@agora-sdk/secure-chat-crypto 0.1.1

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2025 Replyke
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/dist/cjs/index.d.ts

@@ -0,0 +1 @@
+export type { SecureChatCrypto, DeviceIdentity, KeyPackageBundle, GroupHandle, TargetedWelcome, CommitResult, PassphraseBackup, } from "./interface";

package/dist/cjs/index.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=index.js.map

package/dist/cjs/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":""}

package/dist/cjs/interface.d.ts

@@ -0,0 +1,82 @@
+/** A device's long-lived MLS identity (one device = one leaf). The public half is published to
+ *  the server; the private half stays on the device (and in the passphrase backup). */
+export interface DeviceIdentity {
+    deviceId: string;
+    signaturePublicKey: Uint8Array;
+    credential: Uint8Array;
+    ciphersuite: number;
+}
+/** A one-time KeyPackage others consume to add this device to a group. */
+export interface KeyPackageBundle {
+    keyPackageRef: string;
+    keyPackage: Uint8Array;
+    ciphersuite: number;
+    expiresAt?: string;
+}
+/** A handle to a local MLS group the client holds the secrets for. */
+export interface GroupHandle {
+    mlsGroupId: Uint8Array;
+    epoch: bigint;
+}
+/** A Welcome destined for exactly one new-member device (the one whose KeyPackage was used). */
+export interface TargetedWelcome {
+    targetDeviceId: string;
+    payload: Uint8Array;
+}
+/** The output of a group mutation: a Commit to broadcast + per-device Welcomes to deliver. */
+export interface CommitResult {
+    commit: Uint8Array;
+    welcomes: TargetedWelcome[];
+    epoch: bigint;
+}
+/** A serialized, passphrase-encrypted backup of all local key material (history-restore on a new
+ *  browser; also the basis for cross-device history sync later). */
+export interface PassphraseBackup {
+    blob: Uint8Array;
+    kdf: string;
+    kdfParams: Record<string, unknown>;
+    cipher: string;
+    nonce: Uint8Array;
+    version: number;
+}
+export interface SecureChatCrypto {
+    generateDeviceIdentity(opts: {
+        deviceId: string;
+        ciphersuite?: number;
+    }): Promise<{
+        identity: DeviceIdentity;
+        privateState: Uint8Array;
+    }>;
+    generateKeyPackages(count: number): Promise<KeyPackageBundle[]>;
+    createGroup(opts: {
+        mlsGroupId?: Uint8Array;
+        initialMembers: {
+            deviceId: string;
+            keyPackage: Uint8Array;
+        }[];
+    }): Promise<{
+        group: GroupHandle;
+        welcomes: TargetedWelcome[];
+    }>;
+    addMember(group: GroupHandle, newDevice: {
+        deviceId: string;
+        keyPackage: Uint8Array;
+    }): Promise<CommitResult>;
+    removeMember(group: GroupHandle, leafDeviceId: string): Promise<CommitResult>;
+    encryptMessage(group: GroupHandle, plaintext: Uint8Array): Promise<{
+        ciphertext: Uint8Array;
+        epoch: bigint;
+    }>;
+    decryptMessage(group: GroupHandle, ciphertext: Uint8Array): Promise<{
+        plaintext: Uint8Array;
+        senderDeviceId: string;
+        epoch: bigint;
+    }>;
+    processWelcome(welcome: Uint8Array): Promise<GroupHandle>;
+    processCommit(group: GroupHandle, commit: Uint8Array): Promise<GroupHandle>;
+    processProposal(group: GroupHandle, proposal: Uint8Array): Promise<void>;
+    exportGroupState(group: GroupHandle): Promise<Uint8Array>;
+    importGroupState(state: Uint8Array): Promise<GroupHandle>;
+    exportBackup(passphrase: string): Promise<PassphraseBackup>;
+    importBackup(passphrase: string, backup: PassphraseBackup): Promise<void>;
+}

package/dist/cjs/interface.js

@@ -0,0 +1,14 @@
+"use strict";
+// The `SecureChatCrypto` seam — the canonical client crypto interface for Agora secure chat.
+//
+// All MLS (RFC 9420) crypto lives CLIENT-side behind this one interface. The Agora server is a
+// blind Delivery Service and depends on none of it — it only relays opaque base64 blobs. The
+// concrete core — ts-mls (pure TS) or OpenMLS compiled to WASM — is a swappable implementation;
+// this abstraction lets that choice be deferred and changed without touching call sites.
+//
+// This package is the home of record for the seam. The agora-server repo consumes it as a
+// (dev)dependency for its integration tests — the server is a CONSUMER of this client crypto, not
+// its owner. Binary is `Uint8Array` IN MEMORY; the network layer base64-encodes at the wire
+// boundary. MLS epochs are u64 → `bigint`.
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=interface.js.map

package/dist/cjs/interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interface.js","sourceRoot":"","sources":["../../src/interface.ts"],"names":[],"mappings":";AAAA,6FAA6F;AAC7F,EAAE;AACF,+FAA+F;AAC/F,6FAA6F;AAC7F,gGAAgG;AAChG,yFAAyF;AACzF,EAAE;AACF,0FAA0F;AAC1F,kGAAkG;AAClG,4FAA4F;AAC5F,2CAA2C"}

package/dist/cjs/mock-crypto.d.ts

@@ -0,0 +1,46 @@
+import type { SecureChatCrypto, DeviceIdentity, KeyPackageBundle, GroupHandle, CommitResult, PassphraseBackup, TargetedWelcome } from "./interface";
+export declare class MockSecureChatCrypto implements SecureChatCrypto {
+    private identity?;
+    private privateState?;
+    private groups;
+    private kpCounter;
+    generateDeviceIdentity(opts: {
+        deviceId: string;
+        ciphersuite?: number;
+    }): Promise<{
+        identity: DeviceIdentity;
+        privateState: Uint8Array<ArrayBufferLike>;
+    }>;
+    generateKeyPackages(count: number): Promise<KeyPackageBundle[]>;
+    createGroup(opts: {
+        mlsGroupId?: Uint8Array;
+        initialMembers: {
+            deviceId: string;
+            keyPackage: Uint8Array;
+        }[];
+    }): Promise<{
+        group: GroupHandle;
+        welcomes: TargetedWelcome[];
+    }>;
+    addMember(group: GroupHandle, newDevice: {
+        deviceId: string;
+        keyPackage: Uint8Array;
+    }): Promise<CommitResult>;
+    removeMember(group: GroupHandle, _leafDeviceId: string): Promise<CommitResult>;
+    encryptMessage(group: GroupHandle, plaintext: Uint8Array): Promise<{
+        ciphertext: Uint8Array;
+        epoch: bigint;
+    }>;
+    decryptMessage(group: GroupHandle, ciphertext: Uint8Array): Promise<{
+        plaintext: Uint8Array;
+        senderDeviceId: string;
+        epoch: bigint;
+    }>;
+    processWelcome(welcome: Uint8Array): Promise<GroupHandle>;
+    processCommit(group: GroupHandle, commit: Uint8Array): Promise<GroupHandle>;
+    processProposal(_group: GroupHandle, _proposal: Uint8Array): Promise<void>;
+    exportGroupState(group: GroupHandle): Promise<Uint8Array>;
+    importGroupState(state: Uint8Array): Promise<GroupHandle>;
+    exportBackup(passphrase: string): Promise<PassphraseBackup>;
+    importBackup(passphrase: string, backup: PassphraseBackup): Promise<void>;
+}

