;IAE1B,MAAM,YAAY,GAAG,IAAI,CAAC,SAAS,CAAC,CAAA;IACpC,IAAI,YAAY,KAAK,SAAS;QAAE,MAAM,IAAI,wBAAa,CAAC,gCAAgC,CAAC,CAAA;IACzF,MAAM,UAAU,GAAG,MAAM,IAAA,qBAAe,EAAC,YAAY,EAAE,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAE/G,MAAM,WAAW,GAAG,MAAM,IAAA,qBAAe,EAAC,YAAY,EAAE,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAEjH,MAAM,WAAW,GAAG,IAAA,mBAAW,EAAC,IAAA,mBAAW,EAAC,IAAI,EAAE,CAAC,EAAE,UAAU,CAAC,EAAE,CAAC,EAAE,WAAW,CAAC,CAAA;IAEjF,OAAO,cAAc,CAAC,MAAM,cAAc,CAAC,WAAW,EAAE,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAA;AAC1E,CAAC;AAEM,KAAK,UAAU,WAAW,CAAC,MAAkB,EAAE,UAAkB,EAAE,EAAmB;IAC3F,OAAO,MAAM,IAAA,sBAAgB,EAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC,GAAG,CAAC,CAAA;AACzF,CAAC;AAEM,KAAK,UAAU,SAAS,CAAC,MAAkB,EAAE,UAAkB,EAAE,EAAmB;IACzF,OAAO,MAAM,IAAA,sBAAgB,EAAC,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,CAAC,CAAA;AACrF,CAAC;AAEM,KAAK,UAAU,YAAY,CAChC,OAAyB,EACzB,UAAkB,EAClB,MAA0B,EAC1B,GAAQ;IAER,MAAM,oBAAoB,GAAG,UAAU,GAAG,OAAO,CAAC,UAAU,CAAA;IAE5D,IAAI,oBAAoB,GAAG,MAAM,CAAC,0BAA0B;QAC1D,MAAM,IAAI,0BAAe,CAAC,0CAA0C,CAAC,CAAA;IAEvE,OAAO,MAAM,IAAA,oBAAW,EACtB,KAAK,EAAE,CAAC,EAAE,EAAE;QACV,MAAM,UAAU,GAAG,MAAM,IAAA,sBAAgB,EAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;QAC1F,OAAO;YACL,MAAM,EAAE,UAAU;YAClB,UAAU,EAAE,CAAC,CAAC,UAAU,GAAG,CAAC;YAC5B,iBAAiB,EAAE,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,wBAAwB,CAAC;SACnE,CAAA;IACH,CAAC,EACD,OAAO,EACP,oBAAoB,CACrB,CAAA;AACH,CAAC;AAED,SAAS,WAAW,CAAC,CAAmB,EAAE,oBAA4B;IACpE,MAAM,OAAO,GAAG,EAAE,GAAG,CAAC,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAA;IAEpE,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IAExC,MAAM,MAAM,GACV,WAAW,CAAC,MAAM,IAAI,oBAAoB,CAAC,CAAC,CAAC,oBAAoB,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAA;IAE5G,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,oBAAoB,CAC3B,sBAAkD,EAClD,GAAW;IAEX,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC;SAC1D,GAAG,CAAC,MAAM,CAAC;SACX,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAEnC,OAAO,MAAM,CAAC,WAAW,CACvB,iBAAiB,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,sBAAsB,CAAC,UAAU,CAAE,CAAC,CAAC,CACrG,CAAA;AACH,CAAC;AAEM,KAAK,UAAU,yBAAyB,CAC7C,MAAkB,EAClB,UAAkB,EAClB,UAAsB,EACtB,EAAmB;IAEnB,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;IAEvD,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QAChD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3B,KAAK,CAAC,CAAC,CAAE,IAAI,UAAU,CAAC,CAAC,CAAE,CAAA;QAC7B,CAAC;IACH,CAAC;;QAAM,MAAM,IAAI,0BAAe,CAAC,uCAAuC,CAAC,CAAA;IAEzE,OAAO,KAAK,CAAA;AACd,CAAC;AAEM,KAAK,UAAU,mBAAmB,CACvC,IAAgB,EAChB,UAAsB,EACtB,WAA4B,EAC5B,MAA0B,EAC1B,EAAmB;IAEnB,MAAM,KAAK,GAAG,IAAA,0BAAe,EAAC,UAAU,CAAC,SAAS,CAAC,CAAA;IACnD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;IACxB,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,wBAAa,CAAC,gCAAgC,CAAC,CAAA;IAEjF,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;IAExD,IAAI,OAAO,CAAC,UAAU,GAAG,UAAU,CAAC,UAAU,EAAE,CAAC;QAC/C,MAAM,OAAO,GAAG,OAAO,CAAC,iBAAiB,CAAC,UAAU,CAAC,UAAU,CAAC,CAAA;QAEhE,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,GAAG,iBAAiB,EAAE,GAAG,OAAO,CAAC,iBAAiB,CAAA;YACtF,MAAM,YAAY,GAAG,EAAE,GAAG,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,CAAA;YAEzE,OAAO,MAAM,6BAA6B,CACxC,IAAI,EACJ,KAAK,EACL,OAAO,EACP,UAAU,CAAC,UAAU,EACrB,UAAU,CAAC,UAAU,EACrB,IAAI,EACJ,WAAW,EACX,EAAE,EACF,YAAY,CACb,CAAA;QACH,CAAC;QACD,MAAM,IAAI,0BAAe,CAAC,yBAAyB,CAAC,CAAA;IACtD,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,YAAY,CACtC,qBAAqB,CAAC,IAAI,EAAE,WAAW,CAAC,EACxC,UAAU,CAAC,UAAU,EACrB,MAAM,EACN,EAAE,CAAC,GAAG,CACP,CAAA;IAED,OAAO,mBAAmB,CAAC,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,CAAC,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC,CAAA;AACtG,CAAC;AAEM,KAAK,UAAU,cAAc,CAClC,IAAgB,EAChB,KAAa,EACb,WAA4B,EAC5B,EAAmB;IAEnB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;IACxB,IAAI,IAAI,KAAK,SAAS;QAAE,MAAM,IAAI,wBAAa,CAAC,gCAAgC,CAAC,CAAA;IAEjF,MAAM,aAAa,GAAG,qBAAqB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;IAC9D,MAAM,UAAU,GAAG,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAe,CAAA;IAEtD,OAAO,mBAAmB,CAAC,IAAI,EAAE,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,CAAC,CAAA;AAC3F,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,IAAoB,EACpB,KAAa,EACb,aAA+B,EAC/B,UAAsB,EACtB,IAAgB,EAChB,WAA4B,EAC5B,EAAmB;IAEnB,MAAM,UAAU,GAAG,MAAM,IAAA,sBAAgB,EACvC,aAAa,CAAC,MAAM,EACpB,QAAQ,EACR,aAAa,CAAC,UAAU,EACxB,EAAE,CAAC,GAAG,CAAC,IAAI,EACX,EAAE,CAAC,GAAG,CACP,CAAA;IAED,MAAM,YAAY,GAAG,EAAE,GAAG,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,CAAC,UAAU,GAAG,CAAC,EAAE,CAAA;IAEvG,OAAO,MAAM,6BAA6B,CACxC,IAAI,EACJ,KAAK,EACL,aAAa,CAAC,MAAM,EACpB,aAAa,CAAC,UAAU,EACxB,UAAU,EACV,IAAI,EACJ,WAAW,EACX,EAAE,EACF,YAAY,CACb,CAAA;AACH,CAAC;AAED,KAAK,UAAU,6BAA6B,CAC1C,IAAoB,EACpB,KAAa,EACb,MAAkB,EAClB,UAAkB,EAClB,UAAsB,EACtB,IAAgB,EAChB,WAA4B,EAC5B,EAAmB,EACnB,YAA8B;IAE9B,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;IAElF,MAAM,OAAO,GACX,WAAW,KAAK,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,YAAY,EAAE,CAAA;IAE/G,MAAM,OAAO,GAAG,IAAA,mBAAW,EAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,CAAA;IAEjD,OAAO;QACL,UAAU,EAAE,UAAU;QACtB,UAAU;QACV,KAAK;QACL,GAAG;QACH,OAAO;KACR,CAAA;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,MAAkB,EAAE,UAAkB,EAAE,UAAsB,EAAE,EAAmB;IAClH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;IACnD,MAAM,KAAK,GAAG,MAAM,yBAAyB,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,CAAC,CAAA;IACjF,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAA;AACvB,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAoB,EAAE,WAA4B;IAC/E,QAAQ,WAAW,EAAE,CAAC;QACpB,KAAK,aAAa;YAChB,OAAO,IAAI,CAAC,WAAW,CAAA;QACzB,KAAK,UAAU;YACb,OAAO,IAAI,CAAC,SAAS,CAAA;QACvB,KAAK,QAAQ;YACX,OAAO,IAAI,CAAC,SAAS,CAAA;IACzB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,IAAgB,EAAE,KAAa,EAAE,GAAQ;IACxE,MAAM,MAAM,GAAG,MAAM,IAAA,qBAAe,EAAC,IAAI,EAAE,KAAK,EAAE,IAAI,UAAU,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;IAClF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,iBAAiB,EAAE,EAAE,EAAE,CAAA;AACjE,CAAC"}

