@peers-app/peers-sdk 0.27.3 → 0.27.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (258) hide show
  1. package/dist/contracts/contract-proxy.d.ts +7 -0
  2. package/dist/contracts/contract-proxy.js +19 -2
  3. package/dist/contracts/create-local-consumer.js +16 -1
  4. package/dist/contracts/index.d.ts +2 -0
  5. package/dist/contracts/index.js +2 -0
  6. package/dist/contracts/system/index.d.ts +2 -0
  7. package/dist/contracts/system/index.js +2 -0
  8. package/dist/contracts/system/invites-contract.js +2 -1
  9. package/dist/contracts/system/sync-check-contract.d.ts +97 -0
  10. package/dist/contracts/system/sync-check-contract.js +115 -0
  11. package/dist/contracts/tool-arguments.d.ts +15 -0
  12. package/dist/contracts/tool-arguments.js +41 -0
  13. package/dist/contracts/tool-catalog-service.js +2 -12
  14. package/dist/data/change-tracking.d.ts +40 -0
  15. package/dist/data/change-tracking.js +89 -0
  16. package/dist/data/orm/types.d.ts +24 -7
  17. package/dist/data/orm/types.js +97 -24
  18. package/dist/define/manifest.js +6 -34
  19. package/dist/package-loader/package-loader.js +27 -22
  20. package/dist/system-ids.d.ts +5 -0
  21. package/dist/system-ids.js +6 -1
  22. package/package.json +4 -2
  23. package/dist/context/user-context-identity.test.d.ts +0 -1
  24. package/dist/context/user-context-identity.test.js +0 -220
  25. package/dist/contracts/__tests__/action-dispatch.test.d.ts +0 -1
  26. package/dist/contracts/__tests__/action-dispatch.test.js +0 -319
  27. package/dist/contracts/__tests__/also-implements.test.d.ts +0 -1
  28. package/dist/contracts/__tests__/also-implements.test.js +0 -110
  29. package/dist/contracts/__tests__/builder.test.d.ts +0 -1
  30. package/dist/contracts/__tests__/builder.test.js +0 -669
  31. package/dist/contracts/__tests__/contract-events.test.d.ts +0 -1
  32. package/dist/contracts/__tests__/contract-events.test.js +0 -199
  33. package/dist/contracts/__tests__/contract-observables.test.d.ts +0 -1
  34. package/dist/contracts/__tests__/contract-observables.test.js +0 -290
  35. package/dist/contracts/__tests__/contract-provider-router.test.d.ts +0 -1
  36. package/dist/contracts/__tests__/contract-provider-router.test.js +0 -315
  37. package/dist/contracts/__tests__/contract-proxy.test.d.ts +0 -1
  38. package/dist/contracts/__tests__/contract-proxy.test.js +0 -657
  39. package/dist/contracts/__tests__/contract-resolvers.test.d.ts +0 -1
  40. package/dist/contracts/__tests__/contract-resolvers.test.js +0 -758
  41. package/dist/contracts/__tests__/contract-subscription-lifecycle.test.d.ts +0 -1
  42. package/dist/contracts/__tests__/contract-subscription-lifecycle.test.js +0 -353
  43. package/dist/contracts/__tests__/contract-table-events.test.d.ts +0 -1
  44. package/dist/contracts/__tests__/contract-table-events.test.js +0 -209
  45. package/dist/contracts/__tests__/contract-transport.test.d.ts +0 -1
  46. package/dist/contracts/__tests__/contract-transport.test.js +0 -163
  47. package/dist/contracts/__tests__/extract.test.d.ts +0 -1
  48. package/dist/contracts/__tests__/extract.test.js +0 -145
  49. package/dist/contracts/__tests__/frozen-contracts.test.d.ts +0 -1
  50. package/dist/contracts/__tests__/frozen-contracts.test.js +0 -191
  51. package/dist/contracts/__tests__/generic-tool-dispatch.test.d.ts +0 -1
  52. package/dist/contracts/__tests__/generic-tool-dispatch.test.js +0 -130
  53. package/dist/contracts/__tests__/host-contract-client.test.d.ts +0 -1
  54. package/dist/contracts/__tests__/host-contract-client.test.js +0 -793
  55. package/dist/contracts/__tests__/host-contract-consumer.test.d.ts +0 -1
  56. package/dist/contracts/__tests__/host-contract-consumer.test.js +0 -163
  57. package/dist/contracts/__tests__/host-contract-transport.test.d.ts +0 -1
  58. package/dist/contracts/__tests__/host-contract-transport.test.js +0 -66
  59. package/dist/contracts/__tests__/integration.test.d.ts +0 -1
