@meshwhisper/sdk 0.1.0

package/dist/namespace/index.d.ts

@@ -0,0 +1,155 @@
+import type { NamespaceConfig } from '../types.js';
+/**
+ * Manages a single namespace scope — all session-layer operations are
+ * confined to the namespace derived from the app's bundle ID, the
+ * developer's public key, and a salt.
+ *
+ * Transport-layer relaying is namespace-blind; a user in Namespace A
+ * cannot discover or contact users in Namespace B.
+ */
+export declare class NamespaceManager {
+    private readonly config;
+    private readonly namespaceId;
+    constructor(config: NamespaceConfig);
+    /**
+     * Returns the 256-bit namespace ID for this manager.
+     */
+    getNamespaceId(): Uint8Array;
+    /**
+     * Computes a 256-bit namespace ID: BLAKE3(appBundleId || developerPublicKey || salt).
+     */
+    static computeNamespaceId(appBundleId: string, developerPublicKey: Uint8Array, salt: Uint8Array): Uint8Array;
+    /**
+     * Checks whether a given namespace ID matches ours (constant-time comparison).
+     */
+    isInNamespace(otherNamespaceId: Uint8Array): boolean;
+    /**
+     * Computes an 8-byte destination hash: BLAKE3(publicKey || epochHour), truncated.
+     * If epochHour is omitted, the current epoch hour is used.
+     */
+    computeDestHash(publicKey: Uint8Array, epochHour?: number): Uint8Array;
+    /**
+     * Computes the destination hash for the current epoch hour.
+     */
+    computeCurrentDestHash(publicKey: Uint8Array): Uint8Array;
+    /**
+     * Computes the destination hash for the previous epoch hour.
+     */
+    computePreviousDestHash(publicKey: Uint8Array): Uint8Array;
+    /**
+     * Determines whether a received dest_hash targets our public key.
+     * Checks both the current and previous epoch hour to handle boundary conditions.
+     */
+    isMessageForUs(destHash: Uint8Array, ourPublicKey: Uint8Array): boolean;
+    /**
+     * Returns the current epoch hour: Math.floor(Date.now() / 3_600_000).
+     */
+    getCurrentEpochHour(): number;
+}
+/**
+ * Represents the local device's cryptographic identity.
+ *
+ * Internally stores an Ed25519 private key, from which:
+ *   - An X25519 public key is derived for key exchange and dest_hash computation
+ *   - Ed25519 signing/verification is performed directly
+ *
+ * The X25519 public key is what peers see and use to send us messages.
+ */
+export declare class LocalIdentity {
+    private readonly edPrivateKey;
+    private readonly edPublicKey;
+    private readonly xPublicKey;
+    private readonly xPrivateKey;
+    private ephemeralId;
+    private constructor();
+    /**
+     * Generates a brand-new identity with a random Ed25519 keypair.
+     */
+    static create(): LocalIdentity;
+    /**
+     * Restores an identity from an existing Ed25519 private key.
+     */
+    static fromPrivateKey(privateKey: Uint8Array): LocalIdentity;
+    /**
+     * Returns the X25519 public key (32 bytes) used for key exchange and
+     * destination hash computation.
+     */
+    getPublicKey(): Uint8Array;
+    /**
+     * Returns the Ed25519 public key (32 bytes) used for signature verification.
+     */
+    getEdPublicKey(): Uint8Array;
+    /**
+     * Returns the Ed25519 private key (32 bytes). Used only for identity persistence.
+     */
+    getEdPrivateKey(): Uint8Array;
+    /**
+     * Returns the X25519 private key (32 bytes) used for key exchange.
+     */
+    getPrivateKey(): Uint8Array;
+    /**
+     * Returns the current destination hash for this identity (8 bytes).
+     */
+    getDestHash(): Uint8Array;
+    /**
+     * Checks whether a received dest_hash matches this identity,
+     * covering both the current and previous epoch hour.
+     */
+    matchesDestHash(destHash: Uint8Array): boolean;
+    /**
+     * Signs arbitrary data with this identity's Ed25519 private key.
