@mdbase-dev/sdk 0.0.0-stage → 0.1.0-beta.149

package/dist/transport/noise-session.d.ts

@@ -0,0 +1,88 @@
+/**
+ * A client session over Noise IK (`replica-client-api.md` §12.2, §12.3):
+ *
+ * - message 1 carries the `hello` request frame, message 2 the response;
+ * - afterwards, the plaintext of the transport messages is one byte stream of
+ *   `u32be(length) ‖ frame` records, cut into messages of at most 65,535 bytes;
+ * - sessions end after 24 h or 2^30 messages, and the client reconnects.
+ *
+ * Carriers move whole Noise messages: one WebSocket message each (relay, hosted), or
+ * `u16be(length) ‖ message` on a byte stream (local IPC). See
+ * the SDK client wire and Noise framing contract.
+ */
+import { CborValue } from "../cbor.js";
+import { MdbaseError } from "../errors.js";
+import { KeyPair, NoiseTransport, StaticKey } from "./noise.js";
+import { ByteChannel, Connector } from "./port.js";
+/** A message-oriented channel carrying whole Noise messages. */
+export interface MessageCarrier {
+    send(message: Uint8Array): void;
+    onmessage: ((message: Uint8Array) => void) | null;
+    onclose: ((error?: MdbaseError) => void) | null;
+    close(): void;
+}
+/** Session lifetime (§12.3). */
+export declare const SESSION_LIFETIME_MS: number;
+export interface NoiseTarget {
+    /** Opens a carrier to the target (a new connection each time). */
+    openCarrier(signal?: AbortSignal): Promise<MessageCarrier>;
+    /** The Noise prologue binding collection, grant and target (`clientPrologue`). */
+    prologue: Uint8Array;
+    /** The responder's static public key (the replica's enrolled `noise_pk`). */
+    remoteStatic: Uint8Array;
+    /**
+     * Sent in clear as the first carrier message, before Noise message 1: the 64-byte
+     * prologue on local IPC and the localhost link, so one endpoint can serve many
+     * collections. Tampering only fails the handshake.
+     */
+    preamble?: Uint8Array;
+    /** The target's device ID, as the route named it (head-witness bookkeeping). */
+    device?: string;
+}
+export interface NoiseConnectorOptions {
+    /** This client's static key: the grant's `client_pk` (or the host app's key). */
+    staticKey: KeyPair | StaticKey;
+    /** Where to connect. Called for every (re)connect, so routing can change. */
+    target: (signal?: AbortSignal) => Promise<NoiseTarget>;
+    description: string;
+    /** Override the 24 h lifetime (tests). */
+    lifetimeMs?: number;
+    /**
+     * The payload of Noise message 1, from the encoded-as-value `hello` request frame.
+     * Default: the encoded frame itself (§12.3). The localhost link (§12.4) sends
+     * `{0: token, 1: hello-params}` instead.
+     */
+    firstPayload?: (hello: CborValue) => Uint8Array;
+}
+/** A byte channel over an established Noise transport. */
+export declare function noiseChannel(c: MessageCarrier, t: NoiseTransport, lifetimeMs?: number, backlog?: Uint8Array[]): ByteChannel;
+/** A {@link Connector} that opens Noise IK sessions to a replica. */
+export declare function noiseConnector(o: NoiseConnectorOptions): Connector;
+/** The subset of the WebSocket API the SDK uses (browser `WebSocket`, Node 22's, `ws`). */
+export interface WebSocketLike {
+    binaryType: string;
+    readyState: number;
+    send(data: Uint8Array | string): void;
+    close(code?: number, reason?: string): void;
+    onopen: ((ev: unknown) => void) | null;
+    onmessage: ((ev: {
+        data: unknown;
+    }) => void) | null;
+    onclose: ((ev: {
+        code?: number;
+        reason?: string;
+    }) => void) | null;
+    onerror: ((ev: unknown) => void) | null;
+}
+export type WebSocketFactory = (url: string) => WebSocketLike;
+/** Open a WebSocket carrying one Noise message per binary message. */
+export declare function webSocketCarrier(url: string, factory?: WebSocketFactory, signal?: AbortSignal): Promise<MessageCarrier>;
+/** A duplex byte stream (a Node socket, a named pipe). */
+export interface ByteStream {
+    write(b: Uint8Array): void;
+    ondata: ((b: Uint8Array) => void) | null;
+    onclose: ((e?: Error) => void) | null;
+    close(): void;
+}
+/** Carry Noise messages on a byte stream as `u16be(length) ‖ message`. */
+export declare function streamCarrier(s: ByteStream): MessageCarrier;

package/dist/transport/noise-session.js

@@ -0,0 +1,264 @@
+/**
+ * A client session over Noise IK (`replica-client-api.md` §12.2, §12.3):
+ *
+ * - message 1 carries the `hello` request frame, message 2 the response;
+ * - afterwards, the plaintext of the transport messages is one byte stream of
+ *   `u32be(length) ‖ frame` records, cut into messages of at most 65,535 bytes;
+ * - sessions end after 24 h or 2^30 messages, and the client reconnects.
