@ikyyjee/ikyysinggle 1.7.7

package/lib/Utils/command-loader.js

@@ -0,0 +1,108 @@
+/**
+ * lib/Utils/command-loader.js — optional, opt-in "!command" style handler.
+ * Loads command modules from a local folder you point it at (each module
+ * exports { name, aliases?, execute(ctx) }) and dispatches incoming text
+ * messages that start with your chosen prefix to the matching command.
+ * Does nothing unless you call this yourself with a real `commandsDir`.
+ */
+import fs from 'fs';
+import path from 'path';
+import { createRequire } from 'module';
+
+const require = createRequire(import.meta.url);
+
+/**
+ * @param sock A connected socket (needs `sock.ev`, optionally `sock.logger`).
+ * @param options.commandsDir Folder containing your command modules.
+ * @param options.prefix Command prefix, default '!'.
+ * @param options.logger Optional logger override.
+ * @param options.onError Optional (error, msg) => void override for failures.
+ */
+export const createCommandHandler = (sock, options) => {
+    const prefix = options.prefix ?? '!';
+    const logger = options.logger || sock.logger;
+    const commands = new Map();
+    const load = () => {
+        commands.clear();
+        const dir = options.commandsDir;
+        if (!fs.existsSync(dir)) {
+            logger?.warn?.({ dir }, 'commands directory does not exist');
+            return;
+        }
+        const files = fs.readdirSync(dir).filter((f) => f.endsWith('.js'));
+        for (const file of files) {
+            const fullPath = path.join(dir, file);
+            try {
+                delete require.cache[require.resolve(fullPath)];
+                const mod = require(fullPath);
+                const cmd = mod?.default || mod;
+                if (!cmd?.name || typeof cmd.execute !== 'function') {
+                    logger?.warn?.({ file }, 'skipping invalid command module (missing name/execute)');
+                    continue;
+                }
+                commands.set(cmd.name.toLowerCase(), cmd);
+                for (const alias of cmd.aliases || []) {
+                    commands.set(alias.toLowerCase(), cmd);
+                }
+            }
+            catch (error) {
+                logger?.error?.({ error, file }, 'failed to load command');
+            }
+        }
+        logger?.debug?.({ count: commands.size }, 'commands loaded');
+    };
+    load();
+    const handler = async ({ messages, type }) => {
+        if (type !== 'notify') {
+            return;
+        }
+        for (const msg of messages) {
+            try {
+                if (!msg.message || msg.key.fromMe) {
+                    continue;
+                }
+                const body = msg.message.conversation ||
+                    msg.message.extendedTextMessage?.text ||
+                    msg.message.imageMessage?.caption ||
+                    msg.message.videoMessage?.caption ||
+                    '';
+                if (!body.startsWith(prefix)) {
+                    continue;
+                }
+                const [cmdName, ...args] = body.slice(prefix.length).trim().split(/\s+/);
+                if (!cmdName) {
+                    continue;
+                }
+                const cmd = commands.get(cmdName.toLowerCase());
+                if (!cmd) {
+                    continue;
+                }
+                const jid = msg.key.remoteJid;
+                const ctx = {
+                    sock,
+                    msg,
+                    args,
+                    text: args.join(' '),
+                    jid,
+                    sender: msg.key.participant || msg.key.remoteJid,
+                    isGroup: !!jid && jid.endsWith('@g.us')
+                };
+                await cmd.execute(ctx);
+            }
+            catch (error) {
+                if (options.onError) {
+                    options.onError(error, msg);
+                }
+                else {
+                    logger?.error?.({ error }, 'command execution failed');
+                }
+            }
+        }
+    };
+    sock.ev.on('messages.upsert', handler);
+    return {
+        commands,
+        reload: load,
+        stop: () => sock.ev.off('messages.upsert', handler)
+    };
+};

package/lib/Utils/companion-reg-client-utils.js

