@msssystems/mss-link-sdk 0.1.5 → 0.1.6

package/dist/client/index.d.ts

@@ -3,6 +3,7 @@ export * from './client-options';
 export * from './decryption-errors';
 export * from './local-crypto-health';
 export * from './local-crypto-health.contracts';
+export * from './media-crypto.contracts';
 export * from './media-message.contracts';
 export * from './media-message-metadata';
 export * from './message.contracts';

package/dist/client/index.js

@@ -3,6 +3,7 @@ export * from './client-options';
 export * from './decryption-errors';
 export * from './local-crypto-health';
 export * from './local-crypto-health.contracts';
+export * from './media-crypto.contracts';
 export * from './media-message.contracts';
 export * from './media-message-metadata';
 export * from './message.contracts';

package/dist/client/media-crypto.contracts.d.ts

@@ -0,0 +1,28 @@
+import type { MediaMessageAttachmentEncryptionInput, MediaMessageAttachmentInput, MediaMessageAttachmentMetadata } from './media-message.contracts';
+export interface EncryptMediaBlobInput {
+    assetId: string;
+    blob: Blob;
+    mimeType: string;
+    size: string | number;
+    originalName?: string;
+    uploadedAt?: string;
+}
+export interface EncryptedMediaBlobResult {
+    encryptedBlob: Blob;
+    attachment: MediaMessageAttachmentInput;
+    encryption: MediaMessageAttachmentEncryptionInput;
+}
+export interface DecryptMediaBlobInput {
+    encryptedBlob: Blob;
+    metadata: MediaMessageAttachmentMetadata;
+}
+export interface DecryptedMediaBlobResult {
+    blob: Blob;
+    fileName?: string;
+    mimeType: string;
+}
+export interface WasmEncryptedMediaBytes {
+    ciphertext: Uint8Array;
+    key: string;
+    nonce: string;
+}

package/dist/client/media-crypto.contracts.js

@@ -0,0 +1 @@
+export {};

package/dist/client/media-message-metadata.js

@@ -22,6 +22,9 @@ export function serializeMediaMessageMetadata(payload) {
                 ? { originalName: attachment.originalName }
                 : {}),
             ...(attachment.uploadedAt ? { uploadedAt: attachment.uploadedAt } : {}),
+            ...(attachment.encryption
+                ? { encryption: serializeAttachmentEncryption(attachment.encryption) }
+                : {}),
         })),
         ...(payload.caption ? { caption: payload.caption } : {}),
     });
@@ -52,5 +55,39 @@ function normalizeAttachment(attachment) {
         ...(attachment.uploadedAt?.trim()
             ? { uploadedAt: attachment.uploadedAt.trim() }
             : {}),
+        ...(attachment.encryption
+            ? { encryption: normalizeAttachmentEncryption(attachment.encryption) }
+            : {}),
+    };
+}
+function normalizeAttachmentEncryption(encryption) {
+    const keyId = encryption.keyId?.trim();
+    const nonce = encryption.nonce?.trim();
+    const wrappedKey = encryption.wrappedKey?.trim();
+    const algorithm = encryption.algorithm ?? 'AES-256-GCM';
+    if (algorithm !== 'AES-256-GCM') {
+        throw new Error('Unsupported media encryption algorithm.');
+    }
+    if (!nonce) {
+        throw new Error('Media encryption nonce is required.');
+    }
+    if (!wrappedKey) {
+        throw new Error('Media encryption wrappedKey is required.');
+    }
+    return {
+        schema: 'mss.link.media-encryption.v1',
+        algorithm,
+        ...(keyId ? { keyId } : {}),
+        nonce,
+        wrappedKey,
+    };
+}
+function serializeAttachmentEncryption(encryption) {
+    return {
+        schema: 'mss.link.media-encryption.v1',
+        algorithm: encryption.algorithm,
+        ...(encryption.keyId ? { keyId: encryption.keyId } : {}),
+        nonce: encryption.nonce,
+        wrappedKey: encryption.wrappedKey,
     };
 }

package/dist/client/media-message.contracts.d.ts

@@ -4,6 +4,14 @@ export interface MediaMessageAttachmentInput {
     size: string | number;
     originalName?: string;
     uploadedAt?: string;
+    encryption?: MediaMessageAttachmentEncryptionInput;
+}
+export interface MediaMessageAttachmentEncryptionInput {
+    schema?: 'mss.link.media-encryption.v1';
+    keyId?: string;
+    nonce?: string;
+    wrappedKey?: string;
+    algorithm?: 'AES-256-GCM';
 }
 export interface SendMediaMessageParams {
     chatId: string;
@@ -17,6 +25,14 @@ export interface MediaMessageAttachmentMetadata {
     size: string;
     originalName?: string;
     uploadedAt?: string;
+    encryption?: MediaMessageAttachmentEncryptionMetadata;
+}
+export interface MediaMessageAttachmentEncryptionMetadata {
+    schema: 'mss.link.media-encryption.v1';
+    algorithm: 'AES-256-GCM';
+    keyId?: string;
+    nonce: string;
+    wrappedKey: string;
 }
 export interface MediaMessageMetadataPayload {
     schema: 'mss.link.media-message.v1';

