@agora-sdk/secure-chat-core 0.7.0 → 0.8.0

package/dist/cjs/index.d.ts

@@ -31,5 +31,12 @@ export { padPlaintext, unpadPlaintext, nextBucket } from "./util/padding.js";
 export type { PaddingPolicy } from "./util/padding.js";
 export { computeSafetyNumber } from "./util/safety-number.js";
 export type { SafetyNumber } from "./util/safety-number.js";
+export { encodeMimiContent, decodeMimiContent, contentHash, Cardinality, Disposition, HashAlg, PartSemantics, MIMI_LIMITS, } from "./content/mimi-content.js";
+export type { MimiContent, Part, NullPart, SinglePart, ExternalPart, MultiPart, Expiration, } from "./content/mimi-content.js";
+export { buildPost, buildReply, buildEdit, buildDelete, buildReaction, buildUnreact, } from "./content/builders.js";
+export { frameContent, unframe, ContentKind } from "./content/frame.js";
+export type { RenderedContent } from "./hooks/message-fold.js";
+export { encode as encodeCbor, decode as decodeCbor, CborTag } from "./content/cbor.js";
+export type { CborValue, CborMap, CborLimits } from "./content/cbor.js";
 export { setSecureChatDebug, isSecureChatDebugEnabled } from "./util/debug.js";
 export type { SecureChatDebugLevel, SecureChatDebugLogger } from "./util/debug.js";

package/dist/cjs/index.js

@@ -5,7 +5,7 @@
 // injection of a `SecureChatCrypto`. Platform packages (@agora-sdk/secure-chat-react-js, etc.)
 // re-export this and add the concrete crypto + persistence.
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.isSecureChatDebugEnabled = exports.setSecureChatDebug = exports.computeSafetyNumber = exports.nextBucket = exports.unpadPlaintext = exports.padPlaintext = exports.bytesToUtf8 = exports.utf8ToBytes = exports.fromBase64 = exports.toBase64 = exports.SecureChatRepository = exports.MemoryStore = exports.SecureChatDecryptError = exports.SecureChatSocketClient = exports.SecureChatRestClient = exports.estimatePassphraseStrength = exports.useSecureSafetyNumber = exports.useSecureBackup = exports.useSecureHandshakes = exports.useSecureMessages = exports.useSecureConversations = exports.useSecureDevice = exports.useSecureChat = exports.SecureChatProvider = exports.VERSION = void 0;
+exports.isSecureChatDebugEnabled = exports.setSecureChatDebug = exports.CborTag = exports.decodeCbor = exports.encodeCbor = exports.ContentKind = exports.unframe = exports.frameContent = exports.buildUnreact = exports.buildReaction = exports.buildDelete = exports.buildEdit = exports.buildReply = exports.buildPost = exports.MIMI_LIMITS = exports.PartSemantics = exports.HashAlg = exports.Disposition = exports.Cardinality = exports.contentHash = exports.decodeMimiContent = exports.encodeMimiContent = exports.computeSafetyNumber = exports.nextBucket = exports.unpadPlaintext = exports.padPlaintext = exports.bytesToUtf8 = exports.utf8ToBytes = exports.fromBase64 = exports.toBase64 = exports.SecureChatRepository = exports.MemoryStore = exports.SecureChatDecryptError = exports.SecureChatSocketClient = exports.SecureChatRestClient = exports.estimatePassphraseStrength = exports.useSecureSafetyNumber = exports.useSecureBackup = exports.useSecureHandshakes = exports.useSecureMessages = exports.useSecureConversations = exports.useSecureDevice = exports.useSecureChat = exports.SecureChatProvider = exports.VERSION = void 0;
 // ── version (generated from package.json; see scripts/write-version.mjs) ──────
 var version_js_1 = require("./version.js");
 Object.defineProperty(exports, "VERSION", { enumerable: true, get: function () { return version_js_1.VERSION; } });
@@ -52,6 +52,32 @@ Object.defineProperty(exports, "unpadPlaintext", { enumerable: true, get: functi
 Object.defineProperty(exports, "nextBucket", { enumerable: true, get: function () { return padding_js_1.nextBucket; } });
 var safety_number_js_1 = require("./util/safety-number.js");
 Object.defineProperty(exports, "computeSafetyNumber", { enumerable: true, get: function () { return safety_number_js_1.computeSafetyNumber; } });
+// ── MIMI content (CBOR message content + routing frame + fold) ─────────────────
+var mimi_content_js_1 = require("./content/mimi-content.js");
+Object.defineProperty(exports, "encodeMimiContent", { enumerable: true, get: function () { return mimi_content_js_1.encodeMimiContent; } });
+Object.defineProperty(exports, "decodeMimiContent", { enumerable: true, get: function () { return mimi_content_js_1.decodeMimiContent; } });
+Object.defineProperty(exports, "contentHash", { enumerable: true, get: function () { return mimi_content_js_1.contentHash; } });
+Object.defineProperty(exports, "Cardinality", { enumerable: true, get: function () { return mimi_content_js_1.Cardinality; } });
+Object.defineProperty(exports, "Disposition", { enumerable: true, get: function () { return mimi_content_js_1.Disposition; } });
+Object.defineProperty(exports, "HashAlg", { enumerable: true, get: function () { return mimi_content_js_1.HashAlg; } });
+Object.defineProperty(exports, "PartSemantics", { enumerable: true, get: function () { return mimi_content_js_1.PartSemantics; } });
+Object.defineProperty(exports, "MIMI_LIMITS", { enumerable: true, get: function () { return mimi_content_js_1.MIMI_LIMITS; } });
+var builders_js_1 = require("./content/builders.js");
+Object.defineProperty(exports, "buildPost", { enumerable: true, get: function () { return builders_js_1.buildPost; } });
+Object.defineProperty(exports, "buildReply", { enumerable: true, get: function () { return builders_js_1.buildReply; } });
+Object.defineProperty(exports, "buildEdit", { enumerable: true, get: function () { return builders_js_1.buildEdit; } });
+Object.defineProperty(exports, "buildDelete", { enumerable: true, get: function () { return builders_js_1.buildDelete; } });
+Object.defineProperty(exports, "buildReaction", { enumerable: true, get: function () { return builders_js_1.buildReaction; } });
+Object.defineProperty(exports, "buildUnreact", { enumerable: true, get: function () { return builders_js_1.buildUnreact; } });
+var frame_js_1 = require("./content/frame.js");
+Object.defineProperty(exports, "frameContent", { enumerable: true, get: function () { return frame_js_1.frameContent; } });
+Object.defineProperty(exports, "unframe", { enumerable: true, get: function () { return frame_js_1.unframe; } });
+Object.defineProperty(exports, "ContentKind", { enumerable: true, get: function () { return frame_js_1.ContentKind; } });
+// Low-level CBOR codec (advanced; the IUC control channel reuses it under kind 1).
+var cbor_js_1 = require("./content/cbor.js");
+Object.defineProperty(exports, "encodeCbor", { enumerable: true, get: function () { return cbor_js_1.encode; } });
+Object.defineProperty(exports, "decodeCbor", { enumerable: true, get: function () { return cbor_js_1.decode; } });
+Object.defineProperty(exports, "CborTag", { enumerable: true, get: function () { return cbor_js_1.CborTag; } });
 // ── dev logging (off by default; see util/debug) ──────────────────────────────
 var debug_js_1 = require("./util/debug.js");
 Object.defineProperty(exports, "setSecureChatDebug", { enumerable: true, get: function () { return debug_js_1.setSecureChatDebug; } });

