@anycon/protocol 0.1.0

package/wasm/anycon_crypto.d.ts

@@ -0,0 +1,248 @@
+/* tslint:disable */
+/* eslint-disable */
+
+/**
+ * 一方的 CPace 状态。新设备用 `"initiator"`。`finish` 会消费本对象（之后再碰会抛 null pointer 错误）。
+ */
+export class WasmCpace {
+    free(): void;
+    [Symbol.dispose](): void;
+    /**
+     * 用对方的份额得到 32 字节 PSK。份额不合法时抛 `invalid key`。
+     */
+    finish(role: string, peerShare: Uint8Array): Uint8Array;
+    /**
+     * `prs`：口令的 `deriveEnrollPasswordPrs`，或规范化后 6 位码的 ASCII 字节；`ci`：`enrollChannelId`；`sid`：`enrollSid`。
+     */
+    constructor(prs: Uint8Array, ci: Uint8Array, sid: Uint8Array);
+    /**
+     * 自己的份额（32 字节），发给对方。
+     */
+    readonly share: Uint8Array;
+}
+
+/**
+ * 进行中的握手。
+ */
+export class WasmHandshake {
+    private constructor();
+    free(): void;
+    [Symbol.dispose](): void;
+    /**
+     * 握手完成后换成传输通道。会消费本对象。
+     */
+    intoTransport(): WasmTransport;
+    isFinished(): boolean;
+    isMyTurn(): boolean;
+    /**
+     * 配对握手（XXpsk3）。joiner 传 `"initiator"`，host 传 `"responder"`。
+     */
+    static pairing(role: string, kp: WasmKeypair, psk: Uint8Array): WasmHandshake;
+    /**
+     * 读对方的握手消息，返回对方带的 payload。
+     */
+    read(message: Uint8Array): Uint8Array;
+    /**
+     * 重连握手（IK）。initiator 必须传 `remotePublic`；responder 不传（或传期望的 initiator 公钥做钉扎）。
+     */
+    static reconnect(role: string, kp: WasmKeypair, remotePublic?: Uint8Array | null): WasmHandshake;
+    /**
+     * 对方静态公钥；还不知道时是 `undefined`。
+     */
+    remotePublic(): Uint8Array | undefined;
+    /**
+     * 写下一条握手消息，返回要发给对方的字节。
+     */
+    write(payload: Uint8Array): Uint8Array;
+}
+
+/**
+ * X25519 静态密钥对。
+ */
+export class WasmKeypair {
+    private constructor();
+    free(): void;
+    [Symbol.dispose](): void;
+    /**
+     * 由 32 字节私钥还原。
+     */
+    static fromSecret(secret: Uint8Array): WasmKeypair;
+    /**
+     * 用 `crypto.getRandomValues` 生成新密钥对。
+     */
+    static generate(): WasmKeypair;
+    readonly public: Uint8Array;
+    readonly secret: Uint8Array;
+}
+
+/**
+ * 一次 Argon2id 得到的 `matchId` + `psk`。用完 `.free()`（PSK 会被清零）。
+ */
+export class WasmPairSecrets {
+    private constructor();
+    free(): void;
+    [Symbol.dispose](): void;
+    readonly matchId: string;
+    /**
+     * 32 字节 PSK 的拷贝，调用方用完 `fill(0)`。
+     */
+    readonly psk: Uint8Array;
+}
+
+/**
+ * 握手完成后的双向加密通道。
+ */
+export class WasmTransport {
+    private constructor();
+    free(): void;
+    [Symbol.dispose](): void;
+    decrypt(ciphertext: Uint8Array): Uint8Array;
+    /**
+     * 加密任意长度明文；超过 65519 字节自动分片（`[u16 be 长度][密文]` 拼接）。
+     */
+    encrypt(plaintext: Uint8Array): Uint8Array;
+    remotePublic(): Uint8Array;
+}
+
+/**
+ * 节点口令 → CPace 的口令输入：`Argon2id(NFC(口令), salt)`，浏览器里约 0.5–1 s。`salt` 必须是 16 字节。
+ */
+export function deriveEnrollPasswordPrs(password: string, salt: Uint8Array): Uint8Array;
+
+/**
+ * 扫码接入的 PSK。`secret` 必须是 32 字节。
+ */
+export function deriveEnrollScanPsk(secret: Uint8Array, nodeId: string): Uint8Array;
+
+/**
+ * 短码 → hub 撮合用的 match id（一次完整 KDF）。
+ */
+export function deriveMatchId(code: string): string;
+
+/**
+ * 短码 → `{ matchId, psk }`，一次 KDF（Argon2id，64 MiB × 3 轮，浏览器里约 0.5–1 s）。
+ * 配对时用它，不要分别调 `deriveMatchId` 和 `derivePsk`（会算两次）。短码无效时抛 `invalid pair code`。
+ */
+export function derivePairSecrets(code: string): WasmPairSecrets;
+
+/**
+ * 短码 → 32 字节 PSK（一次完整 KDF）。短码无效时抛 `invalid pair code`。
+ */
+export function derivePsk(code: string): Uint8Array;
+
+/**
+ * CPace 信道标识。`method` 是 `"code"` 或 `"password"`。
+ */
+export function enrollChannelId(nodeId: string, method: string): Uint8Array;
+
+/**
+ * CPace 会话标识：新设备的 nonce ‖ daemon 的 nonce。
+ */
+export function enrollSid(initiatorNonce: Uint8Array, responderNonce: Uint8Array): Uint8Array;
+
+/**
+ * 公钥指纹，如 `3f:a2:…`（8 字节）。公钥必须是 32 字节。
+ */
+export function fingerprint(_public: Uint8Array): string;
+
+/**
+ * 16 字节随机数（`EnrollHello.nonce`）。
+ */
+export function generateEnrollNonce(): Uint8Array;
+
+/**
+ * 32 字节扫码密钥（放进二维码）。
+ */
+export function generateEnrollSecret(): Uint8Array;
+
+/**
+ * 生成 `XXXX-XXXX` 形式的 8 位短码。
+ */
+export function generatePairCode(): string;
+
+export function generatePairCodeLong(): string;
+
+export function normalizeCode(code: string): string;
+
+/**
+ * 接入码规范化：去掉空白和 `-`，必须是 6 个数字，否则抛 `invalid pair code`。
+ */
+export function normalizeEnrollCode(code: string): string;
+
+/**
+ * 节点口令校验（设置时用）：NFC 之后至少 8 个字符，否则抛 `enroll password too short`。
+ */
+export function validateEnrollPassword(password: string): void;
