@haven-chat-org/core 1.0.0

package/dist/crypto/x3dh.d.ts

@@ -0,0 +1,45 @@
+/**
+ * X3DH (Extended Triple Diffie-Hellman) key agreement.
+ *
+ * Establishes a shared secret between Alice (initiator) and Bob (responder)
+ * even if Bob is offline. Alice fetches Bob's key bundle from the server.
+ *
+ * Protocol:
+ *   DH1 = DH(IK_A, SPK_B)        — Alice's identity × Bob's signed prekey
+ *   DH2 = DH(EK_A, IK_B)         — Alice's ephemeral × Bob's identity
+ *   DH3 = DH(EK_A, SPK_B)        — Alice's ephemeral × Bob's signed prekey
+ *   DH4 = DH(EK_A, OPK_B)        — Alice's ephemeral × Bob's one-time prekey (if available)
+ *   SK  = HKDF(DH1 || DH2 || DH3 || DH4)
+ *
+ * All identity keys are Ed25519 (converted to X25519 for DH).
+ * All prekeys and ephemeral keys are X25519 natively.
+ */
+import { type IdentityKeyPair, type DHKeyPair } from "./keys.js";
+import type { KeyBundle } from "../types.js";
+export interface X3DHResult {
+    /** The derived shared secret (32 bytes). Initializes the Double Ratchet. */
+    sharedKey: Uint8Array;
+    /** Associated data: IK_A || IK_B (for AEAD binding in Double Ratchet). */
+    associatedData: Uint8Array;
+    /** The ephemeral public key Alice used (sent to Bob in the initial message). */
+    ephemeralPublicKey: Uint8Array;
+}
+/**
+ * Alice (initiator): compute X3DH shared secret from Bob's key bundle.
+ *
+ * @param aliceIdentity  Alice's long-term Ed25519 identity keypair
+ * @param bobBundle      Bob's key bundle fetched from the server
+ * @returns The shared key, associated data, and ephemeral key to include in the initial message
+ */
+export declare function x3dhInitiate(aliceIdentity: IdentityKeyPair, bobBundle: KeyBundle): X3DHResult;
+/**
+ * Bob (responder): compute X3DH shared secret from Alice's initial message.
+ *
+ * @param bobIdentity       Bob's long-term Ed25519 identity keypair
+ * @param bobSignedPreKey   Bob's signed prekey pair (the one used in his bundle)
+ * @param bobOneTimePreKey  Bob's one-time prekey pair (null if not used)
+ * @param aliceIdentityPub  Alice's Ed25519 public identity key (from the initial message)
+ * @param aliceEphemeralPub Alice's ephemeral X25519 public key (from the initial message)
+ * @returns The shared key and associated data
+ */
+export declare function x3dhRespond(bobIdentity: IdentityKeyPair, bobSignedPreKey: DHKeyPair, bobOneTimePreKey: DHKeyPair | null, aliceIdentityPub: Uint8Array, aliceEphemeralPub: Uint8Array): Omit<X3DHResult, "ephemeralPublicKey">;