package/dist/cjs/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";AAAA,8FAA8F;AAC9F,EAAE;AACF,6FAA6F;AAC7F,+FAA+F;AAC/F,4DAA4D;;;AAE5D,iFAAiF;AACjF,2CAAuC;AAA9B,qGAAA,OAAO,OAAA;AAEhB,+EAA+E;AAC/E,2EAAqF;AAA5E,4HAAA,kBAAkB,OAAA;AAAE,uHAAA,aAAa,OAAA;AAM1C,gFAAgF;AAChF,iEAA6D;AAApD,qHAAA,eAAe,OAAA;AAExB,+EAA2E;AAAlE,mIAAA,sBAAsB,OAAA;AAE/B,qEAAiE;AAAxD,yHAAA,iBAAiB,OAAA;AAM1B,yEAAqE;AAA5D,6HAAA,mBAAmB,OAAA;AAK5B,iEAA6D;AAApD,qHAAA,eAAe,OAAA;AAExB,6EAAyE;AAAhE,iIAAA,qBAAqB,OAAA;AAG9B,iFAAiF;AACjF,0EAA6E;AAApE,oIAAA,0BAA0B,OAAA;AAGnC,gFAAgF;AAChF,+CAA2D;AAAlD,+GAAA,oBAAoB,OAAA;AAE7B,mDAA+D;AAAtD,mHAAA,sBAAsB,OAAA;AAoB/B,oEAAuE;AAA9D,4HAAA,sBAAsB,OAAA;AAO/B,iEAA4D;AAAnD,8GAAA,WAAW,OAAA;AACpB,6DAAmE;AAA1D,qHAAA,oBAAoB,OAAA;AAG7B,gFAAgF;AAChF,8CAAkF;AAAzE,qGAAA,QAAQ,OAAA;AAAE,uGAAA,UAAU,OAAA;AAAE,wGAAA,WAAW,OAAA;AAAE,wGAAA,WAAW,OAAA;AACvD,gDAA6E;AAApE,0GAAA,YAAY,OAAA;AAAE,4GAAA,cAAc,OAAA;AAAE,wGAAA,UAAU,OAAA;AAEjD,4DAA8D;AAArD,uHAAA,mBAAmB,OAAA;AAG5B,iFAAiF;AACjF,4CAA+E;AAAtE,8GAAA,kBAAkB,OAAA;AAAE,oHAAA,wBAAwB,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":";AAAA,8FAA8F;AAC9F,EAAE;AACF,6FAA6F;AAC7F,+FAA+F;AAC/F,4DAA4D;;;AAE5D,iFAAiF;AACjF,2CAAuC;AAA9B,qGAAA,OAAO,OAAA;AAEhB,+EAA+E;AAC/E,2EAAqF;AAA5E,4HAAA,kBAAkB,OAAA;AAAE,uHAAA,aAAa,OAAA;AAM1C,gFAAgF;AAChF,iEAA6D;AAApD,qHAAA,eAAe,OAAA;AAExB,+EAA2E;AAAlE,mIAAA,sBAAsB,OAAA;AAE/B,qEAAiE;AAAxD,yHAAA,iBAAiB,OAAA;AAM1B,yEAAqE;AAA5D,6HAAA,mBAAmB,OAAA;AAK5B,iEAA6D;AAApD,qHAAA,eAAe,OAAA;AAExB,6EAAyE;AAAhE,iIAAA,qBAAqB,OAAA;AAG9B,iFAAiF;AACjF,0EAA6E;AAApE,oIAAA,0BAA0B,OAAA;AAGnC,gFAAgF;AAChF,+CAA2D;AAAlD,+GAAA,oBAAoB,OAAA;AAE7B,mDAA+D;AAAtD,mHAAA,sBAAsB,OAAA;AAoB/B,oEAAuE;AAA9D,4HAAA,sBAAsB,OAAA;AAO/B,iEAA4D;AAAnD,8GAAA,WAAW,OAAA;AACpB,6DAAmE;AAA1D,qHAAA,oBAAoB,OAAA;AAG7B,gFAAgF;AAChF,8CAAkF;AAAzE,qGAAA,QAAQ,OAAA;AAAE,uGAAA,UAAU,OAAA;AAAE,wGAAA,WAAW,OAAA;AAAE,wGAAA,WAAW,OAAA;AACvD,gDAA6E;AAApE,0GAAA,YAAY,OAAA;AAAE,4GAAA,cAAc,OAAA;AAAE,wGAAA,UAAU,OAAA;AAEjD,4DAA8D;AAArD,uHAAA,mBAAmB,OAAA;AAG5B,kFAAkF;AAClF,6DAGmC;AAFjC,oHAAA,iBAAiB,OAAA;AAAE,oHAAA,iBAAiB,OAAA;AAAE,8GAAA,WAAW,OAAA;AACjD,8GAAA,WAAW,OAAA;AAAE,8GAAA,WAAW,OAAA;AAAE,0GAAA,OAAO,OAAA;AAAE,gHAAA,aAAa,OAAA;AAAE,8GAAA,WAAW,OAAA;AAK/D,qDAE+B;AAD7B,wGAAA,SAAS,OAAA;AAAE,yGAAA,UAAU,OAAA;AAAE,wGAAA,SAAS,OAAA;AAAE,0GAAA,WAAW,OAAA;AAAE,4GAAA,aAAa,OAAA;AAAE,2GAAA,YAAY,OAAA;AAE5E,+CAAwE;AAA/D,wGAAA,YAAY,OAAA;AAAE,mGAAA,OAAO,OAAA;AAAE,uGAAA,WAAW,OAAA;AAE3C,mFAAmF;AACnF,6CAAwF;AAA/E,qGAAA,MAAM,OAAc;AAAE,qGAAA,MAAM,OAAc;AAAE,kGAAA,OAAO,OAAA;AAG5D,iFAAiF;AACjF,4CAA+E;AAAtE,8GAAA,kBAAkB,OAAA;AAAE,oHAAA,wBAAwB,OAAA"}