package/dist/cjs/mock-crypto.js

@@ -0,0 +1,241 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MockSecureChatCrypto = void 0;
+const enc = new TextEncoder();
+const dec = new TextDecoder();
+const BACKUP_MAGIC = "AGORA_MOCK_BACKUP_V1";
+function toHex(b) {
+    let s = "";
+    for (const x of b)
+        s += x.toString(16).padStart(2, "0");
+    return s;
+}
+function fromHex(s) {
+    const out = new Uint8Array(s.length / 2);
+    for (let i = 0; i < out.length; i++)
+        out[i] = parseInt(s.slice(i * 2, i * 2 + 2), 16);
+    return out;
+}
+/** Deterministic non-zero keystream (FNV-seeded LCG). Non-zero guarantees ciphertext≠plaintext. */
+function keystream(seed, len) {
+    let state = 2166136261 >>> 0;
+    for (const b of seed)
+        state = ((state ^ b) * 16777619) >>> 0;
+    const out = new Uint8Array(len);
+    for (let i = 0; i < len; i++) {
+        state = (Math.imul(state, 1664525) + 1013904223) >>> 0;
+        out[i] = (state >>> 24) & 0xff;
+        if (out[i] === 0)
+            out[i] = 0xa5;
+    }
+    return out;
+}
+function bytesFrom(s, len) {
+    return keystream(enc.encode(s), len);
+}
+function xor(data, key) {
+    const out = new Uint8Array(data.length);
+    for (let i = 0; i < data.length; i++)
+        out[i] = data[i] ^ key[i % key.length];
+    return out;
+}
+function jsonBytes(v) {
+    return enc.encode(JSON.stringify(v));
+}
+function parseJson(b) {
+    return JSON.parse(dec.decode(b));
+}
+class MockSecureChatCrypto {
+    constructor() {
+        this.groups = new Map(); // groupIdHex -> state
+        this.kpCounter = 0;
+    }
+    async generateDeviceIdentity(opts) {
+        const ciphersuite = opts.ciphersuite ?? 1;
+        const identity = {
+            deviceId: opts.deviceId,
+            signaturePublicKey: bytesFrom(`sig:${opts.deviceId}`, 32),
+            credential: enc.encode(opts.deviceId), // mock credential = the device id
+            ciphersuite,
+        };
+        this.identity = identity;
+        this.privateState = bytesFrom(`priv:${opts.deviceId}`, 32);
+        return { identity, privateState: this.privateState };
+    }
+    async generateKeyPackages(count) {
+        const did = this.identity?.deviceId ?? "unknown";
+        const cs = this.identity?.ciphersuite ?? 1;
+        const out = [];
+        for (let i = 0; i < count; i++) {
+            const ref = `${did}:kp:${this.kpCounter++}`;
+            out.push({ keyPackageRef: ref, keyPackage: bytesFrom(`kp:${ref}`, 48), ciphersuite: cs });
+        }
+        return out;
+    }
+    async createGroup(opts) {
+        const did = this.identity?.deviceId ?? "creator";
+        const mlsGroupId = opts.mlsGroupId ??
+            bytesFrom(`grp:${did}:${opts.initialMembers.map((m) => m.deviceId).join(",")}`, 16);
+        const idHex = toHex(mlsGroupId);
+        const secret = bytesFrom(`secret:${idHex}:${did}`, 32);
+        this.groups.set(idHex, { secret, epoch: 0n });
+        const welcomes = opts.initialMembers.map((m) => ({
+            targetDeviceId: m.deviceId,
+            payload: jsonBytes({
+                groupId: idHex,
+                secret: toHex(secret),
+                epoch: "0",
+            }),
+        }));
+        return { group: { mlsGroupId, epoch: 0n }, welcomes };
+    }
+    async addMember(group, newDevice) {
+        const idHex = toHex(group.mlsGroupId);
+        const st = this.groups.get(idHex);
+        if (!st)
+            throw new Error("mock: unknown group");
+        st.epoch += 1n;
+        const epoch = st.epoch;
+        return {
+            commit: jsonBytes({ type: "commit", groupId: idHex, epoch: epoch.toString() }),
+            welcomes: [
+                {
+                    targetDeviceId: newDevice.deviceId,
+                    payload: jsonBytes({
+                        groupId: idHex,
+                        secret: toHex(st.secret),
+                        epoch: epoch.toString(),
+                    }),
+                },
+            ],
+            epoch,
+        };
+    }
+    async removeMember(group, _leafDeviceId) {
+        const idHex = toHex(group.mlsGroupId);
+        const st = this.groups.get(idHex);
+        if (!st)
+            throw new Error("mock: unknown group");
+        st.epoch += 1n;
+        return {
+            commit: jsonBytes({ type: "commit", groupId: idHex, epoch: st.epoch.toString() }),
+            welcomes: [],
+            epoch: st.epoch,
+        };
+    }
+    async encryptMessage(group, plaintext) {
+        const idHex = toHex(group.mlsGroupId);
+        const st = this.groups.get(idHex);
+        if (!st)
+            throw new Error("mock: unknown group");
+        const sender = this.identity?.deviceId ?? "unknown";
+        const ks = keystream(st.secret, plaintext.length);
+        const body = xor(plaintext, ks);
+        const header = enc.encode(`${sender}|${st.epoch}|`);
+        const ciphertext = new Uint8Array(header.length + body.length);
+        ciphertext.set(header, 0);
+        ciphertext.set(body, header.length);
+        return { ciphertext, epoch: st.epoch };
+    }
+    async decryptMessage(group, ciphertext) {
+        const idHex = toHex(group.mlsGroupId);
+        const st = this.groups.get(idHex);
+        if (!st)
+            throw new Error("mock: unknown group");
+        // header = "<deviceId>|<epoch>|" — split on the SECOND pipe.
+        let pipes = 0;
+        let cut = -1;
+        for (let i = 0; i < ciphertext.length; i++) {
+            if (ciphertext[i] === 0x7c /* | */) {
+                pipes++;
+                if (pipes === 2) {
+                    cut = i + 1;
+                    break;
+                }
+            }
+        }
+        if (cut < 0)
+            throw new Error("mock: malformed ciphertext");
+        const [senderDeviceId, epochStr] = dec.decode(ciphertext.slice(0, cut - 1)).split("|");
+        const body = ciphertext.slice(cut);
+        const ks = keystream(st.secret, body.length);
+        return {
+            plaintext: xor(body, ks),
+            senderDeviceId: senderDeviceId ?? "",
+            epoch: BigInt(epochStr ?? "0"),
+        };
+    }
+    async processWelcome(welcome) {
+        const w = parseJson(welcome);
+        this.groups.set(w.groupId, { secret: fromHex(w.secret), epoch: BigInt(w.epoch) });
+        return { mlsGroupId: fromHex(w.groupId), epoch: BigInt(w.epoch) };
+    }
+    async processCommit(group, commit) {
+        const c = parseJson(commit);
+        const idHex = toHex(group.mlsGroupId);
+        const st = this.groups.get(idHex);
+        if (st)
+            st.epoch = BigInt(c.epoch);
+        return { mlsGroupId: group.mlsGroupId, epoch: BigInt(c.epoch) };
+    }
+    async processProposal(_group, _proposal) {
+        /* mock: proposals are no-ops until their Commit arrives */
+    }
+    async exportGroupState(group) {
+        const idHex = toHex(group.mlsGroupId);
+        const st = this.groups.get(idHex);
+        if (!st)
+            throw new Error("mock: unknown group");
+        return jsonBytes({ groupId: idHex, secret: toHex(st.secret), epoch: st.epoch.toString() });
+    }
+    async importGroupState(state) {
+        const s = parseJson(state);
+        this.groups.set(s.groupId, { secret: fromHex(s.secret), epoch: BigInt(s.epoch) });
+        return { mlsGroupId: fromHex(s.groupId), epoch: BigInt(s.epoch) };
+    }
+    async exportBackup(passphrase) {
+        const groups = [...this.groups.entries()].map(([id, st]) => ({
+            id,
+            secret: toHex(st.secret),
+            epoch: st.epoch.toString(),
+        }));
+        const plain = jsonBytes({
+            magic: BACKUP_MAGIC,
+            identityPriv: this.privateState ? toHex(this.privateState) : null,
+            deviceId: this.identity?.deviceId ?? null,
+            groups,
+        });
+        const salt = bytesFrom(`salt:${passphrase}`, 16);
+        const key = keystream(enc.encode(`${passphrase}:${toHex(salt)}`), plain.length);
+        return {
+            blob: xor(plain, key),
+            kdf: "argon2id",
+            kdfParams: { salt: toHex(salt), m: 65536, t: 3, p: 1 },
+            cipher: "xchacha20poly1305",
+            nonce: bytesFrom(`nonce:${passphrase}`, 24),
+            version: 1,
+        };
+    }
+    async importBackup(passphrase, backup) {
+        const salt = backup.kdfParams.salt ?? toHex(bytesFrom(`salt:${passphrase}`, 16));
+        const key = keystream(enc.encode(`${passphrase}:${salt}`), backup.blob.length);
+        const plain = xor(backup.blob, key);
+        let parsed;
+        try {
+            parsed = parseJson(plain);
+        }
+        catch {
+            throw new Error("mock: backup decrypt failed (wrong passphrase?)");
+        }
+        if (parsed.magic !== BACKUP_MAGIC) {
+            throw new Error("mock: backup decrypt failed (wrong passphrase?)");
+        }
+        if (parsed.identityPriv)
+            this.privateState = fromHex(parsed.identityPriv);
+        for (const g of parsed.groups) {
+            this.groups.set(g.id, { secret: fromHex(g.secret), epoch: BigInt(g.epoch) });
+        }
+    }
+}
+exports.MockSecureChatCrypto = MockSecureChatCrypto;
+//# sourceMappingURL=mock-crypto.js.map

