@1sat/actions 0.0.230 → 0.0.232

package/dist/metanet/brc78.js

@@ -0,0 +1,60 @@
+/**
+ * BRC-78 portable encrypted message, with the crypto done by the wallet.
+ *
+ * BRC-78 is BRC-2 encryption under protocol `[2, 'message encryption']` with a
+ * random 32-byte key ID (base64 in the invoice number) and counterparty = the
+ * recipient: exactly BRC-100 `wallet.encrypt`. This module only writes the
+ * BRC-78 framing around the wallet's ciphertext, in the byte layout of
+ * `@bsv/sdk`'s `EncryptedMessage` (so its `decrypt` reads it):
+ *
+ *   version `42421033` (4) ‖ sender identity key (33) ‖ recipient identity
+ *   key (33) ‖ key ID (32) ‖ AES-256-GCM ciphertext (IV prepended)
+ */
+import { Utils } from '@bsv/sdk';
+/** BRC-78 protocol, security level 2 */
+export const BRC78_PROTOCOL = [2, 'message encryption'];
+/** Version bytes, in `@bsv/sdk` `EncryptedMessage` order */
+export const BRC78_VERSION = '42421033';
+/**
+ * Encrypt `plaintext` to `recipient` (identity key hex) and return the BRC-78
+ * serialization.
+ */
+export async function encryptBrc78(wallet, plaintext, recipient) {
+    const keyID = Array.from(crypto.getRandomValues(new Uint8Array(32)));
+    const { ciphertext } = await wallet.encrypt({
+        plaintext,
+        protocolID: BRC78_PROTOCOL,
+        keyID: Utils.toBase64(keyID),
+        counterparty: recipient,
+    });
+    const { publicKey: sender } = await wallet.getPublicKey({
+        identityKey: true,
+    });
+    return [
+        ...Utils.toArray(BRC78_VERSION, 'hex'),
+        ...Utils.toArray(sender, 'hex'),
+        ...Utils.toArray(recipient, 'hex'),
+        ...keyID,
+        ...ciphertext,
+    ];
+}
+/**
+ * Decrypt a BRC-78 serialization addressed to this wallet: the inverse of
+ * {@link encryptBrc78}. The key ID is read from the BRC-78 header; the
+ * counterparty is the sender's identity key.
+ */
+export async function decryptBrc78(wallet, message, sender) {
+    const bytes = Array.from(message);
+    if (Utils.toHex(bytes.slice(0, 4)) !== BRC78_VERSION) {
+        throw new Error('BRC-78: unsupported version');
+    }
+    const keyID = bytes.slice(4 + 33 + 33, 4 + 33 + 33 + 32);
+    const { plaintext } = await wallet.decrypt({
+        ciphertext: bytes.slice(4 + 33 + 33 + 32),
+        protocolID: BRC78_PROTOCOL,
+        keyID: Utils.toBase64(keyID),
+        counterparty: sender,
+    });
+    return plaintext;
+}
+//# sourceMappingURL=brc78.js.map

package/dist/metanet/brc78.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"brc78.js","sourceRoot":"","sources":["../../src/metanet/brc78.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,KAAK,EAA6C,MAAM,UAAU,CAAA;AAE3E,wCAAwC;AACxC,MAAM,CAAC,MAAM,cAAc,GAAmB,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAA;AACvE,4DAA4D;AAC5D,MAAM,CAAC,MAAM,aAAa,GAAG,UAAU,CAAA;AAEvC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CACjC,MAAyD,EACzD,SAAmB,EACnB,SAAiB;IAEjB,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IACpE,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAC3C,SAAS;QACT,UAAU,EAAE,cAAc;QAC1B,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC5B,YAAY,EAAE,SAAS;KACvB,CAAC,CAAA;IACF,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC;QACvD,WAAW,EAAE,IAAI;KACjB,CAAC,CAAA;IACF,OAAO;QACN,GAAG,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,KAAK,CAAC;QACtC,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC;QAC/B,GAAG,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,CAAC;QAClC,GAAG,KAAK;QACR,GAAG,UAAU;KACb,CAAA;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CACjC,MAAwC,EACxC,OAA8B,EAC9B,MAAc;IAEd,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACjC,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,aAAa,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;IAC/C,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAA;IACxD,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QAC1C,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;QACzC,UAAU,EAAE,cAAc;QAC1B,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC5B,YAAY,EAAE,MAAM;KACpB,CAAC,CAAA;IACF,OAAO,SAAS,CAAA;AACjB,CAAC"}

package/dist/metanet/deliver.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Send a signed BRC-169 §7.3 envelope (DAG-CBOR, BRC-231 body over BRC-104)
+ * to a resolved handle's messagebox.
+ *
+ * `content` is BRC-78 encryption (via `wallet.encrypt`) of the given MIME
+ * plaintext to the recipient's identity key; `contentHash` is the SHA-256 of
+ * that plaintext; the signature is per §7.2 item 3.
+ */
+import type { HandleResolution } from '@1sat/client';
+import { type WalletInterface } from '@bsv/sdk';
+import { type EnvelopePayment } from './envelope.js';
+/** A fresh random 16-byte value, base64: a BRC-29 derivation prefix/suffix or key ID half. */
+export declare function randomBase64(): string;
+export declare function sendEnvelope(wallet: WalletInterface, resolution: HandleResolution, p: {
+    /** Our identity key, hex */
+    senderIdentityKey: string;
+    /** The MIME entity `content` encrypts */
+    plaintext: number[];
+    payment: EnvelopePayment | null;
+    /** Messagebox box name */
+    messageBox: string;
+}): Promise<{
+    status: string;
+    messageId: string;
+}>;
+//# sourceMappingURL=deliver.d.ts.map