  60. package/dist/contracts/__tests__/integration.test.js +0 -348
  61. package/dist/contracts/__tests__/legacy-removal.test.d.ts +0 -1
  62. package/dist/contracts/__tests__/legacy-removal.test.js +0 -128
  63. package/dist/contracts/__tests__/persistent-registry.test.d.ts +0 -1
  64. package/dist/contracts/__tests__/persistent-registry.test.js +0 -109
  65. package/dist/contracts/__tests__/playground.test.d.ts +0 -1
  66. package/dist/contracts/__tests__/playground.test.js +0 -216
  67. package/dist/contracts/__tests__/registry.test.d.ts +0 -1
  68. package/dist/contracts/__tests__/registry.test.js +0 -238
  69. package/dist/contracts/__tests__/remote-contract-transport.test.d.ts +0 -1
  70. package/dist/contracts/__tests__/remote-contract-transport.test.js +0 -119
  71. package/dist/contracts/__tests__/system-contracts.test.d.ts +0 -1
  72. package/dist/contracts/__tests__/system-contracts.test.js +0 -247
  73. package/dist/contracts/__tests__/target-dispatch.d.ts +0 -11
  74. package/dist/contracts/__tests__/target-dispatch.js +0 -24
  75. package/dist/contracts/__tests__/tool-catalog-inventory.test.d.ts +0 -1
  76. package/dist/contracts/__tests__/tool-catalog-inventory.test.js +0 -44
  77. package/dist/contracts/__tests__/tool-catalog-service.test.d.ts +0 -1
  78. package/dist/contracts/__tests__/tool-catalog-service.test.js +0 -482
  79. package/dist/contracts/__tests__/tool-catalog.test.d.ts +0 -1
  80. package/dist/contracts/__tests__/tool-catalog.test.js +0 -1199
  81. package/dist/contracts/__tests__/validate.test.d.ts +0 -1
  82. package/dist/contracts/__tests__/validate.test.js +0 -991
  83. package/dist/contracts/__tests__/workflow-context.test.d.ts +0 -1
  84. package/dist/contracts/__tests__/workflow-context.test.js +0 -50
  85. package/dist/data/access-level.test.d.ts +0 -1
  86. package/dist/data/access-level.test.js +0 -53
  87. package/dist/data/change-tracking.test.d.ts +0 -1
  88. package/dist/data/change-tracking.test.js +0 -62
  89. package/dist/data/files/files.test.d.ts +0 -1
  90. package/dist/data/files/files.test.js +0 -770
  91. package/dist/data/group-members.test.d.ts +0 -1
  92. package/dist/data/group-members.test.js +0 -336
  93. package/dist/data/group-share.test.d.ts +0 -1
  94. package/dist/data/group-share.test.js +0 -110
  95. package/dist/data/groups.test.d.ts +0 -1
  96. package/dist/data/groups.test.js +0 -153
  97. package/dist/data/orm/cursor.test.d.ts +0 -1
  98. package/dist/data/orm/cursor.test.js +0 -314
  99. package/dist/data/orm/data-query.mongo.test.d.ts +0 -1
  100. package/dist/data/orm/data-query.mongo.test.js +0 -367
  101. package/dist/data/orm/data-query.sqlite.test.d.ts +0 -1
  102. package/dist/data/orm/data-query.sqlite.test.js +0 -365
  103. package/dist/data/orm/data-query.test.d.ts +0 -1
  104. package/dist/data/orm/data-query.test.js +0 -545
  105. package/dist/data/orm/dependency-injection.test.d.ts +0 -1
  106. package/dist/data/orm/dependency-injection.test.js +0 -171
  107. package/dist/data/orm/event-registry.test.d.ts +0 -1
  108. package/dist/data/orm/event-registry.test.js +0 -44
  109. package/dist/data/orm/multi-cursors.test.d.ts +0 -1
  110. package/dist/data/orm/multi-cursors.test.js +0 -463
  111. package/dist/data/orm/sql.data-source.test.d.ts +0 -1
  112. package/dist/data/orm/sql.data-source.test.js +0 -731
  113. package/dist/data/orm/table-container-events.test.d.ts +0 -1
  114. package/dist/data/orm/table-container-events.test.js +0 -101
  115. package/dist/data/orm/table-container.test.d.ts +0 -1
  116. package/dist/data/orm/table-container.test.js +0 -273
  117. package/dist/data/orm/table.event-source.test.d.ts +0 -1
  118. package/dist/data/orm/table.event-source.test.js +0 -331
  119. package/dist/data/orm/types.test.d.ts +0 -1
  120. package/dist/data/orm/types.test.js +0 -409
  121. package/dist/data/package-table-identity.test.d.ts +0 -1
