@agora-sdk/secure-chat-core 0.6.5 → 0.8.0

package/dist/esm/content/mimi-content.js

@@ -0,0 +1,283 @@
+// MimiContent — secure-chat's message content format. IMPLEMENTS draft-ietf-mimi-content-08 (2 Mar
+// 2026), the message-content CDDL. The CBOR WIRE STRUCTURE below is draft-08-faithful with NO deviation
+// (the interop-readiness payoff); the ONE deliberate deviation is MessageId DERIVATION (we lack
+// federation identities) — documented in full at the bottom of this header.
+//
+// Where it sits: pure structure ABOVE the SecureChatCrypto seam and INSIDE the padding frame. Content
+// is a core concern, never crypto's. We encode/decode the FULL draft structure (so Tier-3 fields
+// round-trip today and surface later without rework); the hook surfaces Tier 2 (text / reply /
+// reaction / edit / delete). Decoded bytes are UNTRUSTED peer input: decodeMimiContent validates the
+// schema AFTER canonical CBOR-decoding and fails closed (CLAUDE.md §1).
+//
+// Wire CDDL (draft-ietf-mimi-content-08, the message-content section) — exactly what we encode/decode:
+//
+//   mimiContent = [salt:bstr.size 16, replaces:null/MessageId, topicId:bstr,
+//                  expires:null/Expiration, inReplyTo:null/MessageId,
+//                  mimiExtensions:extensions, nestedPart:NestedPart]      ; 7 elements
+//   MessageId   = bstr.size 32
+//   Expiration  = [relative:bool, time:uint.size 4]
+//   extensions  = { ? &(senderUri:1)^ => tstr, ? &(roomUri:2)^ => tstr, * otherKnown, * unknown }
+//                 name = int / tstr.size (1..255)   value = any.size (0..4095)
+//   NestedPart  = [disposition, language:tstr, (NullPart // SinglePart // ExternalPart // MultiPart)]
+//   NullPart    = (cardinality:nullpart)
+//   SinglePart  = (cardinality:single,  contentType:tstr, content:bstr)
+//   ExternalPart= (cardinality:external, contentType:tstr, url:tstr, expires:uint.size 4,
+//                  size:uint.size 8, encAlg:uint.size 2, key:bstr, nonce:bstr, aad:bstr,
+//                  hashAlg:uint.size 1, contentHash:bstr, description:tstr, filename:tstr)
+//   MultiPart   = (cardinality:multi, partSemantics, parts:[2* NestedPart])  ; ≥2 parts
+//   baseDispos: unspecified=0 render=1 reaction=2 profile=3 inline=4 icon=5 attachment=6 session=7 preview=8
+//   cardinality: nullpart=0 single=1 external=2 multi=3   partSemantics: chooseOne=0 singleUnit=1 processAll=2
+//   SHA-256 hash-algorithm identifier = 0x01
+//
+// Because NestedPart hoists `disposition` + `language` OUT of the variant, a single part encodes to the
+// CBOR array [disposition, language, cardinality, …variantFields]. Our TS `Part` types keep
+// `disposition`/`language` ON each variant (so the reducer can branch on `part.disposition ===
+// Disposition.Reaction` and builders can set it); the codec maps them to/from the wrapper positions.
+//
+// ── THE ONE DELIBERATE DEVIATION: MessageId derivation ───────────────────────────────────────────
+// draft-08 derives a MessageId from FEDERATION IDENTITIES:
+//     messageId = 0x01 || SHA256(senderUriLen || senderUri || roomUriLen || roomUri || message || salt)[0..30]
+// This SDK adopts the MIMI content FORMAT, not MIMI federation (design spec Goal A) — we have no
+// senderUri / roomUri. So `contentHash(content)` returns a 32-byte MessageId-SHAPED value:
+//     0x01 (SHA-256 hashAlg) || sha256(encodeMimiContent(content))[0..30]   (1 + 31 = 32 bytes)
+// — structurally a real MIMI MessageId; only the hash INPUT is simplified (our canonical CBOR, which
+// already includes the per-message `salt`, with no URI prefixes). `replaces`/`inReplyTo` carry THIS
+// value. This is the single upgrade-when-federation-lands deviation; the WIRE CBOR has none.
+//
+// Design-doc reconcile (FOLLOWING THE DRAFT; for the doc owner): the doc's top-level `lastSeen` list,
+// the per-Part `partIndex`, and `width`/`height`/`duration` on ExternalPart are NOT in draft-08 and are
+// DROPPED; the doc modeled `inReplyTo` as {hash, hashAlgorithm} but the draft uses a bare 32-byte
+// MessageId, so `inReplyTo` is now `Uint8Array | null` and the `MessageDerivedValue` type is removed.
+import { encode, decode } from "./cbor.js";
+import { sha256 } from "@noble/hashes/sha2.js";
+/**
+ * Part cardinality tag. Values per draft-ietf-mimi-content-08
+ * (`nullpart=0, single=1, external=2, multi=3`).
+ */
+export const Cardinality = { Null: 0, Single: 1, External: 2, Multi: 3 };
+/**
+ * Part disposition (draft-ietf-mimi-content-08 `baseDispos`). `Reaction` distinguishes a reaction
+ * from a reply; `Attachment`/`Inline`/etc. drive client rendering.
+ */
+export const Disposition = {
+    Unspecified: 0, Render: 1, Reaction: 2, Profile: 3, Inline: 4, Icon: 5,
+    Attachment: 6, Session: 7, Preview: 8,
+};
+/**
+ * {@link MultiPart} `partSemantics` — how a client treats the child parts (draft-ietf-mimi-content-08:
+ * `chooseOne=0, singleUnit=1, processAll=2`).
+ */
+export const PartSemantics = { ChooseOne: 0, SingleUnit: 1, ProcessAll: 2 };
+/**
+ * Named-Information hash algorithm. SHA-256 is the only value we emit (identifier `0x01`, per
+ * draft-ietf-mimi-content-08).
