@droponair/sdk-js 0.24.3 → 0.25.1

package/dist/index.js

@@ -1,11 +1,13 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.selectTransport = exports.WebTransportTransport = exports.SseTransport = exports.PAYLOAD_FORMAT_VERSION = exports.PROTOCOL_VERSION = exports.SDK_VERSION = void 0;
+exports.MemoryIdentityRecordStore = exports.IndexedDbIdentityRecordStore = exports.WebCryptoIdentityProvider = exports.selectTransport = exports.WebTransportTransport = exports.SseTransport = exports.PAYLOAD_FORMAT_VERSION = exports.PROTOCOL_VERSION = exports.SDK_VERSION = void 0;
+exports.createSecureIdentity = createSecureIdentity;
 exports.initialize = initialize;
 const messaging_client_1 = require("./core/messaging-client");
 const session_manager_1 = require("./core/session-manager");
 const crypto_service_1 = require("./crypto/crypto-service");
 const indexeddb_key_storage_1 = require("./storage/indexeddb-key-storage");
+const webcrypto_identity_provider_1 = require("./crypto/webcrypto-identity-provider");
 var version_1 = require("./version");
 Object.defineProperty(exports, "SDK_VERSION", { enumerable: true, get: function () { return version_1.SDK_VERSION; } });
 Object.defineProperty(exports, "PROTOCOL_VERSION", { enumerable: true, get: function () { return version_1.PROTOCOL_VERSION; } });
@@ -16,23 +18,65 @@ function resolveStorage(adapter) {
     }
     return new indexeddb_key_storage_1.IndexedDbKeyStorage();
 }
+/**
+ * An identity whose private key script cannot read, or `null` where the platform
+ * cannot provide one.
+ *
+ * Returns `null` rather than throwing, and rather than quietly handing back a
+ * weaker implementation, because those are the two ways a caller ends up
+ * believing it has a guarantee it does not have. A `null` here means: this engine
+ * cannot do it, carry on with the ordinary path and know that you did.
+ *
+ * Two separate conditions are checked, and both matter. `isSupported` asks
+ * whether the primitive exists. `canPersist` asks whether a key survives being
+ * stored and read back, which WebKit fails for X25519 while reporting the write
+ * as successful. An identity that silently regenerates every load makes every
+ * previous conversation undecryptable, with nothing raised to explain it, so the
+ * check is worth its round trip.
+ *
+ * Migration is the caller's to trigger, via `migrateFromKeyStorage`, because it
+ * removes the raw key and that is not a decision to take on someone's behalf.
+ */
+async function createSecureIdentity(store) {
+    if (!(await webcrypto_identity_provider_1.WebCryptoIdentityProvider.isSupported())) {
+        return null;
+    }
+    const recordStore = store ?? new webcrypto_identity_provider_1.IndexedDbIdentityRecordStore();
+    if (!(await webcrypto_identity_provider_1.WebCryptoIdentityProvider.canPersist(recordStore))) {
+        return null;
+    }
+    return new webcrypto_identity_provider_1.WebCryptoIdentityProvider(recordStore);
+}
 async function initialize(options) {
     const storage = resolveStorage(options.storage);
     const sessionManager = new session_manager_1.SessionManager();
-    const cryptoService = new crypto_service_1.CryptoService(storage, sessionManager);
+    // An explicitly supplied identity provider owns the key agreement; otherwise
+    // the storage adapter does, exactly as in every previous release.
+    const cryptoService = new crypto_service_1.CryptoService(options.identity ?? storage, sessionManager);
     const client = new messaging_client_1.MessagingClient(options, cryptoService, sessionManager, storage);
     if (options.autoConnect !== false) {
         await client.connect();
     }
     return client;
 }
-// Phase 4.2.1: HTTP fallback lane primitive for restrictive networks.
+// HTTP fallback lane primitive for restrictive networks.
 var sse_transport_1 = require("./transport/sse-transport");
 Object.defineProperty(exports, "SseTransport", { enumerable: true, get: function () { return sse_transport_1.SseTransport; } });
-// Phase 4.3: WebTransport (HTTP/3) lane primitive.
+// WebTransport (HTTP/3) lane primitive.
 var webtransport_transport_1 = require("./transport/webtransport-transport");
 Object.defineProperty(exports, "WebTransportTransport", { enumerable: true, get: function () { return webtransport_transport_1.WebTransportTransport; } });
-// Phase 4.6: transport auto-select - intersects runtime + platform support.
+// transport auto-select - intersects runtime + platform support.
 var auto_select_1 = require("./transport/auto-select");
 Object.defineProperty(exports, "selectTransport", { enumerable: true, get: function () { return auto_select_1.selectTransport; } });
+/**
+ * Identity providers, for a private key that script cannot read.
+ *
+ * Exported so a consumer can construct one deliberately, supply its own record
+ * store, or implement {@link SecureIdentityProvider} against custody of its own.
+ * The platform offers the capability; it does not impose an implementation.
+ */
+var webcrypto_identity_provider_2 = require("./crypto/webcrypto-identity-provider");
+Object.defineProperty(exports, "WebCryptoIdentityProvider", { enumerable: true, get: function () { return webcrypto_identity_provider_2.WebCryptoIdentityProvider; } });
+Object.defineProperty(exports, "IndexedDbIdentityRecordStore", { enumerable: true, get: function () { return webcrypto_identity_provider_2.IndexedDbIdentityRecordStore; } });
+Object.defineProperty(exports, "MemoryIdentityRecordStore", { enumerable: true, get: function () { return webcrypto_identity_provider_2.MemoryIdentityRecordStore; } });
 exports.default = { initialize };