package/dist/cjs/persistence/repository.d.ts

@@ -28,29 +28,29 @@ export declare class SecureChatRepository {
     /** List the conversation ids that have persisted group state. */
     listGroupConversationIds(): Promise<string[]>;
     /**
-     * Persist the decrypted plaintext of a message (local-only, decrypt-once history).
+     * Persist the decrypted content-frame bytes of a message (local-only, decrypt-once history).
      *
-     * Called after a message is successfully decrypted (or, for our own sends, the known plaintext).
-     * The single-use MLS key is consumed by that one decrypt, so this stored copy — not the ratchet —
-     * is what renders the message on every later reload. The blind server never receives this; it lives
+     * Stores the `[kind][payload]` frame exactly as decrypted (raw bytes — NOT text): MLS application
+     * keys are single-use (forward secrecy), so a message decrypts exactly once; this stored copy is what
+     * the hook re-decodes + re-folds on every later reload. The blind server never receives this; it lives
      * only in the platform store (web: IndexedDB; tests: MemoryStore).
      *
      * @param conversationId - The conversation the message belongs to.
      * @param messageId - The globally-unique server message id.
-     * @param plaintext - The decoded UTF-8 message text.
+     * @param content - The decrypted content-frame bytes (`[kind][payload]`, post-unpadding).
      */
-    saveMessagePlaintext(conversationId: string, messageId: string, plaintext: string): Promise<void>;
+    saveMessageContent(conversationId: string, messageId: string, content: Uint8Array): Promise<void>;
     /**
-     * Load a message's previously-decrypted plaintext, or `null` if it was never stored.
+     * Load a message's previously-decrypted content-frame bytes, or `null` if never stored.
      *
-     * A non-null result lets the decrypt path short-circuit BEFORE touching the MLS ratchet — essential
-     * because re-decrypting would throw `"Desired gen in the past"` (the key is gone after first use).
+     * A non-null result lets the decrypt path short-circuit BEFORE touching the MLS ratchet — re-decrypting
+     * would throw `"Desired gen in the past"` (the key is gone after first use).
      *
      * @param conversationId - The conversation the message belongs to.
      * @param messageId - The globally-unique server message id.
-     * @returns The stored UTF-8 plaintext, or `null` on a miss.
+     * @returns The stored content-frame bytes, or `null` on a miss.
      */
-    loadMessagePlaintext(conversationId: string, messageId: string): Promise<string | null>;
+    loadMessageContent(conversationId: string, messageId: string): Promise<Uint8Array | null>;
     /** Load this device row's persisted handshake delivery cursor (`seq`), or `null`. */
     loadHandshakeCursor(deviceRowId: string): Promise<string | null>;
     /** Persist this device row's handshake delivery cursor (`seq`). */

