@clawpeers/sdk 0.1.0

package/dist/client/apiClient.d.ts

@@ -0,0 +1,58 @@
+import type { Envelope, Posting, Profile } from '../types/index.js';
+export interface ApiClientConfig {
+    apiBaseUrl: string;
+    timeoutMs?: number;
+}
+export declare class ClawPeersApiClient {
+    private readonly apiBaseUrl;
+    private readonly timeoutMs;
+    constructor(config: ApiClientConfig);
+    requestChallenge(nodeId: string): Promise<{
+        challenge: string;
+        expires_at: number;
+    }>;
+    verifyChallenge(nodeId: string, signature: string): Promise<{
+        token: string;
+        expires_at: number;
+    }>;
+    claimHandle(token: string, handle: string): Promise<{
+        handle: string;
+        status: 'CLAIMED';
+    }>;
+    getMyHandles(token: string): Promise<{
+        handles: string[];
+    }>;
+    publishProfile(token: string, profile: Profile, envelope: Envelope): Promise<{
+        ok: true;
+    }>;
+    publishPosting(token: string, posting: Posting, envelope: Envelope): Promise<{
+        ok: true;
+    }>;
+    updatePosting(token: string, posting: Partial<Posting>, envelope: Envelope): Promise<{
+        ok: true;
+    }>;
+    searchProviders(token: string, params: {
+        tags?: string[];
+        capabilities?: string[];
+        location?: {
+            scope: string;
+            value: string;
+        };
+        limit?: number;
+        cursor?: string;
+    }): Promise<{
+        providers: Profile[];
+        next_cursor: string | null;
+    }>;
+    searchPostings(token: string, params: {
+        tags?: string[];
+        type?: 'NEED' | 'OFFER';
+        limit?: number;
+        cursor?: string;
+    }): Promise<{
+        postings: Posting[];
+        next_cursor: string | null;
+    }>;
+    private request;
+}
+//# sourceMappingURL=apiClient.d.ts.map

package/dist/client/apiClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apiClient.d.ts","sourceRoot":"","sources":["../../src/client/apiClient.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAEpE,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAEvB,MAAM,EAAE,eAAe;IAK7B,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAIpF,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;IAIlG,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,SAAS,CAAA;KAAE,CAAC;IAQ1F,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;IAI3D,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,CAAC;IAI1F,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,CAAC;IAI1F,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,CAAC;IAIlG,eAAe,CACnB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE;QACN,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAChB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,QAAQ,CAAC,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC;QAC5C,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GACA,OAAO,CAAC;QAAE,SAAS,EAAE,OAAO,EAAE,CAAC;QAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAI1D,cAAc,CAClB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GACpF,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;YAIjD,OAAO;CAgCtB"}

package/dist/client/apiClient.js

@@ -0,0 +1,66 @@
+export class ClawPeersApiClient {
+    apiBaseUrl;
+    timeoutMs;
+    constructor(config) {
+        this.apiBaseUrl = config.apiBaseUrl.replace(/\/$/, '');
+        this.timeoutMs = config.timeoutMs ?? 10_000;
+    }
+    async requestChallenge(nodeId) {
+        return this.request('/auth/challenge', { method: 'POST', body: { node_id: nodeId } });
+    }
+    async verifyChallenge(nodeId, signature) {
+        return this.request('/auth/verify', { method: 'POST', body: { node_id: nodeId, signature } });
+    }
+    async claimHandle(token, handle) {
+        return this.request('/handles/claim', {
+            method: 'POST',
+            token,
+            body: { handle },
+        });
+    }
+    async getMyHandles(token) {
+        return this.request('/handles/me', { method: 'GET', token });
+    }
+    async publishProfile(token, profile, envelope) {
+        return this.request('/profile/publish', { method: 'POST', token, body: { profile, envelope } });
+    }
+    async publishPosting(token, posting, envelope) {
+        return this.request('/postings/publish', { method: 'POST', token, body: { posting, envelope } });
+    }
+    async updatePosting(token, posting, envelope) {
+        return this.request('/postings/update', { method: 'POST', token, body: { posting, envelope } });
+    }
+    async searchProviders(token, params) {
+        return this.request('/search/providers', { method: 'POST', token, body: params });
+    }
+    async searchPostings(token, params) {
+        return this.request('/search/postings', { method: 'POST', token, body: params });
+    }
+    async request(path, options) {
+        const controller = new AbortController();
+        const timeout = setTimeout(() => controller.abort(), this.timeoutMs);
+        try {
+            const response = await fetch(`${this.apiBaseUrl}${path}`, {
+                method: options.method,
+                headers: {
+                    'content-type': 'application/json',
+                    ...(options.token ? { authorization: `Bearer ${options.token}` } : {}),
+                },
+                body: options.body === undefined ? undefined : JSON.stringify(options.body),
+                signal: controller.signal,
+            });
+            const json = (await response.json().catch(() => ({})));
+            if (!response.ok) {
+                const reason = (typeof json.error === 'string' && json.error) ||
+                    (typeof json.message === 'string' && json.message) ||
+                    `HTTP ${response.status}`;
+                throw new Error(reason);
+            }
+            return json;
+        }
+        finally {
+            clearTimeout(timeout);
+        }
+    }
+}
+//# sourceMappingURL=apiClient.js.map