package/dist/metanet/deliver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"deliver.d.ts","sourceRoot":"","sources":["../../src/metanet/deliver.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AACpD,OAAO,EAAe,KAAK,eAAe,EAAE,MAAM,UAAU,CAAA;AAE5D,OAAO,EAAE,KAAK,eAAe,EAAgB,MAAM,eAAe,CAAA;AAGlE,8FAA8F;AAC9F,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED,wBAAsB,YAAY,CACjC,MAAM,EAAE,eAAe,EACvB,UAAU,EAAE,gBAAgB,EAC5B,CAAC,EAAE;IACF,4BAA4B;IAC5B,iBAAiB,EAAE,MAAM,CAAA;IACzB,yCAAyC;IACzC,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,OAAO,EAAE,eAAe,GAAG,IAAI,CAAA;IAC/B,0BAA0B;IAC1B,UAAU,EAAE,MAAM,CAAA;CAClB,GACC,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CA8BhD"}

package/dist/metanet/deliver.js

@@ -0,0 +1,34 @@
+/**
+ * Send a signed BRC-169 §7.3 envelope (DAG-CBOR, BRC-231 body over BRC-104)
+ * to a resolved handle's messagebox.
+ *
+ * `content` is BRC-78 encryption (via `wallet.encrypt`) of the given MIME
+ * plaintext to the recipient's identity key; `contentHash` is the SHA-256 of
+ * that plaintext; the signature is per §7.2 item 3.
+ */
+import { Hash, Utils } from '@bsv/sdk';
+import { encryptBrc78 } from './brc78.js';
+import { signEnvelope } from './envelope.js';
+import { messageRelay } from './relay.js';
+/** A fresh random 16-byte value, base64: a BRC-29 derivation prefix/suffix or key ID half. */
+export function randomBase64() {
+    return Utils.toBase64(Array.from(crypto.getRandomValues(new Uint8Array(16))));
+}
+export async function sendEnvelope(wallet, resolution, p) {
+    const content = await encryptBrc78(wallet, p.plaintext, resolution.identityKey);
+    const bytes = (a) => Uint8Array.from(a);
+    const { envelope } = await signEnvelope(wallet, {
+        metanetHandles: '1.0',
+        recipient: {
+            handle: resolution.handle,
+            tag: resolution.tag,
+            domain: resolution.domain,
+        },
+        sender: { identityKey: bytes(Utils.toArray(p.senderIdentityKey, 'hex')) },
+        created: new Date().toISOString().replace(/\.\d{3}Z$/, 'Z'),
+        payment: p.payment,
+        contentHash: bytes(Hash.sha256(p.plaintext)),
+    }, bytes(content));
+    return messageRelay.sendCborMessage(wallet, resolution.messagebox, resolution.identityKey, p.messageBox, envelope);
+}
+//# sourceMappingURL=deliver.js.map

package/dist/metanet/deliver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deliver.js","sourceRoot":"","sources":["../../src/metanet/deliver.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,IAAI,EAAE,KAAK,EAAwB,MAAM,UAAU,CAAA;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAwB,YAAY,EAAE,MAAM,eAAe,CAAA;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAEzC,8FAA8F;AAC9F,MAAM,UAAU,YAAY;IAC3B,OAAO,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;AAC9E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CACjC,MAAuB,EACvB,UAA4B,EAC5B,CAQC;IAED,MAAM,OAAO,GAAG,MAAM,YAAY,CACjC,MAAM,EACN,CAAC,CAAC,SAAS,EACX,UAAU,CAAC,WAAW,CACtB,CAAA;IACD,MAAM,KAAK,GAAG,CAAC,CAAW,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACjD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,YAAY,CACtC,MAAM,EACN;QACC,cAAc,EAAE,KAAK;QACrB,SAAS,EAAE;YACV,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,GAAG,EAAE,UAAU,CAAC,GAAG;YACnB,MAAM,EAAE,UAAU,CAAC,MAAM;SACzB;QACD,MAAM,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC,EAAE;QACzE,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC;QAC3D,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;KAC5C,EACD,KAAK,CAAC,OAAO,CAAC,CACd,CAAA;IACD,OAAO,YAAY,CAAC,eAAe,CAClC,MAAM,EACN,UAAU,CAAC,UAAU,EACrB,UAAU,CAAC,WAAW,EACtB,CAAC,CAAC,UAAU,EACZ,QAAQ,CACR,CAAA;AACF,CAAC"}

package/dist/metanet/envelope.d.ts

@@ -0,0 +1,69 @@
+/**
+ * BRC-169 envelope, DAG-CBOR encoding (§7.2, §7.3).
+ *
+ * The signature is made by the key derived from `sender.identityKey` under
+ * protocol `[2, 'metanet handles envelope']`, key ID `send`, counterparty
+ * `anyone`, over SHA-256 of the DAG-CBOR map with `content` and `signature`
+ * removed. A verifier derives the same public key from `sender.identityKey`.
+ */
+import { type WalletInterface, type WalletProtocol } from '@bsv/sdk';
+/** §7.2 item 3 signing protocol */
+export declare const ENVELOPE_SIGNATURE_PROTOCOL: WalletProtocol;
+/** §7.2 item 3 signing key ID */
+export declare const ENVELOPE_SIGNATURE_KEY_ID = "send";
+/** §7.3 `payment` member */
+export interface EnvelopePayment {
+    derivationPrefix: Uint8Array;
+    derivationSuffix: Uint8Array;
+    /** UTF-8 bytes of the BRC-43 protocol name */
+    protocol: Uint8Array;
+    satoshis: number;
+    /** Atomic BEEF */
+    beef: Uint8Array;
+}
+/** The §7.3 envelope without `content` and `signature`: the signing preimage map. */
+export interface UnsignedEnvelope {
+    metanetHandles: string;
+    recipient: {
+        handle: string;
+        tag?: string;
+        domain: string;
+    };
+    /** `identityKey` is the 33-byte compressed key */
+    sender: {
+        identityKey: Uint8Array;
+        handle?: string;
+        domain?: string;
+    };
+    /** ISO-8601 UTC timestamp */
+    created: string;
+    quoteId?: string;
+    payment: EnvelopePayment | null;
+    contentHash?: Uint8Array;
+}
+/** DAG-CBOR bytes of the envelope with `content` and `signature` removed. */
+export declare function envelopeSigningPreimage(env: UnsignedEnvelope): Uint8Array;
+/**
+ * Sign an envelope with the wallet's identity (§7.2 item 3) and return the
+ * full DAG-CBOR envelope, `content` and `signature` included.
+ *
+ * @param content - the encrypted content bytes (§7.3 `content`)
+ */
+export declare function signEnvelope(wallet: Pick<WalletInterface, 'createSignature'>, env: UnsignedEnvelope, content: Uint8Array): Promise<{
+    envelope: Uint8Array;
+    signature: Uint8Array;
+}>;
+/** A received §7.3 envelope: the signed members plus `content` and `signature`. */
+export interface ReceivedEnvelope extends UnsignedEnvelope {
+    content: Uint8Array;
+    signature: Uint8Array;
+}
+/** Decode a §7.3 DAG-CBOR envelope. */
+export declare function decodeEnvelope(bytes: Uint8Array): ReceivedEnvelope;
+/**
+ * Verify an envelope's §7.2 item 3 signature: the key derived from
+ * `sender.identityKey` under the signing protocol, key ID `send`,
+ * counterparty `anyone`, over the map without `content` and `signature`.
+ */
+export declare function verifyEnvelope(env: ReceivedEnvelope): Promise<boolean>;
+//# sourceMappingURL=envelope.d.ts.map

