@ethora/chat-component-rn 26.10.5 → 26.10.7

package/plugins/notification-service/SealedBox.swift

@@ -0,0 +1,355 @@
+import CryptoKit
+import Foundation
+
+/// libsodium's sealed box (`crypto_box_seal_open`) without libsodium: the
+/// notification service extension cannot load the app's JavaScript, and a
+/// pod for the extension is one more thing every host app would have to
+/// carry (the Sodium pod also excludes arm64 simulators). X25519 comes from
+/// CryptoKit; HSalsa20, XSalsa20, Poly1305 and BLAKE2b are ported from
+/// tweetnacl and poly1305-donna / the BLAKE2 reference, public domain.
+///
+/// Layout: ephemeral public key (32) || crypto_box(message, nonce,
+/// recipient pk, ephemeral sk), with crypto_box = XSalsa20-Poly1305 under
+/// HSalsa20(X25519 shared secret) and nonce = BLAKE2b-192(epk || rpk).
+/// The SDK's `src/push/sealedBox.ts` is the same construction in JS; both
+/// are pinned against libsodium (JS: `__tests__/sealedBox.test.ts`, Swift:
+/// `plugins/notification-service/check/`).
+enum SealedBox {
+  static let publicKeyBytes = 32
+  static let secretKeyBytes = 32
+  static let macBytes = 16
+  static let nonceBytes = 24
+  /// Ephemeral public key + Poly1305 tag.
+  static let overheadBytes = 48
+
+  /// The X25519 public key of a secret key (`crypto_scalarmult_base`).
+  static func publicKey(of secretKey: [UInt8]) -> [UInt8]? {
+    guard let key = try? Curve25519.KeyAgreement.PrivateKey(rawRepresentation: secretKey) else { return nil }
+    return [UInt8](key.publicKey.rawRepresentation)
+  }
+
+  /// `crypto_box_seal_open`. Nil for anything that does not open.
+  static func open(_ sealed: [UInt8], secretKey: [UInt8]) -> [UInt8]? {
+    guard sealed.count >= overheadBytes, secretKey.count == secretKeyBytes,
+          let recipientPublicKey = publicKey(of: secretKey)
+    else { return nil }
+    let ephemeralPublicKey = Array(sealed[0..<publicKeyBytes])
+    let box = Array(sealed[publicKeyBytes...])
+    guard let shared = x25519(secretKey: secretKey, publicKey: ephemeralPublicKey) else { return nil }
+    let key = Salsa.hsalsa20(key: shared, input: [UInt8](repeating: 0, count: 16))
+    let nonce = Blake2b.hash(ephemeralPublicKey + recipientPublicKey, outputLength: nonceBytes)
+    return secretboxOpen(box, nonce: nonce, key: key)
+  }
+
+  private static func x25519(secretKey: [UInt8], publicKey: [UInt8]) -> [UInt8]? {
+    guard let priv = try? Curve25519.KeyAgreement.PrivateKey(rawRepresentation: secretKey),
+          let pub = try? Curve25519.KeyAgreement.PublicKey(rawRepresentation: publicKey),
+          let shared = try? priv.sharedSecretFromKeyAgreement(with: pub)
+    else { return nil }
+    return shared.withUnsafeBytes { [UInt8]($0) }
+  }
+
+  /// `crypto_secretbox_open_easy`: tag (16) || ciphertext under XSalsa20-Poly1305.
+  static func secretboxOpen(_ box: [UInt8], nonce: [UInt8], key: [UInt8]) -> [UInt8]? {
+    guard box.count >= macBytes, nonce.count == nonceBytes, key.count == 32 else { return nil }
+    let tag = Array(box[0..<macBytes])
+    let ciphertext = Array(box[macBytes...])
+    // Keystream block 0: the first 32 bytes key Poly1305, the message starts at byte 32.
+    let stream = Salsa.xsalsa20(key: key, nonce: nonce, length: 32 + ciphertext.count)
+    let expected = Poly1305.mac(ciphertext, key: Array(stream[0..<32]))
+    guard constantTimeEqual(expected, tag) else { return nil }
+    var message = [UInt8](repeating: 0, count: ciphertext.count)
+    for i in 0..<ciphertext.count { message[i] = ciphertext[i] ^ stream[32 + i] }
+    return message
+  }
+
+  private static func constantTimeEqual(_ a: [UInt8], _ b: [UInt8]) -> Bool {
+    guard a.count == b.count else { return false }
+    var diff: UInt8 = 0
+    for i in 0..<a.count { diff |= a[i] ^ b[i] }
+    return diff == 0
+  }
+}
+
+// MARK: - Salsa20 / HSalsa20 / XSalsa20 (tweetnacl)
+
+enum Salsa {
+  private static let sigma: [UInt32] = load32([UInt8]("expand 32-byte k".utf8))
+
+  private static func load32(_ bytes: [UInt8]) -> [UInt32] {
+    var words = [UInt32](repeating: 0, count: bytes.count / 4)
+    for i in 0..<words.count {
+      var w: UInt32 = 0
+      for j in 0..<4 { w |= UInt32(bytes[i * 4 + j]) << (8 * UInt32(j)) }
+      words[i] = w
+    }
+    return words
+  }
+
+  private static func store32(_ words: [UInt32]) -> [UInt8] {
+    var out = [UInt8](repeating: 0, count: words.count * 4)
+    for (i, w) in words.enumerated() {
+      out[i * 4] = UInt8(truncatingIfNeeded: w)
+      out[i * 4 + 1] = UInt8(truncatingIfNeeded: w >> 8)
+      out[i * 4 + 2] = UInt8(truncatingIfNeeded: w >> 16)
+      out[i * 4 + 3] = UInt8(truncatingIfNeeded: w >> 24)
+    }
+    return out
+  }
+
+  @inline(__always) private static func rotl(_ v: UInt32, _ n: UInt32) -> UInt32 {
+    (v << n) | (v >> (32 - n))
+  }
+
+  /// The Salsa20 state: sigma on the diagonal, key in two halves, 16-byte input in the middle row.
