@book.dev/sdk 1.60.0

package/dist/forwarding/challenge.d.ts

@@ -0,0 +1,35 @@
+export declare const ATTACH_MESSAGE_VERSION = "openbook.attach.v1";
+/** Default freshness window for a signed attach (ms). */
+export declare const ATTACH_SKEW_MS: number;
+export interface AttachClaim {
+    siteId: string;
+    region: string;
+    nonce: string;
+    /** epoch millis the desktop stamped when signing. */
+    ts: number;
+}
+/**
+ * The exact bytes both sides sign/verify. Order and separators are fixed so the
+ * desktop and relay never disagree about the message.
+ */
+export declare function buildAttachMessage(claim: AttachClaim): string;
+export declare const REATTACH_MESSAGE_VERSION = "openbook.reattach.v1";
+/**
+ * The message a desktop signs to reattach to its existing site by proving key
+ * possession (keyed on the public key, since the client may know its key before
+ * its site id). Distinct from the tunnel-attach message so a signature for one
+ * can never be replayed as the other.
+ */
+export declare function buildReattachMessage(claim: {
+    publicKey: string;
+    nonce: string;
+    ts: number;
+}): string;
+export declare const RELAY_ATTACH_VERSION = "openbook.relay.v1";
+/** The message a desktop signs against the relay's connection nonce — the relay's
+ *  own per-connection key proof, on top of verifying the account-issued ticket. */
+export declare function buildRelayAttachMessage(nonce: string): string;
+/** A single-use, high-entropy challenge nonce. */
+export declare function newNonce(): string;
+/** Reject stamps too far from now in either direction (clock skew tolerant). */
+export declare function isFreshTimestamp(ts: number, now?: number, skewMs?: number): boolean;

package/dist/forwarding/challenge.js

@@ -0,0 +1,45 @@
+// The site-key half of the double-gated tunnel attach.
+//
+// To attach, the desktop must present BOTH a valid account.book.pub principal AND
+// a fresh signature from the site's device private key over a server-issued
+// challenge. The relay mints a nonce (stored in Redis, single-use), the desktop
+// signs the canonical attach message, and the relay verifies it against the Site
+// row's public key. The nonce + timestamp window stop replay.
+import { b64uEncode } from './encoding';
+export const ATTACH_MESSAGE_VERSION = 'openbook.attach.v1';
+/** Default freshness window for a signed attach (ms). */
+export const ATTACH_SKEW_MS = 2 * 60 * 1000;
+/**
+ * The exact bytes both sides sign/verify. Order and separators are fixed so the
+ * desktop and relay never disagree about the message.
+ */
+export function buildAttachMessage(claim) {
+    return [ATTACH_MESSAGE_VERSION, claim.siteId, claim.region, claim.nonce, claim.ts].join(':');
+}
+export const REATTACH_MESSAGE_VERSION = 'openbook.reattach.v1';
+/**
+ * The message a desktop signs to reattach to its existing site by proving key
+ * possession (keyed on the public key, since the client may know its key before
+ * its site id). Distinct from the tunnel-attach message so a signature for one
+ * can never be replayed as the other.
+ */
+export function buildReattachMessage(claim) {
+    return [REATTACH_MESSAGE_VERSION, claim.publicKey, claim.nonce, claim.ts].join(':');
+}
+export const RELAY_ATTACH_VERSION = 'openbook.relay.v1';
+/** The message a desktop signs against the relay's connection nonce — the relay's
+ *  own per-connection key proof, on top of verifying the account-issued ticket. */
+export function buildRelayAttachMessage(nonce) {
+    return `${RELAY_ATTACH_VERSION}:${nonce}`;
+}
+/** A single-use, high-entropy challenge nonce. */
+export function newNonce() {
+    const bytes = new Uint8Array(18);
+    crypto.getRandomValues(bytes);
+    return b64uEncode(bytes);
+}
+/** Reject stamps too far from now in either direction (clock skew tolerant). */
+export function isFreshTimestamp(ts, now = Date.now(), skewMs = ATTACH_SKEW_MS) {
+    return Number.isFinite(ts) && Math.abs(now - ts) <= skewMs;
+}
+//# sourceMappingURL=challenge.js.map

