@mdbase-dev/connect-protocol 0.1.0-beta.21

package/dist/index.js

@@ -0,0 +1,57 @@
+export const CONTROL_PROTOCOL_VERSION = 1;
+export const ENCRYPTED_RELAY_PROTOCOL_VERSION = 1;
+export const LOOPBACK_PROTOCOL_VERSION = 1;
+export const DEFAULT_LOOPBACK_PORT = 28_485;
+export const RELAY_ENCRYPTION_SUITE = "P256-HKDF-SHA256-AES256GCM";
+export const SYNC_PROTOCOL_VERSION = 1;
+export const CONTRACT_SETUP_CAPABILITY = "contract-setup-v1";
+export const RELAY_REQUIRED_CAPABILITIES = [
+    "authorization-activation",
+    "encrypted-relay",
+    "policy-ack"
+];
+export const RELAY_CAPABILITIES = [
+    ...RELAY_REQUIRED_CAPABILITIES,
+    CONTRACT_SETUP_CAPABILITY
+];
+export const AUTHORITY_PROOF_VERSION = 1;
+export const AUTHORITY_PROOF_ALGORITHM = "P256-SHA256";
+export const AUTHORITY_PROOF_DOMAIN = "mdbase-authority-request-proof-v1";
+export const AUTHORITY_PROOF_HEADERS = {
+    version: "x-mdbase-proof-version",
+    timestamp: "x-mdbase-proof-timestamp",
+    nonce: "x-mdbase-proof-nonce",
+    signature: "x-mdbase-proof-signature"
+};
+/**
+ * Validate a native OAuth callback against the publisher of its web manifest.
+ * Reverse-domain private-use schemes keep native app identity tied to the
+ * manifest origin; PKCE remains mandatory at the authorization boundary.
+ */
+export function isNativeRedirectUri(url, publisherHostname) {
+    const scheme = url.protocol.slice(0, -1);
+    const publisherPrefix = publisherHostname
+        ?.toLowerCase()
+        .split(".")
+        .reverse()
+        .join(".");
+    return scheme.includes(".")
+        && /^[a-z][a-z0-9+.-]*$/.test(scheme)
+        && !["http", "https", "file", "javascript", "data"].includes(scheme)
+        && (!publisherPrefix
+            || scheme === publisherPrefix
+            || scheme.startsWith(`${publisherPrefix}.`))
+        && url.username === ""
+        && url.password === ""
+        && url.hostname.length > 0
+        && url.hash === "";
+}
+export const CONNECT_SCHEMA_IDS = {
+    appManifest: "https://mdbase.dev/connect/schemas/mdbase-app.v1.json",
+    notificationWebhook: "https://mdbase.dev/connect/schemas/notification-webhook.v1.json",
+    dataContract: "https://mdbase.dev/schemas/v0.3/data-contract.schema.json",
+    eventActionInterop: "https://mdbase.dev/schemas/interop/v0.1/profile.schema.json",
+    protocol: "https://mdbase.dev/connect/schemas/connect-protocol.v1.json",
+    encryptedRelay: "https://mdbase.dev/connect/schemas/encrypted-relay.v1.json",
+    sync: "https://mdbase.dev/connect/schemas/sync.v1.json"
+};

package/package.json

@@ -0,0 +1,35 @@
+{
+  "name": "@mdbase-dev/connect-protocol",
+  "version": "0.1.0-beta.21",
+  "private": false,
+  "type": "module",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/mdbase-dev/mdbase-connect.git",
+    "directory": "packages/protocol"
+  },
+  "homepage": "https://mdbase.dev",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./schemas/*": "./schemas/*"
+  },
+  "files": [
+    "dist",
+    "schemas"
+  ],
+  "devDependencies": {
+    "ajv": "^8.20.0",
+    "ajv-formats": "^3.0.1",
+    "typescript": "^7.0.2"
+  },
+  "scripts": {
+    "build": "node -e \"require('node:fs').rmSync('dist',{recursive:true,force:true})\" && tsc -p tsconfig.json",
+    "test": "node --test test/*.test.mjs",
+    "typecheck": "tsc -p tsconfig.json --noEmit"
+  }
+}

package/schemas/catalog.json

@@ -0,0 +1,12 @@
+{
+  "manifest_version": 1,
+  "schemas": {
+    "app_manifest": "./mdbase-app.schema.json",
+    "data_contract": "./data-contract.schema.json",
+    "event_action_interop": "./interop/v0.1/profile.schema.json",
+    "connect_protocol": "./connect-protocol.v1.schema.json",
+    "encrypted_relay": "./encrypted-relay.v1.schema.json",
+    "notification_webhook": "./notification-webhook.v1.schema.json",
+    "sync": "./sync.v1.schema.json"
+  }
+}