package/dist/cjs/persistence/repository.js

@@ -15,11 +15,12 @@ const GROUP_PREFIX = "group:";
 // and receives its own Welcome. A global key let a stale cursor outlive its device and mask the
 // Welcome whose `seq` it had already passed (the handshakes query is strictly `seq > since`).
 const CURSOR_PREFIX = "handshake:cursor:";
-// Decrypted message plaintext, keyed `msg:<conversationId>:<messageId>` (messageId is a globally-
-// unique server uuid). This is the durable conversation history: MLS application keys are single-use
-// (forward secrecy), so a message can be decrypted exactly once — we persist that one plaintext so
-// reload renders history from the store instead of replaying the (consumed) ratchet. Plaintext at
-// rest here is LOCAL ONLY; the blind server never sees it. See store.ts for the at-rest posture.
+// Decrypted content-frame bytes (`[kind][payload]`), keyed `msg:<conversationId>:<messageId>`
+// (messageId is a globally-unique server uuid). This is the durable conversation history: MLS
+// application keys are single-use (forward secrecy), so a message can be decrypted exactly once —
+// we persist these bytes so reload re-decodes + re-folds from the store instead of replaying the
+// (consumed) ratchet. Stored LOCAL ONLY; the blind server never sees it. See store.ts for the
+// at-rest posture.
 const MESSAGE_PREFIX = "msg:";
 /** Typed persistence for device identity, per-conversation group state, and the handshake cursor. */
 class SecureChatRepository {
@@ -65,33 +66,32 @@ class SecureChatRepository {
         return keys.map((k) => k.slice(GROUP_PREFIX.length));
     }
     /**
-     * Persist the decrypted plaintext of a message (local-only, decrypt-once history).
+     * Persist the decrypted content-frame bytes of a message (local-only, decrypt-once history).
      *
-     * Called after a message is successfully decrypted (or, for our own sends, the known plaintext).
-     * The single-use MLS key is consumed by that one decrypt, so this stored copy — not the ratchet —
-     * is what renders the message on every later reload. The blind server never receives this; it lives
+     * Stores the `[kind][payload]` frame exactly as decrypted (raw bytes — NOT text): MLS application
+     * keys are single-use (forward secrecy), so a message decrypts exactly once; this stored copy is what
+     * the hook re-decodes + re-folds on every later reload. The blind server never receives this; it lives
      * only in the platform store (web: IndexedDB; tests: MemoryStore).
      *
      * @param conversationId - The conversation the message belongs to.
      * @param messageId - The globally-unique server message id.
-     * @param plaintext - The decoded UTF-8 message text.
+     * @param content - The decrypted content-frame bytes (`[kind][payload]`, post-unpadding).
      */
-    async saveMessagePlaintext(conversationId, messageId, plaintext) {
-        await this.store.set(MESSAGE_PREFIX + conversationId + ":" + messageId, (0, base64_js_1.utf8ToBytes)(plaintext));
+    async saveMessageContent(conversationId, messageId, content) {
+        await this.store.set(MESSAGE_PREFIX + conversationId + ":" + messageId, content);
     }
     /**
-     * Load a message's previously-decrypted plaintext, or `null` if it was never stored.
+     * Load a message's previously-decrypted content-frame bytes, or `null` if never stored.
      *
-     * A non-null result lets the decrypt path short-circuit BEFORE touching the MLS ratchet — essential
-     * because re-decrypting would throw `"Desired gen in the past"` (the key is gone after first use).
+     * A non-null result lets the decrypt path short-circuit BEFORE touching the MLS ratchet — re-decrypting
+     * would throw `"Desired gen in the past"` (the key is gone after first use).
      *
      * @param conversationId - The conversation the message belongs to.
      * @param messageId - The globally-unique server message id.
-     * @returns The stored UTF-8 plaintext, or `null` on a miss.
+     * @returns The stored content-frame bytes, or `null` on a miss.
      */
-    async loadMessagePlaintext(conversationId, messageId) {
-        const bytes = await this.store.get(MESSAGE_PREFIX + conversationId + ":" + messageId);
-        return bytes ? (0, base64_js_1.bytesToUtf8)(bytes) : null;
+    async loadMessageContent(conversationId, messageId) {
+        return this.store.get(MESSAGE_PREFIX + conversationId + ":" + messageId);
     }
     /** Load this device row's persisted handshake delivery cursor (`seq`), or `null`. */
     async loadHandshakeCursor(deviceRowId) {

