@meshline/sdk 0.0.0-stage → 0.1.0-alpha.1

package/dist/components/profile.js

@@ -0,0 +1,232 @@
+import { ProtocolError, StateConflictError } from '../errors.js';
+import { validateAccountId } from '../identity/neo.js';
+import { contentReferenceCodec } from '../models/content.js';
+import { deviceCertificateCodec } from '../models/identity.js';
+import { accountProfileCodec, profileInput, profileResolveResultCodec, validateProfile, validateProfileResult } from '../models/profile.js';
+import { canonicalJson } from '../protocol/json.js';
+import { AsyncGate } from '../runtime/async-gate.js';
+import { EventHub } from '../runtime/events.js';
+import { finishSignedRequest, putSignedRequest, readSignedRequest, requestKey } from '../storage/signed-request.js';
+import { updateStore } from '../storage/transaction.js';
+import { RelayError } from '../transport/relay-error.js';
+import { ClientComponent } from './component.js';
+const method = 'profile.publish';
+const profileKey = (account) => ({ collection: 'profiles', key: account });
+const clone = (value) => accountProfileCodec.decode(accountProfileCodec.encode(value));
+const fingerprint = (value) => canonicalJson(value ?? null);
+function copyUpdate(value) {
+    for (const key of Object.keys(value))
+        if (!['nickname', 'bio', 'avatar', 'publicDiscovery'].includes(key))
+            throw new TypeError(`Unknown profile update field ${key}.`);
+    if (value.publicDiscovery !== undefined && typeof value.publicDiscovery !== 'boolean')
+        throw new TypeError('publicDiscovery must be boolean and cannot be deleted.');
+    for (const field of [value.nickname, value.bio])
+        if (field !== undefined && field !== null && typeof field !== 'string')
+            throw new TypeError('Profile text must be a string or null.');
+    return { ...value, ...(value.avatar == null ? {} : { avatar: contentReferenceCodec.decode(contentReferenceCodec.encode(value.avatar)) }) };
+}
+function apply(update, basis) {
+    const document = accountProfileCodec.encode(basis);
+    for (const field of ['nickname', 'bio', 'avatar']) {
+        const value = update[field];
+        if (value === null)
+            delete document[field];
+        else if (value !== undefined)
+            document[field] = typeof value === 'string' ? value : contentReferenceCodec.encode(value);
+    }
+    if (update.publicDiscovery !== undefined)
+        document.public_discovery = update.publicDiscovery;
+    return accountProfileCodec.decode(document);
+}
+export class ProfileManager extends ClientComponent {
+    #store;
+    #pool;
+    #account;
+    #signer;
+    #gate = new AsyncGate();
+    #events = new EventHub();
+    #profile;
+    constructor(options) {
+        super(options);
+        for (const dependency of [options.relayClients, options.accountManager])
+            if (dependency.accountId !== this.accountId || dependency.context.toString() !== this.context.toString())
+                throw new ProtocolError('invalid_context', 'Profile dependencies belong to another account or network.');
+        this.#store = options.store;
+        this.#pool = options.relayClients;
+        this.#account = options.accountManager;
+        this.#signer = options.deviceSigner;
+    }
+    get profile() { return this.#profile && clone(this.#profile); }
+    on(event, listener) { return this.#events.on(event, listener); }
+    async onInitialize(signal) {
+        this.#account.ensureInitialized();
+        await this.#store.initialize({ context: this.context.toString(), accountId: this.accountId }, signal);
+        const saved = (await this.#store.read([profileKey(this.accountId)], signal)).sets[0][0]?.value;
+        if (saved) {
+            const result = profileResolveResultCodec.decode(saved);
+            validateProfileResult(result, this.context, this.accountId);
+            this.#profile = result.profile;
+        }
+    }
+    #accept(profile) {
+        const changed = (profile && accountProfileCodec.stringify(profile)) !== (this.#profile && accountProfileCodec.stringify(this.#profile));
+        this.#profile = profile && clone(profile);
+        return changed;
+    }
+    #changed() { this.#events.notify('profileChanged', this.profile, error => this.notifyBackgroundError({ operation: 'observer', resource: 'profileChanged', error })); }
+    async getProfile(accountId = this.accountId, signal) {
+        validateAccountId(accountId);
+        let changed = false;
+        const profile = await this.runOperation(scope => this.#gate.run(async () => {
+            const result = await this.#resolve(accountId, await this.#home(scope), scope);
+            if (result)
+                await this.#save(result, scope);
+            if (accountId === this.accountId)
+                changed = this.#accept(result?.profile);
+            return result?.profile;
+        }, scope), signal);
+        if (changed)
+            this.#changed();
+        return profile && clone(profile);
+    }
+    async updateProfile(update, signal) {
+        const copied = copyUpdate(update);
+        let changed = false;
+        const result = await this.runOperation(scope => this.#gate.run(async () => {
+            const result = await this.#publish(copied, undefined, scope);
+            changed = this.#accept(result);
+            return result;
+        }, scope), signal);
+        if (changed)
+            this.#changed();
+        return clone(result);
+    }
+    /** Republish the newest known local/pending/supplied snapshot, including during home-relay migration. */
+    async publishProfile(profile, signal) {
+        const supplied = profile && clone(profile);
+        if (supplied) {
+            validateProfile(supplied);
+            if (supplied.account !== this.accountId)
+                throw new ProtocolError('invalid_identity', 'Profile belongs to another account.');
+        }
+        let changed = false;
+        const result = await this.runOperation(scope => this.#gate.run(async () => {
+            const snapshot = await this.#store.read([profileKey(this.accountId), requestKey(method)], scope);
+            const local = snapshot.sets[0][0]?.value;
+            const signed = readSignedRequest(snapshot.sets[1][0]?.value);
+            let latest = local && profileResolveResultCodec.decode(local).profile;
+            if (signed?.pending && (!latest || signed.revision >= latest.updatedAt))
+                latest = accountProfileCodec.decode(signed.document);
+            if (supplied && (!latest || supplied.updatedAt > latest.updatedAt))
+                latest = supplied;
+            if (!latest)
+                return undefined;
+            const published = await this.#publish({}, latest, scope);
+            changed = this.#accept(published);
+            return published;
