@hashgraphonline/standards-sdk 0.1.161 → 0.1.163

package/dist/es/standards-sdk.es176.js

@@ -1,262 +1,142 @@
-class EncryptionUnavailableError extends Error {
-  constructor(sessionId, summary) {
-    super("Encryption is not enabled for this session");
-    this.sessionId = sessionId;
-    this.summary = summary;
+import { Buffer } from "buffer";
+import { chatHistorySnapshotResponseSchema } from "./standards-sdk.es140.js";
+function identitiesMatch(a, b) {
+  if (!a && !b) {
+    return true;
   }
-}
-class EncryptedChatManager {
-  constructor(client) {
-    this.client = client;
+  if (!a || !b) {
+    return false;
   }
-  registerConversationContext(context) {
-    this.client.registerConversationContextForEncryption(context);
+  if (a.uaid && b.uaid && a.uaid.toLowerCase() === b.uaid.toLowerCase()) {
+    return true;
   }
-  async startSession(options) {
-    await this.client.encryptionReady();
-    const session = await this.client.chat.createSession({
-      uaid: options.uaid,
-      senderUaid: options.senderUaid,
-      encryptionRequested: true,
-      historyTtlSeconds: options.historyTtlSeconds,
-      auth: options.auth
-    });
-    options.onSessionCreated?.(session.sessionId);
-    const summary = session.encryption;
-    if (!summary?.enabled) {
-      throw new EncryptionUnavailableError(
-        session.sessionId,
-        session.encryption ?? null
-      );
-    }
-    const handle = await this.establishRequesterContext({
-      sessionId: session.sessionId,
-      summary,
-      senderUaid: options.senderUaid,
-      handshakeTimeoutMs: options.handshakeTimeoutMs,
-      pollIntervalMs: options.pollIntervalMs
-    });
-    return handle;
+  if (a.ledgerAccountId && b.ledgerAccountId && a.ledgerAccountId.toLowerCase() === b.ledgerAccountId.toLowerCase()) {
+    return true;
   }
-  async acceptSession(options) {
-    await this.client.encryptionReady();
-    const summary = await this.waitForEncryptionSummary(
-      options.sessionId,
-      options.handshakeTimeoutMs,
-      options.pollIntervalMs
-    );
-    const handle = await this.establishResponderContext({
-      sessionId: options.sessionId,
-      summary,
-      responderUaid: options.responderUaid,
-      handshakeTimeoutMs: options.handshakeTimeoutMs,
-      pollIntervalMs: options.pollIntervalMs
-    });
-    return handle;
+  if (a.userId && b.userId && a.userId === b.userId) {
+    return true;
   }
-  async establishRequesterContext(params) {
-    const keyPair = this.client.encryption.generateEphemeralKeyPair();
-    await this.client.chat.submitEncryptionHandshake(params.sessionId, {
-      role: "requester",
-      keyType: "secp256k1",
-      ephemeralPublicKey: keyPair.publicKey,
-      uaid: params.senderUaid ?? params.summary.requester?.uaid ?? void 0
-    });
-    const { summary, record } = await this.waitForHandshakeCompletion(
-      params.sessionId,
-      params.handshakeTimeoutMs,
-      params.pollIntervalMs
-    );
-    const responderKey = record.responder?.ephemeralPublicKey;
-    if (!responderKey) {
-      throw new Error("Responder handshake was not completed in time");
-    }
-    const sharedSecret = this.client.encryption.deriveSharedSecret({
-      privateKey: keyPair.privateKey,
-      peerPublicKey: responderKey
-    }).subarray();
-    const recipients = this.buildRecipients(summary);
-    return this.createHandle({
-      sessionId: params.sessionId,
-      sharedSecret,
-      summary,
-      recipients,
-      identity: summary.requester ?? void 0
-    });
+  if (a.email && b.email && a.email.toLowerCase() === b.email.toLowerCase()) {
+    return true;
   }
-  async establishResponderContext(params) {
-    const keyPair = this.client.encryption.generateEphemeralKeyPair();
-    await this.client.chat.submitEncryptionHandshake(params.sessionId, {
-      role: "responder",
-      keyType: "secp256k1",
-      ephemeralPublicKey: keyPair.publicKey,
-      uaid: params.responderUaid ?? params.summary.responder?.uaid ?? void 0
-    });
-    const { summary, record } = await this.waitForHandshakeCompletion(
-      params.sessionId,
-      params.handshakeTimeoutMs,
-      params.pollIntervalMs
-    );
-    const requesterKey = record.requester?.ephemeralPublicKey;
-    if (!requesterKey) {
-      throw new Error("Requester handshake was not detected in time");
-    }
-    const sharedSecret = this.client.encryption.deriveSharedSecret({
-      privateKey: keyPair.privateKey,
-      peerPublicKey: requesterKey
-    }).subarray();
-    const recipients = this.buildRecipients(summary);
-    return this.createHandle({
-      sessionId: params.sessionId,
-      sharedSecret,
-      summary,