+     * Returns a 64-byte signature.
+     */
+    signData(data: Uint8Array): Uint8Array;
+    /**
+     * Verifies an Ed25519 signature against the given data and public key.
+     */
+    verifySignature(data: Uint8Array, signature: Uint8Array, publicKey: Uint8Array): boolean;
+    /**
+     * Returns the current 16-byte ephemeral sender ID.
+     */
+    generateEphemeralId(): Uint8Array;
+    /**
+     * Rotates the ephemeral sender ID to a new random value.
+     * Should be called periodically to limit linkability.
+     * Returns the new ephemeral ID.
+     */
+    rotateEphemeralId(): Uint8Array;
+}
+interface PeerEntry {
+    id: string;
+    publicKey: Uint8Array;
+}
+/**
+ * In-memory cache of known peer identities, enabling lookup by peer ID
+ * or by destination hash.
+ */
+export declare class PeerIdentityCache {
+    private readonly peers;
+    /**
+     * Registers a peer's public key (X25519).
+     */
+    addPeer(peerId: string, publicKey: Uint8Array): void;
+    /**
+     * Returns the public key for a known peer, or null if unknown.
+     */
+    getPeerPublicKey(peerId: string): Uint8Array | null;
+    /**
+     * Searches all known peers for one whose dest_hash matches the given value.
+     * If epochHour is provided, only that hour is checked; otherwise both the
+     * current and previous epoch hours are checked.
+     *
+     * Returns the peer ID if found, or null.
+     */
+    findPeerByDestHash(destHash: Uint8Array, epochHour?: number): string | null;
+    /**
+     * Removes a peer from the cache.
+     */
+    removePeer(peerId: string): void;
+    /**
+     * Returns all cached peers as an array.
+     */
+    getAllPeers(): Array<PeerEntry>;
+}
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/namespace/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/namespace/index.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAkBnD;;;;;;;GAOG;AACH,qBAAa,gBAAgB;IAGf,OAAO,CAAC,QAAQ,CAAC,MAAM;IAFnC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAa;gBAEZ,MAAM,EAAE,eAAe;IAUpD;;OAEG;IACH,cAAc,IAAI,UAAU;IAI5B;;OAEG;IACH,MAAM,CAAC,kBAAkB,CACvB,WAAW,EAAE,MAAM,EACnB,kBAAkB,EAAE,UAAU,EAC9B,IAAI,EAAE,UAAU,GACf,UAAU;IAIb;;OAEG;IACH,aAAa,CAAC,gBAAgB,EAAE,UAAU,GAAG,OAAO;IAMpD;;;OAGG;IACH,eAAe,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,UAAU;IAKtE;;OAEG;IACH,sBAAsB,CAAC,SAAS,EAAE,UAAU,GAAG,UAAU;IAIzD;;OAEG;IACH,uBAAuB,CAAC,SAAS,EAAE,UAAU,GAAG,UAAU;IAI1D;;;OAGG;IACH,cAAc,CAAC,QAAQ,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,GAAG,OAAO;IAQvE;;OAEG;IACH,mBAAmB,IAAI,MAAM;CAG9B;AAID;;;;;;;;GAQG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAa;IAC1C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAa;IACzC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAa;IACxC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAa;IACzC,OAAO,CAAC,WAAW,CAAa;IAEhC,OAAO;IAQP;;OAEG;IACH,MAAM,CAAC,MAAM,IAAI,aAAa;IAK9B;;OAEG;IACH,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,UAAU,GAAG,aAAa;IAO5D;;;OAGG;IACH,YAAY,IAAI,UAAU;IAI1B;;OAEG;IACH,cAAc,IAAI,UAAU;IAI5B;;OAEG;IACH,eAAe,IAAI,UAAU;IAI7B;;OAEG;IACH,aAAa,IAAI,UAAU;IAI3B;;OAEG;IACH,WAAW,IAAI,UAAU;IAIzB;;;OAGG;IACH,eAAe,CAAC,QAAQ,EAAE,UAAU,GAAG,OAAO;IAQ9C;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU;IAItC;;OAEG;IACH,eAAe,CACb,IAAI,EAAE,UAAU,EAChB,SAAS,EAAE,UAAU,EACrB,SAAS,EAAE,UAAU,GACpB,OAAO;IAUV;;OAEG;IACH,mBAAmB,IAAI,UAAU;IAIjC;;;;OAIG;IACH,iBAAiB,IAAI,UAAU;CAIhC;AAID,UAAU,SAAS;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,UAAU,CAAC;CACvB;AAED;;;GAGG;AACH,qBAAa,iBAAiB;IAC5B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAsC;IAE5D;;OAEG;IACH,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,GAAG,IAAI;IAIpD;;OAEG;IACH,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAInD;;;;;;OAMG;IACH,kBAAkB,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAiB3E;;OAEG;IACH,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAIhC;;OAEG;IACH,WAAW,IAAI,KAAK,CAAC,SAAS,CAAC;CAOhC"}

package/dist/namespace/index.js

@@ -0,0 +1,278 @@
+// ============================================================
+// MeshWhisper SDK — Namespace & Identity Module
+// Namespace isolation, destination hashing, local identity
+// management, ephemeral sender IDs, and peer identity cache.