package/dist/client/apiClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apiClient.js","sourceRoot":"","sources":["../../src/client/apiClient.ts"],"names":[],"mappings":"AAOA,MAAM,OAAO,kBAAkB;IACZ,UAAU,CAAS;IACnB,SAAS,CAAS;IAEnC,YAAY,MAAuB;QACjC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC;IAC9C,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,MAAc;QACnC,OAAO,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IACxF,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,SAAiB;QACrD,OAAO,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAChG,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAa,EAAE,MAAc;QAC7C,OAAO,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE;YACpC,MAAM,EAAE,MAAM;YACd,KAAK;YACL,IAAI,EAAE,EAAE,MAAM,EAAE;SACjB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,KAAa;QAC9B,OAAO,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAAa,EAAE,OAAgB,EAAE,QAAkB;QACtE,OAAO,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IAClG,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAAa,EAAE,OAAgB,EAAE,QAAkB;QACtE,OAAO,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IACnG,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,KAAa,EAAE,OAAyB,EAAE,QAAkB;QAC9E,OAAO,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IAClG,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,KAAa,EACb,MAMC;QAED,OAAO,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACpF,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,KAAa,EACb,MAAqF;QAErF,OAAO,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACnF,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,IAAY,EACZ,OAA2D;QAE3D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAErE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,EAAE,EAAE;gBACxD,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACvE;gBACD,IAAI,EAAE,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;gBAC3E,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YAEH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAA4B,CAAC;YAClF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,MAAM,GACV,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC;oBAC9C,CAAC,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC;oBAClD,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAC5B,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;YAC1B,CAAC;YAED,OAAO,IAAS,CAAC;QACnB,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;CACF"}

package/dist/client/index.d.ts

@@ -0,0 +1,3 @@
+export * from './apiClient.js';
+export * from './wsClient.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/client/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC"}

package/dist/client/index.js

@@ -0,0 +1,3 @@
+export * from './apiClient.js';
+export * from './wsClient.js';
+//# sourceMappingURL=index.js.map

package/dist/client/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC"}

package/dist/client/wsClient.d.ts

@@ -0,0 +1,30 @@
+import { EventEmitter } from 'node:events';
+import type { Envelope } from '../types/index.js';
+interface WsClientOptions {
+    wsUrl: string;
+    token: string;
+    reconnectMs?: number;
+}
+export interface BacklogEvent {
+    topic: string;
+    envelope: Envelope;
+}
+export declare class ClawPeersWsClient extends EventEmitter {
+    private readonly wsUrl;
+    private readonly token;
+    private readonly reconnectMs;
+    private ws;
+    private closed;
+    private subscriptions;
+    constructor(options: WsClientOptions);
+    connect(): void;
+    disconnect(): void;
+    subscribe(topics: string[]): void;
+    publish(topic: string, envelope: Envelope): void;
+    ping(): void;
+    private openSocket;
+    private send;
+    private parseRaw;
+}
+export {};
+//# sourceMappingURL=wsClient.d.ts.map