package/dist/forwarding/challenge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"challenge.js","sourceRoot":"","sources":["../../src/forwarding/challenge.ts"],"names":[],"mappings":"AAAA,uDAAuD;AACvD,EAAE;AACF,kFAAkF;AAClF,4EAA4E;AAC5E,gFAAgF;AAChF,iFAAiF;AACjF,8DAA8D;AAE9D,OAAO,EAAC,UAAU,EAAC,MAAM,YAAY,CAAC;AAEtC,MAAM,CAAC,MAAM,sBAAsB,GAAG,oBAAoB,CAAC;AAE3D,yDAAyD;AACzD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAU5C;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAkB;IACnD,OAAO,CAAC,sBAAsB,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC/F,CAAC;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAG,sBAAsB,CAAC;AAE/D;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAqD;IACxF,OAAO,CAAC,wBAAwB,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACtF,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,mBAAmB,CAAC;AAExD;mFACmF;AACnF,MAAM,UAAU,uBAAuB,CAAC,KAAa;IACnD,OAAO,GAAG,oBAAoB,IAAI,KAAK,EAAE,CAAC;AAC5C,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,QAAQ;IACtB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IACjC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC9B,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,gBAAgB,CAAC,EAAU,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE,EAAE,SAAiB,cAAc;IACpG,OAAO,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,EAAE,CAAC,IAAI,MAAM,CAAC;AAC7D,CAAC"}

package/dist/forwarding/encoding.d.ts

@@ -0,0 +1,14 @@
+export declare function utf8(s: string): Uint8Array<ArrayBuffer>;
+export declare function fromUtf8(bytes: Uint8Array): string;
+/** Base64url-encode bytes (RFC 4648 §5, no padding). */
+export declare function b64uEncode(bytes: Uint8Array): string;
+/** Decode a base64url string back to bytes. Tolerates missing padding. */
+export declare function b64uDecode(s: string): Uint8Array<ArrayBuffer>;
+export declare function b64uEncodeString(s: string): string;
+export declare function b64uDecodeString(s: string): string;
+export declare function bytesToHex(bytes: Uint8Array): string;
+/**
+ * Constant-time string compare for secrets/MACs. Always walks the full length of
+ * the longer input so timing doesn't leak where two values diverge.
+ */
+export declare function timingSafeEqual(a: string, b: string): boolean;

package/dist/forwarding/encoding.js

@@ -0,0 +1,54 @@
+// Small, dependency-free encoding helpers. We avoid Node's `Buffer` so this
+// module runs unchanged on Node, the Vercel edge runtime, and the browser.
+const enc = new TextEncoder();
+const dec = new TextDecoder();
+// Returns an ArrayBuffer-backed view (not SharedArrayBuffer) so the bytes satisfy
+// Web Crypto's `BufferSource` under TS 6's stricter typed-array generics.
+export function utf8(s) {
+    const out = new Uint8Array(s.length * 3);
+    const { written } = enc.encodeInto(s, out);
+    return out.subarray(0, written);
+}
+export function fromUtf8(bytes) {
+    return dec.decode(bytes);
+}
+/** Base64url-encode bytes (RFC 4648 §5, no padding). */
+export function b64uEncode(bytes) {
+    let bin = '';
+    for (const byte of bytes)
+        bin += String.fromCharCode(byte);
+    return btoa(bin).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+}
+/** Decode a base64url string back to bytes. Tolerates missing padding. */
+export function b64uDecode(s) {
+    const b64 = s.replace(/-/g, '+').replace(/_/g, '/') + '==='.slice((s.length + 3) % 4);
+    const bin = atob(b64);
+    const out = new Uint8Array(bin.length);
+    for (let i = 0; i < bin.length; i++)
+        out[i] = bin.charCodeAt(i);
+    return out;
+}
+export function b64uEncodeString(s) {
+    return b64uEncode(utf8(s));
+}
+export function b64uDecodeString(s) {
+    return fromUtf8(b64uDecode(s));
+}
+export function bytesToHex(bytes) {
+    let hex = '';
+    for (const b of bytes)
+        hex += b.toString(16).padStart(2, '0');
+    return hex;
+}
+/**
+ * Constant-time string compare for secrets/MACs. Always walks the full length of
+ * the longer input so timing doesn't leak where two values diverge.
+ */
+export function timingSafeEqual(a, b) {
+    const max = Math.max(a.length, b.length);
+    let diff = a.length ^ b.length;
+    for (let i = 0; i < max; i++)
+        diff |= a.charCodeAt(i) ^ b.charCodeAt(i);
+    return diff === 0;
+}
+//# sourceMappingURL=encoding.js.map

