@arbidocs/client 0.4.70 → 0.4.72

package/dist/index.cjs

@@ -292,6 +292,66 @@ async function decryptMessage(encryptedBase64, senderPublicKeyBase64, recipientP
   );
   return sodium__default.default.to_string(decrypted);
 }
+var CALL_KEY_BYTES = 32;
+async function generateCallKey() {
+  await initSodium();
+  return sodium__default.default.randombytes_buf(CALL_KEY_BYTES);
+}
+async function sealCallKey(key, recipientPublicKeyBase64) {
+  await initSodium();
+  return bytesToBase64(sodium__default.default.crypto_box_seal(key, base64ToBytes(recipientPublicKeyBase64)));
+}
+async function openSealedCallKey(sealedBase64, encryptionSecretKey) {
+  await initSodium();
+  const key = sealedBoxDecrypt(sealedBase64, encryptionSecretKey);
+  if (key.length !== CALL_KEY_BYTES) throw new Error("Sealed call key has the wrong length");
+  return key;
+}
+async function encryptCallTitle(title, key) {
+  await initSodium();
+  const nonce = sodium__default.default.randombytes_buf(sodium__default.default.crypto_secretbox_NONCEBYTES);
+  const box = sodium__default.default.crypto_secretbox_easy(sodium__default.default.from_string(title), nonce, key);
+  const out = new Uint8Array(nonce.length + box.length);
+  out.set(nonce, 0);
+  out.set(box, nonce.length);
+  return bytesToBase64(out);
+}
+async function decryptCallTitle(ciphertext, key) {
+  await initSodium();
+  try {
+    const raw = base64ToBytes(ciphertext);
+    const nonce = raw.slice(0, sodium__default.default.crypto_secretbox_NONCEBYTES);
+    const box = raw.slice(sodium__default.default.crypto_secretbox_NONCEBYTES);
+    return sodium__default.default.to_string(sodium__default.default.crypto_secretbox_open_easy(box, nonce, key));
+  } catch {
+    return null;
+  }
+}
+function encodeCallKey(key) {
+  return bytesToBase64(key).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+function decodeCallKey(encoded) {
+  if (!/^[A-Za-z0-9_-]+$/.test(encoded)) return null;
+  const b64 = encoded.replace(/-/g, "+").replace(/_/g, "/");
+  try {
+    const key = base64ToBytes(b64 + "=".repeat((4 - b64.length % 4) % 4));
+    return key.length === CALL_KEY_BYTES ? key : null;
+  } catch {
+    return null;
+  }
+}
+function buildCallFragment(key, linkVersion) {
+  return `k=${encodeCallKey(key)}&v=${linkVersion}`;
+}
+function parseCallFragment(hash) {
+  const params = new URLSearchParams(hash.replace(/^#/, ""));
+  const encoded = params.get("k");
+  if (!encoded) return null;
+  const key = decodeCallKey(encoded);
+  if (!key) return null;
+  const v = Number(params.get("v"));
+  return { key, linkVersion: Number.isInteger(v) && v > 0 ? v : null };
+}
 
 // src/crypto/keypairs.ts
 async function generateUserKeypairs(username, password, deploymentDomain) {
@@ -1021,7 +1081,8 @@ async function performLogin(request, signingPrivateKey, deps) {
       familyName: data.user.family_name ?? null,
       picture: data.user.picture ?? null,
       email: data.user.email ?? request.email,
-      isSso: data.user.is_sso === true
+      isSso: data.user.is_sso === true,
+      isIdentityVerified: data.user.is_identity_verified === true
     },
     signingPrivateKey,
     serverSessionKey
@@ -1463,9 +1524,11 @@ function isMessageType(msg, type) {
 }
 
 exports.API_PREFIX = API_PREFIX;
+exports.CALL_KEY_BYTES = CALL_KEY_BYTES;
 exports.base64Decode = base64Decode;
 exports.base64Encode = base64Encode;
 exports.base64ToBytes = base64ToBytes;
+exports.buildCallFragment = buildCallFragment;
 exports.buildWebSocketUrl = buildWebSocketUrl;
 exports.bytesToBase64 = bytesToBase64;
 exports.canPersistSession = canPersistSession;
@@ -1481,14 +1544,19 @@ exports.createContentHash = createContentHash;
 exports.createReloginHandler = createReloginHandler;
 exports.createSessionManager = createSessionManager;
 exports.createWorkspaceReopener = createWorkspaceReopener;
+exports.decodeCallKey = decodeCallKey;
+exports.decryptCallTitle = decryptCallTitle;
 exports.decryptFile = decryptFile;
 exports.decryptMessage = decryptMessage;
 exports.decryptMessageWithSharedSecret = decryptMessageWithSharedSecret;
 exports.deriveEncryptionKeypairFromSigning = deriveEncryptionKeypairFromSigning;
 exports.derivePublicKey = derivePublicKey;
+exports.encodeCallKey = encodeCallKey;
+exports.encryptCallTitle = encryptCallTitle;
 exports.encryptFile = encryptFile;
 exports.encryptMessage = encryptMessage;
 exports.encryptMessageWithSharedSecret = encryptMessageWithSharedSecret;
+exports.generateCallKey = generateCallKey;
 exports.generateKeyPairs = generateKeyPairs;
 exports.generateLoginCredentials = generateLoginCredentials;
 exports.generateLoginCredentialsFromKey = generateLoginCredentialsFromKey;
@@ -1503,10 +1571,13 @@ exports.hasSession = hasSession;
 exports.initSodium = initSodium;
 exports.initializeDatabase = initializeDatabase;
 exports.isMessageType = isMessageType;
+exports.openSealedCallKey = openSealedCallKey;
+exports.parseCallFragment = parseCallFragment;
 exports.parseServerMessage = parseServerMessage;
 exports.passwordChangeErrorMessage = passwordChangeErrorMessage;
 exports.prewarmKeyPairs = prewarmKeyPairs;
 exports.saveSession = saveSession;
+exports.sealCallKey = sealCallKey;
 exports.sealKeyForSession = sealKeyForSession;
 exports.sealedBoxDecrypt = sealedBoxDecrypt;
 exports.sealedBoxEncrypt = sealedBoxEncrypt;