package/dist/crypto/x3dh.js

@@ -0,0 +1,106 @@
+/**
+ * X3DH (Extended Triple Diffie-Hellman) key agreement.
+ *
+ * Establishes a shared secret between Alice (initiator) and Bob (responder)
+ * even if Bob is offline. Alice fetches Bob's key bundle from the server.
+ *
+ * Protocol:
+ *   DH1 = DH(IK_A, SPK_B)        — Alice's identity × Bob's signed prekey
+ *   DH2 = DH(EK_A, IK_B)         — Alice's ephemeral × Bob's identity
+ *   DH3 = DH(EK_A, SPK_B)        — Alice's ephemeral × Bob's signed prekey
+ *   DH4 = DH(EK_A, OPK_B)        — Alice's ephemeral × Bob's one-time prekey (if available)
+ *   SK  = HKDF(DH1 || DH2 || DH3 || DH4)
+ *
+ * All identity keys are Ed25519 (converted to X25519 for DH).
+ * All prekeys and ephemeral keys are X25519 natively.
+ */
+import { dh, ed25519PkToX25519, ed25519SkToX25519, generateDHKeyPair, verifySignature, } from "./keys.js";
+import { hkdf, fromBase64 } from "./utils.js";
+const X3DH_INFO = new TextEncoder().encode("haven_x3dh");
+const PADDING = new Uint8Array(32).fill(0xff);
+/**
+ * Alice (initiator): compute X3DH shared secret from Bob's key bundle.
+ *
+ * @param aliceIdentity  Alice's long-term Ed25519 identity keypair
+ * @param bobBundle      Bob's key bundle fetched from the server
+ * @returns The shared key, associated data, and ephemeral key to include in the initial message
+ */
+export function x3dhInitiate(aliceIdentity, bobBundle) {
+    // Decode Bob's keys from base64
+    const bobIdentityEd = fromBase64(bobBundle.identity_key);
+    const bobSignedPreKey = fromBase64(bobBundle.signed_prekey);
+    const bobSignedPreKeySig = fromBase64(bobBundle.signed_prekey_sig);
+    const bobOneTimePreKey = bobBundle.one_time_prekey
+        ? fromBase64(bobBundle.one_time_prekey)
+        : null;
+    // Verify Bob's signed prekey signature using his Ed25519 identity key
+    if (!verifySignature(bobSignedPreKeySig, bobSignedPreKey, bobIdentityEd)) {
+        throw new Error("X3DH: invalid signed prekey signature");
+    }
+    // Convert identity keys to X25519 for DH
+    const aliceIdentityX = ed25519SkToX25519(aliceIdentity.privateKey);
+    const bobIdentityX = ed25519PkToX25519(bobIdentityEd);
+    // Generate Alice's ephemeral X25519 keypair
+    const ephemeral = generateDHKeyPair();
+    // Compute DH values
+    const dh1 = dh(aliceIdentityX, bobSignedPreKey);
+    const dh2 = dh(ephemeral.privateKey, bobIdentityX);
+    const dh3 = dh(ephemeral.privateKey, bobSignedPreKey);
+    // Concatenate: F || DH1 || DH2 || DH3 [|| DH4]
+    const parts = [PADDING, dh1, dh2, dh3];
+    if (bobOneTimePreKey) {
+        parts.push(dh(ephemeral.privateKey, bobOneTimePreKey));
+    }
+    const totalLen = parts.reduce((sum, p) => sum + p.length, 0);
+    const ikm = new Uint8Array(totalLen);
+    let offset = 0;
+    for (const part of parts) {
+        ikm.set(part, offset);
+        offset += part.length;
+    }
+    // Derive shared key: HKDF(salt=zeros, ikm, info="haven_x3dh", L=32)
+    const salt = new Uint8Array(32);
+    const sharedKey = hkdf(salt, ikm, X3DH_INFO, 32);
+    // Associated data binds the session to both identities
+    const associatedData = new Uint8Array(64);
+    associatedData.set(aliceIdentity.publicKey, 0);
+    associatedData.set(bobIdentityEd, 32);
+    return { sharedKey, associatedData, ephemeralPublicKey: ephemeral.publicKey };
+}
+/**
+ * Bob (responder): compute X3DH shared secret from Alice's initial message.
+ *
+ * @param bobIdentity       Bob's long-term Ed25519 identity keypair
+ * @param bobSignedPreKey   Bob's signed prekey pair (the one used in his bundle)
+ * @param bobOneTimePreKey  Bob's one-time prekey pair (null if not used)
+ * @param aliceIdentityPub  Alice's Ed25519 public identity key (from the initial message)
+ * @param aliceEphemeralPub Alice's ephemeral X25519 public key (from the initial message)
+ * @returns The shared key and associated data
+ */
+export function x3dhRespond(bobIdentity, bobSignedPreKey, bobOneTimePreKey, aliceIdentityPub, aliceEphemeralPub) {
+    // Convert identity keys to X25519 for DH
+    const bobIdentityX = ed25519SkToX25519(bobIdentity.privateKey);
+    const aliceIdentityX = ed25519PkToX25519(aliceIdentityPub);
+    // Compute DH values (mirror of Alice's computation)
+    const dh1 = dh(bobSignedPreKey.privateKey, aliceIdentityX);
+    const dh2 = dh(bobIdentityX, aliceEphemeralPub);
+    const dh3 = dh(bobSignedPreKey.privateKey, aliceEphemeralPub);
+    const parts = [PADDING, dh1, dh2, dh3];
+    if (bobOneTimePreKey) {
+        parts.push(dh(bobOneTimePreKey.privateKey, aliceEphemeralPub));
+    }
+    const totalLen = parts.reduce((sum, p) => sum + p.length, 0);
+    const ikm = new Uint8Array(totalLen);
+    let offset = 0;
+    for (const part of parts) {
+        ikm.set(part, offset);
+        offset += part.length;
+    }
+    const salt = new Uint8Array(32);
+    const sharedKey = hkdf(salt, ikm, X3DH_INFO, 32);
+    const associatedData = new Uint8Array(64);
+    associatedData.set(aliceIdentityPub, 0);
+    associatedData.set(bobIdentity.publicKey, 32);
+    return { sharedKey, associatedData };
+}
+//# sourceMappingURL=x3dh.js.map

package/dist/crypto/x3dh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"x3dh.js","sourceRoot":"","sources":["../../src/crypto/x3dh.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAGL,EAAE,EACF,iBAAiB,EACjB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,GAChB,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAG9C,MAAM,SAAS,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;AACzD,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAa9C;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAC1B,aAA8B,EAC9B,SAAoB;IAEpB,gCAAgC;IAChC,MAAM,aAAa,GAAG,UAAU,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IACzD,MAAM,eAAe,GAAG,UAAU,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IAC5D,MAAM,kBAAkB,GAAG,UAAU,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IACnE,MAAM,gBAAgB,GAAG,SAAS,CAAC,eAAe;QAChD,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,eAAe,CAAC;QACvC,CAAC,CAAC,IAAI,CAAC;IAET,sEAAsE;IACtE,IAAI,CAAC,eAAe,CAAC,kBAAkB,EAAE,eAAe,EAAE,aAAa,CAAC,EAAE,CAAC;QACzE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IAED,yCAAyC;IACzC,MAAM,cAAc,GAAG,iBAAiB,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;IACnE,MAAM,YAAY,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC;IAEtD,4CAA4C;IAC5C,MAAM,SAAS,GAAG,iBAAiB,EAAE,CAAC;IAEtC,oBAAoB;IACpB,MAAM,GAAG,GAAG,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;IAEtD,+CAA+C;IAC/C,MAAM,KAAK,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACvC,IAAI,gBAAgB,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACzD,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACtB,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;IACxB,CAAC;IAED,oEAAoE;IACpE,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAEjD,uDAAuD;IACvD,MAAM,cAAc,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC1C,cAAc,CAAC,GAAG,CAAC,aAAa,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAC/C,cAAc,CAAC,GAAG,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IAEtC,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,kBAAkB,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC;AAChF,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,WAAW,CACzB,WAA4B,EAC5B,eAA0B,EAC1B,gBAAkC,EAClC,gBAA4B,EAC5B,iBAA6B;IAE7B,yCAAyC;IACzC,MAAM,YAAY,GAAG,iBAAiB,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IAC/D,MAAM,cAAc,GAAG,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;IAE3D,oDAAoD;IACpD,MAAM,GAAG,GAAG,EAAE,CAAC,eAAe,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,EAAE,CAAC,eAAe,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;IAE9D,MAAM,KAAK,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACvC,IAAI,gBAAgB,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC7D,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC;IACrC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACtB,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC;IACxB,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAEjD,MAAM,cAAc,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC1C,cAAc,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC;IACxC,cAAc,CAAC,GAAG,CAAC,WAAW,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAE9C,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;AACvC,CAAC"}