package/dist/cjs/mock-crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-crypto.js","sourceRoot":"","sources":["../../src/mock-crypto.ts"],"names":[],"mappings":";;;AA0BA,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;AAC9B,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;AAC9B,MAAM,YAAY,GAAG,sBAAsB,CAAC;AAE5C,SAAS,KAAK,CAAC,CAAa;IAC1B,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,KAAK,MAAM,CAAC,IAAI,CAAC;QAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACxD,OAAO,CAAC,CAAC;AACX,CAAC;AACD,SAAS,OAAO,CAAC,CAAS;IACxB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACtF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mGAAmG;AACnG,SAAS,SAAS,CAAC,IAAgB,EAAE,GAAW;IAC9C,IAAI,KAAK,GAAG,UAAU,KAAK,CAAC,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,IAAI;QAAE,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QACvD,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC;QAC/B,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAClC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AACD,SAAS,SAAS,CAAC,CAAS,EAAE,GAAW;IACvC,OAAO,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACvC,CAAC;AACD,SAAS,GAAG,CAAC,IAAgB,EAAE,GAAe;IAC5C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAE,CAAC;IAC/E,OAAO,GAAG,CAAC;AACb,CAAC;AACD,SAAS,SAAS,CAAC,CAAU;IAC3B,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AACvC,CAAC;AACD,SAAS,SAAS,CAAI,CAAa;IACjC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAM,CAAC;AACxC,CAAC;AAYD,MAAa,oBAAoB;IAAjC;QAGU,WAAM,GAAG,IAAI,GAAG,EAAsB,CAAC,CAAC,sBAAsB;QAC9D,cAAS,GAAG,CAAC,CAAC;IAmNxB,CAAC;IAjNC,KAAK,CAAC,sBAAsB,CAAC,IAAgD;QAC3E,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAmB;YAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,kBAAkB,EAAE,SAAS,CAAC,OAAO,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC;YACzD,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,kCAAkC;YACzE,WAAW;SACZ,CAAC;QACF,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3D,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,KAAa;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,IAAI,SAAS,CAAC;QACjD,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,IAAI,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAuB,EAAE,CAAC;QACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,GAAG,GAAG,OAAO,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YAC5C,GAAG,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE,UAAU,EAAE,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5F,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,IAGjB;QACC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,IAAI,SAAS,CAAC;QACjD,MAAM,UAAU,GACd,IAAI,CAAC,UAAU;YACf,SAAS,CAAC,OAAO,GAAG,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,KAAK,IAAI,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/C,cAAc,EAAE,CAAC,CAAC,QAAQ;YAC1B,OAAO,EAAE,SAAS,CAAC;gBACjB,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC;gBACrB,KAAK,EAAE,GAAG;aACc,CAAC;SAC5B,CAAC,CAAC,CAAC;QACJ,OAAO,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,SAAS,CACb,KAAkB,EAClB,SAAuD;QAEvD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAChD,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;QACf,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC;QACvB,OAAO;YACL,MAAM,EAAE,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC;YAC9E,QAAQ,EAAE;gBACR;oBACE,cAAc,EAAE,SAAS,CAAC,QAAQ;oBAClC,OAAO,EAAE,SAAS,CAAC;wBACjB,OAAO,EAAE,KAAK;wBACd,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC;wBACxB,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE;qBACC,CAAC;iBAC5B;aACF;YACD,KAAK;SACN,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAAkB,EAAE,aAAqB;QAC1D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAChD,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;QACf,OAAO;YACL,MAAM,EAAE,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC;YACjF,QAAQ,EAAE,EAAE;YACZ,KAAK,EAAE,EAAE,CAAC,KAAK;SAChB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,KAAkB,EAClB,SAAqB;QAErB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,IAAI,SAAS,CAAC;QACpD,MAAM,EAAE,GAAG,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC;QACpD,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/D,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC1B,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACpC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,KAAkB,EAClB,UAAsB;QAEtB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAChD,6DAA6D;QAC7D,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC;QACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;gBACnC,KAAK,EAAE,CAAC;gBACR,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;oBAChB,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;oBACZ,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,GAAG,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC3D,MAAM,CAAC,cAAc,EAAE,QAAQ,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvF,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,EAAE,GAAG,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7C,OAAO;YACL,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;YACxB,cAAc,EAAE,cAAc,IAAI,EAAE;YACpC,KAAK,EAAE,MAAM,CAAC,QAAQ,IAAI,GAAG,CAAC;SAC/B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAAmB;QACtC,MAAM,CAAC,GAAG,SAAS,CAAiB,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClF,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAAkB,EAAE,MAAkB;QACxD,MAAM,CAAC,GAAG,SAAS,CAAoB,MAAM,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,EAAE;YAAE,EAAE,CAAC,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACnC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,MAAmB,EAAE,SAAqB;QAC9D,2DAA2D;IAC7D,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,KAAkB;QACvC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAChD,OAAO,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,KAAiB;QACtC,MAAM,CAAC,GAAG,SAAS,CAAqD,KAAK,CAAC,CAAC;QAC/E,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClF,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,UAAkB;QACnC,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3D,EAAE;YACF,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC;YACxB,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE;SAC3B,CAAC,CAAC,CAAC;QACJ,MAAM,KAAK,GAAG,SAAS,CAAC;YACtB,KAAK,EAAE,YAAY;YACnB,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI;YACjE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,IAAI,IAAI;YACzC,MAAM;SACP,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,UAAU,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAChF,OAAO;YACL,IAAI,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC;YACrB,GAAG,EAAE,UAAU;YACf,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE;YACtD,MAAM,EAAE,mBAAmB;YAC3B,KAAK,EAAE,SAAS,CAAC,SAAS,UAAU,EAAE,EAAE,EAAE,CAAC;YAC3C,OAAO,EAAE,CAAC;SACX,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,UAAkB,EAAE,MAAwB;QAC7D,MAAM,IAAI,GACP,MAAM,CAAC,SAA+B,CAAC,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,QAAQ,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7F,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,UAAU,IAAI,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/E,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpC,IAAI,MAKH,CAAC;QACF,IAAI,CAAC;YACH,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,MAAM,CAAC,YAAY;YAAE,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC1E,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;CACF;AAvND,oDAuNC"}