package/dist/client/wsClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wsClient.d.ts","sourceRoot":"","sources":["../../src/client/wsClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG3C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAElD,UAAU,eAAe;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,QAAQ,CAAC;CACpB;AAED,qBAAa,iBAAkB,SAAQ,YAAY;IACjD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAS;IACrC,OAAO,CAAC,EAAE,CAA0B;IACpC,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,aAAa,CAAqB;gBAE9B,OAAO,EAAE,eAAe;IAOpC,OAAO,IAAI,IAAI;IAKf,UAAU,IAAI,IAAI;IAMlB,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI;IAKjC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,GAAG,IAAI;IAIhD,IAAI,IAAI,IAAI;IAIZ,OAAO,CAAC,UAAU;IAyClB,OAAO,CAAC,IAAI;IAQZ,OAAO,CAAC,QAAQ;CAOjB"}

package/dist/client/wsClient.js

@@ -0,0 +1,85 @@
+import { EventEmitter } from 'node:events';
+import WebSocket from 'ws';
+export class ClawPeersWsClient extends EventEmitter {
+    wsUrl;
+    token;
+    reconnectMs;
+    ws = null;
+    closed = false;
+    subscriptions = new Set();
+    constructor(options) {
+        super();
+        this.wsUrl = options.wsUrl;
+        this.token = options.token;
+        this.reconnectMs = options.reconnectMs ?? 2_000;
+    }
+    connect() {
+        this.closed = false;
+        this.openSocket();
+    }
+    disconnect() {
+        this.closed = true;
+        this.ws?.close();
+        this.ws = null;
+    }
+    subscribe(topics) {
+        topics.forEach((topic) => this.subscriptions.add(topic));
+        this.send({ type: 'SUBSCRIBE', topics: [...this.subscriptions] });
+    }
+    publish(topic, envelope) {
+        this.send({ type: 'PUBLISH', topic, envelope });
+    }
+    ping() {
+        this.send({ type: 'PING', ts: Math.floor(Date.now() / 1000) });
+    }
+    openSocket() {
+        this.ws = new WebSocket(this.wsUrl);
+        this.ws.on('open', () => {
+            this.send({ type: 'AUTH', token: this.token });
+            if (this.subscriptions.size > 0) {
+                this.send({ type: 'SUBSCRIBE', topics: [...this.subscriptions] });
+            }
+            this.emit('connected');
+        });
+        this.ws.on('message', (raw) => {
+            const decoded = this.parseRaw(raw.toString());
+            if (!decoded) {
+                return;
+            }
+            this.emit('message', decoded);
+            if (decoded.type === 'EVENT') {
+                this.emit('event', decoded);
+            }
+            if (decoded.type === 'BACKLOG') {
+                this.emit('backlog', decoded.events);
+            }
+            if (decoded.type === 'ERROR') {
+                this.emit('error-message', decoded);
+            }
+        });
+        this.ws.on('close', () => {
+            this.emit('disconnected');
+            if (!this.closed) {
+                setTimeout(() => this.openSocket(), this.reconnectMs);
+            }
+        });
+        this.ws.on('error', (error) => {
+            this.emit('error', error);
+        });
+    }
+    send(payload) {
+        if (!this.ws || this.ws.readyState !== WebSocket.OPEN) {
+            return;
+        }
+        this.ws.send(JSON.stringify(payload));
+    }
+    parseRaw(raw) {
+        try {
+            return JSON.parse(raw);
+        }
+        catch {
+            return null;
+        }
+    }
+}
+//# sourceMappingURL=wsClient.js.map