package/dist/export/__tests__/archive.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/export/__tests__/archive.test.js

@@ -0,0 +1,276 @@
+import { describe, it, expect, beforeAll } from "vitest";
+import { initSodium, getSodium, toBase64 } from "../../crypto/utils.js";
+import { HavenArchiveBuilder } from "../archive.js";
+import { HavenArchiveReader } from "../reader.js";
+import { signManifest, verifyManifest, computeFileHash } from "../signing.js";
+// ── Test Data ───────────────────────────────────────────
+function makeChannelExport(name = "general") {
+    return {
+        channel: {
+            id: "ch-001",
+            name,
+            type: "text",
+            encrypted: true,
+            category: "Text Channels",
+            created_at: "2025-03-01T00:00:00Z",
+        },
+        exported_at: "2026-02-22T12:00:00Z",
+        exported_by: "user-001",
+        message_count: 2,
+        date_range: { from: "2025-03-15T14:30:00Z", to: "2025-03-15T15:00:00Z" },
+        messages: [
+            {
+                id: "msg-001",
+                sender_id: "user-001",
+                sender_name: "alice",
+                sender_display_name: "Alice",
+                timestamp: "2025-03-15T14:30:00Z",
+                text: "Hello everyone!",
+                content_type: "text/plain",
+                formatting: null,
+                edited: false,
+                reply_to: null,
+                type: "user",
+                reactions: [{ emoji: "wave", count: 2, users: ["bob", "charlie"] }],
+                pinned: false,
+                attachments: [],
+            },
+            {
+                id: "msg-002",
+                sender_id: "user-002",
+                sender_name: "bob",
+                sender_display_name: "Bob",
+                timestamp: "2025-03-15T15:00:00Z",
+                text: "Hey Alice!",
+                content_type: "text/plain",
+                formatting: null,
+                edited: false,
+                reply_to: "msg-001",
+                type: "user",
+                reactions: [],
+                pinned: true,
+                attachments: [],
+            },
+        ],
+    };
+}
+function makeServerExport() {
+    return {
+        server: {
+            id: "srv-001",
+            name: "Test Server",
+            description: "A test server",
+            icon_url: null,
+            created_at: "2025-03-01T00:00:00Z",
+        },
+        categories: [{ id: "cat-001", name: "Text Channels", position: 0 }],
+        channels: [
+            {
+                id: "ch-001",
+                name: "general",
+                type: "text",
+                category_id: "cat-001",
+                position: 0,
+                encrypted: true,
+                is_private: false,
+            },
+        ],
+        roles: [
+            {
+                id: "role-001",
+                name: "Moderator",
+                color: "#3498db",
+                permissions: 8192,
+                position: 1,
+                is_default: false,
+            },
+        ],
+        members: [
+            {
+                user_id: "user-001",
+                username: "alice",
+                display_name: "Alice",
+                nickname: null,
+                roles: ["role-001"],
+                joined_at: "2025-03-01T00:00:00Z",
+            },
+        ],
+        emojis: [],
+        permission_overwrites: [],
+    };
+}
+// ── Tests ───────────────────────────────────────────────
+beforeAll(async () => {
+    await initSodium();
+});
+describe("HavenArchiveBuilder + HavenArchiveReader", () => {
+    const metadata = {
+        exportedBy: { user_id: "user-001", username: "alice", identity_key: "" },
+        serverId: "srv-001",
+        instanceUrl: "https://haven.example.com",
+    };
+    it("round-trips channel data through build and read", async () => {
+        const sodium = getSodium();
+        const kp = sodium.crypto_sign_keypair();
+        const meta = {
+            ...metadata,
+            exportedBy: { ...metadata.exportedBy, identity_key: toBase64(kp.publicKey) },
+        };
+        const builder = new HavenArchiveBuilder(meta);
+        builder.addChannel(makeChannelExport());
+        builder.addServerMeta(makeServerExport());
+        builder.addAuditLog([{ action: "test", timestamp: "2026-02-22T12:00:00Z" }]);
+        const attachment = new TextEncoder().encode("fake image data");
+        builder.addAttachment("att-001", attachment);
+        const zip = await builder.build(kp.privateKey);
+        expect(zip).toBeInstanceOf(Uint8Array);
+        expect(zip.byteLength).toBeGreaterThan(0);
+        const reader = await HavenArchiveReader.fromBlob(zip);
+        const manifest = reader.getManifest();
+        expect(manifest.version).toBe(1);
+        expect(manifest.format).toBe("haven-export");
+        expect(manifest.exported_by.username).toBe("alice");
+        expect(manifest.server_id).toBe("srv-001");
+        expect(manifest.message_count).toBe(2);
+        expect(manifest.user_signature).toBeDefined();
+        expect(Object.keys(manifest.files)).toContain("channels/general.json");
+        expect(Object.keys(manifest.files)).toContain("server.json");
+        expect(Object.keys(manifest.files)).toContain("attachments/att-001.bin");
+        expect(Object.keys(manifest.files)).toContain("audit-log.json");
+        // Channel export round-trip
+        const channel = reader.getChannelExport("general");
+        expect(channel).not.toBeNull();
+        expect(channel.message_count).toBe(2);
+        expect(channel.messages[0].text).toBe("Hello everyone!");
+        expect(channel.messages[1].pinned).toBe(true);
+        // Server meta round-trip
+        const server = reader.getServerMeta();
+        expect(server).not.toBeNull();
