@peers-app/peers-sdk 0.23.14 → 0.25.0

package/dist/device-pairing/pgp-word-list.js

@@ -0,0 +1,531 @@
+"use strict";
+/**
+ * The PGP word list: 256 two-syllable "even" words and 256 three-syllable "odd" words.
+ *
+ * Word `n` in each list encodes the byte value `n`. Pairing codes alternate lists by
+ * position (even, odd, even) so a word typed in the wrong slot is detected before the
+ * PAKE runs. The list was designed for reading aloud: words are phonetically distinct
+ * and stress-pattern distinct across the two lists.
+ *
+ * Source: https://en.wikipedia.org/wiki/PGP_word_list (lowercased).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PGP_ODD_WORDS = exports.PGP_EVEN_WORDS = void 0;
+/** Two-syllable words used for byte positions 0 and 2 of a pairing code. */
+exports.PGP_EVEN_WORDS = Object.freeze([
+    "aardvark",
+    "absurd",
+    "accrue",
+    "acme",
+    "adrift",
+    "adult",
+    "afflict",
+    "ahead",
+    "aimless",
+    "algol",
+    "allow",
+    "alone",
+    "ammo",
+    "ancient",
+    "apple",
+    "artist",
+    "assume",
+    "athens",
+    "atlas",
+    "aztec",
+    "baboon",
+    "backfield",
+    "backward",
+    "banjo",
+    "beaming",
+    "bedlamp",
+    "beehive",
+    "beeswax",
+    "befriend",
+    "belfast",
+    "berserk",
+    "billiard",
+    "bison",
+    "blackjack",
+    "blockade",
+    "blowtorch",
+    "bluebird",
+    "bombast",
+    "bookshelf",
+    "brackish",
+    "breadline",
+    "breakup",
+    "brickyard",
+    "briefcase",
+    "burbank",
+    "button",
+    "buzzard",
+    "cement",
+    "chairlift",
+    "chatter",
+    "checkup",
+    "chisel",
+    "choking",
+    "chopper",
+    "christmas",
+    "clamshell",
+    "classic",
+    "classroom",
+    "cleanup",
+    "clockwork",
+    "cobra",
+    "commence",
+    "concert",
+    "cowbell",
+    "crackdown",
+    "cranky",
+    "crowfoot",
+    "crucial",
+    "crumpled",
+    "crusade",
+    "cubic",
+    "dashboard",
+    "deadbolt",
+    "deckhand",
+    "dogsled",
+    "dragnet",
+    "drainage",
+    "dreadful",
+    "drifter",
+    "dropper",
+    "drumbeat",
+    "drunken",
+    "dupont",
+    "dwelling",
+    "eating",
+    "edict",
+    "egghead",
+    "eightball",
+    "endorse",
+    "endow",
+    "enlist",
+    "erase",
+    "escape",
+    "exceed",
+    "eyeglass",
+    "eyetooth",
+    "facial",
+    "fallout",
+    "flagpole",
+    "flatfoot",
+    "flytrap",
+    "fracture",
+    "framework",
+    "freedom",
+    "frighten",
+    "gazelle",
+    "geiger",
+    "glitter",
+    "glucose",
+    "goggles",
+    "goldfish",
+    "gremlin",
+    "guidance",
+    "hamlet",
+    "highchair",
+    "hockey",
+    "indoors",
+    "indulge",
+    "inverse",
+    "involve",
+    "island",
+    "jawbone",
+    "keyboard",
+    "kickoff",
+    "kiwi",
+    "klaxon",
+    "locale",
+    "lockup",
+    "merit",
+    "minnow",
+    "miser",
+    "mohawk",
+    "mural",
+    "music",
+    "necklace",
+    "neptune",
+    "newborn",
+    "nightbird",
+    "oakland",
+    "obtuse",
+    "offload",
+    "optic",
+    "orca",
+    "payday",
+    "peachy",
+    "pheasant",
+    "physique",