+ *
+ * Carriers move whole Noise messages: one WebSocket message each (relay, hosted), or
+ * `u16be(length) ‖ message` on a byte stream (local IPC). See
+ * the SDK client wire and Noise framing contract.
+ */
+import { decode, encode } from "../cbor.js";
+import { isMdbaseError, mdbaseError } from "../errors.js";
+import { IkInitiator, MAX_PLAINTEXT, MAX_SESSION_MESSAGES, NoiseError } from "./noise.js";
+import { framedPort } from "./port.js";
+/** Session lifetime (§12.3). */
+export const SESSION_LIFETIME_MS = 24 * 60 * 60 * 1000;
+/**
+ * The next message on `c`. Messages that arrive after it, before the transport is set
+ * up, are kept in `backlog` (a replica may push right after the handshake).
+ */
+function nextMessage(c, backlog, signal) {
+    return new Promise((resolve, reject) => {
+        const onAbort = () => reject(mdbaseError("cancelled", "connect aborted"));
+        signal?.addEventListener("abort", onAbort, { once: true });
+        c.onmessage = (m) => {
+            signal?.removeEventListener("abort", onAbort);
+            c.onmessage = (later) => void backlog.push(later);
+            resolve(m);
+        };
+        c.onclose = (e) => {
+            signal?.removeEventListener("abort", onAbort);
+            reject(e ?? mdbaseError("unavailable", "connection closed during the handshake"));
+        };
+    });
+}
+/** A byte channel over an established Noise transport. */
+export function noiseChannel(c, t, lifetimeMs = SESSION_LIFETIME_MS, backlog = []) {
+    const empty = new Uint8Array(0);
+    let closed = false;
+    const timer = setTimeout(() => fail(), lifetimeMs);
+    timer.unref?.();
+    const ch = {
+        ondata: null,
+        onclose: null,
+        write(bytes) {
+            if (closed)
+                throw mdbaseError("unavailable", "connection closed");
+            for (let off = 0; off < bytes.length; off += MAX_PLAINTEXT) {
+                if (t.send.count >= MAX_SESSION_MESSAGES - 1) {
+                    fail();
+                    throw mdbaseError("unavailable", "session message limit reached; reconnecting");
+                }
+                c.send(t.send.encrypt(empty, bytes.subarray(off, off + MAX_PLAINTEXT)));
+            }
+        },
+        close() {
+            if (closed)
+                return;
+            closed = true;
+            clearTimeout(timer);
+            c.close();
+        },
+    };
+    const onMessage = (m) => {
+        if (closed)
+            return;
+        let p;
+        try {
+            p = t.recv.decrypt(empty, m);
+        }
+        catch {
+            fail(mdbaseError("unavailable", "transport message failed authentication", "noise"));
+            return;
+        }
+        ch.ondata?.(p);
+    };
+    c.onmessage = onMessage;
+    c.onclose = (e) => fail(e);
+    if (backlog.length) {
+        // Deliver what arrived during setup once the caller has wired `ondata`.