package/dist/metanet/envelope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.d.ts","sourceRoot":"","sources":["../../src/metanet/envelope.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAGN,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,MAAM,UAAU,CAAA;AAMjB,mCAAmC;AACnC,eAAO,MAAM,2BAA2B,EAAE,cAGzC,CAAA;AACD,iCAAiC;AACjC,eAAO,MAAM,yBAAyB,SAAS,CAAA;AAE/C,4BAA4B;AAC5B,MAAM,WAAW,eAAe;IAC/B,gBAAgB,EAAE,UAAU,CAAA;IAC5B,gBAAgB,EAAE,UAAU,CAAA;IAC5B,8CAA8C;IAC9C,QAAQ,EAAE,UAAU,CAAA;IACpB,QAAQ,EAAE,MAAM,CAAA;IAChB,kBAAkB;IAClB,IAAI,EAAE,UAAU,CAAA;CAChB;AAED,qFAAqF;AACrF,MAAM,WAAW,gBAAgB;IAChC,cAAc,EAAE,MAAM,CAAA;IACtB,SAAS,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;IAC3D,kDAAkD;IAClD,MAAM,EAAE;QAAE,WAAW,EAAE,UAAU,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACrE,6BAA6B;IAC7B,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,eAAe,GAAG,IAAI,CAAA;IAC/B,WAAW,CAAC,EAAE,UAAU,CAAA;CACxB;AAiBD,6EAA6E;AAC7E,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,gBAAgB,GAAG,UAAU,CAEzE;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CACjC,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,iBAAiB,CAAC,EAChD,GAAG,EAAE,gBAAgB,EACrB,OAAO,EAAE,UAAU,GACjB,OAAO,CAAC;IAAE,QAAQ,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,UAAU,CAAA;CAAE,CAAC,CAY1D;AAED,mFAAmF;AACnF,MAAM,WAAW,gBAAiB,SAAQ,gBAAgB;IACzD,OAAO,EAAE,UAAU,CAAA;IACnB,SAAS,EAAE,UAAU,CAAA;CACrB;AAED,uCAAuC;AACvC,wBAAgB,cAAc,CAAC,KAAK,EAAE,UAAU,GAAG,gBAAgB,CAYlE;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAe5E"}

package/dist/metanet/envelope.js

@@ -0,0 +1,86 @@
+/**
+ * BRC-169 envelope, DAG-CBOR encoding (§7.2, §7.3).
+ *
+ * The signature is made by the key derived from `sender.identityKey` under
+ * protocol `[2, 'metanet handles envelope']`, key ID `send`, counterparty
+ * `anyone`, over SHA-256 of the DAG-CBOR map with `content` and `signature`
+ * removed. A verifier derives the same public key from `sender.identityKey`.
+ */
+import { ProtoWallet, Utils, } from '@bsv/sdk';
+import { decode as dagCborDecode, encode as dagCborEncode, } from '@ipld/dag-cbor';
+/** §7.2 item 3 signing protocol */
+export const ENVELOPE_SIGNATURE_PROTOCOL = [
+    2,
+    'metanet handles envelope',
+];
+/** §7.2 item 3 signing key ID */
+export const ENVELOPE_SIGNATURE_KEY_ID = 'send';
+/** Drop undefined members: DAG-CBOR has no `undefined`. */
+function defined(obj) {
+    return Object.fromEntries(Object.entries(obj).filter(([, v]) => v !== undefined));
+}
+function envelopeMap(env) {
+    return defined({
+        ...env,
+        recipient: defined(env.recipient),
+        sender: defined(env.sender),
+    });
+}
+/** DAG-CBOR bytes of the envelope with `content` and `signature` removed. */
+export function envelopeSigningPreimage(env) {
+    return dagCborEncode(envelopeMap(env));
+}
+/**
+ * Sign an envelope with the wallet's identity (§7.2 item 3) and return the
+ * full DAG-CBOR envelope, `content` and `signature` included.
+ *
+ * @param content - the encrypted content bytes (§7.3 `content`)
+ */
+export async function signEnvelope(wallet, env, content) {
+    const { signature } = await wallet.createSignature({
+        data: Array.from(envelopeSigningPreimage(env)),
+        protocolID: ENVELOPE_SIGNATURE_PROTOCOL,
+        keyID: ENVELOPE_SIGNATURE_KEY_ID,
+        counterparty: 'anyone',
+    });
+    const sig = Uint8Array.from(signature);
+    return {
+        envelope: dagCborEncode({ ...envelopeMap(env), content, signature: sig }),
+        signature: sig,
+    };
+}
+/** Decode a §7.3 DAG-CBOR envelope. */
+export function decodeEnvelope(bytes) {
+    const env = dagCborDecode(bytes);
+    if (!env ||
+        typeof env !== 'object' ||
+        !(env.sender?.identityKey instanceof Uint8Array) ||
+        !(env.content instanceof Uint8Array) ||
+        !(env.signature instanceof Uint8Array)) {
+        throw new Error('not a BRC-169 DAG-CBOR envelope');
+    }
+    return env;
+}
+/**
+ * Verify an envelope's §7.2 item 3 signature: the key derived from
+ * `sender.identityKey` under the signing protocol, key ID `send`,
+ * counterparty `anyone`, over the map without `content` and `signature`.
+ */
+export async function verifyEnvelope(env) {
+    const { content: _c, signature, ...unsigned } = env;
+    try {
+        const { valid } = await new ProtoWallet('anyone').verifySignature({
+            data: Array.from(envelopeSigningPreimage(unsigned)),
+            signature: Array.from(signature),
+            protocolID: ENVELOPE_SIGNATURE_PROTOCOL,
+            keyID: ENVELOPE_SIGNATURE_KEY_ID,
+            counterparty: Utils.toHex(Array.from(env.sender.identityKey)),
+        });
+        return valid;
+    }
+    catch {
+        // ProtoWallet throws on an invalid signature.
+        return false;
+    }
+}
+//# sourceMappingURL=envelope.js.map

