@peers-app/peers-sdk 0.27.2 → 0.27.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (260) hide show
  1. package/dist/contracts/contract-proxy.d.ts +7 -0
  2. package/dist/contracts/contract-proxy.js +19 -2
  3. package/dist/contracts/create-local-consumer.js +16 -1
  4. package/dist/contracts/index.d.ts +2 -0
  5. package/dist/contracts/index.js +2 -0
  6. package/dist/contracts/system/index.d.ts +2 -0
  7. package/dist/contracts/system/index.js +2 -0
  8. package/dist/contracts/system/invites-contract.js +2 -1
  9. package/dist/contracts/system/sync-check-contract.d.ts +97 -0
  10. package/dist/contracts/system/sync-check-contract.js +115 -0
  11. package/dist/contracts/tool-arguments.d.ts +15 -0
  12. package/dist/contracts/tool-arguments.js +41 -0
  13. package/dist/contracts/tool-catalog-service.js +2 -12
  14. package/dist/data/change-tracking.d.ts +40 -0
  15. package/dist/data/change-tracking.js +89 -0
  16. package/dist/data/orm/types.d.ts +24 -7
  17. package/dist/data/orm/types.js +97 -24
  18. package/dist/data/persistent-vars.d.ts +5 -0
  19. package/dist/data/persistent-vars.js +24 -6
  20. package/dist/define/manifest.js +6 -34
  21. package/dist/package-loader/package-loader.js +27 -22
  22. package/dist/system-ids.d.ts +5 -0
  23. package/dist/system-ids.js +6 -1
  24. package/package.json +4 -2
  25. package/dist/context/user-context-identity.test.d.ts +0 -1
  26. package/dist/context/user-context-identity.test.js +0 -220
  27. package/dist/contracts/__tests__/action-dispatch.test.d.ts +0 -1
  28. package/dist/contracts/__tests__/action-dispatch.test.js +0 -319
  29. package/dist/contracts/__tests__/also-implements.test.d.ts +0 -1
  30. package/dist/contracts/__tests__/also-implements.test.js +0 -110
  31. package/dist/contracts/__tests__/builder.test.d.ts +0 -1
  32. package/dist/contracts/__tests__/builder.test.js +0 -669
  33. package/dist/contracts/__tests__/contract-events.test.d.ts +0 -1
  34. package/dist/contracts/__tests__/contract-events.test.js +0 -199
  35. package/dist/contracts/__tests__/contract-observables.test.d.ts +0 -1
  36. package/dist/contracts/__tests__/contract-observables.test.js +0 -290
  37. package/dist/contracts/__tests__/contract-provider-router.test.d.ts +0 -1
  38. package/dist/contracts/__tests__/contract-provider-router.test.js +0 -315
  39. package/dist/contracts/__tests__/contract-proxy.test.d.ts +0 -1
  40. package/dist/contracts/__tests__/contract-proxy.test.js +0 -657
  41. package/dist/contracts/__tests__/contract-resolvers.test.d.ts +0 -1
  42. package/dist/contracts/__tests__/contract-resolvers.test.js +0 -758
  43. package/dist/contracts/__tests__/contract-subscription-lifecycle.test.d.ts +0 -1
  44. package/dist/contracts/__tests__/contract-subscription-lifecycle.test.js +0 -353
  45. package/dist/contracts/__tests__/contract-table-events.test.d.ts +0 -1
  46. package/dist/contracts/__tests__/contract-table-events.test.js +0 -209
  47. package/dist/contracts/__tests__/contract-transport.test.d.ts +0 -1
  48. package/dist/contracts/__tests__/contract-transport.test.js +0 -163
  49. package/dist/contracts/__tests__/extract.test.d.ts +0 -1
  50. package/dist/contracts/__tests__/extract.test.js +0 -145
  51. package/dist/contracts/__tests__/frozen-contracts.test.d.ts +0 -1
  52. package/dist/contracts/__tests__/frozen-contracts.test.js +0 -191
  53. package/dist/contracts/__tests__/generic-tool-dispatch.test.d.ts +0 -1
  54. package/dist/contracts/__tests__/generic-tool-dispatch.test.js +0 -130
  55. package/dist/contracts/__tests__/host-contract-client.test.d.ts +0 -1
  56. package/dist/contracts/__tests__/host-contract-client.test.js +0 -793
  57. package/dist/contracts/__tests__/host-contract-consumer.test.d.ts +0 -1
  58. package/dist/contracts/__tests__/host-contract-consumer.test.js +0 -163
  59. package/dist/contracts/__tests__/host-contract-transport.test.d.ts +0 -1
  60. package/dist/contracts/__tests__/host-contract-transport.test.js +0 -66
  61. package/dist/contracts/__tests__/integration.test.d.ts +0 -1
  62. package/dist/contracts/__tests__/integration.test.js +0 -348
  63. package/dist/contracts/__tests__/legacy-removal.test.d.ts +0 -1
  64. package/dist/contracts/__tests__/legacy-removal.test.js +0 -128
  65. package/dist/contracts/__tests__/persistent-registry.test.d.ts +0 -1
  66. package/dist/contracts/__tests__/persistent-registry.test.js +0 -109
  67. package/dist/contracts/__tests__/playground.test.d.ts +0 -1
  68. package/dist/contracts/__tests__/playground.test.js +0 -216
  69. package/dist/contracts/__tests__/registry.test.d.ts +0 -1
  70. package/dist/contracts/__tests__/registry.test.js +0 -238
  71. package/dist/contracts/__tests__/remote-contract-transport.test.d.ts +0 -1
  72. package/dist/contracts/__tests__/remote-contract-transport.test.js +0 -119
  73. package/dist/contracts/__tests__/system-contracts.test.d.ts +0 -1
  74. package/dist/contracts/__tests__/system-contracts.test.js +0 -247
  75. package/dist/contracts/__tests__/target-dispatch.d.ts +0 -11
  76. package/dist/contracts/__tests__/target-dispatch.js +0 -24
  77. package/dist/contracts/__tests__/tool-catalog-inventory.test.d.ts +0 -1