package/dist/forwarding/encoding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"encoding.js","sourceRoot":"","sources":["../../src/forwarding/encoding.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,2EAA2E;AAE3E,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;AAC9B,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;AAE9B,kFAAkF;AAClF,0EAA0E;AAC1E,MAAM,UAAU,IAAI,CAAC,CAAS;IAC5B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzC,MAAM,EAAC,OAAO,EAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACzC,OAAO,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAA4B,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAiB;IACxC,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC;AAED,wDAAwD;AACxD,MAAM,UAAU,UAAU,CAAC,KAAiB;IAC1C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAC3D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,UAAU,CAAC,CAAS;IAClC,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACtF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACtB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAChE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,CAAS;IACxC,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,CAAS;IACxC,OAAO,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAiB;IAC1C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9D,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,CAAS,EAAE,CAAS;IAClD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IACzC,IAAI,IAAI,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE;QAAE,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACxE,OAAO,IAAI,KAAK,CAAC,CAAC;AACpB,CAAC"}

package/dist/forwarding/forwardingClient.d.ts

@@ -0,0 +1,76 @@
+import { type FetchLike } from '../client';
+import { type TunnelStatus } from './tunnelClient';
+export interface SiteIdentity {
+    siteId: string;
+    prefix: string;
+    host: string;
+    publicKey: string;
+    /** base64url PKCS#8 — the secret. Persist ONLY in the OS keychain. */
+    privateKey: string;
+}
+/** Where the site identity (incl. private key) is persisted. The desktop backs
+ *  this with the OS keychain; tests can use MemoryKeyStore. */
+export interface KeyStore {
+    load(): Promise<SiteIdentity | null>;
+    save(identity: SiteIdentity): Promise<void>;
+    clear(): Promise<void>;
+}
+export declare class MemoryKeyStore implements KeyStore {
+    private identity;
+    load(): Promise<SiteIdentity | null>;
+    save(identity: SiteIdentity): Promise<void>;
+    clear(): Promise<void>;
+}
+export interface ForwardingClientOptions {
+    /** https://account.book.pub */
+    accountUrl: string;
+    /** A device bearer token for the account API (the desktop already holds one). */
+    authToken: string;
+    keyStore: KeyStore;
+    /** Local OpenBook data-server origin to forward, e.g. http://127.0.0.1:4317, or
+     *  '' when {@link localFetchImpl} resolves paths itself (the desktop IPC transport). */
+    localOrigin: string;
+    /** The cell to attach in (nearest region). Defaults to the platform home cell. */
+    region?: string;
+    onStatus?: (status: TunnelStatus) => void;
+    /** `fetch` for the account API (account.book.pub). Defaults to the global fetch. */
+    fetchImpl?: FetchLike;
+    /**
+     * `fetch` the tunnel uses to serve inbound requests against the local origin.
+     * Distinct from {@link fetchImpl} so the desktop can route the account API to
+     * account.book.pub (global fetch) while the tunnel forwards to the *portless*
+     * local server over its IPC transport. Defaults to {@link fetchImpl}.
+     */
+    localFetchImpl?: FetchLike;
+    webSocketImpl?: typeof WebSocket;
+}
+export declare class ForwardingClient {
+    private readonly opts;
+    private tunnel?;
+    private identity?;
+    private readonly fetchImpl;
+    constructor(opts: ForwardingClientOptions);
+    get site(): SiteIdentity | undefined;
+    private get region();
+    private api;
+    /** Reattach to our existing site (if we hold its key), else provision a new one. */
+    ensureSite(): Promise<SiteIdentity>;
+    private provision;
+    private challenge;
+    private reattach;
+    /**
+     * Mint a fresh attach ticket + relay WS URL. Run once per (re)connection: the
+     * ticket is short-lived (≈120s), so the tunnel re-mints every time it dials
+     * rather than reusing a stale one (which the relay rejects as expired). The
+     * `?site=` query is the relay's Durable-Object routing hint on the WS upgrade
+     * (an untrusted hint — the relay still verifies the ticket + site-key signature
+     * after connecting); omitting it makes the upgrade fail with 400 "missing site".
+     */
+    private mintAttach;
+    /** Begin forwarding the local instance. Resolves with the public host. */
+    start(): Promise<{
+        host: string;
+    }>;
+    /** Stop forwarding (the site stays registered; reconnect later with the same key). */
+    stop(): void;
+}