package/dist/transport/auto-select.d.ts

@@ -1,5 +1,5 @@
 /**
- * Transport auto-select (Phase 4.6).
+ * Transport auto-select.
  *
  * Tiny helper that probes which transport lanes the runtime AND the platform
  * BOTH support, and returns the best one for this client/host pair.

package/dist/transport/auto-select.js

@@ -1,6 +1,6 @@
 "use strict";
 /**
- * Transport auto-select (Phase 4.6).
+ * Transport auto-select.
  *
  * Tiny helper that probes which transport lanes the runtime AND the platform
  * BOTH support, and returns the best one for this client/host pair.

package/dist/transport/protobuf-codec.d.ts

@@ -116,7 +116,7 @@ export interface WireGroupCallFrame {
     groupId: string;
     targetUserId?: string;
     payload?: string;
-    /** Set instead of groupId when the multi-party call belongs to a Room (Feature 3.1). */
+    /** Set instead of groupId when the multi-party call belongs to a Room. */
     roomId?: string;
 }
 /**

package/dist/transport/protobuf-codec.js

@@ -404,7 +404,7 @@ class ProtobufCodec {
             // Event.type is a SCREAMING_SNAKE_CASE enum string (e.g. LIMIT_REACHED).
             // A GroupMessageNotification, BroadcastNotification, or Ack decoded here
             // carries a UUID (messageId / broadcastId) in field 1, which never matches
-            // this shape — so this reliably rejects those overlapping frame types and
+            // this shape, so this reliably rejects those overlapping frame types and
             // lets Event be probed before them.
             if (!decoded.type || !/^[A-Z][A-Z0-9_]*$/.test(decoded.type)) {
                 return null;

package/dist/transport/sse-transport.d.ts

@@ -1,5 +1,5 @@
 /**
- * SSE-lane primitive (Phase 4.2.1 v1).
+ * SSE-lane primitive.
  *
  * Standalone client for the platform's HTTP fallback transport
  * (`GET /v1/transport/stream` for receive, `POST /v1/transport/send` for

package/dist/transport/sse-transport.js

@@ -1,6 +1,6 @@
 "use strict";
 /**
- * SSE-lane primitive (Phase 4.2.1 v1).
+ * SSE-lane primitive.
  *
  * Standalone client for the platform's HTTP fallback transport
  * (`GET /v1/transport/stream` for receive, `POST /v1/transport/send` for