  78. package/dist/contracts/__tests__/tool-catalog-inventory.test.js +0 -44
  79. package/dist/contracts/__tests__/tool-catalog-service.test.d.ts +0 -1
  80. package/dist/contracts/__tests__/tool-catalog-service.test.js +0 -482
  81. package/dist/contracts/__tests__/tool-catalog.test.d.ts +0 -1
  82. package/dist/contracts/__tests__/tool-catalog.test.js +0 -1199
  83. package/dist/contracts/__tests__/validate.test.d.ts +0 -1
  84. package/dist/contracts/__tests__/validate.test.js +0 -991
  85. package/dist/contracts/__tests__/workflow-context.test.d.ts +0 -1
  86. package/dist/contracts/__tests__/workflow-context.test.js +0 -50
  87. package/dist/data/access-level.test.d.ts +0 -1
  88. package/dist/data/access-level.test.js +0 -53
  89. package/dist/data/change-tracking.test.d.ts +0 -1
  90. package/dist/data/change-tracking.test.js +0 -62
  91. package/dist/data/files/files.test.d.ts +0 -1
  92. package/dist/data/files/files.test.js +0 -770
  93. package/dist/data/group-members.test.d.ts +0 -1
  94. package/dist/data/group-members.test.js +0 -336
  95. package/dist/data/group-share.test.d.ts +0 -1
  96. package/dist/data/group-share.test.js +0 -110
  97. package/dist/data/groups.test.d.ts +0 -1
  98. package/dist/data/groups.test.js +0 -153
  99. package/dist/data/orm/cursor.test.d.ts +0 -1
  100. package/dist/data/orm/cursor.test.js +0 -314
  101. package/dist/data/orm/data-query.mongo.test.d.ts +0 -1
  102. package/dist/data/orm/data-query.mongo.test.js +0 -367
  103. package/dist/data/orm/data-query.sqlite.test.d.ts +0 -1
  104. package/dist/data/orm/data-query.sqlite.test.js +0 -365
  105. package/dist/data/orm/data-query.test.d.ts +0 -1
  106. package/dist/data/orm/data-query.test.js +0 -545
  107. package/dist/data/orm/dependency-injection.test.d.ts +0 -1
  108. package/dist/data/orm/dependency-injection.test.js +0 -171
  109. package/dist/data/orm/event-registry.test.d.ts +0 -1
  110. package/dist/data/orm/event-registry.test.js +0 -44
  111. package/dist/data/orm/multi-cursors.test.d.ts +0 -1
  112. package/dist/data/orm/multi-cursors.test.js +0 -463
  113. package/dist/data/orm/sql.data-source.test.d.ts +0 -1
  114. package/dist/data/orm/sql.data-source.test.js +0 -731
  115. package/dist/data/orm/table-container-events.test.d.ts +0 -1
  116. package/dist/data/orm/table-container-events.test.js +0 -101
  117. package/dist/data/orm/table-container.test.d.ts +0 -1
  118. package/dist/data/orm/table-container.test.js +0 -273
  119. package/dist/data/orm/table.event-source.test.d.ts +0 -1
  120. package/dist/data/orm/table.event-source.test.js +0 -331
  121. package/dist/data/orm/types.test.d.ts +0 -1
  122. package/dist/data/orm/types.test.js +0 -409
  123. package/dist/data/package-table-identity.test.d.ts +0 -1
  124. package/dist/data/package-table-identity.test.js +0 -46
  125. package/dist/data/package-version-permissions.test.d.ts +0 -1
  126. package/dist/data/package-version-permissions.test.js +0 -107
  127. package/dist/data/package-version-resolver.test.d.ts +0 -4
  128. package/dist/data/package-version-resolver.test.js +0 -543
  129. package/dist/data/package-versions.test.d.ts +0 -1
  130. package/dist/data/package-versions.test.js +0 -227
  131. package/dist/data/persistent-vars.conflict.test.d.ts +0 -1
  132. package/dist/data/persistent-vars.conflict.test.js +0 -126
  133. package/dist/data/persistent-vars.migration.test.d.ts +0 -1
  134. package/dist/data/persistent-vars.migration.test.js +0 -133
  135. package/dist/data/persistent-vars.package-scope.test.d.ts +0 -1
  136. package/dist/data/persistent-vars.package-scope.test.js +0 -27
  137. package/dist/data/sync-recovery-queue.test.d.ts +0 -1
  138. package/dist/data/sync-recovery-queue.test.js +0 -215
  139. package/dist/data/table-signing.test.d.ts +0 -1
  140. package/dist/data/table-signing.test.js +0 -118
  141. package/dist/data/tool-access.test.d.ts +0 -1
  142. package/dist/data/tool-access.test.js +0 -166
  143. package/dist/data/user-permissions.test.d.ts +0 -1
  144. package/dist/data/user-permissions.test.js +0 -305
  145. package/dist/data/user-trust-levels.test.d.ts +0 -1
  146. package/dist/data/user-trust-levels.test.js +0 -37
  147. package/dist/define/also-implements.test.d.ts +0 -1
  148. package/dist/define/also-implements.test.js +0 -123
  149. package/dist/define/declare-contract.test.d.ts +0 -1
  150. package/dist/define/declare-contract.test.js +0 -573
  151. package/dist/define/define.test.d.ts +0 -1
  152. package/dist/define/define.test.js +0 -1010
  153. package/dist/define/empty-fields.test.d.ts +0 -1
  154. package/dist/define/empty-fields.test.js +0 -55
  155. package/dist/define/events-observables.test.d.ts +0 -1
  156. package/dist/define/events-observables.test.js +0 -1013
  157. package/dist/define/serve-members.test.d.ts +0 -1
  158. package/dist/define/serve-members.test.js +0 -630
  159. package/dist/define/vars.test.d.ts +0 -1
  160. package/dist/define/vars.test.js +0 -39
  161. package/dist/device/binary-peer-connection-v2.test.d.ts +0 -1
  162. package/dist/device/binary-peer-connection-v2.test.js +0 -730
  163. package/dist/device/binary-peer-connection.test.d.ts +0 -1