@@ -0,0 +1,35 @@
+export var CompanionWebClientType;
+(function (CompanionWebClientType) {
+    CompanionWebClientType[CompanionWebClientType["UNKNOWN"] = 0] = "UNKNOWN";
+    CompanionWebClientType[CompanionWebClientType["CHROME"] = 1] = "CHROME";
+    CompanionWebClientType[CompanionWebClientType["EDGE"] = 2] = "EDGE";
+    CompanionWebClientType[CompanionWebClientType["FIREFOX"] = 3] = "FIREFOX";
+    CompanionWebClientType[CompanionWebClientType["IE"] = 4] = "IE";
+    CompanionWebClientType[CompanionWebClientType["OPERA"] = 5] = "OPERA";
+    CompanionWebClientType[CompanionWebClientType["SAFARI"] = 6] = "SAFARI";
+    CompanionWebClientType[CompanionWebClientType["ELECTRON"] = 7] = "ELECTRON";
+    CompanionWebClientType[CompanionWebClientType["UWP"] = 8] = "UWP";
+    CompanionWebClientType[CompanionWebClientType["OTHER_WEB_CLIENT"] = 9] = "OTHER_WEB_CLIENT";
+})(CompanionWebClientType || (CompanionWebClientType = {}));
+const BROWSER_TO_COMPANION_WEB_CLIENT = {
+    Chrome: CompanionWebClientType.CHROME,
+    Edge: CompanionWebClientType.EDGE,
+    Firefox: CompanionWebClientType.FIREFOX,
+    IE: CompanionWebClientType.IE,
+    Opera: CompanionWebClientType.OPERA,
+    Safari: CompanionWebClientType.SAFARI
+};
+export const getCompanionWebClientType = ([os, browserName]) => {
+    if (browserName === 'Desktop') {
+        return os === 'Windows' ? CompanionWebClientType.UWP : CompanionWebClientType.ELECTRON;
+    }
+    return BROWSER_TO_COMPANION_WEB_CLIENT[browserName] || CompanionWebClientType.OTHER_WEB_CLIENT;
+};
+export const getCompanionPlatformId = (browser) => {
+    return getCompanionWebClientType(browser).toString();
+};
+export const buildPairingQRData = (ref, noiseKeyB64, identityKeyB64, advB64, browser) => {
+    return ('https://wa.me/settings/linked_devices#' +
+        [ref, noiseKeyB64, identityKeyB64, advB64, getCompanionPlatformId(browser)].join(','));
+};
+//# sourceMappingURL=companion-reg-client-utils.js.map

package/lib/Utils/consumer-application.js

@@ -0,0 +1,106 @@
+/**
+ * lib/Utils/consumer-application.js — decode WhatsApp's "ConsumerApplication"
+ * envelope (used for messages relayed through interop/cross-app channels)
+ * and map it into the same plain Message shape the rest of this library
+ * already understands. Pure protobuf decode + object mapping, no I/O.
+ */
+import { proto } from '../../WAProto/index.js';
+export const decodeConsumerApplication = buffer => {
+    if (!Buffer.isBuffer(buffer) && !(buffer instanceof Uint8Array)) {
+        throw new TypeError('decodeConsumerApplication: buffer must be Buffer or Uint8Array');
+    }
+    return proto.ConsumerApplication.decode(buffer);
+};
+const textOf = mt => (mt && typeof mt.text === 'string' ? mt.text : undefined);
+const mapContent = content => {
+    if (!content)
+        return null;
+    switch (content.content) {
+        case 'messageText':
+            return { conversation: textOf(content.messageText) ?? '' };
+        case 'extendedTextMessage': {
+            const e = content.extendedTextMessage;
+            return {
+                extendedTextMessage: {
+                    text: textOf(e.text),
+                    matchedText: e.matchedText,
+                    canonicalUrl: e.canonicalUrl,
+                    description: e.description,
+                    title: e.title
+                }
+            };
+        }
+        case 'imageMessage':
+            return {
+                imageMessage: { mediaPayload: content.imageMessage.image, caption: textOf(content.imageMessage.caption) }
+            };
+        case 'videoMessage':
+            return {
+                videoMessage: { mediaPayload: content.videoMessage.video, caption: textOf(content.videoMessage.caption) }
+            };
+        case 'audioMessage':
+            return { audioMessage: { mediaPayload: content.audioMessage.audio, ptt: content.audioMessage.ptt } };
+        case 'documentMessage':
+            return {
+                documentMessage: { mediaPayload: content.documentMessage.document, fileName: content.documentMessage.fileName }
+            };
+        case 'stickerMessage':
+            return { stickerMessage: { mediaPayload: content.stickerMessage.sticker } };
+        case 'contactMessage':
