@fileverse/api 0.0.10 → 0.0.11

package/dist/commands/index.js

@@ -340,7 +340,9 @@ var init_files_model = __esm({
           linkKey: fileRaw.linkKey,
           linkKeyNonce: fileRaw.linkKeyNonce,
           commentKey: fileRaw.commentKey,
-          link: fileRaw.link
+          link: fileRaw.link,
+          derivedKey: fileRaw.derivedKey,
+          secretKey: fileRaw.secretKey
         };
       }
       static async findAll(portalAddress, limit, skip) {
@@ -424,10 +426,20 @@ var init_files_model = __esm({
         const _id = uuidv7();
         const sql = `
       INSERT INTO ${this.TABLE}
-      (_id, title, content, ddocId, portalAddress)
-      VALUES (?, ?, ?, ?, ?)
+      (_id, title, content, ddocId, portalAddress, linkKey, linkKeyNonce, derivedKey, secretKey)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
     `;
-        await QueryBuilder.execute(sql, [_id, input.title, input.content, input.ddocId, input.portalAddress]);
+        await QueryBuilder.execute(sql, [
+          _id,
+          input.title,
+          input.content,
+          input.ddocId,
+          input.portalAddress,
+          input.linkKey ?? null,
+          input.linkKeyNonce ?? null,
+          input.derivedKey ?? null,
+          input.secretKey ?? null
+        ]);
         const created = await this.findById(_id, input.portalAddress);
         if (!created) {
           throw new Error("Failed to create file");
@@ -938,12 +950,52 @@ import { fromUint8Array, toUint8Array } from "js-base64";
 import { toAESKey, aesEncrypt } from "@fileverse/crypto/webcrypto";
 import axios from "axios";
 import { encodeFunctionData, parseEventLogs } from "viem";
+var deriveKeyFromAg2Hash, getExistingEncryptionMaterial, getNaclSecretKey, generateLinkKeyMaterial;
 var init_file_utils = __esm({
   "src/sdk/file-utils.ts"() {
     "use strict";
     init_esm_shims();
     init_file_encryption();
     init_constants3();
+    deriveKeyFromAg2Hash = async (pass, salt) => {
+      const key = await getArgon2idHash(pass, salt);
+      return hkdf(Buffer.from(key), tweetnacl.secretbox.keyLength, {
+        info: Buffer.from("encryptionKey")
+      });
+    };
+    getExistingEncryptionMaterial = async (existingEncryptedSecretKey, existingNonce, docId) => {
+      const derivedKey = await deriveKeyFromAg2Hash(docId, toUint8Array(existingNonce));
+      const secretKey = tweetnacl.secretbox.open(
+        toUint8Array(existingEncryptedSecretKey),
+        toUint8Array(existingNonce),
+        derivedKey
+      );
+      return {
+        encryptedSecretKey: existingEncryptedSecretKey,
+        nonce: toUint8Array(existingNonce),
+        secretKey,
+        derivedKey: new Uint8Array(derivedKey)
+      };
+    };
+    getNaclSecretKey = async (ddocId) => {
+      const { secretKey } = tweetnacl.box.keyPair();
+      const nonce = tweetnacl.randomBytes(tweetnacl.secretbox.nonceLength);
+      const derivedKey = await deriveKeyFromAg2Hash(ddocId, nonce);
+      const encryptedSecretKey = fromUint8Array(tweetnacl.secretbox(secretKey, nonce, derivedKey), true);
+      return { nonce, encryptedSecretKey, secretKey, derivedKey: new Uint8Array(derivedKey) };
+    };
+    generateLinkKeyMaterial = async (params) => {
+      if (params.linkKeyNonce && params.linkKey) {
+        const { encryptedSecretKey: encryptedSecretKey2, nonce: nonce2, secretKey: secretKey2, derivedKey: derivedKey2 } = await getExistingEncryptionMaterial(
+          params.linkKey,
+          params.linkKeyNonce,
+          params.ddocId
+        );
+        if (secretKey2) return { encryptedSecretKey: encryptedSecretKey2, nonce: nonce2, secretKey: secretKey2, derivedKey: derivedKey2 };
+      }
+      const { secretKey, nonce, encryptedSecretKey, derivedKey } = await getNaclSecretKey(params.ddocId);
+      return { secretKey, nonce, encryptedSecretKey, derivedKey };
+    };
   }
 });
 
@@ -1449,7 +1501,9 @@ CREATE TABLE IF NOT EXISTS files (
   commentKey TEXT,
   linkKey TEXT,
   linkKeyNonce TEXT,
-  link TEXT
+  link TEXT,
+  derivedKey TEXT,
+  secretKey TEXT
 );
 CREATE INDEX IF NOT EXISTS idx_files_createdAt ON files(createdAt);
 CREATE INDEX IF NOT EXISTS idx_files_syncStatus ON files(syncStatus);
@@ -1529,7 +1583,9 @@ import Table from "cli-table3";
 init_esm_shims();
 init_models();
 init_constants2();
+init_file_utils();
 import { generate } from "short-uuid";
+import { fromUint8Array as fromUint8Array4 } from "js-base64";
 async function listFiles(params) {
   const { limit, skip, portalAddress } = params;
   const effectiveLimit = limit || DEFAULT_LIST_LIMIT;
@@ -1582,11 +1638,20 @@ var createFile = async (input) => {
     throw new Error("title, content, and portalAddress are required");
   }
   const ddocId = generate();
+  const { encryptedSecretKey, nonce, secretKey, derivedKey } = await generateLinkKeyMaterial({
+    ddocId,
+    linkKey: void 0,
+    linkKeyNonce: void 0
+  });
   const file = await FilesModel.create({
     title: input.title,
     content: input.content,
     ddocId,
-    portalAddress: input.portalAddress
+    portalAddress: input.portalAddress,
+    linkKey: encryptedSecretKey,
+    linkKeyNonce: fromUint8Array4(nonce),
+    derivedKey: fromUint8Array4(derivedKey),
+    secretKey: fromUint8Array4(secretKey)
   });
   await EventsModel.create({ type: "create", fileId: file._id, portalAddress: file.portalAddress });
   return file;