  122. package/dist/data/package-table-identity.test.js +0 -46
  123. package/dist/data/package-version-permissions.test.d.ts +0 -1
  124. package/dist/data/package-version-permissions.test.js +0 -107
  125. package/dist/data/package-version-resolver.test.d.ts +0 -4
  126. package/dist/data/package-version-resolver.test.js +0 -543
  127. package/dist/data/package-versions.test.d.ts +0 -1
  128. package/dist/data/package-versions.test.js +0 -227
  129. package/dist/data/persistent-vars.conflict.test.d.ts +0 -1
  130. package/dist/data/persistent-vars.conflict.test.js +0 -126
  131. package/dist/data/persistent-vars.migration.test.d.ts +0 -1
  132. package/dist/data/persistent-vars.migration.test.js +0 -133
  133. package/dist/data/persistent-vars.package-scope.test.d.ts +0 -1
  134. package/dist/data/persistent-vars.package-scope.test.js +0 -27
  135. package/dist/data/sync-recovery-queue.test.d.ts +0 -1
  136. package/dist/data/sync-recovery-queue.test.js +0 -215
  137. package/dist/data/table-signing.test.d.ts +0 -1
  138. package/dist/data/table-signing.test.js +0 -118
  139. package/dist/data/tool-access.test.d.ts +0 -1
  140. package/dist/data/tool-access.test.js +0 -166
  141. package/dist/data/user-permissions.test.d.ts +0 -1
  142. package/dist/data/user-permissions.test.js +0 -305
  143. package/dist/data/user-trust-levels.test.d.ts +0 -1
  144. package/dist/data/user-trust-levels.test.js +0 -37
  145. package/dist/define/also-implements.test.d.ts +0 -1
  146. package/dist/define/also-implements.test.js +0 -123
  147. package/dist/define/declare-contract.test.d.ts +0 -1
  148. package/dist/define/declare-contract.test.js +0 -573
  149. package/dist/define/define.test.d.ts +0 -1
  150. package/dist/define/define.test.js +0 -1010
  151. package/dist/define/empty-fields.test.d.ts +0 -1
  152. package/dist/define/empty-fields.test.js +0 -55
  153. package/dist/define/events-observables.test.d.ts +0 -1
  154. package/dist/define/events-observables.test.js +0 -1013
  155. package/dist/define/serve-members.test.d.ts +0 -1
  156. package/dist/define/serve-members.test.js +0 -630
  157. package/dist/define/vars.test.d.ts +0 -1
  158. package/dist/define/vars.test.js +0 -39
  159. package/dist/device/binary-peer-connection-v2.test.d.ts +0 -1
  160. package/dist/device/binary-peer-connection-v2.test.js +0 -730
  161. package/dist/device/binary-peer-connection.test.d.ts +0 -1
  162. package/dist/device/binary-peer-connection.test.js +0 -184
  163. package/dist/device/connection.test.d.ts +0 -1
  164. package/dist/device/connection.test.js +0 -613
  165. package/dist/device/device-election.test.d.ts +0 -1
  166. package/dist/device/device-election.test.js +0 -516
  167. package/dist/device/device.test.d.ts +0 -1
  168. package/dist/device/device.test.js +0 -243
  169. package/dist/device/frame-cipher.test.d.ts +0 -1
  170. package/dist/device/frame-cipher.test.js +0 -219
  171. package/dist/device/get-trust-level-fn.test.d.ts +0 -1
  172. package/dist/device/get-trust-level-fn.test.js +0 -685
  173. package/dist/device/streamed-socket.test.d.ts +0 -1
  174. package/dist/device/streamed-socket.test.js +0 -216
  175. package/dist/device/tx-encoding.test.d.ts +0 -1
  176. package/dist/device/tx-encoding.test.js +0 -295
  177. package/dist/device-pairing/cpace.test.d.ts +0 -1
  178. package/dist/device-pairing/cpace.test.js +0 -116
  179. package/dist/device-pairing/device-pairing.test.d.ts +0 -1
  180. package/dist/device-pairing/device-pairing.test.js +0 -211
  181. package/dist/hlc.test.d.ts +0 -1
  182. package/dist/hlc.test.js +0 -45
  183. package/dist/host-credentials.test.d.ts +0 -1
  184. package/dist/host-credentials.test.js +0 -88
  185. package/dist/identity/account-email.test.d.ts +0 -1
  186. package/dist/identity/account-email.test.js +0 -59
  187. package/dist/identity/anchor-document.test.d.ts +0 -1
  188. package/dist/identity/anchor-document.test.js +0 -16
