@novasamatech/statement-store 0.9.3 → 0.9.4

package/dist/session/session.spec.js

@@ -5,11 +5,14 @@ import { Struct, str } from 'scale-ts';
 import { describe, expect, it, vi } from 'vitest';
 import { createInMemoryStatementStore } from '../adapter/inMemory.js';
 import { AccountFullError, ExpiryTooLowError } from '../adapter/types.js';
+import { createSr25519Secret } from '../crypto.js';
 import { createAccountId, createLocalSessionAccount, createRemoteSessionAccount } from '../model/sessionAccount.js';
 import { STATEMENT_OVERHEAD } from './core.js';
+import { createEncryption } from './encyption.js';
 import { DecodingError, UnknownError } from './error.js';
 import { StatementData } from './scale/statementData.js';
 import { createSession } from './session.js';
+import { createSr25519Prover } from './statementProver.js';
 // Real signature work belongs in statementProver tests; this stub stamps a
 // non-empty proof so submitted statements are well-formed.
 const mockProver = {
@@ -133,13 +136,17 @@ const localB = createLocalSessionAccount(createAccountId(new Uint8Array(32).fill
 const remoteB = createRemoteSessionAccount(createAccountId(new Uint8Array(32).fill(2)), new Uint8Array(32).fill(22));
 const RemoteMsg = Struct({ id: str, kind: str, respondingTo: str, body: str });
 const requestMsg = (id) => ({ id, kind: 'request', respondingTo: '', body: id });
+// Real crypto on both halves: the pairwise secret is shared, so what one side
+// encrypts and signs the other actually decrypts and verifies.
+const PAIRWISE_SECRET = new Uint8Array(32).fill(0x5a);
+const realProver = () => createSr25519Prover(createSr25519Secret(new Uint8Array(32).fill(0x5b)));
 function makeHost(adapter) {
     return createSession({
         localAccount: localA,
         remoteAccount: remoteB,
         statementStore: adapter,
-        encryption: mockEncryption(),
-        prover: mockProver,
+        encryption: createEncryption(PAIRWISE_SECRET),
+        prover: realProver(),
         sessionKey: SHARED_KEY,
     });
 }
@@ -148,8 +155,8 @@ function makeMobile(adapter) {
         localAccount: localB,
         remoteAccount: remoteA,
         statementStore: adapter,
-        encryption: mockEncryption(),
-        prover: mockProver,
+        encryption: createEncryption(PAIRWISE_SECRET),
+        prover: realProver(),
         sessionKey: SHARED_KEY,
     });
 }
@@ -868,7 +875,7 @@ describe('session', () => {
             await settle();
             const requests = store
                 .currentStatements()
-                .map(s => StatementData.dec(s.data))
+                .map(s => StatementData.dec(createEncryption(PAIRWISE_SECRET).decrypt(s.data)._unsafeUnwrap()))
                 .filter(d => d.tag === 'request');
             expect(requests.some(d => d.tag === 'request' && d.value.data.length > 0)).toBe(false);
             expect(requests.some(d => d.tag === 'request' && d.value.data.length === 0)).toBe(true);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@novasamatech/statement-store",
   "type": "module",
-  "version": "0.9.3",
+  "version": "0.9.4",
   "description": "Statement store integration",
   "license": "Apache-2.0",
   "repository": {
@@ -25,9 +25,9 @@
     "README.md"
   ],
   "dependencies": {
-    "@novasamatech/scale": "0.9.3",
+    "@novasamatech/scale": "0.9.4",
     "@novasamatech/sdk-statement": "^0.6.0",
-    "@novasamatech/substrate-slot-sr25519-wasm": "0.9.3",
+    "@novasamatech/substrate-slot-sr25519-wasm": "0.9.4",
     "@polkadot-api/substrate-bindings": "^0.20.3",
     "@polkadot-api/substrate-client": "^0.7.0",
     "@polkadot-labs/hdkd-helpers": "^0.0.31",