+  private static func state(key: [UInt8], input: [UInt8]) -> [UInt32] {
+    let k = load32(key)
+    let n = load32(input)
+    return [
+      sigma[0], k[0], k[1], k[2],
+      k[3], sigma[1], n[0], n[1],
+      n[2], n[3], sigma[2], k[4],
+      k[5], k[6], k[7], sigma[3],
+    ]
+  }
+
+  /// 20 rounds (10 double rounds) in place.
+  private static func rounds(_ x: inout [UInt32]) {
+    @inline(__always) func quarter(_ a: Int, _ b: Int, _ c: Int, _ d: Int) {
+      x[b] ^= rotl(x[a] &+ x[d], 7)
+      x[c] ^= rotl(x[b] &+ x[a], 9)
+      x[d] ^= rotl(x[c] &+ x[b], 13)
+      x[a] ^= rotl(x[d] &+ x[c], 18)
+    }
+    for _ in 0..<10 {
+      // column round
+      quarter(0, 4, 8, 12)
+      quarter(5, 9, 13, 1)
+      quarter(10, 14, 2, 6)
+      quarter(15, 3, 7, 11)
+      // row round
+      quarter(0, 1, 2, 3)
+      quarter(5, 6, 7, 4)
+      quarter(10, 11, 8, 9)
+      quarter(15, 12, 13, 14)
+    }
+  }
+
+  /// HSalsa20: 32-byte key, 16-byte input → 32-byte subkey (no feed-forward).
+  static func hsalsa20(key: [UInt8], input: [UInt8]) -> [UInt8] {
+    var x = state(key: key, input: input)
+    rounds(&x)
+    return store32([x[0], x[5], x[10], x[15], x[6], x[7], x[8], x[9]])
+  }
+
+  /// One 64-byte Salsa20 block for the 8-byte nonce and the block counter.
+  private static func block(key: [UInt8], nonce: [UInt8], counter: UInt64) -> [UInt8] {
+    var input = nonce
+    for i in 0..<8 { input.append(UInt8(truncatingIfNeeded: counter >> (8 * UInt64(i)))) }
+    let initial = state(key: key, input: input)
+    var x = initial
+    rounds(&x)
+    for i in 0..<16 { x[i] = x[i] &+ initial[i] }
+    return store32(x)
+  }
+
+  /// XSalsa20 keystream: HSalsa20 over the first 16 nonce bytes, Salsa20 over the last 8.
+  static func xsalsa20(key: [UInt8], nonce: [UInt8], length: Int) -> [UInt8] {
+    let subkey = hsalsa20(key: key, input: Array(nonce[0..<16]))
+    let nonce8 = Array(nonce[16..<24])
+    var out = [UInt8]()
+    out.reserveCapacity(length + 64)
+    var counter: UInt64 = 0
+    while out.count < length {
+      out += block(key: subkey, nonce: nonce8, counter: counter)
+      counter += 1
+    }
+    return Array(out[0..<length])
+  }
+}
+
+// MARK: - Poly1305 (poly1305-donna, 26-bit limbs)
+
+enum Poly1305 {
+  private static func load32(_ m: [UInt8], _ i: Int) -> UInt32 {
+    var w: UInt32 = 0
+    for j in 0..<4 { w |= UInt32(m[i + j]) << (8 * UInt32(j)) }
+    return w
+  }
+
+  static func mac(_ message: [UInt8], key: [UInt8]) -> [UInt8] {
+    precondition(key.count == 32)
+    // r, clamped
+    let r0 = load32(key, 0) & 0x3ffffff
+    let r1 = (load32(key, 3) >> 2) & 0x3ffff03
+    let r2 = (load32(key, 6) >> 4) & 0x3ffc0ff
+    let r3 = (load32(key, 9) >> 6) & 0x3f03fff
+    let r4 = (load32(key, 12) >> 8) & 0x00fffff
+    let s1 = r1 &* 5, s2 = r2 &* 5, s3 = r3 &* 5, s4 = r4 &* 5
+    var h0: UInt32 = 0, h1: UInt32 = 0, h2: UInt32 = 0, h3: UInt32 = 0, h4: UInt32 = 0
+
+    func absorb(_ m: [UInt8], _ offset: Int, hibit: UInt32) {
+      h0 &+= load32(m, offset) & 0x3ffffff
+      h1 &+= (load32(m, offset + 3) >> 2) & 0x3ffffff
+      h2 &+= (load32(m, offset + 6) >> 4) & 0x3ffffff
+      h3 &+= (load32(m, offset + 9) >> 6) & 0x3ffffff
+      h4 &+= (load32(m, offset + 12) >> 8) | hibit
+
+      let d0 = UInt64(h0) * UInt64(r0) + UInt64(h1) * UInt64(s4) + UInt64(h2) * UInt64(s3) + UInt64(h3) * UInt64(s2) + UInt64(h4) * UInt64(s1)
+      var d1 = UInt64(h0) * UInt64(r1) + UInt64(h1) * UInt64(r0) + UInt64(h2) * UInt64(s4) + UInt64(h3) * UInt64(s3) + UInt64(h4) * UInt64(s2)
+      var d2 = UInt64(h0) * UInt64(r2) + UInt64(h1) * UInt64(r1) + UInt64(h2) * UInt64(r0) + UInt64(h3) * UInt64(s4) + UInt64(h4) * UInt64(s3)
+      var d3 = UInt64(h0) * UInt64(r3) + UInt64(h1) * UInt64(r2) + UInt64(h2) * UInt64(r1) + UInt64(h3) * UInt64(r0) + UInt64(h4) * UInt64(s4)
+      var d4 = UInt64(h0) * UInt64(r4) + UInt64(h1) * UInt64(r3) + UInt64(h2) * UInt64(r2) + UInt64(h3) * UInt64(r1) + UInt64(h4) * UInt64(r0)
+
+      var c = UInt32(truncatingIfNeeded: d0 >> 26); h0 = UInt32(truncatingIfNeeded: d0) & 0x3ffffff
+      d1 += UInt64(c); c = UInt32(truncatingIfNeeded: d1 >> 26); h1 = UInt32(truncatingIfNeeded: d1) & 0x3ffffff
+      d2 += UInt64(c); c = UInt32(truncatingIfNeeded: d2 >> 26); h2 = UInt32(truncatingIfNeeded: d2) & 0x3ffffff
+      d3 += UInt64(c); c = UInt32(truncatingIfNeeded: d3 >> 26); h3 = UInt32(truncatingIfNeeded: d3) & 0x3ffffff
+      d4 += UInt64(c); c = UInt32(truncatingIfNeeded: d4 >> 26); h4 = UInt32(truncatingIfNeeded: d4) & 0x3ffffff
+      h0 &+= c &* 5; c = h0 >> 26; h0 &= 0x3ffffff
+      h1 &+= c
+    }
+
+    var offset = 0
+    while message.count - offset >= 16 {
+      absorb(message, offset, hibit: 1 << 24)
+      offset += 16
+    }
+    if offset < message.count {
+      var last = Array(message[offset...])
+      last.append(1)