+    "playhouse",
+    "pluto",
+    "preclude",
+    "prefer",
+    "preshrunk",
+    "printer",
+    "prowler",
+    "pupil",
+    "puppy",
+    "python",
+    "quadrant",
+    "quiver",
+    "quota",
+    "ragtime",
+    "ratchet",
+    "rebirth",
+    "reform",
+    "regain",
+    "reindeer",
+    "rematch",
+    "repay",
+    "retouch",
+    "revenge",
+    "reward",
+    "rhythm",
+    "ribcage",
+    "ringbolt",
+    "robust",
+    "rocker",
+    "ruffled",
+    "sailboat",
+    "sawdust",
+    "scallion",
+    "scenic",
+    "scorecard",
+    "scotland",
+    "seabird",
+    "select",
+    "sentence",
+    "shadow",
+    "shamrock",
+    "showgirl",
+    "skullcap",
+    "skydive",
+    "slingshot",
+    "slowdown",
+    "snapline",
+    "snapshot",
+    "snowcap",
+    "snowslide",
+    "solo",
+    "southward",
+    "soybean",
+    "spaniel",
+    "spearhead",
+    "spellbind",
+    "spheroid",
+    "spigot",
+    "spindle",
+    "spyglass",
+    "stagehand",
+    "stagnate",
+    "stairway",
+    "standard",
+    "stapler",
+    "steamship",
+    "sterling",
+    "stockman",
+    "stopwatch",
+    "stormy",
+    "sugar",
+    "surmount",
+    "suspense",
+    "sweatband",
+    "swelter",
+    "tactics",
+    "talon",
+    "tapeworm",
+    "tempest",
+    "tiger",
+    "tissue",
+    "tonic",
+    "topmost",
+    "tracker",
+    "transit",
+    "trauma",
+    "treadmill",
+    "trojan",
+    "trouble",
+    "tumor",
+    "tunnel",
+    "tycoon",
+    "uncut",
+    "unearth",
+    "unwind",
+    "uproot",
+    "upset",
+    "upshot",
+    "vapor",
+    "village",
+    "virus",
+    "vulcan",
+    "waffle",
+    "wallet",
+    "watchword",
+    "wayside",
+    "willow",
+    "woodlark",
+    "zulu",
+]);
+/** Three-syllable words used for byte position 1 of a pairing code. */
+exports.PGP_ODD_WORDS = Object.freeze([
+    "adroitness",
+    "adviser",
+    "aftermath",
+    "aggregate",
+    "alkali",
+    "almighty",
+    "amulet",
+    "amusement",
+    "antenna",
+    "applicant",
+    "apollo",
+    "armistice",
+    "article",
+    "asteroid",
+    "atlantic",
+    "atmosphere",
+    "autopsy",
+    "babylon",
+    "backwater",
+    "barbecue",
+    "belowground",
+    "bifocals",
+    "bodyguard",
+    "bookseller",
+    "borderline",
+    "bottomless",
+    "bradbury",
+    "bravado",
+    "brazilian",
+    "breakaway",
+    "burlington",
+    "businessman",
+    "butterfat",
+    "camelot",
+    "candidate",
+    "cannonball",
+    "capricorn",
+    "caravan",
+    "caretaker",
+    "celebrate",
+    "cellulose",
+    "certify",
+    "chambermaid",
+    "cherokee",
+    "chicago",
+    "clergyman",
+    "coherence",
+    "combustion",
+    "commando",
+    "company",
+    "component",
+    "concurrent",
+    "confidence",
+    "conformist",
+    "congregate",
+    "consensus",
+    "consulting",
+    "corporate",
+    "corrosion",
+    "councilman",
+    "crossover",
+    "crucifix",
+    "cumbersome",
+    "customer",
+    "dakota",
+    "decadence",
+    "december",
+    "decimal",
+    "designing",
+    "detector",
+    "detergent",
+    "determine",
+    "dictator",
+    "dinosaur",