+ */
+export const HashAlg = { Sha256: 1 };
+/**
+ * Schema bounds enforced on decode (DoS / abuse guard): max sibling parts in a {@link MultiPart}, and
+ * max part-tree depth. (draft-08 has no `lastSeen`, so there is no list bound here.)
+ */
+export const MIMI_LIMITS = { maxParts: 64, maxNesting: 8 };
+// ── encode ────────────────────────────────────────────────────────────────────
+function encodePart(p) {
+    // NestedPart = [disposition, language, …variant-starting-with-cardinality].
+    switch (p.cardinality) {
+        case Cardinality.Null:
+            return [p.disposition, p.language, Cardinality.Null];
+        case Cardinality.Single:
+            return [p.disposition, p.language, Cardinality.Single, p.contentType, p.content];
+        case Cardinality.External:
+            return [
+                p.disposition, p.language, Cardinality.External, p.contentType, p.url, p.expires, p.size,
+                p.encAlgorithm, p.key, p.nonce, p.aad, p.hashAlgorithm, p.contentHash, p.description, p.filename,
+            ];
+        case Cardinality.Multi:
+            return [p.disposition, p.language, Cardinality.Multi, p.partSemantics, p.parts.map(encodePart)];
+    }
+}
+function toCbor(c) {
+    return [
+        c.salt,
+        c.replaces, // bstr(32) | null
+        c.topicId,
+        c.expires ? [c.expires.relative, c.expires.time] : null, // Expiration | null
+        c.inReplyTo, // bstr(32) | null
+        c.extensions,
+        encodePart(c.nestedPart),
+    ];
+}
+/**
+ * Encode a {@link MimiContent} to canonical CBOR bytes per the draft-08 wire layout.
+ * @param c - The content to encode.
+ * @returns Canonical CBOR bytes (stable for equal content — the basis for {@link contentHash}).
+ * @throws {Error} If a field carries an out-of-subset CBOR value (e.g. a non-integer number).
+ * @example
+ * ```ts
+ * const bytes = encodeMimiContent(myContent);
+ * const same  = decodeMimiContent(bytes); // round-trips
+ * ```
+ */
+export function encodeMimiContent(c) {
+    return encode(toCbor(c));
+}
+// ── decode + validate ───────────────────────────────────────────────────────
+function asArray(v, ctx) {
+    if (!Array.isArray(v))
+        throw new Error(`MimiContent: expected array (${ctx})`);
+    return v;
+}
+function asBytes(v, ctx) {
+    if (!(v instanceof Uint8Array))
+        throw new Error(`MimiContent: expected bytes (${ctx})`);
+    return v;
+}
+function asString(v, ctx) {
+    if (typeof v !== "string")
+        throw new Error(`MimiContent: expected string (${ctx})`);
+    return v;
+}
+function asInt(v, ctx) {
+    if (typeof v !== "number" || !Number.isInteger(v))
+        throw new Error(`MimiContent: expected int (${ctx})`);
+    return v;
+}
+function asBool(v, ctx) {
+    if (typeof v !== "boolean")
+        throw new Error(`MimiContent: expected bool (${ctx})`);
+    return v;
+}
+/**
+ * Exact wire-array length per cardinality (`[disposition, language, cardinality, …variant]`). Decode
+ * asserts this exactly so a part carrying TRAILING junk is rejected, not silently dropped (CLAUDE.md
+ * §1: fail closed — never skip the check).
+ */
+const PART_ARITY = {
+    [Cardinality.Null]: 3, // disposition, language, cardinality
+    [Cardinality.Single]: 5, // + contentType, content
+    // disposition, language, cardinality + 12 ExternalPart fields (contentType, url, expires, size,
+    // encAlg, key, nonce, aad, hashAlg, contentHash, description, filename) = 15. (decode reads a[14].)
+    [Cardinality.External]: 15,
+    [Cardinality.Multi]: 5, // + partSemantics, parts
+};
+function decodePart(v, depth) {
+    if (depth > MIMI_LIMITS.maxNesting)
+        throw new Error("MimiContent: part nesting exceeds bounds");
+    const a = asArray(v, "part");
+    // NestedPart wrapper: [disposition, language, cardinality, …variant].
+    const disposition = asInt(a[0], "part.disposition");
+    const language = asString(a[1], "part.language");
+    const card = asInt(a[2], "part.cardinality");
+    // Fail closed on an unknown cardinality OR a wrong-length part array (trailing/missing elements).
+    const expectedArity = PART_ARITY[card];
+    if (expectedArity === undefined)
+        throw new Error(`MimiContent: unknown part cardinality ${card}`);
+    if (a.length !== expectedArity)
+        throw new Error(`MimiContent: wrong arity for cardinality ${card}`);
+    switch (card) {
+        case Cardinality.Null:
+            return { cardinality: Cardinality.Null, disposition, language };
+        case Cardinality.Single:
+            return {
+                cardinality: Cardinality.Single,
+                disposition,
+                language,
+                contentType: asString(a[3], "contentType"),
+                content: asBytes(a[4], "content"),
+            };
+        case Cardinality.External:
+            return {
+                cardinality: Cardinality.External,
+                disposition,
+                language,
+                contentType: asString(a[3], "contentType"),
+                url: asString(a[4], "url"),
+                expires: asInt(a[5], "expires"),
+                size: asInt(a[6], "size"),
+                encAlgorithm: asInt(a[7], "encAlgorithm"),
+                key: asBytes(a[8], "key"),
+                nonce: asBytes(a[9], "nonce"),
+                aad: asBytes(a[10], "aad"),
+                hashAlgorithm: asInt(a[11], "hashAlgorithm"),
+                contentHash: asBytes(a[12], "contentHash"),
+                description: asString(a[13], "description"),
+                filename: asString(a[14], "filename"),
+            };
+        case Cardinality.Multi: {
+            const parts = asArray(a[4], "multi.parts");
+            // The draft requires 2 or more child parts; reject a degenerate multipart fail-closed.