-      recipients,
-      identity: summary.responder ?? void 0
-    });
+  return false;
+}
+async function fetchHistorySnapshot(conversationContexts, client, sessionId, options) {
+  if (!sessionId || sessionId.trim().length === 0) {
+    throw new Error("sessionId is required to fetch chat history");
   }
-  async waitForHandshakeCompletion(sessionId, timeoutMs = 3e4, pollIntervalMs = 1e3) {
-    const deadline = Date.now() + timeoutMs;
-    while (true) {
-      const status = await this.client.chat.getEncryptionStatus(sessionId);
-      const summary = status.encryption;
-      const record = summary?.handshake;
-      if (summary && record && record.status === "complete") {
-        return { summary, record };
-      }
-      if (Date.now() >= deadline) {
-        throw new Error("Timed out waiting for encrypted handshake completion");
-      }
-      await this.delay(pollIntervalMs);
+  const raw = await client.requestJson(
+    `/chat/session/${encodeURIComponent(sessionId)}/history`,
+    {
+      method: "GET"
     }
+  );
+  const snapshot = client.parseWithSchema(
+    raw,
+    chatHistorySnapshotResponseSchema,
+    "chat history snapshot response"
+  );
+  return attachDecryptedHistory(
+    conversationContexts,
+    client,
+    sessionId,
+    snapshot,
+    options
+  );
+}
+function attachDecryptedHistory(conversationContexts, client, sessionId, snapshot, options) {
+  const shouldDecrypt = options?.decrypt !== void 0 ? options.decrypt : client.encryptionOptions?.autoDecryptHistory === true;
+  if (!shouldDecrypt) {
+    return snapshot;
   }
-  async waitForEncryptionSummary(sessionId, _timeoutMs = 3e4, _pollIntervalMs = 1e3) {
-    const status = await this.client.chat.getEncryptionStatus(sessionId);
-    if (!status.encryption?.enabled) {
-      throw new EncryptionUnavailableError(
-        sessionId,
-        status.encryption ?? null
-      );
-    }
-    return status.encryption;
+  const requiresContext = snapshot.history.some(
+    (entry) => Boolean(entry.cipherEnvelope)
+  );
+  if (!requiresContext) {
+    return {
+      ...snapshot,
+      decryptedHistory: snapshot.history.map((entry) => ({
+        entry,
+        plaintext: entry.content
+      }))
+    };
   }
-  buildRecipients(summary) {
-    const candidates = [summary.requester, summary.responder].filter(Boolean);
-    const normalized = candidates.map((candidate) => {
-      if (!candidate) {
-        return null;
-      }
-      const recipient = {};
-      if (candidate.uaid) {
-        recipient.uaid = candidate.uaid;
-      }
-      if (candidate.ledgerAccountId) {
-        recipient.ledgerAccountId = candidate.ledgerAccountId;
-      }
-      if (candidate.userId) {
-        recipient.userId = candidate.userId;
-      }
-      if (candidate.email) {
-        recipient.email = candidate.email;
-      }
-      return recipient;
-    }).filter(
-      (entry) => Boolean(
-        entry?.uaid || entry?.ledgerAccountId || entry?.userId || entry?.email
-      )
+  const context = resolveDecryptionContext(
+    conversationContexts,
+    client,
+    sessionId,
+    options
+  );
+  if (!context) {
+    throw new Error(
+      "Unable to decrypt chat history: encryption context unavailable"
     );
-    if (normalized.length > 0) {
-      return normalized;
-    }
-    if (summary.responder?.uaid) {
-      return [{ uaid: summary.responder.uaid }];
-    }
-    return [];
   }
-  createHandle(context) {
-    const sharedSecret = context.sharedSecret;
-    const uaid = context.summary.requester?.uaid ?? context.summary.responder?.uaid ?? context.identity?.uaid;
-    const decryptHistoryEntry = (entry) => this.decryptEntry(entry, context.identity, sharedSecret);
-    const fetchHistory = async (options) => {
-      const snapshot = await this.client.fetchHistorySnapshot(
-        context.sessionId,
-        options
-      );
-      if (snapshot.decryptedHistory) {
-        return snapshot.decryptedHistory;
-      }
-      return snapshot.history.map((entry) => ({
-        entry,
-        plaintext: decryptHistoryEntry(entry)
-      }));
-    };
-    const handle = {
-      sessionId: context.sessionId,
-      mode: "encrypted",
-      summary: context.summary,
-      send: async (options) => {
-        const recipients = options.recipients ?? context.recipients;
-        return this.client.chat.sendMessage({
-          sessionId: context.sessionId,
-          message: options.message ?? "[ciphertext omitted]",
-          streaming: options.streaming,
-          auth: options.auth,
-          uaid,
-          encryption: {
-            plaintext: options.plaintext,
-            sharedSecret: Buffer.from(sharedSecret),
-            recipients