+      while last.count < 16 { last.append(0) }
+      absorb(last, 0, hibit: 0)
+    }
+
+    // full carry
+    var c = h1 >> 26; h1 &= 0x3ffffff
+    h2 &+= c; c = h2 >> 26; h2 &= 0x3ffffff
+    h3 &+= c; c = h3 >> 26; h3 &= 0x3ffffff
+    h4 &+= c; c = h4 >> 26; h4 &= 0x3ffffff
+    h0 &+= c &* 5; c = h0 >> 26; h0 &= 0x3ffffff
+    h1 &+= c
+
+    // h + -p
+    var g0 = h0 &+ 5; c = g0 >> 26; g0 &= 0x3ffffff
+    var g1 = h1 &+ c; c = g1 >> 26; g1 &= 0x3ffffff
+    var g2 = h2 &+ c; c = g2 >> 26; g2 &= 0x3ffffff
+    var g3 = h3 &+ c; c = g3 >> 26; g3 &= 0x3ffffff
+    var g4 = h4 &+ c &- (1 << 26)
+
+    // select h if h < p, else h - p
+    var mask = (g4 >> 31) &- 1
+    g0 &= mask; g1 &= mask; g2 &= mask; g3 &= mask; g4 &= mask
+    mask = ~mask
+    h0 = (h0 & mask) | g0
+    h1 = (h1 & mask) | g1
+    h2 = (h2 & mask) | g2
+    h3 = (h3 & mask) | g3
+    h4 = (h4 & mask) | g4
+
+    // h = h % 2^128
+    h0 = (h0 | (h1 << 26))
+    h1 = ((h1 >> 6) | (h2 << 20))
+    h2 = ((h2 >> 12) | (h3 << 14))
+    h3 = ((h3 >> 18) | (h4 << 8))
+
+    // mac = (h + pad) % 2^128
+    var f = UInt64(h0) + UInt64(load32(key, 16)); h0 = UInt32(truncatingIfNeeded: f)
+    f = UInt64(h1) + UInt64(load32(key, 20)) + (f >> 32); h1 = UInt32(truncatingIfNeeded: f)
+    f = UInt64(h2) + UInt64(load32(key, 24)) + (f >> 32); h2 = UInt32(truncatingIfNeeded: f)
+    f = UInt64(h3) + UInt64(load32(key, 28)) + (f >> 32); h3 = UInt32(truncatingIfNeeded: f)
+
+    var out = [UInt8]()
+    for w in [h0, h1, h2, h3] {
+      for i in 0..<4 { out.append(UInt8(truncatingIfNeeded: w >> (8 * UInt32(i)))) }
+    }
+    return out
+  }
+}
+
+// MARK: - BLAKE2b (RFC 7693), unkeyed
+
+enum Blake2b {
+  private static let iv: [UInt64] = [
+    0x6a09e667f3bcc908, 0xbb67ae8584caa73b, 0x3c6ef372fe94f82b, 0xa54ff53a5f1d36f1,
+    0x510e527fade682d1, 0x9b05688c2b3e6c1f, 0x1f83d9abfb41bd6b, 0x5be0cd19137e2179,
+  ]
+
+  private static let sigma: [[Int]] = [
+    [0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15],
+    [14, 10, 4, 8, 9, 15, 13, 6, 1, 12, 0, 2, 11, 7, 5, 3],
+    [11, 8, 12, 0, 5, 2, 15, 13, 10, 14, 3, 6, 7, 1, 9, 4],
+    [7, 9, 3, 1, 13, 12, 11, 14, 2, 6, 5, 10, 4, 0, 15, 8],
+    [9, 0, 5, 7, 2, 4, 10, 15, 14, 1, 11, 12, 6, 8, 3, 13],
+    [2, 12, 6, 10, 0, 11, 8, 3, 4, 13, 7, 5, 15, 14, 1, 9],
+    [12, 5, 1, 15, 14, 13, 4, 10, 0, 7, 6, 3, 9, 2, 8, 11],
+    [13, 11, 7, 14, 12, 1, 3, 9, 5, 0, 15, 4, 8, 6, 2, 10],
+    [6, 15, 14, 9, 11, 3, 0, 8, 12, 2, 13, 7, 1, 4, 10, 5],
+    [10, 2, 8, 4, 7, 6, 1, 5, 15, 11, 9, 14, 3, 12, 13, 0],
+  ]
+
+  @inline(__always) private static func rotr(_ v: UInt64, _ n: UInt64) -> UInt64 {
+    (v >> n) | (v << (64 - n))
+  }
+
+  private static func compress(_ h: inout [UInt64], block: [UInt8], counter: UInt64, last: Bool) {
+    var m = [UInt64](repeating: 0, count: 16)
+    for i in 0..<16 {
+      var w: UInt64 = 0
+      for j in 0..<8 { w |= UInt64(block[i * 8 + j]) << (8 * UInt64(j)) }
+      m[i] = w
+    }
+    var v = h + iv
+    v[12] ^= counter
+    // counter high word stays 0: inputs here are far below 2^64 bytes
+    if last { v[14] = ~v[14] }
+
+    @inline(__always) func g(_ a: Int, _ b: Int, _ c: Int, _ d: Int, _ x: UInt64, _ y: UInt64) {
+      v[a] = v[a] &+ v[b] &+ x
+      v[d] = rotr(v[d] ^ v[a], 32)
+      v[c] = v[c] &+ v[d]
+      v[b] = rotr(v[b] ^ v[c], 24)
+      v[a] = v[a] &+ v[b] &+ y
+      v[d] = rotr(v[d] ^ v[a], 16)
+      v[c] = v[c] &+ v[d]
+      v[b] = rotr(v[b] ^ v[c], 63)
+    }
+
+    for round in 0..<12 {
+      let s = sigma[round % 10]
+      g(0, 4, 8, 12, m[s[0]], m[s[1]])
+      g(1, 5, 9, 13, m[s[2]], m[s[3]])
+      g(2, 6, 10, 14, m[s[4]], m[s[5]])
+      g(3, 7, 11, 15, m[s[6]], m[s[7]])
+      g(0, 5, 10, 15, m[s[8]], m[s[9]])
+      g(1, 6, 11, 12, m[s[10]], m[s[11]])
+      g(2, 7, 8, 13, m[s[12]], m[s[13]])
+      g(3, 4, 9, 14, m[s[14]], m[s[15]])
+    }
+    for i in 0..<8 { h[i] ^= v[i] ^ v[i + 8] }
+  }
+
+  /// BLAKE2b with no key, `outputLength` 1...64 bytes (`crypto_generichash`).
+  static func hash(_ message: [UInt8], outputLength: Int) -> [UInt8] {
+    precondition((1...64).contains(outputLength))
+    var h = iv
+    h[0] ^= 0x01010000 ^ UInt64(outputLength)
+
+    var offset = 0
+    // Every full block except the last one; the last block (full or not) is final.
+    while message.count - offset > 128 {
+      compress(&h, block: Array(message[offset..<offset + 128]), counter: UInt64(offset + 128), last: false)
+      offset += 128
+    }
+    var last = Array(message[offset...])
+    let consumed = UInt64(message.count)
+    while last.count < 128 { last.append(0) }
+    compress(&h, block: last, counter: consumed, last: true)
+
+    var out = [UInt8]()
+    for w in h {
+      for i in 0..<8 { out.append(UInt8(truncatingIfNeeded: w >> (8 * UInt64(i)))) }
+    }
+    return Array(out[0..<outputLength])
+  }
+}