+            if (parts.length < 2)
+                throw new Error("MimiContent: multipart requires 2+ parts");
+            if (parts.length > MIMI_LIMITS.maxParts)
+                throw new Error("MimiContent: too many parts (bounds)");
+            return {
+                cardinality: Cardinality.Multi,
+                disposition,
+                language,
+                partSemantics: asInt(a[3], "partSemantics"),
+                parts: parts.map((p) => decodePart(p, depth + 1)),
+            };
+        }
+        default:
+            throw new Error(`MimiContent: unknown part cardinality ${card}`);
+    }
+}
+/**
+ * Strict-decode + schema-validate canonical CBOR into a {@link MimiContent}. Fails closed on any
+ * structural or bounds violation (untrusted peer input — CLAUDE.md §1).
+ * @param bytes - The canonical CBOR content bytes (after unframing).
+ * @returns The validated {@link MimiContent}.
+ * @throws {Error} On a malformed structure, wrong field type, an unknown {@link Cardinality}, or a
+ *   {@link MIMI_LIMITS} bound exceeded. The error message never includes message plaintext.
+ * @example
+ * ```ts
+ * const content = decodeMimiContent(peerBytes); // throws on any tampering
+ * ```
+ */
+export function decodeMimiContent(bytes) {
+    const a = asArray(decode(bytes, { maxItems: MIMI_LIMITS.maxParts * 4 }), "MimiContent");
+    if (a.length !== 7)
+        throw new Error("MimiContent: wrong top-level arity");
+    const replaces = a[1] === null ? null : asBytes(a[1], "replaces");
+    let expires = null;
+    if (a[3] !== null) {
+        const e = asArray(a[3], "expires");
+        expires = { relative: asBool(e[0], "expires.relative"), time: asInt(e[1], "expires.time") };
+    }
+    const inReplyTo = a[4] === null ? null : asBytes(a[4], "inReplyTo");
+    const ext = a[5];
+    if (!(ext instanceof Map))
+        throw new Error("MimiContent: extensions must be a map");
+    return {
+        salt: asBytes(a[0], "salt"),
+        replaces,
+        topicId: asBytes(a[2], "topicId"),
+        expires,
+        inReplyTo,
+        extensions: ext,
+        nestedPart: decodePart(a[6], 0),
+    };
+}
+/**
+ * The MIMI content-hash: a 32-byte, MessageId-SHAPED reference value used to point at a message
+ * (reply / edit / delete / un-react). Per the file-header deviation note, we lack federation
+ * identities, so instead of draft-08's URI-prefixed input we compute
+ * `0x01 || sha256(encodeMimiContent(c))[0..30]` — the leading `0x01` is the SHA-256 hash-algorithm
+ * identifier, then the first 31 bytes of the SHA-256 over our canonical CBOR (which already includes
+ * the per-message `salt`). Structurally a real MIMI MessageId; stable across runtimes; salt-sensitive.
+ * The blind server never sees this. `replaces` / `inReplyTo` are populated with this value.
+ * @param c - The content to hash.
+ * @returns A 32-byte MessageId (`[0]` is `0x01`; `[1..31]` are `sha256(canonical CBOR)[0..30]`).
+ * @example
+ * ```ts
+ * const id = contentHash(myContent); // 32 bytes, id[0] === 0x01, salt-sensitive
+ * reply.inReplyTo = id;
+ * ```
+ */
+export function contentHash(c) {
+    const digest = sha256(encodeMimiContent(c));
+    const messageId = new Uint8Array(32);
+    messageId[0] = HashAlg.Sha256; // 0x01 — the MessageId hashAlg prefix byte
+    messageId.set(digest.subarray(0, 31), 1); // first 31 SHA-256 bytes fill [1..31]
+    return messageId;
+}
+//# sourceMappingURL=mimi-content.js.map

package/dist/esm/content/mimi-content.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mimi-content.js","sourceRoot":"","sources":["../../../src/content/mimi-content.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,wGAAwG;AACxG,gGAAgG;AAChG,4EAA4E;AAC5E,EAAE;AACF,sGAAsG;AACtG,iGAAiG;AACjG,+FAA+F;AAC/F,qGAAqG;AACrG,wEAAwE;AACxE,EAAE;AACF,uGAAuG;AACvG,EAAE;AACF,6EAA6E;AAC7E,sEAAsE;AACtE,uFAAuF;AACvF,+BAA+B;AAC/B,oDAAoD;AACpD,kGAAkG;AAClG,+EAA+E;AAC/E,sGAAsG;AACtG,yCAAyC;AACzC,wEAAwE;AACxE,0FAA0F;AAC1F,yFAAyF;AACzF,2FAA2F;AAC3F,wFAAwF;AACxF,6GAA6G;AAC7G,+GAA+G;AAC/G,6CAA6C;AAC7C,EAAE;AACF,wGAAwG;AACxG,4FAA4F;AAC5F,+FAA+F;AAC/F,qGAAqG;AACrG,EAAE;AACF,oGAAoG;AACpG,2DAA2D;AAC3D,+GAA+G;AAC/G,iGAAiG;AACjG,2FAA2F;AAC3F,gGAAgG;AAChG,qGAAqG;AACrG,oGAAoG;AACpG,6FAA6F;AAC7F,EAAE;AACF,sGAAsG;AACtG,wGAAwG;AACxG,kGAAkG;AAClG,sGAAsG;AAEtG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAgC,MAAM,WAAW,CAAC;AACzE,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAE/C;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAW,CAAC;AAIlF;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC;IACtE,UAAU,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;CAC7B,CAAC;AAIX;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAW,CAAC;AAIrF;;;GAGG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG,EAAE,MAAM,EAAE,CAAC,EAAW,CAAC;AAqG9C;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,EAAW,CAAC;AAEpE,iFAAiF;AACjF,SAAS,UAAU,CAAC,CAAO;IACzB,4EAA4E;IAC5E,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;QACtB,KAAK,WAAW,CAAC,IAAI;YACnB,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;QACvD,KAAK,WAAW,CAAC,MAAM;YACrB,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;QACnF,KAAK,WAAW,CAAC,QAAQ;YACvB,OAAO;gBACL,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI;gBACxF,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ;aACjG,CAAC;QACJ,KAAK,WAAW,CAAC,KAAK;YACpB,OAAO,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IACpG,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,CAAc;IAC5B,OAAO;QACL,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,QAAQ,EAAE,kBAAkB;QAC9B,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,oBAAoB;QAC7E,CAAC,CAAC,SAAS,EAAE,kBAAkB;QAC/B,CAAC,CAAC,UAAU;QACZ,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;KACzB,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