package/dist/metanet/envelope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.js","sourceRoot":"","sources":["../../src/metanet/envelope.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EACN,WAAW,EACX,KAAK,GAGL,MAAM,UAAU,CAAA;AACjB,OAAO,EACN,MAAM,IAAI,aAAa,EACvB,MAAM,IAAI,aAAa,GACvB,MAAM,gBAAgB,CAAA;AAEvB,mCAAmC;AACnC,MAAM,CAAC,MAAM,2BAA2B,GAAmB;IAC1D,CAAC;IACD,0BAA0B;CAC1B,CAAA;AACD,iCAAiC;AACjC,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAA;AA0B/C,2DAA2D;AAC3D,SAAS,OAAO,CAAmB,GAAM;IACxC,OAAO,MAAM,CAAC,WAAW,CACxB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CACjD,CAAA;AACP,CAAC;AAED,SAAS,WAAW,CAAC,GAAqB;IACzC,OAAO,OAAO,CAAC;QACd,GAAG,GAAG;QACN,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;QACjC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;KAC3B,CAAC,CAAA;AACH,CAAC;AAED,6EAA6E;AAC7E,MAAM,UAAU,uBAAuB,CAAC,GAAqB;IAC5D,OAAO,aAAa,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAA;AACvC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CACjC,MAAgD,EAChD,GAAqB,EACrB,OAAmB;IAEnB,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC;QAClD,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC;QAC9C,UAAU,EAAE,2BAA2B;QACvC,KAAK,EAAE,yBAAyB;QAChC,YAAY,EAAE,QAAQ;KACtB,CAAC,CAAA;IACF,MAAM,GAAG,GAAG,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACtC,OAAO;QACN,QAAQ,EAAE,aAAa,CAAC,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;QACzE,SAAS,EAAE,GAAG;KACd,CAAA;AACF,CAAC;AAQD,uCAAuC;AACvC,MAAM,UAAU,cAAc,CAAC,KAAiB;IAC/C,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,CAAqB,CAAA;IACpD,IACC,CAAC,GAAG;QACJ,OAAO,GAAG,KAAK,QAAQ;QACvB,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,YAAY,UAAU,CAAC;QAChD,CAAC,CAAC,GAAG,CAAC,OAAO,YAAY,UAAU,CAAC;QACpC,CAAC,CAAC,GAAG,CAAC,SAAS,YAAY,UAAU,CAAC,EACrC,CAAC;QACF,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAA;IACnD,CAAC;IACD,OAAO,GAAG,CAAA;AACX,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAqB;IACzD,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,QAAQ,EAAE,GAAG,GAAG,CAAA;IACnD,IAAI,CAAC;QACJ,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC,eAAe,CAAC;YACjE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC;YACnD,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC;YAChC,UAAU,EAAE,2BAA2B;YACvC,KAAK,EAAE,yBAAyB;YAChC,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;SAC7D,CAAC,CAAA;QACF,OAAO,KAAK,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACR,8CAA8C;QAC9C,OAAO,KAAK,CAAA;IACb,CAAC;AACF,CAAC"}

package/dist/metanet/envelope.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=envelope.test.d.ts.map

package/dist/metanet/envelope.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.test.d.ts","sourceRoot":"","sources":["../../src/metanet/envelope.test.ts"],"names":[],"mappings":""}