+// ============================================================
+import { ed25519, edwardsToMontgomeryPub, edwardsToMontgomeryPriv } from '@noble/curves/ed25519';
+import { deriveNamespaceId, deriveDestHash, getCurrentEpochHour, randomBytes, } from '../crypto/index.js';
+// ---- Constants ----
+/** Destination hash length in bytes (truncated BLAKE3). */
+const DEST_HASH_LENGTH = 8;
+/** Ephemeral sender ID length in bytes. */
+const EPHEMERAL_ID_LENGTH = 16;
+// ---- NamespaceManager ----
+/**
+ * Manages a single namespace scope — all session-layer operations are
+ * confined to the namespace derived from the app's bundle ID, the
+ * developer's public key, and a salt.
+ *
+ * Transport-layer relaying is namespace-blind; a user in Namespace A
+ * cannot discover or contact users in Namespace B.
+ */
+export class NamespaceManager {
+    config;
+    namespaceId;
+    constructor(config) {
+        this.config = config;
+        this.namespaceId = NamespaceManager.computeNamespaceId(config.appBundleId, config.developerPublicKey, config.salt);
+    }
+    // ---- Namespace ID ----
+    /**
+     * Returns the 256-bit namespace ID for this manager.
+     */
+    getNamespaceId() {
+        return this.namespaceId;
+    }
+    /**
+     * Computes a 256-bit namespace ID: BLAKE3(appBundleId || developerPublicKey || salt).
+     */
+    static computeNamespaceId(appBundleId, developerPublicKey, salt) {
+        return deriveNamespaceId(appBundleId, developerPublicKey, salt);
+    }
+    /**
+     * Checks whether a given namespace ID matches ours (constant-time comparison).
+     */
+    isInNamespace(otherNamespaceId) {
+        return timingSafeEqual(this.namespaceId, otherNamespaceId);
+    }
+    // ---- Destination Hashing ----
+    /**
+     * Computes an 8-byte destination hash: BLAKE3(publicKey || epochHour), truncated.
+     * If epochHour is omitted, the current epoch hour is used.
+     */
+    computeDestHash(publicKey, epochHour) {
+        const hour = epochHour ?? getCurrentEpochHour();
+        return deriveDestHash(publicKey, hour);
+    }
+    /**
+     * Computes the destination hash for the current epoch hour.
+     */
+    computeCurrentDestHash(publicKey) {
+        return deriveDestHash(publicKey, getCurrentEpochHour());
+    }
+    /**
+     * Computes the destination hash for the previous epoch hour.
+     */
+    computePreviousDestHash(publicKey) {
+        return deriveDestHash(publicKey, getCurrentEpochHour() - 1);
+    }
+    /**
+     * Determines whether a received dest_hash targets our public key.
+     * Checks both the current and previous epoch hour to handle boundary conditions.