+            return { contactMessage: { mediaPayload: content.contactMessage.contact } };
+        case 'contactsArrayMessage':
+            return {
+                contactsArrayMessage: {
+                    displayName: content.contactsArrayMessage.displayName,
+                    contacts: content.contactsArrayMessage.contacts || []
+                }
+            };
+        case 'locationMessage': {
+            const loc = content.locationMessage.location || {};
+            return {
+                locationMessage: {
+                    degreesLatitude: loc.degreesLatitude,
+                    degreesLongitude: loc.degreesLongitude,
+                    name: loc.name
+                }
+            };
+        }
+        case 'liveLocationMessage': {
+            const loc = content.liveLocationMessage.location || {};
+            return {
+                liveLocationMessage: {
+                    degreesLatitude: loc.degreesLatitude,
+                    degreesLongitude: loc.degreesLongitude,
+                    caption: textOf(content.liveLocationMessage.caption)
+                }
+            };
+        }
+        case 'reactionMessage':
+            return { reactionMessage: content.reactionMessage };
+        default:
+            return null;
+    }
+};
+export const consumerApplicationToMessage = app => {
+    const payload = app?.payload;
+    if (!payload)
+        return null;
+    switch (payload.payload) {
+        case 'content':
+            return mapContent(payload.content);
+        case 'applicationData': {
+            const ad = payload.applicationData;
+            if (ad?.applicationContent === 'revoke' && ad.revoke?.key) {
+                return {
+                    protocolMessage: {
+                        key: ad.revoke.key,
+                        type: proto.Message.ProtocolMessage.Type.REVOKE
+                    }
+                };
+            }
+            return null;
+        }
+        default:
+            return null;
+    }
+};

package/lib/Utils/crypto.js

@@ -0,0 +1,137 @@
+import { createCipheriv, createDecipheriv, createHash, createHmac, randomBytes } from 'crypto';
+import * as curve from 'libsignal/src/curve.js';
+import { KEY_BUNDLE_TYPE } from '../Defaults/index.js';
+import { generateKeyPairJS, sharedKeyJS, signJS, verifyJS } from './curve25519-js.js';
+export { md5, hkdf } from 'whatsapp-rust-bridge';
+// insure browser & node compatibility
+const { subtle } = globalThis.crypto;
+/** prefix version byte to the pub keys, required for some curve crypto functions */
+export const generateSignalPubKey = (pubKey) => pubKey.length === 33 ? pubKey : Buffer.concat([KEY_BUNDLE_TYPE, pubKey]);
+export const Curve = {
+    generateKeyPair: () => {
+        const { pubKey, privKey } = curve.generateKeyPair();
+        return {
+            private: Buffer.from(privKey),
+            // remove version byte
+            public: Buffer.from(pubKey.slice(1))
+        };
+    },
+    sharedKey: (privateKey, publicKey) => {
+        const shared = curve.calculateAgreement(generateSignalPubKey(publicKey), privateKey);
+        return Buffer.from(shared);
+    },
+    sign: (privateKey, buf) => curve.calculateSignature(privateKey, buf),
+    verify: (pubKey, message, signature) => {
+        try {
+            curve.verifySignature(generateSignalPubKey(pubKey), message, signature);
+            return true;
+        }
+        catch (error) {
+            return false;
+        }
+    }
+};
+export const signedKeyPair = (identityKeyPair, keyId) => {
+    const preKey = Curve.generateKeyPair();
+    const pubKey = generateSignalPubKey(preKey.public);
+    const signature = Curve.sign(identityKeyPair.private, pubKey);
+    return { keyPair: preKey, signature, keyId };
+};
+/**
+ * Pure-JS, dependency-free fallback for `Curve` (see curve25519-js.js) — same
+ * interface, verified bit-for-bit interoperable with the `libsignal`-backed
+ * `Curve` above (cross-checked: a shared key computed one side with `Curve`
+ * and the other with `CurveJS` matches). Useful if `libsignal` (currently a
+ * `github:` dependency — see package.json / vendor-libsignal.sh) fails to
+ * install or load in your environment; not used by default anywhere in this
+ * library. See README.md → "Pure-JS Curve25519 fallback" to opt in.