package/dist/client/wsClient.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wsClient.js","sourceRoot":"","sources":["../../src/client/wsClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,SAAS,MAAM,IAAI,CAAC;AAe3B,MAAM,OAAO,iBAAkB,SAAQ,YAAY;IAChC,KAAK,CAAS;IACd,KAAK,CAAS;IACd,WAAW,CAAS;IAC7B,EAAE,GAAqB,IAAI,CAAC;IAC5B,MAAM,GAAG,KAAK,CAAC;IACf,aAAa,GAAG,IAAI,GAAG,EAAU,CAAC;IAE1C,YAAY,OAAwB;QAClC,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,KAAK,CAAC;IAClD,CAAC;IAED,OAAO;QACL,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,IAAI,CAAC,UAAU,EAAE,CAAC;IACpB,CAAC;IAED,UAAU;QACR,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC;QACjB,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;IACjB,CAAC;IAED,SAAS,CAAC,MAAgB;QACxB,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IACpE,CAAC;IAED,OAAO,CAAC,KAAa,EAAE,QAAkB;QACvC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,IAAI;QACF,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC;IAEO,UAAU;QAChB,IAAI,CAAC,EAAE,GAAG,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEpC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;YACtB,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YAC/C,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBAChC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,GAAY,EAAE,EAAE;YACrC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO;YACT,CAAC;YAED,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YAC9B,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC7B,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9B,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC/B,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,MAAwB,CAAC,CAAC;YACzD,CAAC;YACD,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC7B,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;YACtC,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACvB,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;YAC1B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACjB,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YACxD,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAY,EAAE,EAAE;YACnC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC5B,CAAC,CAAC,CAAC;IACL,CAAC;IAEO,IAAI,CAAC,OAAgB;QAC3B,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,KAAK,SAAS,CAAC,IAAI,EAAE,CAAC;YACtD,OAAO;QACT,CAAC;QAED,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACxC,CAAC;IAEO,QAAQ,CAAC,GAAW;QAC1B,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF"}

package/dist/crypto/base64.d.ts

@@ -0,0 +1,5 @@
+export declare function toBase64(input: Uint8Array): string;
+export declare function fromBase64(input: string): Uint8Array;
+export declare function toBase64Url(input: Uint8Array): string;
+export declare function fromBase64Url(input: string): Uint8Array;
+//# sourceMappingURL=base64.d.ts.map

package/dist/crypto/base64.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base64.d.ts","sourceRoot":"","sources":["../../src/crypto/base64.ts"],"names":[],"mappings":"AAAA,wBAAgB,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAElD;AAED,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAEpD;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAMrD;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAIvD"}

package/dist/crypto/base64.js

@@ -0,0 +1,19 @@
+export function toBase64(input) {
+    return Buffer.from(input).toString('base64');
+}
+export function fromBase64(input) {
+    return new Uint8Array(Buffer.from(input, 'base64'));
+}
+export function toBase64Url(input) {
+    return Buffer.from(input)
+        .toString('base64')
+        .replace(/\+/g, '-')
+        .replace(/\//g, '_')
+        .replace(/=+$/g, '');
+}
+export function fromBase64Url(input) {
+    const normalized = input.replace(/-/g, '+').replace(/_/g, '/');
+    const padding = normalized.length % 4 === 0 ? '' : '='.repeat(4 - (normalized.length % 4));
+    return new Uint8Array(Buffer.from(normalized + padding, 'base64'));
+}
+//# sourceMappingURL=base64.js.map

package/dist/crypto/base64.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base64.js","sourceRoot":"","sources":["../../src/crypto/base64.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,QAAQ,CAAC,KAAiB;IACxC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,KAAiB;IAC3C,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;SACtB,QAAQ,CAAC,QAAQ,CAAC;SAClB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IAC3F,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,GAAG,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AACrE,CAAC"}

package/dist/crypto/dm.d.ts

@@ -0,0 +1,8 @@
+export declare function deriveThreadKey(senderSecretCurve25519B64: string, recipientPublicCurve25519B64: string, threadId: string): Promise<string>;
+export declare function encryptDm(plaintext: string, threadKeyB64: string): Promise<{
+    nonce: string;
+    ciphertext: string;
+}>;
+export declare function decryptDm(nonceB64: string, ciphertextB64: string, threadKeyB64: string): Promise<string>;
+export declare function newThreadId(): string;
+//# sourceMappingURL=dm.d.ts.map

package/dist/crypto/dm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dm.d.ts","sourceRoot":"","sources":["../../src/crypto/dm.ts"],"names":[],"mappings":"AAOA,wBAAsB,eAAe,CACnC,yBAAyB,EAAE,MAAM,EACjC,4BAA4B,EAAE,MAAM,EACpC,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,CAAC,CAQjB;AAED,wBAAsB,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAQvH;AAED,wBAAsB,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAQ9G;AAED,wBAAgB,WAAW,IAAI,MAAM,CAEpC"}