-          }
-        });
-      },
-      decryptHistoryEntry,
-      fetchHistory
+  const decryptedHistory = snapshot.history.map((entry) => ({
+    entry,
+    plaintext: decryptHistoryEntryFromContext(client, entry, context)
+  }));
+  return { ...snapshot, decryptedHistory };
+}
+function registerConversationContextForEncryption(conversationContexts, context) {
+  const normalized = {
+    sessionId: context.sessionId,
+    sharedSecret: Buffer.from(context.sharedSecret),
+    identity: context.identity ? { ...context.identity } : void 0
+  };
+  const entries = conversationContexts.get(context.sessionId) ?? [];
+  const existingIndex = entries.findIndex(
+    (existing) => identitiesMatch(existing.identity, normalized.identity)
+  );
+  if (existingIndex >= 0) {
+    entries[existingIndex] = normalized;
+  } else {
+    entries.push(normalized);
+  }
+  conversationContexts.set(context.sessionId, entries);
+}
+function resolveDecryptionContext(conversationContexts, client, sessionId, options) {
+  if (options?.sharedSecret) {
+    return {
+      sessionId,
+      sharedSecret: client.normalizeSharedSecret(options.sharedSecret),
+      identity: options.identity
     };
-    this.registerConversationContext({
-      sessionId: context.sessionId,
-      sharedSecret,
-      identity: context.identity
-    });
-    return handle;
   }
-  decryptEntry(entry, identity, fallbackSecret) {
-    const envelope = entry.cipherEnvelope;
-    if (!envelope) {
-      return null;
-    }
-    const secret = Buffer.from(fallbackSecret);
-    try {
-      return this.client.encryption.decryptCipherEnvelope({
-        envelope,
-        sharedSecret: secret
-      });
-    } catch (_error) {
-      return null;
-    }
+  const contexts = conversationContexts.get(sessionId);
+  if (!contexts || contexts.length === 0) {
+    return null;
   }
-  recipientMatches(candidate, target) {
-    if (target.uaid && candidate.uaid?.toLowerCase() === target.uaid.toLowerCase()) {
-      return true;
-    }
-    if (target.ledgerAccountId && candidate.ledgerAccountId?.toLowerCase() === target.ledgerAccountId.toLowerCase()) {
-      return true;
-    }
-    if (target.userId && candidate.userId === target.userId) {
-      return true;
-    }
-    if (target.email && candidate.email?.toLowerCase() === target.email.toLowerCase()) {
-      return true;
+  if (options?.identity) {
+    const match = contexts.find(
+      (context) => identitiesMatch(context.identity, options.identity)
+    );
+    if (match) {
+      return match;
     }
-    return false;
   }
-  async delay(ms) {
-    if (ms <= 0) {
-      return;
-    }
-    await new Promise((resolve) => setTimeout(resolve, ms));
+  return contexts[0];
+}
+function decryptHistoryEntryFromContext(client, entry, context) {
+  const envelope = entry.cipherEnvelope;
+  if (!envelope) {
+    return entry.content;
+  }
+  const secret = Buffer.from(context.sharedSecret);
+  try {
+    return client.encryption.decryptCipherEnvelope({
+      envelope,
+      sharedSecret: secret
+    });
+  } catch (_error) {
+    return null;
   }
 }
 export {
-  EncryptedChatManager,
-  EncryptionUnavailableError
+  attachDecryptedHistory,
+  decryptHistoryEntryFromContext,
+  fetchHistorySnapshot,
+  registerConversationContextForEncryption,
+  resolveDecryptionContext
 };
 //# sourceMappingURL=standards-sdk.es176.js.map

package/dist/es/standards-sdk.es176.js.map

@@ -1 +1 @@
-{"version":3,"file":"standards-sdk.es176.js","sources":["../../src/services/registry-broker/client/encrypted-chat-manager.ts"],"sourcesContent":["import type {\n  AcceptEncryptedChatSessionOptions,\n  ChatHistoryEntry,\n  ChatHistoryFetchOptions,\n  CipherEnvelopeRecipient,\n  DecryptedHistoryEntry,\n  EncryptedChatSessionHandle,\n  EncryptionHandshakeRecord,\n  RecipientIdentity,\n  SessionEncryptionSummary,\n  SharedSecretInput,\n  StartEncryptedChatSessionOptions,\n} from '../types';\nimport type { RegistryBrokerClient } from './base-client';\n\ninterface EncryptedSessionContext {\n  sessionId: string;\n  sharedSecret: Uint8Array;\n  summary: SessionEncryptionSummary;\n  recipients: RecipientIdentity[];\n  identity?: RecipientIdentity;\n}\n\ninterface ConversationContextInput {\n  sessionId: string;\n  sharedSecret: Uint8Array | Buffer;\n  identity?: RecipientIdentity;\n}\n\nexport class EncryptionUnavailableError extends Error {\n  constructor(\n    readonly sessionId: string,\n    readonly summary?: SessionEncryptionSummary | null,\n  ) {\n    super('Encryption is not enabled for this session');\n  }\n}\n\nexport class EncryptedChatManager {\n  constructor(private readonly client: RegistryBrokerClient) {}\n\n  registerConversationContext(context: ConversationContextInput): void {\n    this.client.registerConversationContextForEncryption(context);\n  }\n\n  async startSession(\n    options: StartEncryptedChatSessionOptions,\n  ): Promise<EncryptedChatSessionHandle> {\n    await this.client.encryptionReady();\n    const session = await this.client.chat.createSession({\n      uaid: options.uaid,\n      senderUaid: options.senderUaid,\n      encryptionRequested: true,\n      historyTtlSeconds: options.historyTtlSeconds,\n      auth: options.auth,\n    });\n    options.onSessionCreated?.