+        }, scope), signal);
+        if (changed)
+            this.#changed();
+        return result && clone(result);
+    }
+    async #home(signal) {
+        const route = await this.#account.getRoute(undefined, signal);
+        if (!route)
+            throw new ProtocolError('route_required', 'Establish or recover the account route before publishing profiles.');
+        return route.relayId;
+    }
+    async #resolve(account, relayId, signal) {
+        const client = await this.#pool.get(relayId, { mode: 'device', signer: this.#signer }, signal);
+        let response;
+        try {
+            response = await client.requestHttp('GET', 'profile.resolve', { account }, { signal });
+        }
+        catch (error) {
+            if (error instanceof RelayError && error.code === 'not_found')
+                return undefined;
+            throw error;
+        }
+        if (response === undefined)
+            throw new ProtocolError('invalid_response', 'Profile resolution returned no document.');
+        const result = profileResolveResultCodec.decode(response);
+        validateProfileResult(result, this.context, account);
+        return result;
+    }
+    async #publish(update, restored, signal) {
+        const certificate = deviceCertificateCodec.decode(deviceCertificateCodec.encode(this.#signer.certificate));
+        if (certificate.account !== this.accountId)
+            throw new ProtocolError('invalid_identity', 'Device signer belongs to another account.');
+        const relayId = await this.#home(signal);
+        const queries = [profileKey(this.accountId), requestKey(method)];
+        const snapshot = await this.#store.read(queries, signal);
+        const local = snapshot.sets[0][0]?.value;
+        const saved = snapshot.sets[1][0]?.value;
+        let signed = readSignedRequest(saved);
+        let request;
+        if (signed?.pending && (!restored || signed.relayId === relayId)) {
+            request = accountProfileCodec.decode(signed.document);
+            if (signed.relayId !== relayId || accountProfileCodec.stringify(apply(update, request)) !== accountProfileCodec.stringify(request))
+                throw new StateConflictError('A profile publication has an unknown result. Retry the original update or resolve it first.');
+        }
+        else {
+            const current = await this.#resolve(this.accountId, relayId, signal);
+            const cached = local && profileResolveResultCodec.decode(local).profile;
+            let basis = current?.profile;
+            if (basis && cached && basis.updatedAt < cached.updatedAt)
+                throw new ProtocolError('stale_profile', 'Relay returned an older profile.');
+            for (const candidate of [cached, restored, signed?.pending ? accountProfileCodec.decode(signed.document) : undefined])
+                if (candidate && (!basis || candidate.updatedAt > basis.updatedAt))
+                    basis = candidate;
+            basis ??= { account: this.accountId, publicDiscovery: false, updatedAt: 0, deviceSignature: new Uint8Array(64) };
+            request = { ...apply(update, basis), updatedAt: Math.max(this.clock.nowSeconds(), basis.updatedAt), deviceSignature: new Uint8Array(64) };
+            validateProfile(request);
+            request = { ...request, deviceSignature: (await this.#signer.sign(profileInput(request, this.context), signal)).slice() };
+            validateProfileResult({ profile: request, signerCertificate: certificate }, this.context, this.accountId);
+            const prepared = { relayId, revision: request.updatedAt, document: accountProfileCodec.encode(request), pending: true };
+            await updateStore(this.#store, queries, state => {
+                if (fingerprint(state.sets[0][0]?.value) !== fingerprint(local) || fingerprint(state.sets[1][0]?.value) !== fingerprint(saved))
+                    throw new StateConflictError('Profile changed while signing. Resolve current state before retrying.');
+                return { mutations: [putSignedRequest(method, prepared)], result: undefined };
+            }, signal);
+            signed = prepared;
+        }
+        // A renewed certificate with the same key is valid; a replaced signing identity cannot replay the old request.
+        validateProfileResult({ profile: request, signerCertificate: certificate }, this.context, this.accountId);
+        const currentCertificate = this.#signer.certificate;
+        if (currentCertificate.account !== certificate.account || canonicalJson(deviceCertificateCodec.encode(currentCertificate)) !== canonicalJson(deviceCertificateCodec.encode(certificate)))
+            throw new StateConflictError('Device signer changed during profile publication.');
+        const client = await this.#pool.get(relayId, { mode: 'device', signer: this.#signer }, signal);
+        try {
+            await client.requestHttp('PUT', method, signed.document, { signal });
+        }
+        catch (error) {
+            if (error instanceof RelayError && error.isDefinitiveRejection) {
+                try {
+                    await finishSignedRequest(this.#store, method, signed);
+                }
+                catch (storageError) {
+                    throw new AggregateError([error, storageError], 'Profile rejection could not be persisted.');
+                }
+            }
+            throw error;
+        }
+        await this.#save({ profile: request, signerCertificate: certificate }, signal);
+        return request;
+    }
+    async #save(result, signal) {
+        const profile = result.profile;
+        await updateStore(this.#store, [profileKey(profile.account), requestKey(method)], snapshot => {
+            const previous = snapshot.sets[0][0]?.value;
+            if (previous && profile.updatedAt < profileResolveResultCodec.decode(previous).profile.updatedAt)
+                throw new ProtocolError('stale_profile', 'Returned profile is older than the known profile.');
+            const mutations = [{ ...profileKey(profile.account), kind: 'put', value: profileResolveResultCodec.encode(result) }];
+            const signed = readSignedRequest(snapshot.sets[1][0]?.value);
+            if (profile.account === this.accountId && signed?.pending && (profile.updatedAt > signed.revision
+                || profile.updatedAt === signed.revision && accountProfileCodec.stringify(profile) === canonicalJson(signed.document)))
+                mutations.push(putSignedRequest(method, { ...signed, pending: false }));
+            return { mutations, result: undefined };
+        }, signal);
+    }
+    async onDispose() { this.#events.clear(); }
+}
+//# sourceMappingURL=profile.js.map