iBAAiB,CAAC,CAAc;IAC9C,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED,+EAA+E;AAC/E,SAAS,OAAO,CAAC,CAAY,EAAE,GAAW;IACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,GAAG,CAAC,CAAC;IAC/E,OAAO,CAAC,CAAC;AACX,CAAC;AACD,SAAS,OAAO,CAAC,CAAY,EAAE,GAAW;IACxC,IAAI,CAAC,CAAC,CAAC,YAAY,UAAU,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,GAAG,GAAG,CAAC,CAAC;IACxF,OAAO,CAAC,CAAC;AACX,CAAC;AACD,SAAS,QAAQ,CAAC,CAAY,EAAE,GAAW;IACzC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,GAAG,CAAC,CAAC;IACpF,OAAO,CAAC,CAAC;AACX,CAAC;AACD,SAAS,KAAK,CAAC,CAAY,EAAE,GAAW;IACtC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,GAAG,CAAC,CAAC;IACzG,OAAO,CAAC,CAAC;AACX,CAAC;AACD,SAAS,MAAM,CAAC,CAAY,EAAE,GAAW;IACvC,IAAI,OAAO,CAAC,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,GAAG,GAAG,CAAC,CAAC;IACnF,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,GAA2B;IACzC,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,qCAAqC;IAC5D,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,yBAAyB;IAClD,gGAAgG;IAChG,oGAAoG;IACpG,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,EAAE;IAC1B,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,yBAAyB;CAClD,CAAC;AAEF,SAAS,UAAU,CAAC,CAAY,EAAE,KAAa;IAC7C,IAAI,KAAK,GAAG,WAAW,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAChG,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC7B,sEAAsE;IACtE,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAAgB,CAAC;IACnE,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;IAC7C,kGAAkG;IAClG,MAAM,aAAa,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,aAAa,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,EAAE,CAAC,CAAC;IAClG,IAAI,CAAC,CAAC,MAAM,KAAK,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,IAAI,EAAE,CAAC,CAAC;IACpG,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,WAAW,CAAC,IAAI;YACnB,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;QAClE,KAAK,WAAW,CAAC,MAAM;YACrB,OAAO;gBACL,WAAW,EAAE,WAAW,CAAC,MAAM;gBAC/B,WAAW;gBACX,QAAQ;gBACR,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC;gBAC1C,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC;aAClC,CAAC;QACJ,KAAK,WAAW,CAAC,QAAQ;YACvB,OAAO;gBACL,WAAW,EAAE,WAAW,CAAC,QAAQ;gBACjC,WAAW;gBACX,QAAQ;gBACR,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC;gBAC1C,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;gBAC1B,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC;gBAC/B,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;gBACzB,YAAY,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC;gBACzC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;gBACzB,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC;gBAC7B,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC;gBAC1B,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,eAAe,CAAY;gBACvD,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,aAAa,CAAC;gBAC1C,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,aAAa,CAAC;gBAC3C,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC;aACtC,CAAC;QACJ,KAAK,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;YACvB,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;YAC3C,uFAAuF;YACvF,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;YAClF,IAAI,KAAK,CAAC,MAAM,GAAG,WAAW,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;YACjG,OAAO;gBACL,WAAW,EAAE,WAAW,CAAC,KAAK;gBAC9B,WAAW;gBACX,QAAQ;gBACR,aAAa,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,eAAe,CAAkB;gBAC5D,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;aAClD,CAAC;QACJ,CAAC;QACD;YACE,MAAM,IAAI,KAAK,CAAC,yCAAyC,IAAI,EAAE,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAiB;IACjD,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,WAAW,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC,EAAE,aAAa,CAAC,CAAC;IACxF,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IAClE,IAAI,OAAO,GAAsB,IAAI,CAAC;IACtC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAClB,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACnC,OAAO,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,kBAAkB,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,EAAE,CAAC;IAC9F,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IACpE,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACjB,IAAI,CAAC,CAAC,GAAG,YAAY,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IACpF,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;QAC3B,QAAQ;QACR,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC;QACjC,OAAO;QACP,SAAS;QACT,UAAU,EAAE,GAAc;QAC1B,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;KAChC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,WAAW,CAAC,CAAc;IACxC,MAAM,MAAM,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACrC,SAAS,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,2CAA2C;IAC1E,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,sCAAsC;IAChF,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/esm/context/secure-chat-context.d.ts

@@ -22,6 +22,15 @@ export interface SecureChatContextValue {
     resolveGroup: (conversationId: string) => Promise<GroupHandle | null>;
     /** Cache + persist a conversation's group handle (after createGroup / processWelcome). */
     rememberGroup: (conversationId: string, handle: GroupHandle) => Promise<void>;
+    /**
+     * Persist a conversation's CURRENT group state after an intra-epoch ratchet advance — i.e. an
+     * application message we just sent or received. Unlike {@link rememberGroup} it does NOT bump the
+     * version or notify listeners: an application message moves the (single-use, forward-secret) MLS
+     * ratchet but NOT the epoch, so consumers must not re-resolve the handle. Skipping this persist is
+     * the resend-replay bug — on reload the send ratchet rewinds to a consumed generation and the peer
+     * rejects the next message as a replay.