+ */
+export const CurveJS = {
+    generateKeyPair: () => {
+        const { private: privKey, public: pubKey } = generateKeyPairJS();
+        return { private: Buffer.from(privKey), public: Buffer.from(pubKey) };
+    },
+    sharedKey: (privateKey, publicKey) => Buffer.from(sharedKeyJS(privateKey, publicKey)),
+    sign: (privateKey, buf) => signJS(privateKey, buf),
+    verify: (pubKey, message, signature) => verifyJS(pubKey, message, signature)
+};
+const GCM_TAG_LENGTH = 128 >> 3;
+/**
+ * encrypt AES 256 GCM;
+ * where the tag tag is suffixed to the ciphertext
+ * */
+export function aesEncryptGCM(plaintext, key, iv, additionalData) {
+    const cipher = createCipheriv('aes-256-gcm', key, iv);
+    cipher.setAAD(additionalData);
+    return Buffer.concat([cipher.update(plaintext), cipher.final(), cipher.getAuthTag()]);
+}
+/**
+ * decrypt AES 256 GCM;
+ * where the auth tag is suffixed to the ciphertext
+ * */
+export function aesDecryptGCM(ciphertext, key, iv, additionalData) {
+    const decipher = createDecipheriv('aes-256-gcm', key, iv);
+    // decrypt additional adata
+    const enc = ciphertext.slice(0, ciphertext.length - GCM_TAG_LENGTH);
+    const tag = ciphertext.slice(ciphertext.length - GCM_TAG_LENGTH);
+    // set additional data
+    decipher.setAAD(additionalData);
+    decipher.setAuthTag(tag);
+    return Buffer.concat([decipher.update(enc), decipher.final()]);
+}
+export function aesEncryptCTR(plaintext, key, iv) {
+    const cipher = createCipheriv('aes-256-ctr', key, iv);
+    return Buffer.concat([cipher.update(plaintext), cipher.final()]);
+}
+export function aesDecryptCTR(ciphertext, key, iv) {
+    const decipher = createDecipheriv('aes-256-ctr', key, iv);
+    return Buffer.concat([decipher.update(ciphertext), decipher.final()]);
+}
+/** decrypt AES 256 CBC; where the IV is prefixed to the buffer */
+export function aesDecrypt(buffer, key) {
+    return aesDecryptWithIV(buffer.subarray(16), key, buffer.subarray(0, 16));
+}
+/** decrypt AES 256 CBC */
+export function aesDecryptWithIV(buffer, key, IV) {
+    const aes = createDecipheriv('aes-256-cbc', key, IV);
+    return Buffer.concat([aes.update(buffer), aes.final()]);
+}
+// encrypt AES 256 CBC; where a random IV is prefixed to the buffer
+export function aesEncrypt(buffer, key) {
+    const IV = randomBytes(16);
+    const aes = createCipheriv('aes-256-cbc', key, IV);
+    return Buffer.concat([IV, aes.update(buffer), aes.final()]); // prefix IV to the buffer
+}
+// encrypt AES 256 CBC with a given IV
+export function aesEncrypWithIV(buffer, key, IV) {
+    const aes = createCipheriv('aes-256-cbc', key, IV);