package/dist/crypto/dm.js

@@ -0,0 +1,29 @@
+import { randomUUID } from 'node:crypto';
+import { fromBase64, toBase64 } from './base64.js';
+import { hkdfSha256 } from './hash.js';
+import { initSodium } from './sodium.js';
+const DM_INFO = Buffer.from('clawpeers-dm-v0.1', 'utf8');
+export async function deriveThreadKey(senderSecretCurve25519B64, recipientPublicCurve25519B64, threadId) {
+    const sodium = await initSodium();
+    const shared = sodium.crypto_scalarmult(fromBase64(senderSecretCurve25519B64), fromBase64(recipientPublicCurve25519B64));
+    const threadKey = hkdfSha256(shared, Buffer.from(threadId, 'utf8'), DM_INFO, sodium.crypto_secretbox_KEYBYTES);
+    return toBase64(threadKey);
+}
+export async function encryptDm(plaintext, threadKeyB64) {
+    const sodium = await initSodium();
+    const nonceBytes = sodium.randombytes_buf(sodium.crypto_secretbox_NONCEBYTES);
+    const cipher = sodium.crypto_secretbox_easy(plaintext, nonceBytes, fromBase64(threadKeyB64));
+    return {
+        nonce: toBase64(nonceBytes),
+        ciphertext: toBase64(cipher),
+    };
+}
+export async function decryptDm(nonceB64, ciphertextB64, threadKeyB64) {
+    const sodium = await initSodium();
+    const plaintext = sodium.crypto_secretbox_open_easy(fromBase64(ciphertextB64), fromBase64(nonceB64), fromBase64(threadKeyB64));
+    return Buffer.from(plaintext).toString('utf8');
+}
+export function newThreadId() {
+    return randomUUID();
+}
+//# sourceMappingURL=dm.js.map

package/dist/crypto/dm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dm.js","sourceRoot":"","sources":["../../src/crypto/dm.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;AAEzD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,yBAAiC,EACjC,4BAAoC,EACpC,QAAgB;IAEhB,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,MAAM,CAAC,iBAAiB,CACrC,UAAU,CAAC,yBAAyB,CAAC,EACrC,UAAU,CAAC,4BAA4B,CAAC,CACzC,CAAC;IACF,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,yBAAyB,CAAC,CAAC;IAC/G,OAAO,QAAQ,CAAC,SAAS,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,SAAiB,EAAE,YAAoB;IACrE,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAClC,MAAM,UAAU,GAAG,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAG,MAAM,CAAC,qBAAqB,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC;IAC7F,OAAO;QACL,KAAK,EAAE,QAAQ,CAAC,UAAU,CAAC;QAC3B,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC;KAC7B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,QAAgB,EAAE,aAAqB,EAAE,YAAoB;IAC3F,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAClC,MAAM,SAAS,GAAG,MAAM,CAAC,0BAA0B,CACjD,UAAU,CAAC,aAAa,CAAC,EACzB,UAAU,CAAC,QAAQ,CAAC,EACpB,UAAU,CAAC,YAAY,CAAC,CACzB,CAAC;IACF,OAAO,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,OAAO,UAAU,EAAE,CAAC;AACtB,CAAC"}

package/dist/crypto/hash.d.ts

@@ -0,0 +1,3 @@
+export declare function sha256(data: Uint8Array | string): Uint8Array;
+export declare function hkdfSha256(ikm: Uint8Array, salt: Uint8Array, info: Uint8Array, length?: number): Uint8Array;
+//# sourceMappingURL=hash.d.ts.map

package/dist/crypto/hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.d.ts","sourceRoot":"","sources":["../../src/crypto/hash.ts"],"names":[],"mappings":"AAEA,wBAAgB,MAAM,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,UAAU,CAE5D;AAED,wBAAgB,UAAU,CACxB,GAAG,EAAE,UAAU,EACf,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,UAAU,EAChB,MAAM,SAAK,GACV,UAAU,CAEZ"}

package/dist/crypto/hash.js

@@ -0,0 +1,8 @@
+import { createHash, hkdfSync } from 'node:crypto';
+export function sha256(data) {
+    return new Uint8Array(createHash('sha256').update(data).digest());
+}
+export function hkdfSha256(ikm, salt, info, length = 32) {
+    return new Uint8Array(hkdfSync('sha256', ikm, salt, info, length));
+}
+//# sourceMappingURL=hash.js.map