+     */
+    isMessageForUs(destHash, ourPublicKey) {
+        const currentHash = this.computeCurrentDestHash(ourPublicKey);
+        if (timingSafeEqual(currentHash, destHash))
+            return true;
+        const previousHash = this.computePreviousDestHash(ourPublicKey);
+        return timingSafeEqual(previousHash, destHash);
+    }
+    /**
+     * Returns the current epoch hour: Math.floor(Date.now() / 3_600_000).
+     */
+    getCurrentEpochHour() {
+        return getCurrentEpochHour();
+    }
+}
+// ---- LocalIdentity ----
+/**
+ * Represents the local device's cryptographic identity.
+ *
+ * Internally stores an Ed25519 private key, from which:
+ *   - An X25519 public key is derived for key exchange and dest_hash computation
+ *   - Ed25519 signing/verification is performed directly
+ *
+ * The X25519 public key is what peers see and use to send us messages.
+ */
+export class LocalIdentity {
+    edPrivateKey;
+    edPublicKey;
+    xPublicKey;
+    xPrivateKey;
+    ephemeralId;
+    constructor(edPrivateKey) {
+        this.edPrivateKey = edPrivateKey;
+        this.edPublicKey = ed25519.getPublicKey(edPrivateKey);
+        this.xPublicKey = edwardsToMontgomeryPub(this.edPublicKey);
+        this.xPrivateKey = edwardsToMontgomeryPriv(edPrivateKey);
+        this.ephemeralId = randomBytes(EPHEMERAL_ID_LENGTH);
+    }
+    /**
+     * Generates a brand-new identity with a random Ed25519 keypair.
+     */
+    static create() {
+        const privateKey = ed25519.utils.randomPrivateKey();
+        return new LocalIdentity(privateKey);
+    }
+    /**
+     * Restores an identity from an existing Ed25519 private key.
+     */
+    static fromPrivateKey(privateKey) {
+        if (privateKey.length !== 32) {
+            throw new RangeError('Ed25519 private key must be exactly 32 bytes');
+        }
+        return new LocalIdentity(privateKey);
+    }
+    /**
+     * Returns the X25519 public key (32 bytes) used for key exchange and
+     * destination hash computation.
+     */
+    getPublicKey() {
+        return this.xPublicKey;
+    }
+    /**
+     * Returns the Ed25519 public key (32 bytes) used for signature verification.
+     */
+    getEdPublicKey() {
+        return this.edPublicKey;
+    }
+    /**
+     * Returns the Ed25519 private key (32 bytes). Used only for identity persistence.
+     */
+    getEdPrivateKey() {
+        return this.edPrivateKey;
+    }
+    /**
+     * Returns the X25519 private key (32 bytes) used for key exchange.
+     */
+    getPrivateKey() {
+        return this.xPrivateKey;
+    }
+    /**
+     * Returns the current destination hash for this identity (8 bytes).
+     */
+    getDestHash() {
+        return deriveDestHash(this.xPublicKey, getCurrentEpochHour());
+    }
+    /**
+     * Checks whether a received dest_hash matches this identity,
+     * covering both the current and previous epoch hour.
+     */
+    matchesDestHash(destHash) {
+        const currentHash = deriveDestHash(this.xPublicKey, getCurrentEpochHour());
+        if (timingSafeEqual(currentHash, destHash))
+            return true;
+        const previousHash = deriveDestHash(this.xPublicKey, getCurrentEpochHour() - 1);
+        return timingSafeEqual(previousHash, destHash);
+    }
+    /**
+     * Signs arbitrary data with this identity's Ed25519 private key.
+     * Returns a 64-byte signature.
+     */
+    signData(data) {
+        return ed25519.sign(data, this.edPrivateKey);
+    }
+    /**
+     * Verifies an Ed25519 signature against the given data and public key.
+     */
+    verifySignature(data, signature, publicKey) {
+        try {
+            return ed25519.verify(signature, data, publicKey);
+        }
+        catch {
+            return false;
+        }
+    }
+    // ---- Ephemeral Sender ID ----
+    /**
+     * Returns the current 16-byte ephemeral sender ID.