package/dist/src/sender.d.ts

@@ -0,0 +1,56 @@
+import { Decoder } from "./codec/tlsDecoder";
+import { Encoder } from "./codec/tlsEncoder";
+import { ContentTypeName } from "./contentType";
+import { CiphersuiteImpl } from "./crypto/ciphersuite";
+declare const senderTypes: {
+    readonly member: 1;
+    readonly external: 2;
+    readonly new_member_proposal: 3;
+    readonly new_member_commit: 4;
+};
+export type SenderTypeName = keyof typeof senderTypes;
+export type SenderTypeValue = (typeof senderTypes)[SenderTypeName];
+export declare const encodeSenderType: Encoder<SenderTypeName>;
+export declare const decodeSenderType: Decoder<SenderTypeName>;
+export type Sender = SenderMember | SenderNonMember;
+export type SenderMember = {
+    senderType: "member";
+    leafIndex: number;
+};
+export type SenderNonMember = SenderExternal | SenderNewMemberProposal | SenderNewMemberCommit;
+export type SenderExternal = {
+    senderType: "external";
+    senderIndex: number;
+};
+export type SenderNewMemberProposal = {
+    senderType: "new_member_proposal";
+};
+export type SenderNewMemberCommit = {
+    senderType: "new_member_commit";
+};
+export declare const encodeSender: Encoder<Sender>;
+export declare const decodeSender: Decoder<Sender>;
+export declare function getSenderLeafNodeIndex(sender: Sender): number | undefined;
+export type SenderData = {
+    leafIndex: number;
+    generation: number;
+    reuseGuard: ReuseGuard;
+};
+export type ReuseGuard = Uint8Array & {
+    length: 4;
+};
+export declare const encodeReuseGuard: Encoder<ReuseGuard>;
+export declare const decodeReuseGuard: Decoder<ReuseGuard>;
+export declare const encodeSenderData: Encoder<SenderData>;
+export declare const decodeSenderData: Decoder<SenderData>;
+export type SenderDataAAD = {
+    groupId: Uint8Array;
+    epoch: bigint;
+    contentType: ContentTypeName;
+};
+export declare const encodeSenderDataAAD: Encoder<SenderDataAAD>;
+export declare const decodeSenderDataAAD: Decoder<SenderDataAAD>;
+export declare function sampleCiphertext(cs: CiphersuiteImpl, ciphertext: Uint8Array): Uint8Array;
+export declare function expandSenderDataKey(cs: CiphersuiteImpl, senderDataSecret: Uint8Array, ciphertext: Uint8Array): Promise<Uint8Array>;
+export declare function expandSenderDataNonce(cs: CiphersuiteImpl, senderDataSecret: Uint8Array, ciphertext: Uint8Array): Promise<Uint8Array>;
+export {};

package/dist/src/sender.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sender.d.ts","sourceRoot":"","sources":["../../src/sender.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAA6D,MAAM,oBAAoB,CAAA;AACvG,OAAO,EAAuC,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAEjF,OAAO,EAAE,eAAe,EAAwC,MAAM,eAAe,CAAA;AACrF,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAItD,QAAA,MAAM,WAAW;;;;;CAKP,CAAA;AAEV,MAAM,MAAM,cAAc,GAAG,MAAM,OAAO,WAAW,CAAA;AACrD,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,cAAc,CAAC,CAAA;AAElE,eAAO,MAAM,gBAAgB,EAAE,OAAO,CAAC,cAAc,CAAwD,CAAA;AAE7G,eAAO,MAAM,gBAAgB,EAAE,OAAO,CAAC,cAAc,CAA+D,CAAA;AAEpH,MAAM,MAAM,MAAM,GAAG,YAAY,GAAG,eAAe,CAAA;AAEnD,MAAM,MAAM,YAAY,GAAG;IAAE,UAAU,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAA;AAEtE,MAAM,MAAM,eAAe,GAAG,cAAc,GAAG,uBAAuB,GAAG,qBAAqB,CAAA;AAE9F,MAAM,MAAM,cAAc,GAAG;IAAE,UAAU,EAAE,UAAU,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAA;AAC5E,MAAM,MAAM,uBAAuB,GAAG;IAAE,UAAU,EAAE,qBAAqB,CAAA;CAAE,CAAA;AAC3E,MAAM,MAAM,qBAAqB,GAAG;IAAE,UAAU,EAAE,mBAAmB,CAAA;CAAE,CAAA;AAEvE,eAAO,MAAM,YAAY,EAAE,OAAO,CAAC,MAAM,CAgBxC,CAAA;AAED,eAAO,MAAM,YAAY,EAAE,OAAO,CAAC,MAAM,CA2BvC,CAAA;AAEF,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAEzE;AAED,MAAM,MAAM,UAAU,GAAG;IACvB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,UAAU,CAAA;CACvB,CAAA;AAED,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG;IAAE,MAAM,EAAE,CAAC,CAAA;CAAE,CAAA;AAEnD,eAAO,MAAM,gBAAgB,EAAE,OAAO,CAAC,UAAU,CAAY,CAAA;AAE7D,eAAO,MAAM,gBAAgB,EAAE,OAAO,CAAC,UAAU,CAEhD,CAAA;AAED,eAAO,MAAM,gBAAgB,EAAE,OAAO,CAAC,UAAU,CAGhD,CAAA;AAED,eAAO,MAAM,gBAAgB,EAAE,OAAO,CAAC,UAAU,CAOhD,CAAA;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,OAAO,EAAE,UAAU,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,eAAe,CAAA;CAC7B,CAAA;AAED,eAAO,MAAM,mBAAmB,EAAE,OAAO,CAAC,aAAa,CAGtD,CAAA;AAED,eAAO,MAAM,mBAAmB,EAAE,OAAO,CAAC,aAAa,CAOtD,CAAA;AAED,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,eAAe,EAAE,UAAU,EAAE,UAAU,GAAG,UAAU,CAExF;AAED,wBAAsB,mBAAmB,CACvC,EAAE,EAAE,eAAe,EACnB,gBAAgB,EAAE,UAAU,EAC5B,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,UAAU,CAAC,CAKrB;AAED,wBAAsB,qBAAqB,CACzC,EAAE,EAAE,eAAe,EACnB,gBAAgB,EAAE,UAAU,EAC5B,UAAU,EAAE,UAAU,GACrB,OAAO,CAAC,UAAU,CAAC,CAKrB"}

