@haex-space/vault-sdk 2.3.3 → 2.3.5

package/dist/index.mjs

@@ -1430,11 +1430,103 @@ postMessage error: ${e}`);
   }
 };
 
+// src/crypto/verify.ts
+function sortObjectKeysRecursively(obj) {
+  if (typeof obj !== "object" || obj === null) {
+    return obj;
+  }
+  if (Array.isArray(obj)) {
+    return obj.map((item) => sortObjectKeysRecursively(item));
+  }
+  return Object.keys(obj).sort().reduce((result, key) => {
+    result[key] = sortObjectKeysRecursively(obj[key]);
+    return result;
+  }, {});
+}
+function hexToBytes(hex) {
+  const bytes = new Uint8Array(hex.length / 2);
+  for (let i = 0; i < hex.length; i += 2) {
+    bytes[i / 2] = parseInt(hex.slice(i, i + 2), 16);
+  }
+  return bytes.buffer;
+}
+async function verifyExtensionSignature(files, manifest) {
+  try {
+    if (typeof crypto === "undefined" || !crypto.subtle) {
+      return { valid: false, error: "WebCrypto API not available" };
+    }
+    const { publicKey: publicKeyHex, signature: signatureHex } = manifest;
+    if (!publicKeyHex) {
+      return { valid: false, error: "Missing publicKey in manifest" };
+    }
+    if (!signatureHex) {
+      return { valid: false, error: "Missing signature in manifest" };
+    }
+    if (!/^[0-9a-fA-F]+$/.test(publicKeyHex)) {
+      return { valid: false, error: "Invalid publicKey format (must be hex)" };
+    }
+    if (!/^[0-9a-fA-F]+$/.test(signatureHex)) {
+      return { valid: false, error: "Invalid signature format (must be hex)" };
+    }
+    const publicKeyBuffer = hexToBytes(publicKeyHex);
+    let publicKey;
+    try {
+      publicKey = await crypto.subtle.importKey(
+        "raw",
+        publicKeyBuffer,
+        { name: "Ed25519", namedCurve: "Ed25519" },
+        false,
+        ["verify"]
+      );
+    } catch (err) {
+      return {
+        valid: false,
+        error: `Failed to import public key: ${err instanceof Error ? err.message : "Ed25519 may not be supported in this browser"}`
+      };
+    }
+    const manifestForHashing = sortObjectKeysRecursively({
+      ...manifest,
+      signature: ""
+    });
+    const manifestJson = JSON.stringify(manifestForHashing, null, 2);
+    const manifestBytes = new TextEncoder().encode(manifestJson);
+    const filesForHashing = files.map((file) => {
+      if (file.path === "haextension/manifest.json") {
+        return { path: file.path, content: manifestBytes };
+      }
+      return file;
+    });
+    filesForHashing.sort((a, b) => a.path.localeCompare(b.path));
+    const totalLength = filesForHashing.reduce((sum, f) => sum + f.content.length, 0);
+    const combined = new Uint8Array(totalLength);
+    let offset = 0;
+    for (const file of filesForHashing) {
+      combined.set(file.content, offset);
+      offset += file.content.length;
+    }
+    const hashBuffer = await crypto.subtle.digest("SHA-256", combined);
+    const signatureBuffer = hexToBytes(signatureHex);
+    const isValid = await crypto.subtle.verify(
+      "Ed25519",
+      publicKey,
+      signatureBuffer,
+      hashBuffer
+    );
+    return { valid: isValid };
+  } catch (err) {
+    console.error("Signature verification error:", err);
+    return {
+      valid: false,
+      error: err instanceof Error ? err.message : "Unknown verification error"
+    };
+  }
+}
+
 // src/index.ts
 function createHaexVaultClient(config = {}) {
   return new HaexVaultClient(config);
 }
 
-export { DEFAULT_TIMEOUT, DatabaseAPI, ErrorCode, FilesystemAPI, HAEXSPACE_MESSAGE_TYPES, HAEXTENSION_EVENTS, HAEXTENSION_METHODS, HaexHubError, HaexVaultClient, PermissionStatus, PermissionsAPI, TABLE_SEPARATOR, WebAPI, createHaexVaultClient, getTableName, installBaseTag, installCookiePolyfill, installHistoryPolyfill, installLocalStoragePolyfill, installPolyfills, installSessionStoragePolyfill };
+export { DEFAULT_TIMEOUT, DatabaseAPI, ErrorCode, FilesystemAPI, HAEXSPACE_MESSAGE_TYPES, HAEXTENSION_EVENTS, HAEXTENSION_METHODS, HaexHubError, HaexVaultClient, PermissionStatus, PermissionsAPI, TABLE_SEPARATOR, WebAPI, createHaexVaultClient, getTableName, hexToBytes, installBaseTag, installCookiePolyfill, installHistoryPolyfill, installLocalStoragePolyfill, installPolyfills, installSessionStoragePolyfill, sortObjectKeysRecursively, verifyExtensionSignature };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map