+     */
+    generateEphemeralId() {
+        return this.ephemeralId;
+    }
+    /**
+     * Rotates the ephemeral sender ID to a new random value.
+     * Should be called periodically to limit linkability.
+     * Returns the new ephemeral ID.
+     */
+    rotateEphemeralId() {
+        this.ephemeralId = randomBytes(EPHEMERAL_ID_LENGTH);
+        return this.ephemeralId;
+    }
+}
+/**
+ * In-memory cache of known peer identities, enabling lookup by peer ID
+ * or by destination hash.
+ */
+export class PeerIdentityCache {
+    peers = new Map();
+    /**
+     * Registers a peer's public key (X25519).
+     */
+    addPeer(peerId, publicKey) {
+        this.peers.set(peerId, publicKey);
+    }
+    /**
+     * Returns the public key for a known peer, or null if unknown.
+     */
+    getPeerPublicKey(peerId) {
+        return this.peers.get(peerId) ?? null;
+    }
+    /**
+     * Searches all known peers for one whose dest_hash matches the given value.
+     * If epochHour is provided, only that hour is checked; otherwise both the
+     * current and previous epoch hours are checked.
+     *
+     * Returns the peer ID if found, or null.
+     */
+    findPeerByDestHash(destHash, epochHour) {
+        for (const [peerId, publicKey] of this.peers) {
+            if (epochHour !== undefined) {
+                const hash = deriveDestHash(publicKey, epochHour);
+                if (timingSafeEqual(hash, destHash))
+                    return peerId;
+            }
+            else {
+                const currentHour = getCurrentEpochHour();
+                const currentHash = deriveDestHash(publicKey, currentHour);
+                if (timingSafeEqual(currentHash, destHash))
+                    return peerId;
+                const previousHash = deriveDestHash(publicKey, currentHour - 1);
+                if (timingSafeEqual(previousHash, destHash))
+                    return peerId;
+            }
+        }
+        return null;
+    }
+    /**
+     * Removes a peer from the cache.
+     */
+    removePeer(peerId) {
+        this.peers.delete(peerId);
+    }
+    /**
+     * Returns all cached peers as an array.
+     */
+    getAllPeers() {
+        const result = [];
+        for (const [id, publicKey] of this.peers) {
+            result.push({ id, publicKey });
+        }
+        return result;
+    }
+}
+// ---- Helpers ----
+/**
+ * Constant-time comparison of two Uint8Arrays.
+ * Returns true only if both arrays have the same length and identical contents.
+ */
+function timingSafeEqual(a, b) {
+    if (a.length !== b.length)
+        return false;
+    let diff = 0;
+    for (let i = 0; i < a.length; i++) {
+        diff |= a[i] ^ b[i];
+    }
+    return diff === 0;
+}
+//# sourceMappingURL=index.js.map

package/dist/namespace/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/namespace/index.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,gDAAgD;AAChD,2DAA2D;AAC3D,6DAA6D;AAC7D,+DAA+D;AAE/D,OAAO,EAAE,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAEjG,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,mBAAmB,EACnB,WAAW,GACZ,MAAM,oBAAoB,CAAC;AAE5B,sBAAsB;AAEtB,2DAA2D;AAC3D,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAE3B,2CAA2C;AAC3C,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAE/B,6BAA6B;AAE7B;;;;;;;GAOG;AACH,MAAM,OAAO,gBAAgB;IAGE;IAFZ,WAAW,CAAa;IAEzC,YAA6B,MAAuB;QAAvB,WAAM,GAAN,MAAM,CAAiB;QAClD,IAAI,CAAC,WAAW,GAAG,gBAAgB,CAAC,kBAAkB,CACpD,MAAM,CAAC,WAAW,EAClB,MAAM,CAAC,kBAAkB,EACzB,MAAM,CAAC,IAAI,CACZ,CAAC;IACJ,CAAC;IAED,yBAAyB;IAEzB;;OAEG;IACH,cAAc;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,kBAAkB,CACvB,WAAmB,EACnB,kBAA8B,EAC9B,IAAgB;QAEhB,OAAO,iBAAiB,CAAC,WAAW,EAAE,kBAAkB,EAAE,IAAI,CAAC,CAAC;IAClE,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,gBAA4B;QACxC,OAAO,eAAe,CAAC,IAAI,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;IAC7D,CAAC;IAED,gCAAgC;IAEhC;;;OAGG;IACH,eAAe,CAAC,SAAqB,EAAE,SAAkB;QACvD,MAAM,IAAI,GAAG,SAAS,IAAI,mBAAmB,EAAE,CAAC;QAChD,OAAO,cAAc,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,sBAAsB,CAAC,SAAqB;QAC1C,OAAO,cAAc,CAAC,SAAS,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,uBAAuB,CAAC,SAAqB;QAC3C,OAAO,cAAc,CAAC,SAAS,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED;;;OAGG;IACH,cAAc,CAAC,QAAoB,EAAE,YAAwB;QAC3D,MAAM,WAAW,GAAG,IAAI,CAAC,sBAAsB,CAAC,YAAY,CAAC,CAAC;QAC9D,IAAI,eAAe,CAAC,WAAW,EAAE,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAExD,MAAM,YAAY,GAAG,IAAI,CAAC,uBAAuB,CAAC,YAAY,CAAC,CAAC;QAChE,OAAO,eAAe,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACjD,CAAC;IAED;;OAEG;IACH,mBAAmB;QACjB,OAAO,mBAAmB,EAAE,CAAC;IAC/B,CAAC;CACF;AAED,0BAA0B;AAE1B;;;;;;;;GAQG;AACH,MAAM,OAAO,aAAa;IACP,YAAY,CAAa;IACzB,WAAW,CAAa;IACxB,UAAU,CAAa;IACvB,WAAW,CAAa;IACjC,WAAW,CAAa;IAEhC,YAAoB,YAAwB;QAC1C,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QACtD,IAAI,CAAC,UAAU,GAAG,sBAAsB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC3D,IAAI,CAAC,WAAW,GAAG,uBAAuB,CAAC,YAAY,CAAC,CAAC;QACzD,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC,mBAAmB,CAAC,CAAC;IACtD,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,MAAM;QACX,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;QACpD,OAAO,IAAI,aAAa,CAAC,UAAU,CAAC,CAAC;IACvC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,cAAc,CAAC,UAAsB;QAC1C,IAAI,UAAU,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YAC7B,MAAM,IAAI,UAAU,CAAC,8CAA8C,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,IAAI,aAAa,CAAC,UAAU,CAAC,CAAC;IACvC,CAAC;IAED;;;OAGG;IACH,YAAY;QACV,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,eAAe;QACb,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,aAAa;QACX,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,cAAc,CAAC,IAAI,CAAC,UAAU,EAAE,mBAAmB,EAAE,CAAC,CAAC;IAChE,CAAC;IAED;;;OAGG;IACH,eAAe,CAAC,QAAoB;QAClC,MAAM,WAAW,GAAG,cAAc,CAAC,IAAI,CAAC,UAAU,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC3E,IAAI,eAAe,CAAC,WAAW,EAAE,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAExD,MAAM,YAAY,GAAG,cAAc,CAAC,IAAI,CAAC,UAAU,EAAE,mBAAmB,EAAE,GAAG,CAAC,CAAC,CAAC;QAChF,OAAO,eAAe,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;IACjD,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAC,IAAgB;QACvB,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,eAAe,CACb,IAAgB,EAChB,SAAqB,EACrB,SAAqB;QAErB,IAAI,CAAC;YACH,OAAO,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,gCAAgC;IAEhC;;OAEG;IACH,mBAAmB;QACjB,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;;;OAIG;IACH,iBAAiB;QACf,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC,mBAAmB,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;CACF;AASD;;;GAGG;AACH,MAAM,OAAO,iBAAiB;IACX,KAAK,GAA4B,IAAI,GAAG,EAAE,CAAC;IAE5D;;OAEG;IACH,OAAO,CAAC,MAAc,EAAE,SAAqB;QAC3C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,MAAc;QAC7B,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC;IACxC,CAAC;IAED;;;;;;OAMG;IACH,kBAAkB,CAAC,QAAoB,EAAE,SAAkB;QACzD,KAAK,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC7C,