package/dist/transport/webtransport-transport.d.ts

@@ -1,8 +1,8 @@
 /**
- * WebTransport (HTTP/3) lane primitive (Phase 4.3).
+ * WebTransport (HTTP/3) lane primitive.
  *
- * Standalone client for the platform's WebTransport endpoint, terminated by
- * the `droponair-webtransport` Go sidecar and bridged into sdk-be `/ws`.
+ * Standalone client for the platform's WebTransport endpoint, which carries
+ * the same session as the WebSocket lane.
  * Browser-native `WebTransport` API; no polyfill ships with the SDK.
  *
  * Browser support as of 2026-05:

package/dist/transport/webtransport-transport.js

@@ -1,9 +1,9 @@
 "use strict";
 /**
- * WebTransport (HTTP/3) lane primitive (Phase 4.3).
+ * WebTransport (HTTP/3) lane primitive.
  *
- * Standalone client for the platform's WebTransport endpoint, terminated by
- * the `droponair-webtransport` Go sidecar and bridged into sdk-be `/ws`.
+ * Standalone client for the platform's WebTransport endpoint, which carries
+ * the same session as the WebSocket lane.
  * Browser-native `WebTransport` API; no polyfill ships with the SDK.
  *
  * Browser support as of 2026-05:

package/dist/version.d.ts

@@ -7,7 +7,7 @@
  *   MINOR, additive feature (e.g. multi-device payloads, new call event type)
  *   PATCH, bug-fix / perf improvement with no wire or API change
  */
-export declare const SDK_VERSION = "0.24.3";
+export declare const SDK_VERSION = "0.25.1";
 /**
  * Binary encrypted-payload format version.
  * Included as the first byte of every encrypted payload so receivers can

package/dist/version.js

@@ -10,7 +10,7 @@ exports.PROTOCOL_VERSION = exports.PAYLOAD_FORMAT_VERSION = exports.SDK_VERSION
  *   MINOR, additive feature (e.g. multi-device payloads, new call event type)
  *   PATCH, bug-fix / perf improvement with no wire or API change
  */
-exports.SDK_VERSION = '0.24.3';
+exports.SDK_VERSION = '0.25.1';
 /**
  * Binary encrypted-payload format version.
  * Included as the first byte of every encrypted payload so receivers can

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@droponair/sdk-js",
-  "version": "0.24.3",
-  "description": "DropOnAir SDK for end-to-end encrypted messaging",
+  "version": "0.25.1",
+  "description": "End-to-end encrypted messaging, voice and video calling SDK. The relay never sees your keys or message content.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "files": [
@@ -18,19 +18,30 @@
     "prepublishOnly": "npm run build"
   },
   "keywords": [
-    "droponair",
-    "messaging",
     "e2ee",
-    "encryption",
-    "end-to-end",
-    "sdk"
+    "end-to-end-encryption",
+    "encrypted-chat",
+    "chat-api",
+    "chat-sdk",
+    "messaging",
+    "messaging-sdk",
+    "realtime",
+    "websocket",
+    "webrtc",
+    "voice-calls",
+    "video-calls",
+    "video-calling",
+    "group-chat",
+    "push-notifications",
+    "sdk",
+    "droponair"
   ],
   "author": "DropOnAir",
   "license": "MIT",
   "publishConfig": {
     "access": "public"
   },
-  "homepage": "https://droponair.com",
+  "homepage": "https://www.droponair.com/",
   "engines": {
     "node": ">=18.0.0"
   },
@@ -40,10 +51,18 @@
     "tweetnacl-util": "^0.15.1"
   },
   "devDependencies": {
+    "@playwright/test": "^1.62.1",
+    "@types/jest": "^30.0.0",
     "@types/node": "^20.0.0",
+    "esbuild": "^0.28.2",
     "eslint": "^8.0.0",
     "jest": "^29.0.0",
+    "ts-jest": "^29.4.12",
     "ts-node": "^10.9.2",
     "typescript": "^5.0.0"
+  },
+  "bugs": {
+    "url": "https://www.droponair.com/contact/",
+    "email": "info@droponair.com"
   }
 }