+    return Buffer.concat([aes.update(buffer), aes.final()]); // prefix IV to the buffer
+}
+// sign HMAC using SHA 256
+export function hmacSign(buffer, key, variant = 'sha256') {
+    return createHmac(variant, key).update(buffer).digest();
+}
+export function sha256(buffer) {
+    return createHash('sha256').update(buffer).digest();
+}
+export async function derivePairingCodeKey(pairingCode, salt) {
+    // Convert inputs to formats Web Crypto API can work with
+    const encoder = new TextEncoder();
+    const pairingCodeBuffer = encoder.encode(pairingCode);
+    const saltBuffer = new Uint8Array(salt instanceof Uint8Array ? salt : new Uint8Array(salt));
+    // Import the pairing code as key material
+    const keyMaterial = await subtle.importKey('raw', pairingCodeBuffer, { name: 'PBKDF2' }, false, [
+        'deriveBits'
+    ]);
+    // Derive bits using PBKDF2 with the same parameters
+    // 2 << 16 = 131,072 iterations
+    const derivedBits = await subtle.deriveBits({
+        name: 'PBKDF2',
+        salt: saltBuffer,
+        iterations: 2 << 16,
+        hash: 'SHA-256'
+    }, keyMaterial, 32 * 8 // 32 bytes * 8 = 256 bits
+    );
+    return Buffer.from(derivedBits);
+}
+//# sourceMappingURL=crypto.js.map

package/lib/Utils/curve25519-js.js

@@ -0,0 +1,262 @@
+/**
+ * lib/Utils/curve25519-js.js — pure-JavaScript Curve25519 key exchange +
+ * XEdDSA-style signing, with zero external/native/git dependencies.
+ *
+ * Why this exists: the primary `Curve` implementation in crypto.js depends
+ * on the `libsignal` package, which is currently a `github:` dependency
+ * (see package.json and vendor-libsignal.sh) — meaning it needs `git` to
+ * install and, once installed, relies on that package's own native/JS
+ * curve implementation. This file is a self-contained fallback that only
+ * needs Node's built-in `crypto` module, so it keeps working even in
+ * environments where `libsignal` fails to install or load.
+ *
+ * `generateKeyPairJS`/`sharedKeyJS` delegate to Node's own built-in,
+ * standard X25519 support (`crypto.generateKeyPairSync('x25519')` /
+ * `crypto.diffieHellman`) — not custom math, low risk. `signJS`/`verifyJS`
+ * implement the XEdDSA scheme (sign/verify with a Curve25519 key, the same
+ * scheme Signal/WhatsApp use for signed prekeys) using standard Edwards
+ * curve arithmetic — publicly documented, not something invented here.
+ *
+ * This is NOT wired in as the default — see crypto.js's `CurveJS` export
+ * and README.md → "Pure-JS Curve25519 fallback" for how to opt into it.
+ * Verified via round-trip tests (sign→verify, and ECDH agreement matching
+ * between two independently generated keypairs) in the test suite.
+ */
+import crypto from 'crypto';
+
+const P = 2n ** 255n - 19n;
+const L = 2n ** 252n + 27742317777372353535851937790883648493n;
+
+function mod(a, m = P) {
+    const r = a % m;
+    return r >= 0n ? r : r + m;
+}
+function powmod(b, e, m) {
+    b = mod(b, m);
+    let r = 1n;
+    while (e > 0n) {
+        if (e & 1n)
+            r = mod(r * b, m);
+        b = mod(b * b, m);
+        e >>= 1n;
+    }
+    return r;
+}
+function invert(a, m = P) {
+    return powmod(a, m - 2n, m);
+}
+const D = mod(-121665n * invert(121666n));
+const I = powmod(2n, (P - 1n) / 4n, P);
+function pointAdd(p1, p2) {
+    const [X1, Y1, Z1, T1] = p1;
+    const [X2, Y2, Z2, T2] = p2;
+    const A = mod((Y1 - X1) * (Y2 - X2));
+    const Bb = mod((Y1 + X1) * (Y2 + X2));
+    const C = mod(T1 * 2n * D * T2);
+    const Dd = mod(Z1 * 2n * Z2);
+    const E = Bb - A;
+    const F = Dd - C;
+    const G = Dd + C;
+    const H = Bb + A;
+    return [mod(E * F), mod(G * H), mod(F * G), mod(E * H)];
+}
+function pointDouble(p) {
+    const [X1, Y1, Z1] = p;
+    const A = mod(X1 * X1);
+    const Bb = mod(Y1 * Y1);
+    const C = mod(2n * Z1 * Z1);
+    const H = A + Bb;
+    const E = H - mod((X1 + Y1) * (X1 + Y1));
+    const G = A - Bb;
+    const F = C + G;
+    return [mod(E * F), mod(G * H), mod(F * G), mod(E * H)];
+}
+function scalarMul(s, p) {
+    let result = [0n, 1n, 1n, 0n];
+    let addend = p;
+    s = mod(s, L * 8n);
+    if (s < 0n)
+        s += L * 8n;
+    while (s > 0n) {
+        if (s & 1n)
+            result = pointAdd(result, addend);
+        addend = pointDouble(addend);
+        s >>= 1n;
+    }
+    return result;
+}
+function negatePoint(p) {
+    const [X, Y, Z, T] = p;
+    return [mod(-X), Y, Z, mod(-T)];
+}
+function recoverX(y, sign) {
+    const y2 = y * y;
+    const u = mod(y2 - 1n);
+    const v = mod(D * y2 + 1n);
+    let x = mod(u * invert(v));
+    x = powmod(x, (P + 3n) / 8n, P);
+    if (mod(x * x - u * invert(v)) !== 0n) {
+        x = mod(x * I);
+    }
+    if (mod(x * x - u * invert(v)) !== 0n) {
+        throw new Error('invalid Edwards point (not on curve)');
+    }
+    if ((x & 1n) !== BigInt(sign)) {
+        x = P - x;
+    }
+    return x;
+}
+const By = mod(4n * invert(5n));
+const Bx = recoverX(By, 0n);
+const BASE = [mod(Bx), mod(By), 1n, mod(mod(Bx) * mod(By))];
+function bigIntToBytesLE(n, len) {
+    const out = Buffer.alloc(len);
+    for (let i = 0; i < len; i++) {
+        out[i] = Number(n & 0xffn);
+        n >>= 8n;
+    }
+    return out;
+}
+function bytesToBigIntLE(buf) {
+    let n = 0n;
+    for (let i = buf.length - 1; i >= 0; i--) {
+        n = (n << 8n) | BigInt(buf[i]);
+    }
+    return n;
+}
+function encodePoint(p) {
+    const [X, Y, Z] = p;
+    const zinv = invert(Z);
+    const x = mod(X * zinv);
+    const y = mod(Y * zinv);
+    const bytes = bigIntToBytesLE(y, 32);
+    if (x & 1n)
+        bytes[31] |= 0x80;
+    return bytes;
+}
+function decodePoint(buf) {
+    const sign = buf[31] & 0x80 ? 1 : 0;
+    const y = bytesToBigIntLE(buf) & ((1n << 255n) - 1n);
+    const x = recoverX(y, BigInt(sign));
+    return [x, y, 1n, mod(x * y)];
+}
+function sha512(...bufs) {
+    const h = crypto.createHash('sha512');
+    for (const b of bufs)
+        h.update(b);
+    return h.digest();
+}
+function hashI(i, ...bufs) {
+    const padding = Buffer.alloc(32, 0xff);
+    padding[0] = 0xff - i;
+    const h = crypto.createHash('sha512');
+    h.update(padding);
+    for (const b of bufs)
+        h.update(b);
+    return h.digest();
+}