package/dist/forwarding/forwardingClient.js

@@ -0,0 +1,128 @@
+// The desktop-side orchestrator — a thin client over the key-provisioning and
+// relay APIs. The Tauri app wraps this: it supplies a keychain-backed KeyStore and
+// the local OpenBook origin, and gets back a one-call "forward this instance".
+//
+// Flow:
+//   ensureSite() → reattach if we already hold a site key, else provision a new one
+//                  (private key is returned ONCE and handed to the KeyStore).
+//   start()      → challenge + sign + attach-ticket, then open the tunnel.
+//
+// Runtime-agnostic (fetch + WebSocket globals); no Node-only APIs, so it runs in
+// the Tauri webview or a sidecar alike.
+import { globalFetch } from '../client';
+import { buildAttachMessage, buildReattachMessage } from './challenge';
+import { signWithSiteKey } from './siteKey';
+import { TunnelClient } from './tunnelClient';
+export class MemoryKeyStore {
+    constructor() {
+        this.identity = null;
+    }
+    async load() {
+        return this.identity;
+    }
+    async save(identity) {
+        this.identity = identity;
+    }
+    async clear() {
+        this.identity = null;
+    }
+}
+export class ForwardingClient {
+    constructor(opts) {
+        this.opts = opts;
+        this.fetchImpl = opts.fetchImpl ?? globalFetch;
+    }
+    get site() {
+        return this.identity;
+    }
+    get region() {
+        return this.opts.region ?? 'sin1';
+    }
+    async api(path, body) {
+        const res = await this.fetchImpl(`${this.opts.accountUrl.replace(/\/$/, '')}${path}`, {
+            method: 'POST',
+            headers: { authorization: `Bearer ${this.opts.authToken}`, 'content-type': 'application/json' },
+            body: JSON.stringify(body),
+        });
+        if (!res.ok)
+            throw new Error(`${path} → ${res.status}`);
+        return (await res.json());
+    }
+    /** Reattach to our existing site (if we hold its key), else provision a new one. */
+    async ensureSite() {
+        if (this.identity)
+            return this.identity;
+        const stored = await this.opts.keyStore.load();
+        if (stored && (await this.reattach(stored))) {
+            this.identity = stored;
+            return stored;
+        }
+        const provisioned = await this.provision();
+        await this.opts.keyStore.save(provisioned);
+        this.identity = provisioned;
+        return provisioned;
+    }
+    async provision() {
+        const data = await this.api('/api/sites', {});
+        return {
+            siteId: data.site.id,
+            prefix: data.site.prefix,
+            host: data.site.host,
+            publicKey: data.site.publicKey,
+            privateKey: data.privateKey,
+        };
+    }
+    async challenge(publicKey) {
+        return this.api('/api/sites/challenge', { publicKey });
+    }
+    async reattach(id) {
+        try {
+            const { nonce, ts } = await this.challenge(id.publicKey);
+            const signature = await signWithSiteKey(id.privateKey, buildReattachMessage({ publicKey: id.publicKey, nonce, ts }));
+            await this.api('/api/sites/reattach', { publicKey: id.publicKey, nonce, ts, signature });
+            return true;
+        }
+        catch {
+            return false; // key unknown/rotated → caller re-provisions
+        }
+    }
+    /**
+     * Mint a fresh attach ticket + relay WS URL. Run once per (re)connection: the
+     * ticket is short-lived (≈120s), so the tunnel re-mints every time it dials
+     * rather than reusing a stale one (which the relay rejects as expired). The
+     * `?site=` query is the relay's Durable-Object routing hint on the WS upgrade
+     * (an untrusted hint — the relay still verifies the ticket + site-key signature
+     * after connecting); omitting it makes the upgrade fail with 400 "missing site".
+     */
+    async mintAttach(id) {
+        const { nonce, ts } = await this.challenge(id.publicKey);
+        const signature = await signWithSiteKey(id.privateKey, buildAttachMessage({ siteId: id.siteId, region: this.region, nonce, ts }));
+        const res = await this.api('/api/sites/attach-ticket', { siteId: id.siteId, nonce, ts, signature, region: this.region });
+        return {
+            relayWsUrl: `${res.relayBase.replace(/\/$/, '')}/__tunnel?site=${encodeURIComponent(id.siteId)}`,
+            ticket: res.ticket,
+        };
+    }
+    /** Begin forwarding the local instance. Resolves with the public host. */
+    async start() {
+        const id = await this.ensureSite();
+        this.tunnel = new TunnelClient({
+            ticketProvider: () => this.mintAttach(id), // fresh ticket per (re)connect
+            privateKey: id.privateKey,
+            localOrigin: this.opts.localOrigin,
+            onStatus: this.opts.onStatus,
+            // The tunnel forwards to the LOCAL server; the desktop routes that over IPC
+            // (no port), separate from the account API's global fetch.
+            fetchImpl: this.opts.localFetchImpl ?? this.opts.fetchImpl,
+            webSocketImpl: this.opts.webSocketImpl,
+        });
+        this.tunnel.start();
+        return { host: id.host };
+    }
+    /** Stop forwarding (the site stays registered; reconnect later with the same key). */
+    stop() {
+        this.tunnel?.stop();
+        this.tunnel = undefined;
+    }
+}
+//# sourceMappingURL=forwardingClient.js.map