+     */
+    persistGroupState: (conversationId: string, handle: GroupHandle) => Promise<void>;
     /**
      * Current change-version for a conversation's group handle. Bumps every time the handle advances
      * (a join or a processed Commit), so consumers can detect "the group moved" without diffing handles.
@@ -52,9 +61,16 @@ export interface SecureChatProviderProps {
     accessToken?: string;
     /** Override token resolution (takes precedence over `accessToken`). */
     getAccessToken?: () => string | undefined;
-    /** Override the API base URL. Defaults to @agora-sdk/core `getApiBaseUrl()`. */
-    baseUrl?: string;
-    /** Override the socket origin. Defaults to @agora-sdk/core `getSocketUrl()`. */
+    /**
+     * API base URL including the version prefix (e.g. `https://api.example.com/v7`). Required — secure
+     * chat is a standalone transport and does not resolve a URL from any ambient SDK runtime. Read
+     * lazily per request, so re-passing a changed value takes effect on the next call.
+     */
+    baseUrl: string;
+    /**
+     * Socket.io origin for the `/secure` realtime namespace. Defaults to {@link baseUrl} (the client
+     * strips any path to the origin), so pass it only when the socket lives on a different host.
+     */
     socketUrl?: string;
     /**
      * Outbound message size-bucket padding policy (metadata hardening). `"ladder"` (default) pads each

package/dist/esm/context/secure-chat-context.js

@@ -1,17 +1,21 @@
 import { jsx as _jsx } from "react/jsx-runtime";
 // SecureChatProvider — wires transport + crypto + persistence for the secure-chat hooks.
 //
-// Sits INSIDE a ReplykeProvider: by default it resolves the API base URL and socket origin from
-// @agora-sdk/core's runtime singletons (getApiBaseUrl / getSocketUrl). Crypto AND the persistence
-// store are injected, keeping core platform- and library-agnostic. The provider builds a typed
-// SecureChatRepository over the store plus a cached resolveGroup/rememberGroup so the hooks become
-// self-sufficient (no need to thread a GroupHandle in by hand).
+// Standalone transport: the caller supplies the API base URL (and optional socket origin) directly —
+// this package has NO dependency on @agora-sdk/core. (It used to fall back to core's getApiBaseUrl /
+// getSocketUrl runtime singletons; that coupling existed only to auto-inherit a Replyke app's config,
+// and core's actual surface here was just two URL accessors. Requiring `baseUrl` makes secure chat a
+// self-contained E2EE transport usable in any app.) Crypto AND the persistence store are injected too,
+// keeping this layer platform- and library-agnostic. The provider builds a typed SecureChatRepository
+// over the store plus a cached resolveGroup/rememberGroup so the hooks become self-sufficient (no need
+// to thread a GroupHandle in by hand).
 import { createContext, useCallback, useContext, useEffect, useMemo, useRef } from "react";
-import { getApiBaseUrl, getSocketUrl } from "@agora-sdk/core";
 import { SecureChatRestClient } from "../transport/rest.js";
 import { SecureChatSocketClient } from "../transport/socket.js";
 import { MemoryStore } from "../persistence/memory-store.js";
 import { SecureChatRepository } from "../persistence/repository.js";
+import { createDebugLogger } from "../util/debug.js";
+const log = createDebugLogger("provider");
 const SecureChatContext = createContext(null);
 /**
  * Provides secure-chat transport, crypto, and persistence to the `useSecure*` hooks. Render inside a
@@ -34,13 +38,14 @@ export function SecureChatProvider({ crypto, projectId, store, accessToken, getA
     const rest = useMemo(() => new SecureChatRestClient({
         projectId,
         getAccessToken: resolveToken,
-        getBaseUrl: () => baseUrl ?? getApiBaseUrl(),
+        getBaseUrl: () => baseUrl,
     }), [projectId, resolveToken, baseUrl]);
     const socket = useMemo(() => new SecureChatSocketClient({
         projectId,
         getAccessToken: resolveToken,
-        getSocketUrl: () => socketUrl ?? getSocketUrl(),
-    }), [projectId, resolveToken, socketUrl]);
+        // Socket origin defaults to the REST base URL (the client strips the path to an origin).
+        getSocketUrl: () => socketUrl ?? baseUrl,
+    }), [projectId, resolveToken, socketUrl, baseUrl]);
     const resolvedStore = useMemo(() => store ?? new MemoryStore(), [store]);
     const repo = useMemo(() => new SecureChatRepository(resolvedStore), [resolvedStore]);
     // In-memory GroupHandle cache, keyed by conversationId. Survives re-renders via the ref.
@@ -58,11 +63,33 @@ export function SecureChatProvider({ crypto, projectId, store, accessToken, getA
         if (cached)
             return cached;
         const bytes = await repo.loadGroupState(conversationId);
-        if (!bytes)
+        if (!bytes) {
+            // No persisted group for this conversation: the recipient never joined (no Welcome processed),
+            // or local state was wiped. Renders as "waiting for key update" until a Welcome arrives.
+            log.debug("resolveGroup: no persisted group state", { conversationId });
             return null;
-        const handle = await crypto.importGroupState(bytes);
-        groupCache.current.set(conversationId, handle);
-        return handle;
+        }
+        try {
+            const handle = await crypto.importGroupState(bytes);
+            groupCache.current.set(conversationId, handle);
+            log.debug("resolveGroup: imported group from store", {
+                conversationId,
+                epoch: handle.epoch.toString(),
+                bytes: bytes.length,
+            });
+            return handle;
+        }
+        catch (err) {
+            // A persisted group that can't be re-imported is a black hole — it silently degrades to "no
+            // group" (a permanent "waiting for key update"). Surface it loudly so a reload-persistence or
+            // crypto-version-skew problem is visible instead of looking like an un-joined conversation.