+function signBit(pointBytes) {
+    return pointBytes[31] & 0x80 ? 1 : 0;
+}
+function montgomeryUToEdwardsY(uBuf) {
+    const u = mod(bytesToBigIntLE(uBuf), P);
+    return mod((u - 1n) * invert(mod(u + 1n, P)), P);
+}
+function encodeYWithSign(y, sign) {
+    const yBytes = bigIntToBytesLE(y, 32);
+    if (sign)
+        yBytes[31] |= 0x80;
+    return encodePoint(decodePoint(yBytes));
+}
+function stripKeyTypePrefix(buf) {
+    return buf.length === 33 ? buf.subarray(1) : buf;
+}
+function calculateKeyPair(kBuf) {
+    const k = bytesToBigIntLE(kBuf);
+    const rawPoint = scalarMul(k, BASE);
+    const rawEnc = encodePoint(rawPoint);
+    let a;
+    let A;
+    if (signBit(rawEnc) === 1) {
+        a = mod(-k, L);
+        A = encodePoint(negatePoint(rawPoint));
+    }
+    else {
+        a = mod(k, L);
+        A = rawEnc;
+    }
+    return { a, A };
+}
+
+export function signJS(privateKey, message) {
+    const Z = crypto.randomBytes(64);
+    const { a, A } = calculateKeyPair(privateKey);
+    const aBytes = bigIntToBytesLE(a, 32);
+    const r = mod(bytesToBigIntLE(hashI(1, aBytes, message, Z)), L);
+    const R = scalarMul(r, BASE);
+    const REnc = encodePoint(R);
+    const h = mod(bytesToBigIntLE(sha512(REnc, A, message)), L);
+    const s = mod(r + h * a, L);
+    return Buffer.concat([REnc, bigIntToBytesLE(s, 32)]);
+}
+
+export function verifyJS(pubKey, message, signature) {
+    try {
+        const u = stripKeyTypePrefix(pubKey);
+        if (u.length !== 32 || signature.length !== 64)
+            return false;
+        const REnc = signature.subarray(0, 32);
+        const s = bytesToBigIntLE(signature.subarray(32, 64));
+        if (s >= L)
+            return false;
+        const A = encodeYWithSign(montgomeryUToEdwardsY(u), 0);
+        const APoint = decodePoint(A);
+        const h = mod(bytesToBigIntLE(sha512(REnc, A, message)), L);
+        const sB = scalarMul(s, BASE);
+        const hA = scalarMul(h, APoint);
+        const RCheck = pointAdd(sB, negatePoint(hA));
+        return encodePoint(RCheck).equals(REnc);
+    }
+    catch {
+        return false;
+    }
+}
+
+function b64url(buf) {
+    return buf.toString('base64').replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+}
+function fromB64url(str) {
+    str = str.replace(/-/g, '+').replace(/_/g, '/');
+    while (str.length % 4)
+        str += '=';
+    return Buffer.from(str, 'base64');
+}
+
+export function generateKeyPairJS() {
+    const { publicKey, privateKey } = crypto.generateKeyPairSync('x25519');
+    const priv = fromB64url(privateKey.export({ format: 'jwk' }).d);
+    const pub = fromB64url(publicKey.export({ format: 'jwk' }).x);
+    return { private: priv, public: pub };
+}
+
+function generateKeyPairJS_publicFrom(privateKeyRaw) {
+    const k = bytesToBigIntLE(privateKeyRaw);
+    const point = scalarMul(k, BASE);
+    const [, Y, Z] = point;
+    const y = mod(Y * invert(Z));
+    const u = mod((1n + y) * invert(mod(1n - y)));
+    return bigIntToBytesLE(u, 32);
+}
+
+export function sharedKeyJS(privateKey, publicKey) {
+    const pub = stripKeyTypePrefix(publicKey);
+    const privKey = crypto.createPrivateKey({
+        key: { kty: 'OKP', crv: 'X25519', d: b64url(privateKey), x: b64url(generateKeyPairJS_publicFrom(privateKey)) },
+        format: 'jwk'
+    });
+    const pubKey = crypto.createPublicKey({
+        key: { kty: 'OKP', crv: 'X25519', x: b64url(pub) },
+        format: 'jwk'
+    });
+    return crypto.diffieHellman({ privateKey: privKey, publicKey: pubKey });
+}