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,IAAI,GAAG,cAAc,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;gBAClD,IAAI,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC;oBAAE,OAAO,MAAM,CAAC;YACrD,CAAC;iBAAM,CAAC;gBACN,MAAM,WAAW,GAAG,mBAAmB,EAAE,CAAC;gBAC1C,MAAM,WAAW,GAAG,cAAc,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;gBAC3D,IAAI,eAAe,CAAC,WAAW,EAAE,QAAQ,CAAC;oBAAE,OAAO,MAAM,CAAC;gBAE1D,MAAM,YAAY,GAAG,cAAc,CAAC,SAAS,EAAE,WAAW,GAAG,CAAC,CAAC,CAAC;gBAChE,IAAI,eAAe,CAAC,YAAY,EAAE,QAAQ,CAAC;oBAAE,OAAO,MAAM,CAAC;YAC7D,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,MAAc;QACvB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,WAAW;QACT,MAAM,MAAM,GAAqB,EAAE,CAAC;QACpC,KAAK,MAAM,CAAC,EAAE,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACzC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;QACjC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAED,oBAAoB;AAEpB;;;GAGG;AACH,SAAS,eAAe,CAAC,CAAa,EAAE,CAAa;IACnD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IACxB,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,CAAC;AACpB,CAAC"}

package/dist/node/index.d.ts

@@ -0,0 +1,4 @@
+export * from '../index.js';
+export { NodeStorage } from '../persistence/node-storage.js';
+export { NodeTransport } from '../transport/node/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/node/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/node/index.ts"],"names":[],"mappings":"AAgBA,cAAc,aAAa,CAAC;AAC5B,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/node/index.js

@@ -0,0 +1,19 @@
+// ============================================================
+// MeshWhisper SDK — Node.js entry point
+// @meshwhisper/sdk/node
+//
+// Re-exports everything from the main SDK plus Node.js-specific
+// storage and transport implementations.
+//
+// Usage:
+//   import { MeshWhisper, NodeStorage } from '@meshwhisper/sdk/node';
+//
+//   const mw = await MeshWhisper.init({
+//     namespace: 'com.example.app',
+//     storage: new NodeStorage('./data'),
+//   });
+// ============================================================
+export * from '../index.js';
+export { NodeStorage } from '../persistence/node-storage.js';
+export { NodeTransport } from '../transport/node/index.js';
+//# sourceMappingURL=index.js.map

package/dist/node/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/node/index.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,wCAAwC;AACxC,wBAAwB;AACxB,EAAE;AACF,gEAAgE;AAChE,yCAAyC;AACzC,EAAE;AACF,SAAS;AACT,sEAAsE;AACtE,EAAE;AACF,wCAAwC;AACxC,oCAAoC;AACpC,0CAA0C;AAC1C,QAAQ;AACR,+DAA+D;AAE/D,cAAc,aAAa,CAAC;AAC5B,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/packet/index.d.ts

@@ -0,0 +1,63 @@
+import { Packet } from '../types.js';
+/** Current protocol wire version. */
+export declare const PROTOCOL_VERSION = 1;
+/** Fixed header size in bytes (version + flags + dest_hash + sender_eph_id + ttl + payload_length). */
+export declare const HEADER_SIZE = 29;
+/** Maximum hop count. */
+export declare const MAX_TTL = 7;
+/** Maximum encrypted payload size (uint16 max). */
+export declare const MAX_PAYLOAD_SIZE = 65535;
+/**
+ * Serialize a {@link Packet} into its binary wire representation.
+ *
+ * Layout (29-byte header + variable payload):
+ * | version (1) | flags (1) | dest_hash (8) | sender_ephemeral_id (16) | ttl (1) | payload_length (2 BE) | encrypted_payload (N) |
+ */
+export declare function encodePacket(packet: Packet): Uint8Array;
+/**
+ * Deserialize a binary buffer into a {@link Packet}.