  164. package/dist/device/binary-peer-connection.test.js +0 -184
  165. package/dist/device/connection.test.d.ts +0 -1
  166. package/dist/device/connection.test.js +0 -613
  167. package/dist/device/device-election.test.d.ts +0 -1
  168. package/dist/device/device-election.test.js +0 -516
  169. package/dist/device/device.test.d.ts +0 -1
  170. package/dist/device/device.test.js +0 -243
  171. package/dist/device/frame-cipher.test.d.ts +0 -1
  172. package/dist/device/frame-cipher.test.js +0 -219
  173. package/dist/device/get-trust-level-fn.test.d.ts +0 -1
  174. package/dist/device/get-trust-level-fn.test.js +0 -685
  175. package/dist/device/streamed-socket.test.d.ts +0 -1
  176. package/dist/device/streamed-socket.test.js +0 -216
  177. package/dist/device/tx-encoding.test.d.ts +0 -1
  178. package/dist/device/tx-encoding.test.js +0 -295
  179. package/dist/device-pairing/cpace.test.d.ts +0 -1
  180. package/dist/device-pairing/cpace.test.js +0 -116
  181. package/dist/device-pairing/device-pairing.test.d.ts +0 -1
  182. package/dist/device-pairing/device-pairing.test.js +0 -211
  183. package/dist/hlc.test.d.ts +0 -1
  184. package/dist/hlc.test.js +0 -45
  185. package/dist/host-credentials.test.d.ts +0 -1
  186. package/dist/host-credentials.test.js +0 -88
  187. package/dist/identity/account-email.test.d.ts +0 -1
  188. package/dist/identity/account-email.test.js +0 -59
  189. package/dist/identity/anchor-document.test.d.ts +0 -1
  190. package/dist/identity/anchor-document.test.js +0 -16
  191. package/dist/identity/anchor-resolution.test.d.ts +0 -1
  192. package/dist/identity/anchor-resolution.test.js +0 -130
  193. package/dist/identity/key-change.test.d.ts +0 -1
  194. package/dist/identity/key-change.test.js +0 -811
  195. package/dist/invites/group-approval.test.d.ts +0 -1
  196. package/dist/invites/group-approval.test.js +0 -223
  197. package/dist/invites/invite-token.test.d.ts +0 -1
  198. package/dist/invites/invite-token.test.js +0 -123
  199. package/dist/keys.test.d.ts +0 -1
  200. package/dist/keys.test.js +0 -336
  201. package/dist/logging/console-logger.test.d.ts +0 -1
  202. package/dist/logging/console-logger.test.js +0 -300
  203. package/dist/logging/console-logs.table.test.d.ts +0 -1
  204. package/dist/logging/console-logs.table.test.js +0 -156
  205. package/dist/observable.test.d.ts +0 -1
  206. package/dist/observable.test.js +0 -309
  207. package/dist/package-build/build-package.test.d.ts +0 -1
  208. package/dist/package-build/build-package.test.js +0 -204
  209. package/dist/package-build/contract-add.test.d.ts +0 -1
  210. package/dist/package-build/contract-add.test.js +0 -467
  211. package/dist/package-build/freeze-contracts.test.d.ts +0 -1
  212. package/dist/package-build/freeze-contracts.test.js +0 -355
  213. package/dist/package-installer/package-author-signing.test.d.ts +0 -1
  214. package/dist/package-installer/package-author-signing.test.js +0 -200
  215. package/dist/package-installer/package-cloner.test.d.ts +0 -1
  216. package/dist/package-installer/package-cloner.test.js +0 -278
  217. package/dist/package-installer/package-creator.test.d.ts +0 -1
  218. package/dist/package-installer/package-creator.test.js +0 -908
  219. package/dist/package-installer/package-dev-tools.test.d.ts +0 -1
  220. package/dist/package-installer/package-dev-tools.test.js +0 -64
  221. package/dist/package-installer/package-installer.test.d.ts +0 -1
  222. package/dist/package-installer/package-installer.test.js +0 -882
  223. package/dist/package-installer/package-propagation.test.d.ts +0 -1
  224. package/dist/package-installer/package-propagation.test.js +0 -1269
  225. package/dist/package-installer/package-publisher.test.d.ts +0 -1
  226. package/dist/package-installer/package-publisher.test.js +0 -153
  227. package/dist/package-installer/package-remote-checker.test.d.ts +0 -1
  228. package/dist/package-installer/package-remote-checker.test.js +0 -334
  229. package/dist/package-installer/package-seed-installer.test.d.ts +0 -1
  230. package/dist/package-installer/package-seed-installer.test.js +0 -123
  231. package/dist/package-installer/package-tarball.test.d.ts +0 -1
  232. package/dist/package-installer/package-tarball.test.js +0 -75
  233. package/dist/package-installer/peers-core-installer.test.d.ts +0 -1
  234. package/dist/package-installer/peers-core-installer.test.js +0 -49
  235. package/dist/package-installer/peers-core-trust-anchor.test.d.ts +0 -1
  236. package/dist/package-installer/peers-core-trust-anchor.test.js +0 -155
  237. package/dist/package-loader/contract-package-loader.test.d.ts +0 -1
  238. package/dist/package-loader/contract-package-loader.test.js +0 -274
  239. package/dist/package-loader/host-authority-loading.test.d.ts +0 -1
  240. package/dist/package-loader/host-authority-loading.test.js +0 -104
  241. package/dist/package-loader/host-dispatch-policy.test.d.ts +0 -1
  242. package/dist/package-loader/host-dispatch-policy.test.js +0 -56
  243. package/dist/package-loader/isolated-artifact.test.d.ts +0 -1
  244. package/dist/package-loader/isolated-artifact.test.js +0 -688
  245. package/dist/package-loader/isolated-persistent-var-gateway.test.d.ts +0 -1