package/dist/metanet/envelope.test.js

@@ -0,0 +1,106 @@
+import { describe, expect, test } from 'bun:test';
+import { PrivateKey, ProtoWallet, Utils } from '@bsv/sdk';
+import { decode as dagCborDecode, encode as dagCborEncode, } from '@ipld/dag-cbor';
+import { ENVELOPE_SIGNATURE_KEY_ID, ENVELOPE_SIGNATURE_PROTOCOL, envelopeSigningPreimage, signEnvelope, } from './envelope.js';
+// BRC-169 Appendix A.7 (crumbs → deggen), binary form with an empty beef.
+const CRUMBS_PRIV = 'cf94a849be462a110807900e45a909515c38a2d17b9a8e9753c9475bfd220848';
+const CRUMBS_PUB = '0375b162a37d8794cfdcf72938d9467931e8586885b93c0da97051ecb512f46646';
+const A7_PREIMAGE = 'a76673656e646572a366646f6d61696e6d6e657875732e6578616d706c656668616e646c65666372756d62736b6964656e746974794b657958210375b162a37d8794cfdcf72938d9467931e8586885b93c0da97051ecb512f46646676372656174656474323032362d30372d33305430393a31353a30305a677061796d656e74a56462656566406870726f746f636f6c6c333234313634353136316438687361746f736869731954297064657269766174696f6e507265666978500f5bcc8d7c345d512595d55982b5a4e37064657269766174696f6e537566666978509c42b65554891520ae960a7fb477759e6771756f746549647820306433346362333963316336666530366364346133343638363765316533333469726563697069656e74a36374616768636f6e663230333666646f6d61696e686c6b75702e6e65746668616e646c656664656767656e6b636f6e74656e7448617368582076f88073e3498f542c57fb9a2133743d6f0c1f9c4632e786116568ccd393e35c6e6d6574616e657448616e646c657363312e30';
+const A7_SIGNATURE = '304402206a2bf0b0628386870202789d718001580279cc1add7b3dc3ff81e08858e22f8c022051d6e6d5756bf2bd1d06ea5199af080e721bb1f5dddefe9a36884796d5d04cf7';
+const bytes = (hex) => Uint8Array.from(Utils.toArray(hex, 'hex'));
+const utf8 = (s) => Uint8Array.from(Utils.toArray(s, 'utf8'));
+const b64 = (s) => Uint8Array.from(Utils.toArray(s, 'base64'));
+const A7 = {
+    metanetHandles: '1.0',
+    recipient: { handle: 'deggen', tag: 'conf2036', domain: 'lkup.net' },
+    sender: {
+        identityKey: bytes(CRUMBS_PUB),
+        handle: 'crumbs',
+        domain: 'nexus.example',
+    },
+    created: '2026-07-30T09:15:00Z',
+    quoteId: '0d34cb39c1c6fe06cd4a346867e1e334',
+    payment: {
+        derivationPrefix: b64('D1vMjXw0XVElldVZgrWk4w=='),
+        derivationSuffix: b64('nEK2VVSJFSCulgp/tHd1ng=='),
+        protocol: utf8('3241645161d8'),
+        satoshis: 21545,
+        beef: new Uint8Array(0),
+    },
+    contentHash: bytes('76f88073e3498f542c57fb9a2133743d6f0c1f9c4632e786116568ccd393e35c'),
+};
+/**
+ * BRC-169 §7.3 types `payment.protocol` as bstr, but the Appendix A.7 binary
+ * vector encodes it as tstr (`6c` + 12 bytes, not `4c`). This module follows
+ * the §7.3 table. To check every other member against A.7, the vector is
+ * rebuilt here with the appendix's tstr protocol.
+ */
+const A7_AS_PRINTED = {
+    ...A7,
+    payment: { ...A7.payment, protocol: '3241645161d8' },
+};
+describe('BRC-169 envelope (DAG-CBOR)', () => {
+    test('signing preimage matches Appendix A.7 byte for byte (tstr protocol as printed)', () => {
+        expect(Utils.toHex(Array.from(envelopeSigningPreimage(A7_AS_PRINTED)))).toBe(A7_PREIMAGE);
+    });
+    test('payment.protocol is encoded as bstr per the §7.3 table', () => {
+        const hex = Utils.toHex(Array.from(envelopeSigningPreimage(A7)));
+        // 0x4c = bstr(12); the appendix prints 0x6c = tstr(12)
+        expect(hex).toContain('6870726f746f636f6c4c333234313634353136316438');
+        expect(hex).toBe(A7_PREIMAGE.replace('6870726f746f636f6c6c', '6870726f746f636f6c4c'));
+    });
+    test('the Appendix A.7 signature verifies under the §7.2 derivation', async () => {
+        const { valid } = await new ProtoWallet('anyone').verifySignature({
+            data: Array.from(envelopeSigningPreimage(A7_AS_PRINTED)),
+            signature: Utils.toArray(A7_SIGNATURE, 'hex'),
+            protocolID: ENVELOPE_SIGNATURE_PROTOCOL,
+            keyID: ENVELOPE_SIGNATURE_KEY_ID,
+            counterparty: CRUMBS_PUB,
+        });
+        expect(valid).toBe(true);
+    });
+    test('envelope bytes are canonical DAG-CBOR and carry content + signature', async () => {
+        const wallet = new ProtoWallet(PrivateKey.fromHex(CRUMBS_PRIV));
+        const content = utf8('opaque content');
+        const { envelope, signature } = await signEnvelope(wallet, A7_AS_PRINTED, content);
+        const decoded = dagCborDecode(envelope);
+        expect(dagCborEncode(decoded)).toEqual(envelope);
+        expect(decoded.content).toEqual(content);
+        expect(decoded.signature).toEqual(signature);
+        const { content: _c, signature: _s, ...rest } = decoded;
+        expect(Utils.toHex(Array.from(dagCborEncode(rest)))).toBe(A7_PREIMAGE);
+    });
+    test('signature verifies from sender.identityKey with the §7.2 derivation', async () => {
+        const wallet = new ProtoWallet(PrivateKey.fromHex(CRUMBS_PRIV));
+        const unsigned = {
+            metanetHandles: '1.0',
+            recipient: { handle: 'deggen', domain: 'lkup.net' },
+            sender: { identityKey: bytes(CRUMBS_PUB) },
+            created: '2026-10-03T00:00:00Z',
+            payment: {
+                derivationPrefix: new Uint8Array(16).fill(1),
+                derivationSuffix: new Uint8Array(16).fill(2),
+                protocol: utf8('mandala'),
+                satoshis: 1,
+                beef: new Uint8Array([1, 2, 3]),
+            },
+        };
+        const { envelope } = await signEnvelope(wallet, unsigned, utf8('x'));
+        // A verifier re-encodes the received map without content/signature.
+        const received = dagCborDecode(envelope);
+        const { content: _c, signature, ...rest } = received;
+        const sender = rest.sender.identityKey;
+        const preimage = envelopeSigningPreimage(rest);
+        expect(preimage).toEqual(envelopeSigningPreimage(unsigned));
+        const verifier = new ProtoWallet('anyone');
+        const { valid } = await verifier.verifySignature({
+            data: Array.from(preimage),
+            signature: Array.from(signature),
+            protocolID: ENVELOPE_SIGNATURE_PROTOCOL,
+            keyID: ENVELOPE_SIGNATURE_KEY_ID,
+            counterparty: Utils.toHex(Array.from(sender)),
+        });
+        expect(valid).toBe(true);
+    });
+});
+//# sourceMappingURL=envelope.test.js.map