package/dist/forwarding/forwardingClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forwardingClient.js","sourceRoot":"","sources":["../../src/forwarding/forwardingClient.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,mFAAmF;AACnF,+EAA+E;AAC/E,EAAE;AACF,QAAQ;AACR,oFAAoF;AACpF,8EAA8E;AAC9E,2EAA2E;AAC3E,EAAE;AACF,iFAAiF;AACjF,wCAAwC;AAExC,OAAO,EAAC,WAAW,EAAiB,MAAM,WAAW,CAAC;AACtD,OAAO,EAAC,kBAAkB,EAAE,oBAAoB,EAAC,MAAM,aAAa,CAAC;AACrE,OAAO,EAAC,eAAe,EAAC,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAC,YAAY,EAAoB,MAAM,gBAAgB,CAAC;AAmB/D,MAAM,OAAO,cAAc;IAA3B;QACU,aAAQ,GAAwB,IAAI,CAAC;IAU/C,CAAC;IATC,KAAK,CAAC,IAAI;QACR,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,QAAsB;QAC/B,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IACD,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;IACvB,CAAC;CACF;AA0BD,MAAM,OAAO,gBAAgB;IAK3B,YAA6B,IAA6B;QAA7B,SAAI,GAAJ,IAAI,CAAyB;QACxD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,WAAW,CAAC;IACjD,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED,IAAY,MAAM;QAChB,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC;IACpC,CAAC;IAEO,KAAK,CAAC,GAAG,CAAI,IAAY,EAAE,IAAa;QAC9C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,EAAE;YACpF,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAC,aAAa,EAAE,UAAU,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAC;YAC7F,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,MAAM,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACxD,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;IACjC,CAAC;IAED,oFAAoF;IACpF,KAAK,CAAC,UAAU;QACd,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC/C,IAAI,MAAM,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YAC5C,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC;YACvB,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QAC3C,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ,GAAG,WAAW,CAAC;QAC5B,OAAO,WAAW,CAAC;IACrB,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAGxB,YAAY,EAAE,EAAE,CAAC,CAAC;QACrB,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE;YACpB,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM;YACxB,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI;YACpB,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS;YAC9B,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,SAAS,CAAC,SAAiB;QACvC,OAAO,IAAI,CAAC,GAAG,CAA8B,sBAAsB,EAAE,EAAC,SAAS,EAAC,CAAC,CAAC;IACpF,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,EAAgB;QACrC,IAAI,CAAC;YACH,MAAM,EAAC,KAAK,EAAE,EAAE,EAAC,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;YACvD,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,EAAE,CAAC,UAAU,EAAE,oBAAoB,CAAC,EAAC,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,EAAC,CAAC,CAAC,CAAC;YACnH,MAAM,IAAI,CAAC,GAAG,CAAC,qBAAqB,EAAE,EAAC,SAAS,EAAE,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAC,CAAC,CAAC;YACvF,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC,CAAC,6CAA6C;QAC7D,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,KAAK,CAAC,UAAU,CAAC,EAAgB;QACvC,MAAM,EAAC,KAAK,EAAE,EAAE,EAAC,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;QACvD,MAAM,SAAS,GAAG,MAAM,eAAe,CACrC,EAAE,CAAC,UAAU,EACb,kBAAkB,CAAC,EAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAC,CAAC,CACxE,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,GAAG,CACxB,0BAA0B,EAC1B,EAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAC,CAC/D,CAAC;QACF,OAAO;YACL,UAAU,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,kBAAkB,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE;YAChG,MAAM,EAAE,GAAG,CAAC,MAAM;SACnB,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,KAAK;QACT,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC,MAAM,GAAG,IAAI,YAAY,CAAC;YAC7B,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,+BAA+B;YAC1E,UAAU,EAAE,EAAE,CAAC,UAAU;YACzB,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW;YAClC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ;YAC5B,4EAA4E;YAC5E,2DAA2D;YAC3D,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS;YAC1D,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa;SACvC,CAAC,CAAC;QACH,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACpB,OAAO,EAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAC,CAAC;IACzB,CAAC;IAED,sFAAsF;IACtF,IAAI;QACF,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;QACpB,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;IAC1B,CAAC;CACF"}