package/dist/src/sender.js

@@ -0,0 +1,91 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decodeSenderDataAAD = exports.encodeSenderDataAAD = exports.decodeSenderData = exports.encodeSenderData = exports.decodeReuseGuard = exports.encodeReuseGuard = exports.decodeSender = exports.encodeSender = exports.decodeSenderType = exports.encodeSenderType = void 0;
+exports.getSenderLeafNodeIndex = getSenderLeafNodeIndex;
+exports.sampleCiphertext = sampleCiphertext;
+exports.expandSenderDataKey = expandSenderDataKey;
+exports.expandSenderDataNonce = expandSenderDataNonce;
+const number_1 = require("./codec/number");
+const tlsDecoder_1 = require("./codec/tlsDecoder");
+const tlsEncoder_1 = require("./codec/tlsEncoder");
+const variableLength_1 = require("./codec/variableLength");
+const contentType_1 = require("./contentType");
+const kdf_1 = require("./crypto/kdf");
+const enumHelpers_1 = require("./util/enumHelpers");
+const senderTypes = {
+    member: 1,
+    external: 2,
+    new_member_proposal: 3,
+    new_member_commit: 4,
+};
+exports.encodeSenderType = (0, tlsEncoder_1.contramapEncoder)(number_1.encodeUint8, (t) => senderTypes[t]);
+exports.decodeSenderType = (0, tlsDecoder_1.mapDecoderOption)(number_1.decodeUint8, (0, enumHelpers_1.enumNumberToKey)(senderTypes));
+const encodeSender = (s) => {
+    switch (s.senderType) {
+        case "member":
+            return (0, tlsEncoder_1.contramapEncoders)([exports.encodeSenderType, number_1.encodeUint32], (s) => [s.senderType, s.leafIndex])(s);
+        case "external":
+            return (0, tlsEncoder_1.contramapEncoders)([exports.encodeSenderType, number_1.encodeUint32], (s) => [s.senderType, s.senderIndex])(s);
+        case "new_member_proposal":
+        case "new_member_commit":
+            return (0, exports.encodeSenderType)(s.senderType);
+    }
+};
+exports.encodeSender = encodeSender;
+exports.decodeSender = (0, tlsDecoder_1.flatMapDecoder)(exports.decodeSenderType, (senderType) => {
+    switch (senderType) {
+        case "member":
+            return (0, tlsDecoder_1.mapDecoder)(number_1.decodeUint32, (leafIndex) => ({
+                senderType,
+                leafIndex,
+            }));
+        case "external":
+            return (0, tlsDecoder_1.mapDecoder)(number_1.decodeUint32, (senderIndex) => ({
+                senderType,
+                senderIndex,
+            }));
+        case "new_member_proposal":
+            return (0, tlsDecoder_1.mapDecoder)(() => [undefined, 0], () => ({
+                senderType,
+            }));
+        case "new_member_commit":
+            return (0, tlsDecoder_1.mapDecoder)(() => [undefined, 0], () => ({
+                senderType,
+            }));
+    }
+});
+function getSenderLeafNodeIndex(sender) {
+    return sender.senderType === "member" ? sender.leafIndex : undefined;
+}
+const encodeReuseGuard = (g) => g;
+exports.encodeReuseGuard = encodeReuseGuard;
+const decodeReuseGuard = (b, offset) => {
+    return [b.subarray(offset, offset + 4), 4];
+};
+exports.decodeReuseGuard = decodeReuseGuard;
+exports.encodeSenderData = (0, tlsEncoder_1.contramapEncoders)([number_1.encodeUint32, number_1.encodeUint32, exports.encodeReuseGuard], (s) => [s.leafIndex, s.generation, s.reuseGuard]);
+exports.decodeSenderData = (0, tlsDecoder_1.mapDecoders)([number_1.decodeUint32, number_1.decodeUint32, exports.decodeReuseGuard], (leafIndex, generation, reuseGuard) => ({
+    leafIndex,
+    generation,
+    reuseGuard,
+}));
+exports.encodeSenderDataAAD = (0, tlsEncoder_1.contramapEncoders)([variableLength_1.encodeVarLenData, number_1.encodeUint64, contentType_1.encodeContentType], (aad) => [aad.groupId, aad.epoch, aad.contentType]);
+exports.decodeSenderDataAAD = (0, tlsDecoder_1.mapDecoders)([variableLength_1.decodeVarLenData, number_1.decodeUint64, contentType_1.decodeContentType], (groupId, epoch, contentType) => ({
+    groupId,
+    epoch,
+    contentType,
+}));
+function sampleCiphertext(cs, ciphertext) {
+    return ciphertext.length < cs.kdf.size ? ciphertext : ciphertext.slice(0, cs.kdf.size);
+}
+async function expandSenderDataKey(cs, senderDataSecret, ciphertext) {
+    const ciphertextSample = sampleCiphertext(cs, ciphertext);
+    const keyLength = cs.hpke.keyLength;
+    return await (0, kdf_1.expandWithLabel)(senderDataSecret, "key", ciphertextSample, keyLength, cs.kdf);
+}
+async function expandSenderDataNonce(cs, senderDataSecret, ciphertext) {
+    const ciphertextSample = sampleCiphertext(cs, ciphertext);
+    const keyLength = cs.hpke.nonceLength;
+    return await (0, kdf_1.expandWithLabel)(senderDataSecret, "nonce", ciphertextSample, keyLength, cs.kdf);
+}
+//# sourceMappingURL=sender.js.map