package/plugins/notification-service/check/gen-vectors.mjs

@@ -0,0 +1,24 @@
+// Sealed boxes made by libsodium for known keys, for the Swift check.
+import sodium from 'libsodium-wrappers-sumo';
+import { createHash } from 'node:crypto';
+await sodium.ready;
+const b64 = (u) => Buffer.from(u).toString('base64');
+const vectors = [];
+const messages = ['', 'a', 'hello', 'x'.repeat(15), 'y'.repeat(16), 'z'.repeat(17), 'q'.repeat(1000),
+  JSON.stringify({ title: 'Alice', body: 'héllo 👋 — ok', sender: 'Alice', senderJid: 'a@x', chat: 'Team', chatJid: 't@c.x', msgID: '1', image: '' })];
+for (const message of messages) {
+  const pair = sodium.crypto_box_keypair();
+  const sealed = sodium.crypto_box_seal(sodium.from_string(message), pair.publicKey);
+  vectors.push({ sk: b64(pair.privateKey), pk: b64(pair.publicKey), sealed: b64(sealed), plaintext: b64(sodium.from_string(message)),
+    kid: createHash('sha256').update(Buffer.from(pair.publicKey)).digest('hex').slice(0, 16) });
+}
+// primitives
+const key = sodium.randombytes_buf(32), nonce = sodium.randombytes_buf(24), msg = sodium.randombytes_buf(100);
+const box = sodium.crypto_secretbox_easy(msg, nonce, key);
+const hs = null;
+const bl = sodium.crypto_generichash(24, msg);
+const pkey = sodium.randombytes_buf(32);
+const auth = sodium.crypto_onetimeauth(msg, pkey);
+const out = { vectors, secretbox: { key: b64(key), nonce: b64(nonce), msg: b64(msg), box: b64(box) },
+  blake2b24: { msg: b64(msg), out: b64(bl) }, poly1305: { key: b64(pkey), msg: b64(msg), out: b64(auth) } };
+process.stdout.write(JSON.stringify(out));