+    "direction",
+    "disable",
+    "disbelief",
+    "disruptive",
+    "distortion",
+    "document",
+    "embezzle",
+    "enchanting",
+    "enrollment",
+    "enterprise",
+    "equation",
+    "equipment",
+    "escapade",
+    "eskimo",
+    "everyday",
+    "examine",
+    "existence",
+    "exodus",
+    "fascinate",
+    "filament",
+    "finicky",
+    "forever",
+    "fortitude",
+    "frequency",
+    "gadgetry",
+    "galveston",
+    "getaway",
+    "glossary",
+    "gossamer",
+    "graduate",
+    "gravity",
+    "guitarist",
+    "hamburger",
+    "hamilton",
+    "handiwork",
+    "hazardous",
+    "headwaters",
+    "hemisphere",
+    "hesitate",
+    "hideaway",
+    "holiness",
+    "hurricane",
+    "hydraulic",
+    "impartial",
+    "impetus",
+    "inception",
+    "indigo",
+    "inertia",
+    "infancy",
+    "inferno",
+    "informant",
+    "insincere",
+    "insurgent",
+    "integrate",
+    "intention",
+    "inventive",
+    "istanbul",
+    "jamaica",
+    "jupiter",
+    "leprosy",
+    "letterhead",
+    "liberty",
+    "maritime",
+    "matchmaker",
+    "maverick",
+    "medusa",
+    "megaton",
+    "microscope",
+    "microwave",
+    "midsummer",
+    "millionaire",
+    "miracle",
+    "misnomer",
+    "molasses",
+    "molecule",
+    "montana",
+    "monument",
+    "mosquito",
+    "narrative",
+    "nebula",
+    "newsletter",
+    "norwegian",
+    "october",
+    "ohio",
+    "onlooker",
+    "opulent",
+    "orlando",
+    "outfielder",
+    "pacific",
+    "pandemic",
+    "pandora",
+    "paperweight",
+    "paragon",
+    "paragraph",
+    "paramount",
+    "passenger",
+    "pedigree",
+    "pegasus",
+    "penetrate",
+    "perceptive",
+    "performance",
+    "pharmacy",
+    "phonetic",
+    "photograph",
+    "pioneer",
+    "pocketful",
+    "politeness",
+    "positive",
+    "potato",
+    "processor",
+    "provincial",
+    "proximate",
+    "puberty",
+    "publisher",
+    "pyramid",
+    "quantity",
+    "racketeer",
+    "rebellion",
+    "recipe",
+    "recover",
+    "repellent",
+    "replica",
+    "reproduce",
+    "resistor",
+    "responsive",
+    "retraction",
+    "retrieval",
+    "retrospect",
+    "revenue",
+    "revival",
+    "revolver",
+    "sandalwood",
+    "sardonic",
+    "saturday",
+    "savagery",
+    "scavenger",
+    "sensation",
+    "sociable",
+    "souvenir",
+    "specialist",
+    "speculate",
+    "stethoscope",
+    "stupendous",
+    "supportive",
+    "surrender",
+    "suspicious",
+    "sympathy",
+    "tambourine",
+    "telephone",
+    "therapist",
+    "tobacco",
+    "tolerance",
+    "tomorrow",
+    "torpedo",
+    "tradition",
+    "travesty",
+    "trombonist",
+    "truncated",
+    "typewriter",
+    "ultimate",
+    "undaunted",
+    "underfoot",
+    "unicorn",
+    "unify",
+    "universe",
+    "unravel",
+    "upcoming",
+    "vacancy",
+    "vagabond",
+    "vertigo",
+    "virginia",
+    "visitor",
+    "vocalist",
+    "voyager",
+    "warranty",
+    "waterloo",
+    "whimsical",
+    "wichita",
+    "wilmington",
+    "wyoming",
+    "yesteryear",
+    "yucatan",
+]);