  246. package/dist/package-loader/isolated-persistent-var-gateway.test.js +0 -56
  247. package/dist/package-loader/isolated-table-gateway.test.d.ts +0 -1
  248. package/dist/package-loader/isolated-table-gateway.test.js +0 -633
  249. package/dist/package-loader/package-loader.test.d.ts +0 -1
  250. package/dist/package-loader/package-loader.test.js +0 -1764
  251. package/dist/package-loader/resolve-consumed-contracts.test.d.ts +0 -1
  252. package/dist/package-loader/resolve-consumed-contracts.test.js +0 -166
  253. package/dist/serial-json.compat.test.d.ts +0 -1
  254. package/dist/serial-json.compat.test.js +0 -369
  255. package/dist/serial-json.test.d.ts +0 -1
  256. package/dist/serial-json.test.js +0 -401
  257. package/dist/testing/mock-host-contract.test.d.ts +0 -1
  258. package/dist/testing/mock-host-contract.test.js +0 -782
  259. package/dist/utils.test.d.ts +0 -1
  260. package/dist/utils.test.js +0 -232
@@ -1,243 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- const data_1 = require("../data");
4
- const keys_1 = require("../keys");
5
- const utils_1 = require("../utils");
6
- const device_1 = require("./device");
7
- describe(device_1.Device, () => {
8
- it("should create a new device with valid keys", async () => {
9
- const userId = (0, utils_1.newid)();
10
- const device = new device_1.Device(userId);
11
- expect(device.userId).toBe(userId);
12
- expect(device.deviceId).toBeTruthy();
13
- expect(device.publicKey).toBeTruthy();
14
- expect(device.publicBoxKey).toBeTruthy();
15
- const msg = "Hello, World!";
16
- const signedMsg = device.signMessageWithSecretKey(msg);
17
- expect(signedMsg).toBeTruthy();
18
- const openedMsg = (0, keys_1.openMessageWithPublicKey)(signedMsg, device.publicKey);
19
- expect(openedMsg).toBe(msg);
20
- const obj = { msg };
21
- const signedObj = device.signObjectWithSecretKey(obj);
22
- expect(signedObj.contents).toEqual(obj);
23
- const openedObj = (0, keys_1.openSignedObject)(signedObj);
24
- expect(openedObj).toEqual(obj);
25
- const userId2 = (0, utils_1.newid)();
26
- const device2 = new device_1.Device(userId2);
27
- {
28
- const box = device.boxDataWithKeys(obj, device2.publicBoxKey);
29
- expect(box).toBeTruthy();
30
- const openedBox = device2.openBoxWithSecretKey(box);
31
- expect(openedBox).toEqual(obj);
32
- }
33
- {
34
- const box = device.boxDataForDevice(obj, device2);
35
- expect(box).toBeTruthy();
36
- const openedBox = device2.openBoxWithSecretKey(box);
37
- expect(openedBox).toEqual(obj);
38
- }
39
- });
40
- describe("handshakes", () => {
41
- const userId1 = (0, utils_1.newid)();
42
- const client = new device_1.Device(userId1);
43
- const userId2 = (0, utils_1.newid)();
44
- const server = new device_1.Device(userId2);
45
- describe("getHandshake", () => {
46
- it("should return a valid and correct handshake object", async () => {
47
- const connectionId = (0, utils_1.newid)();
48
- const handshake = client.getHandshake(connectionId, "localhost");
49
- expect(handshake.publicKey).toBe(client.publicKey);
50
- expect(handshake.contents.userId).toBe(userId1);
51
- expect(handshake.contents.publicKey).toBe(client.publicKey);
52
- expect(handshake.contents.publicBoxKey).toBe(client.publicBoxKey);
53
- expect(handshake.contents.connectionId).toBe(connectionId);
54
- });
55
- it("includes bounded display metadata and refreshes cached device info", () => {
56
- const device = new device_1.Device((0, utils_1.newid)(), (0, utils_1.newid)(), (0, keys_1.newKeys)(), {
57
- userName: "Mark",
58
- deviceName: "Office laptop",
59
- });
60
- const originalInfo = device.getDeviceInfo();
61
- expect(originalInfo.contents).toMatchObject({
62
- userName: "Mark",
63
- deviceName: "Office laptop",
64
- });
65
- device.setDisplayInfo({ userName: "Mark Archer", deviceName: "Kitchen display" });
66
- const refreshedInfo = device.getDeviceInfo();
67
- const handshake = device.getHandshake((0, utils_1.newid)(), "localhost");
68
- expect(refreshedInfo).not.toBe(originalInfo);
69
- expect(refreshedInfo.contents).toMatchObject({
70
- userName: "Mark Archer",
71
- deviceName: "Kitchen display",
72
- });
73
- expect(handshake.contents).toMatchObject({
74
- userName: "Mark Archer",
75
- deviceName: "Kitchen display",
76
- });
77
- });
78
- it("bounds invalid local display metadata before signing it", () => {
79
- const device = new device_1.Device((0, utils_1.newid)(), (0, utils_1.newid)(), (0, keys_1.newKeys)(), {
80
- deviceName: "x".repeat(data_1.DISPLAY_NAME_MAX_LENGTH + 1),
81
- });
82
- expect(device.getDeviceInfo().contents.deviceName).toHaveLength(data_1.DISPLAY_NAME_MAX_LENGTH);
83
- });
84
- });
85
- describe("handshakeResponse", () => {
86
- it("should return a valid and correct handshake response object", async () => {
87
- const connectionId = (0, utils_1.newid)();
88
- const handshake = client.getHandshake(connectionId, "localhost");
89
- const handshakeResponse = server.handshakeResponse(handshake, connectionId, "localhost");
90
- expect(handshakeResponse.userId).toBe(userId2);
91
- expect(handshakeResponse.deviceId).toBe(server.deviceId);
92
- expect(handshakeResponse.publicKey).toBe(server.publicKey);
93