package/dist/src/sender.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sender.js","sourceRoot":"","sources":["../../src/sender.ts"],"names":[],"mappings":";;;AAgFA,wDAEC;AAkDD,4CAEC;AAED,kDASC;AAED,sDASC;AA5JD,2CAAiH;AACjH,mDAAuG;AACvG,mDAAiF;AACjF,2DAA2E;AAC3E,+CAAqF;AAErF,sCAA8C;AAC9C,oDAAoD;AAEpD,MAAM,WAAW,GAAG;IAClB,MAAM,EAAE,CAAC;IACT,QAAQ,EAAE,CAAC;IACX,mBAAmB,EAAE,CAAC;IACtB,iBAAiB,EAAE,CAAC;CACZ,CAAA;AAKG,QAAA,gBAAgB,GAA4B,IAAA,6BAAgB,EAAC,oBAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAA;AAEhG,QAAA,gBAAgB,GAA4B,IAAA,6BAAgB,EAAC,oBAAW,EAAE,IAAA,6BAAe,EAAC,WAAW,CAAC,CAAC,CAAA;AAY7G,MAAM,YAAY,GAAoB,CAAC,CAAC,EAAE,EAAE;IACjD,QAAQ,CAAC,CAAC,UAAU,EAAE,CAAC;QACrB,KAAK,QAAQ;YACX,OAAO,IAAA,8BAAiB,EACtB,CAAC,wBAAgB,EAAE,qBAAY,CAAC,EAChC,CAAC,CAAe,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,SAAS,CAAU,CAC1D,CAAC,CAAC,CAAC,CAAA;QACN,KAAK,UAAU;YACb,OAAO,IAAA,8BAAiB,EACtB,CAAC,wBAAgB,EAAE,qBAAY,CAAC,EAChC,CAAC,CAAiB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,WAAW,CAAU,CAC9D,CAAC,CAAC,CAAC,CAAA;QACN,KAAK,qBAAqB,CAAC;QAC3B,KAAK,mBAAmB;YACtB,OAAO,IAAA,wBAAgB,EAAC,CAAC,CAAC,UAAU,CAAC,CAAA;IACzC,CAAC;AACH,CAAC,CAAA;AAhBY,QAAA,YAAY,gBAgBxB;AAEY,QAAA,YAAY,GAAoB,IAAA,2BAAc,EAAC,wBAAgB,EAAE,CAAC,UAAU,EAAmB,EAAE;IAC5G,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,QAAQ;YACX,OAAO,IAAA,uBAAU,EAAC,qBAAY,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;gBAC9C,UAAU;gBACV,SAAS;aACV,CAAC,CAAC,CAAA;QACL,KAAK,UAAU;YACb,OAAO,IAAA,uBAAU,EAAC,qBAAY,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;gBAChD,UAAU;gBACV,WAAW;aACZ,CAAC,CAAC,CAAA;QACL,KAAK,qBAAqB;YACxB,OAAO,IAAA,uBAAU,EACf,GAAG,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,EACpB,GAAG,EAAE,CAAC,CAAC;gBACL,UAAU;aACX,CAAC,CACH,CAAA;QACH,KAAK,mBAAmB;YACtB,OAAO,IAAA,uBAAU,EACf,GAAG,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,EACpB,GAAG,EAAE,CAAC,CAAC;gBACL,UAAU;aACX,CAAC,CACH,CAAA;IACL,CAAC;AACH,CAAC,CAAC,CAAA;AAEF,SAAgB,sBAAsB,CAAC,MAAc;IACnD,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAA;AACtE,CAAC;AAUM,MAAM,gBAAgB,GAAwB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;AAAhD,QAAA,gBAAgB,oBAAgC;AAEtD,MAAM,gBAAgB,GAAwB,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;IACjE,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,CAAC,CAAe,EAAE,CAAC,CAAC,CAAA;AAC1D,CAAC,CAAA;AAFY,QAAA,gBAAgB,oBAE5B;AAEY,QAAA,gBAAgB,GAAwB,IAAA,8BAAiB,EACpE,CAAC,qBAAY,EAAE,qBAAY,EAAE,wBAAgB,CAAC,EAC9C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAU,CAC1D,CAAA;AAEY,QAAA,gBAAgB,GAAwB,IAAA,wBAAW,EAC9D,CAAC,qBAAY,EAAE,qBAAY,EAAE,wBAAgB,CAAC,EAC9C,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IACtC,SAAS;IACT,UAAU;IACV,UAAU;CACX,CAAC,CACH,CAAA;AAQY,QAAA,mBAAmB,GAA2B,IAAA,8BAAiB,EAC1E,CAAC,iCAAgB,EAAE,qBAAY,EAAE,+BAAiB,CAAC,EACnD,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,WAAW,CAAU,CAC5D,CAAA;AAEY,QAAA,mBAAmB,GAA2B,IAAA,wBAAW,EACpE,CAAC,iCAAgB,EAAE,qBAAY,EAAE,+BAAiB,CAAC,EACnD,CAAC,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;IAChC,OAAO;IACP,KAAK;IACL,WAAW;CACZ,CAAC,CACH,CAAA;AAED,SAAgB,gBAAgB,CAAC,EAAmB,EAAE,UAAsB;IAC1E,OAAO,UAAU,CAAC,MAAM,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;AACxF,CAAC;AAEM,KAAK,UAAU,mBAAmB,CACvC,EAAmB,EACnB,gBAA4B,EAC5B,UAAsB;IAEtB,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,EAAE,EAAE,UAAU,CAAC,CAAA;IACzD,MAAM,SAAS,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAA;IAEnC,OAAO,MAAM,IAAA,qBAAe,EAAC,gBAAgB,EAAE,KAAK,EAAE,gBAAgB,EAAE,SAAS,EAAE,EAAE,CAAC,GAAG,CAAC,CAAA;AAC5F,CAAC;AAEM,KAAK,UAAU,qBAAqB,CACzC,EAAmB,EACnB,gBAA4B,EAC5B,UAAsB;IAEtB,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,EAAE,EAAE,UAAU,CAAC,CAAA;IACzD,MAAM,SAAS,GAAG,EAAE,CAAC,IAAI,CAAC,WAAW,CAAA;IAErC,OAAO,MAAM,IAAA,qBAAe,EAAC,gBAAgB,EAAE,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,EAAE,CAAC,GAAG,CAAC,CAAA;AAC9F,CAAC"}

package/dist/src/transcriptHash.d.ts

@@ -0,0 +1,14 @@
+import { Decoder } from "./codec/tlsDecoder";
+import { Encoder } from "./codec/tlsEncoder";
+import { Hash } from "./crypto/hash";
+import { FramedContentCommit } from "./framedContent";
+import { WireformatName } from "./wireformat";
+export type ConfirmedTranscriptHashInput = {
+    wireformat: WireformatName;
+    content: FramedContentCommit;
+    signature: Uint8Array;
+};
+export declare const encodeConfirmedTranscriptHashInput: Encoder<ConfirmedTranscriptHashInput>;
+export declare const decodeConfirmedTranscriptHashInput: Decoder<ConfirmedTranscriptHashInput>;
+export declare function createConfirmedHash(interimTranscriptHash: Uint8Array, input: ConfirmedTranscriptHashInput, hash: Hash): Promise<Uint8Array>;
+export declare function createInterimHash(confirmedHash: Uint8Array, confirmationTag: Uint8Array, hash: Hash): Promise<Uint8Array>;