+        expect(server.server.name).toBe("Test Server");
+        expect(server.roles).toHaveLength(1);
+        // Attachment round-trip
+        const att = reader.getAttachment("attachments/att-001.bin");
+        expect(att).not.toBeNull();
+        expect(new TextDecoder().decode(att)).toBe("fake image data");
+        // Audit log round-trip
+        const log = reader.getAuditLog();
+        expect(log).not.toBeNull();
+        expect(log).toHaveLength(1);
+        expect(log[0].action).toBe("test");
+    });
+    it("verification passes for untampered archive", async () => {
+        const sodium = getSodium();
+        const kp = sodium.crypto_sign_keypair();
+        const meta = {
+            ...metadata,
+            exportedBy: { ...metadata.exportedBy, identity_key: toBase64(kp.publicKey) },
+        };
+        const builder = new HavenArchiveBuilder(meta);
+        builder.addChannel(makeChannelExport());
+        const zip = await builder.build(kp.privateKey);
+        const reader = await HavenArchiveReader.fromBlob(zip);
+        const result = await reader.verify();
+        expect(result.valid).toBe(true);
+        expect(result.issues).toHaveLength(0);
+    });
+    it("verification fails for tampered file", async () => {
+        const sodium = getSodium();
+        const kp = sodium.crypto_sign_keypair();
+        const meta = {
+            ...metadata,
+            exportedBy: { ...metadata.exportedBy, identity_key: toBase64(kp.publicKey) },
+        };
+        const builder = new HavenArchiveBuilder(meta);
+        builder.addChannel(makeChannelExport());
+        const zip = await builder.build(kp.privateKey);
+        // Read the archive, tamper with a file, then verify
+        const reader = await HavenArchiveReader.fromBlob(zip);
+        // Access internal files and tamper
+        const manifest = reader.getManifest();
+        // Tamper: change a hash in the manifest to simulate file corruption
+        const firstFile = Object.keys(manifest.files)[0];
+        manifest.files[firstFile].sha256 = "0000000000000000000000000000000000000000000000000000000000000000";
+        // Re-verify with tampered manifest — the hash won't match
+        const result = await reader.verify();
+        // The reader still has the original manifest, so we need to test differently.
+        // Let's instead rebuild with tampered data.
+        // Actually the reader's verify checks files against its own manifest,
+        // and since we mutated the manifest object in place, it should fail.
+        expect(result.valid).toBe(false);
+        expect(result.issues.length).toBeGreaterThan(0);
+        expect(result.issues[0]).toContain("Hash mismatch");
+    });
+    it("verification fails for missing file referenced in manifest", async () => {
+        const sodium = getSodium();
+        const kp = sodium.crypto_sign_keypair();
+        const meta = {
+            ...metadata,
+            exportedBy: { ...metadata.exportedBy, identity_key: toBase64(kp.publicKey) },
+        };
+        const builder = new HavenArchiveBuilder(meta);
+        builder.addChannel(makeChannelExport());
+        const zip = await builder.build(kp.privateKey);
+        const reader = await HavenArchiveReader.fromBlob(zip);
+        const manifest = reader.getManifest();
+        // Add a fake file entry to manifest
+        manifest.files["channels/nonexistent.json"] = { sha256: "abc", size: 100 };
+        const result = await reader.verify();
+        expect(result.valid).toBe(false);
+        expect(result.issues.some((i) => i.includes("Missing file"))).toBe(true);
+    });
+});
+describe("signManifest / verifyManifest", () => {
+    it("round-trips signing and verification", async () => {
+        const sodium = getSodium();
+        const kp = sodium.crypto_sign_keypair();
+        const manifest = {
+            version: 1,
+            format: "haven-export",
+            exported_by: {
+                user_id: "user-001",
+                username: "alice",
+                identity_key: toBase64(kp.publicKey),
+            },
+            exported_at: "2026-02-22T12:00:00Z",
+            instance_url: "https://haven.example.com",
+            files: {},
+            message_count: 0,
+            date_range: { from: "2026-01-01T00:00:00Z", to: "2026-02-22T12:00:00Z" },
+        };
+        const sig = signManifest(manifest, kp.privateKey);
+        expect(typeof sig).toBe("string");
+        expect(sig.length).toBeGreaterThan(0);
+        expect(verifyManifest(manifest, sig, kp.publicKey)).toBe(true);
+    });
+    it("rejects invalid signature", async () => {
+        const sodium = getSodium();
+        const kp1 = sodium.crypto_sign_keypair();
+        const kp2 = sodium.crypto_sign_keypair();
+        const manifest = {
+            version: 1,
+            format: "haven-export",
+            exported_by: {
+                user_id: "user-001",
+                username: "alice",
+                identity_key: toBase64(kp1.publicKey),
+            },
+            exported_at: "2026-02-22T12:00:00Z",
+            instance_url: "https://haven.example.com",
+            files: {},
+            message_count: 0,
+            date_range: { from: "2026-01-01T00:00:00Z", to: "2026-02-22T12:00:00Z" },
+        };
+        const sig = signManifest(manifest, kp1.privateKey);
+        // Verify with wrong key should fail
+        expect(verifyManifest(manifest, sig, kp2.publicKey)).toBe(false);
+    });
+});
+describe("computeFileHash", () => {
+    it("produces consistent SHA-256 hex digest", async () => {
+        const data = new TextEncoder().encode("hello world");
+        const hash = await computeFileHash(data);
+        // SHA-256 of "hello world"
+        expect(hash).toBe("b94d27b9934d3e08a52e52d7da7dabfac484efe37a5380ee9088f7ace2efcde9");
+    });
+});
+//# sourceMappingURL=archive.test.js.map