package/dist/crypto/hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.js","sourceRoot":"","sources":["../../src/crypto/hash.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEnD,MAAM,UAAU,MAAM,CAAC,IAAyB;IAC9C,OAAO,IAAI,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,UAAU,CACxB,GAAe,EACf,IAAgB,EAChB,IAAgB,EAChB,MAAM,GAAG,EAAE;IAEX,OAAO,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;AACrE,CAAC"}

package/dist/crypto/identity.d.ts

@@ -0,0 +1,6 @@
+import type { IdentityKeyBundle } from '../types/index.js';
+export declare function generateIdentity(): Promise<IdentityKeyBundle>;
+export declare function signUtf8(challenge: string, signingSecretKeyB64: string): Promise<string>;
+export declare function verifyUtf8(challenge: string, signatureB64: string, signingPublicKeyB64: string): Promise<boolean>;
+export declare function newNonce(): string;
+//# sourceMappingURL=identity.d.ts.map

package/dist/crypto/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../src/crypto/identity.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAE3D,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAcnE;AAED,wBAAsB,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAI9F;AAED,wBAAsB,UAAU,CAC9B,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,EACpB,mBAAmB,EAAE,MAAM,GAC1B,OAAO,CAAC,OAAO,CAAC,CAOlB;AAED,wBAAgB,QAAQ,IAAI,MAAM,CAEjC"}

package/dist/crypto/identity.js

@@ -0,0 +1,31 @@
+import { randomUUID } from 'node:crypto';
+import { fromBase64, toBase64, toBase64Url } from './base64.js';
+import { sha256 } from './hash.js';
+import { initSodium } from './sodium.js';
+export async function generateIdentity() {
+    const sodium = await initSodium();
+    const signing = sodium.crypto_sign_keypair();
+    const encPublicKey = sodium.crypto_sign_ed25519_pk_to_curve25519(signing.publicKey);
+    const encSecretKey = sodium.crypto_sign_ed25519_sk_to_curve25519(signing.privateKey);
+    const nodeId = toBase64Url(sha256(signing.publicKey));
+    return {
+        nodeId,
+        signingPublicKey: toBase64(signing.publicKey),
+        signingSecretKey: toBase64(signing.privateKey),
+        encryptionPublicKey: toBase64(encPublicKey),
+        encryptionSecretKey: toBase64(encSecretKey),
+    };
+}
+export async function signUtf8(challenge, signingSecretKeyB64) {
+    const sodium = await initSodium();
+    const signature = sodium.crypto_sign_detached(challenge, fromBase64(signingSecretKeyB64));
+    return toBase64(signature);
+}
+export async function verifyUtf8(challenge, signatureB64, signingPublicKeyB64) {
+    const sodium = await initSodium();
+    return sodium.crypto_sign_verify_detached(fromBase64(signatureB64), challenge, fromBase64(signingPublicKeyB64));
+}
+export function newNonce() {
+    return randomUUID();
+}
+//# sourceMappingURL=identity.js.map

package/dist/crypto/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../src/crypto/identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,MAAM,CAAC,mBAAmB,EAAE,CAAC;IAC7C,MAAM,YAAY,GAAG,MAAM,CAAC,oCAAoC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACpF,MAAM,YAAY,GAAG,MAAM,CAAC,oCAAoC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACrF,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAEtD,OAAO;QACL,MAAM;QACN,gBAAgB,EAAE,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC;QAC7C,gBAAgB,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC;QAC9C,mBAAmB,EAAE,QAAQ,CAAC,YAAY,CAAC;QAC3C,mBAAmB,EAAE,QAAQ,CAAC,YAAY,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,SAAiB,EAAE,mBAA2B;IAC3E,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAClC,MAAM,SAAS,GAAG,MAAM,CAAC,oBAAoB,CAAC,SAAS,EAAE,UAAU,CAAC,mBAAmB,CAAC,CAAC,CAAC;IAC1F,OAAO,QAAQ,CAAC,SAAS,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,SAAiB,EACjB,YAAoB,EACpB,mBAA2B;IAE3B,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAClC,OAAO,MAAM,CAAC,2BAA2B,CACvC,UAAU,CAAC,YAAY,CAAC,EACxB,SAAS,EACT,UAAU,CAAC,mBAAmB,CAAC,CAChC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,QAAQ;IACtB,OAAO,UAAU,EAAE,CAAC;AACtB,CAAC"}