package/dist/src/transcriptHash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transcriptHash.d.ts","sourceRoot":"","sources":["../../src/transcriptHash.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAqB,MAAM,oBAAoB,CAAA;AAC/D,OAAO,EAAqB,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAE/D,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAA;AACpC,OAAO,EAA4C,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAC/F,OAAO,EAAsC,cAAc,EAAE,MAAM,cAAc,CAAA;AAEjF,MAAM,MAAM,4BAA4B,GAAG;IACzC,UAAU,EAAE,cAAc,CAAA;IAC1B,OAAO,EAAE,mBAAmB,CAAA;IAC5B,SAAS,EAAE,UAAU,CAAA;CACtB,CAAA;AAED,eAAO,MAAM,kCAAkC,EAAE,OAAO,CAAC,4BAA4B,CAGpF,CAAA;AAED,eAAO,MAAM,kCAAkC,EAAE,OAAO,CAAC,4BAA4B,CAWpF,CAAA;AAED,wBAAgB,mBAAmB,CACjC,qBAAqB,EAAE,UAAU,EACjC,KAAK,EAAE,4BAA4B,EACnC,IAAI,EAAE,IAAI,GACT,OAAO,CAAC,UAAU,CAAC,CAErB;AAED,wBAAgB,iBAAiB,CAC/B,aAAa,EAAE,UAAU,EACzB,eAAe,EAAE,UAAU,EAC3B,IAAI,EAAE,IAAI,GACT,OAAO,CAAC,UAAU,CAAC,CAErB"}

package/dist/src/transcriptHash.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decodeConfirmedTranscriptHashInput = exports.encodeConfirmedTranscriptHashInput = void 0;
+exports.createConfirmedHash = createConfirmedHash;
+exports.createInterimHash = createInterimHash;
+const tlsDecoder_1 = require("./codec/tlsDecoder");
+const tlsEncoder_1 = require("./codec/tlsEncoder");
+const variableLength_1 = require("./codec/variableLength");
+const framedContent_1 = require("./framedContent");
+const wireformat_1 = require("./wireformat");
+exports.encodeConfirmedTranscriptHashInput = (0, tlsEncoder_1.contramapEncoders)([wireformat_1.encodeWireformat, framedContent_1.encodeFramedContent, variableLength_1.encodeVarLenData], (input) => [input.wireformat, input.content, input.signature]);
+exports.decodeConfirmedTranscriptHashInput = (0, tlsDecoder_1.mapDecodersOption)([wireformat_1.decodeWireformat, framedContent_1.decodeFramedContent, variableLength_1.decodeVarLenData], (wireformat, content, signature) => {
+    if (content.contentType === "commit")
+        return {
+            wireformat,
+            content,
+            signature,
+        };
+    else
+        return undefined;
+});
+function createConfirmedHash(interimTranscriptHash, input, hash) {
+    return hash.digest(new Uint8Array([...interimTranscriptHash, ...(0, exports.encodeConfirmedTranscriptHashInput)(input)]));
+}
+function createInterimHash(confirmedHash, confirmationTag, hash) {
+    return hash.digest(new Uint8Array([...confirmedHash, ...(0, variableLength_1.encodeVarLenData)(confirmationTag)]));
+}
+//# sourceMappingURL=transcriptHash.js.map

package/dist/src/transcriptHash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transcriptHash.js","sourceRoot":"","sources":["../../src/transcriptHash.ts"],"names":[],"mappings":";;;AA+BA,kDAMC;AAED,8CAMC;AA7CD,mDAA+D;AAC/D,mDAA+D;AAC/D,2DAA2E;AAE3E,mDAA+F;AAC/F,6CAAiF;AAQpE,QAAA,kCAAkC,GAA0C,IAAA,8BAAiB,EACxG,CAAC,6BAAgB,EAAE,mCAAmB,EAAE,iCAAgB,CAAC,EACzD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAU,CACvE,CAAA;AAEY,QAAA,kCAAkC,GAA0C,IAAA,8BAAiB,EACxG,CAAC,6BAAgB,EAAE,mCAAmB,EAAE,iCAAgB,CAAC,EACzD,CAAC,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE;IACjC,IAAI,OAAO,CAAC,WAAW,KAAK,QAAQ;QAClC,OAAO;YACL,UAAU;YACV,OAAO;YACP,SAAS;SACV,CAAA;;QACE,OAAO,SAAS,CAAA;AACvB,CAAC,CACF,CAAA;AAED,SAAgB,mBAAmB,CACjC,qBAAiC,EACjC,KAAmC,EACnC,IAAU;IAEV,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,CAAC,GAAG,qBAAqB,EAAE,GAAG,IAAA,0CAAkC,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;AAC9G,CAAC;AAED,SAAgB,iBAAiB,CAC/B,aAAyB,EACzB,eAA2B,EAC3B,IAAU;IAEV,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,CAAC,GAAG,aAAa,EAAE,GAAG,IAAA,iCAAgB,EAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAA;AAC9F,CAAC"}

package/dist/src/treeHash.d.ts

@@ -0,0 +1,27 @@
+import { Decoder } from "./codec/tlsDecoder";
+import { Encoder } from "./codec/tlsEncoder";
+import { Hash } from "./crypto/hash";
+import { LeafNode } from "./leafNode";
+import { ParentNode } from "./parentNode";
+import { RatchetTree } from "./ratchetTree";
+export type TreeHashInput = LeafNodeHashInput | ParentNodeHashInput;
+type LeafNodeHashInput = {
+    nodeType: "leaf";
+    leafIndex: number;
+    leafNode: LeafNode | undefined;
+};
+type ParentNodeHashInput = {
+    nodeType: "parent";
+    parentNode: ParentNode | undefined;
+    leftHash: Uint8Array;
+    rightHash: Uint8Array;
+};
+export declare const encodeLeafNodeHashInput: Encoder<LeafNodeHashInput>;
+export declare const decodeLeafNodeHashInput: Decoder<LeafNodeHashInput>;
+export declare const encodeParentNodeHashInput: Encoder<ParentNodeHashInput>;
+export declare const decodeParentNodeHashInput: Decoder<ParentNodeHashInput>;
+export declare const encodeTreeHashInput: Encoder<TreeHashInput>;
+export declare const decodeTreeHashInput: Decoder<TreeHashInput>;
+export declare function treeHashRoot(tree: RatchetTree, h: Hash): Promise<Uint8Array>;
+export declare function treeHash(tree: RatchetTree, subtreeIndex: number, h: Hash): Promise<Uint8Array>;
+export {};