- expect(handshakeResponse.publicBoxKey).toBe(server.publicBoxKey);
94
- expect(handshakeResponse.connectionId).toBe(connectionId);
95
- });
96
- it("should detect when requests and responses are being forwarded through a different connection", async () => {
97
- const c1 = {
98
- connectionId: (0, utils_1.newid)(),
99
- };
100
- const c2 = {
101
- connectionId: (0, utils_1.newid)(),
102
- };
103
- const handshake = client.getHandshake(c1.connectionId, "localhost");
104
- expect(() => server.handshakeResponse(handshake, c2.connectionId, "localhost")).toThrow(/Invalid connectionId/);
105
- });
106
- it("rejects signed handshake metadata that exceeds the display-name limit", () => {
107
- const connectionId = (0, utils_1.newid)();
108
- const handshake = client.signObjectWithSecretKey({
109
- connectionId,
110
- userId: client.userId,
111
- deviceId: client.deviceId,
112
- publicKey: client.publicKey,
113
- publicBoxKey: client.publicBoxKey,
114
- userName: "x".repeat(data_1.DISPLAY_NAME_MAX_LENGTH + 1),
115
- serverAddress: "localhost",
116
- timestamp: Date.now(),
117
- });
118
- expect(() => server.handshakeResponse(handshake, connectionId, "localhost")).toThrow();
119
- });
120
- it("should reject a handshake signed by a different key than the one claimed in the payload (key confusion)", async () => {
121
- const connectionId = (0, utils_1.newid)();
122
- // Imposter holds a random secret key but claims the real client's publicKey/publicBoxKey.
123
- // getHandshake signs with the random key, so signedObj.publicKey != contents.publicKey.
124
- const clientImposter = new device_1.Device(userId1, client.deviceId, {
125
- secretKey: (0, keys_1.newKeys)().secretKey,
126
- publicKey: client.publicKey,
127
- publicBoxKey: client.publicBoxKey,
128
- });
129
- const handshake = clientImposter.getHandshake(connectionId, "localhost");
130
- expect(() => server.handshakeResponse(handshake, connectionId, "localhost")).toThrow(/signing key does not match claimed identity key/i);
131
- });
132
- it("should detect when requests and responses are being forwarded through a different address", async () => {
133
- const connToServer = {
134
- connectionId: (0, utils_1.newid)(),
135
- };
136
- const _connToClient = {
137
- connectionId: connToServer.connectionId,
138
- };
139
- const _manInTheMiddle = new device_1.Device(userId2);
140
- // const mitmAddress = manInTheMiddle.publicAddress || manInTheMiddle.localAddress;
141
- // const connToManInTheMiddle = {
142
- // connectionId: connToServer.connectionId,
143
- // remoteAddress: mitmAddress
144
- // };
145
- // // client is being intercepted
146
- // {
147
- // expect(() => {
148
- // doHandshake(client, connToManInTheMiddle, server, connToClient);
149
- // }).toThrow(/Invalid client address/);
150
- // }
151
- // // server is being intercepted
152
- // {
153
- // expect(() => {
154
- // doHandshake(client, connToServer, server, connToManInTheMiddle);
155
- // }).toThrow(/Invalid server address/);
156
- // }
157
- });
158
- });
159
- });
160
- });
161
- /*
162
- describe(ServerDevice, () => {
163
- describe("newConnection", () => {
164
- it("should create a new connection with a valid server device and valid client device", async () => {
165
- const serverDevice = new Device();
166
- const server = new ServerDevice(serverDevice);
167
-
168
- const clientDevice = new Device();
169
-
170
- let conn = await server.newConnection(clientDevice.address);
171
-
172
- // don't allow RPC calls to the server before the handshake is complete
173
- {
174
- const result: any = await conn.rpcCall('ping', {}).catch((err) => err);
175
- expect(result?.message).toMatch(/Connection not verified/);
176
- }
177
-
178
- const handshakeSigned = clientDevice.getHandshake({ connectionId: conn.connectionId, remoteAddress: serverDevice.address });
179
- const handshakeBoxed = clientDevice.boxDataForDevice(handshakeSigned, serverDevice);
180
- const responseBox = await conn.completeHandshake(handshakeBoxed);
181
- const responseSigned = clientDevice.openBoxWithSecretKey(responseBox);
182
- const response = openSignedObject(responseSigned) as IDeviceHandshake;
183
- expect(response.userId).toBe(serverDevice.userId);
184
- expect(response.deviceId).toBe(serverDevice.deviceId);
185
- expect(response.publicKey).toBe(serverDevice.publicKey);
186
- expect(response.publicBoxKey).toBe(serverDevice.publicBoxKey);
187
- expect(response.localAddress).toBe(serverDevice.localAddress);
188
- expect(response.publicAddress).toBe(serverDevice.publicAddress);
189
- expect(response.connectionId).toBe(conn.connectionId);
190
- expect(response.remoteAddress).toBe(clientDevice.address);
191
-
192
- conn = await server.getConnection(conn.connectionId);
193
-
194
- expect(conn.server).toEqual({
195
- userId: serverDevice.userId,
196
- deviceId: serverDevice.deviceId,
197
- publicKey: serverDevice.publicKey,
198
- publicBoxKey: serverDevice.publicBoxKey
199
- });
200
- expect(conn.client).toEqual({
201
- userId: clientDevice.userId,
202
- deviceId: clientDevice.deviceId,
203
- publicKey: clientDevice.publicKey,
204
- publicBoxKey: clientDevice.publicBoxKey
205
- });
206
- expect(conn.clientAddress).toBe(clientDevice.address);