package/dist/crypto/index.d.ts

@@ -0,0 +1,6 @@
+export * from './base64.js';
+export * from './hash.js';
+export * from './identity.js';
+export * from './dm.js';
+export * from './sodium.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/crypto/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/crypto/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAC9B,cAAc,SAAS,CAAC;AACxB,cAAc,aAAa,CAAC"}

package/dist/crypto/index.js

@@ -0,0 +1,6 @@
+export * from './base64.js';
+export * from './hash.js';
+export * from './identity.js';
+export * from './dm.js';
+export * from './sodium.js';
+//# sourceMappingURL=index.js.map

package/dist/crypto/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/crypto/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,eAAe,CAAC;AAC9B,cAAc,SAAS,CAAC;AACxB,cAAc,aAAa,CAAC"}

package/dist/crypto/sodium.d.ts

@@ -0,0 +1,3 @@
+import sodium from 'libsodium-wrappers';
+export declare function initSodium(): Promise<typeof sodium>;
+//# sourceMappingURL=sodium.d.ts.map

package/dist/crypto/sodium.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sodium.d.ts","sourceRoot":"","sources":["../../src/crypto/sodium.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AAIxC,wBAAsB,UAAU,IAAI,OAAO,CAAC,OAAO,MAAM,CAAC,CAMzD"}

package/dist/crypto/sodium.js

@@ -0,0 +1,10 @@
+import sodium from 'libsodium-wrappers';
+let initialized = false;
+export async function initSodium() {
+    if (!initialized) {
+        await sodium.ready;
+        initialized = true;
+    }
+    return sodium;
+}
+//# sourceMappingURL=sodium.js.map

package/dist/crypto/sodium.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sodium.js","sourceRoot":"","sources":["../../src/crypto/sodium.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AAExC,IAAI,WAAW,GAAG,KAAK,CAAC;AAExB,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,MAAM,CAAC,KAAK,CAAC;QACnB,WAAW,GAAG,IAAI,CAAC;IACrB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,5 @@
+export * from './types/index.js';
+export * from './crypto/index.js';
+export * from './protocol/index.js';
+export * from './client/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC"}

package/dist/index.js

@@ -0,0 +1,5 @@
+export * from './types/index.js';
+export * from './crypto/index.js';
+export * from './protocol/index.js';
+export * from './client/index.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC"}

package/dist/protocol/canonical.d.ts

@@ -0,0 +1,2 @@
+export declare function canonicalizeJson(value: unknown): string;
+//# sourceMappingURL=canonical.d.ts.map

package/dist/protocol/canonical.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical.d.ts","sourceRoot":"","sources":["../../src/protocol/canonical.ts"],"names":[],"mappings":"AAgBA,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEvD"}

package/dist/protocol/canonical.js

@@ -0,0 +1,16 @@
+function sortValue(value) {
+    if (Array.isArray(value)) {
+        return value.map((entry) => sortValue(entry));
+    }
+    if (value !== null && typeof value === 'object') {
+        const entries = Object.entries(value)
+            .sort(([a], [b]) => a.localeCompare(b))
+            .map(([key, nested]) => [key, sortValue(nested)]);
+        return Object.fromEntries(entries);
+    }
+    return value;
+}
+export function canonicalizeJson(value) {
+    return JSON.stringify(sortValue(value));
+}
+//# sourceMappingURL=canonical.js.map

package/dist/protocol/canonical.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canonical.js","sourceRoot":"","sources":["../../src/protocol/canonical.ts"],"names":[],"mappings":"AAAA,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;aAC7D,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;aACtC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAEpD,OAAO,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;AAC1C,CAAC"}