package/dist/src/treeHash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"treeHash.d.ts","sourceRoot":"","sources":["../../src/treeHash.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,OAAO,EAA+B,MAAM,oBAAoB,CAAA;AACzE,OAAO,EAAE,OAAO,EAAqB,MAAM,oBAAoB,CAAA;AAE/D,OAAO,EAAE,IAAI,EAAE,MAAM,eAAe,CAAA;AACpC,OAAO,EAAE,QAAQ,EAAkC,MAAM,YAAY,CAAA;AAGrE,OAAO,EAAE,UAAU,EAAsC,MAAM,cAAc,CAAA;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAG3C,MAAM,MAAM,aAAa,GAAG,iBAAiB,GAAG,mBAAmB,CAAA;AACnE,KAAK,iBAAiB,GAAG;IACvB,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,QAAQ,GAAG,SAAS,CAAA;CAC/B,CAAA;AACD,KAAK,mBAAmB,GAAG;IACzB,QAAQ,EAAE,QAAQ,CAAA;IAClB,UAAU,EAAE,UAAU,GAAG,SAAS,CAAA;IAClC,QAAQ,EAAE,UAAU,CAAA;IACpB,SAAS,EAAE,UAAU,CAAA;CACtB,CAAA;AAED,eAAO,MAAM,uBAAuB,EAAE,OAAO,CAAC,iBAAiB,CAG9D,CAAA;AAED,eAAO,MAAM,uBAAuB,EAAE,OAAO,CAAC,iBAAiB,CAO9D,CAAA;AAED,eAAO,MAAM,yBAAyB,EAAE,OAAO,CAAC,mBAAmB,CAGlE,CAAA;AAED,eAAO,MAAM,yBAAyB,EAAE,OAAO,CAAC,mBAAmB,CAQlE,CAAA;AAED,eAAO,MAAM,mBAAmB,EAAE,OAAO,CAAC,aAAa,CAOtD,CAAA;AACD,eAAO,MAAM,mBAAmB,EAAE,OAAO,CAAC,aAAa,CAUtD,CAAA;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,CAElF;AAED,wBAAsB,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,CAwBpG"}

package/dist/src/treeHash.js

@@ -0,0 +1,76 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.decodeTreeHashInput = exports.encodeTreeHashInput = exports.decodeParentNodeHashInput = exports.encodeParentNodeHashInput = exports.decodeLeafNodeHashInput = exports.encodeLeafNodeHashInput = void 0;
+exports.treeHashRoot = treeHashRoot;
+exports.treeHash = treeHash;
+const number_1 = require("./codec/number");
+const optional_1 = require("./codec/optional");
+const tlsDecoder_1 = require("./codec/tlsDecoder");
+const tlsEncoder_1 = require("./codec/tlsEncoder");
+const variableLength_1 = require("./codec/variableLength");
+const leafNode_1 = require("./leafNode");
+const mlsError_1 = require("./mlsError");
+const nodeType_1 = require("./nodeType");
+const parentNode_1 = require("./parentNode");
+const treemath_1 = require("./treemath");
+exports.encodeLeafNodeHashInput = (0, tlsEncoder_1.contramapEncoders)([nodeType_1.encodeNodeType, number_1.encodeUint32, (0, optional_1.encodeOptional)(leafNode_1.encodeLeafNode)], (input) => [input.nodeType, input.leafIndex, input.leafNode]);
+exports.decodeLeafNodeHashInput = (0, tlsDecoder_1.mapDecoders)([number_1.decodeUint32, (0, optional_1.decodeOptional)(leafNode_1.decodeLeafNode)], (leafIndex, leafNode) => ({
+    nodeType: "leaf",
+    leafIndex,
+    leafNode,
+}));
+exports.encodeParentNodeHashInput = (0, tlsEncoder_1.contramapEncoders)([nodeType_1.encodeNodeType, (0, optional_1.encodeOptional)(parentNode_1.encodeParentNode), variableLength_1.encodeVarLenData, variableLength_1.encodeVarLenData], (input) => [input.nodeType, input.parentNode, input.leftHash, input.rightHash]);
+exports.decodeParentNodeHashInput = (0, tlsDecoder_1.mapDecoders)([(0, optional_1.decodeOptional)(parentNode_1.decodeParentNode), variableLength_1.decodeVarLenData, variableLength_1.decodeVarLenData], (parentNode, leftHash, rightHash) => ({
+    nodeType: "parent",
+    parentNode,
+    leftHash,
+    rightHash,
+}));
+const encodeTreeHashInput = (input) => {
+    switch (input.nodeType) {
+        case "leaf":
+            return (0, exports.encodeLeafNodeHashInput)(input);
+        case "parent":
+            return (0, exports.encodeParentNodeHashInput)(input);
+    }
+};
+exports.encodeTreeHashInput = encodeTreeHashInput;
+exports.decodeTreeHashInput = (0, tlsDecoder_1.flatMapDecoder)(nodeType_1.decodeNodeType, (nodeType) => {
+    switch (nodeType) {
+        case "leaf":
+            return exports.decodeLeafNodeHashInput;
+        case "parent":
+            return exports.decodeParentNodeHashInput;
+    }
+});
+async function treeHashRoot(tree, h) {
+    return treeHash(tree, (0, treemath_1.rootFromNodeWidth)(tree.length), h);
+}
+async function treeHash(tree, subtreeIndex, h) {
+    if ((0, treemath_1.isLeaf)(subtreeIndex)) {
+        const leafNode = tree[subtreeIndex];
+        if (leafNode?.nodeType === "parent")
+            throw new mlsError_1.InternalError("Somehow found parent node in leaf position");
+        const input = (0, exports.encodeLeafNodeHashInput)({
+            nodeType: "leaf",
+            leafIndex: (0, treemath_1.nodeToLeafIndex)(subtreeIndex),
+            leafNode: leafNode?.leaf,
+        });
+        return await h.digest(input);
+    }
+    else {
+        const parentNode = tree[subtreeIndex];
+        if (parentNode?.nodeType === "leaf")
+            throw new mlsError_1.InternalError("Somehow found leaf node in parent position");
+        const leftHash = await treeHash(tree, (0, treemath_1.left)(subtreeIndex), h);
+        const rightHash = await treeHash(tree, (0, treemath_1.right)(subtreeIndex), h);
+        const input = {
+            nodeType: "parent",
+            parentNode: parentNode?.parent,
+            leftHash: leftHash,
+            rightHash: rightHash,
+        };
+        return await h.digest((0, exports.encodeParentNodeHashInput)(input));
+    }
+}
+//# sourceMappingURL=treeHash.js.map