package/dist/cjs/testing.d.ts

@@ -0,0 +1 @@
+export { MockSecureChatCrypto } from "./mock-crypto";

package/dist/cjs/testing.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MockSecureChatCrypto = void 0;
+// @agora-sdk/secure-chat-crypto/testing — the deterministic mock, kept off the main entry.
+//
+// NOT cryptographically secure. Use it in tests and early UI work (and the agora-server integration
+// suite consumes it from here). Never ship it as production crypto.
+var mock_crypto_1 = require("./mock-crypto");
+Object.defineProperty(exports, "MockSecureChatCrypto", { enumerable: true, get: function () { return mock_crypto_1.MockSecureChatCrypto; } });
+//# sourceMappingURL=testing.js.map

package/dist/cjs/testing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"testing.js","sourceRoot":"","sources":["../../src/testing.ts"],"names":[],"mappings":";;;AAAA,2FAA2F;AAC3F,EAAE;AACF,oGAAoG;AACpG,oEAAoE;AACpE,6CAAqD;AAA5C,mHAAA,oBAAoB,OAAA"}

package/dist/esm/index.d.ts

@@ -0,0 +1 @@
+export type { SecureChatCrypto, DeviceIdentity, KeyPackageBundle, GroupHandle, TargetedWelcome, CommitResult, PassphraseBackup, } from "./interface";

package/dist/esm/index.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.js.map