(session.sessionId);\n    const summary = session.encryption;\n    if (!summary?.enabled) {\n      throw new EncryptionUnavailableError(\n        session.sessionId,\n        session.encryption ?? null,\n      );\n    }\n    const handle = await this.establishRequesterContext({\n      sessionId: session.sessionId,\n      summary,\n      senderUaid: options.senderUaid,\n      handshakeTimeoutMs: options.handshakeTimeoutMs,\n      pollIntervalMs: options.pollIntervalMs,\n    });\n    return handle;\n  }\n\n  async acceptSession(\n    options: AcceptEncryptedChatSessionOptions,\n  ): Promise<EncryptedChatSessionHandle> {\n    await this.client.encryptionReady();\n    const summary = await this.waitForEncryptionSummary(\n      options.sessionId,\n      options.handshakeTimeoutMs,\n      options.pollIntervalMs,\n    );\n    const handle = await this.establishResponderContext({\n      sessionId: options.sessionId,\n      summary,\n      responderUaid: options.responderUaid,\n      handshakeTimeoutMs: options.handshakeTimeoutMs,\n      pollIntervalMs: options.pollIntervalMs,\n    });\n    return handle;\n  }\n\n  private async establishRequesterContext(params: {\n    sessionId: string;\n    summary: SessionEncryptionSummary;\n    senderUaid?: string;\n    handshakeTimeoutMs?: number;\n    pollIntervalMs?: number;\n  }): Promise<EncryptedChatSessionHandle> {\n    const keyPair = this.client.encryption.generateEphemeralKeyPair();\n    await this.client.chat.submitEncryptionHandshake(params.sessionId, {\n      role: 'requester',\n      keyType: 'secp256k1',\n      ephemeralPublicKey: keyPair.publicKey,\n      uaid: params.senderUaid ?? params.summary.requester?.uaid ?? undefined,\n    });\n    const { summary, record } = await this.waitForHandshakeCompletion(\n      params.sessionId,\n      params.handshakeTimeoutMs,\n      params.pollIntervalMs,\n    );\n    const responderKey = record.responder?.ephemeralPublicKey;\n    if (!responderKey) {\n      throw new Error('Responder handshake was not completed in time');\n    }\n    const sharedSecret = this.client.encryption\n      .deriveSharedSecret({\n        privateKey: keyPair.privateKey,\n        peerPublicKey: responderKey,\n      })\n      .subarray();\n    const recipients = this.buildRecipients(summary);\n    return this.createHandle({\n      sessionId: params.sessionId,\n      sharedSecret,\n      summary,\n      recipients,\n      identity: summary.requester ?? undefined,\n    });\n  }\n\n  private async establishResponderContext(params: {\n    sessionId: string;\n    summary: SessionEncryptionSummary;\n    responderUaid?: string;\n    handshakeTimeoutMs?: number;\n    pollIntervalMs?: number;\n  }): Promise<EncryptedChatSessionHandle> {\n    const keyPair = this.client.encryption.generateEphemeralKeyPair();\n    await this.client.chat.submitEncryptionHandshake(params.sessionId, {\n      role: 'responder',\n      keyType: 'secp256k1',\n      ephemeralPublicKey: keyPair.publicKey,\n      uaid: params.responderUaid ?? params.summary.responder?.uaid ?? undefined,\n    });\n    const { summary, record } = await this.waitForHandshakeCompletion(\n      params.sessionId,\n      params.handshakeTimeoutMs,\n      params.pollIntervalMs,\n    );\n    const requesterKey = record.requester?.ephemeralPublicKey;\n    if (!requesterKey) {\n      throw new Error('Requester handshake was not detected in time');\n    }\n    const sharedSecret = this.client.encryption\n      .deriveSharedSecret({\n        privateKey: keyPair.privateKey,\n        peerPublicKey: requesterKey,\n      })\n      .subarray();\n    const recipients = this.buildRecipients(summary);\n    return this.createHandle({\n      sessionId: params.sessionId,\n      sharedSecret,\n      summary,\n      recipients,\n      identity: summary.responder ?? undefined,\n    });\n  }\n\n  private async waitForHandshakeCompletion(\n    sessionId: string,\n    timeoutMs = 30_000,\n    pollIntervalMs = 1_000,\n  ): Promise<{\n    summary: SessionEncryptionSummary;\n    record: EncryptionHandshakeRecord;\n  }> {\n    const deadline = Date.now() + timeoutMs;\n    while (true) {\n      