package/dist/components/profile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile.js","sourceRoot":"","sources":["../../src/components/profile.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,EAAE,qBAAqB,EAAyB,MAAM,sBAAsB,CAAC;AACpF,OAAO,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,yBAAyB,EAAE,eAAe,EAAE,qBAAqB,EAAkD,MAAM,sBAAsB,CAAC;AAC5L,OAAO,EAAE,aAAa,EAAmB,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAsB,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,UAAU,EAAsB,MAAM,8BAA8B,CAAC;AAExI,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAExD,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAEzD,OAAO,EAAE,eAAe,EAAsB,MAAM,gBAAgB,CAAC;AAQrE,MAAM,MAAM,GAAG,iBAAiB,CAAC;AACjC,MAAM,UAAU,GAAG,CAAC,OAAe,EAAa,EAAE,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;AAC9F,MAAM,KAAK,GAAG,CAAC,KAAqB,EAAkB,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACvH,MAAM,WAAW,GAAG,CAAC,KAA6B,EAAU,EAAE,CAAC,aAAa,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC;AAC5F,SAAS,UAAU,CAAC,KAAoB;IACpC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,CAAC,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,gCAAgC,GAAG,GAAG,CAAC,CAAC;IACvK,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,eAAe,KAAK,SAAS;QAAE,MAAM,IAAI,SAAS,CAAC,wDAAwD,CAAC,CAAC;IACrK,KAAK,MAAM,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC;QAAE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAC;IACvL,OAAO,EAAE,GAAG,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,qBAAqB,CAAC,MAAM,CAAC,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC/I,CAAC;AACD,SAAS,KAAK,CAAC,MAAqB,EAAE,KAAqB;IACvD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnD,KAAK,MAAM,KAAK,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,QAAQ,CAAU,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC5B,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC;aACtC,IAAI,KAAK,KAAK,SAAS;YAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5H,CAAC;IACD,IAAI,MAAM,CAAC,eAAe,KAAK,SAAS;QAAE,QAAQ,CAAC,gBAAgB,GAAG,MAAM,CAAC,eAAe,CAAC;IAC7F,OAAO,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,OAAO,cAAe,SAAQ,eAAe;IACtC,MAAM,CAAgB;IAAU,KAAK,CAAkB;IAAU,QAAQ,CAAiB;IAAU,OAAO,CAAe;IAC1H,KAAK,GAAG,IAAI,SAAS,EAAE,CAAC;IAAU,OAAO,GAAG,IAAI,QAAQ,EAAiB,CAAC;IACnF,QAAQ,CAA6B;IACrC,YAAY,OAA8B;QACtC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,KAAK,MAAM,UAAU,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,OAAO,CAAC,cAAc,CAAC;YACnE,IAAI,UAAU,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,IAAI,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;gBACpG,MAAM,IAAI,aAAa,CAAC,iBAAiB,EAAE,4DAA4D,CAAC,CAAC;QACjH,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAAC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC;QAAC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,cAAc,CAAC;QAAC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC;IAChJ,CAAC;IACD,IAAI,OAAO,KAAiC,OAAO,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC3F,EAAE,CAAgC,KAAQ,EAAE,QAAyC,IAAgB,OAAO,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC5H,KAAK,CAAC,YAAY,CAAC,MAAmB;QACrD,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC;QAClC,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC;QACtG,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;QAChG,IAAI,KAAK,EAAE,CAAC;YAAC,MAAM,MAAM,GAAG,yBAAyB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAAC,qBAAqB,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAAC,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC;QAAC,CAAC;IACvK,CAAC;IACD,OAAO,CAAC,OAAmC;QACvC,MAAM,OAAO,GAAG,CAAC,OAAO,IAAI,mBAAmB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,mBAAmB,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QACxI,IAAI,CAAC,QAAQ,GAAG,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAAC,OAAO,OAAO,CAAC;IAC9D,CAAC;IACD,QAAQ,KAAW,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,qBAAqB,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5K,KAAK,CAAC,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,MAAoB;QAC7D,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAAC,IAAI,OAAO,GAAG,KAAK,CAAC;QAClD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;YACvE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,CAAC;YAC9E,IAAI,MAAM;gBAAE,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC5C,IAAI,SAAS,KAAK,IAAI,CAAC,SAAS;gBAAE,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC1E,OAAO,MAAM,EAAE,OAAO,CAAC;QAC3B,CAAC,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;QACnB,IAAI,OAAO;YAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QAAC,OAAO,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IACnE,CAAC;IACD,KAAK,CAAC,aAAa,CAAC,MAAqB,EAAE,MAAoB;QAC3D,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;QAAC,IAAI,OAAO,GAAG,KAAK,CAAC;QACvD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;YACtE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAAC,OAAO,MAAM,CAAC;QAChH,CAAC,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;QACnB,IAAI,OAAO;YAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QAAC,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC;IACvD,CAAC;IACD,yGAAyG;IACzG,KAAK,CAAC,cAAc,CAAC,OAAwB,EAAE,MAAoB;QAC/D,MAAM,QAAQ,GAAG,OAAO,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,QAAQ,EAAE,CAAC;YAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;YAAC,IAAI,QAAQ,CAAC,OAAO,KAAK,IAAI,CAAC,SAAS;gBAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,qCAAqC,CAAC,CAAC;QAAC,CAAC;QACzK,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE;YACtE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YACjG,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;YAC1C,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YAC9D,IAAI,MAAM,GAAG,KAAK,IAAI,yBAAyB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;YACtE,IAAI,MAAM,EAAE,OAAO,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC;gBAAE,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAC9H,IAAI,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,QAAQ,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;gBAAE,MAAM,GAAG,QAAQ,CAAC;YACtF,IAAI,CAAC,MAAM;gBAAE,OAAO,SAAS,CAAC;YAC9B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YAAC,OAAO,SAAS,CAAC;QAClH,CAAC,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;QACnB,IAAI,OAAO;YAAE,IAAI,CAAC,QAAQ,EAAE,CAAC;QAAC,OAAO,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;IACjE,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,MAAmB;QAC3B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC9D,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,aAAa,CAAC,gBAAgB,EAAE,oEAAoE,CAAC,CAAC;QAC5H,OAAO,KAAK,CAAC,OAAO,CAAC;IACzB,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,OAAe,EAAE,OAAe,EAAE,MAAmB;QAChE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;QAC/F,IAAI,QAAQ,CAAC;QACb,IAAI,CAAC;YAAC,QAAQ,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,iBAAiB,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAAC,CAAC;QAC/F,OAAO,KAAK,EAAE,CAAC;YAAC,IAAI,KAAK,YAAY,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;gBAAE,OAAO,SAAS,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;QAC/G,IAAI,QAAQ,KAAK,SAAS;YAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,0CAA0C,CAAC,CAAC;QACpH,MAAM,MAAM,GAAG,yBAAyB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAAC,qBAAqB,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAAC,OAAO,MAAM,CAAC;IACnI,CAAC;IACD,KAAK,CAAC,QAAQ,CAAC,MAAqB,EAAE,QAAoC,EAAE,MAAmB;QAC3F,MAAM,WAAW,GAAG,sBAAsB,CAAC,MAAM,CAAC,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QAC3G,IAAI,WAAW,CAAC,OAAO,KAAK,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,2CAA2C,CAAC,CAAC;QACrI,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;QAAC,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;QACrF,IAAI,MAAM,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAAC,IAAI,OAAuB,CAAC;QACnE,IAAI,MAAM,EAAE,OAAO,IAAI,CAAC,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,EAAE,CAAC;YAC/D,OAAO,GAAG,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACtD,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,IAAI,mBAAmB,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,KAAK,mBAAmB,CAAC,SAAS,CAAC,OAAO,CAAC;gBAC9H,MAAM,IAAI,kBAAkB,CAAC,6FAA6F,CAAC,CAAC;QACpI,CAAC;aAAM,CAAC;YACJ,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;YACrE,MAAM,MAAM,GAAG,KAAK,IAAI,yBAAyB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;YACxE,IAAI,KAAK,GAAG,OAAO,EAAE,OAAO,CAAC;YAC7B,IAAI,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS;gBAAE,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,kCAAkC,CAAC,CAAC;YACxI,KAAK,MAAM,SAAS,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBACjH,IAAI,SAAS,IAAI,CAAC,CAAC,KAAK,IAAI,SAAS,CAAC,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC;oBAAE,KAAK,GAAG,SAAS,CAAC;YAC1F,KAAK,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,EAAE,eAAe,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,eAAe,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;YACjH,OAAO,GAAG,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,eAAe,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;YAC1I,eAAe,CAAC,OAAO,CAAC,CAAC;YACzB,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,eAAe,EAAE,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YAC1H,qBAAqB,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YAC1G,MAAM,QAAQ,GAAkB,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,SAAS,EAAE,QAAQ,EAAE,mBAAmB,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YACvI,MAAM,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE;gBAC5C,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,WAAW,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,WAAW,CAAC,KAAK,CAAC;oBAC5H,MAAM,IAAI,kBAAkB,CAAC,uEAAuE,CAAC,CAAC;gBAC1G,OAAO,EAAE,SAAS,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YAClF,CAAC,EAAE,MAAM,CAAC,CAAC;YACX,MAAM,GAAG,QAAQ,CAAC;QACtB,CAAC;QACD,+GAA+G;QAC/G,qBAAqB,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1G,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;QACpD,IAAI,kBAAkB,CAAC,OAAO,KAAK,WAAW,CAAC,OAAO,IAAI,aAAa,CAAC,sBAAsB,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,KAAK,aAAa,CAAC,sBAAsB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACpL,MAAM,IAAI,kBAAkB,CAAC,mDAAmD,CAAC,CAAC;QACtF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;QAC/F,IAAI,CAAC;YAAC,MAAM,MAAM,CAAC,WAAW,CAAC,KAAK,EAAE,MAAM,EAAE,MAAO,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAAC,CAAC;QAC9E,OAAO,KAAK,EAAE,CAAC;YACX,IAAI,KAAK,YAAY,UAAU,IAAI,KAAK,CAAC,qBAAqB,EAAE,CAAC;gBAC7D,IAAI,CAAC;oBAAC,MAAM,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAO,CAAC,CAAC;gBAAC,CAAC;gBAChE,OAAO,YAAY,EAAE,CAAC;oBAAC,MAAM,IAAI,cAAc,CAAC,CAAC,KAAK,EAAE,YAAY,CAAC,EAAE,2CAA2C,CAAC,CAAC;gBAAC,CAAC;YAC1H,CAAC;YACD,MAAM,KAAK,CAAC;QAChB,CAAC;QACD,MAAM,IAAI,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC;QAAC,OAAO,OAAO,CAAC;IACnG,CAAC;IACD,KAAK,CAAC,KAAK,CAAC,MAA4B,EAAE,MAAmB;QACzD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC/B,MAAM,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,CAAC,EAAE;YACzF,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;YAC7C,IAAI,QAAQ,IAAI,OAAO,CAAC,SAAS,GAAG,yBAAyB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,SAAS;gBAC5F,MAAM,IAAI,aAAa,CAAC,eAAe,EAAE,mDAAmD,CAAC,CAAC;YAClG,MAAM,SAAS,GAAoB,CAAC,EAAE,GAAG,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,yBAAyB,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACtI,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;YAC9D,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC,SAAS,IAAI,MAAM,EAAE,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,GAAG,MAAM,CAAC,QAAQ;mBAC1F,OAAO,CAAC,SAAS,KAAK,MAAM,CAAC,QAAQ,IAAI,mBAAmB,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACtH,SAAS,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YAC5E,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QAC5C,CAAC,EAAE,MAAM,CAAC,CAAC;IACf,CAAC;IACkB,KAAK,CAAC,SAAS,KAAoB,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;CAChF"}

package/dist/crypto/groups.d.ts

@@ -0,0 +1,56 @@
+import type { DeviceSigner } from '../interactions.js';
+import { type DeviceCertificate } from '../models/identity.js';
+import { type GroupMessageEnvelope, type GroupSecretBox } from '../models/groups.js';
+import { type NetworkContext } from '../protocol/context.js';
+import { type JsonObject } from '../protocol/json.js';
+import { type RandomSource } from './primitives.js';
+/** Local protection/key-access failures remain retryable and never reject remote group messages. */
+export declare class GroupKeyAccessError extends Error {
+    readonly name = "GroupKeyAccessError";
+}
+/** Hash the complete signed management object, including its device signature; timeline metadata is external. */
+export declare function groupManagementHash(value: JsonObject, context: NetworkContext): string;
+export declare function groupClientSecretCommitment(groupId: string, secret: Uint8Array, context: NetworkContext): string;
+export interface GroupClientSecretBoxHeader {
+    readonly groupId: string;
+    readonly account: string;
+    readonly memberEncryptionPublicKey: Uint8Array;
+    readonly clientSecretCommitment: string;
+}
+export declare function groupClientSecretBoxAad(value: GroupClientSecretBoxHeader, context: NetworkContext): Uint8Array;
+export interface GroupRelaySecretBoxHeader {
+    readonly groupId: string;
+    readonly account: string;
+    readonly deviceId: string;
+    readonly epoch: number;
+}
+export declare function groupRelaySecretBoxAad(value: GroupRelaySecretBoxHeader, context: NetworkContext): Uint8Array;
+/** Low-level secret wrapping with a protocol AAD projection; caller-owned secret and public key are never erased. */
+export declare function sealGroupSecret(secret: Uint8Array, publicKey: Uint8Array, aad: Uint8Array, random?: RandomSource): GroupSecretBox;