+            log.debug("resolveGroup: importGroupState FAILED — group present but unreadable", {
+                conversationId,
+                bytes: bytes.length,
+                error: err instanceof Error ? err.message : String(err),
+            });
+            throw err;
+        }
     }, [repo, crypto]);
     const rememberGroup = useCallback(async (conversationId, handle) => {
         groupCache.current.set(conversationId, handle);
@@ -72,6 +99,17 @@ export function SecureChatProvider({ crypto, projectId, store, accessToken, getA
         groupVersion.current.set(conversationId, (groupVersion.current.get(conversationId) ?? 0) + 1);
         groupListeners.current.forEach((l) => l());
     }, [repo, crypto]);
+    const persistGroupState = useCallback(async (conversationId, handle) => {
+        // Re-export the now-advanced ratchet for THIS group and overwrite the persisted blob. The
+        // ratchet state lives in the crypto's internal per-group map (keyed by mlsGroupId), so exporting
+        // the same handle after a send/receive captures the advanced generation. Deliberately NO version
+        // bump and NO listener notify (cf. rememberGroup): an application message is intra-epoch, so a
+        // re-resolve would be wasted work and could churn buffered-row retries. The cache holds the same
+        // handle object the hook already uses, so re-setting it is idempotent.
+        groupCache.current.set(conversationId, handle);
+        const bytes = await crypto.exportGroupState(handle);
+        await repo.saveGroupState(conversationId, bytes);
+    }, [repo, crypto]);
     const getGroupVersion = useCallback((conversationId) => groupVersion.current.get(conversationId) ?? 0, []);
     const subscribeGroupChange = useCallback((listener) => {
         groupListeners.current.add(listener);
@@ -89,6 +127,7 @@ export function SecureChatProvider({ crypto, projectId, store, accessToken, getA
         repo,
         resolveGroup,
         rememberGroup,
+        persistGroupState,
         getGroupVersion,
         subscribeGroupChange,
         padding,
@@ -100,6 +139,7 @@ export function SecureChatProvider({ crypto, projectId, store, accessToken, getA
         repo,
         resolveGroup,
         rememberGroup,
+        persistGroupState,
         getGroupVersion,
         subscribeGroupChange,
         padding,

package/dist/esm/context/secure-chat-context.js.map

@@ -1 +1 @@
-{"version":3,"file":"secure-chat-context.js","sourceRoot":"","sources":["../../../src/context/secure-chat-context.tsx"],"names":[],"mappings":";AAAA,yFAAyF;AACzF,EAAE;AACF,gGAAgG;AAChG,kGAAkG;AAClG,+FAA+F;AAC/F,mGAAmG;AACnG,gEAAgE;AAEhE,OAAc,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AAClG,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAG9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAEhE,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAuCpE,MAAM,iBAAiB,GAAG,aAAa,CAAgC,IAAI,CAAC,CAAC;AA0B7E;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,kBAAkB,CAAC,EACjC,MAAM,EACN,SAAS,EACT,KAAK,EACL,WAAW,EACX,cAAc,EACd,OAAO,EACP,SAAS,EACT,OAAO,GAAG,QAAQ,EAClB,QAAQ,GACgB;IACxB,MAAM,QAAQ,GAAG,MAAM,CAAqB,WAAW,CAAC,CAAC;IACzD,QAAQ,CAAC,OAAO,GAAG,WAAW,CAAC;IAE/B,MAAM,YAAY,GAAG,OAAO,CAC1B,GAAG,EAAE,CAAC,cAAc,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAChD,CAAC,cAAc,CAAC,CACjB,CAAC;IAEF,MAAM,IAAI,GAAG,OAAO,CAClB,GAAG,EAAE,CACH,IAAI,oBAAoB,CAAC;QACvB,SAAS;QACT,cAAc,EAAE,YAAY;QAC5B,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,IAAI,aAAa,EAAE;KAC7C,CAAC,EACJ,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,CACnC,CAAC;IAEF,MAAM,MAAM,GAAG,OAAO,CACpB,GAAG,EAAE,CACH,IAAI,sBAAsB,CAAC;QACzB,SAAS;QACT,cAAc,EAAE,YAAY;QAC5B,YAAY,EAAE,GAAG,EAAE,CAAC,SAAS,IAAI,YAAY,EAAE;KAChD,CAAC,EACJ,CAAC,SAAS,EAAE,YAAY,EAAE,SAAS,CAAC,CACrC,CAAC;IAEF,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,IAAI,WAAW,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,oBAAoB,CAAC,aAAa,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;IAErF,yFAAyF;IACzF,6FAA6F;IAC7F,+EAA+E;IAC/E,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,GAAG,EAAuB,CAAC,CAAC;IAE1D,kGAAkG;IAClG,6FAA6F;IAC7F,+FAA+F;IAC/F,mDAAmD;IACnD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,GAAG,EAAkB,CAAC,CAAC;IACvD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,GAAG,EAAc,CAAC,CAAC;IAErD,MAAM,YAAY,GAAG,WAAW,CAC9B,KAAK,EAAE,cAAsB,EAA+B,EAAE;QAC5D,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACtD,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;QACxD,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACpD,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QAC/C,OAAO,MAAM,CAAC;IAChB,CAAC,EACD,CAAC,IAAI,EAAE,MAAM,CAAC,CACf,CAAC;IAEF,MAAM,aAAa,GAAG,WAAW,CAC/B,KAAK,EAAE,cAAsB,EAAE,MAAmB,EAAiB,EAAE;QACnE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QACjD,uFAAuF;QACvF,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9F,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7C,CAAC,EACD,CAAC,IAAI,EAAE,MAAM,CAAC,CACf,CAAC;IAEF,MAAM,eAAe,GAAG,WAAW,CACjC,