207
- expect(conn.secure).toBe(true);
208
- expect(conn.verified).toBe(true);
209
-
210
- // allow RPC calls to the server after the handshake is complete
211
- {
212
- const result: any = await conn.rpcCall('ping', {}).catch((err) => err);
213
- expect(result).toBe('pong');
214
- }
215
- });
216
-
217
- it("should leave connections as insecure if the remoteAddress doesn't match", async () => {
218
- const serverDevice = new Device();
219
- const server = new ServerDevice(serverDevice);
220
-
221
- const clientDevice = new Device();
222
-
223
- let conn = await server.newConnection(clientDevice.address);
224
-
225
- const handshakeSigned = clientDevice.getHandshake({ connectionId: conn.connectionId, remoteAddress: 'using proxy' });
226
- const handshakeBoxed = clientDevice.boxDataForDevice(handshakeSigned, serverDevice);
227
- const responseBox = await conn.completeHandshake(handshakeBoxed);
228
- const response = clientDevice.openBoxedAndSignedData(responseBox) as IDeviceHandshake;
229
- expect(response.userId).toBe(serverDevice.userId);
230
-
231
- conn = await server.getConnection(conn.connectionId);
232
-
233
- expect(conn.verified).toBe(true);
234
- expect(conn.secure).toBe(false);
235
-
236
- // confirm responses are signed and boxed
237
- const resultBox = await conn.rpcCall('ping', {}).catch((err) => err) as IDataBox;
238
- const result = clientDevice.openBoxedAndSignedData(resultBox);
239
- expect(result).toBe('pong');
240
- });
241
- });
242
- })
243
- */
@@ -1 +0,0 @@
1
- export {};
@@ -1,219 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- const nacl = require("tweetnacl");
4
- const utils_1 = require("../utils");
5
- const frame_cipher_1 = require("./frame-cipher");
6
- function randomKey() {
7
- return nacl.randomBytes(32);
8
- }
9
- function derivationParams() {
10
- return {
11
- ephemeralSharedSecret: nacl.randomBytes(32),
12
- staticSharedSecret: nacl.randomBytes(32),
13
- connectionId: (0, utils_1.newid)(),
14
- clientDeviceId: (0, utils_1.newid)(),
15
- serverDeviceId: (0, utils_1.newid)(),
16
- timestamp: Date.now(),
17
- };
18
- }
19
- function innerFrame(type, payload) {
20
- const frame = new Uint8Array(1 + payload.length);
21
- frame[0] = type;
22
- frame.set(payload, 1);
23
- return frame;
24
- }
25
- describe("frame-cipher", () => {
26
- describe("seal / open", () => {
27
- it("round-trips an inner frame with exactly FRAME_CIPHER_OVERHEAD bytes added", () => {
28
- const key = randomKey();
29
- const connectionId = (0, utils_1.newid)();
30
- const sealer = new frame_cipher_1.FrameSealer(key.slice(), connectionId);
31
- const opener = new frame_cipher_1.FrameOpener(key.slice(), connectionId);
32
- const inner = innerFrame(0x10, new Uint8Array([1, 2, 3, 4, 5]));
33
- const sealed = sealer.seal(inner);
34
- expect(sealed[0]).toBe(frame_cipher_1.FRAME_ENC);
35
- expect(sealed.length).toBe(inner.length + frame_cipher_1.FRAME_CIPHER_OVERHEAD);
36
- expect(Buffer.from(opener.open(sealed) ?? [])).toEqual(Buffer.from(inner));
37
- });
38
- it("round-trips an empty inner frame and a large inner frame", () => {
39
- const key = randomKey();
40
- const { sealer, opener } = (0, frame_cipher_1.createFrameCiphers)({ sendKey: key.slice(), receiveKey: key.slice() }, "conn");
41
- const empty = new Uint8Array(0);
42
- expect(opener.open(sealer.seal(empty))?.length).toBe(0);
43
- const large = new Uint8Array(512 * 1024);
44
- for (let i = 0; i < large.length; i++)
45
- large[i] = i % 251;
46
- const opened = opener.open(sealer.seal(large));
47
- expect(opened).not.toBeNull();
48
- expect(Buffer.from(opened)).toEqual(Buffer.from(large));
49
- });
50
- it("does not leak the inner frame bytes on the wire", () => {
51
- const key = randomKey();
52
- const sealer = new frame_cipher_1.FrameSealer(key, "conn");
53
- const marker = Buffer.from("SECRET-MARKER-0123456789abcdef");
54
- const sealed = Buffer.from(sealer.seal(innerFrame(0x00, marker)));
55
- expect(sealed.indexOf(marker)).toBe(-1);
56
- });
57
- it("fails to open with the wrong key", () => {
58
- const sealer = new frame_cipher_1.FrameSealer(randomKey(), "conn");
59
- const opener = new frame_cipher_1.FrameOpener(randomKey(), "conn");
60
- expect(opener.open(sealer.seal(innerFrame(0x00, new Uint8Array([9]))))).toBeNull();
61
- });
62
- it("fails to open with the wrong connectionId (AAD)", () => {
63
- const key = randomKey();
64
- const sealer = new frame_cipher_1.FrameSealer(key.slice(), "conn-a");
65
- const opener = new frame_cipher_1.FrameOpener(key.slice(), "conn-b");
66
- expect(opener.open(sealer.seal(innerFrame(0x00, new Uint8Array([9]))))).toBeNull();
67
- });
68
- it("fails to open a frame sealed for the other direction", () => {
69
- const derived = (0, frame_cipher_1.deriveFrameKeys)(derivationParams());
70
- const client = (0, frame_cipher_1.createFrameCiphers)((0, frame_cipher_1.frameKeysForRole)(derived, "client"), "conn");
71
- const server = (0, frame_cipher_1.createFrameCiphers)((0, frame_cipher_1.frameKeysForRole)(derived, "server"), "conn");
72
- const sealed = client.sealer.seal(innerFrame(0x00, new Uint8Array([1])));
73
- // The client's own opener holds the server-to-client key: wrong direction.