package/dist/esm/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":""}

package/dist/esm/interface.d.ts

@@ -0,0 +1,82 @@
+/** A device's long-lived MLS identity (one device = one leaf). The public half is published to
+ *  the server; the private half stays on the device (and in the passphrase backup). */
+export interface DeviceIdentity {
+    deviceId: string;
+    signaturePublicKey: Uint8Array;
+    credential: Uint8Array;
+    ciphersuite: number;
+}
+/** A one-time KeyPackage others consume to add this device to a group. */
+export interface KeyPackageBundle {
+    keyPackageRef: string;
+    keyPackage: Uint8Array;
+    ciphersuite: number;
+    expiresAt?: string;
+}
+/** A handle to a local MLS group the client holds the secrets for. */
+export interface GroupHandle {
+    mlsGroupId: Uint8Array;
+    epoch: bigint;
+}
+/** A Welcome destined for exactly one new-member device (the one whose KeyPackage was used). */
+export interface TargetedWelcome {
+    targetDeviceId: string;
+    payload: Uint8Array;
+}
+/** The output of a group mutation: a Commit to broadcast + per-device Welcomes to deliver. */
+export interface CommitResult {
+    commit: Uint8Array;
+    welcomes: TargetedWelcome[];
+    epoch: bigint;
+}
+/** A serialized, passphrase-encrypted backup of all local key material (history-restore on a new
+ *  browser; also the basis for cross-device history sync later). */
+export interface PassphraseBackup {
+    blob: Uint8Array;
+    kdf: string;
+    kdfParams: Record<string, unknown>;
+    cipher: string;
+    nonce: Uint8Array;
+    version: number;
+}
+export interface SecureChatCrypto {
+    generateDeviceIdentity(opts: {
+        deviceId: string;
+        ciphersuite?: number;
+    }): Promise<{
+        identity: DeviceIdentity;
+        privateState: Uint8Array;
+    }>;
+    generateKeyPackages(count: number): Promise<KeyPackageBundle[]>;
+    createGroup(opts: {
+        mlsGroupId?: Uint8Array;
+        initialMembers: {
+            deviceId: string;
+            keyPackage: Uint8Array;
+        }[];
+    }): Promise<{
+        group: GroupHandle;
+        welcomes: TargetedWelcome[];
+    }>;
+    addMember(group: GroupHandle, newDevice: {
+        deviceId: string;
+        keyPackage: Uint8Array;
+    }): Promise<CommitResult>;
+    removeMember(group: GroupHandle, leafDeviceId: string): Promise<CommitResult>;
+    encryptMessage(group: GroupHandle, plaintext: Uint8Array): Promise<{
+        ciphertext: Uint8Array;
+        epoch: bigint;
+    }>;
+    decryptMessage(group: GroupHandle, ciphertext: Uint8Array): Promise<{
+        plaintext: Uint8Array;
+        senderDeviceId: string;
+        epoch: bigint;
+    }>;
+    processWelcome(welcome: Uint8Array): Promise<GroupHandle>;
+    processCommit(group: GroupHandle, commit: Uint8Array): Promise<GroupHandle>;
+    processProposal(group: GroupHandle, proposal: Uint8Array): Promise<void>;
+    exportGroupState(group: GroupHandle): Promise<Uint8Array>;
+    importGroupState(state: Uint8Array): Promise<GroupHandle>;
+    exportBackup(passphrase: string): Promise<PassphraseBackup>;
+    importBackup(passphrase: string, backup: PassphraseBackup): Promise<void>;
+}

package/dist/esm/interface.js

@@ -0,0 +1,13 @@
+// The `SecureChatCrypto` seam — the canonical client crypto interface for Agora secure chat.
+//
+// All MLS (RFC 9420) crypto lives CLIENT-side behind this one interface. The Agora server is a
+// blind Delivery Service and depends on none of it — it only relays opaque base64 blobs. The
+// concrete core — ts-mls (pure TS) or OpenMLS compiled to WASM — is a swappable implementation;
+// this abstraction lets that choice be deferred and changed without touching call sites.
+//
+// This package is the home of record for the seam. The agora-server repo consumes it as a
+// (dev)dependency for its integration tests — the server is a CONSUMER of this client crypto, not
+// its owner. Binary is `Uint8Array` IN MEMORY; the network layer base64-encodes at the wire
+// boundary. MLS epochs are u64 → `bigint`.
+export {};
+//# sourceMappingURL=interface.js.map

package/dist/esm/interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interface.js","sourceRoot":"","sources":["../../src/interface.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,EAAE;AACF,+FAA+F;AAC/F,6FAA6F;AAC7F,gGAAgG;AAChG,yFAAyF;AACzF,EAAE;AACF,0FAA0F;AAC1F,kGAAkG;AAClG,4FAA4F;AAC5F,2CAA2C"}

package/dist/esm/mock-crypto.d.ts

@@ -0,0 +1,46 @@
+import type { SecureChatCrypto, DeviceIdentity, KeyPackageBundle, GroupHandle, CommitResult, PassphraseBackup, TargetedWelcome } from "./interface";
+export declare class MockSecureChatCrypto implements SecureChatCrypto {
+    private identity?;
+    private privateState?;
+    private groups;
+    private kpCounter;
+    generateDeviceIdentity(opts: {
+        deviceId: string;
+        ciphersuite?: number;
+    }): Promise<{
+        identity: DeviceIdentity;
+        privateState: Uint8Array<ArrayBufferLike>;
+    }>;
+    generateKeyPackages(count: number): Promise<KeyPackageBundle[]>;
+    createGroup(opts: {
+        mlsGroupId?: Uint8Array;
+        initialMembers: {
+            deviceId: string;
+            keyPackage: Uint8Array;
+        }[];
+    }): Promise<{
+        group: GroupHandle;
+        welcomes: TargetedWelcome[];
+    }>;
+    addMember(group: GroupHandle, newDevice: {
+        deviceId: string;
+        keyPackage: Uint8Array;
+    }): Promise<CommitResult>;
+    removeMember(group: GroupHandle, _leafDeviceId: string): Promise<CommitResult>;
+    encryptMessage(group: GroupHandle, plaintext: Uint8Array): Promise<{
+        ciphertext: Uint8Array;
+        epoch: bigint;
+    }>;
+    decryptMessage(group: GroupHandle, ciphertext: Uint8Array): Promise<{
+        plaintext: Uint8Array;
+        senderDeviceId: string;
+        epoch: bigint;
+    }>;
+    processWelcome(welcome: Uint8Array): Promise<GroupHandle>;
+    processCommit(group: GroupHandle, commit: Uint8Array): Promise<GroupHandle>;
+    processProposal(_group: GroupHandle, _proposal: Uint8Array): Promise<void>;
+    exportGroupState(group: GroupHandle): Promise<Uint8Array>;
+    importGroupState(state: Uint8Array): Promise<GroupHandle>;
+    exportBackup(passphrase: string): Promise<PassphraseBackup>;
+    importBackup(passphrase: string, backup: PassphraseBackup): Promise<void>;
+}