+        const early = backlog.splice(0);
+        queueMicrotask(() => early.forEach(onMessage));
+    }
+    function fail(e) {
+        if (closed)
+            return;
+        closed = true;
+        clearTimeout(timer);
+        c.close();
+        ch.onclose?.(e);
+    }
+    return ch;
+}
+/** A {@link Connector} that opens Noise IK sessions to a replica. */
+export function noiseConnector(o) {
+    return {
+        description: o.description,
+        async open(hello, signal) {
+            const aborted = () => mdbaseError("cancelled", "connect aborted");
+            if (signal?.aborted)
+                throw aborted();
+            const target = await o.target(signal);
+            if (signal?.aborted)
+                throw aborted();
+            const carrier = await target.openCarrier(signal);
+            if (signal?.aborted) {
+                carrier.close();
+                throw aborted();
+            }
+            try {
+                const hs = new IkInitiator({
+                    prologue: target.prologue,
+                    staticKey: o.staticKey,
+                    remoteStatic: target.remoteStatic,
+                });
+                const backlog = [];
+                const reply = nextMessage(carrier, backlog, signal);
+                // Observe a close/abort while asynchronous DH is still in flight.
+                reply.catch(() => { });
+                if (target.preamble)
+                    carrier.send(target.preamble);
+                const m1 = await hs.writeMessage1(o.firstPayload ? o.firstPayload(hello) : encode(hello));
+                if (signal?.aborted)
+                    throw aborted();
+                carrier.send(m1);
+                const { payload, transport } = await hs.readMessage2(await reply);
+                const helloResponse = decode(payload);
+                const port = framedPort(noiseChannel(carrier, transport, o.lifetimeMs, backlog));
+                return { port, helloResponse, ...(target.device ? { device: target.device } : {}) };
+            }
+            catch (e) {
+                carrier.close();
+                if (isMdbaseError(e))
+                    throw e;
+                if (e instanceof NoiseError) {
+                    // A responder that doesn't hold the expected key, or a tampered handshake.
+                    throw mdbaseError("unauthenticated", `handshake failed: ${e.message}`, "noise");
+                }
+                throw mdbaseError("unavailable", `handshake failed: ${String(e)}`);
+            }
+        },
+    };
+}
+const defaultWs = (url) => {
+    const Ws = globalThis.WebSocket;
+    if (!Ws)
+        throw mdbaseError("unavailable", "no WebSocket implementation; pass webSocket");
+    return new Ws(url);
+};
+/** Open a WebSocket carrying one Noise message per binary message. */
+export function webSocketCarrier(url, factory = defaultWs, signal) {
+    return new Promise((resolve, reject) => {
+        let ws;
+        try {
+            ws = factory(url);
+        }
+        catch (e) {
+            reject(isMdbaseError(e) ? e : mdbaseError("unavailable", `cannot open ${url}: ${String(e)}`));
+            return;
+        }
+        ws.binaryType = "arraybuffer";
+        let open = false;
+        const carrier = {
+            onmessage: null,
+            onclose: null,
+            send(m) {
+                ws.send(m);
+            },
+            close() {
+                try {
+                    ws.close(1000);
+                }
+                catch {
+                    // already closed
+                }
+            },
+        };
+        const onAbort = () => {
+            ws.close();
+            reject(mdbaseError("cancelled", "connect aborted"));
+        };
+        signal?.addEventListener("abort", onAbort, { once: true });
+        ws.onopen = () => {
+            open = true;
+            signal?.removeEventListener("abort", onAbort);
+            resolve(carrier);
+        };
+        ws.onmessage = (ev) => {
+            const d = ev.data;
+            if (d instanceof ArrayBuffer)
+                carrier.onmessage?.(new Uint8Array(d));
+            else if (ArrayBuffer.isView(d))
+                carrier.onmessage?.(new Uint8Array(d.buffer, d.byteOffset, d.byteLength));
+            // Text messages are not part of the protocol: ignore.