+/** Caller owns both the supplied shared secret and the returned plaintext; erase them after use. */
+export declare function openGroupSecret(box: GroupSecretBox, shared: Uint8Array, aad: Uint8Array): Uint8Array;
+export declare function sealGroupClientSecret(header: GroupClientSecretBoxHeader, secret: Uint8Array, context: NetworkContext, random?: RandomSource): GroupSecretBox;
+/** Validates the client half before combining both independently supplied 32-byte secrets. */
+export declare function deriveGroupApplicationSecret(groupId: string, epoch: number, clientSecretCommitment: string, clientSecret: Uint8Array, relaySecret: Uint8Array, context: NetworkContext): Uint8Array;
+export type GroupMessageHeader = Pick<GroupMessageEnvelope, 'groupId' | 'epoch' | 'messageId' | 'createdAt'>;
+export declare function groupMessageAad(value: GroupMessageHeader, account: string, deviceId: string, context: NetworkContext): Uint8Array;
+export declare function deriveGroupMessageKey(applicationSecret: Uint8Array, aad: Uint8Array): Uint8Array;
+export interface EncryptGroupMessageOptions extends GroupMessageHeader {
+    readonly context: NetworkContext;
+    readonly signer: DeviceSigner;
+    readonly applicationSecret: Uint8Array;
+    readonly payload: JsonObject;
+    readonly random?: RandomSource;
+    readonly signal?: AbortSignal;
+}
+export declare function encryptGroupMessage(options: EncryptGroupMessageOptions): Promise<GroupMessageEnvelope>;
+export interface DecryptGroupMessageOptions {
+    readonly context: NetworkContext;
+    readonly envelope: GroupMessageEnvelope;
+    readonly sender: DeviceCertificate;
+    readonly signerDeviceId: string;
+    readonly applicationSecret: Uint8Array;
+}
+/** Authenticates the signature, sender account and device before returning typed content. Membership validation remains mandatory in the receiver. */
+export declare function decryptGroupMessage(options: DecryptGroupMessageOptions): JsonObject;
+//# sourceMappingURL=groups.d.ts.map

package/dist/crypto/groups.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"groups.d.ts","sourceRoot":"","sources":["../../src/crypto/groups.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,EAA8D,KAAK,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC3H,OAAO,EACH,KAAK,oBAAoB,EAAE,KAAK,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,EAAgB,KAAK,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE3E,OAAO,EAAiD,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAErG,OAAO,EAAyG,KAAK,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAK3J,oGAAoG;AACpG,qBAAa,mBAAoB,SAAQ,KAAK;IAAG,SAAkB,IAAI,yBAAyB;CAAE;AAClG,iHAAiH;AACjH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,GAAG,MAAM,CAGtF;AACD,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,GAAG,MAAM,CAGhH;AACD,MAAM,WAAW,0BAA0B;IAAG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,yBAAyB,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAA;CAAE;AAC3L,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,0BAA0B,EAAE,OAAO,EAAE,cAAc,GAAG,UAAU,CAI9G;AACD,MAAM,WAAW,yBAAyB;IAAG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AACpJ,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,yBAAyB,EAAE,OAAO,EAAE,cAAc,GAAG,UAAU,CAG5G;AACD,qHAAqH;AACrH,wBAAgB,eAAe,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,GAAE,YAA2B,GAAG,cAAc,CAS/I;AACD,oGAAoG;AACpG,wBAAgB,eAAe,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,GAAG,UAAU,CAMpG;AACD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,0BAA0B,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,GAAE,YAA2B,GAAG,cAAc,CAI1K;AACD,8FAA8F;AAC9F,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,GAAG,UAAU,CAOnM;AACD,MAAM,MAAM,kBAAkB,GAAG,IAAI,CAAC,oBAAoB,EAAE,SAAS,GAAG,OAAO,GAAG,WAAW,GAAG,WAAW,CAAC,CAAC;AAC7G,wBAAgB,eAAe,CAAC,KAAK,EAAE,kBAAkB,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,UAAU,CAGjI;AACD,wBAAgB,qBAAqB,CAAC,iBAAiB,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,GAAG,UAAU,CAA6H;AAC9N,MAAM,WAAW,0BAA2B,SAAQ,kBAAkB;IAClE,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,iBAAiB,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CACxM;AACD,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,0BAA0B,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAc5G;AACD,MAAM,WAAW,0BAA0B;IACvC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,iBAAiB,EAAE,UAAU,CAAC;CAC1L;AACD,sJAAsJ;AACtJ,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,0BAA0B,GAAG,UAAU,CAMnF"}

package/dist/crypto/groups.js

@@ -0,0 +1,163 @@
+import { ProtocolError } from '../errors.js';
+import { validateIdentifier } from '../identity/identifiers.js';
+import { validateAccountId } from '../identity/neo.js';
+import { contentHashBytes } from '../models/content.js';
+import { certificateId, deviceCertificateCodec, validateCertificate } from '../models/identity.js';
+import { groupMessageEnvelopeCodec, groupMessageEnvelopeInput, groupPayloadCodec, validateGroupPayload, validateGroupSecretBox, verifyGroupMessageEnvelope } from '../models/groups.js';
+import { signingInput } from '../protocol/context.js';
+import { concatBytes, encodeBase64Url, encodeUtf8 } from '../protocol/encoding.js';
+import { canonicalBytes, parseJson, requireSafeInteger } from '../protocol/json.js';
+import { throwIfAborted } from '../runtime/clock.js';
+import { agreeKey, decryptAes, deriveKey, encryptAes, encryptionPublicKey, requireLength, sha256, systemRandom } from './primitives.js';
+const boxSalt = sha256(encodeUtf8('Meshline/keybox-salt/v1'));
+const epochSalt = sha256(encodeUtf8('Meshline/group-epoch-salt/v1'));
+const messageSalt = sha256(encodeUtf8('Meshline/group-message-salt/v1'));
+/** Local protection/key-access failures remain retryable and never reject remote group messages. */
+export class GroupKeyAccessError extends Error {
+    name = 'GroupKeyAccessError';
+}
+/** Hash the complete signed management object, including its device signature; timeline metadata is external. */
+export function groupManagementHash(value, context) {
+    if (typeof value.$type !== 'string')
+        throw new ProtocolError('invalid_type', 'Management hashes require a typed protocol object.');
+    return `sha256:${encodeBase64Url(sha256(signingInput(value, context)))}`;
+}
+export function groupClientSecretCommitment(groupId, secret, context) {
+    validateIdentifier('group', groupId);
+    requireLength(secret, 32, 'Client group secret');
+    return groupManagementHash({ $type: 'meshline.group.client_secret.commitment', group_id: groupId, secret: encodeBase64Url(secret) }, context);
+}
+export function groupClientSecretBoxAad(value, context) {
+    validateIdentifier('group', value.groupId);
+    validateAccountId(value.account);
+    requireLength(value.memberEncryptionPublicKey, 32, 'Member encryption public key');