package/dist/esm/mock-crypto.js

@@ -0,0 +1,237 @@
+const enc = new TextEncoder();
+const dec = new TextDecoder();
+const BACKUP_MAGIC = "AGORA_MOCK_BACKUP_V1";
+function toHex(b) {
+    let s = "";
+    for (const x of b)
+        s += x.toString(16).padStart(2, "0");
+    return s;
+}
+function fromHex(s) {
+    const out = new Uint8Array(s.length / 2);
+    for (let i = 0; i < out.length; i++)
+        out[i] = parseInt(s.slice(i * 2, i * 2 + 2), 16);
+    return out;
+}
+/** Deterministic non-zero keystream (FNV-seeded LCG). Non-zero guarantees ciphertext≠plaintext. */
+function keystream(seed, len) {
+    let state = 2166136261 >>> 0;
+    for (const b of seed)
+        state = ((state ^ b) * 16777619) >>> 0;
+    const out = new Uint8Array(len);
+    for (let i = 0; i < len; i++) {
+        state = (Math.imul(state, 1664525) + 1013904223) >>> 0;
+        out[i] = (state >>> 24) & 0xff;
+        if (out[i] === 0)
+            out[i] = 0xa5;
+    }
+    return out;
+}
+function bytesFrom(s, len) {
+    return keystream(enc.encode(s), len);
+}
+function xor(data, key) {
+    const out = new Uint8Array(data.length);
+    for (let i = 0; i < data.length; i++)
+        out[i] = data[i] ^ key[i % key.length];
+    return out;
+}
+function jsonBytes(v) {
+    return enc.encode(JSON.stringify(v));
+}
+function parseJson(b) {
+    return JSON.parse(dec.decode(b));
+}
+export class MockSecureChatCrypto {
+    constructor() {
+        this.groups = new Map(); // groupIdHex -> state
+        this.kpCounter = 0;
+    }
+    async generateDeviceIdentity(opts) {
+        const ciphersuite = opts.ciphersuite ?? 1;
+        const identity = {
+            deviceId: opts.deviceId,
+            signaturePublicKey: bytesFrom(`sig:${opts.deviceId}`, 32),
+            credential: enc.encode(opts.deviceId), // mock credential = the device id
+            ciphersuite,
+        };
+        this.identity = identity;
+        this.privateState = bytesFrom(`priv:${opts.deviceId}`, 32);
+        return { identity, privateState: this.privateState };
+    }
+    async generateKeyPackages(count) {
+        const did = this.identity?.deviceId ?? "unknown";
+        const cs = this.identity?.ciphersuite ?? 1;
+        const out = [];
+        for (let i = 0; i < count; i++) {
+            const ref = `${did}:kp:${this.kpCounter++}`;
+            out.push({ keyPackageRef: ref, keyPackage: bytesFrom(`kp:${ref}`, 48), ciphersuite: cs });
+        }
+        return out;
+    }
+    async createGroup(opts) {
+        const did = this.identity?.deviceId ?? "creator";
+        const mlsGroupId = opts.mlsGroupId ??
+            bytesFrom(`grp:${did}:${opts.initialMembers.map((m) => m.deviceId).join(",")}`, 16);
+        const idHex = toHex(mlsGroupId);
+        const secret = bytesFrom(`secret:${idHex}:${did}`, 32);
+        this.groups.set(idHex, { secret, epoch: 0n });
+        const welcomes = opts.initialMembers.map((m) => ({
+            targetDeviceId: m.deviceId,
+            payload: jsonBytes({
+                groupId: idHex,
+                secret: toHex(secret),
+                epoch: "0",
+            }),
+        }));
+        return { group: { mlsGroupId, epoch: 0n }, welcomes };
+    }
+    async addMember(group, newDevice) {
+        const idHex = toHex(group.mlsGroupId);
+        const st = this.groups.get(idHex);
+        if (!st)
+            throw new Error("mock: unknown group");
+        st.epoch += 1n;
+        const epoch = st.epoch;
+        return {
+            commit: jsonBytes({ type: "commit", groupId: idHex, epoch: epoch.toString() }),
+            welcomes: [
+                {
+                    targetDeviceId: newDevice.deviceId,
+                    payload: jsonBytes({
+                        groupId: idHex,
+                        secret: toHex(st.secret),
+                        epoch: epoch.toString(),
+                    }),
+                },
+            ],
+            epoch,
+        };
+    }
+    async removeMember(group, _leafDeviceId) {
+        const idHex = toHex(group.mlsGroupId);
+        const st = this.groups.get(idHex);
+        if (!st)
+            throw new Error("mock: unknown group");
+        st.epoch += 1n;
+        return {
+            commit: jsonBytes({ type: "commit", groupId: idHex, epoch: st.epoch.toString() }),
+            welcomes: [],
+            epoch: st.epoch,
+        };
+    }
+    async encryptMessage(group, plaintext) {
+        const idHex = toHex(group.mlsGroupId);
+        const st = this.groups.get(idHex);
+        if (!st)
+            throw new Error("mock: unknown group");
+        const sender = this.identity?.deviceId ?? "unknown";
+        const ks = keystream(st.secret, plaintext.length);
+        const body = xor(plaintext, ks);
+        const header = enc.encode(`${sender}|${st.epoch}|`);
+        const ciphertext = new Uint8Array(header.length + body.length);
+        ciphertext.set(header, 0);
+        ciphertext.set(body, header.length);
+        return { ciphertext, epoch: st.epoch };
+    }
+    async decryptMessage(group, ciphertext) {
+        const idHex = toHex(group.mlsGroupId);
+        const st = this.groups.get(idHex);
+        if (!st)
+            throw new Error("mock: unknown group");
+        // header = "<deviceId>|<epoch>|" — split on the SECOND pipe.
+        let pipes = 0;
+        let cut = -1;
+        for (let i = 0; i < ciphertext.length; i++) {
+            if (ciphertext[i] === 0x7c /* | */) {
+                pipes++;
+                if (pipes === 2) {
+                    cut = i + 1;
+                    break;
+                }
+            }
+        }
+        if (cut < 0)
+            throw new Error("mock: malformed ciphertext");
+        const [senderDeviceId, epochStr] = dec.decode(ciphertext.slice(0, cut - 1)).split("|");
+        const body = ciphertext.slice(cut);
+        const ks = keystream(st.secret, body.length);
+        return {
+            plaintext: xor(body, ks),
+            senderDeviceId: senderDeviceId ?? "",
+            epoch: BigInt(epochStr ?? "0"),
+        };
+    }
+    async processWelcome(welcome) {
+        const w = parseJson(welcome);
+        this.groups.set(w.groupId, { secret: fromHex(w.secret), epoch: BigInt(w.epoch) });
+        return { mlsGroupId: fromHex(w.groupId), epoch: BigInt(w.epoch) };
+    }
+    async processCommit(group, commit) {
+        const c = parseJson(commit);
+        const idHex = toHex(group.mlsGroupId);
+        const st = this.groups.get(idHex);
+        if (st)
+            st.epoch = BigInt(c.epoch);
+        return { mlsGroupId: group.mlsGroupId, epoch: BigInt(c.epoch) };
+    }
+    async processProposal(_group, _proposal) {
+        /* mock: proposals are no-ops until their Commit arrives */
+    }
+    async exportGroupState(group) {
+        const idHex = toHex(group.mlsGroupId);
+        const st = this.groups.get(idHex);
+        if (!st)
+            throw new Error("mock: unknown group");
+        return jsonBytes({ groupId: idHex, secret: toHex(st.secret), epoch: st.epoch.toString() });
+    }
+    async importGroupState(state) {
+        const s = parseJson(state);
+        this.groups.set(s.groupId, { secret: fromHex(s.secret), epoch: BigInt(s.epoch) });
+        return { mlsGroupId: fromHex(s.groupId), epoch: BigInt(s.epoch) };
+    }
+    async exportBackup(passphrase) {
+        const groups = [...this.groups.entries()].map(([id, st]) => ({
+            id,
+            secret: toHex(st.secret),
+            epoch: st.epoch.toString(),
+        }));
+        const plain = jsonBytes({
+            magic: BACKUP_MAGIC,
+            identityPriv: this.privateState ? toHex(this.privateState) : null,
+            deviceId: this.identity?.deviceId ?? null,
+            groups,
+        });
+        const salt = bytesFrom(`salt:${passphrase}`, 16);
+        const key = keystream(enc.encode(`${passphrase}:${toHex(salt)}`), plain.length);
+        return {
+            blob: xor(plain, key),
+            kdf: "argon2id",
+            kdfParams: { salt: toHex(salt), m: 65536, t: 3, p: 1 },
+            cipher: "xchacha20poly1305",
+            nonce: bytesFrom(`nonce:${passphrase}`, 24),
+            version: 1,
+        };
+    }
+    async importBackup(passphrase, backup) {
+        const salt = backup.kdfParams.salt ?? toHex(bytesFrom(`salt:${passphrase}`, 16));
+        const key = keystream(enc.encode(`${passphrase}:${salt}`), backup.blob.length);
+        const plain = xor(backup.blob, key);
+        let parsed;
+        try {
+            parsed = parseJson(plain);
+        }
+        catch {
+            throw new Error("mock: backup decrypt failed (wrong passphrase?)");
+        }
+        if (parsed.magic !== BACKUP_MAGIC) {
+            throw new Error("mock: backup decrypt failed (wrong passphrase?)");
+        }
+        if (parsed.identityPriv)
+            this.privateState = fromHex(parsed.identityPriv);
+        for (const g of parsed.groups) {
+            this.groups.set(g.id, { secret: fromHex(g.secret), epoch: BigInt(g.epoch) });
+        }
+    }
+}
+//# sourceMappingURL=mock-crypto.js.map