package/dist/metanet/envelope.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.test.js","sourceRoot":"","sources":["../../src/metanet/envelope.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,UAAU,CAAA;AACjD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,UAAU,CAAA;AACzD,OAAO,EACN,MAAM,IAAI,aAAa,EACvB,MAAM,IAAI,aAAa,GACvB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EACN,yBAAyB,EACzB,2BAA2B,EAE3B,uBAAuB,EACvB,YAAY,GACZ,MAAM,eAAe,CAAA;AAEtB,0EAA0E;AAC1E,MAAM,WAAW,GAChB,kEAAkE,CAAA;AACnE,MAAM,UAAU,GACf,oEAAoE,CAAA;AACrE,MAAM,WAAW,GAChB,8xBAA8xB,CAAA;AAC/xB,MAAM,YAAY,GACjB,8IAA8I,CAAA;AAE/I,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAA;AACzE,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAA;AACrE,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAA;AAEtE,MAAM,EAAE,GAAqB;IAC5B,cAAc,EAAE,KAAK;IACrB,SAAS,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE;IACpE,MAAM,EAAE;QACP,WAAW,EAAE,KAAK,CAAC,UAAU,CAAC;QAC9B,MAAM,EAAE,QAAQ;QAChB,MAAM,EAAE,eAAe;KACvB;IACD,OAAO,EAAE,sBAAsB;IAC/B,OAAO,EAAE,kCAAkC;IAC3C,OAAO,EAAE;QACR,gBAAgB,EAAE,GAAG,CAAC,0BAA0B,CAAC;QACjD,gBAAgB,EAAE,GAAG,CAAC,0BAA0B,CAAC;QACjD,QAAQ,EAAE,IAAI,CAAC,cAAc,CAAC;QAC9B,QAAQ,EAAE,KAAK;QACf,IAAI,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC;KACvB;IACD,WAAW,EAAE,KAAK,CACjB,kEAAkE,CAClE;CACD,CAAA;AAED;;;;;GAKG;AACH,MAAM,aAAa,GAAG;IACrB,GAAG,EAAE;IACL,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,OAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE;CACtB,CAAA;AAEhC,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;IAC5C,IAAI,CAAC,gFAAgF,EAAE,GAAG,EAAE;QAC3F,MAAM,CACL,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,aAAa,CAAC,CAAC,CAAC,CAC/D,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IACpB,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,wDAAwD,EAAE,GAAG,EAAE;QACnE,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QAChE,uDAAuD;QACvD,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,8CAA8C,CAAC,CAAA;QACrE,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CACf,WAAW,CAAC,OAAO,CAAC,sBAAsB,EAAE,sBAAsB,CAAC,CACnE,CAAA;IACF,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,+DAA+D,EAAE,KAAK,IAAI,EAAE;QAChF,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC,eAAe,CAAC;YACjE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,aAAa,CAAC,CAAC;YACxD,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,KAAK,CAAC;YAC7C,UAAU,EAAE,2BAA2B;YACvC,KAAK,EAAE,yBAAyB;YAChC,YAAY,EAAE,UAAU;SACxB,CAAC,CAAA;QACF,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAA;QAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,CAAA;QACtC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,GAAG,MAAM,YAAY,CACjD,MAAM,EACN,aAAa,EACb,OAAO,CACP,CAAA;QAED,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,CAA4B,CAAA;QAClE,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;QAChD,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QACxC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QAC5C,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAA;QACvD,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IACvE,CAAC,CAAC,CAAA;IAEF,IAAI,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAA;QAC/D,MAAM,QAAQ,GAAqB;YAClC,cAAc,EAAE,KAAK;YACrB,SAAS,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE;YACnD,MAAM,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,UAAU,CAAC,EAAE;YAC1C,OAAO,EAAE,sBAAsB;YAC/B,OAAO,EAAE;gBACR,gBAAgB,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC5C,gBAAgB,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC5C,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC;gBACzB,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;aAC/B;SACD,CAAA;QACD,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAA;QAEpE,oEAAoE;QACpE,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAA4B,CAAA;QACnE,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,QAAQ,CAAA;QACpD,MAAM,MAAM,GAAI,IAAI,CAAC,MAAsC,CAAC,WAAW,CAAA;QACvE,MAAM,QAAQ,GAAG,uBAAuB,CACvC,IAAmC,CACnC,CAAA;QACD,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,uBAAuB,CAAC,QAAQ,CAAC,CAAC,CAAA;QAE3D,MAAM,QAAQ,GAAG,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAA;QAC1C,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,eAAe,CAAC;YAChD,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC;YAC1B,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAuB,CAAC;YAC9C,UAAU,EAAE,2BAA2B;YACvC,KAAK,EAAE,yBAAyB;YAChC,YAAY,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;SAC7C,CAAC,CAAA;QACF,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/metanet/inbox.d.ts