74
- expect(client.opener.open(sealed)).toBeNull();
75
- // The server's opener holds the client-to-server key and is at counter 0.
76
- expect(server.opener.open(sealed)).not.toBeNull();
77
- });
78
- it("fails to open when a ciphertext bit is flipped", () => {
79
- const key = randomKey();
80
- const sealer = new frame_cipher_1.FrameSealer(key.slice(), "conn");
81
- const opener = new frame_cipher_1.FrameOpener(key.slice(), "conn");
82
- const sealed = sealer.seal(innerFrame(0x00, new Uint8Array([1, 2, 3])));
83
- sealed[2] ^= 0x01;
84
- expect(opener.open(sealed)).toBeNull();
85
- });
86
- it("fails to open when the tag is truncated or the type byte is wrong", () => {
87
- const key = randomKey();
88
- const sealer = new frame_cipher_1.FrameSealer(key.slice(), "conn");
89
- const sealed = sealer.seal(innerFrame(0x00, new Uint8Array([1, 2, 3])));
90
- expect(new frame_cipher_1.FrameOpener(key.slice(), "conn").open(sealed.subarray(0, sealed.length - 1))).toBeNull();
91
- expect(new frame_cipher_1.FrameOpener(key.slice(), "conn").open(new Uint8Array([frame_cipher_1.FRAME_ENC]))).toBeNull();
92
- const wrongType = sealed.slice();
93
- wrongType[0] = 0x00;
94
- expect(new frame_cipher_1.FrameOpener(key.slice(), "conn").open(wrongType)).toBeNull();
95
- });
96
- it("fails to open a replayed frame because the receive counter has advanced", () => {
97
- const key = randomKey();
98
- const sealer = new frame_cipher_1.FrameSealer(key.slice(), "conn");
99
- const opener = new frame_cipher_1.FrameOpener(key.slice(), "conn");
100
- const sealed = sealer.seal(innerFrame(0x00, new Uint8Array([7])));
101
- expect(opener.open(sealed)).not.toBeNull();
102
- expect(opener.open(sealed)).toBeNull();
103
- });
104
- it("fails to open frames delivered out of order", () => {
105
- const key = randomKey();
106
- const sealer = new frame_cipher_1.FrameSealer(key.slice(), "conn");
107
- const opener = new frame_cipher_1.FrameOpener(key.slice(), "conn");
108
- sealer.seal(innerFrame(0x00, new Uint8Array([1]))); // frame 0, never delivered
109
- const second = sealer.seal(innerFrame(0x00, new Uint8Array([2])));
110
- expect(opener.open(second)).toBeNull();
111
- });
112
- it("advances counters independently per direction", () => {
113
- const derived = (0, frame_cipher_1.deriveFrameKeys)(derivationParams());
114
- const client = (0, frame_cipher_1.createFrameCiphers)((0, frame_cipher_1.frameKeysForRole)(derived, "client"), "conn");
115
- const server = (0, frame_cipher_1.createFrameCiphers)((0, frame_cipher_1.frameKeysForRole)(derived, "server"), "conn");
116
- for (let i = 0; i < 5; i++) {
117
- const opened = server.opener.open(client.sealer.seal(innerFrame(0x00, new Uint8Array([i]))));
118
- expect(opened?.[1]).toBe(i);
119
- }
120
- expect(client.sealer.count).toBe(5);
121
- expect(server.opener.count).toBe(5);
122
- expect(server.sealer.count).toBe(0);
123
- expect(client.opener.count).toBe(0);
124
- const back = client.opener.open(server.sealer.seal(innerFrame(0x00, new Uint8Array([42]))));
125
- expect(back?.[1]).toBe(42);
126
- expect(server.sealer.count).toBe(1);
127
- expect(client.opener.count).toBe(1);
128
- });
129
- it("produces different ciphertext for identical plaintext on consecutive frames", () => {
130
- const sealer = new frame_cipher_1.FrameSealer(randomKey(), "conn");
131
- const inner = innerFrame(0x00, new Uint8Array([1, 2, 3, 4]));
132
- const a = Buffer.from(sealer.seal(inner));
133
- const b = Buffer.from(sealer.seal(inner));
134
- expect(a.equals(b)).toBe(false);
135
- });
136
- it("rejects keys of the wrong length", () => {
137
- expect(() => new frame_cipher_1.FrameSealer(new Uint8Array(16), "conn")).toThrow(/32 bytes/);
138
- expect(() => new frame_cipher_1.FrameOpener(new Uint8Array(31), "conn")).toThrow(/32 bytes/);
139
- });
140
- });
141
- describe("deriveFrameKeys", () => {
142
- it("is symmetric: both peers derive identical directional keys", () => {
143
- const params = derivationParams();
144
- const a = (0, frame_cipher_1.deriveFrameKeys)({ ...params });
145
- const b = (0, frame_cipher_1.deriveFrameKeys)({ ...params });
146