package/dist/device-pairing/signaling.d.ts

@@ -1,9 +1,20 @@
-import { type PairingRole, type PairingSignal, type UnsignedPairingSignal } from "./types";
-/** Attaches an HMAC to a validated canonical SDP or ICE signaling message. */
-export declare function signPairingSignal(signal: UnsignedPairingSignal, signalingKey: string): PairingSignal;
-/** Verifies message authentication, room/role binding, and the exact next sequence number. */
-export declare function verifyPairingSignal(signal: unknown, signalingKey: string, expected: {
-    roomId: string;
+import { type AuthenticatedPairingSignal, type PairingPakeSignal, type PairingRole, type PairingSignal, type UnsignedPairingSignal } from "./types";
+/** Builds the unauthenticated PAKE share message; it is always the first message of a role. */
+export declare function createPairingPakeSignal(input: {
+    nameplate: number;
+    senderRole: PairingRole;
+    sequence: number;
+    share: string;
+}): PairingPakeSignal;
+/** Attaches an HMAC to a validated canonical transport, SDP, or ICE signaling message. */
+export declare function signPairingSignal(signal: UnsignedPairingSignal, signalingKey: string): AuthenticatedPairingSignal;
+/**
+ * Verifies room/role binding and the exact next sequence number for any relayed signal,
+ * plus message authentication for everything after the PAKE share. `signalingKey` may be
+ * undefined only while the PAKE is still in progress; any non-`pake` message is then rejected.
+ */
+export declare function verifyPairingSignal(signal: unknown, signalingKey: string | undefined, expected: {
+    nameplate: number;
     senderRole: PairingRole;
     nextSequence: number;
 }): PairingSignal;

package/dist/device-pairing/signaling.js

@@ -1,29 +1,52 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.createPairingPakeSignal = createPairingPakeSignal;
 exports.signPairingSignal = signPairingSignal;
 exports.verifyPairingSignal = verifyPairingSignal;
+const constants_1 = require("./constants");
 const crypto_1 = require("./crypto");
 const types_1 = require("./types");
-/** Attaches an HMAC to a validated canonical SDP or ICE signaling message. */
+/** Builds the unauthenticated PAKE share message; it is always the first message of a role. */
+function createPairingPakeSignal(input) {
+    return types_1.pairingPakeSignalSchema.parse({
+        version: constants_1.DEVICE_PAIRING_PROTOCOL_VERSION,
+        nameplate: input.nameplate,
+        senderRole: input.senderRole,
+        sequence: input.sequence,
+        kind: "pake",
+        payload: { share: input.share },
+    });
+}
+/** Attaches an HMAC to a validated canonical transport, SDP, or ICE signaling message. */
 function signPairingSignal(signal, signalingKey) {
     const parsed = types_1.unsignedPairingSignalSchema.parse(signal);
-    return types_1.pairingSignalSchema.parse({
+    return types_1.authenticatedPairingSignalSchema.parse({
         ...parsed,
         mac: (0, crypto_1.computePairingSignalMac)(parsed, signalingKey),
     });
 }
-/** Verifies message authentication, room/role binding, and the exact next sequence number. */
+/**
+ * Verifies room/role binding and the exact next sequence number for any relayed signal,
+ * plus message authentication for everything after the PAKE share. `signalingKey` may be
+ * undefined only while the PAKE is still in progress; any non-`pake` message is then rejected.
+ */
 function verifyPairingSignal(signal, signalingKey, expected) {
     const parsed = types_1.pairingSignalSchema.parse(signal);
+    if (parsed.nameplate !== expected.nameplate ||
+        parsed.senderRole !== expected.senderRole ||
+        parsed.sequence !== expected.nextSequence) {
+        throw new Error("Pairing signaling message is out of order");
+    }
+    if (parsed.kind === "pake") {
+        return parsed;
+    }
+    if (!signalingKey) {
+        throw new Error("Pairing signaling received before authentication completed");
+    }
     const { mac, ...unsignedValue } = parsed;
     const unsigned = types_1.unsignedPairingSignalSchema.parse(unsignedValue);
     if (!(0, crypto_1.isPairingSignalMacValid)(unsigned, mac, signalingKey)) {
         throw new Error("Pairing signaling authentication failed");
     }
-    if (parsed.roomId !== expected.roomId ||
-        parsed.senderRole !== expected.senderRole ||
-        parsed.sequence !== expected.nextSequence) {
-        throw new Error("Pairing signaling message is out of order");
-    }
     return parsed;
 }