package/plugins/notification-service/check/main.swift

@@ -0,0 +1,37 @@
+import Foundation
+
+struct Vector: Decodable { let sk: String; let pk: String; let sealed: String; let plaintext: String; let kid: String }
+struct Secretbox: Decodable { let key: String; let nonce: String; let msg: String; let box: String }
+struct Blake: Decodable { let msg: String; let out: String }
+struct Poly: Decodable { let key: String; let msg: String; let out: String }
+struct File: Decodable { let vectors: [Vector]; let secretbox: Secretbox; let blake2b24: Blake; let poly1305: Poly }
+
+func b(_ s: String) -> [UInt8] { [UInt8](Data(base64Encoded: s)!) }
+
+let path = CommandLine.arguments[1]
+let file = try! JSONDecoder().decode(File.self, from: Data(contentsOf: URL(fileURLWithPath: path)))
+var failures = 0
+func check(_ name: String, _ ok: Bool) {
+  print((ok ? "ok   " : "FAIL ") + name)
+  if !ok { failures += 1 }
+}
+
+check("blake2b-24", Blake2b.hash(b(file.blake2b24.msg), outputLength: 24) == b(file.blake2b24.out))
+check("poly1305", Poly1305.mac(b(file.poly1305.msg), key: b(file.poly1305.key)) == b(file.poly1305.out))
+check("secretbox open", SealedBox.secretboxOpen(b(file.secretbox.box), nonce: b(file.secretbox.nonce), key: b(file.secretbox.key)) == b(file.secretbox.msg))
+var damaged = b(file.secretbox.box); damaged[damaged.count - 1] ^= 1
+check("secretbox rejects a damaged box", SealedBox.secretboxOpen(damaged, nonce: b(file.secretbox.nonce), key: b(file.secretbox.key)) == nil)
+
+for (i, v) in file.vectors.enumerated() {
+  let sk = b(v.sk)
+  check("vector \(i) public key", SealedBox.publicKey(of: sk) == b(v.pk))
+  let opened = SealedBox.open(b(v.sealed), secretKey: sk)
+  check("vector \(i) opens (\(b(v.plaintext).count) bytes)", opened == b(v.plaintext))
+  var bad = b(v.sealed); bad[40] ^= 0x80
+  check("vector \(i) rejects a damaged box", SealedBox.open(bad, secretKey: sk) == nil)
+  let other = b(file.vectors[(i + 1) % file.vectors.count].sk)
+  check("vector \(i) rejects another key", SealedBox.open(b(v.sealed), secretKey: other) == nil)
+}
+check("short box", SealedBox.open([UInt8](repeating: 1, count: 47), secretKey: b(file.vectors[0].sk)) == nil)
+print(failures == 0 ? "ALL OK" : "\(failures) FAILED")
+exit(failures == 0 ? 0 : 1)

package/plugins/notification-service/check/run.sh

@@ -0,0 +1,12 @@
+#!/usr/bin/env bash
+# Pins SealedBox.swift against libsodium: vectors.json holds sealed boxes,
+# a secretbox, a BLAKE2b-192 and a Poly1305 tag made by libsodium
+# (gen-vectors.mjs, needs `npm i libsodium-wrappers-sumo` next to it), and
+# main.swift opens them with the extension's code. Needs Xcode's swiftc.
+#
+#   plugins/notification-service/check/run.sh
+set -euo pipefail
+cd "$(dirname "$0")"
+out="$(mktemp -d)"
+swiftc -O ../SealedBox.swift main.swift -o "$out/check"
+"$out/check" vectors.json