package/dist/client/mss-link-browser-client.d.ts

@@ -1,5 +1,6 @@
 import type { MssLinkBrowserClientOptions } from './client-options';
 import type { LocalCryptoHealth } from './local-crypto-health.contracts';
+import type { DecryptMediaBlobInput, DecryptedMediaBlobResult, EncryptedMediaBlobResult, EncryptMediaBlobInput } from './media-crypto.contracts';
 import type { SendMediaMessageParams } from './media-message.contracts';
 import type { DecryptedMessage } from './message.contracts';
 export declare class MssLinkBrowserClient {
@@ -26,6 +27,8 @@ export declare class MssLinkBrowserClient {
         kind?: string;
     }): Promise<string>;
     sendMediaMessage(params: SendMediaMessageParams): Promise<string>;
+    encryptMediaBlob(input: EncryptMediaBlobInput): Promise<EncryptedMediaBlobResult>;
+    decryptMediaBlob(input: DecryptMediaBlobInput): Promise<DecryptedMediaBlobResult>;
     syncMessages(): Promise<void>;
     getLocalMessages(chatId: string): Promise<DecryptedMessage[]>;
     reset(): void;

package/dist/client/mss-link-browser-client.js

@@ -80,6 +80,76 @@ export class MssLinkBrowserClient {
             throw normalizeLocalCryptoError(error);
         }
     }
+    async encryptMediaBlob(input) {
+        try {
+            const plaintext = new Uint8Array(await input.blob.arrayBuffer());
+            const encrypted = await this.queue.run(async () => {
+                const module = await this.loadWasmModule();
+                return module.encryptMediaBytes(plaintext);
+            });
+            const encryptedBytes = new Uint8Array(encrypted.ciphertext);
+            return {
+                encryptedBlob: new Blob([encryptedBytes], {
+                    type: 'application/octet-stream',
+                }),
+                encryption: {
+                    schema: 'mss.link.media-encryption.v1',
+                    algorithm: 'AES-256-GCM',
+                    keyId: input.assetId,
+                    nonce: encrypted.nonce,
+                    wrappedKey: encrypted.key,
+                },
+                attachment: {
+                    assetId: input.assetId,
+                    mimeType: input.mimeType,
+                    size: input.size,
+                    ...(input.originalName ? { originalName: input.originalName } : {}),
+                    ...(input.uploadedAt ? { uploadedAt: input.uploadedAt } : {}),
+                    encryption: {
+                        schema: 'mss.link.media-encryption.v1',
+                        algorithm: 'AES-256-GCM',
+                        keyId: input.assetId,
+                        nonce: encrypted.nonce,
+                        wrappedKey: encrypted.key,
+                    },
+                },
+            };
+        }
+        catch (error) {
+            throw normalizeLocalCryptoError(error);
+        }
+    }
+    async decryptMediaBlob(input) {
+        const encryption = input.metadata.encryption;
+        if (!encryption) {
+            return {
+                blob: input.encryptedBlob,
+                mimeType: input.metadata.mimeType,
+                ...(input.metadata.originalName
+                    ? { fileName: input.metadata.originalName }
+                    : {}),
+            };
+        }
+        try {
+            const ciphertext = new Uint8Array(await input.encryptedBlob.arrayBuffer());
+            const plaintext = await this.queue.run(async () => {
+                const module = await this.loadWasmModule();
+                return module.decryptMediaBytes(ciphertext, encryption.wrappedKey, encryption.nonce);
+            });
+            return {
+                blob: new Blob([new Uint8Array(plaintext)], {
+                    type: input.metadata.mimeType,
+                }),
+                mimeType: input.metadata.mimeType,
+                ...(input.metadata.originalName
+                    ? { fileName: input.metadata.originalName }
+                    : {}),
+            };
+        }
+        catch (error) {
+            throw normalizeLocalCryptoError(error);
+        }
+    }
     async syncMessages() {
         try {
             await this.runWithClient((client) => client.syncMessages());

package/dist/client/wasm-client.types.d.ts

@@ -1,9 +1,12 @@
 import type { WasmMssClient } from '@msssystems/mss-crypto-wasm';
+import type { WasmEncryptedMediaBytes } from './media-crypto.contracts';
 export interface MssLinkWasmClient extends WasmMssClient {
     sendMediaMessage(chatId: string, targetUserId: string, metadataJson: string, mediaAssetIds: string[]): Promise<string>;
 }
 export type WasmMssClientConstructor = new (userId: string, deviceId: number, apiBaseUrl: string) => MssLinkWasmClient;
 export interface MssCryptoWasmModule {
     WasmMssClient: WasmMssClientConstructor;
+    encryptMediaBytes(plaintext: Uint8Array): WasmEncryptedMediaBytes;
+    decryptMediaBytes(ciphertext: Uint8Array, key: string, nonce: string): Uint8Array;
 }
 export type WasmMssClientInstance = MssLinkWasmClient;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@msssystems/mss-link-sdk",
-  "version": "0.1.5",
+  "version": "0.1.6",
   "description": "Official managed application SDK for MSS ecosystem",
   "type": "module",
   "main": "./dist/index.js",