+ *
+ * @throws on malformed input (too short, wrong version, invalid flags, length mismatch).
+ */
+export declare function decodePacket(data: Uint8Array): Packet;
+/**
+ * Compress a plaintext payload with LZ4 (frame format).
+ */
+export declare function compressPayload(plaintext: Uint8Array): Uint8Array;
+/**
+ * Decompress an LZ4 compressed payload back to plaintext.
+ */
+export declare function decompressPayload(compressed: Uint8Array): Uint8Array;
+/**
+ * Build a DATA packet.
+ *
+ * @param destHash          8-byte truncated BLAKE3 destination hash
+ * @param senderEphId       16-byte rotating ephemeral sender identifier
+ * @param payload           Encrypted payload bytes
+ * @param ttl               Hop count (0-7, defaults to {@link MAX_TTL})
+ */
+export declare function createDataPacket(destHash: Uint8Array, senderEphId: Uint8Array, payload: Uint8Array, ttl?: number): Packet;
+/**
+ * Build an ACK packet (ttl fixed at 0 since ACKs are single-hop).
+ */
+export declare function createAckPacket(destHash: Uint8Array, senderEphId: Uint8Array, ackPayload: Uint8Array): Packet;
+/**
+ * Build a CHAFF (cover-traffic) packet with random destination and payload.
+ *
+ * The payload length is randomly chosen between 32 and 256 bytes to mimic
+ * realistic traffic without being trivially distinguishable.
+ */
+export declare function createChaffPacket(senderEphId: Uint8Array): Packet;
+/**
+ * Build a ROUTE_REQUEST packet.
+ */
+export declare function createRouteRequestPacket(destHash: Uint8Array, senderEphId: Uint8Array, requestPayload: Uint8Array): Packet;
+/**
+ * Build a ROUTE_OFFER packet.
+ */
+export declare function createRouteOfferPacket(destHash: Uint8Array, senderEphId: Uint8Array, offerPayload: Uint8Array): Packet;
+/**
+ * Build a HANDSHAKE packet.
+ */
+export declare function createHandshakePacket(destHash: Uint8Array, senderEphId: Uint8Array, handshakePayload: Uint8Array): Packet;
+//# sourceMappingURL=index.d.ts.map

package/dist/packet/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/packet/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,MAAM,EAAe,MAAM,aAAa,CAAC;AAQlD,qCAAqC;AACrC,eAAO,MAAM,gBAAgB,IAAO,CAAC;AAErC,uGAAuG;AACvG,eAAO,MAAM,WAAW,KAAK,CAAC;AAE9B,yBAAyB;AACzB,eAAO,MAAM,OAAO,IAAI,CAAC;AAEzB,mDAAmD;AACnD,eAAO,MAAM,gBAAgB,QAAQ,CAAC;AAyCtC;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAsCvD;AAMD;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,CAgDrD;AAMD;;GAEG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,UAAU,GAAG,UAAU,CAOjE;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,UAAU,EAAE,UAAU,GAAG,UAAU,CAMpE;AAMD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,UAAU,EACpB,WAAW,EAAE,UAAU,EACvB,OAAO,EAAE,UAAU,EACnB,GAAG,GAAE,MAAgB,GACpB,MAAM,CAER;AAED;;GAEG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,UAAU,EACpB,WAAW,EAAE,UAAU,EACvB,UAAU,EAAE,UAAU,GACrB,MAAM,CAER;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,UAAU,GAAG,MAAM,CAKjE;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,UAAU,EACpB,WAAW,EAAE,UAAU,EACvB,cAAc,EAAE,UAAU,GACzB,MAAM,CAER;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,UAAU,EACpB,WAAW,EAAE,UAAU,EACvB,YAAY,EAAE,UAAU,GACvB,MAAM,CAER;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,UAAU,EACpB,WAAW,EAAE,UAAU,EACvB,gBAAgB,EAAE,UAAU,GAC3B,MAAM,CAER"}