const status = await this.client.chat.getEncryptionStatus(sessionId);\n      const summary = status.encryption;\n      const record = summary?.handshake;\n      if (summary && record && record.status === 'complete') {\n        return { summary, record };\n      }\n      if (Date.now() >= deadline) {\n        throw new Error('Timed out waiting for encrypted handshake completion');\n      }\n      await this.delay(pollIntervalMs);\n    }\n  }\n\n  private async waitForEncryptionSummary(\n    sessionId: string,\n    _timeoutMs = 30_000,\n    _pollIntervalMs = 1_000,\n  ): Promise<SessionEncryptionSummary> {\n    const status = await this.client.chat.getEncryptionStatus(sessionId);\n    if (!status.encryption?.enabled) {\n      throw new EncryptionUnavailableError(\n        sessionId,\n        status.encryption ?? null,\n      );\n    }\n    return status.encryption;\n  }\n\n  private buildRecipients(\n    summary: SessionEncryptionSummary,\n  ): RecipientIdentity[] {\n    const candidates = [summary.requester, summary.responder].filter(Boolean);\n    const normalized = candidates\n      .map(candidate => {\n        if (!candidate) {\n          return null;\n        }\n        const recipient: RecipientIdentity = {};\n        if (candidate.uaid) {\n          recipient.uaid = candidate.uaid;\n        }\n        if (candidate.ledgerAccountId) {\n          recipient.ledgerAccountId = candidate.ledgerAccountId;\n        }\n        if (candidate.userId) {\n          recipient.userId = candidate.userId;\n        }\n        if (candidate.email) {\n          recipient.email = candidate.email;\n        }\n        return recipient;\n      })\n      .filter((entry): entry is RecipientIdentity =>\n        Boolean(\n          entry?.uaid ||\n            entry?.ledgerAccountId ||\n            entry?.userId ||\n            entry?.email,\n        ),\n      );\n    if (normalized.length > 0) {\n      return normalized;\n    }\n    if (summary.responder?.uaid) {\n      return [{ uaid: summary.responder.uaid }];\n    }\n    return [];\n  }\n\n  private createHandle(\n    context: EncryptedSessionContext,\n  ): EncryptedChatSessionHandle {\n    const sharedSecret = context.sharedSecret;\n    const uaid =\n      context.summary.requester?.uaid ??\n      context.summary.responder?.uaid ??\n      context.identity?.uaid;\n    const decryptHistoryEntry = (entry: ChatHistoryEntry): string | null =>\n      this.decryptEntry(entry, context.identity, sharedSecret);\n    const fetchHistory = async (\n      options?: ChatHistoryFetchOptions,\n    ): Promise<DecryptedHistoryEntry[]> => {\n      const snapshot = await this.client.fetchHistorySnapshot(\n        context.sessionId,\n        options,\n      );\n      if (snapshot.decryptedHistory) {\n        return snapshot.decryptedHistory;\n      }\n      return snapshot.history.map(entry => ({\n        entry,\n        plaintext: decryptHistoryEntry(entry),\n      }));\n    };\n    const handle: EncryptedChatSessionHandle = {\n      sessionId: context.sessionId,\n      mode: 'encrypted',\n      summary: context.summary,\n      send: async options => {\n        const recipients = options.recipients ?? context.recipients;\n        return this.client.chat.sendMessage({\n          sessionId: context.sessionId,\n          message: options.message ?? '[ciphertext omitted]',\n          streaming: options.streaming,\n          auth: options.auth,\n          uaid,\n          encryption: {\n            plaintext: options.plaintext,\n            sharedSecret: Buffer.from(sharedSecret),\n            recipients,\n          },\n        });\n      },\n      decryptHistoryEntry,\n      fetchHistory,\n    };\n    this.registerConversationContext({\n      sessionId: context.sessionId,\n      sharedSecret,\n      identity: context.identity,\n    });\n    return handle;\n  }\n\n  private decryptEntry(\n    entry: ChatHistoryEntry,\n    identity: RecipientIdentity | undefined,\n    fallbackSecret: Uint8Array,\n  ): string | null {\n    const envelope = entry.cipherEnvelope;\n    if (!envelope) {\n      return null;\n    }\n    const secret: SharedSecretInput = Buffer.from(fallbackSecret);\n    try {\n      return this.client.encryption.decryptCipherEnvelope({\n        envelope,\n        sharedSecret: secret,\n      });\n    } catch (_error) {\n      return null;\n    }\n  }\n\n  private recipientMatches(\n    candidate: CipherEnvelopeRecipient,\n    target: RecipientIdentity,\n  ): boolean {\n    if (\n      target.uaid &&\n      candidate.uaid?.toLowerCase() === target.uaid.toLowerCase()\n    ) {\n      return true;\n    }\n    if (\n      target.ledgerAccountId &&\n      candidate.ledgerAccountId?.toLowerCase() ===\n        