package/plugins/notification-service/check/vectors.json

@@ -0,0 +1 @@
+{"vectors":[{"sk":"psM/YEAHlVzqtN7KovphUjE5m7l17ff2MtiE3XU3Rwc=","pk":"P0AoVn+A+5HOI2AWQR5LXYfM9PHq3kJp1FCs2HRCkXY=","sealed":"G3wRmRzod33/f03nW+VhrVO2l4nnAvjGQdTvmzclOxE4cjpoZLBRb+HnFofI4ypH","plaintext":"","kid":"fdc829f52a022956"},{"sk":"Ogi04QlXCW1IiS2xC3KnnFkpbcfABAGUkGb4GxcLEO8=","pk":"FQQKe0KEz2TtlctxVMQcpuu+XNTygtNsiu+D6PtUAFE=","sealed":"bKRCdjHWR0LV9UWcpjKTYXdYGApsnfDm2q5MCWQCFzPQ4CEOt0+cnBZbWjVBoP5VVw==","plaintext":"YQ==","kid":"cb31ce9c7a59fb37"},{"sk":"4Eyj9vf7de+t6iaYSg84h1ewjMdotI4ModztdG3ATg8=","pk":"Otr0gAyXgdMbayn6xJPrblxVl69qQ59XdWBjRpX7JQc=","sealed":"9ouwN9/psosK75W1BruvhtjoJwp6JtazX1uhIrq+5QZuRFKFrW5LIkFpY5DN4irDdsugdZ0=","plaintext":"aGVsbG8=","kid":"730fca4a57de1bc7"},{"sk":"7ny883FomgIgDoED095pPBX0wwDH4bakBIBeMwkylrY=","pk":"mlNQn4wPpUoHdW4sn/OzwTuHtloRvWrbHXDuuR1qYhw=","sealed":"46McjbyP1UQ0ZlHmeQJatsWhiKxdiREiDZ8VEIRVcH/GSjfUNIEXiu0sBMTJDzCS2DsN/IsltMFuGq0/gpNi","plaintext":"eHh4eHh4eHh4eHh4eHh4","kid":"9306f2956c55f34a"},{"sk":"SiT54TCZ8JikZYE/8d5HO9Py4h2frgC4UeyFOt1nWGc=","pk":"hlinYRVWthcOWNcpj1+8GLiPglaMduupEJZbPH59wkg=","sealed":"7PFOl2gyBwvfoxfiqOJujHB5tPTTXFlwrH4UoLnGYEw/+Em1x466vmTFEMqLqiFLF+/5vYJAfprmr0VxmnGJEg==","plaintext":"eXl5eXl5eXl5eXl5eXl5eQ==","kid":"e2a6c8eb7bf954f2"},{"sk":"YK2tqAoGCoeOR04drKeXQ0p154uTagHKz1fFFh5QWvI=","pk":"jWEcVvha+Q+pYCae2Q078liIUW8nxqdVU8lFMWu3lBY=","sealed":"My+/ng0WLFg0rdK2ndFbojUDKBWzetQlfSEju7a5Fy5Ea+gAwGuwHNem4bhOc7JYPtWPDwSHhjVVvB6iNzP2yew=","plaintext":"enp6enp6enp6enp6enp6eno=","kid":"7d297889ca460ceb"},{"sk":"4lpxBLHJVWN1LILEZ9ewSH0FYO4yF8IPQGs41y5E7cI=","pk":"tXrQ+qOYKuTvEU66adVcFPI2aBV4mH+zan5F0iExmwE=","sealed":"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","plaintext":"cXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcXFxcQ==","kid":"3f3c6f78c9cc4b77"},{"sk":"85ijOhZXrKrVfynAK+oLZ9y8Gl4fxXmkbvy/seh9/Qc=","pk":"ExZYsb44gdGGq48vel9El5jzMnaD60ND81UCJx8RKy0=","sealed":"0qM9JBNfalw7KVnCCfumgNBwsIt3qSn0Gnuo2N9fQybkAvSAV0PBug210jJPb4nAKE32EhNq7977njuOMvrAZzMA2AuI9GKNxlTYpdeV6+0G4ZPcZpH0eR5Joblk7myRF622E+23XmuBI4q4dpYNJaWr/SGzUQ951UFBiqMwoDvbrNPfNCpQ8+0q3Pg4flEHEjzF7hVuSJX+elQ2E4gMTJRJmm7Fx6c9dJbPYpO3P7P8EN9R0oxv","plaintext":"eyJ0aXRsZSI6IkFsaWNlIiwiYm9keSI6ImjDqWxsbyDwn5GLIOKAlCBvayIsInNlbmRlciI6IkFsaWNlIiwic2VuZGVySmlkIjoiYUB4IiwiY2hhdCI6IlRlYW0iLCJjaGF0SmlkIjoidEBjLngiLCJtc2dJRCI6IjEiLCJpbWFnZSI6IiJ9","kid":"c396a01c6df912f0"}],"secretbox":{"key":"PNi8//d+s1h1376uDwtQb02HwDJ867wS69nn2Nh+YGk=","nonce":"MJALUxy6rktv0IeXa5Eel2TPg3PRx3Ra","msg":"7gJAxFbQvjY9WUcggw+Eip8eld00817fLWH3YPBiQlFWAF20JCKXf/KfxxpQ4yk6nkJjUJdowDYhoHPKiPKcPrH6nUWJ+0WHHD7BLziabdCNxWr0WLcHqYlfevynoDBOZINpNA==","box":"ABn+r2ayhlV/tBVzYZUS1PoxVKdLrv+IZMTgOk3Czqlz3bVm+VHOolF1XW4XCodO7sL7ikl5dzbGuUye/XRuIgQxGiWXIyewmK9NKv/7CJG4pIujo0Jqydp0LIvWL4fvcZhDCzmR+dIaUfHIQizDs2ofGFc="},"blake2b24":{"msg":"7gJAxFbQvjY9WUcggw+Eip8eld00817fLWH3YPBiQlFWAF20JCKXf/KfxxpQ4yk6nkJjUJdowDYhoHPKiPKcPrH6nUWJ+0WHHD7BLziabdCNxWr0WLcHqYlfevynoDBOZINpNA==","out":"aOiFzIaoPYSHzp1/PrvwUfTbLOdT/mwY"},"poly1305":{"key":"kRbuceM6lJgm3xkFq9APi50xfeG1DQc2HaG7bunl3rA=","msg":"7gJAxFbQvjY9WUcggw+Eip8eld00817fLWH3YPBiQlFWAF20JCKXf/KfxxpQ4yk6nkJjUJdowDYhoHPKiPKcPrH6nUWJ+0WHHD7BLziabdCNxWr0WLcHqYlfevynoDBOZINpNA==","out":"6iotU8uBgFrEu9FpQuxrkQ=="}}