CAAC,cAAsB,EAAU,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,EACjF,EAAE,CACH,CAAC;IAEF,MAAM,oBAAoB,GAAG,WAAW,CAAC,CAAC,QAAoB,EAAgB,EAAE;QAC9E,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACrC,OAAO,GAAG,EAAE;YACV,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC,CAAC;IACJ,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;IACnC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAEb,MAAM,KAAK,GAAG,OAAO,CACnB,GAAG,EAAE,CAAC,CAAC;QACL,IAAI;QACJ,MAAM;QACN,MAAM;QACN,IAAI;QACJ,YAAY;QACZ,aAAa;QACb,eAAe;QACf,oBAAoB;QACpB,OAAO;QACP,SAAS;KACV,CAAC,EACF;QACE,IAAI;QACJ,MAAM;QACN,MAAM;QACN,IAAI;QACJ,YAAY;QACZ,aAAa;QACb,eAAe;QACf,oBAAoB;QACpB,OAAO;QACP,SAAS;KACV,CACF,CAAC;IAEF,OAAO,KAAC,iBAAiB,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YAAG,QAAQ,GAA8B,CAAC;AAC3F,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa;IAC3B,MAAM,GAAG,GAAG,UAAU,CAAC,iBAAiB,CAAC,CAAC;IAC1C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"secure-chat-context.js","sourceRoot":"","sources":["../../../src/context/secure-chat-context.tsx"],"names":[],"mappings":";AAAA,yFAAyF;AACzF,EAAE;AACF,qGAAqG;AACrG,qGAAqG;AACrG,sGAAsG;AACtG,qGAAqG;AACrG,uGAAuG;AACvG,sGAAsG;AACtG,uGAAuG;AACvG,uCAAuC;AAEvC,OAAc,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,OAAO,CAAC;AAGlG,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAEhE,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAC7D,OAAO,EAAE,oBAAoB,EAAE,MAAM,8BAA8B,CAAC;AAEpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD,MAAM,GAAG,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;AA+C1C,MAAM,iBAAiB,GAAG,aAAa,CAAgC,IAAI,CAAC,CAAC;AAiC7E;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,kBAAkB,CAAC,EACjC,MAAM,EACN,SAAS,EACT,KAAK,EACL,WAAW,EACX,cAAc,EACd,OAAO,EACP,SAAS,EACT,OAAO,GAAG,QAAQ,EAClB,QAAQ,GACgB;IACxB,MAAM,QAAQ,GAAG,MAAM,CAAqB,WAAW,CAAC,CAAC;IACzD,QAAQ,CAAC,OAAO,GAAG,WAAW,CAAC;IAE/B,MAAM,YAAY,GAAG,OAAO,CAC1B,GAAG,EAAE,CAAC,cAAc,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAChD,CAAC,cAAc,CAAC,CACjB,CAAC;IAEF,MAAM,IAAI,GAAG,OAAO,CAClB,GAAG,EAAE,CACH,IAAI,oBAAoB,CAAC;QACvB,SAAS;QACT,cAAc,EAAE,YAAY;QAC5B,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO;KAC1B,CAAC,EACJ,CAAC,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,CACnC,CAAC;IAEF,MAAM,MAAM,GAAG,OAAO,CACpB,GAAG,EAAE,CACH,IAAI,sBAAsB,CAAC;QACzB,SAAS;QACT,cAAc,EAAE,YAAY;QAC5B,yFAAyF;QACzF,YAAY,EAAE,GAAG,EAAE,CAAC,SAAS,IAAI,OAAO;KACzC,CAAC,EACJ,CAAC,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,OAAO,CAAC,CAC9C,CAAC;IAEF,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,IAAI,WAAW,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,oBAAoB,CAAC,aAAa,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC;IAErF,yFAAyF;IACzF,6FAA6F;IAC7F,+EAA+E;IAC/E,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,GAAG,EAAuB,CAAC,CAAC;IAE1D,kGAAkG;IAClG,6FAA6F;IAC7F,+FAA+F;IAC/F,mDAAmD;IACnD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,GAAG,EAAkB,CAAC,CAAC;IACvD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,GAAG,EAAc,CAAC,CAAC;IAErD,MAAM,YAAY,GAAG,WAAW,CAC9B,KAAK,EAAE,cAAsB,EAA+B,EAAE;QAC5D,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACtD,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,CAAC;QACxD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,+FAA+F;YAC/F,yFAAyF;YACzF,GAAG,CAAC,KAAK,CAAC,wCAAwC,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC;YACxE,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACpD,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;YAC/C,GAAG,CAAC,KAAK,CAAC,yCAAyC,EAAE;gBACnD,cAAc;gBACd,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE;gBAC9B,KAAK,EAAE,KAAK,CAAC,MAAM;aACpB,CAAC,CAAC;YACH,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,4FAA4F;YAC5F,8FAA8F;YAC9F,4FAA4F;YAC5F,GAAG,CAAC,KAAK,CAAC,sEAAsE,EAAE;gBAChF,cAAc;gBACd,KAAK,EAAE,KAAK,CAAC,MAAM;gBACnB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC,CAAC;YACH,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,EACD,CAAC,IAAI,EAAE,MAAM,CAAC,CACf,CAAC;IAEF,MAAM,aAAa,GAAG,WAAW,CAC/B,KAAK,EAAE,cAAsB,EAAE,MAAmB,EAAiB,EAAE;QACnE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;QACjD,uFAAuF;QACvF,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9F,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IAC7C,CAAC,EACD,CAAC,IAAI,EAAE,MAAM,CAAC,CACf,CAAC;IAEF,MAAM,iBAAiB,GAAG,WAAW,CACnC,KAAK,EAAE,cAAsB,EAAE,MAAmB,EAAiB,EAAE;QACnE,0FAA0F;QAC1F,iGAAiG;QACjG,iGAAiG;QACjG,+FAA+F;QAC/F,iGAAiG;QACjG,uEAAuE;QACvE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACpD,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IACnD,CAAC,EACD,CAAC,IAAI,EAAE,MAAM,CAAC,CACf,CAAC;IAEF,MAAM,eAAe,GAAG,WAAW,CACjC,CAAC,cAAsB,EAAU,EAAE,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,EACjF,EAAE,CACH,CAAC;IAEF,MAAM,oBAAoB,GAAG,WAAW,CAAC,CAAC,QAAoB,EAAgB,EAAE;QAC9E,cAAc,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACrC,OAAO,GAAG,EAAE;YACV,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC,CAAC;IACJ,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,SAAS,CAAC,GAAG,EAAE;QACb,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;IACnC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAEb,MAAM,KAAK,GAAG,OAAO,CACnB,GAAG,EAAE,CAAC,CAAC;QACL,IAAI;QACJ,MAAM;QACN,MAAM;QACN,IAAI;QACJ,YAAY;QACZ,aAAa;QACb,iBAAiB;QACjB,eAAe;QACf,oBAAoB;QACpB,OAAO;QACP,SAAS;KACV,CAAC,EACF;QACE,IAAI;QACJ,MAAM;QACN,MAAM;QACN,IAAI;QACJ,YAAY;QACZ,aAAa;QACb,iBAAiB;QACjB,eAAe;QACf,oBAAoB;QACpB,OAAO;QACP,SAAS;KACV,CACF,CAAC;IAEF,OAAO,KAAC,iBAAiB,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,YAAG,QAAQ,GAA8B,CAAC;AAC3F,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa;IAC3B,MAAM,GAAG,GAAG,UAAU,CAAC,iBAAiB,CAAC,CAAC;IAC1C,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/esm/hooks/message-fold.d.ts