+        };
+        ws.onerror = () => { };
+        ws.onclose = (ev) => {
+            const err = closeError(ev.code, ev.reason);
+            if (!open) {
+                signal?.removeEventListener("abort", onAbort);
+                reject(err ?? mdbaseError("unavailable", `cannot connect to ${url}`));
+            }
+            else
+                carrier.onclose?.(err);
+        };
+    });
+}
+/**
+ * Close codes the relay uses to say why (control defines them; see the interface note).
+ * 4404: no device online for a private collection. 4401: not authorized. 4429: rate limited.
+ */
+function closeError(code, reason) {
+    switch (code) {
+        case 4404:
+            return mdbaseError("unavailable", reason || "no device of this collection is online", "no_device_online");
+        case 4401:
+            return mdbaseError("unauthenticated", reason || "relay refused the session");
+        case 4403:
+            return mdbaseError("forbidden", reason || "relay refused the session");
+        case 4429:
+            return mdbaseError("rate_limited", reason || "rate limited");
+        default:
+            return undefined;
+    }
+}
+/** Carry Noise messages on a byte stream as `u16be(length) ‖ message`. */
+export function streamCarrier(s) {
+    let buf = new Uint8Array(0);
+    const carrier = {
+        onmessage: null,
+        onclose: null,
+        send(m) {
+            if (m.length > 0xffff)
+                throw mdbaseError("too_large", "Noise message over 65535 bytes");
+            const out = new Uint8Array(2 + m.length);
+            out[0] = m.length >> 8;
+            out[1] = m.length & 0xff;
+            out.set(m, 2);
+            s.write(out);
+        },
+        close() {
+            s.close();
+        },
+    };
+    s.ondata = (chunk) => {
+        const b = new Uint8Array(buf.length + chunk.length);
+        b.set(buf);
+        b.set(chunk, buf.length);
+        let off = 0;
+        while (b.length - off >= 2) {
+            const len = (b[off] << 8) | b[off + 1];
+            if (b.length - off - 2 < len)
+                break;
+            carrier.onmessage?.(b.slice(off + 2, off + 2 + len));
+            off += 2 + len;
+        }
+        buf = b.slice(off);
+    };
+    s.onclose = (e) => carrier.onclose?.(e ? mdbaseError("unavailable", e.message) : undefined);
+    return carrier;
+}
+//# sourceMappingURL=noise-session.js.map

package/dist/transport/noise-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"noise-session.js","sourceRoot":"","sources":["../../src/transport/noise-session.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAa,MAAM,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,WAAW,EAAe,MAAM,cAAc,CAAC;AACvE,OAAO,EAAE,WAAW,EAAW,aAAa,EAAE,oBAAoB,EAAE,UAAU,EAA6B,MAAM,YAAY,CAAC;AAC9H,OAAO,EAA0B,UAAU,EAAc,MAAM,WAAW,CAAC;AAU3E,gCAAgC;AAChC,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAmCvD;;;GAGG;AACH,SAAS,WAAW,CAAC,CAAiB,EAAE,OAAqB,EAAE,MAAoB;IACjF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC;QAC1E,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,EAAE,EAAE;YAClB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9C,CAAC,CAAC,SAAS,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAClD,OAAO,CAAC,CAAC,CAAC,CAAC;QACb,CAAC,CAAC;QACF,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,EAAE;YAChB,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9C,MAAM,CAAC,CAAC,IAAI,WAAW,CAAC,aAAa,EAAE,wCAAwC,CAAC,CAAC,CAAC;QACpF,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,YAAY,CAC1B,CAAiB,EACjB,CAAiB,EACjB,UAAU,GAAG,mBAAmB,EAChC,UAAwB,EAAE;IAE1B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,UAAU,CAAC,CAAC;IAClD,KAAgC,CAAC,KAAK,EAAE,EAAE,CAAC;IAC5C,MAAM,EAAE,GAAgB;QACtB,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,IAAI;QACb,KAAK,CAAC,KAAK;YACT,IAAI,MAAM;gBAAE,MAAM,WAAW,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC;YAClE,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE,GAAG,IAAI,aAAa,EAAE,CAAC;gBAC3D,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,oBAAoB,GAAG,CAAC,EAAE,CAAC;oBAC7C,IAAI,EAAE,CAAC;oBACP,MAAM,WAAW,CAAC,aAAa,EAAE,6CAA6C,CAAC,CAAC;gBAClF,CAAC;gBACD,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QACD,KAAK;YACH,IAAI,MAAM;gBAAE,OAAO;YACnB,MAAM,GAAG,IAAI,CAAC;YACd,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,CAAC,CAAC,KAAK,EAAE,CAAC;QACZ,CAAC;KACF,CAAC;IACF,MAAM,SAAS,GAAG,CAAC,CAAa,EAAE,EAAE;QAClC,IAAI,MAAM;YAAE,OAAO;QACnB,IAAI,CAAa,CAAC;QAClB,IAAI,CAAC;YACH,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,WAAW,CAAC,aAAa,EAAE,yCAAyC,EAAE,OAAO,CAAC,CAAC,CAAC;YACrF,OAAO;QACT,CAAC;QACD,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IACjB,CAAC,CAAC;IACF,CAAC,CAAC,SAAS,GAAG,SAAS,CAAC;IACxB,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC3B,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,wEAAwE;QACxE,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAChC,cAAc,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IACjD,CAAC;IACD,SAAS,IAAI,CAAC,CAAe;QAC3B,IAAI,MAAM;YAAE,OAAO;QACnB,MAAM,GAAG,IAAI,CAAC;QACd,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC,CAAC,KAAK,EAAE,CAAC;QACV,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,cAAc,CAAC,CAAwB;IACrD,OAAO;QACL,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,KAAK,CAAC,IAAI,CAAC,KAAgB,EAAE,MAAoB;YAC/C,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC;YAClE,IAAI,MAAM,EAAE,OAAO;gBAAE,MAAM,OAAO,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACtC,IAAI,MAAM,EAAE,OAAO;gBAAE,MAAM,OAAO,EAAE,CAAC;YACrC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YACjD,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;gBACpB,OAAO,CAAC,KAAK,EAAE,CAAC;gBAChB,MAAM,OAAO,EAAE,CAAC;YAClB,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,IAAI,WAAW,CAAC;oBACzB,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,SAAS,EAAE,CAAC,CAAC,SAAS;oBACtB,YAAY,EAAE,MAAM,CAAC,YAAY;iBAClC,CAAC,CAAC;gBACH,MAAM,OAAO,GAAiB,EAAE,CAAC;gBACjC,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;gBACpD,kEAAkE;gBAClE,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBACtB,IAAI,MAAM,CAAC,QAAQ;oBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACnD,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC1F,IAAI,MAAM,EAAE,OAAO;oBAAE,MAAM,OAAO,EAAE,CAAC;gBACrC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACjB,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC;gBAClE,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;gBACtC,MAAM,IAAI,GAAG,UAAU,CAAC,YAAY,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;gBACjF,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACtF,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,CAAC,KAAK,EAAE,CAAC;gBAChB,IAAI,aAAa,CAAC,CAAC,CAAC;oBAAE,MAAM,CAAC,CAAC;gBAC9B,IAAI,CAAC,YAAY,UAAU,EAAE,CAAC;oBAC5B,2EAA2E;oBAC3E,MAAM,WAAW,CAAC,iBAAiB,EAAE,qBAAqB,CAAC,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;gBAClF,CAAC;gBACD,MAAM,WAAW,CAAC,aAAa,EAAE,qBAAqB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAkBD,MAAM,SAAS,GAAqB,CAAC,GAAG,EAAE,EAAE;IAC1C,MAAM,EAAE,GAAI,UAA+D,CAAC,SAAS,CAAC;IACtF,IAAI,CAAC,EAAE;QAAE,MAAM,WAAW,CAAC,aAAa,EAAE,6CAA6C,CAAC,CAAC;IACzF,OAAO,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC;AACrB,CAAC,CAAC;AAEF,sEAAsE;AACtE,MAAM,UAAU,gBAAgB,CAAC,GAAW,EAAE,UAA4B,SAAS,EAAE,MAAoB;IACvG,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,EAAiB,CAAC;QACtB,IAAI,CAAC;YACH,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,aAAa,EAAE,eAAe,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC9F,OAAO;QACT,CAAC;QACD,EAAE,CAAC,UAAU,GAAG,aAAa,CAAC;QAC9B,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,MAAM,OAAO,GAAmB;YAC9B,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,IAAI;YACb,IAAI,CAAC,CAAC;gBACJ,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACb,CAAC;YACD,KAAK;gBACH,IAAI,CAAC;oBACH,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACjB,CAAC;gBAAC,MAAM,CAAC;oBACP,iBAAiB;gBACnB,CAAC;YACH,CAAC;SACF,CAAC;QACF,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,EAAE,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,WAAW,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC;QACtD,CAAC,CAAC;QACF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,EAAE,CAAC,MAAM,GAAG,GAAG,EAAE;YACf,IAAI,GAAG,IAAI,CAAC;YACZ,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9C,OAAO,CAAC,OAAO,CAAC,CAAC;QACnB,CAAC,CAAC;QACF,EAAE,CAAC,SAAS,GAAG,CAAC,EAAE,EAAE,EAAE;YACpB,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;YAClB,IAAI,CAAC,YAAY,WAAW;gBAAE,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;iBAChE,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;gBAAE,OAAO,CAAC,SAAS,EAAE,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC;YAC1G,sDAAsD;QACxD,CAAC,CAAC;QACF,EAAE,CAAC,OAAO,GAAG,GAAG,EAAE,GAAE,CAAC,CAAC;QACtB,EAAE,CAAC,OAAO,GAAG,CAAC,EAAE,EAAE,EAAE;YAClB,MAAM,GAAG,GAAG,UAAU,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC;YAC3C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC9C,MAAM,CAAC,GAAG,IAAI,WAAW,CAAC,aAAa,EAAE,qBAAqB,GAAG,EAAE,CAAC,CAAC,CAAC;YACxE,CAAC;;gBAAM,OAAO,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,IAAa,EAAE,MAAe;IAChD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,IAAI;YACP,OAAO,WAAW,CAAC,aAAa,EAAE,MAAM,IAAI,wCAAwC,EAAE,kBAAkB,CAAC,CAAC;QAC5G,KAAK,IAAI;YACP,OAAO,WAAW,CAAC,iBAAiB,EAAE,MAAM,IAAI,2BAA2B,CAAC,CAAC;QAC/E,KAAK,IAAI;YACP,OAAO,WAAW,CAAC,WAAW,EAAE,MAAM,IAAI,2BAA2B,CAAC,CAAC;QACzE,KAAK,IAAI;YACP,OAAO,WAAW,CAAC,cAAc,EAAE,MAAM,IAAI,cAAc,CAAC,CAAC;QAC/D;YACE,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAUD,0EAA0E;AAC1E,MAAM,UAAU,aAAa,CAAC,CAAa;IACzC,IAAI,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,OAAO,GAAmB;QAC9B,SAAS,EAAE,IAAI;QACf,OAAO,EAAE,IAAI;QACb,IAAI,CAAC,CAAC;YACJ,IAAI,CAAC,CAAC,MAAM,GAAG,MAAM;gBAAE,MAAM,WAAW,CAAC,WAAW,EAAE,gCAAgC,CAAC,CAAC;YACxF,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;YACzC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;YACvB,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC;YACzB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YACd,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;QACD,KAAK;YACH,CAAC,CAAC,KAAK,EAAE,CAAC;QACZ,CAAC;KACF,CAAC;IACF,CAAC,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,EAAE;QACnB,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;QACpD,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACX,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;QACzB,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,OAAO,CAAC,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,EAAE,CAAC;YAC3B,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAE,CAAC;YACzC,IAAI,CAAC,CAAC,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,GAAG;gBAAE,MAAM;YACpC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC;YACrD,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC;QACjB,CAAC;QACD,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC,CAAC;IACF,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC5F,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/transport/noise.d.ts

@@ -0,0 +1,102 @@
+export declare const PROTOCOL_NAME = "Noise_IK_25519_ChaChaPoly_SHA256";
+/** Noise's maximum message size. */
+export declare const MAX_MESSAGE = 65535;
+/** The most plaintext one transport message can carry. */
+export declare const MAX_PLAINTEXT: number;
+/** Rekeying is not used: sessions end after 2^30 messages (§12.3). */
+export declare const MAX_SESSION_MESSAGES: number;
+export interface KeyPair {
+    secretKey: Uint8Array;
+    publicKey: Uint8Array;
+}
+/**
+ * A static key the SDK can use without seeing the secret: a non-extractable WebCrypto
+ * key implements `dh` with `deriveBits`. A {@link KeyPair} is also accepted.