package/plugins/withNotificationServiceExtension.js

@@ -0,0 +1,189 @@
+/**
+ * Expo config plugin — adds an iOS Notification Service Extension for Ethora
+ * chat pushes. The extension (plugins/notification-service/NotificationService.swift)
+ *  - decrypts encrypted (sealed) pushes with the device key the app keeps in
+ *    the keychain and shows the real title and text in place of the
+ *    "New message" placeholder;
+ *  - shows the attachment thumbnail (photo / video preview) the push service
+ *    sends as `previewUrl`.
+ *
+ * An extension is a separate target signed with the app, so it cannot ship
+ * inside the npm package as code: this plugin writes it into ios/ on every
+ * `expo prebuild` (the generated ios/ folder is gitignored in Expo apps).
+ * For the key to be readable from the extension, the app and the extension
+ * share a keychain access group (`$(AppIdentifierPrefix)<bundle id>`, the
+ * app's own default group, listed first so items the app writes without a
+ * group — expo-secure-store's — land in it). The sealed box is opened in
+ * plain Swift (SealedBox.swift: CryptoKit for X25519, the rest ported from
+ * tweetnacl), so the extension needs no pod.
+ *
+ * Host app.json:
+ *   "plugins": ["@ethora/chat-component-rn"]
+ * or with options:
+ *   "plugins": [["@ethora/chat-component-rn", { "appleTeamId": "ABCDE12345" }]]
+ *
+ * Options:
+ *   appleTeamId  signing team of the extension; default: ios.appleTeamId,
+ *                else the team already set on the app target in Xcode.
+ */
+
+const fs = require('fs');
+const path = require('path');
+const { withDangerousMod, withEntitlementsPlist, withXcodeProject } = require('expo/config-plugins');
+
+const TARGET_NAME = 'EthoraNotificationService';
+const SOURCE_DIR = path.join(__dirname, 'notification-service');
+const SOURCES = ['NotificationService.swift', 'SealedBox.swift'];
+const FILES = [...SOURCES, 'Info.plist'];
+const ENTITLEMENTS_FILE = `${TARGET_NAME}.entitlements`;
+const KEYCHAIN_GROUPS_KEY = 'keychain-access-groups';
+
+const appBundleId = (config) => {
+  const bundleId = config.ios && config.ios.bundleIdentifier;
+  if (!bundleId) {
+    throw new Error(
+      '[@ethora/chat-component-rn] ios.bundleIdentifier is required for the notification service extension'
+    );
+  }
+  return bundleId;
+};
+
+const extensionBundleId = (config) => `${appBundleId(config)}.${TARGET_NAME}`;
+
+/** The keychain access group shared by the app and the extension. */
+const keychainGroup = (config) => `$(AppIdentifierPrefix)${appBundleId(config)}`;
+
+const withSharedGroupFirst = (groups, group) => {
+  const list = Array.isArray(groups) ? groups.filter((g) => g !== group) : [];
+  return [group, ...list];
+};
+
+// EAS Build creates signing credentials only for targets it knows about.
+const withEasAppExtension = (config) => {
+  const bundleIdentifier = extensionBundleId(config);
+  const group = keychainGroup(config);
+  config.extra = config.extra || {};
+  config.extra.eas = config.extra.eas || {};
+  config.extra.eas.build = config.extra.eas.build || {};
+  config.extra.eas.build.experimental = config.extra.eas.build.experimental || {};
+  const ios = (config.extra.eas.build.experimental.ios =
+    config.extra.eas.build.experimental.ios || {});
+  const extensions = (ios.appExtensions = ios.appExtensions || []);
+  let entry = extensions.find((ext) => ext.targetName === TARGET_NAME);
+  if (!entry) {
+    entry = { targetName: TARGET_NAME, bundleIdentifier, entitlements: {} };
+    extensions.push(entry);
+  }
+  entry.entitlements = entry.entitlements || {};
+  entry.entitlements[KEYCHAIN_GROUPS_KEY] = withSharedGroupFirst(
+    entry.entitlements[KEYCHAIN_GROUPS_KEY],
+    group
+  );
+  return config;
+};
+
+// The app's side of the shared keychain group (Keychain Sharing capability).
+const withAppKeychainGroup = (config) =>
+  withEntitlementsPlist(config, (cfg) => {
+    const group = keychainGroup(cfg);
+    cfg.modResults[KEYCHAIN_GROUPS_KEY] = withSharedGroupFirst(
+      cfg.modResults[KEYCHAIN_GROUPS_KEY],
+      group
+    );
+    return cfg;
+  });
+
+const entitlementsPlist = (group) => `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>${KEYCHAIN_GROUPS_KEY}</key>
+  <array>
+    <string>${group}</string>
+  </array>
+</dict>
+</plist>
+`;
+
+// Copied on every prebuild so an SDK update reaches the app.
+const withExtensionFiles = (config) =>
+  withDangerousMod(config, [
+    'ios',
+    (cfg) => {
+      const dest = path.join(cfg.modRequest.platformProjectRoot, TARGET_NAME);
+      fs.mkdirSync(dest, { recursive: true });
+      for (const file of FILES) {
+        fs.copyFileSync(path.join(SOURCE_DIR, file), path.join(dest, file));
+      }
+      fs.writeFileSync(path.join(dest, ENTITLEMENTS_FILE), entitlementsPlist(keychainGroup(cfg)));
+      return cfg;
+    },
+  ]);
+
+const unquote = (value) => (typeof value === 'string' ? value.replace(/^"(.*)"$/, '$1') : value);
+
+const targetBuildSettings = (project, targetUuid) => {
+  const target = project.pbxNativeTargetSection()[targetUuid];
+  const list = target && project.pbxXCConfigurationList()[target.buildConfigurationList];
+  const configs = project.pbxXCBuildConfigurationSection();
+  return ((list && list.buildConfigurations) || [])
+    .map((ref) => configs[ref.value])
+    .filter((entry) => entry && entry.buildSettings)
+    .map((entry) => entry.buildSettings);
+};
+
+const withExtensionTarget = (config, { appleTeamId } = {}) =>
+  withXcodeProject(config, (cfg) => {
+    const project = cfg.modResults;
+    const bundleIdentifier = extensionBundleId(cfg);
+
+    const appTarget = project.getFirstTarget();
+    const appSettings = targetBuildSettings(project, appTarget.uuid)[0] || {};
+    const team = appleTeamId || (cfg.ios && cfg.ios.appleTeamId) || unquote(appSettings.DEVELOPMENT_TEAM);
+
+    let targetUuid = project.findTargetKey(`"${TARGET_NAME}"`) || project.findTargetKey(TARGET_NAME);
+    if (!targetUuid) {
+      // xcode's addTarget expects these sections to exist.
+      const objects = project.hash.project.objects;
+      objects.PBXTargetDependency = objects.PBXTargetDependency || {};
+      objects.PBXContainerItemProxy = objects.PBXContainerItemProxy || {};
+
+      const group = project.addPbxGroup([...FILES, ENTITLEMENTS_FILE], TARGET_NAME, TARGET_NAME);
+      const mainGroup = project.getFirstProject().firstProject.mainGroup;
+      project.addToPbxGroup(group.uuid, mainGroup);
+
+      // 'app_extension' also embeds the .appex into the app (Copy Files to
+      // PlugIns) and makes the app depend on it.
+      const target = project.addTarget(TARGET_NAME, 'app_extension', TARGET_NAME, bundleIdentifier);
+      project.addBuildPhase(SOURCES, 'PBXSourcesBuildPhase', 'Sources', target.uuid);
+      project.addBuildPhase([], 'PBXResourcesBuildPhase', 'Resources', target.uuid);
+      project.addBuildPhase([], 'PBXFrameworksBuildPhase', 'Frameworks', target.uuid);
+      targetUuid = target.uuid;
+    }
+
+    for (const settings of targetBuildSettings(project, targetUuid)) {
+      Object.assign(settings, {
+        PRODUCT_NAME: `"${TARGET_NAME}"`,
+        PRODUCT_BUNDLE_IDENTIFIER: `"${bundleIdentifier}"`,
+        INFOPLIST_FILE: `"${TARGET_NAME}/Info.plist"`,
+        GENERATE_INFOPLIST_FILE: 'NO',
+        CODE_SIGN_ENTITLEMENTS: `"${TARGET_NAME}/${ENTITLEMENTS_FILE}"`,
+        SWIFT_VERSION: appSettings.SWIFT_VERSION || '5.0',
+        IPHONEOS_DEPLOYMENT_TARGET: appSettings.IPHONEOS_DEPLOYMENT_TARGET || '15.1',
+        TARGETED_DEVICE_FAMILY: appSettings.TARGETED_DEVICE_FAMILY || '"1,2"',
+        // Must match the app, App Store Connect rejects a mismatch.
+        MARKETING_VERSION: cfg.version || appSettings.MARKETING_VERSION || '1.0.0',
+        CURRENT_PROJECT_VERSION: (cfg.ios && cfg.ios.buildNumber) || appSettings.CURRENT_PROJECT_VERSION || '1',
+        CODE_SIGN_STYLE: 'Automatic',
+        CLANG_ENABLE_MODULES: 'YES',
+        SKIP_INSTALL: 'YES',
+      });
+      if (team) settings.DEVELOPMENT_TEAM = team;
+    }
+    return cfg;
+  });
+
+const withNotificationServiceExtension = (config, props = {}) =>
+  withExtensionTarget(withExtensionFiles(withAppKeychainGroup(withEasAppExtension(config))), props);
+
+module.exports = withNotificationServiceExtension;