package/dist/device-pairing/transcript.d.ts

@@ -1,7 +1,7 @@
 import { type DevicePairingTranscript } from "./types";
 /** Extracts a canonical set of SHA-256 DTLS fingerprints from an SDP document. */
 export declare function extractSha256SdpFingerprint(sdp: string): string;
-/** Hashes the canonical identities, nonces, room, and SDP fingerprints for one ceremony. */
+/** Builds the `wrtc` transport binding from the offer and answer SDP: `offerFp|answerFp`. */
+export declare function webRtcPairingTransportBinding(offerSdp: string, answerSdp: string): string;
+/** Hashes the canonical identities, nonces, rendezvous, and transport binding for one ceremony. */
 export declare function computeDevicePairingTranscriptHash(transcript: DevicePairingTranscript): string;
-/** Derives the same zero-padded six-digit SAS independently on both endpoints. */
-export declare function deriveDevicePairingSas(roomSecret: string, transcriptHash: string): string;

package/dist/device-pairing/transcript.js

@@ -1,14 +1,10 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.extractSha256SdpFingerprint = extractSha256SdpFingerprint;
+exports.webRtcPairingTransportBinding = webRtcPairingTransportBinding;
 exports.computeDevicePairingTranscriptHash = computeDevicePairingTranscriptHash;
-exports.deriveDevicePairingSas = deriveDevicePairingSas;
-const hmac_1 = require("@noble/hashes/hmac");
-const sha2_1 = require("@noble/hashes/sha2");
 const keys_1 = require("../keys");
-const constants_1 = require("./constants");
 const types_1 = require("./types");
-const textEncoder = new TextEncoder();
 /** Extracts a canonical set of SHA-256 DTLS fingerprints from an SDP document. */
 function extractSha256SdpFingerprint(sdp) {
     const fingerprints = new Set();
@@ -25,14 +21,11 @@ function extractSha256SdpFingerprint(sdp) {
     }
     return [...fingerprints].sort().join(",");
 }
-/** Hashes the canonical identities, nonces, room, and SDP fingerprints for one ceremony. */
+/** Builds the `wrtc` transport binding from the offer and answer SDP: `offerFp|answerFp`. */
+function webRtcPairingTransportBinding(offerSdp, answerSdp) {
+    return `${extractSha256SdpFingerprint(offerSdp)}|${extractSha256SdpFingerprint(answerSdp)}`;
+}
+/** Hashes the canonical identities, nonces, rendezvous, and transport binding for one ceremony. */
 function computeDevicePairingTranscriptHash(transcript) {
     return types_1.pairingHashSchema.parse((0, keys_1.hashObject)(types_1.devicePairingTranscriptSchema.parse(transcript)));
 }
-/** Derives the same zero-padded six-digit SAS independently on both endpoints. */
-function deriveDevicePairingSas(roomSecret, transcriptHash) {
-    types_1.pairingHashSchema.parse(transcriptHash);
-    const digest = (0, hmac_1.hmac)(sha2_1.sha256, (0, keys_1.decodeBase64)(roomSecret), textEncoder.encode(`${constants_1.DEVICE_PAIRING_SAS_LABEL}${transcriptHash}`));
-    const value = (((digest[0] << 24) >>> 0) | (digest[1] << 16) | (digest[2] << 8) | digest[3]) >>> 0;
-    return (value % 1_000_000).toString().padStart(6, "0");
-}