field: ke-pets#    \ to avoid colissions, add a number here
    field: ke-prof     \ profile object
    field: ke-avatar   \ avatar object
    field: ke-chat     \ chat group for 1:1 chat with that person
    field: ke-selfsig
    field: ke-sigs[]
    field: ke-imports  \ bitmask of key import
    field: ke-[]1
    field: ke-[]2
    field: ke-[]3
    field: ke-[]4
    field: ke-sec1
    field: ke-sec2
    64field: ke-#1
    64field: ke-#2
    64field: ke-#3
    64field: ke-#4
\ other fields
    field: ke-storekey \ used to encrypt on storage
    field: ke-mask     \ permission mask
    field: ke-groups   \ permission groups
    64field: ke-offset \ offset in key file
    field: ke-pwlevel  \ password strength level
    field: ke-sksig    \ signature secret, computed, never stored
    0 +field ke-end

\ debugging aids

false [IF]
    : debug: ( -- )  Create immediate false ,
      DOES>
	@ IF  ['] noop assert-canary
	ELSE  postpone (  THEN ;
    : )else(  ]] ) ( [[ ; immediate \ )
[THEN]

: nodebug: ['] ( Alias immediate ;

action-of .s. ' . = [IF]
    :noname ( ... -- ... )
	depth IF  ...  THEN
	fdepth IF  cr "F:" type f.s  THEN ; is printdebugdata
[THEN]

require xtype.fs
require base64.fs
require base85.fs

: .nnb ( addr n -- )  85type ;
: .64b ( addr -- ) 64 .nnb ;

    pkrev keysize2 erase  ke-rsk sec! ;
+net2o: keypet ( $:string -- )  !!unsigned?  $>
    new-pet? IF
	ke-pets[] $+[]! pet!  EXIT
    THEN  2drop ;
+net2o: walletkey ( $:seed -- ) !!unsigned?  $>
    ke-wallet sec! ;
+net2o: avatar ( $:string -- )
    \g key avatar profile (hash of a resource)
    !!signed?   8 !!>order? $> ke-avatar $! ;
\ dummies that are retained even though we don't know what they are
+net2o: key-string1 ( $:string -- ) $> ke-[]1 $+[]! ;
+net2o: key-string2 ( $:string -- ) $> ke-[]2 $+[]! ;
+net2o: key-string3 ( $:string -- ) $> ke-[]3 $+[]! ;
+net2o: key-string4 ( $:string -- ) $> ke-[]4 $+[]! ;
+net2o: key-sec1 ( $:string -- ) $> ke-sec1 sec! ;
+net2o: key-sec2 ( $:string -- ) $> ke-sec2 sec! ;
+net2o: key-num1 ( 64n -- )  ke-#1 64! ;
+net2o: key-num2 ( 64n -- )  ke-#2 64! ;
+net2o: key-num3 ( 64n -- )  ke-#3 64! ;
+net2o: key-num4 ( 64n -- )  ke-#4 64! ;
}scope

key-entry-table $save

' context-table is gen-table

: key:nest-sig ( addr u -- addr u' flag )

    ke-imports @ ulit, keyimport
    ke-mask @  ke-groups $@len IF
	ke-groups $@ 2dup $, keygroups
	groups>mask invert and  THEN
    ?dup-IF  ulit, keymask  THEN
    ke-pets[] [: $, keypet ;] $[]map
    ke-storekey @ >storekey ! ;

: pack-coresec ( o:key -- )
    ke-sk sec@ sec$, privkey
    ke-rsk sec@ dup IF  sec$, rskkey  ELSE  2drop  THEN
    ke-wallet sec@ dup IF  sec$, walletkey  ELSE  2drop  THEN ;
: pack-coreextra ( o:key -- )
    ke-[]1 [: $, key-string1 ;] $[]map
    ke-[]2 [: $, key-string2 ;] $[]map
    ke-[]3 [: $, key-string3 ;] $[]map
    ke-[]4 [: $, key-string4 ;] $[]map
    ke-#1 64@ 64dup 64-0<> IF  lit, key-num1  ELSE  64drop  THEN
    ke-#2 64@ 64dup 64-0<> IF  lit, key-num2  ELSE  64drop  THEN
    ke-#3 64@ 64dup 64-0<> IF  lit, key-num3  ELSE  64drop  THEN
    ke-#4 64@ 64dup 64-0<> IF  lit, key-num4  ELSE  64drop  THEN ;
: pack-secextra ( o:key -- )
    ke-sec1 sec@ dup IF  sec$, key-sec1  ELSE  2drop  THEN
    ke-sec2 sec@ dup IF  sec$, key-sec2  ELSE  2drop  THEN ;
previous

: pack-pubkey ( o:key -- )
    key:code
      key-version$ $, version
      pack-corekey
      pack-coreextra
    end:key ;
: pack-outkey ( o:key -- )
    key:code
      "n2o" net2o-base:4cc,
      key-version$ $, version
      pack-signkey
    end:key ;
: pack-seckey ( o:key -- )
    key:code
      key-version$ $, version
      pack-corekey
      pack-coresec
      pack-coreextra
      pack-secextra
    end:key ;
: keynick$ ( o:key -- addr u )
    \G get the annotations with signature
    ['] pack-core gen-cmd$ 2drop
    ke-selfsig $@ tmp$ $+! tmp$ $@ ;
: keypk2nick$ ( o:key -- addr u )
    \G get the annotations with signature