@@ -0,0 +1,91 @@
+import { type MimiContent } from "../content/mimi-content.js";
+/** A decoded, content-hashed message handed to the fold (the hook computes these post-decrypt). */
+export interface DecodedContentMessage {
+    /** Server message id (storage/order/dedup key). */
+    messageId: string;
+    /** Server createdAt (ISO) — used to stamp `editedAt` and for the hook's ordering. */
+    createdAt: string;
+    /** Authenticated MLS sender device id. */
+    senderDeviceId: string;
+    /** SHA-256 over the canonical MimiContent bytes (the reference key). */
+    contentHash: Uint8Array;
+    /** The decoded content. */
+    mimi: MimiContent;
+}
+/** The Tier-2 projection of a rendered (post/reply) message after folding mutations in. */
+export interface RenderedContent {
+    /** Markdown body, or `null` when deleted (tombstone) or non-text. */
+    body: string | null;
+    /** The replied-to message's content-hash, or `null`. */
+    replyTo: Uint8Array | null;
+    /** ISO timestamp of the last applied edit, or `null`. */
+    editedAt: string | null;
+    /** True when a delete tombstone has folded in. */
+    deleted: boolean;
+    /** token → count (distinct reaction messages bearing that token). */
+    reactions: Record<string, number>;
+}
+/**
+ * Stateful fold over decoded content messages. Feed every decoded message via {@link MessageFold.apply};
+ * read the rendered projection of a post/reply via {@link MessageFold.getContent}. Mutation messages
+ * (edit/delete/reaction/un-react) fold onto their target and are reported non-renderable.
+ *
+ * @example
+ * ```ts
+ * const fold = new MessageFold();
+ * const { renderable } = fold.apply(decoded);   // false for a reaction/edit/delete
+ * const content = fold.getContent(decoded.messageId); // post/reply projection or null
+ * ```
+ */
+export declare class MessageFold {
+    private rows;
+    private idByHash;
+    private reactionReg;
+    private pending;
+    /** Drop all state (e.g. on conversation switch or full reload before re-folding). */
+    reset(): void;
+    /**
+     * True if `messageId` produced a visible (post/reply) row.
+     * @param messageId - The server message id to test.
+     * @returns Whether a rendered row exists for it.
+     */
+    isRenderable(messageId: string): boolean;
+    /**
+     * The rendered projection for a post/reply, or `null` for a folded mutation / unknown id.
+     * @param messageId - The server message id to project.
+     * @returns A fresh {@link RenderedContent} snapshot, or `null` when the id is not a rendered row.
+     */
+    getContent(messageId: string): RenderedContent | null;
+    /**
+     * Apply one decoded message. Buffers a mutation whose target is unknown.
+     *
+     * Idempotent on a strict immediate re-apply of the same `messageId`, but NOT across an interleaved
+     * re-delivery: re-applying an already-withdrawn reaction id resurrects it (the replayed reaction
+     * re-adds itself to the now-empty token set and the prior un-react is not re-triggered). The CONSUMER
+     * (the hook) MUST dedup by `messageId` and apply each id at most once — do not re-feed an
+     * already-applied message.
+     * @param msg - The decoded, content-hashed message to fold in.
+     * @returns `{ renderable }` — whether this id is a standalone (post/reply) row.
+     */
+    apply(msg: DecodedContentMessage): {
+        renderable: boolean;
+    };
+    /**
+     * Resolve the rendered row a content-hash points at, if it has been decoded.
+     * @param targetHash - The referenced message's content-hash.
+     * @returns The {@link Row}, or `undefined` if the target is unknown or not a rendered row.
+     */
+    private resolveRow;
+    /**
+     * Buffer a mutation against the hex of its (not-yet-decoded) target; replayed by {@link MessageFold.drain}.
+     * @param targetHash - The target content-hash to key the buffer under.
+     * @param msg - The mutation to defer.
+     * @returns `{ renderable: false }` — a buffered mutation is never a standalone row.
+     */
+    private buffer;
+    /**
+     * Replay every mutation buffered against a content-hash that has just been decoded.
+     * @param hashHex - The hex content-hash that just appeared (a post/reply or a now-applied reaction).
+     */
+    private drain;
+}