target.ledgerAccountId.toLowerCase()\n    ) {\n      return true;\n    }\n    if (target.userId && candidate.userId === target.userId) {\n      return true;\n    }\n    if (\n      target.email &&\n      candidate.email?.toLowerCase() === target.email.toLowerCase()\n    ) {\n      return true;\n    }\n    return false;\n  }\n\n  private async delay(ms: number): Promise<void> {\n    if (ms <= 0) {\n      return;\n    }\n    await new Promise(resolve => setTimeout(resolve, ms));\n  }\n}\n"],"names":[],"mappings":"AA6BO,MAAM,mCAAmC,MAAM;AAAA,EACpD,YACW,WACA,SACT;AACA,UAAM,4CAA4C;AAHzC,SAAA,YAAA;AACA,SAAA,UAAA;AAAA,EAGX;AACF;AAEO,MAAM,qBAAqB;AAAA,EAChC,YAA6B,QAA8B;AAA9B,SAAA,SAAA;AAAA,EAA+B;AAAA,EAE5D,4BAA4B,SAAyC;AACnE,SAAK,OAAO,yCAAyC,OAAO;AAAA,EAC9D;AAAA,EAEA,MAAM,aACJ,SACqC;AACrC,UAAM,KAAK,OAAO,gBAAA;AAClB,UAAM,UAAU,MAAM,KAAK,OAAO,KAAK,cAAc;AAAA,MACnD,MAAM,QAAQ;AAAA,MACd,YAAY,QAAQ;AAAA,MACpB,qBAAqB;AAAA,MACrB,mBAAmB,QAAQ;AAAA,MAC3B,MAAM,QAAQ;AAAA,IAAA,CACf;AACD,YAAQ,mBAAmB,QAAQ,SAAS;AAC5C,UAAM,UAAU,QAAQ;AACxB,QAAI,CAAC,SAAS,SAAS;AACrB,YAAM,IAAI;AAAA,QACR,QAAQ;AAAA,QACR,QAAQ,cAAc;AAAA,MAAA;AAAA,IAE1B;AACA,UAAM,SAAS,MAAM,KAAK,0BAA0B;AAAA,MAClD,WAAW,QAAQ;AAAA,MACnB;AAAA,MACA,YAAY,QAAQ;AAAA,MACpB,oBAAoB,QAAQ;AAAA,MAC5B,gBAAgB,QAAQ;AAAA,IAAA,CACzB;AACD,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,cACJ,SACqC;AACrC,UAAM,KAAK,OAAO,gBAAA;AAClB,UAAM,UAAU,MAAM,KAAK;AAAA,MACzB,QAAQ;AAAA,MACR,QAAQ;AAAA,MACR,QAAQ;AAAA,IAAA;AAEV,UAAM,SAAS,MAAM,KAAK,0BAA0B;AAAA,MAClD,WAAW,QAAQ;AAAA,MACnB;AAAA,MACA,eAAe,QAAQ;AAAA,MACvB,oBAAoB,QAAQ;AAAA,MAC5B,gBAAgB,QAAQ;AAAA,IAAA,CACzB;AACD,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,0BAA0B,QAMA;AACtC,UAAM,UAAU,KAAK,OAAO,WAAW,yBAAA;AACvC,UAAM,KAAK,OAAO,KAAK,0BAA0B,OAAO,WAAW;AAAA,MACjE,MAAM;AAAA,MACN,SAAS;AAAA,MACT,oBAAoB,QAAQ;AAAA,MAC5B,MAAM,OAAO,cAAc,OAAO,QAAQ,WAAW,QAAQ;AAAA,IAAA,CAC9D;AACD,UAAM,EAAE,SAAS,WAAW,MAAM,KAAK;AAAA,MACrC,OAAO;AAAA,MACP,OAAO;AAAA,MACP,OAAO;AAAA,IAAA;AAET,UAAM,eAAe,OAAO,WAAW;AACvC,QAAI,CAAC,cAAc;AACjB,YAAM,IAAI,MAAM,+CAA+C;AAAA,IACjE;AACA,UAAM,eAAe,KAAK,OAAO,WAC9B,mBAAmB;AAAA,MAClB,YAAY,QAAQ;AAAA,MACpB,eAAe;AAAA,IAAA,CAChB,EACA,SAAA;AACH,UAAM,aAAa,KAAK,gBAAgB,OAAO;AAC/C,WAAO,KAAK,aAAa;AAAA,MACvB,WAAW,OAAO;AAAA,MAClB;AAAA,MACA;AAAA,MACA;AAAA,MACA,UAAU,QAAQ,aAAa;AAAA,IAAA,CAChC;AAAA,EACH;AAAA,EAEA,MAAc,0BAA0B,QAMA;AACtC,UAAM,UAAU,KAAK,OAAO,WAAW,yBAAA;AACvC,UAAM,KAAK,OAAO,KAAK,0BAA0B,OAAO,WAAW;AAAA,MACjE,MAAM;AAAA,MACN,SAAS;AAAA,MACT,oBAAoB,QAAQ;AAAA,MAC5B,MAAM,OAAO,iBAAiB,OAAO,QAAQ,WAAW,QAAQ;AAAA,IAAA,CACjE;AACD,UAAM,EAAE,SAAS,WAAW,MAAM,KAAK;AAAA,MACrC,OAAO;AAAA,MACP,OAAO;AAAA,MACP,OAAO;AAAA,IAAA;AAET,UAAM,eAAe,OAAO,WAAW;AACvC,QAAI,CAAC,cAAc;AACjB,YAAM,IAAI,MAAM,8CAA8C;AAAA,IAChE;AACA,UAAM,eAAe,KAAK,OAAO,WAC9B,mBAAmB;AAAA,MAClB,YAAY,QAAQ;AAAA,MACpB,eAAe;AAAA,IAAA,CAChB,EACA,SAAA;AACH,UAAM,aAAa,KAAK,gBAAgB,OAAO;AAC/C,WAAO,KAAK,aAAa;AAAA,MACvB,WAAW,OAAO;AAAA,MAClB;AAAA,MACA;AAAA,MACA;AAAA,MACA,UAAU,QAAQ,aAAa;AAAA,IAAA,CAChC;AAAA,EACH;AAAA,EAEA,MAAc,2BACZ,WACA,YAAY,KACZ,iBAAiB,KAIhB;AACD,UAAM,WAAW,KAAK,IAAA,IAAQ;AAC9B,WAAO,MAAM;AACX,YAAM,SAAS,MAAM,KAAK,OAAO,KAAK,oBAAoB,SAAS;AACnE,YAAM,UAAU,OAAO;AACvB,YAAM,SAAS,SAAS;AACxB,UAAI,WAAW,UAAU,OAAO,WAAW,YAAY;AACrD,eAAO,EAAE,SAAS,OAAA;AAAA,MACpB;AACA,UAAI,KAAK,IAAA,KAAS,UAAU;AAC1B,cAAM,IAAI,MAAM,sDAAsD;AAAA,MACxE;AACA,YAAM,KAAK,MAAM,cAAc;AAAA,IACjC;AAAA,EACF;AAAA,EAEA,MAAc,yBACZ,WACA,aAAa,KACb,kBAAkB,KACiB;AACnC,UAAM,SAAS,MAAM,KAAK,OAAO,KAAK,oBAAoB,SAAS;AACnE,QAAI,CAAC,OAAO,YAAY,SAAS;AAC/B,YAAM,IAAI;AAAA,QACR;AAAA,QACA,OAAO,cAAc;AAAA,MAAA;AAAA,IAEzB;AACA,WAAO,OAAO;AAAA,EAChB;AAAA,EAEQ,gBACN,SACqB;AACrB,UAAM,aAAa,CAAC,QAAQ,WAAW,QAAQ,SAAS,EAAE,OAAO,OAAO;AACxE,UAAM,aAAa,WAChB,IAAI,CAAA,cAAa;AAChB,UAAI,CAAC,WAAW;AACd,eAAO;AAAA,MACT;AACA,YAAM,YAA+B,CAAA;AACrC,UAAI,UAAU,MAAM;AAClB,kBAAU,OAAO,UAAU;AAAA,MAC7B;AACA,UAAI,UAAU,iBAAiB;AAC7B,kBAAU,kBAAkB,UAAU;AAAA,MACxC;AACA,UAAI,UAAU,QAAQ;AACpB,kBAAU,SAAS,UAAU;AAAA,MAC/B;AACA,UAAI,UAAU,OAAO;AACnB,kBAAU,QAAQ,UAAU;AAAA,MAC9B;AACA,aAAO;AAAA,IACT,CAAC,EACA;AAAA,MAAO,CAAC,UACP;AAAA,QACE,OAAO,QACL,OAAO,mBACP,OAAO,UACP,OAAO;AAAA,MAAA;AAAA,IACX;AAEJ,QAAI,WAAW,SAAS,GAAG;AACzB,aAAO;AAAA,IACT;AACA,QAAI,QAAQ,WAAW,MAAM;AAC3B,aAAO,CAAC,EAAE,MAAM,QAAQ,UAAU,MAAM;AAAA,IAC1C;AACA,WAAO,CAAA;AAAA,EACT;AAAA,EAEQ,aACN,SAC4B;AAC5B,UAAM,eAAe,QAAQ;AAC7B,UAAM,OACJ,QAAQ,QAAQ,WAAW,QAC3B,QAAQ,QAAQ,WAAW,QAC3B,QAAQ,UAAU;AACpB,UAAM,sBAAsB,CAAC,UAC3B,KAAK,aAAa,OAAO,QAAQ,UAAU,YAAY;AACzD,UAAM,eAAe,OACnB,YACqC;AACrC,YAAM,WAAW,MAAM,KAAK,OAAO;AAAA,QACjC,QAAQ;AAAA,QACR;AAAA,MAAA;AAEF,UAAI,SAAS,kBAAkB;AAC7B,eAAO,SAAS;AAAA,MAClB;AACA,aAAO,SAAS,QAAQ,IAAI,CAAA,WAAU;AAAA,QACpC;AAAA,QACA,WAAW,oBAAoB,KAAK;AAAA,MAAA,EACpC;AAAA,IACJ;AACA,UAAM,SAAqC;AAAA,MACzC,WAAW,QAAQ;AAAA,MACnB,MAAM;AAAA,MACN,SAAS,QAAQ;AAAA,MACjB,