@@ -0,0 +1,51 @@
+/**
+ * The messagebox steps shared by the BRC-169 inbox syncs (`mandala_inbox`,
+ * `metanet_inbox`): list a box (BRC-231 over BRC-104), decode each §7.3
+ * DAG-CBOR envelope, verify its §7.2 signature against `sender.identityKey`,
+ * decrypt the BRC-78 `content` with `wallet.decrypt`, check `contentHash`,
+ * parse the MIME entity, hand it to the box's handler, and acknowledge only
+ * the messages whose handler succeeded. A message whose handler throws is
+ * left in the box and reported with the reason.
+ */
+import { type MimeEntity } from '@1sat/utils';
+import { type WalletInterface } from '@bsv/sdk';
+import { type ReceivedEnvelope } from './envelope.js';
+import { type CborMessage } from './relay.js';
+/** Default messagebox when the caller names none. */
+export declare const DEFAULT_MESSAGEBOX_URL = "https://messagebox.1sat.app";
+/** A message left in the box, and why. */
+export interface InboxSkip {
+    messageId: string;
+    reason: string;
+}
+/** Thrown to leave a message unacknowledged with a reason. */
+export declare class InboxSkipError extends Error {
+}
+/** Hex of a byte string of the given length, or InboxSkipError. */
+export declare function bytesHex(b: unknown, length: number, what: string): string;
+/** A verified, decrypted envelope. */
+export interface OpenedEnvelope {
+    env: ReceivedEnvelope;
+    /** `sender.identityKey`, hex */
+    sender: string;
+    /** The decrypted `content` */
+    plaintext: number[];
+    entity: MimeEntity;
+}
+/**
+ * Decode, verify, decrypt and parse one envelope addressed to this wallet.
+ *
+ * @throws InboxSkipError when it is not a DAG-CBOR envelope, the signature
+ * does not verify, or `contentHash` does not match
+ */
+export declare function openEnvelope(wallet: Pick<WalletInterface, 'decrypt'>, body: Uint8Array): Promise<OpenedEnvelope>;
+/**
+ * List `messageBox`, open each envelope and run `handle` on it; acknowledge
+ * the messages `handle` returned for.
+ */
+export declare function processInbox<R>(wallet: WalletInterface, messageboxUrl: string | undefined, messageBox: string, handle: (opened: OpenedEnvelope, msg: CborMessage) => Promise<R>): Promise<{
+    received: R[];
+    skipped: InboxSkip[];
+    error?: string;
+}>;
+//# sourceMappingURL=inbox.d.ts.map

package/dist/metanet/inbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbox.d.ts","sourceRoot":"","sources":["../../src/metanet/inbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,KAAK,UAAU,EAAmB,MAAM,aAAa,CAAA;AAC9D,OAAO,EAAe,KAAK,eAAe,EAAE,MAAM,UAAU,CAAA;AAE5D,OAAO,EACN,KAAK,gBAAgB,EAGrB,MAAM,eAAe,CAAA;AACtB,OAAO,EAAE,KAAK,WAAW,EAAgB,MAAM,YAAY,CAAA;AAE3D,qDAAqD;AACrD,eAAO,MAAM,sBAAsB,gCAAgC,CAAA;AAEnE,0CAA0C;AAC1C,MAAM,WAAW,SAAS;IACzB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;CACd;AAED,8DAA8D;AAC9D,qBAAa,cAAe,SAAQ,KAAK;CAAG;AAE5C,mEAAmE;AACnE,wBAAgB,QAAQ,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAKzE;AAED,sCAAsC;AACtC,MAAM,WAAW,cAAc;IAC9B,GAAG,EAAE,gBAAgB,CAAA;IACrB,gCAAgC;IAChC,MAAM,EAAE,MAAM,CAAA;IACd,8BAA8B;IAC9B,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,MAAM,EAAE,UAAU,CAAA;CAClB;AAED;;;;;GAKG;AACH,wBAAsB,YAAY,CACjC,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC,EACxC,IAAI,EAAE,UAAU,GACd,OAAO,CAAC,cAAc,CAAC,CAoBzB;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAAC,CAAC,EACnC,MAAM,EAAE,eAAe,EACvB,aAAa,EAAE,MAAM,GAAG,SAAS,EACjC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,GAC9D,OAAO,CAAC;IAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAAC,OAAO,EAAE,SAAS,EAAE,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAmDlE"}

package/dist/metanet/inbox.js

@@ -0,0 +1,100 @@
+/**
+ * The messagebox steps shared by the BRC-169 inbox syncs (`mandala_inbox`,
+ * `metanet_inbox`): list a box (BRC-231 over BRC-104), decode each §7.3
+ * DAG-CBOR envelope, verify its §7.2 signature against `sender.identityKey`,
+ * decrypt the BRC-78 `content` with `wallet.decrypt`, check `contentHash`,
+ * parse the MIME entity, hand it to the box's handler, and acknowledge only
+ * the messages whose handler succeeded. A message whose handler throws is
+ * left in the box and reported with the reason.
+ */
+import { parseMimeEntity } from '@1sat/utils';
+import { Hash, Utils } from '@bsv/sdk';
+import { decryptBrc78 } from './brc78.js';
+import { decodeEnvelope, verifyEnvelope, } from './envelope.js';
+import { messageRelay } from './relay.js';
+/** Default messagebox when the caller names none. */
+export const DEFAULT_MESSAGEBOX_URL = 'https://messagebox.1sat.app';
+/** Thrown to leave a message unacknowledged with a reason. */
+export class InboxSkipError extends Error {
+}
+/** Hex of a byte string of the given length, or InboxSkipError. */
+export function bytesHex(b, length, what) {
+    if (!(b instanceof Uint8Array) || b.length !== length) {
+        throw new InboxSkipError(`${what} must be ${length} bytes`);
+    }
+    return Utils.toHex(Array.from(b));
+}
+/**
+ * Decode, verify, decrypt and parse one envelope addressed to this wallet.
+ *
+ * @throws InboxSkipError when it is not a DAG-CBOR envelope, the signature
+ * does not verify, or `contentHash` does not match
+ */
+export async function openEnvelope(wallet, body) {
+    let env;
+    try {
+        env = decodeEnvelope(body);
+    }
+    catch {
+        throw new InboxSkipError('not a DAG-CBOR BRC-169 envelope');
+    }
+    if (!(await verifyEnvelope(env))) {
+        throw new InboxSkipError('envelope signature does not verify');
+    }
+    const sender = bytesHex(env.sender.identityKey, 33, 'sender');
+    const plaintext = await decryptBrc78(wallet, env.content, sender);
+    if (env.contentHash !== undefined &&
+        Utils.toHex(Hash.sha256(plaintext)) !==
+            Utils.toHex(Array.from(env.contentHash))) {
+        throw new InboxSkipError('contentHash does not match the content');
+    }
+    return { env, sender, plaintext, entity: parseMimeEntity(plaintext) };
+}
+/**
+ * List `messageBox`, open each envelope and run `handle` on it; acknowledge
+ * the messages `handle` returned for.
+ */
+export async function processInbox(wallet, messageboxUrl, messageBox, handle) {
+    const messagebox = messageboxUrl?.replace(/\/+$/, '') || DEFAULT_MESSAGEBOX_URL;
+    const received = [];
+    const skipped = [];
+    const acknowledged = [];
+    let messages;
+    try {
+        messages = await messageRelay.listCborMessages(wallet, messagebox, messageBox);
+    }
+    catch (error) {
+        return {
+            received,
+            skipped,
+            error: error instanceof Error ? error.message : String(error),
+        };
+    }
+    for (const msg of messages) {
+        try {
+            const opened = await openEnvelope(wallet, msg.body);
+            received.push(await handle(opened, msg));
+            acknowledged.push(msg.messageId);
+        }
+        catch (error) {
+            skipped.push({
+                messageId: msg.messageId,
+                reason: error instanceof Error ? error.message : String(error),
+            });
+        }
+    }
+    if (acknowledged.length > 0) {
+        try {
+            await messageRelay.acknowledgeCborMessages(wallet, messagebox, acknowledged);
+        }
+        catch (error) {
+            return {
+                received,
+                skipped,
+                error: `acknowledge-failed: ${error instanceof Error ? error.message : String(error)}`,
+            };
+        }
+    }
+    return { received, skipped };
+}
+//# sourceMappingURL=inbox.js.map