package/dist/protocol/envelope.d.ts

@@ -0,0 +1,5 @@
+import type { Envelope, UnsignedEnvelope } from '../types/index.js';
+export declare function buildSignatureInput<TPayload extends Record<string, unknown>>(envelope: UnsignedEnvelope<TPayload>): Uint8Array;
+export declare function signEnvelope<TPayload extends Record<string, unknown>>(envelope: UnsignedEnvelope<TPayload>, signingSecretKeyB64: string): Promise<Envelope<TPayload>>;
+export declare function verifyEnvelope<TPayload extends Record<string, unknown>>(envelope: Envelope<TPayload>, signingPublicKeyB64: string): Promise<boolean>;
+//# sourceMappingURL=envelope.d.ts.map

package/dist/protocol/envelope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.d.ts","sourceRoot":"","sources":["../../src/protocol/envelope.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAIpE,wBAAgB,mBAAmB,CAAC,QAAQ,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC1E,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,CAAC,GACnC,UAAU,CAGZ;AAED,wBAAsB,YAAY,CAAC,QAAQ,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACzE,QAAQ,EAAE,gBAAgB,CAAC,QAAQ,CAAC,EACpC,mBAAmB,EAAE,MAAM,GAC1B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAW7B;AAED,wBAAsB,cAAc,CAAC,QAAQ,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC3E,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAC5B,mBAAmB,EAAE,MAAM,GAC1B,OAAO,CAAC,OAAO,CAAC,CAclB"}

package/dist/protocol/envelope.js

@@ -0,0 +1,27 @@
+import { fromBase64, toBase64 } from '../crypto/base64.js';
+import { sha256 } from '../crypto/hash.js';
+import { initSodium } from '../crypto/sodium.js';
+import { canonicalizeJson } from './canonical.js';
+import { envelopeSchema } from './schemas.js';
+export function buildSignatureInput(envelope) {
+    const canonical = canonicalizeJson(envelope);
+    return sha256(Buffer.from(canonical, 'utf8'));
+}
+export async function signEnvelope(envelope, signingSecretKeyB64) {
+    const sodium = await initSodium();
+    const signature = sodium.crypto_sign_detached(buildSignatureInput(envelope), fromBase64(signingSecretKeyB64));
+    return {
+        ...envelope,
+        sig: toBase64(signature),
+    };
+}
+export async function verifyEnvelope(envelope, signingPublicKeyB64) {
+    const parsed = envelopeSchema.safeParse(envelope);
+    if (!parsed.success) {
+        return false;
+    }
+    const sodium = await initSodium();
+    const { sig, ...unsignedEnvelope } = envelope;
+    return sodium.crypto_sign_verify_detached(fromBase64(sig), buildSignatureInput(unsignedEnvelope), fromBase64(signingPublicKeyB64));
+}
+//# sourceMappingURL=envelope.js.map

package/dist/protocol/envelope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envelope.js","sourceRoot":"","sources":["../../src/protocol/envelope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAE9C,MAAM,UAAU,mBAAmB,CACjC,QAAoC;IAEpC,MAAM,SAAS,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAoC,EACpC,mBAA2B;IAE3B,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAClC,MAAM,SAAS,GAAG,MAAM,CAAC,oBAAoB,CAC3C,mBAAmB,CAAC,QAAQ,CAAC,EAC7B,UAAU,CAAC,mBAAmB,CAAC,CAChC,CAAC;IAEF,OAAO;QACL,GAAG,QAAQ;QACX,GAAG,EAAE,QAAQ,CAAC,SAAS,CAAC;KACzB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAA4B,EAC5B,mBAA2B;IAE3B,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAClC,MAAM,EAAE,GAAG,EAAE,GAAG,gBAAgB,EAAE,GAAG,QAAQ,CAAC;IAE9C,OAAO,MAAM,CAAC,2BAA2B,CACvC,UAAU,CAAC,GAAG,CAAC,EACf,mBAAmB,CAAC,gBAAgB,CAAC,EACrC,UAAU,CAAC,mBAAmB,CAAC,CAChC,CAAC;AACJ,CAAC"}

package/dist/protocol/index.d.ts

@@ -0,0 +1,4 @@
+export * from './canonical.js';
+export * from './envelope.js';
+export * from './schemas.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/protocol/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/protocol/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC"}

package/dist/protocol/index.js

@@ -0,0 +1,4 @@
+export * from './canonical.js';
+export * from './envelope.js';
+export * from './schemas.js';
+//# sourceMappingURL=index.js.map

package/dist/protocol/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/protocol/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC"}