MAAM,OAAM,YAAW;AACrB,cAAM,aAAa,QAAQ,cAAc,QAAQ;AACjD,eAAO,KAAK,OAAO,KAAK,YAAY;AAAA,UAClC,WAAW,QAAQ;AAAA,UACnB,SAAS,QAAQ,WAAW;AAAA,UAC5B,WAAW,QAAQ;AAAA,UACnB,MAAM,QAAQ;AAAA,UACd;AAAA,UACA,YAAY;AAAA,YACV,WAAW,QAAQ;AAAA,YACnB,cAAc,OAAO,KAAK,YAAY;AAAA,YACtC;AAAA,UAAA;AAAA,QACF,CACD;AAAA,MACH;AAAA,MACA;AAAA,MACA;AAAA,IAAA;AAEF,SAAK,4BAA4B;AAAA,MAC/B,WAAW,QAAQ;AAAA,MACnB;AAAA,MACA,UAAU,QAAQ;AAAA,IAAA,CACnB;AACD,WAAO;AAAA,EACT;AAAA,EAEQ,aACN,OACA,UACA,gBACe;AACf,UAAM,WAAW,MAAM;AACvB,QAAI,CAAC,UAAU;AACb,aAAO;AAAA,IACT;AACA,UAAM,SAA4B,OAAO,KAAK,cAAc;AAC5D,QAAI;AACF,aAAO,KAAK,OAAO,WAAW,sBAAsB;AAAA,QAClD;AAAA,QACA,cAAc;AAAA,MAAA,CACf;AAAA,IACH,SAAS,QAAQ;AACf,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEQ,iBACN,WACA,QACS;AACT,QACE,OAAO,QACP,UAAU,MAAM,kBAAkB,OAAO,KAAK,eAC9C;AACA,aAAO;AAAA,IACT;AACA,QACE,OAAO,mBACP,UAAU,iBAAiB,kBACzB,OAAO,gBAAgB,eACzB;AACA,aAAO;AAAA,IACT;AACA,QAAI,OAAO,UAAU,UAAU,WAAW,OAAO,QAAQ;AACvD,aAAO;AAAA,IACT;AACA,QACE,OAAO,SACP,UAAU,OAAO,kBAAkB,OAAO,MAAM,eAChD;AACA,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA,EAEA,MAAc,MAAM,IAA2B;AAC7C,QAAI,MAAM,GAAG;AACX;AAAA,IACF;AACA,UAAM,IAAI,QAAQ,CAAA,YAAW,WAAW,SAAS,EAAE,CAAC;AAAA,EACtD;AACF;"}
+{"version":3,"file":"standards-sdk.es176.js","sources":["../../src/services/registry-broker/client/chat-history.ts"],"sourcesContent":["import { Buffer } from 'buffer';\nimport type {\n  ChatHistoryEntry,\n  ChatHistoryFetchOptions,\n  ChatHistorySnapshotResponse,\n  ChatHistorySnapshotWithDecryptedEntries,\n  JsonValue,\n  RecipientIdentity,\n} from '../types';\nimport { chatHistorySnapshotResponseSchema } from '../schemas';\nimport type { RegistryBrokerClient } from './base-client';\n\nexport interface ConversationContextInput {\n  sessionId: string;\n  sharedSecret: Uint8Array | Buffer;\n  identity?: RecipientIdentity;\n}\n\nexport interface ConversationContextState {\n  sessionId: string;\n  sharedSecret: Buffer;\n  identity?: RecipientIdentity;\n}\n\nfunction identitiesMatch(\n  a?: RecipientIdentity,\n  b?: RecipientIdentity,\n): boolean {\n  if (!a && !b) {\n    return true;\n  }\n  if (!a || !b) {\n    return false;\n  }\n  if (a.uaid && b.uaid && a.uaid.toLowerCase() === b.uaid.toLowerCase()) {\n    return true;\n  }\n  if (\n    a.ledgerAccountId &&\n    b.ledgerAccountId &&\n    a.ledgerAccountId.toLowerCase() === b.ledgerAccountId.toLowerCase()\n  ) {\n    return true;\n  }\n  if (a.userId && b.userId && a.userId === b.userId) {\n    return true;\n  }\n  if (a.email && b.email && a.email.toLowerCase() === b.email.toLowerCase()) {\n    return true;\n  }\n  return false;\n}\n\nexport async function fetchHistorySnapshot(\n  conversationContexts: Map<string, ConversationContextState[]>,\n  client: RegistryBrokerClient,\n  sessionId: string,\n  options?: ChatHistoryFetchOptions,\n): Promise<ChatHistorySnapshotWithDecryptedEntries> {\n  if (!sessionId || sessionId.trim().length === 0) {\n    throw new Error('sessionId is required to fetch chat history');\n  }\n  const raw = await client.requestJson<JsonValue>(\n    `/chat/session/${encodeURIComponent(sessionId)}/history`,\n    {\n      method: 'GET',\n    },\n  );\n  const snapshot = client.parseWithSchema(\n    raw,\n    chatHistorySnapshotResponseSchema,\n    'chat history snapshot response',\n  );\n  return attachDecryptedHistory(\n    conversationContexts,\n    client,\n    sessionId,\n    snapshot,\n    options,\n  );\n}\n\nexport function attachDecryptedHistory(\n  conversationContexts: Map<string, ConversationContextState[]>,\n  client: RegistryBrokerClient,\n  sessionId: string,\n  snapshot: ChatHistorySnapshotResponse,\n  options?: ChatHistoryFetchOptions,\n): ChatHistorySnapshotWithDecryptedEntries {\n  const shouldDecrypt =\n    options?.decrypt !== undefined\n      ? options.decrypt\n      : client.encryptionOptions?.autoDecryptHistory === true;\n  if (!shouldDecrypt) {\n    return snapshot;\n  }\n  const requiresContext = snapshot.history.some(entry =>\n    Boolean(entry.cipherEnvelope),\n  );\n  if (!requiresContext) {\n    return {\n      ...snapshot,\n      decryptedHistory: snapshot.history.map(entry => ({\n        entry,\n        plaintext: entry.content,\n      })),\n    };\n  }\n  const context = resolveDecryptionContext(\n    conversationContexts,\n    client,\n    sessionId,\n    options,\n  );\n  if (!context) {\n    throw new Error(\n      'Unable to decrypt chat history: encryption context unavailable',\n    );\n  }\n  const decryptedHistory = snapshot.history.map(entry => ({\n    entry,\n    plaintext: decryptHistoryEntryFromContext(client, entry, context),\n  }));\n  return { ...snapshot, decryptedHistory };\n}\n\nexport function registerConversationContextForEncryption(\n  