package/dist/cjs/persistence/repository.js.map

@@ -1 +1 @@
-{"version":3,"file":"repository.js","sourceRoot":"","sources":["../../../src/persistence/repository.ts"],"names":[],"mappings":";AAAA,8DAA8D;AAC9D,EAAE;AACF,0FAA0F;AAC1F,8FAA8F;AAC9F,gFAAgF;;;AAIhF,iDAAmF;AAEnF,MAAM,UAAU,GAAG,QAAQ,CAAC;AAC5B,MAAM,YAAY,GAAG,QAAQ,CAAC;AAC9B,qGAAqG;AACrG,sGAAsG;AACtG,qGAAqG;AACrG,gGAAgG;AAChG,8FAA8F;AAC9F,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAC1C,kGAAkG;AAClG,qGAAqG;AACrG,mGAAmG;AACnG,kGAAkG;AAClG,iGAAiG;AACjG,MAAM,cAAc,GAAG,MAAM,CAAC;AAkB9B,qGAAqG;AACrG,MAAa,oBAAoB;IAC/B,YAA6B,KAAsB;QAAtB,UAAK,GAAL,KAAK,CAAiB;IAAG,CAAC;IAEvD,uFAAuF;IACvF,KAAK,CAAC,UAAU;QACd,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,uBAAW,EAAC,KAAK,CAAC,CAAiB,CAAC;QAC3D,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAA,sBAAU,EAAC,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;IAClG,CAAC;IAED,2CAA2C;IAC3C,KAAK,CAAC,UAAU,CAAC,CAAkB;QACjC,MAAM,GAAG,GAAiB;YACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,WAAW,EAAE,IAAA,oBAAQ,EAAC,CAAC,CAAC,WAAW,CAAC;YACpC,MAAM,EAAE,CAAC,CAAC,MAAM;SACjB,CAAC;QACF,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,IAAA,uBAAW,EAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,0CAA0C;IAC1C,KAAK,CAAC,WAAW;QACf,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACtC,CAAC;IAED,yEAAyE;IACzE,KAAK,CAAC,cAAc,CAAC,cAAsB;QACzC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,GAAG,cAAc,CAAC,CAAC;IACvD,CAAC;IAED,yDAAyD;IACzD,KAAK,CAAC,cAAc,CAAC,cAAsB,EAAE,KAAiB;QAC5D,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,GAAG,cAAc,EAAE,KAAK,CAAC,CAAC;IAC7D,CAAC;IAED,uDAAuD;IACvD,KAAK,CAAC,gBAAgB,CAAC,cAAsB;QAC3C,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,GAAG,cAAc,CAAC,CAAC;IACzD,CAAC;IAED,iEAAiE;IACjE,KAAK,CAAC,wBAAwB;QAC5B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IACvD,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,oBAAoB,CAAC,cAAsB,EAAE,SAAiB,EAAE,SAAiB;QACrF,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,GAAG,cAAc,GAAG,GAAG,GAAG,SAAS,EAAE,IAAA,uBAAW,EAAC,SAAS,CAAC,CAAC,CAAC;IAClG,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,oBAAoB,CAAC,cAAsB,EAAE,SAAiB;QAClE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,GAAG,cAAc,GAAG,GAAG,GAAG,SAAS,CAAC,CAAC;QACtF,OAAO,KAAK,CAAC,CAAC,CAAC,IAAA,uBAAW,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3C,CAAC;IAED,qFAAqF;IACrF,KAAK,CAAC,mBAAmB,CAAC,WAAmB;QAC3C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,GAAG,WAAW,CAAC,CAAC;QAChE,OAAO,KAAK,CAAC,CAAC,CAAC,IAAA,uBAAW,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3C,CAAC;IAED,mEAAmE;IACnE,KAAK,CAAC,mBAAmB,CAAC,WAAmB,EAAE,GAAW;QACxD,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,GAAG,WAAW,EAAE,IAAA,uBAAW,EAAC,GAAG,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,uEAAuE;IACvE,KAAK,CAAC,QAAQ;QACZ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC;CACF;AA9FD,oDA8FC"}