package/dist/forwarding/index.d.ts

@@ -0,0 +1,5 @@
+export { ForwardingClient, MemoryKeyStore, type KeyStore, type SiteIdentity, type ForwardingClientOptions } from './forwardingClient';
+export { TunnelClient, type TunnelStatus, type TunnelClientOptions } from './tunnelClient';
+export { mintSiteKeypair, signWithSiteKey, verifyWithSiteKey, type SiteKeypair } from './siteKey';
+export { buildAttachMessage, buildReattachMessage, buildRelayAttachMessage, newNonce, isFreshTimestamp, type AttachClaim, } from './challenge';
+export { encodeControl, decodeControl, encodeBody, decodeBody, type ControlFrame, } from './tunnelProtocol';

package/dist/forwarding/index.js

@@ -0,0 +1,14 @@
+// *.book.pub forwarding — the desktop-side client + shared protocol core.
+//
+// Ported wholesale from open.book.pub (`@book.dev/forwarding` + the relay's
+// ForwardingClient/TunnelClient) so this repo owns the client. open.book.pub
+// keeps only the ForwardingServer (the relay terminator + the account API). The
+// whole surface is runtime-agnostic (Web Crypto + global fetch/WebSocket), so it
+// runs in the Tauri webview; the desktop supplies a keychain-backed KeyStore and
+// the IPC fetch.
+export { ForwardingClient, MemoryKeyStore } from './forwardingClient';
+export { TunnelClient } from './tunnelClient';
+export { mintSiteKeypair, signWithSiteKey, verifyWithSiteKey } from './siteKey';
+export { buildAttachMessage, buildReattachMessage, buildRelayAttachMessage, newNonce, isFreshTimestamp, } from './challenge';
+export { encodeControl, decodeControl, encodeBody, decodeBody, } from './tunnelProtocol';
+//# sourceMappingURL=index.js.map