  189. package/dist/identity/anchor-resolution.test.d.ts +0 -1
  190. package/dist/identity/anchor-resolution.test.js +0 -130
  191. package/dist/identity/key-change.test.d.ts +0 -1
  192. package/dist/identity/key-change.test.js +0 -811
  193. package/dist/invites/group-approval.test.d.ts +0 -1
  194. package/dist/invites/group-approval.test.js +0 -223
  195. package/dist/invites/invite-token.test.d.ts +0 -1
  196. package/dist/invites/invite-token.test.js +0 -123
  197. package/dist/keys.test.d.ts +0 -1
  198. package/dist/keys.test.js +0 -336
  199. package/dist/logging/console-logger.test.d.ts +0 -1
  200. package/dist/logging/console-logger.test.js +0 -300
  201. package/dist/logging/console-logs.table.test.d.ts +0 -1
  202. package/dist/logging/console-logs.table.test.js +0 -156
  203. package/dist/observable.test.d.ts +0 -1
  204. package/dist/observable.test.js +0 -309
  205. package/dist/package-build/build-package.test.d.ts +0 -1
  206. package/dist/package-build/build-package.test.js +0 -204
  207. package/dist/package-build/contract-add.test.d.ts +0 -1
  208. package/dist/package-build/contract-add.test.js +0 -467
  209. package/dist/package-build/freeze-contracts.test.d.ts +0 -1
  210. package/dist/package-build/freeze-contracts.test.js +0 -355
  211. package/dist/package-installer/package-author-signing.test.d.ts +0 -1
  212. package/dist/package-installer/package-author-signing.test.js +0 -200
  213. package/dist/package-installer/package-cloner.test.d.ts +0 -1
  214. package/dist/package-installer/package-cloner.test.js +0 -278
  215. package/dist/package-installer/package-creator.test.d.ts +0 -1
  216. package/dist/package-installer/package-creator.test.js +0 -908
  217. package/dist/package-installer/package-dev-tools.test.d.ts +0 -1
  218. package/dist/package-installer/package-dev-tools.test.js +0 -64
  219. package/dist/package-installer/package-installer.test.d.ts +0 -1
  220. package/dist/package-installer/package-installer.test.js +0 -882
  221. package/dist/package-installer/package-propagation.test.d.ts +0 -1
  222. package/dist/package-installer/package-propagation.test.js +0 -1269
  223. package/dist/package-installer/package-publisher.test.d.ts +0 -1
  224. package/dist/package-installer/package-publisher.test.js +0 -153
  225. package/dist/package-installer/package-remote-checker.test.d.ts +0 -1
  226. package/dist/package-installer/package-remote-checker.test.js +0 -334
  227. package/dist/package-installer/package-seed-installer.test.d.ts +0 -1
  228. package/dist/package-installer/package-seed-installer.test.js +0 -123
  229. package/dist/package-installer/package-tarball.test.d.ts +0 -1
  230. package/dist/package-installer/package-tarball.test.js +0 -75
  231. package/dist/package-installer/peers-core-installer.test.d.ts +0 -1
  232. package/dist/package-installer/peers-core-installer.test.js +0 -49
  233. package/dist/package-installer/peers-core-trust-anchor.test.d.ts +0 -1
  234. package/dist/package-installer/peers-core-trust-anchor.test.js +0 -155
  235. package/dist/package-loader/contract-package-loader.test.d.ts +0 -1
  236. package/dist/package-loader/contract-package-loader.test.js +0 -274
  237. package/dist/package-loader/host-authority-loading.test.d.ts +0 -1
  238. package/dist/package-loader/host-authority-loading.test.js +0 -104
  239. package/dist/package-loader/host-dispatch-policy.test.d.ts +0 -1
  240. package/dist/package-loader/host-dispatch-policy.test.js +0 -56
  241. package/dist/package-loader/isolated-artifact.test.d.ts +0 -1
  242. package/dist/package-loader/isolated-artifact.test.js +0 -688
  243. package/dist/package-loader/isolated-persistent-var-gateway.test.d.ts +0 -1
  244. package/dist/package-loader/isolated-persistent-var-gateway.test.js +0 -56
  245. package/dist/package-loader/isolated-table-gateway.test.d.ts +0 -1
  246. package/dist/package-loader/isolated-table-gateway.test.js +0 -633
