@muhkoo/connect 0.7.0-alpha.3 → 0.7.0-alpha.5

package/README.md

@@ -142,9 +142,10 @@ const client = new Client({
 const user = await client.auth.zk.login("alice", "correct horse battery staple");
 //    └ { username, commitment }
 
-// Storage — per-user persistent KV (collection + id), encrypted at rest.
-await client.storage.set("todos", "t1", { title: "Buy groceries", completed: false });
-const todo = await client.storage.get("todos", "t1");
+// KV — per-user persistent key/value (collection + id); client-side encrypted,
+// the server stores only ciphertext.
+await client.kv.set("todos", "t1", { title: "Buy groceries", completed: false });
+const todo = await client.kv.get("todos", "t1");
 const ids  = await client.storage.list("todos");
 await client.storage.delete("todos", "t1");
 
@@ -169,9 +170,12 @@ online).
 message once with a shared group key so the server can persist + replay it.
 `createChannel(name)` mints + registers a channel (you become its first
 key-holder); `joinChannel(name)` resolves an existing one and is admitted by the
-app's **keeper** — a trusted, always-available member that re-issues the group
-key — so a channel is joinable even when no one else is online. The relay stays
-blind (it only ever sees opaque, ECIES-wrapped key blobs). The space handle was
+app's **keeper** — a server-side process (the app's Durable Object) that holds
+the channel's group key and re-issues it to newcomers — so a channel is joinable
+even when no human member is online. The message **relay** stays blind (it only
+ever sees opaque, ECIES-wrapped key blobs); the **keeper** does hold group keys,
+so channels are *relay-blind*, not fully server-blind. (Enabling a server-side
+agent on a channel likewise gives that agent the group key.) The space handle was
 once `Room`; that name is still exported as an alias, and `client.message.room()`
 returns the same handle.
 
@@ -459,12 +463,6 @@ yarn lint               # eslint ./src
   (true for all of the above; on CF Workers, pre-compile via wrangler's
   `.wasm` import if you want to skip startup cost).
 
-## Related
-
-- [`muhkoo/accelerator`](https://github.com/muhkoo/accelerator) — the CF
-  Workers + DOs backend this SDK targets, including the personal-space DO,
-  message-bus DO, and the bn128.wasm-driven `verifyZkAuthProof`.
-
 ## License
 
-GPL-3.0 — see `LICENSE`.
+MIT — see `LICENSE`.

package/dist/browser/index.js

@@ -1807,16 +1807,15 @@ class DoubleRatchetManager {
     }
     async registerZK(clientId, secret, salt, ecdsaPub) {
         await this._authenticator.initializeZK();
-        console.log(`Registering ZK for ${clientId}...`);
-        console.log('ECDSA Public Key:', ecdsaPub);
         const ecdsaJwk = await crypto.subtle.exportKey('jwk', ecdsaPub);
         const ecdsaHex = toHex(fromBase64Url(ecdsaJwk.x)).slice(0, 64);
         const ecdsaPubField = new Field(BigInt('0x' + ecdsaHex));
         const ecdsaPubHash = await Poseidon.hash([ecdsaPubField]);
         const commitment = await Poseidon.hash([secret, salt, ecdsaPubHash]);
-        console.log(`Commitment for ${clientId}:`, { commitment, salt });
         this.registeredUsers.set(clientId, { commitment, salt });
-        appLogger.debug(`Registered ${clientId}: commitment=${commitment.toString()}, salt=${salt.toString()}`);
+        // NB: never log `secret`, `salt`, or `commitment` — `salt` is a private
+        // witness for the ZK circuit and `commitment` is the user's stable id.
+        appLogger.debug(`Registered ZK identity for ${clientId}`);
     }
     async performHandshake(senderId, recipientId, zkProof, publicInput, clientPublicKey, // ECDH pub for session
     clientAuthPublicKey, // ECDSA pub for auth
@@ -4892,7 +4891,7 @@ function base64UrlDecode(s) {
  * expect (and isn't serving a stale cached bundle). Keep this in sync with
  * `package.json` `version`.
  */
-const VERSION = "0.7.0-alpha.3";
+const VERSION = "0.7.0-alpha.4";
 
 /**
  * `HttpClient` — the one place the unified {@link Client} talks to the
@@ -4928,6 +4927,8 @@ class HttpError extends Error {
 }
 class HttpClient {
     baseUrl;
+    /** Origin of {@link baseUrl} — credentials are only attached same-origin. */
+    baseOrigin;
     apiKey;
     getSessionToken;
     onUnauthorized;
@@ -4936,6 +4937,12 @@ class HttpClient {
         if (!opts?.baseUrl)
             throw new Error("HttpClient: `baseUrl` is required");
         this.baseUrl = opts.baseUrl.replace(/\/+$/, "");
+        try {
+            this.baseOrigin = new URL(this.baseUrl).origin;
+        }
+        catch {
+            this.baseOrigin = "";
+        }
         this.apiKey = opts.apiKey ?? null;
         this.getSessionToken = opts.getSessionToken ?? (() => null);
         this.onUnauthorized = opts.onUnauthorized ?? null;
@@ -4952,13 +4959,34 @@ class HttpClient {
      */
     fetch = (input, init) => {
         const headers = new Headers(init?.headers);
-        if (this.apiKey)
-            headers.set("X-Muhkoo-Key", this.apiKey);
-        const token = this.getSessionToken();
-        if (token)
-            headers.set("X-Muhkoo-Session", token);
+        // Only attach credentials when the request stays on the accelerator's
+        // origin. An absolute URL pointing elsewhere (e.g. a caller-supplied or
+        // server-reflected path that escapes `baseUrl`) must NOT receive the app
+        // key or session token, or it becomes a token-exfiltration vector.
+        if (this.isSameOrigin(input)) {
+            if (this.apiKey)
+                headers.set("X-Muhkoo-Key", this.apiKey);
+            const token = this.getSessionToken();
+            if (token)
+                headers.set("X-Muhkoo-Session", token);
+        }
         return this.fetchFn(input, { ...init, headers });
     };
+    /** True when `input` resolves to {@link baseOrigin} (relative URLs always do). */
+    isSameOrigin(input) {
+        try {
+            const urlStr = typeof input === "string" ? input
+                : input instanceof URL ? input.href
+                    : input.url;
+            // Relative URLs are resolved against baseUrl downstream → same origin.
+            if (!/^https?:\/\//i.test(urlStr))
+                return true;
+            return new URL(urlStr).origin === this.baseOrigin;
+        }
+        catch {
+            return true;
+        }
+    }
     // -------------------------------------------------------------------------
     // JSON convenience helpers (path is relative to baseUrl)
     // -------------------------------------------------------------------------
@@ -5452,6 +5480,19 @@ class HostedAuth {
             this.location().assign(url);
         return url;
     }
+    /**
+     * (App side) Send the user to centralized account & security management on
+     * the hosted page (auth.muhkoo.dev/security) — manage passkeys, recovery
+     * phrase, email, Google, change password, and remove login methods, all in
+     * one place. `returnUri` (default: the current URL) gives the hosted page a
+     * "Back to app" target. Redirects the browser; resolves to the URL.
+     */
+    async manageAccount(opts = {}) {
+        const ret = opts.returnUri ?? this.location().href;
+        const url = `${this.deps.authBaseUrl}/security?` + new URLSearchParams({ return: ret }).toString();
+        this.location().assign(url);
+        return url;
+    }
     /** Whether the current URL looks like a hosted-auth callback (has code + state). */
     isCallback() {
         try {