package/dist/export/__tests__/archive.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive.test.js","sourceRoot":"","sources":["../../../src/export/__tests__/archive.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAG9E,2DAA2D;AAE3D,SAAS,iBAAiB,CAAC,IAAI,GAAG,SAAS;IACzC,OAAO;QACL,OAAO,EAAE;YACP,EAAE,EAAE,QAAQ;YACZ,IAAI;YACJ,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,IAAI;YACf,QAAQ,EAAE,eAAe;YACzB,UAAU,EAAE,sBAAsB;SACnC;QACD,WAAW,EAAE,sBAAsB;QACnC,WAAW,EAAE,UAAU;QACvB,aAAa,EAAE,CAAC;QAChB,UAAU,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,EAAE,EAAE,sBAAsB,EAAE;QACxE,QAAQ,EAAE;YACR;gBACE,EAAE,EAAE,SAAS;gBACb,SAAS,EAAE,UAAU;gBACrB,WAAW,EAAE,OAAO;gBACpB,mBAAmB,EAAE,OAAO;gBAC5B,SAAS,EAAE,sBAAsB;gBACjC,IAAI,EAAE,iBAAiB;gBACvB,YAAY,EAAE,YAAY;gBAC1B,UAAU,EAAE,IAAI;gBAChB,MAAM,EAAE,KAAK;gBACb,QAAQ,EAAE,IAAI;gBACd,IAAI,EAAE,MAAM;gBACZ,SAAS,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;gBACnE,MAAM,EAAE,KAAK;gBACb,WAAW,EAAE,EAAE;aAChB;YACD;gBACE,EAAE,EAAE,SAAS;gBACb,SAAS,EAAE,UAAU;gBACrB,WAAW,EAAE,KAAK;gBAClB,mBAAmB,EAAE,KAAK;gBAC1B,SAAS,EAAE,sBAAsB;gBACjC,IAAI,EAAE,YAAY;gBAClB,YAAY,EAAE,YAAY;gBAC1B,UAAU,EAAE,IAAI;gBAChB,MAAM,EAAE,KAAK;gBACb,QAAQ,EAAE,SAAS;gBACnB,IAAI,EAAE,MAAM;gBACZ,SAAS,EAAE,EAAE;gBACb,MAAM,EAAE,IAAI;gBACZ,WAAW,EAAE,EAAE;aAChB;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO;QACL,MAAM,EAAE;YACN,EAAE,EAAE,SAAS;YACb,IAAI,EAAE,aAAa;YACnB,WAAW,EAAE,eAAe;YAC5B,QAAQ,EAAE,IAAI;YACd,UAAU,EAAE,sBAAsB;SACnC;QACD,UAAU,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;QACnE,QAAQ,EAAE;YACR;gBACE,EAAE,EAAE,QAAQ;gBACZ,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,MAAM;gBACZ,WAAW,EAAE,SAAS;gBACtB,QAAQ,EAAE,CAAC;gBACX,SAAS,EAAE,IAAI;gBACf,UAAU,EAAE,KAAK;aAClB;SACF;QACD,KAAK,EAAE;YACL;gBACE,EAAE,EAAE,UAAU;gBACd,IAAI,EAAE,WAAW;gBACjB,KAAK,EAAE,SAAS;gBAChB,WAAW,EAAE,IAAI;gBACjB,QAAQ,EAAE,CAAC;gBACX,UAAU,EAAE,KAAK;aAClB;SACF;QACD,OAAO,EAAE;YACP;gBACE,OAAO,EAAE,UAAU;gBACnB,QAAQ,EAAE,OAAO;gBACjB,YAAY,EAAE,OAAO;gBACrB,QAAQ,EAAE,IAAI;gBACd,KAAK,EAAE,CAAC,UAAU,CAAC;gBACnB,SAAS,EAAE,sBAAsB;aAClC;SACF;QACD,MAAM,EAAE,EAAE;QACV,qBAAqB,EAAE,EAAE;KAC1B,CAAC;AACJ,CAAC;AAED,2DAA2D;AAE3D,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,MAAM,UAAU,EAAE,CAAC;AACrB,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,0CAA0C,EAAE,GAAG,EAAE;IACxD,MAAM,QAAQ,GAAG;QACf,UAAU,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE;QACxE,QAAQ,EAAE,SAAS;QACnB,WAAW,EAAE,2BAA2B;KACzC,CAAC;IAEF,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,EAAE,GAAG,MAAM,CAAC,mBAAmB,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG;YACX,GAAG,QAAQ;YACX,UAAU,EAAE,EAAE,GAAG,QAAQ,CAAC,UAAU,EAAE,YAAY,EAAE,QAAQ,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE;SAC7E,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAC9C,OAAO,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC,CAAC;QACxC,OAAO,CAAC,aAAa,CAAC,gBAAgB,EAAE,CAAC,CAAC;QAC1C,OAAO,CAAC,WAAW,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,sBAAsB,EAAE,CAAC,CAAC,CAAC;QAE7E,MAAM,UAAU,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAC/D,OAAO,CAAC,aAAa,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAE7C,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;QAC/C,MAAM,CAAC,GAAG,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QACvC,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAE1C,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QAEtC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC7C,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpD,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9C,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;QACvE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;QAC7D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;QACzE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;QAEhE,4BAA4B;QAC5B,MAAM,OAAO,GAAG,MAAM,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;QACnD,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC/B,MAAM,CAAC,OAAQ,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,CAAC,OAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC1D,MAAM,CAAC,OAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE/C,yBAAyB;QACzB,MAAM,MAAM,GAAG,MAAM,CAAC,aAAa,EAAE,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,CAAC,MAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAChD,MAAM,CAAC,MAAO,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAEtC,wBAAwB;QACxB,MAAM,GAAG,GAAG,MAAM,CAAC,aAAa,CAAC,yBAAyB,CAAC,CAAC;QAC5D,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC3B,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAE/D,uBAAuB;QACvB,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QACjC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,CAAC,GAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,KAAK,IAAI,EAAE;QAC1D,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,EAAE,GAAG,MAAM,CAAC,mBAAmB,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG;YACX,GAAG,QAAQ;YACX,UAAU,EAAE,EAAE,GAAG,QAAQ,CAAC,UAAU,EAAE,YAAY,EAAE,QAAQ,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE;SAC7E,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAC9C,OAAO,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;QAE/C,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACtD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,EAAE,GAAG,MAAM,CAAC,mBAAmB,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG;YACX,GAAG,QAAQ;YACX,UAAU,EAAE,EAAE,GAAG,QAAQ,CAAC,UAAU,EAAE,YAAY,EAAE,QAAQ,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE;SAC7E,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAC9C,OAAO,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;QAE/C,oDAAoD;QACpD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACtD,mCAAmC;QACnC,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QAEtC,oEAAoE;QACpE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjD,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,kEAAkE,CAAC;QAEtG,0DAA0D;QAC1D,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;QACrC,8EAA8E;QAC9E,4CAA4C;QAC5C,sEAAsE;QACtE,qEAAqE;QACrE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,KAAK,IAAI,EAAE;QAC1E,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,EAAE,GAAG,MAAM,CAAC,mBAAmB,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG;YACX,GAAG,QAAQ;YACX,UAAU,EAAE,EAAE,GAAG,QAAQ,CAAC,UAAU,EAAE,YAAY,EAAE,QAAQ,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE;SAC7E,CAAC;QAEF,MAAM,OAAO,GAAG,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC;QAC9C,OAAO,CAAC,UAAU,CAAC,iBAAiB,EAAE,CAAC,CAAC;QACxC,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC;QAE/C,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QAEtC,oCAAoC;QACpC,QAAQ,CAAC,KAAK,CAAC,2BAA2B,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;QAE3E,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,+BAA+B,EAAE,GAAG,EAAE;IAC7C,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,EAAE,GAAG,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAExC,MAAM,QAAQ,GAAG;YACf,OAAO,EAAE,CAAU;YACnB,MAAM,EAAE,cAAuB;YAC/B,WAAW,EAAE;gBACX,OAAO,EAAE,UAAU;gBACnB,QAAQ,EAAE,OAAO;gBACjB,YAAY,EAAE,QAAQ,CAAC,EAAE,CAAC,SAAS,CAAC;aACrC;YACD,WAAW,EAAE,sBAAsB;YACnC,YAAY,EAAE,2BAA2B;YACzC,KAAK,EAAE,EAAE;YACT,aAAa,EAAE,CAAC;YAChB,UAAU,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,EAAE,EAAE,sBAAsB,EAAE;SACzE,CAAC;QAEF,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC;QAClD,MAAM,CAAC,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAEtC,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,MAAM,CAAC,mBAAmB,EAAE,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAEzC,MAAM,QAAQ,GAAG;YACf,OAAO,EAAE,CAAU;YACnB,MAAM,EAAE,cAAuB;YAC/B,WAAW,EAAE;gBACX,OAAO,EAAE,UAAU;gBACnB,QAAQ,EAAE,OAAO;gBACjB,YAAY,EAAE,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC;aACtC;YACD,WAAW,EAAE,sBAAsB;YACnC,YAAY,EAAE,2BAA2B;YACzC,KAAK,EAAE,EAAE;YACT,aAAa,EAAE,CAAC;YAChB,UAAU,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE,EAAE,EAAE,sBAAsB,EAAE;SACzE,CAAC;QAEF,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;QACnD,oCAAoC;QACpC,MAAM,CAAC,cAAc,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QACrD,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;QACzC,2BAA2B;QAC3B,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/export/archive.d.ts

