@arbidocs/client 0.4.108 → 0.4.110

package/dist/index.js

@@ -345,6 +345,41 @@ function parseCallFragment(hash) {
   const v = Number(params.get("v"));
   return { key, linkVersion: Number.isInteger(v) && v > 0 ? v : null };
 }
+var CHAT_KEY_BYTES = 32;
+async function deriveDirectChatKey(peerPublicKeyBase64, mySecretKey) {
+  await initSodium();
+  return sodium.crypto_box_beforenm(base64ToBytes(peerPublicKeyBase64), mySecretKey);
+}
+async function generateChatKey() {
+  await initSodium();
+  return sodium.randombytes_buf(CHAT_KEY_BYTES);
+}
+async function sealChatKey(key, publicKeyBase64) {
+  await initSodium();
+  return bytesToBase64(sodium.crypto_box_seal(key, base64ToBytes(publicKeyBase64)));
+}
+async function openSealedChatKey(sealedBase64, mySecretKey) {
+  await initSodium();
+  const key = sealedBoxDecrypt(sealedBase64, mySecretKey);
+  if (key.length !== CHAT_KEY_BYTES) throw new Error("Sealed chat key has the wrong length");
+  return key;
+}
+async function encryptWithChatKey(plaintext, key) {
+  await initSodium();
+  const nonce = sodium.randombytes_buf(sodium.crypto_secretbox_NONCEBYTES);
+  const box = sodium.crypto_secretbox_easy(sodium.from_string(plaintext), nonce, key);
+  const out = new Uint8Array(nonce.length + box.length);
+  out.set(nonce, 0);
+  out.set(box, nonce.length);
+  return bytesToBase64(out);
+}
+async function decryptWithChatKey(ciphertext, key) {
+  await initSodium();
+  const raw = base64ToBytes(ciphertext);
+  const nonce = raw.slice(0, sodium.crypto_secretbox_NONCEBYTES);
+  const box = raw.slice(sodium.crypto_secretbox_NONCEBYTES);
+  return sodium.to_string(sodium.crypto_secretbox_open_easy(box, nonce, key));
+}
 
 // src/crypto/keypairs.ts
 async function generateUserKeypairs(username, password, deploymentDomain) {
@@ -1419,6 +1454,6 @@ function isMessageType(msg, type) {
   return msg.type === type;
 }
 
-export { API_PREFIX, CALL_KEY_BYTES, base64Decode, base64Encode, base64ToBytes, buildCallFragment, buildWebSocketUrl, bytesToBase64, canPersistSession, changePassword, clearAllData, clearSession, computeSharedSecret, createArbiClient, createAuthMessage, createAutoReloginMiddleware, createBearerAuthMiddleware, createContentHash, createReloginHandler, createSessionManager, createWorkspaceReopener, decodeCallKey, decryptCallTitle, decryptFile, decryptMessage, decryptMessageWithSharedSecret, deriveEncryptionKeypairFromSigning, derivePublicKey, encodeCallKey, encryptCallTitle, encryptFile, encryptMessage, encryptMessageWithSharedSecret, generateCallKey, generateIdentityKeypair, generateKeyPairs, generateLoginCredentials, generateLoginCredentialsFromKey, generatePasswordChangeCredentials, generateRandomSigningKeypair, generateRegistrationCredentials, generateUserKeypairs, getSession, getUserEncryptionKeypair, hasSession, identityFromLoginResponse, initSodium, initializeDatabase, isMessageType, openSealedCallKey, parseCallFragment, parseServerMessage, passwordChangeErrorMessage, prewarmKeyPairs, saveSession, sealCallKey, sealKeyForSession, sealedBoxDecrypt, sealedBoxEncrypt, signMessage, unlockIdentityWithPassword, unwrapIdentityKey, updateWrappedIdentityKey, wrapIdentityKey };
+export { API_PREFIX, CALL_KEY_BYTES, CHAT_KEY_BYTES, base64Decode, base64Encode, base64ToBytes, buildCallFragment, buildWebSocketUrl, bytesToBase64, canPersistSession, changePassword, clearAllData, clearSession, computeSharedSecret, createArbiClient, createAuthMessage, createAutoReloginMiddleware, createBearerAuthMiddleware, createContentHash, createReloginHandler, createSessionManager, createWorkspaceReopener, decodeCallKey, decryptCallTitle, decryptFile, decryptMessage, decryptMessageWithSharedSecret, decryptWithChatKey, deriveDirectChatKey, deriveEncryptionKeypairFromSigning, derivePublicKey, encodeCallKey, encryptCallTitle, encryptFile, encryptMessage, encryptMessageWithSharedSecret, encryptWithChatKey, generateCallKey, generateChatKey, generateIdentityKeypair, generateKeyPairs, generateLoginCredentials, generateLoginCredentialsFromKey, generatePasswordChangeCredentials, generateRandomSigningKeypair, generateRegistrationCredentials, generateUserKeypairs, getSession, getUserEncryptionKeypair, hasSession, identityFromLoginResponse, initSodium, initializeDatabase, isMessageType, openSealedCallKey, openSealedChatKey, parseCallFragment, parseServerMessage, passwordChangeErrorMessage, prewarmKeyPairs, saveSession, sealCallKey, sealChatKey, sealKeyForSession, sealedBoxDecrypt, sealedBoxEncrypt, signMessage, unlockIdentityWithPassword, unwrapIdentityKey, updateWrappedIdentityKey, wrapIdentityKey };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map