conversationContexts: Map<string, ConversationContextState[]>,\n  context: ConversationContextInput,\n): void {\n  const normalized: ConversationContextState = {\n    sessionId: context.sessionId,\n    sharedSecret: Buffer.from(context.sharedSecret),\n    identity: context.identity ? { ...context.identity } : undefined,\n  };\n  const entries = conversationContexts.get(context.sessionId) ?? [];\n  const existingIndex = entries.findIndex(existing =>\n    identitiesMatch(existing.identity, normalized.identity),\n  );\n  if (existingIndex >= 0) {\n    entries[existingIndex] = normalized;\n  } else {\n    entries.push(normalized);\n  }\n  conversationContexts.set(context.sessionId, entries);\n}\n\nexport function resolveDecryptionContext(\n  conversationContexts: Map<string, ConversationContextState[]>,\n  client: RegistryBrokerClient,\n  sessionId: string,\n  options?: ChatHistoryFetchOptions,\n): ConversationContextState | null {\n  if (options?.sharedSecret) {\n    return {\n      sessionId,\n      sharedSecret: client.normalizeSharedSecret(options.sharedSecret),\n      identity: options.identity,\n    };\n  }\n  const contexts = conversationContexts.get(sessionId);\n  if (!contexts || contexts.length === 0) {\n    return null;\n  }\n  if (options?.identity) {\n    const match = contexts.find(context =>\n      identitiesMatch(context.identity, options.identity),\n    );\n    if (match) {\n      return match;\n    }\n  }\n  return contexts[0];\n}\n\nexport function decryptHistoryEntryFromContext(\n  client: RegistryBrokerClient,\n  entry: ChatHistoryEntry,\n  context: ConversationContextState,\n): string | null {\n  const envelope = entry.cipherEnvelope;\n  if (!envelope) {\n    return entry.content;\n  }\n  const secret = Buffer.from(context.sharedSecret);\n  try {\n    return client.encryption.decryptCipherEnvelope({\n      envelope,\n      sharedSecret: secret,\n    });\n  } catch (_error) {\n    return null;\n  }\n}\n"],"names":[],"mappings":";;AAwBA,SAAS,gBACP,GACA,GACS;AACT,MAAI,CAAC,KAAK,CAAC,GAAG;AACZ,WAAO;AAAA,EACT;AACA,MAAI,CAAC,KAAK,CAAC,GAAG;AACZ,WAAO;AAAA,EACT;AACA,MAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,kBAAkB,EAAE,KAAK,YAAA,GAAe;AACrE,WAAO;AAAA,EACT;AACA,MACE,EAAE,mBACF,EAAE,mBACF,EAAE,gBAAgB,kBAAkB,EAAE,gBAAgB,YAAA,GACtD;AACA,WAAO;AAAA,EACT;AACA,MAAI,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ;AACjD,WAAO;AAAA,EACT;AACA,MAAI,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,kBAAkB,EAAE,MAAM,YAAA,GAAe;AACzE,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,eAAsB,qBACpB,sBACA,QACA,WACA,SACkD;AAClD,MAAI,CAAC,aAAa,UAAU,KAAA,EAAO,WAAW,GAAG;AAC/C,UAAM,IAAI,MAAM,6CAA6C;AAAA,EAC/D;AACA,QAAM,MAAM,MAAM,OAAO;AAAA,IACvB,iBAAiB,mBAAmB,SAAS,CAAC;AAAA,IAC9C;AAAA,MACE,QAAQ;AAAA,IAAA;AAAA,EACV;AAEF,QAAM,WAAW,OAAO;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,EAAA;AAEF,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EAAA;AAEJ;AAEO,SAAS,uBACd,sBACA,QACA,WACA,UACA,SACyC;AACzC,QAAM,gBACJ,SAAS,YAAY,SACjB,QAAQ,UACR,OAAO,mBAAmB,uBAAuB;AACvD,MAAI,CAAC,eAAe;AAClB,WAAO;AAAA,EACT;AACA,QAAM,kBAAkB,SAAS,QAAQ;AAAA,IAAK,CAAA,UAC5C,QAAQ,MAAM,cAAc;AAAA,EAAA;AAE9B,MAAI,CAAC,iBAAiB;AACpB,WAAO;AAAA,MACL,GAAG;AAAA,MACH,kBAAkB,SAAS,QAAQ,IAAI,CAAA,WAAU;AAAA,QAC/C;AAAA,QACA,WAAW,MAAM;AAAA,MAAA,EACjB;AAAA,IAAA;AAAA,EAEN;AACA,QAAM,UAAU;AAAA,IACd;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EAAA;AAEF,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAAA,EAEJ;AACA,QAAM,mBAAmB,SAAS,QAAQ,IAAI,CAAA,WAAU;AAAA,IACtD;AAAA,IACA,WAAW,+BAA+B,QAAQ,OAAO,OAAO;AAAA,EAAA,EAChE;AACF,SAAO,EAAE,GAAG,UAAU,iBAAA;AACxB;AAEO,SAAS,yCACd,sBACA,SACM;AACN,QAAM,aAAuC;AAAA,IAC3C,WAAW,QAAQ;AAAA,IACnB,cAAc,OAAO,KAAK,QAAQ,YAAY;AAAA,IAC9C,UAAU,QAAQ,WAAW,EAAE,GAAG,QAAQ,aAAa;AAAA,EAAA;AAEzD,QAAM,UAAU,qBAAqB,IAAI,QAAQ,SAAS,KAAK,CAAA;AAC/D,QAAM,gBAAgB,QAAQ;AAAA,IAAU,CAAA,aACtC,gBAAgB,SAAS,UAAU,WAAW,QAAQ;AAAA,EAAA;AAExD,MAAI,iBAAiB,GAAG;AACtB,YAAQ,aAAa,IAAI;AAAA,EAC3B,OAAO;AACL,YAAQ,KAAK,UAAU;AAAA,EACzB;AACA,uBAAqB,IAAI,QAAQ,WAAW,OAAO;AACrD;AAEO,SAAS,yBACd,sBACA,QACA,WACA,SACiC;AACjC,MAAI,SAAS,cAAc;AACzB,WAAO;AAAA,MACL;AAAA,MACA,cAAc,OAAO,sBAAsB,QAAQ,YAAY;AAAA,MAC/D,UAAU,QAAQ;AAAA,IAAA;AAAA,EAEtB;AACA,QAAM,WAAW,qBAAqB,IAAI,SAAS;AACnD,MAAI,CAAC,YAAY,SAAS,WAAW,GAAG;AACtC,WAAO;AAAA,EACT;AACA,MAAI,SAAS,UAAU;AACrB,UAAM,QAAQ,SAAS;AAAA,MAAK,CAAA,YAC1B,gBAAgB,QAAQ,UAAU,QAAQ,QAAQ;AAAA,IAAA;AAEpD,QAAI,OAAO;AACT,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO,SAAS,CAAC;AACnB;AAEO,SAAS,+BACd,QACA,OACA,SACe;AACf,QAAM,WAAW,MAAM;AACvB,MAAI,CAAC,UAAU;AACb,WAAO,MAAM;AAAA,EACf;AACA,QAAM,SAAS,OAAO,KAAK,QAAQ,YAAY;AAC/C,MAAI;AACF,WAAO,OAAO,WAAW,sBAAsB;AAAA,MAC7C;AAAA,MACA,cAAc;AAAA,IAAA,CACf;AAAA,EACH,SAAS,QAAQ;AACf,WAAO;AAAA,EACT;AACF;"}