@@ -0,0 +1,38 @@
+import type { HavenChannelExport, HavenServerExport } from "./types.js";
+interface ArchiveMetadata {
+    exportedBy: {
+        user_id: string;
+        username: string;
+        identity_key: string;
+    };
+    scope?: "server" | "channel" | "dm";
+    serverId?: string;
+    channelId?: string;
+    instanceUrl: string;
+}
+/**
+ * Builds a .haven archive (ZIP) containing channel exports,
+ * server metadata, attachments, and an optional audit log.
+ */
+export declare class HavenArchiveBuilder {
+    private metadata;
+    private channels;
+    private attachments;
+    private serverMeta;
+    private auditLog;
+    private messageCount;
+    private earliestDate;
+    private latestDate;
+    constructor(metadata: ArchiveMetadata);
+    addChannel(channelExport: HavenChannelExport): void;
+    addAttachment(id: string, data: Uint8Array): void;
+    addServerMeta(serverExport: HavenServerExport): void;
+    addAuditLog(entries: any[]): void;
+    /**
+     * Build the .haven archive as a ZIP Uint8Array.
+     * If signingKey is provided, the manifest is signed with Ed25519.
+     */
+    build(signingKey?: Uint8Array): Promise<Uint8Array>;
+    private updateDateRange;
+}
+export {};