+
+export type InitInput = RequestInfo | URL | Response | BufferSource | WebAssembly.Module;
+
+export interface InitOutput {
+    readonly memory: WebAssembly.Memory;
+    readonly __wbg_wasmcpace_free: (a: number, b: number) => void;
+    readonly __wbg_wasmhandshake_free: (a: number, b: number) => void;
+    readonly __wbg_wasmkeypair_free: (a: number, b: number) => void;
+    readonly __wbg_wasmpairsecrets_free: (a: number, b: number) => void;
+    readonly __wbg_wasmtransport_free: (a: number, b: number) => void;
+    readonly deriveEnrollPasswordPrs: (a: number, b: number, c: number, d: number, e: number) => void;
+    readonly deriveEnrollScanPsk: (a: number, b: number, c: number, d: number, e: number) => void;
+    readonly deriveMatchId: (a: number, b: number, c: number) => void;
+    readonly derivePairSecrets: (a: number, b: number, c: number) => void;
+    readonly derivePsk: (a: number, b: number, c: number) => void;
+    readonly enrollChannelId: (a: number, b: number, c: number, d: number, e: number) => void;
+    readonly enrollSid: (a: number, b: number, c: number, d: number, e: number) => void;
+    readonly fingerprint: (a: number, b: number, c: number) => void;
+    readonly generateEnrollNonce: (a: number) => void;
+    readonly generateEnrollSecret: (a: number) => void;
+    readonly generatePairCode: (a: number) => void;
+    readonly generatePairCodeLong: (a: number) => void;
+    readonly normalizeCode: (a: number, b: number, c: number) => void;
+    readonly normalizeEnrollCode: (a: number, b: number, c: number) => void;
+    readonly validateEnrollPassword: (a: number, b: number, c: number) => void;
+    readonly wasmcpace_finish: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
+    readonly wasmcpace_new: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => void;
+    readonly wasmcpace_share: (a: number, b: number) => void;
+    readonly wasmhandshake_intoTransport: (a: number, b: number) => void;
+    readonly wasmhandshake_isFinished: (a: number) => number;
+    readonly wasmhandshake_isMyTurn: (a: number) => number;
+    readonly wasmhandshake_pairing: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
+    readonly wasmhandshake_read: (a: number, b: number, c: number, d: number) => void;
+    readonly wasmhandshake_reconnect: (a: number, b: number, c: number, d: number, e: number, f: number) => void;
+    readonly wasmhandshake_remotePublic: (a: number, b: number) => void;
+    readonly wasmhandshake_write: (a: number, b: number, c: number, d: number) => void;
+    readonly wasmkeypair_fromSecret: (a: number, b: number, c: number) => void;
+    readonly wasmkeypair_generate: () => number;
+    readonly wasmkeypair_public: (a: number, b: number) => void;
+    readonly wasmkeypair_secret: (a: number, b: number) => void;
+    readonly wasmpairsecrets_matchId: (a: number, b: number) => void;
+    readonly wasmpairsecrets_psk: (a: number, b: number) => void;
+    readonly wasmtransport_decrypt: (a: number, b: number, c: number, d: number) => void;
+    readonly wasmtransport_encrypt: (a: number, b: number, c: number, d: number) => void;
+    readonly wasmtransport_remotePublic: (a: number, b: number) => void;
+    readonly __wbindgen_export: (a: number) => void;
+    readonly __wbindgen_add_to_stack_pointer: (a: number) => number;
+    readonly __wbindgen_export2: (a: number, b: number) => number;
+    readonly __wbindgen_export3: (a: number, b: number, c: number, d: number) => number;
+    readonly __wbindgen_export4: (a: number, b: number, c: number) => void;
+}
+
+export type SyncInitInput = BufferSource | WebAssembly.Module;
+
+/**
+ * Instantiates the given `module`, which can either be bytes or
+ * a precompiled `WebAssembly.Module`.
+ *
+ * @param {{ module: SyncInitInput }} module - Passing `SyncInitInput` directly is deprecated.
+ *
+ * @returns {InitOutput}
+ */
+export function initSync(module: { module: SyncInitInput } | SyncInitInput): InitOutput;
+
+/**
+ * If `module_or_path` is {RequestInfo} or {URL}, makes a request and
+ * for everything else, calls `WebAssembly.instantiate` directly.
+ *
+ * @param {{ module_or_path: InitInput | Promise<InitInput> }} module_or_path - Passing `InitInput` directly is deprecated.
+ *
+ * @returns {Promise<InitOutput>}
+ */
+export default function __wbg_init (module_or_path?: { module_or_path: InitInput | Promise<InitInput> } | InitInput | Promise<InitInput>): Promise<InitOutput>;