package/src/assets/icons.tsx

@@ -720,7 +720,25 @@ export const ArowDownIcon = ({
   </Svg>
 );
 
-export const DoubleTick = ({ fill = '#fff', color = '#0052CD', ...props }) => (
+export const SingleTick = ({ stroke = '#16A34A', ...props }) => (
+  <Svg
+    width="16"
+    height="16"
+    viewBox="0 0 16 16"
+    fill="none"
+    {...props}
+  >
+    <Path
+      d="M4 8.5L7 11.5L12 5.5"
+      stroke={stroke}
+      strokeWidth="1.5"
+      strokeLinecap="round"
+      strokeLinejoin="round"
+    />
+  </Svg>
+);
+
+export const DoubleTick = ({ fill = '#fff', color = '#0052CD', stroke = '#16A34A', ...props }) => (
   <Svg
     width="16"
     height="16"
@@ -730,7 +748,7 @@ export const DoubleTick = ({ fill = '#fff', color = '#0052CD', ...props }) => (
   >
     <Path
       d="M1.75 9.75L4.25 12.25M7.75 8.25L10.25 5.75M5.75 9.75L8.25 12.25L14.25 5.75"
-      stroke="#16A34A"
+      stroke={stroke}
       strokeWidth="1.5"
       strokeLinecap="round"
       strokeLinejoin="round"