package/dist/src/treeHash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"treeHash.js","sourceRoot":"","sources":["../../src/treeHash.ts"],"names":[],"mappings":";;;AA2EA,oCAEC;AAED,4BAwBC;AAvGD,2CAA2D;AAC3D,+CAAiE;AACjE,mDAAyE;AACzE,mDAA+D;AAC/D,2DAA2E;AAE3E,yCAAqE;AACrE,yCAA0C;AAC1C,yCAA2D;AAC3D,6CAA6E;AAE7E,yCAAoF;AAevE,QAAA,uBAAuB,GAA+B,IAAA,8BAAiB,EAClF,CAAC,yBAAc,EAAE,qBAAY,EAAE,IAAA,yBAAc,EAAC,yBAAc,CAAC,CAAC,EAC9D,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAU,CACtE,CAAA;AAEY,QAAA,uBAAuB,GAA+B,IAAA,wBAAW,EAC5E,CAAC,qBAAY,EAAE,IAAA,yBAAc,EAAC,yBAAc,CAAC,CAAC,EAC9C,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IACxB,QAAQ,EAAE,MAAM;IAChB,SAAS;IACT,QAAQ;CACT,CAAC,CACH,CAAA;AAEY,QAAA,yBAAyB,GAAiC,IAAA,8BAAiB,EACtF,CAAC,yBAAc,EAAE,IAAA,yBAAc,EAAC,6BAAgB,CAAC,EAAE,iCAAgB,EAAE,iCAAgB,CAAC,EACtF,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAU,CACxF,CAAA;AAEY,QAAA,yBAAyB,GAAiC,IAAA,wBAAW,EAChF,CAAC,IAAA,yBAAc,EAAC,6BAAgB,CAAC,EAAE,iCAAgB,EAAE,iCAAgB,CAAC,EACtE,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IACpC,QAAQ,EAAE,QAAQ;IAClB,UAAU;IACV,QAAQ;IACR,SAAS;CACV,CAAC,CACH,CAAA;AAEM,MAAM,mBAAmB,GAA2B,CAAC,KAAK,EAAE,EAAE;IACnE,QAAQ,KAAK,CAAC,QAAQ,EAAE,CAAC;QACvB,KAAK,MAAM;YACT,OAAO,IAAA,+BAAuB,EAAC,KAAK,CAAC,CAAA;QACvC,KAAK,QAAQ;YACX,OAAO,IAAA,iCAAyB,EAAC,KAAK,CAAC,CAAA;IAC3C,CAAC;AACH,CAAC,CAAA;AAPY,QAAA,mBAAmB,uBAO/B;AACY,QAAA,mBAAmB,GAA2B,IAAA,2BAAc,EACvE,yBAAc,EACd,CAAC,QAAQ,EAA0B,EAAE;IACnC,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,MAAM;YACT,OAAO,+BAAuB,CAAA;QAChC,KAAK,QAAQ;YACX,OAAO,iCAAyB,CAAA;IACpC,CAAC;AACH,CAAC,CACF,CAAA;AAEM,KAAK,UAAU,YAAY,CAAC,IAAiB,EAAE,CAAO;IAC3D,OAAO,QAAQ,CAAC,IAAI,EAAE,IAAA,4BAAiB,EAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;AAC1D,CAAC;AAEM,KAAK,UAAU,QAAQ,CAAC,IAAiB,EAAE,YAAoB,EAAE,CAAO;IAC7E,IAAI,IAAA,iBAAM,EAAC,YAAY,CAAC,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,CAAA;QACnC,IAAI,QAAQ,EAAE,QAAQ,KAAK,QAAQ;YAAE,MAAM,IAAI,wBAAa,CAAC,4CAA4C,CAAC,CAAA;QAC1G,MAAM,KAAK,GAAG,IAAA,+BAAuB,EAAC;YACpC,QAAQ,EAAE,MAAM;YAChB,SAAS,EAAE,IAAA,0BAAe,EAAC,YAAY,CAAC;YACxC,QAAQ,EAAE,QAAQ,EAAE,IAAI;SACzB,CAAC,CAAA;QACF,OAAO,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC9B,CAAC;SAAM,CAAC;QACN,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC,CAAA;QACrC,IAAI,UAAU,EAAE,QAAQ,KAAK,MAAM;YAAE,MAAM,IAAI,wBAAa,CAAC,4CAA4C,CAAC,CAAA;QAC1G,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAA,eAAI,EAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAA;QAC5D,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAA,gBAAK,EAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAA;QAC9D,MAAM,KAAK,GAAG;YACZ,QAAQ,EAAE,QAAQ;YAClB,UAAU,EAAE,UAAU,EAAE,MAAM;YAC9B,QAAQ,EAAE,QAAQ;YAClB,SAAS,EAAE,SAAS;SACZ,CAAA;QAEV,OAAO,MAAM,CAAC,CAAC,MAAM,CAAC,IAAA,iCAAyB,EAAC,KAAK,CAAC,CAAC,CAAA;IACzD,CAAC;AACH,CAAC"}

package/dist/src/treemath.d.ts

@@ -0,0 +1,14 @@
+export declare function isLeaf(nodeIndex: number): boolean;
+export declare function leafToNodeIndex(leafIndex: number): number;
+export declare function nodeToLeafIndex(nodeIndex: number): number;
+export declare function leafWidth(nodeWidth: number): number;
+export declare function nodeWidth(leafWidth: number): number;
+export declare function rootFromNodeWidth(nodeWidth: number): number;
+export declare function root(leafWidth: number): number;
+export declare function left(nodeIndex: number): number;
+export declare function right(nodeIndex: number): number;
+export declare function parent(nodeIndex: number, leafWidth: number): number;
+export declare function sibling(x: number, n: number): number;
+export declare function directPath(nodeIndex: number, leafWidth: number): number[];
+export declare function copath(nodeIndex: number, leafWidth: number): number[];
+export declare function isAncestor(childNodeIndex: number, ancestor: number, nodeWidth: number): boolean;

package/dist/src/treemath.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"treemath.d.ts","sourceRoot":"","sources":["../../src/treemath.ts"],"names":[],"mappings":"AAqBA,wBAAgB,MAAM,CAAC,SAAS,EAAE,MAAM,WAEvC;AAED,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,UAEhD;AAED,wBAAgB,eAAe,CAAC,SAAS,EAAE,MAAM,UAEhD;AAED,wBAAgB,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED,wBAAgB,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED,wBAAgB,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAG9C;AAED,wBAAgB,IAAI,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAI9C;AAED,wBAAgB,KAAK,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAI/C;AAED,wBAAgB,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAKnE;AAED,wBAAgB,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAGpD;AAED,wBAAgB,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAUzE;AAED,wBAAgB,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAQrE;AAED,wBAAgB,UAAU,CAAC,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAE/F"}