+{"version":3,"file":"repository.js","sourceRoot":"","sources":["../../../src/persistence/repository.ts"],"names":[],"mappings":";AAAA,8DAA8D;AAC9D,EAAE;AACF,0FAA0F;AAC1F,8FAA8F;AAC9F,gFAAgF;;;AAIhF,iDAAmF;AAEnF,MAAM,UAAU,GAAG,QAAQ,CAAC;AAC5B,MAAM,YAAY,GAAG,QAAQ,CAAC;AAC9B,qGAAqG;AACrG,sGAAsG;AACtG,qGAAqG;AACrG,gGAAgG;AAChG,8FAA8F;AAC9F,MAAM,aAAa,GAAG,mBAAmB,CAAC;AAC1C,8FAA8F;AAC9F,8FAA8F;AAC9F,kGAAkG;AAClG,iGAAiG;AACjG,8FAA8F;AAC9F,mBAAmB;AACnB,MAAM,cAAc,GAAG,MAAM,CAAC;AAkB9B,qGAAqG;AACrG,MAAa,oBAAoB;IAC/B,YAA6B,KAAsB;QAAtB,UAAK,GAAL,KAAK,CAAiB;IAAG,CAAC;IAEvD,uFAAuF;IACvF,KAAK,CAAC,UAAU;QACd,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,uBAAW,EAAC,KAAK,CAAC,CAAiB,CAAC;QAC3D,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,IAAA,sBAAU,EAAC,GAAG,CAAC,WAAW,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;IAClG,CAAC;IAED,2CAA2C;IAC3C,KAAK,CAAC,UAAU,CAAC,CAAkB;QACjC,MAAM,GAAG,GAAiB;YACxB,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,WAAW,EAAE,IAAA,oBAAQ,EAAC,CAAC,CAAC,WAAW,CAAC;YACpC,MAAM,EAAE,CAAC,CAAC,MAAM;SACjB,CAAC;QACF,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,IAAA,uBAAW,EAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,0CAA0C;IAC1C,KAAK,CAAC,WAAW;QACf,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACtC,CAAC;IAED,yEAAyE;IACzE,KAAK,CAAC,cAAc,CAAC,cAAsB;QACzC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,GAAG,cAAc,CAAC,CAAC;IACvD,CAAC;IAED,yDAAyD;IACzD,KAAK,CAAC,cAAc,CAAC,cAAsB,EAAE,KAAiB;QAC5D,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,GAAG,cAAc,EAAE,KAAK,CAAC,CAAC;IAC7D,CAAC;IAED,uDAAuD;IACvD,KAAK,CAAC,gBAAgB,CAAC,cAAsB;QAC3C,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,GAAG,cAAc,CAAC,CAAC;IACzD,CAAC;IAED,iEAAiE;IACjE,KAAK,CAAC,wBAAwB;QAC5B,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IACvD,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,kBAAkB,CAAC,cAAsB,EAAE,SAAiB,EAAE,OAAmB;QACrF,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,GAAG,cAAc,GAAG,GAAG,GAAG,SAAS,EAAE,OAAO,CAAC,CAAC;IACnF,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,kBAAkB,CAAC,cAAsB,EAAE,SAAiB;QAChE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,GAAG,cAAc,GAAG,GAAG,GAAG,SAAS,CAAC,CAAC;IAC3E,CAAC;IAED,qFAAqF;IACrF,KAAK,CAAC,mBAAmB,CAAC,WAAmB;QAC3C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,GAAG,WAAW,CAAC,CAAC;QAChE,OAAO,KAAK,CAAC,CAAC,CAAC,IAAA,uBAAW,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3C,CAAC;IAED,mEAAmE;IACnE,KAAK,CAAC,mBAAmB,CAAC,WAAmB,EAAE,GAAW;QACxD,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,GAAG,WAAW,EAAE,IAAA,uBAAW,EAAC,GAAG,CAAC,CAAC,CAAC;IACtE,CAAC;IAED,uEAAuE;IACvE,KAAK,CAAC,QAAQ;QACZ,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvC,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC;CACF;AA7FD,oDA6FC"}