package/dist/forwarding/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/forwarding/index.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,gFAAgF;AAChF,iFAAiF;AACjF,iFAAiF;AACjF,iBAAiB;AAEjB,OAAO,EAAC,gBAAgB,EAAE,cAAc,EAAiE,MAAM,oBAAoB,CAAC;AACpI,OAAO,EAAC,YAAY,EAA8C,MAAM,gBAAgB,CAAC;AACzF,OAAO,EAAC,eAAe,EAAE,eAAe,EAAE,iBAAiB,EAAmB,MAAM,WAAW,CAAC;AAChG,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,uBAAuB,EACvB,QAAQ,EACR,gBAAgB,GAEjB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,aAAa,EACb,aAAa,EACb,UAAU,EACV,UAAU,GAEX,MAAM,kBAAkB,CAAC"}

package/dist/forwarding/siteKey.d.ts

@@ -0,0 +1,12 @@
+export interface SiteKeypair {
+    /** Raw 32-byte public key, base64url. Persisted on the Site row; prefix derives from it. */
+    publicKey: string;
+    /** PKCS#8 private key, base64url. Returned to the desktop ONCE, never stored server-side. */
+    privateKey: string;
+}
+/** Mint a fresh per-site Ed25519 keypair. */
+export declare function mintSiteKeypair(): Promise<SiteKeypair>;
+/** Sign an attach challenge with the site's private key (desktop side). */
+export declare function signWithSiteKey(privateKey: string, message: string): Promise<string>;
+/** Verify an attach signature against the site's public key (relay / account side). */
+export declare function verifyWithSiteKey(publicKey: string, message: string, signature: string): Promise<boolean>;

package/dist/forwarding/siteKey.js

@@ -0,0 +1,36 @@
+// Per-site identity keypair (Ed25519). On first connect account.book.pub mints
+// one; the desktop keeps the PRIVATE key (OS keychain), the public key is stored
+// on the Site row and the prefix is derived from it. Every reconnect re-proves
+// possession of the private key to reattach to the same site.
+//
+// Implemented on Web Crypto (`crypto.subtle`) so the same code mints in the
+// account Node runtime and verifies in the relay Node runtime. Ed25519 is native
+// in Node 20+/22 and modern browsers; the edge never runs these (it only does
+// HMAC — see principal verification in open.book.pub).
+import { b64uDecode, b64uEncode, utf8 } from './encoding';
+const ED25519 = { name: 'Ed25519' };
+/** Mint a fresh per-site Ed25519 keypair. */
+export async function mintSiteKeypair() {
+    const kp = (await crypto.subtle.generateKey(ED25519, true, ['sign', 'verify']));
+    const pub = new Uint8Array(await crypto.subtle.exportKey('raw', kp.publicKey));
+    const priv = new Uint8Array(await crypto.subtle.exportKey('pkcs8', kp.privateKey));
+    return { publicKey: b64uEncode(pub), privateKey: b64uEncode(priv) };
+}
+/** Sign an attach challenge with the site's private key (desktop side). */
+export async function signWithSiteKey(privateKey, message) {
+    const key = await crypto.subtle.importKey('pkcs8', b64uDecode(privateKey), ED25519, false, ['sign']);
+    const sig = await crypto.subtle.sign(ED25519, key, utf8(message));
+    return b64uEncode(new Uint8Array(sig));
+}
+/** Verify an attach signature against the site's public key (relay / account side). */
+export async function verifyWithSiteKey(publicKey, message, signature) {
+    try {
+        const key = await crypto.subtle.importKey('raw', b64uDecode(publicKey), ED25519, false, ['verify']);
+        return await crypto.subtle.verify(ED25519, key, b64uDecode(signature), utf8(message));
+    }
+    catch {
+        // Malformed key/signature → treat as a failed proof, never throw into the gate.
+        return false;
+    }
+}
+//# sourceMappingURL=siteKey.js.map