package/dist/metanet/inbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inbox.js","sourceRoot":"","sources":["../../src/metanet/inbox.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAmB,eAAe,EAAE,MAAM,aAAa,CAAA;AAC9D,OAAO,EAAE,IAAI,EAAE,KAAK,EAAwB,MAAM,UAAU,CAAA;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAEN,cAAc,EACd,cAAc,GACd,MAAM,eAAe,CAAA;AACtB,OAAO,EAAoB,YAAY,EAAE,MAAM,YAAY,CAAA;AAE3D,qDAAqD;AACrD,MAAM,CAAC,MAAM,sBAAsB,GAAG,6BAA6B,CAAA;AAQnE,8DAA8D;AAC9D,MAAM,OAAO,cAAe,SAAQ,KAAK;CAAG;AAE5C,mEAAmE;AACnE,MAAM,UAAU,QAAQ,CAAC,CAAU,EAAE,MAAc,EAAE,IAAY;IAChE,IAAI,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACvD,MAAM,IAAI,cAAc,CAAC,GAAG,IAAI,YAAY,MAAM,QAAQ,CAAC,CAAA;IAC5D,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAA;AAClC,CAAC;AAYD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CACjC,MAAwC,EACxC,IAAgB;IAEhB,IAAI,GAAqB,CAAA;IACzB,IAAI,CAAC;QACJ,GAAG,GAAG,cAAc,CAAC,IAAI,CAAC,CAAA;IAC3B,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,cAAc,CAAC,iCAAiC,CAAC,CAAA;IAC5D,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,cAAc,CAAC,oCAAoC,CAAC,CAAA;IAC/D,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAA;IAC7D,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IACjE,IACC,GAAG,CAAC,WAAW,KAAK,SAAS;QAC7B,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAClC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,EACxC,CAAC;QACF,MAAM,IAAI,cAAc,CAAC,wCAAwC,CAAC,CAAA;IACnE,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,CAAC,SAAS,CAAC,EAAE,CAAA;AACtE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CACjC,MAAuB,EACvB,aAAiC,EACjC,UAAkB,EAClB,MAAgE;IAEhE,MAAM,UAAU,GACf,aAAa,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,sBAAsB,CAAA;IAC7D,MAAM,QAAQ,GAAQ,EAAE,CAAA;IACxB,MAAM,OAAO,GAAgB,EAAE,CAAA;IAC/B,MAAM,YAAY,GAAa,EAAE,CAAA;IAEjC,IAAI,QAAuB,CAAA;IAC3B,IAAI,CAAC;QACJ,QAAQ,GAAG,MAAM,YAAY,CAAC,gBAAgB,CAC7C,MAAM,EACN,UAAU,EACV,UAAU,CACV,CAAA;IACF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO;YACN,QAAQ;YACR,OAAO;YACP,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC7D,CAAA;IACF,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAA;YACnD,QAAQ,CAAC,IAAI,CAAC,MAAM,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAA;YACxC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC;gBACZ,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAA;QACH,CAAC;IACF,CAAC;IAED,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC;YACJ,MAAM,YAAY,CAAC,uBAAuB,CACzC,MAAM,EACN,UAAU,EACV,YAAY,CACZ,CAAA;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,OAAO;gBACN,QAAQ;gBACR,OAAO;gBACP,KAAK,EAAE,uBAAuB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;aACtF,CAAA;QACF,CAAC;IACF,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAA;AAC7B,CAAC"}

package/dist/metanet/index.d.ts

@@ -0,0 +1,8 @@
+/**
+ * BRC-169 envelope plumbing shared by the handle-addressed actions (Mandala
+ * sends, `sendBsv` to a handle) and the `metanet_inbox` sync.
+ */
+export * from './envelope.js';
+export * from './receive.js';
+export declare const metanetActions: import("../types.js").Action<import("./receive.js").SyncMetanetInboxInput, import("./receive.js").SyncMetanetInboxResult>[];
+//# sourceMappingURL=index.d.ts.map

package/dist/metanet/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/metanet/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,cAAc,eAAe,CAAA;AAC7B,cAAc,cAAc,CAAA;AAE5B,eAAO,MAAM,cAAc,6HAAqB,CAAA"}

package/dist/metanet/index.js

@@ -0,0 +1,9 @@
+/**
+ * BRC-169 envelope plumbing shared by the handle-addressed actions (Mandala
+ * sends, `sendBsv` to a handle) and the `metanet_inbox` sync.
+ */
+import { syncMetanetInbox } from './receive.js';
+export * from './envelope.js';
+export * from './receive.js';
+export const metanetActions = [syncMetanetInbox];
+//# sourceMappingURL=index.js.map

package/dist/metanet/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/metanet/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAE/C,cAAc,eAAe,CAAA;AAC7B,cAAc,cAAc,CAAA;AAE5B,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,gBAAgB,CAAC,CAAA"}