package/dist/cjs/version.d.ts

@@ -10,4 +10,4 @@
  * console.log(`secure-chat SDK ${VERSION}`);
  * ```
  */
-export declare const VERSION = "0.7.0";
+export declare const VERSION = "0.8.0";

package/dist/cjs/version.js

@@ -15,5 +15,5 @@ exports.VERSION = void 0;
  * console.log(`secure-chat SDK ${VERSION}`);
  * ```
  */
-exports.VERSION = "0.7.0";
+exports.VERSION = "0.8.0";
 //# sourceMappingURL=version.js.map

package/dist/esm/content/builders.d.ts

@@ -0,0 +1,40 @@
+import { type MimiContent } from "./mimi-content.js";
+/**
+ * A plain text post.
+ * @param body - The markdown message body.
+ * @returns A {@link MimiContent} with a SinglePart `text/markdown` Render body and a fresh salt.
+ */
+export declare function buildPost(body: string): MimiContent;
+/**
+ * A reply to another message.
+ * @param body - The reply body.
+ * @param targetHash - The replied-to message's 32-byte content-hash (MessageId).
+ * @returns A text {@link MimiContent} with `inReplyTo` set to `targetHash`.
+ */
+export declare function buildReply(body: string, targetHash: Uint8Array): MimiContent;
+/**
+ * An edit of an existing message.
+ * @param targetHash - The edited message's 32-byte content-hash.
+ * @param body - The new body.
+ * @returns A text {@link MimiContent} with `replaces` set to `targetHash`.
+ */
+export declare function buildEdit(targetHash: Uint8Array, body: string): MimiContent;
+/**
+ * A delete (tombstone) of an existing message.
+ * @param targetHash - The deleted message's 32-byte content-hash.
+ * @returns A {@link MimiContent} with `replaces` set and a NullPart body.
+ */
+export declare function buildDelete(targetHash: Uint8Array): MimiContent;
+/**
+ * A reaction to a message.
+ * @param targetHash - The reacted-to message's 32-byte content-hash.
+ * @param token - The reaction token (e.g. an emoji).
+ * @returns A {@link MimiContent} with `inReplyTo` set and a Reaction-disposition `text/plain` body.
+ */
+export declare function buildReaction(targetHash: Uint8Array, token: string): MimiContent;
+/**
+ * An un-react: withdraws one of your own reactions.
+ * @param reactionHash - The 32-byte content-hash of YOUR reaction message being withdrawn.
+ * @returns A {@link MimiContent} with `replaces` set and a NullPart body.
+ */
+export declare function buildUnreact(reactionHash: Uint8Array): MimiContent;

package/dist/esm/content/builders.js

@@ -0,0 +1,77 @@
+// Tier-2 MimiContent builders — the six surfaced operations (post/reply/edit/delete/react/un-react).
+//
+// Each mints a fresh CSPRNG salt (crypto.getRandomValues — never Math.random; CLAUDE.md §1) so equal
+// bodies still hash distinctly (unlinkability). The structural details of draft-08 MimiContent
+// (bare-MessageId references, disposition/language on the NestedPart wrapper, NullPart tombstones) stay
+// here so the hook deals only in builders. References (inReplyTo/replaces) are 32-byte content-hashes
+// computed by the caller via contentHash(...).
+import { Cardinality, Disposition, } from "./mimi-content.js";
+const utf8 = (s) => new TextEncoder().encode(s);
+/** 16 bytes of CSPRNG salt. WebCrypto `getRandomValues` is present on web, React Native, and Node ≥ 19. */
+function freshSalt() {
+    return crypto.getRandomValues(new Uint8Array(16));
+}
+/** A SinglePart text body with the given disposition + MIME type. */
+function singleText(body, disposition, contentType) {
+    return { cardinality: Cardinality.Single, disposition, language: "", contentType, content: utf8(body) };
+}
+/** A NullPart tombstone (delete / un-react). The wrapper still carries disposition + language. */
+function nullPart() {
+    return { cardinality: Cardinality.Null, disposition: Disposition.Render, language: "" };
+}
+/** The fields shared by every built message (fresh salt; no topic/expiry/extensions). */
+function base() {
+    return { salt: freshSalt(), topicId: new Uint8Array(), expires: null, extensions: new Map() };
+}
+/**
+ * A plain text post.
+ * @param body - The markdown message body.
+ * @returns A {@link MimiContent} with a SinglePart `text/markdown` Render body and a fresh salt.
+ */
+export function buildPost(body) {
+    return { ...base(), replaces: null, inReplyTo: null, nestedPart: singleText(body, Disposition.Render, "text/markdown") };
+}
+/**
+ * A reply to another message.
+ * @param body - The reply body.
+ * @param targetHash - The replied-to message's 32-byte content-hash (MessageId).
+ * @returns A text {@link MimiContent} with `inReplyTo` set to `targetHash`.
+ */
+export function buildReply(body, targetHash) {
+    return { ...base(), replaces: null, inReplyTo: targetHash, nestedPart: singleText(body, Disposition.Render, "text/markdown") };
+}
+/**
+ * An edit of an existing message.
+ * @param targetHash - The edited message's 32-byte content-hash.
+ * @param body - The new body.
+ * @returns A text {@link MimiContent} with `replaces` set to `targetHash`.
+ */
+export function buildEdit(targetHash, body) {
+    return { ...base(), replaces: targetHash, inReplyTo: null, nestedPart: singleText(body, Disposition.Render, "text/markdown") };
+}
+/**
+ * A delete (tombstone) of an existing message.
+ * @param targetHash - The deleted message's 32-byte content-hash.
+ * @returns A {@link MimiContent} with `replaces` set and a NullPart body.
+ */
+export function buildDelete(targetHash) {
+    return { ...base(), replaces: targetHash, inReplyTo: null, nestedPart: nullPart() };
+}
+/**
+ * A reaction to a message.
+ * @param targetHash - The reacted-to message's 32-byte content-hash.
+ * @param token - The reaction token (e.g. an emoji).
+ * @returns A {@link MimiContent} with `inReplyTo` set and a Reaction-disposition `text/plain` body.
+ */
+export function buildReaction(targetHash, token) {
+    return { ...base(), replaces: null, inReplyTo: targetHash, nestedPart: singleText(token, Disposition.Reaction, "text/plain") };
+}
+/**
+ * An un-react: withdraws one of your own reactions.
+ * @param reactionHash - The 32-byte content-hash of YOUR reaction message being withdrawn.
+ * @returns A {@link MimiContent} with `replaces` set and a NullPart body.
+ */
+export function buildUnreact(reactionHash) {
+    return { ...base(), replaces: reactionHash, inReplyTo: null, nestedPart: nullPart() };
+}
+//# sourceMappingURL=builders.js.map