package/dist/src/treemath.js

@@ -0,0 +1,103 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isLeaf = isLeaf;
+exports.leafToNodeIndex = leafToNodeIndex;
+exports.nodeToLeafIndex = nodeToLeafIndex;
+exports.leafWidth = leafWidth;
+exports.nodeWidth = nodeWidth;
+exports.rootFromNodeWidth = rootFromNodeWidth;
+exports.root = root;
+exports.left = left;
+exports.right = right;
+exports.parent = parent;
+exports.sibling = sibling;
+exports.directPath = directPath;
+exports.copath = copath;
+exports.isAncestor = isAncestor;
+const mlsError_1 = require("./mlsError");
+function log2(x) {
+    if (x === 0)
+        return 0;
+    let k = 0;
+    while (x >> k > 0) {
+        k++;
+    }
+    return k - 1;
+}
+function level(nodeIndex) {
+    if ((nodeIndex & 0x01) === 0)
+        return 0;
+    let k = 0;
+    while (((nodeIndex >> k) & 0x01) === 1) {
+        k++;
+    }
+    return k;
+}
+function isLeaf(nodeIndex) {
+    return nodeIndex % 2 == 0;
+}
+function leafToNodeIndex(leafIndex) {
+    return leafIndex * 2;
+}
+function nodeToLeafIndex(nodeIndex) {
+    return nodeIndex / 2;
+}
+function leafWidth(nodeWidth) {
+    return nodeWidth == 0 ? 0 : (nodeWidth - 1) / 2 + 1;
+}
+function nodeWidth(leafWidth) {
+    return leafWidth === 0 ? 0 : 2 * (leafWidth - 1) + 1;
+}
+function rootFromNodeWidth(nodeWidth) {
+    return (1 << log2(nodeWidth)) - 1;
+}
+function root(leafWidth) {
+    const w = nodeWidth(leafWidth);
+    return rootFromNodeWidth(w);
+}
+function left(nodeIndex) {
+    const k = level(nodeIndex);
+    if (k === 0)
+        throw new mlsError_1.InternalError("leaf node has no children");
+    return nodeIndex ^ (0x01 << (k - 1));
+}
+function right(nodeIndex) {
+    const k = level(nodeIndex);
+    if (k === 0)
+        throw new mlsError_1.InternalError("leaf node has no children");
+    return nodeIndex ^ (0x03 << (k - 1));
+}
+function parent(nodeIndex, leafWidth) {
+    if (nodeIndex === root(leafWidth))
+        throw new mlsError_1.InternalError("root node has no parent");
+    const k = level(nodeIndex);
+    const b = (nodeIndex >> (k + 1)) & 0x01;
+    return (nodeIndex | (1 << k)) ^ (b << (k + 1));
+}
+function sibling(x, n) {
+    const p = parent(x, n);
+    return x < p ? right(p) : left(p);
+}
+function directPath(nodeIndex, leafWidth) {
+    const r = root(leafWidth);
+    if (nodeIndex === r)
+        return [];
+    const d = [];
+    while (nodeIndex !== r) {
+        nodeIndex = parent(nodeIndex, leafWidth);
+        d.push(nodeIndex);
+    }
+    return d;
+}
+function copath(nodeIndex, leafWidth) {
+    if (nodeIndex === root(leafWidth))
+        return [];
+    const d = directPath(nodeIndex, leafWidth);
+    d.unshift(nodeIndex);
+    d.pop();
+    return d.map((y) => sibling(y, leafWidth));
+}
+function isAncestor(childNodeIndex, ancestor, nodeWidth) {
+    return directPath(childNodeIndex, leafWidth(nodeWidth)).includes(ancestor);
+}
+//# sourceMappingURL=treemath.js.map

package/dist/src/treemath.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"treemath.js","sourceRoot":"","sources":["../../src/treemath.ts"],"names":[],"mappings":";;AAqBA,wBAEC;AAED,0CAEC;AAED,0CAEC;AAED,8BAEC;AAED,8BAEC;AAED,8CAEC;AAED,oBAGC;AAED,oBAIC;AAED,sBAIC;AAED,wBAKC;AAED,0BAGC;AAED,gCAUC;AAED,wBAQC;AAED,gCAEC;AAlGD,yCAA0C;AAE1C,SAAS,IAAI,CAAC,CAAS;IACrB,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAA;IACrB,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAClB,CAAC,EAAE,CAAA;IACL,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,CAAA;AACd,CAAC;AAED,SAAS,KAAK,CAAC,SAAiB;IAC9B,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAA;IAEtC,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,OAAO,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACvC,CAAC,EAAE,CAAA;IACL,CAAC;IACD,OAAO,CAAC,CAAA;AACV,CAAC;AAED,SAAgB,MAAM,CAAC,SAAiB;IACtC,OAAO,SAAS,GAAG,CAAC,IAAI,CAAC,CAAA;AAC3B,CAAC;AAED,SAAgB,eAAe,CAAC,SAAiB;IAC/C,OAAO,SAAS,GAAG,CAAC,CAAA;AACtB,CAAC;AAED,SAAgB,eAAe,CAAC,SAAiB;IAC/C,OAAO,SAAS,GAAG,CAAC,CAAA;AACtB,CAAC;AAED,SAAgB,SAAS,CAAC,SAAiB;IACzC,OAAO,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;AACrD,CAAC;AAED,SAAgB,SAAS,CAAC,SAAiB;IACzC,OAAO,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC,GAAG,CAAC,CAAA;AACtD,CAAC;AAED,SAAgB,iBAAiB,CAAC,SAAiB;IACjD,OAAO,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAA;AACnC,CAAC;AAED,SAAgB,IAAI,CAAC,SAAiB;IACpC,MAAM,CAAC,GAAG,SAAS,CAAC,SAAS,CAAC,CAAA;IAC9B,OAAO,iBAAiB,CAAC,CAAC,CAAC,CAAA;AAC7B,CAAC;AAED,SAAgB,IAAI,CAAC,SAAiB;IACpC,MAAM,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAA;IAC1B,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,wBAAa,CAAC,2BAA2B,CAAC,CAAA;IACjE,OAAO,SAAS,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;AACtC,CAAC;AAED,SAAgB,KAAK,CAAC,SAAiB;IACrC,MAAM,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAA;IAC1B,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,wBAAa,CAAC,2BAA2B,CAAC,CAAA;IACjE,OAAO,SAAS,GAAG,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;AACtC,CAAC;AAED,SAAgB,MAAM,CAAC,SAAiB,EAAE,SAAiB;IACzD,IAAI,SAAS,KAAK,IAAI,CAAC,SAAS,CAAC;QAAE,MAAM,IAAI,wBAAa,CAAC,yBAAyB,CAAC,CAAA;IACrF,MAAM,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAA;IAC1B,MAAM,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAA;IACvC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;AAChD,CAAC;AAED,SAAgB,OAAO,CAAC,CAAS,EAAE,CAAS;IAC1C,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACtB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AACnC,CAAC;AAED,SAAgB,UAAU,CAAC,SAAiB,EAAE,SAAiB;IAC7D,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAA;IACzB,IAAI,SAAS,KAAK,CAAC;QAAE,OAAO,EAAE,CAAA;IAE9B,MAAM,CAAC,GAAa,EAAE,CAAA;IACtB,OAAO,SAAS,KAAK,CAAC,EAAE,CAAC;QACvB,SAAS,GAAG,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;QACxC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACnB,CAAC;IACD,OAAO,CAAC,CAAA;AACV,CAAC;AAED,SAAgB,MAAM,CAAC,SAAiB,EAAE,SAAiB;IACzD,IAAI,SAAS,KAAK,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,EAAE,CAAA;IAE5C,MAAM,CAAC,GAAG,UAAU,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;IAC1C,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IACpB,CAAC,CAAC,GAAG,EAAE,CAAA;IAEP,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAA;AAC5C,CAAC;AAED,SAAgB,UAAU,CAAC,cAAsB,EAAE,QAAgB,EAAE,SAAiB;IACpF,OAAO,UAAU,CAAC,cAAc,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;AAC5E,CAAC"}

package/dist/src/unappliedProposals.d.ts

@@ -0,0 +1,7 @@
+import { Proposal } from "./proposal";
+export type ProposalWithSender = {
+    proposal: Proposal;
+    senderLeafIndex: number | undefined;
+};
+export type UnappliedProposals = Record<string, ProposalWithSender>;
+export declare function addUnappliedProposal(ref: Uint8Array, proposals: UnappliedProposals, proposal: Proposal, senderLeafIndex: number | undefined): UnappliedProposals;