package/dist/esm/mock-crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock-crypto.js","sourceRoot":"","sources":["../../src/mock-crypto.ts"],"names":[],"mappings":"AA0BA,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;AAC9B,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;AAC9B,MAAM,YAAY,GAAG,sBAAsB,CAAC;AAE5C,SAAS,KAAK,CAAC,CAAa;IAC1B,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,KAAK,MAAM,CAAC,IAAI,CAAC;QAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACxD,OAAO,CAAC,CAAC;AACX,CAAC;AACD,SAAS,OAAO,CAAC,CAAS;IACxB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACtF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mGAAmG;AACnG,SAAS,SAAS,CAAC,IAAgB,EAAE,GAAW;IAC9C,IAAI,KAAK,GAAG,UAAU,KAAK,CAAC,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,IAAI;QAAE,KAAK,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QACvD,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC;QAC/B,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAClC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AACD,SAAS,SAAS,CAAC,CAAS,EAAE,GAAW;IACvC,OAAO,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACvC,CAAC;AACD,SAAS,GAAG,CAAC,IAAgB,EAAE,GAAe;IAC5C,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,GAAG,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAE,CAAC;IAC/E,OAAO,GAAG,CAAC;AACb,CAAC;AACD,SAAS,SAAS,CAAC,CAAU;IAC3B,OAAO,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AACvC,CAAC;AACD,SAAS,SAAS,CAAI,CAAa;IACjC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAM,CAAC;AACxC,CAAC;AAYD,MAAM,OAAO,oBAAoB;IAAjC;QAGU,WAAM,GAAG,IAAI,GAAG,EAAsB,CAAC,CAAC,sBAAsB;QAC9D,cAAS,GAAG,CAAC,CAAC;IAmNxB,CAAC;IAjNC,KAAK,CAAC,sBAAsB,CAAC,IAAgD;QAC3E,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAmB;YAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,kBAAkB,EAAE,SAAS,CAAC,OAAO,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC;YACzD,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,kCAAkC;YACzE,WAAW;SACZ,CAAC;QACF,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,YAAY,GAAG,SAAS,CAAC,QAAQ,IAAI,CAAC,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3D,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;IACvD,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,KAAa;QACrC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,IAAI,SAAS,CAAC;QACjD,MAAM,EAAE,GAAG,IAAI,CAAC,QAAQ,EAAE,WAAW,IAAI,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAuB,EAAE,CAAC;QACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,GAAG,GAAG,OAAO,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YAC5C,GAAG,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE,UAAU,EAAE,SAAS,CAAC,MAAM,GAAG,EAAE,EAAE,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5F,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,IAGjB;QACC,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,IAAI,SAAS,CAAC;QACjD,MAAM,UAAU,GACd,IAAI,CAAC,UAAU;YACf,SAAS,CAAC,OAAO,GAAG,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACtF,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,SAAS,CAAC,UAAU,KAAK,IAAI,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9C,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC/C,cAAc,EAAE,CAAC,CAAC,QAAQ;YAC1B,OAAO,EAAE,SAAS,CAAC;gBACjB,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC;gBACrB,KAAK,EAAE,GAAG;aACc,CAAC;SAC5B,CAAC,CAAC,CAAC;QACJ,OAAO,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,SAAS,CACb,KAAkB,EAClB,SAAuD;QAEvD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAChD,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;QACf,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC;QACvB,OAAO;YACL,MAAM,EAAE,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC;YAC9E,QAAQ,EAAE;gBACR;oBACE,cAAc,EAAE,SAAS,CAAC,QAAQ;oBAClC,OAAO,EAAE,SAAS,CAAC;wBACjB,OAAO,EAAE,KAAK;wBACd,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC;wBACxB,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE;qBACC,CAAC;iBAC5B;aACF;YACD,KAAK;SACN,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAAkB,EAAE,aAAqB;QAC1D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAChD,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;QACf,OAAO;YACL,MAAM,EAAE,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC;YACjF,QAAQ,EAAE,EAAE;YACZ,KAAK,EAAE,EAAE,CAAC,KAAK;SAChB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,KAAkB,EAClB,SAAqB;QAErB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,IAAI,SAAS,CAAC;QACpD,MAAM,EAAE,GAAG,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,MAAM,IAAI,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC;QACpD,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/D,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC1B,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QACpC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,KAAkB,EAClB,UAAsB;QAEtB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAChD,6DAA6D;QAC7D,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC;QACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC3C,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,OAAO,EAAE,CAAC;gBACnC,KAAK,EAAE,CAAC;gBACR,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;oBAChB,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;oBACZ,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,GAAG,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC3D,MAAM,CAAC,cAAc,EAAE,QAAQ,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvF,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnC,MAAM,EAAE,GAAG,SAAS,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7C,OAAO;YACL,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC;YACxB,cAAc,EAAE,cAAc,IAAI,EAAE;YACpC,KAAK,EAAE,MAAM,CAAC,QAAQ,IAAI,GAAG,CAAC;SAC/B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,OAAmB;QACtC,MAAM,CAAC,GAAG,SAAS,CAAiB,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClF,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAAkB,EAAE,MAAkB;QACxD,MAAM,CAAC,GAAG,SAAS,CAAoB,MAAM,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,EAAE;YAAE,EAAE,CAAC,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACnC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;IAClE,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,MAAmB,EAAE,SAAqB;QAC9D,2DAA2D;IAC7D,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,KAAkB;QACvC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACtC,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAChD,OAAO,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC7F,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,KAAiB;QACtC,MAAM,CAAC,GAAG,SAAS,CAAqD,KAAK,CAAC,CAAC;QAC/E,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClF,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,UAAkB;QACnC,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;YAC3D,EAAE;YACF,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC;YACxB,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE;SAC3B,CAAC,CAAC,CAAC;QACJ,MAAM,KAAK,GAAG,SAAS,CAAC;YACtB,KAAK,EAAE,YAAY;YACnB,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI;YACjE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,IAAI,IAAI;YACzC,MAAM;SACP,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,UAAU,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAChF,OAAO;YACL,IAAI,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC;YACrB,GAAG,EAAE,UAAU;YACf,SAAS,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE;YACtD,MAAM,EAAE,mBAAmB;YAC3B,KAAK,EAAE,SAAS,CAAC,SAAS,UAAU,EAAE,EAAE,EAAE,CAAC;YAC3C,OAAO,EAAE,CAAC;SACX,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,UAAkB,EAAE,MAAwB;QAC7D,MAAM,IAAI,GACP,MAAM,CAAC,SAA+B,CAAC,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC,QAAQ,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAC7F,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,UAAU,IAAI,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/E,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACpC,IAAI,MAKH,CAAC;QACF,IAAI,CAAC;YACH,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,MAAM,CAAC,KAAK,KAAK,YAAY,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,MAAM,CAAC,YAAY;YAAE,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC1E,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;CACF"}