package/dist/export/archive.js

@@ -0,0 +1,107 @@
+import { zipSync } from "fflate";
+import { signManifest, computeFileHash } from "./signing.js";
+/**
+ * Builds a .haven archive (ZIP) containing channel exports,
+ * server metadata, attachments, and an optional audit log.
+ */
+export class HavenArchiveBuilder {
+    metadata;
+    channels = new Map();
+    attachments = new Map();
+    serverMeta = null;
+    auditLog = null;
+    messageCount = 0;
+    earliestDate = null;
+    latestDate = null;
+    constructor(metadata) {
+        this.metadata = metadata;
+    }
+    addChannel(channelExport) {
+        const name = channelExport.channel.name.replace(/[^a-zA-Z0-9_-]/g, "_");
+        const dir = channelExport.channel.type === "dm" || channelExport.channel.type === "group_dm"
+            ? "dms"
+            : "channels";
+        const key = `${dir}/${name}.json`;
+        const data = new TextEncoder().encode(JSON.stringify(channelExport, null, 2));
+        this.channels.set(key, data);
+        this.messageCount += channelExport.message_count;
+        this.updateDateRange(channelExport.date_range.from, channelExport.date_range.to);
+    }
+    addAttachment(id, data) {
+        this.attachments.set(`attachments/${id}.bin`, data);
+    }
+    addServerMeta(serverExport) {
+        this.serverMeta = new TextEncoder().encode(JSON.stringify(serverExport, null, 2));
+    }
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    addAuditLog(entries) {
+        this.auditLog = new TextEncoder().encode(JSON.stringify(entries, null, 2));
+    }
+    /**
+     * Build the .haven archive as a ZIP Uint8Array.
+     * If signingKey is provided, the manifest is signed with Ed25519.
+     */
+    async build(signingKey) {
+        const files = {};
+        const fileHashes = {};
+        // Collect all files
+        for (const [path, data] of this.channels) {
+            files[path] = data;
+        }
+        for (const [path, data] of this.attachments) {
+            files[path] = data;
+        }
+        if (this.serverMeta) {
+            files["server.json"] = this.serverMeta;
+        }
+        if (this.auditLog) {
+            files["audit-log.json"] = this.auditLog;
+        }
+        // Compute hashes for all files
+        for (const [path, data] of Object.entries(files)) {
+            fileHashes[path] = {
+                sha256: await computeFileHash(data),
+                size: data.byteLength,
+            };
+        }
+        // Build manifest
+        const manifest = {
+            version: 1,
+            format: "haven-export",
+            exported_by: this.metadata.exportedBy,
+            exported_at: new Date().toISOString(),
+            instance_url: this.metadata.instanceUrl,
+            files: fileHashes,
+            message_count: this.messageCount,
+            date_range: {
+                from: this.earliestDate ?? new Date().toISOString(),
+                to: this.latestDate ?? new Date().toISOString(),
+            },
+        };
+        if (this.metadata.serverId)
+            manifest.server_id = this.metadata.serverId;
+        if (this.metadata.channelId)
+            manifest.channel_id = this.metadata.channelId;
+        if (this.metadata.scope)
+            manifest.scope = this.metadata.scope;
+        // Sign if key provided
+        if (signingKey) {
+            manifest.user_signature = signManifest(manifest, signingKey);
+        }
+        // Add manifest to archive
+        files["manifest.json"] = new TextEncoder().encode(JSON.stringify(manifest, null, 2));
+        // Build ZIP
+        const zippable = {};
+        for (const [path, data] of Object.entries(files)) {
+            zippable[path] = data;
+        }
+        return zipSync(zippable);
+    }
+    updateDateRange(from, to) {
+        if (!this.earliestDate || from < this.earliestDate)
+            this.earliestDate = from;
+        if (!this.latestDate || to > this.latestDate)
+            this.latestDate = to;
+    }
+}
+//# sourceMappingURL=archive.js.map