package/dist/esm/content/builders.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"builders.js","sourceRoot":"","sources":["../../../src/content/builders.ts"],"names":[],"mappings":"AAAA,qGAAqG;AACrG,EAAE;AACF,qGAAqG;AACrG,+FAA+F;AAC/F,wGAAwG;AACxG,sGAAsG;AACtG,+CAA+C;AAE/C,OAAO,EACL,WAAW,EAAE,WAAW,GACzB,MAAM,mBAAmB,CAAC;AAE3B,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAExD,2GAA2G;AAC3G,SAAS,SAAS;IAChB,OAAO,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,qEAAqE;AACrE,SAAS,UAAU,CAAC,IAAY,EAAE,WAAwB,EAAE,WAAmB;IAC7E,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AAC1G,CAAC;AAED,kGAAkG;AAClG,SAAS,QAAQ;IACf,OAAO,EAAE,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE,WAAW,EAAE,WAAW,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;AAC1F,CAAC;AAED,yFAAyF;AACzF,SAAS,IAAI;IACX,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,UAAU,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;AAChG,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,WAAW,CAAC,MAAM,EAAE,eAAe,CAAC,EAAE,CAAC;AAC3H,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,UAAsB;IAC7D,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,WAAW,CAAC,MAAM,EAAE,eAAe,CAAC,EAAE,CAAC;AACjI,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,UAAsB,EAAE,IAAY;IAC5D,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,WAAW,CAAC,MAAM,EAAE,eAAe,CAAC,EAAE,CAAC;AACjI,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,UAAsB;IAChD,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,CAAC;AACtF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,UAAsB,EAAE,KAAa;IACjE,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,KAAK,EAAE,WAAW,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC;AACjI,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,YAAwB;IACnD,OAAO,EAAE,GAAG,IAAI,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,CAAC;AACxF,CAAC"}

package/dist/esm/content/cbor.d.ts

@@ -0,0 +1,48 @@
+/** A value in the supported CBOR subset. Integers in safe-int range are `number`; larger are `bigint`. */
+export type CborValue = number | bigint | Uint8Array | string | CborValue[] | CborMap | CborTag | boolean | null;
+/** A CBOR map (major type 5). Keys are encoded and sorted deterministically on encode. */
+export type CborMap = Map<CborValue, CborValue>;
+/** A CBOR tagged value (major type 6): a `tag` number wrapping one nested value. */
+export declare class CborTag {
+    /** The CBOR tag number (major type 6 argument). */
+    readonly tag: number | bigint;
+    /** The single nested value wrapped by this tag. */
+    readonly value: CborValue;
+    constructor(
+    /** The CBOR tag number (major type 6 argument). */
+    tag: number | bigint, 
+    /** The single nested value wrapped by this tag. */
+    value: CborValue);
+}
+/** Strict-decode bounds. Defaults: 1 MiB total, depth 32, 4096 items per array/map. */
+export interface CborLimits {
+    /** Reject inputs longer than this many bytes (DoS guard). Default 1 << 20. */
+    maxBytes?: number;
+    /** Reject nesting deeper than this. Default 32. */
+    maxDepth?: number;
+    /** Reject any array/map with more than this many items. Default 4096. */
+    maxItems?: number;
+}
+/**
+ * Encode a {@link CborValue} to canonical CBOR bytes (RFC 8949 §4.2 core deterministic rules).
+ *
+ * @param value - A value in the supported subset.
+ * @returns The canonical CBOR byte encoding.
+ * @throws {Error} On a non-integer number, an integer above u64, or an unsupported value type.
+ * @example
+ * ```ts
+ * encode(new Map([[1, "a"]])); // → a2 01 61 61 …  (keys sorted by encoded bytes)
+ * ```
+ */
+export declare function encode(value: CborValue): Uint8Array;
+/**
+ * Strict-decode canonical CBOR bytes from the supported subset. Rejects non-canonical encodings,
+ * out-of-subset major/simple values, trailing bytes, and anything exceeding {@link CborLimits}.
+ *
+ * @param bytes - The CBOR input (untrusted peer data — decoded fail-closed).
+ * @param limits - Optional {@link CborLimits} bounds.
+ * @returns The decoded {@link CborValue}.
+ * @throws {Error} On any non-canonical encoding, out-of-subset value, truncation, trailing bytes, or
+ *   a bound (size/depth/item-count) being exceeded.
+ */
+export declare function decode(bytes: Uint8Array, limits?: CborLimits): CborValue;