package/dist/esm/testing.d.ts

@@ -0,0 +1 @@
+export { MockSecureChatCrypto } from "./mock-crypto";

package/dist/esm/testing.js

@@ -0,0 +1,6 @@
+// @agora-sdk/secure-chat-crypto/testing — the deterministic mock, kept off the main entry.
+//
+// NOT cryptographically secure. Use it in tests and early UI work (and the agora-server integration
+// suite consumes it from here). Never ship it as production crypto.
+export { MockSecureChatCrypto } from "./mock-crypto";
+//# sourceMappingURL=testing.js.map

package/dist/esm/testing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"testing.js","sourceRoot":"","sources":["../../src/testing.ts"],"names":[],"mappings":"AAAA,2FAA2F;AAC3F,EAAE;AACF,oGAAoG;AACpG,oEAAoE;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC"}

package/package.json

@@ -0,0 +1,54 @@
+{
+  "name": "@agora-sdk/secure-chat-crypto",
+  "version": "0.1.1",
+  "private": false,
+  "license": "Apache-2.0",
+  "author": "Agora SDK Plus, maintained by Jenova Marie",
+  "description": "The SecureChatCrypto seam for Agora end-to-end-encrypted chat (MLS / RFC 9420): the client crypto interface + a deterministic mock. Dependency-free; the real ts-mls/OpenMLS cores plug in behind the interface.",
+  "keywords": [
+    "agora",
+    "secure-chat",
+    "e2ee",
+    "mls",
+    "rfc9420",
+    "crypto",
+    "typescript"
+  ],
+  "bugs": {
+    "url": "https://github.com/jenova-marie/agora-sdk-plus/issues"
+  },
+  "homepage": "https://github.com/jenova-marie/agora-sdk-plus",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/jenova-marie/agora-sdk-plus.git",
+    "directory": "packages/secure-chat/crypto"
+  },
+  "main": "dist/cjs/index.js",
+  "module": "dist/esm/index.js",
+  "types": "dist/esm/index.d.ts",
+  "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/esm/index.d.ts",
+      "import": "./dist/esm/index.js",
+      "require": "./dist/cjs/index.js"
+    },
+    "./testing": {
+      "types": "./dist/esm/testing.d.ts",
+      "import": "./dist/esm/testing.js",
+      "require": "./dist/cjs/testing.js"
+    }
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build:esm": "tsc -p tsconfig.esm.json",
+    "build:cjs": "tsc -p tsconfig.cjs.json",
+    "build": "rimraf dist && pnpm run build:esm && pnpm run build:cjs",
+    "prepublish": "pnpm run build"
+  }
+}