package/dist/forwarding/siteKey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"siteKey.js","sourceRoot":"","sources":["../../src/forwarding/siteKey.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,iFAAiF;AACjF,+EAA+E;AAC/E,8DAA8D;AAC9D,EAAE;AACF,4EAA4E;AAC5E,iFAAiF;AACjF,8EAA8E;AAC9E,uDAAuD;AAEvD,OAAO,EAAC,UAAU,EAAE,UAAU,EAAE,IAAI,EAAC,MAAM,YAAY,CAAC;AAExD,MAAM,OAAO,GAAG,EAAC,IAAI,EAAE,SAAS,EAAU,CAAC;AAS3C,6CAA6C;AAC7C,MAAM,CAAC,KAAK,UAAU,eAAe;IACnC,MAAM,EAAE,GAAG,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAkB,CAAC;IACjG,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IACnF,OAAO,EAAC,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC,EAAC,CAAC;AACpE,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,UAAkB,EAAE,OAAe;IACvE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IACrG,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAClE,OAAO,UAAU,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,SAAiB,EACjB,OAAe,EACf,SAAiB;IAEjB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;QACpG,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACxF,CAAC;IAAC,MAAM,CAAC;QACP,gFAAgF;QAChF,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/forwarding/tunnelClient.d.ts

@@ -0,0 +1,56 @@
+import { type FetchLike } from '../client';
+export type TunnelStatus = 'connecting' | 'online' | 'reconnecting' | 'offline';
+export interface TunnelClientOptions {
+    /**
+     * Mint a FRESH relay URL + attach ticket for each (re)connection. Tickets are
+     * short-lived (≈120s), so the tunnel must obtain a new one every time it dials
+     * — reusing a single ticket across a reconnect (or a slow first connect) makes
+     * the relay reject the attach as expired ("attach failed"), and the tunnel
+     * then loops forever on the same dead ticket. The provider re-runs the account
+     * challenge → attach-ticket flow; its `relayWsUrl` must include the `?site=`
+     * routing hint the relay needs on the WS upgrade.
+     */
+    ticketProvider: () => Promise<{
+        relayWsUrl: string;
+        ticket: string;
+    }>;
+    /** The site's private key (base64url PKCS#8) from the OS keychain. */
+    privateKey: string;
+    /** The local OpenBook data server origin, e.g. http://127.0.0.1:4317 (or '' when
+     *  `fetchImpl` resolves paths itself, as the desktop IPC transport does). */
+    localOrigin: string;
+    onStatus?: (status: TunnelStatus) => void;
+    fetchImpl?: FetchLike;
+    webSocketImpl?: typeof WebSocket;
+    maxBackoffMs?: number;
+}
+export declare class TunnelClient {
+    private readonly opts;
+    private ws?;
+    private status;
+    private backoff;
+    private stopped;
+    private readonly inflight;
+    private readonly fetchImpl;
+    private readonly WS;
+    /** The ticket for the current connection, minted just before the WS opened. */
+    private ticket?;
+    constructor(opts: TunnelClientOptions);
+    start(): void;
+    stop(): void;
+    get currentStatus(): TunnelStatus;
+    private setStatus;
+    private connect;
+    /** Mint a fresh ticket, then open the relay socket with it. Minting per dial is
+     *  what keeps reconnects working — a reused ticket expires and attach fails. */
+    private dial;
+    private onClose;
+    private scheduleReconnect;
+    private sendControl;
+    /** Pause while the socket's send buffer is backed up, so streaming a large
+     *  response to a slow viewer can't grow memory without bound. */
+    private drain;
+    private onMessage;
+    private onControl;
+    private handleRequest;
+}