+    contentHashBytes(value.clientSecretCommitment);
+    return signingInput({ $type: 'meshline.group.client_secret_box.aad', group_id: value.groupId, account: value.account,
+        member_encryption_public_key: encodeBase64Url(value.memberEncryptionPublicKey), client_secret_commitment: value.clientSecretCommitment }, context);
+}
+export function groupRelaySecretBoxAad(value, context) {
+    validateIdentifier('group', value.groupId);
+    validateAccountId(value.account);
+    validateIdentifier('device', value.deviceId);
+    requireSafeInteger(value.epoch, 0);
+    return signingInput({ $type: 'meshline.group.relay_secret_box.aad', group_id: value.groupId, account: value.account, device_id: value.deviceId, epoch: value.epoch }, context);
+}
+/** Low-level secret wrapping with a protocol AAD projection; caller-owned secret and public key are never erased. */
+export function sealGroupSecret(secret, publicKey, aad, random = systemRandom) {
+    requireLength(secret, 32, 'Group secret');
+    requireLength(publicKey, 32, 'Secret recipient public key');
+    let ephemeral;
+    let shared;
+    let key;
+    try {
+        ephemeral = random.bytes(32);
+        requireLength(ephemeral, 32, 'Ephemeral private key');
+        const enc = encryptionPublicKey(ephemeral);
+        shared = agreeKey(ephemeral, publicKey);
+        key = deriveKey(shared, boxSalt, aad);
+        const nonce = random.bytes(12);
+        requireLength(nonce, 12, 'Secret box nonce');
+        return { alg: 'X25519-HKDF-SHA256-AES256GCM', enc, sealedSecret: concatBytes(nonce, encryptAes(key, nonce, secret, aad)) };
+    }
+    finally {
+        ephemeral?.fill(0);
+        shared?.fill(0);
+        key?.fill(0);
+    }
+}
+/** Caller owns both the supplied shared secret and the returned plaintext; erase them after use. */
+export function openGroupSecret(box, shared, aad) {
+    validateGroupSecretBox(box);
+    requireLength(shared, 32, 'Secret box shared secret');
+    if (shared.every(byte => byte === 0))
+        throw new ProtocolError('invalid_key', 'An all-zero shared secret is forbidden.');
+    const key = deriveKey(shared, boxSalt, aad);
+    try {
+        return decryptAes(key, box.sealedSecret.subarray(0, 12), box.sealedSecret.subarray(12), aad);
+    }
+    finally {
+        key.fill(0);
+    }
+}
+export function sealGroupClientSecret(header, secret, context, random = systemRandom) {
+    const aad = groupClientSecretBoxAad(header, context);
+    if (groupClientSecretCommitment(header.groupId, secret, context) !== header.clientSecretCommitment)
+        throw new ProtocolError('invalid_commitment', 'Client group secret does not match its commitment.');
+    return sealGroupSecret(secret, header.memberEncryptionPublicKey, aad, random);
+}
+/** Validates the client half before combining both independently supplied 32-byte secrets. */
+export function deriveGroupApplicationSecret(groupId, epoch, clientSecretCommitment, clientSecret, relaySecret, context) {
+    validateIdentifier('group', groupId);
+    requireSafeInteger(epoch, 0);
+    contentHashBytes(clientSecretCommitment);
+    requireLength(clientSecret, 32, 'Client group secret');
+    requireLength(relaySecret, 32, 'Relay epoch secret');
+    if (groupClientSecretCommitment(groupId, clientSecret, context) !== clientSecretCommitment)
+        throw new ProtocolError('invalid_commitment', 'Client group secret does not match its commitment.');
+    const material = concatBytes(clientSecret, relaySecret);
+    try {
+        return deriveKey(material, epochSalt, signingInput({ $type: 'meshline.group.epoch_secret', group_id: groupId, epoch, client_secret_commitment: clientSecretCommitment }, context));
+    }
+    finally {
+        material.fill(0);
+    }
+}
+export function groupMessageAad(value, account, deviceId, context) {
+    validateIdentifier('group', value.groupId);
+    validateIdentifier('message', value.messageId);
+    requireSafeInteger(value.epoch, 0);
+    requireSafeInteger(value.createdAt, 0);
+    validateAccountId(account);
+    validateIdentifier('device', deviceId);
+    return signingInput({ $type: 'meshline.group.message.aad', group_id: value.groupId, epoch: value.epoch, message_id: value.messageId, created_at: value.createdAt, from: account, from_device_id: deviceId }, context);
+}
+export function deriveGroupMessageKey(applicationSecret, aad) { requireLength(applicationSecret, 32, 'Epoch application secret'); return deriveKey(applicationSecret, messageSalt, aad); }
+export async function encryptGroupMessage(options) {
+    const { context, signer, signal } = options;
+    throwIfAborted(signal);
+    const certificate = deviceCertificateCodec.decode(deviceCertificateCodec.encode(signer.certificate));
+    validateCertificate(certificate, context);
+    const signerId = certificateId(certificate, context);
+    const header = { groupId: options.groupId, epoch: options.epoch, messageId: options.messageId, createdAt: options.createdAt };
+    if (header.createdAt < certificate.notBefore || header.createdAt >= certificate.expiresAt)
+        throw new ProtocolError('unauthorized_device', 'Group signer certificate is outside its validity window.');
+    const payload = groupPayloadCodec.decode(options.payload);
+    validateGroupPayload(payload);
+    const aad = groupMessageAad(header, certificate.account, signerId, context);
+    const key = deriveGroupMessageKey(options.applicationSecret, aad);
+    let plaintext;
+    try {
+        plaintext = canonicalBytes(payload);
+        const nonce = (options.random ?? systemRandom).bytes(12);
+        requireLength(nonce, 12, 'Group message nonce');
+        let envelope = { ...header, payload: { alg: 'AES-256-GCM', nonce, ciphertext: encryptAes(key, nonce, plaintext, aad) }, deviceSignature: new Uint8Array(64) };
+        envelope = { ...envelope, deviceSignature: (await signer.sign(groupMessageEnvelopeInput(envelope, context), signal)).slice() };
+        throwIfAborted(signal);
+        if (certificateId(signer.certificate, context) !== signerId)
+            throw new ProtocolError('invalid_identity', 'Group signer changed identity during signing.');
+        verifyGroupMessageEnvelope(envelope, certificate, signerId, context);
+        return envelope;
+    }
+    finally {
+        key.fill(0);
+        plaintext?.fill(0);
+    }
+}
+/** Authenticates the signature, sender account and device before returning typed content. Membership validation remains mandatory in the receiver. */
+export function decryptGroupMessage(options) {
+    const { context, signerDeviceId } = options;
+    const envelope = groupMessageEnvelopeCodec.decode(groupMessageEnvelopeCodec.encode(options.envelope));
+    const sender = deviceCertificateCodec.decode(deviceCertificateCodec.encode(options.sender));