package/dist/export/archive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive.js","sourceRoot":"","sources":["../../src/export/archive.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAiB,MAAM,QAAQ,CAAC;AAOhD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAU7D;;;GAGG;AACH,MAAM,OAAO,mBAAmB;IACtB,QAAQ,CAAkB;IAC1B,QAAQ,GAA4B,IAAI,GAAG,EAAE,CAAC;IAC9C,WAAW,GAA4B,IAAI,GAAG,EAAE,CAAC;IACjD,UAAU,GAAsB,IAAI,CAAC;IACrC,QAAQ,GAAsB,IAAI,CAAC;IACnC,YAAY,GAAG,CAAC,CAAC;IACjB,YAAY,GAAkB,IAAI,CAAC;IACnC,UAAU,GAAkB,IAAI,CAAC;IAEzC,YAAY,QAAyB;QACnC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;IAED,UAAU,CAAC,aAAiC;QAC1C,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;QACxE,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,IAAI,aAAa,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU;YAC1F,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,UAAU,CAAC;QACf,MAAM,GAAG,GAAG,GAAG,GAAG,IAAI,IAAI,OAAO,CAAC;QAClC,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9E,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAE7B,IAAI,CAAC,YAAY,IAAI,aAAa,CAAC,aAAa,CAAC;QACjD,IAAI,CAAC,eAAe,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,EAAE,aAAa,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC;IAED,aAAa,CAAC,EAAU,EAAE,IAAgB;QACxC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACtD,CAAC;IAED,aAAa,CAAC,YAA+B;QAC3C,IAAI,CAAC,UAAU,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACpF,CAAC;IAED,8DAA8D;IAC9D,WAAW,CAAC,OAAc;QACxB,IAAI,CAAC,QAAQ,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7E,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,KAAK,CAAC,UAAuB;QACjC,MAAM,KAAK,GAA+B,EAAE,CAAC;QAC7C,MAAM,UAAU,GAAqD,EAAE,CAAC;QAExE,oBAAoB;QACpB,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACzC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QACrB,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC5C,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QACrB,CAAC;QACD,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACpB,KAAK,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC;QACzC,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,KAAK,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC1C,CAAC;QAED,+BAA+B;QAC/B,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,UAAU,CAAC,IAAI,CAAC,GAAG;gBACjB,MAAM,EAAE,MAAM,eAAe,CAAC,IAAI,CAAC;gBACnC,IAAI,EAAE,IAAI,CAAC,UAAU;aACtB,CAAC;QACJ,CAAC;QAED,iBAAiB;QACjB,MAAM,QAAQ,GAAkB;YAC9B,OAAO,EAAE,CAAC;YACV,MAAM,EAAE,cAAc;YACtB,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU;YACrC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,YAAY,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW;YACvC,KAAK,EAAE,UAAU;YACjB,aAAa,EAAE,IAAI,CAAC,YAAY;YAChC,UAAU,EAAE;gBACV,IAAI,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnD,EAAE,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aAChD;SACF,CAAC;QACF,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ;YAAE,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QACxE,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS;YAAE,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC3E,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK;YAAE,QAAQ,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAE9D,uBAAuB;QACvB,IAAI,UAAU,EAAE,CAAC;YACf,QAAQ,CAAC,cAAc,GAAG,YAAY,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC/D,CAAC;QAED,0BAA0B;QAC1B,KAAK,CAAC,eAAe,CAAC,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAErF,YAAY;QACZ,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QACxB,CAAC;QAED,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC3B,CAAC;IAEO,eAAe,CAAC,IAAY,EAAE,EAAU;QAC9C,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,GAAG,IAAI,CAAC,YAAY;YAAE,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC7E,IAAI,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,GAAG,IAAI,CAAC,UAAU;YAAE,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC;IACrE,CAAC;CACF"}

package/dist/export/index.d.ts

@@ -0,0 +1,4 @@
+export type { HavenManifest, HavenChannelExport, HavenExportMessage, HavenAttachmentRef, HavenServerExport, } from "./types.js";
+export { signManifest, verifyManifest, computeFileHash } from "./signing.js";
+export { HavenArchiveBuilder } from "./archive.js";
+export { HavenArchiveReader } from "./reader.js";

package/dist/export/index.js

@@ -0,0 +1,4 @@
+export { signManifest, verifyManifest, computeFileHash } from "./signing.js";
+export { HavenArchiveBuilder } from "./archive.js";
+export { HavenArchiveReader } from "./reader.js";
+//# sourceMappingURL=index.js.map

package/dist/export/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/export/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC"}

package/dist/export/reader.d.ts

@@ -0,0 +1,27 @@
+import type { HavenManifest, HavenChannelExport, HavenServerExport } from "./types.js";
+/**
+ * Reads and verifies a .haven archive (ZIP).
+ */
+export declare class HavenArchiveReader {
+    private files;
+    private manifest;
+    private constructor();
+    /**
+     * Parse a .haven archive from raw ZIP bytes.
+     */
+    static fromBlob(data: Uint8Array): Promise<HavenArchiveReader>;
+    getManifest(): HavenManifest;
+    getChannelExport(channelName: string): HavenChannelExport | null;
+    /** Return all channel exports (channels/ and dms/ directories). */
+    getChannelExports(): HavenChannelExport[];
+    getServerMeta(): HavenServerExport | null;
+    getAttachment(fileRef: string): Uint8Array | null;
+    getAuditLog(): any[] | null;
+    /**
+     * Verify archive integrity: file hashes and optional Ed25519 signature.
+     */
+    verify(): Promise<{
+        valid: boolean;
+        issues: string[];
+    }>;
+}