@arbidocs/client 0.4.71 → 0.4.73

package/dist/index.js

@@ -285,6 +285,66 @@ async function decryptMessage(encryptedBase64, senderPublicKeyBase64, recipientP
   );
   return sodium.to_string(decrypted);
 }
+var CALL_KEY_BYTES = 32;
+async function generateCallKey() {
+  await initSodium();
+  return sodium.randombytes_buf(CALL_KEY_BYTES);
+}
+async function sealCallKey(key, recipientPublicKeyBase64) {
+  await initSodium();
+  return bytesToBase64(sodium.crypto_box_seal(key, base64ToBytes(recipientPublicKeyBase64)));
+}
+async function openSealedCallKey(sealedBase64, encryptionSecretKey) {
+  await initSodium();
+  const key = sealedBoxDecrypt(sealedBase64, encryptionSecretKey);
+  if (key.length !== CALL_KEY_BYTES) throw new Error("Sealed call key has the wrong length");
+  return key;
+}
+async function encryptCallTitle(title, key) {
+  await initSodium();
+  const nonce = sodium.randombytes_buf(sodium.crypto_secretbox_NONCEBYTES);
+  const box = sodium.crypto_secretbox_easy(sodium.from_string(title), nonce, key);
+  const out = new Uint8Array(nonce.length + box.length);
+  out.set(nonce, 0);
+  out.set(box, nonce.length);
+  return bytesToBase64(out);
+}
+async function decryptCallTitle(ciphertext, key) {
+  await initSodium();
+  try {
+    const raw = base64ToBytes(ciphertext);
+    const nonce = raw.slice(0, sodium.crypto_secretbox_NONCEBYTES);
+    const box = raw.slice(sodium.crypto_secretbox_NONCEBYTES);
+    return sodium.to_string(sodium.crypto_secretbox_open_easy(box, nonce, key));
+  } catch {
+    return null;
+  }
+}
+function encodeCallKey(key) {
+  return bytesToBase64(key).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+function decodeCallKey(encoded) {
+  if (!/^[A-Za-z0-9_-]+$/.test(encoded)) return null;
+  const b64 = encoded.replace(/-/g, "+").replace(/_/g, "/");
+  try {
+    const key = base64ToBytes(b64 + "=".repeat((4 - b64.length % 4) % 4));
+    return key.length === CALL_KEY_BYTES ? key : null;
+  } catch {
+    return null;
+  }
+}
+function buildCallFragment(key, linkVersion) {
+  return `k=${encodeCallKey(key)}&v=${linkVersion}`;
+}
+function parseCallFragment(hash) {
+  const params = new URLSearchParams(hash.replace(/^#/, ""));
+  const encoded = params.get("k");
+  if (!encoded) return null;
+  const key = decodeCallKey(encoded);
+  if (!key) return null;
+  const v = Number(params.get("v"));
+  return { key, linkVersion: Number.isInteger(v) && v > 0 ? v : null };
+}
 
 // src/crypto/keypairs.ts
 async function generateUserKeypairs(username, password, deploymentDomain) {
@@ -1014,7 +1074,8 @@ async function performLogin(request, signingPrivateKey, deps) {
       familyName: data.user.family_name ?? null,
       picture: data.user.picture ?? null,
       email: data.user.email ?? request.email,
-      isSso: data.user.is_sso === true
+      isSso: data.user.is_sso === true,
+      isIdentityVerified: data.user.is_identity_verified === true
     },
     signingPrivateKey,
     serverSessionKey
@@ -1455,6 +1516,6 @@ function isMessageType(msg, type) {
   return msg.type === type;
 }
 
-export { API_PREFIX, base64Decode, base64Encode, base64ToBytes, buildWebSocketUrl, bytesToBase64, canPersistSession, changePasswordWithRekey, clearAllData, clearSession, computeSharedSecret, createArbiClient, createAuthMessage, createAutoReloginMiddleware, createBearerAuthMiddleware, createContentHash, createReloginHandler, createSessionManager, createWorkspaceReopener, decryptFile, decryptMessage, decryptMessageWithSharedSecret, deriveEncryptionKeypairFromSigning, derivePublicKey, encryptFile, encryptMessage, encryptMessageWithSharedSecret, generateKeyPairs, generateLoginCredentials, generateLoginCredentialsFromKey, generatePasswordChangeCredentials, generateRandomSigningKeypair, generateRecoveryPasswordChangeCredentials, generateRegistrationCredentials, generateUserKeypairs, getSession, getUserEncryptionKeypair, hasSession, initSodium, initializeDatabase, isMessageType, parseServerMessage, passwordChangeErrorMessage, prewarmKeyPairs, saveSession, sealKeyForSession, sealedBoxDecrypt, sealedBoxEncrypt, signMessage, updateSigningPrivateKey };
+export { API_PREFIX, CALL_KEY_BYTES, base64Decode, base64Encode, base64ToBytes, buildCallFragment, buildWebSocketUrl, bytesToBase64, canPersistSession, changePasswordWithRekey, clearAllData, clearSession, computeSharedSecret, createArbiClient, createAuthMessage, createAutoReloginMiddleware, createBearerAuthMiddleware, createContentHash, createReloginHandler, createSessionManager, createWorkspaceReopener, decodeCallKey, decryptCallTitle, decryptFile, decryptMessage, decryptMessageWithSharedSecret, deriveEncryptionKeypairFromSigning, derivePublicKey, encodeCallKey, encryptCallTitle, encryptFile, encryptMessage, encryptMessageWithSharedSecret, generateCallKey, generateKeyPairs, generateLoginCredentials, generateLoginCredentialsFromKey, generatePasswordChangeCredentials, generateRandomSigningKeypair, generateRecoveryPasswordChangeCredentials, generateRegistrationCredentials, generateUserKeypairs, getSession, getUserEncryptionKeypair, hasSession, initSodium, initializeDatabase, isMessageType, openSealedCallKey, parseCallFragment, parseServerMessage, passwordChangeErrorMessage, prewarmKeyPairs, saveSession, sealCallKey, sealKeyForSession, sealedBoxDecrypt, sealedBoxEncrypt, signMessage, updateSigningPrivateKey };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map