- expect(Buffer.from(a.clientToServer)).toEqual(Buffer.from(b.clientToServer));
147
- expect(Buffer.from(a.serverToClient)).toEqual(Buffer.from(b.serverToClient));
148
- expect(Buffer.from(a.clientToServer).equals(Buffer.from(a.serverToClient))).toBe(false);
149
- });
150
- it("maps roles onto directions so client.send == server.receive", () => {
151
- const derived = (0, frame_cipher_1.deriveFrameKeys)(derivationParams());
152
- const client = (0, frame_cipher_1.frameKeysForRole)(derived, "client");
153
- const server = (0, frame_cipher_1.frameKeysForRole)(derived, "server");
154
- expect(Buffer.from(client.sendKey)).toEqual(Buffer.from(server.receiveKey));
155
- expect(Buffer.from(client.receiveKey)).toEqual(Buffer.from(server.sendKey));
156
- });
157
- it("changes with every input", () => {
158
- const base = derivationParams();
159
- const reference = (0, frame_cipher_1.deriveFrameKeys)(base);
160
- const variants = [
161
- { ephemeralSharedSecret: nacl.randomBytes(32) },
162
- { staticSharedSecret: nacl.randomBytes(32) },
163
- { connectionId: (0, utils_1.newid)() },
164
- { clientDeviceId: (0, utils_1.newid)() },
165
- { serverDeviceId: (0, utils_1.newid)() },
166
- { timestamp: base.timestamp + 1 },
167
- ];
168
- for (const variant of variants) {
169
- const derived = (0, frame_cipher_1.deriveFrameKeys)({ ...base, ...variant });
170
- expect(Buffer.from(derived.clientToServer).equals(Buffer.from(reference.clientToServer))).toBe(false);
171
- expect(Buffer.from(derived.serverToClient).equals(Buffer.from(reference.serverToClient))).toBe(false);
172
- }
173
- });
174
- it("distinguishes swapped device IDs", () => {
175
- const base = derivationParams();
176
- const a = (0, frame_cipher_1.deriveFrameKeys)(base);
177
- const b = (0, frame_cipher_1.deriveFrameKeys)({
178
- ...base,
179
- clientDeviceId: base.serverDeviceId,
180
- serverDeviceId: base.clientDeviceId,
181
- });
182
- expect(Buffer.from(a.clientToServer).equals(Buffer.from(b.clientToServer))).toBe(false);
183
- });
184
- it("rejects malformed inputs", () => {
185
- const base = derivationParams();
186
- expect(() => (0, frame_cipher_1.deriveFrameKeys)({ ...base, ephemeralSharedSecret: new Uint8Array(31) })).toThrow(/32-byte/);
187
- expect(() => (0, frame_cipher_1.deriveFrameKeys)({ ...base, connectionId: "" })).toThrow(/connectionId/);
188
- expect(() => (0, frame_cipher_1.deriveFrameKeys)({ ...base, timestamp: -1 })).toThrow(/timestamp/);
189
- expect(() => (0, frame_cipher_1.deriveFrameKeys)({ ...base, timestamp: 1.5 })).toThrow(/timestamp/);
190
- });
191
- it("works end to end with real X25519 shared secrets", () => {
192
- const clientEph = nacl.box.keyPair();
193
- const serverEph = nacl.box.keyPair();
194
- const clientStatic = nacl.box.keyPair();
195
- const serverStatic = nacl.box.keyPair();
196
- const common = {
197
- connectionId: (0, utils_1.newid)(),
198
- clientDeviceId: (0, utils_1.newid)(),
199
- serverDeviceId: (0, utils_1.newid)(),
200
- timestamp: Date.now(),
201
- };
202
- const clientKeys = (0, frame_cipher_1.frameKeysForRole)((0, frame_cipher_1.deriveFrameKeys)({
203
- ...common,
204
- ephemeralSharedSecret: nacl.scalarMult(clientEph.secretKey, serverEph.publicKey),
205
- staticSharedSecret: nacl.scalarMult(clientStatic.secretKey, serverStatic.publicKey),
206
- }), "client");
207
- const serverKeys = (0, frame_cipher_1.frameKeysForRole)((0, frame_cipher_1.deriveFrameKeys)({
208
- ...common,
209
- ephemeralSharedSecret: nacl.scalarMult(serverEph.secretKey, clientEph.publicKey),
210
- staticSharedSecret: nacl.scalarMult(serverStatic.secretKey, clientStatic.publicKey),
211
- }), "server");
212
- const client = (0, frame_cipher_1.createFrameCiphers)(clientKeys, common.connectionId);
213
- const server = (0, frame_cipher_1.createFrameCiphers)(serverKeys, common.connectionId);
214
- const inner = innerFrame(0x11, Buffer.from("hello over x25519"));
215
- expect(Buffer.from(server.opener.open(client.sealer.seal(inner)) ?? [])).toEqual(Buffer.from(inner));
216
- expect(Buffer.from(client.opener.open(server.sealer.seal(inner)) ?? [])).toEqual(Buffer.from(inner));
217
- });
218
- });
219
- });
@@ -1 +0,0 @@
1
- export {};