+    verifyGroupMessageEnvelope(envelope, sender, signerDeviceId, context);
+    const key = deriveGroupMessageKey(options.applicationSecret, groupMessageAad(envelope, sender.account, signerDeviceId, context));
+    let plaintext;
+    try {
+        plaintext = decryptAes(key, envelope.payload.nonce, envelope.payload.ciphertext, groupMessageAad(envelope, sender.account, signerDeviceId, context));
+        return groupPayloadCodec.decode(parseJson(plaintext));
+    }
+    finally {
+        key.fill(0);
+        plaintext?.fill(0);
+    }
+}
+//# sourceMappingURL=groups.js.map

package/dist/crypto/groups.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"groups.js","sourceRoot":"","sources":["../../src/crypto/groups.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,aAAa,EAAE,sBAAsB,EAAE,mBAAmB,EAA0B,MAAM,uBAAuB,CAAC;AAC3H,OAAO,EAAE,yBAAyB,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,0BAA0B,EACtG,MAAM,qBAAqB,CAAC;AAChF,OAAO,EAAE,YAAY,EAAuB,MAAM,wBAAwB,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACnF,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,kBAAkB,EAAmB,MAAM,qBAAqB,CAAC;AACrG,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAqB,MAAM,iBAAiB,CAAC;AAE3J,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,yBAAyB,CAAC,CAAC,CAAC;AAC9D,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,8BAA8B,CAAC,CAAC,CAAC;AACrE,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,gCAAgC,CAAC,CAAC,CAAC;AACzE,oGAAoG;AACpG,MAAM,OAAO,mBAAoB,SAAQ,KAAK;IAAqB,IAAI,GAAG,qBAAqB,CAAC;CAAE;AAClG,iHAAiH;AACjH,MAAM,UAAU,mBAAmB,CAAC,KAAiB,EAAE,OAAuB;IAC1E,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,aAAa,CAAC,cAAc,EAAE,oDAAoD,CAAC,CAAC;IACnI,OAAO,UAAU,eAAe,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;AAC7E,CAAC;AACD,MAAM,UAAU,2BAA2B,CAAC,OAAe,EAAE,MAAkB,EAAE,OAAuB;IACpG,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAAC,aAAa,CAAC,MAAM,EAAE,EAAE,EAAE,qBAAqB,CAAC,CAAC;IACvF,OAAO,mBAAmB,CAAC,EAAE,KAAK,EAAE,yCAAyC,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;AAClJ,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAiC,EAAE,OAAuB;IAC9F,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAAC,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAAC,aAAa,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,EAAE,8BAA8B,CAAC,CAAC;IAAC,gBAAgB,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;IACjN,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,sCAAsC,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO;QAChH,4BAA4B,EAAE,eAAe,CAAC,KAAK,CAAC,yBAAyB,CAAC,EAAE,wBAAwB,EAAE,KAAK,CAAC,sBAAsB,EAAE,EAAE,OAAO,CAAC,CAAC;AAC3J,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAAgC,EAAE,OAAuB;IAC5F,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAAC,iBAAiB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAAC,kBAAkB,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAAC,kBAAkB,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC/J,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,qCAAqC,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,EAAE,OAAO,CAAC,CAAC;AACnL,CAAC;AACD,qHAAqH;AACrH,MAAM,UAAU,eAAe,CAAC,MAAkB,EAAE,SAAqB,EAAE,GAAe,EAAE,MAAM,GAAiB,YAAY;IAC3H,aAAa,CAAC,MAAM,EAAE,EAAE,EAAE,cAAc,CAAC,CAAC;IAAC,aAAa,CAAC,SAAS,EAAE,EAAE,EAAE,6BAA6B,CAAC,CAAC;IACvG,IAAI,SAAiC,CAAC;IAAC,IAAI,MAA8B,CAAC;IAAC,IAAI,GAA2B,CAAC;IAC3G,IAAI,CAAC;QACD,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAAC,aAAa,CAAC,SAAS,EAAE,EAAE,EAAE,uBAAuB,CAAC,CAAC;QAAC,MAAM,GAAG,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAChI,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAAC,GAAG,GAAG,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;QAC/E,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAAC,aAAa,CAAC,KAAK,EAAE,EAAE,EAAE,kBAAkB,CAAC,CAAC;QAC7E,OAAO,EAAE,GAAG,EAAE,8BAA8B,EAAE,GAAG,EAAE,YAAY,EAAE,WAAW,CAAC,KAAK,EAAE,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC;IAC/H,CAAC;YAAS,CAAC;QAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;AACpE,CAAC;AACD,oGAAoG;AACpG,MAAM,UAAU,eAAe,CAAC,GAAmB,EAAE,MAAkB,EAAE,GAAe;IACpF,sBAAsB,CAAC,GAAG,CAAC,CAAC;IAAC,aAAa,CAAC,MAAM,EAAE,EAAE,EAAE,0BAA0B,CAAC,CAAC;IACnF,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,aAAa,CAAC,aAAa,EAAE,yCAAyC,CAAC,CAAC;IACxH,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAC5C,IAAI,CAAC;QAAC,OAAO,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;IAAC,CAAC;YAC7F,CAAC;QAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;AAC5B,CAAC;AACD,MAAM,UAAU,qBAAqB,CAAC,MAAkC,EAAE,MAAkB,EAAE,OAAuB,EAAE,MAAM,GAAiB,YAAY;IACtJ,MAAM,GAAG,GAAG,uBAAuB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrD,IAAI,2BAA2B,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,sBAAsB;QAAE,MAAM,IAAI,aAAa,CAAC,oBAAoB,EAAE,oDAAoD,CAAC,CAAC;IACxM,OAAO,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,yBAAyB,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;AAClF,CAAC;AACD,8FAA8F;AAC9F,MAAM,UAAU,4BAA4B,CAAC,OAAe,EAAE,KAAa,EAAE,sBAA8B,EAAE,YAAwB,EAAE,WAAuB,EAAE,OAAuB;IACnL,kBAAkB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAAC,kBAAkB,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAAC,gBAAgB,CAAC,sBAAsB,CAAC,CAAC;IAC7G,aAAa,CAAC,YAAY,EAAE,EAAE,EAAE,qBAAqB,CAAC,CAAC;IAAC,aAAa,CAAC,WAAW,EAAE,EAAE,EAAE,oBAAoB,CAAC,CAAC;IAC7G,IAAI,2BAA2B,CAAC,OAAO,EAAE,YAAY,EAAE,OAAO,CAAC,KAAK,sBAAsB;QAAE,MAAM,IAAI,aAAa,CAAC,oBAAoB,EAAE,oDAAoD,CAAC,CAAC;IAChM,MAAM,QAAQ,GAAG,WAAW,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;IACxD,IAAI,CAAC;QAAC,OAAO,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC;IAAC,CAAC;YACnL,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,KAAyB,EAAE,OAAe,EAAE,QAAgB,EAAE,OAAuB;IACjH,kBAAkB,CAAC,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IAAC,kBAAkB,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC;IAAC,kBAAkB,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAAC,kBAAkB,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAAC,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC3O,OAAO,YAAY,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC;AAC1N,CAAC;AACD,MAAM,UAAU,qBAAqB,CAAC,iBAA6B,EAAE,GAAe,IAAgB,aAAa,CAAC,iBAAiB,EAAE,EAAE,EAAE,0BAA0B,CAAC,CAAC,CAAC,OAAO,SAAS,CAAC,iBAAiB,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AAI9N,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAmC;IACzE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IACpE,MAAM,WAAW,GAAG,sBAAsB,CAAC,MAAM,CAAC,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;IAAC,mBAAmB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAChJ,MAAM,QAAQ,GAAG,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;IAAC,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;IACpL,IAAI,MAAM,CAAC,SAAS,GAAG,WAAW,CAAC,SAAS,IAAI,MAAM,CAAC,SAAS,IAAI,WAAW,CAAC,SAAS;QAAE,MAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,0DAA0D,CAAC,CAAC;IACtM,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACzF,MAAM,GAAG,GAAG,eAAe,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAAC,MAAM,GAAG,GAAG,qBAAqB,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;IAAC,IAAI,SAAiC,CAAC;IACtL,IAAI,CAAC;QACD,SAAS,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;QAAC,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,YAAY,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAAC,aAAa,CAAC,KAAK,EAAE,EAAE,EAAE,qBAAqB,CAAC,CAAC;QAC/I,IAAI,QAAQ,GAAyB,EAAE,GAAG,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,CAAC,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,EAAE,eAAe,EAAE,IAAI,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;QACpL,QAAQ,GAAG,EAAE,GAAG,QAAQ,EAAE,eAAe,EAAE,CAAC,MAAM,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QACvJ,IAAI,aAAa,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,KAAK,QAAQ;YAAE,MAAM,IAAI,aAAa,CAAC,kBAAkB,EAAE,+CAA+C,CAAC,CAAC;QAC1J,0BAA0B,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAAC,OAAO,QAAQ,CAAC;IAC1F,CAAC;YAAS,CAAC;QAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;AAClD,CAAC;AAID,sJAAsJ;AACtJ,MAAM,UAAU,mBAAmB,CAAC,OAAmC;IACnE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,OAAO,CAAC;IAAC,MAAM,QAAQ,GAAG,yBAAyB,CAAC,MAAM,CAAC,yBAAyB,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACnJ,MAAM,MAAM,GAAG,sBAAsB,CAAC,MAAM,CAAC,sBAAsB,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAAC,0BAA0B,CAAC,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;IACnK,MAAM,GAAG,GAAG,qBAAqB,CAAC,OAAO,CAAC,iBAAiB,EAAE,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC;IAAC,IAAI,SAAiC,CAAC;IACxK,IAAI,CAAC;QAAC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC;QAAC,OAAO,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;IAAC,CAAC;YAC5M,CAAC;QAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;AAChD,CAAC"}

package/dist/crypto/messages.d.ts

@@ -0,0 +1,52 @@
+import type { DeviceSigner } from '../interactions.js';
+import { type ContactAuthorization } from '../models/contacts.js';
+import { type DeviceCertificate } from '../models/identity.js';
+import { type MessageEnvelope, type MessageKeyBox, type MessageSendRequest } from '../models/messages.js';
+import { type NetworkContext } from '../protocol/context.js';
+import { type JsonObject } from '../protocol/json.js';
+import { type RandomSource } from './primitives.js';
+type MessageHeader = Pick<MessageEnvelope, 'messageId' | 'createdAt' | 'from' | 'fromDeviceId' | 'to'>;
+/** Fixed protocol projection; envelope extensions are signed but are not part of payload AAD. */
+export declare function messageAad(value: MessageHeader, context: NetworkContext): Uint8Array;
+/** Fixed projection shared by HKDF info and AES-GCM key wrapping AAD. */
+export declare function messageKeyBoxAad(value: MessageHeader & {
+    readonly payload: {
+        readonly alg: string;
+    };
+}, box: Pick<MessageKeyBox, 'alg' | 'deviceId' | 'enc'>, account: string, context: NetworkContext): Uint8Array;
+export interface EncryptMessageOptions {
+    readonly context: NetworkContext;
+    readonly signer: DeviceSigner;
+    readonly messageId: string;
+    readonly createdAt: number;
+    readonly recipient: string;
+    readonly payload: JsonObject;
+    readonly recipientDevices: readonly DeviceCertificate[];
+    readonly senderDevices?: readonly DeviceCertificate[];
+    readonly authorization?: ContactAuthorization;
+    readonly random?: RandomSource;
+    readonly signal?: AbortSignal;
+}
+/** Builds immutable delivery material. Device lists must come from current authoritative states, checked by the calling manager. */
+export declare function encryptMessage(options: EncryptMessageOptions): Promise<MessageSendRequest>;
+/** Implementations return a fresh 32-byte shared secret; this function owns and erases that buffer. */
+export interface MessageDecryptor {
+    readonly certificate: DeviceCertificate;
+    deriveSharedSecret(peerPublicKey: Uint8Array, signal?: AbortSignal): Promise<Uint8Array>;
+}
+/** Local key access failures are retryable reception failures, never grounds for discarding a remote message. */
+export declare class MessageKeyAccessError extends Error {
+    readonly name = "MessageKeyAccessError";
+}
+export interface DecryptMessageOptions {
+    readonly context: NetworkContext;
+    readonly receiver: MessageDecryptor;
+    readonly envelope: MessageEnvelope;
+    readonly keyBox: MessageKeyBox;
+    readonly sender: DeviceCertificate;
+    readonly signal?: AbortSignal;
+}
+/** Verifies signature before key agreement and returns no plaintext until both GCM authentications and complete JSON validation pass. */
+export declare function decryptMessage(options: DecryptMessageOptions): Promise<JsonObject>;
+export {};
+//# sourceMappingURL=messages.d.ts.map

package/dist/crypto/messages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"messages.d.ts","sourceRoot":"","sources":["../../src/crypto/messages.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGvD,OAAO,EAA6B,KAAK,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7F,OAAO,EAA8D,KAAK,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC3H,OAAO,EACH,KAAK,eAAe,EAAE,KAAK,aAAa,EAAE,KAAK,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AACrG,OAAO,EAAgB,KAAK,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAE3E,OAAO,EAAiD,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAErG,OAAO,EAAyG,KAAK,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAG3J,KAAK,aAAa,GAAG,IAAI,CAAC,eAAe,EAAE,WAAW,GAAG,WAAW,GAAG,MAAM,GAAG,cAAc,GAAG,IAAI,CAAC,CAAC;AAIvG,iGAAiG;AACjG,wBAAgB,UAAU,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc,GAAG,UAAU,CAGpF;AACD,yEAAyE;AACzE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,aAAa,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE,EAAE,GAAG,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,GAAG,UAAU,GAAG,KAAK,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,GAAG,UAAU,CAMlN;AACD,MAAM,WAAW,qBAAqB;IAClC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IACxH,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,gBAAgB,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAClH,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,oBAAoB,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CACvK;AACD,oIAAoI;AACpI,wBAAsB,cAAc,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA2BhG;AAuBD,uGAAuG;AACvG,MAAM,WAAW,gBAAgB;IAAG,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC;IAAC,kBAAkB,CAAC,aAAa,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAAA;CAAE;AACvK,iHAAiH;AACjH,qBAAa,qBAAsB,SAAQ,KAAK;IAAG,SAAkB,IAAI,2BAA2B;CAAE;AACtG,MAAM,WAAW,qBAAqB;IAClC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC1I,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CACrE;AACD,yIAAyI;AACzI,wBAAsB,cAAc,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,UAAU,CAAC,CA+BxF"}