+ */
+export interface StaticKey {
+    publicKey: Uint8Array;
+    dh(remotePublic: Uint8Array): Uint8Array | Promise<Uint8Array>;
+}
+export declare function staticKeyOf(k: KeyPair | StaticKey): StaticKey;
+export declare function generateKeyPair(): KeyPair;
+export declare function keyPairFromSecret(secretKey: Uint8Array): KeyPair;
+/** Reject all-zero outputs: a low-order or all-zero public key. */
+export declare function checkDh(out: Uint8Array): Uint8Array;
+export declare class NoiseError extends Error {
+    constructor(message: string);
+}
+/** A Noise CipherState. */
+export declare class CipherState {
+    private k;
+    private n;
+    constructor(k?: Uint8Array | null);
+    hasKey(): boolean;
+    get count(): number;
+    encrypt(ad: Uint8Array, plaintext: Uint8Array): Uint8Array;
+    decrypt(ad: Uint8Array, ciphertext: Uint8Array): Uint8Array;
+}
+/** The two transport ciphers after the handshake, and the handshake hash. */
+export interface NoiseTransport {
+    send: CipherState;
+    recv: CipherState;
+    /** The handshake hash: a unique session binding. */
+    handshakeHash: Uint8Array;
+    /** The peer's static public key. */
+    remoteStatic: Uint8Array;
+}
+export interface InitiatorOptions {
+    prologue: Uint8Array;
+    staticKey: KeyPair | StaticKey;
+    remoteStatic: Uint8Array;
+    /** Test hook: a fixed ephemeral key. Production leaves it unset. */
+    ephemeral?: KeyPair;
+}
+/** The initiator (client) side of IK. */
+export declare class IkInitiator {
+    private opts;
+    private ss;
+    private e;
+    private state;
+    constructor(opts: InitiatorOptions);
+    /** `-> e, es, s, ss` with `payload`. */
+    writeMessage1(payload: Uint8Array): Promise<Uint8Array>;
+    /** `<- e, ee, se`; returns the responder's payload and the transport ciphers. */
+    readMessage2(msg: Uint8Array): Promise<{
+        payload: Uint8Array;
+        transport: NoiseTransport;
+    }>;
+}
+export interface ResponderOptions {
+    prologue: Uint8Array;
+    staticKey: KeyPair;
+    ephemeral?: KeyPair;
+}
+/**
+ * The responder (replica) side of IK. The SDK uses it for tests and for apps that
+ * host a replica in the same JS process and accept remote clients.
+ */
+export declare class IkResponder {
+    private opts;
+    private ss;
+    private e;
+    private rs;
+    private re;
+    private state;
+    constructor(opts: ResponderOptions);
+    /** Read `-> e, es, s, ss`; returns the initiator's static key and payload. */
+    readMessage1(msg: Uint8Array): {
+        remoteStatic: Uint8Array;
+        payload: Uint8Array;
+    };
+    /** `<- e, ee, se` with `payload`. */
+    writeMessage2(payload: Uint8Array): {
+        message: Uint8Array;
+        transport: NoiseTransport;
+    };
+}
+/**
+ * The client session prologue: `"mdbase/v1/client" ‖ collection ‖ grant ID ‖ target
+ * device ID`, each ID as 16 raw bytes. A session without a grant (the hosting app)
+ * uses the nil UUID for the grant ID.
+ */
+export declare function clientPrologue(collection: Uint8Array, grant: Uint8Array | null, targetDevice: Uint8Array): Uint8Array;