  247. package/dist/package-loader/package-loader.test.d.ts +0 -1
  248. package/dist/package-loader/package-loader.test.js +0 -1764
  249. package/dist/package-loader/resolve-consumed-contracts.test.d.ts +0 -1
  250. package/dist/package-loader/resolve-consumed-contracts.test.js +0 -166
  251. package/dist/serial-json.compat.test.d.ts +0 -1
  252. package/dist/serial-json.compat.test.js +0 -369
  253. package/dist/serial-json.test.d.ts +0 -1
  254. package/dist/serial-json.test.js +0 -401
  255. package/dist/testing/mock-host-contract.test.d.ts +0 -1
  256. package/dist/testing/mock-host-contract.test.js +0 -782
  257. package/dist/utils.test.d.ts +0 -1
  258. package/dist/utils.test.js +0 -232
@@ -1,243 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- const data_1 = require("../data");
4
- const keys_1 = require("../keys");
5
- const utils_1 = require("../utils");
6
- const device_1 = require("./device");
7
- describe(device_1.Device, () => {
8
- it("should create a new device with valid keys", async () => {
9
- const userId = (0, utils_1.newid)();
10
- const device = new device_1.Device(userId);
11
- expect(device.userId).toBe(userId);
12
- expect(device.deviceId).toBeTruthy();
13
- expect(device.publicKey).toBeTruthy();
14
- expect(device.publicBoxKey).toBeTruthy();
15
- const msg = "Hello, World!";
16
- const signedMsg = device.signMessageWithSecretKey(msg);
17
- expect(signedMsg).toBeTruthy();
18
- const openedMsg = (0, keys_1.openMessageWithPublicKey)(signedMsg, device.publicKey);
19
- expect(openedMsg).toBe(msg);
20
- const obj = { msg };
21
- const signedObj = device.signObjectWithSecretKey(obj);
22
- expect(signedObj.contents).toEqual(obj);
23
- const openedObj = (0, keys_1.openSignedObject)(signedObj);
24
- expect(openedObj).toEqual(obj);
25
- const userId2 = (0, utils_1.newid)();
26
- const device2 = new device_1.Device(userId2);
27
- {
28
- const box = device.boxDataWithKeys(obj, device2.publicBoxKey);
29
- expect(box).toBeTruthy();
30
- const openedBox = device2.openBoxWithSecretKey(box);
31
- expect(openedBox).toEqual(obj);
32
- }
33
- {
34
- const box = device.boxDataForDevice(obj, device2);
35
- expect(box).toBeTruthy();
36
- const openedBox = device2.openBoxWithSecretKey(box);
37
- expect(openedBox).toEqual(obj);
38
- }
39
- });
40
- describe("handshakes", () => {
41
- const userId1 = (0, utils_1.newid)();
42
- const client = new device_1.Device(userId1);
43
- const userId2 = (0, utils_1.newid)();
44
- const server = new device_1.Device(userId2);
45
- describe("getHandshake", () => {
46
- it("should return a valid and correct handshake object", async () => {
47
- const connectionId = (0, utils_1.newid)();
48
- const handshake = client.getHandshake(connectionId, "localhost");
49
- expect(handshake.publicKey).toBe(client.publicKey);
50
- expect(handshake.contents.userId).toBe(userId1);
51
- expect(handshake.contents.publicKey).toBe(client.publicKey);
52
- expect(handshake.contents.publicBoxKey).toBe(client.publicBoxKey);
53
- expect(handshake.contents.connectionId).toBe(connectionId);
54
- });
55
- it("includes bounded display metadata and refreshes cached device info", () => {
56
- const device = new device_1.Device((0, utils_1.newid)(), (0, utils_1.newid)(), (0, keys_1.newKeys)(), {
57
- userName: "Mark",
58
- deviceName: "Office laptop",
59
- });
60
- const originalInfo = device.getDeviceInfo();
61
- expect(originalInfo.contents).toMatchObject({
62
- userName: "Mark",
63
- deviceName: "Office laptop",
64
- });
65
- device.setDisplayInfo({ userName: "Mark Archer", deviceName: "Kitchen display" });
66
- const refreshedInfo = device.getDeviceInfo();
67
- const handshake = device.getHandshake((0, utils_1.newid)(), "localhost");
68
- expect(refreshedInfo).not.toBe(originalInfo);
69
- expect(refreshedInfo.contents).toMatchObject({
70
- userName: "Mark Archer",
71
- deviceName: "Kitchen display",
72
- });
73
- expect(handshake.contents).toMatchObject({
74
- userName: "Mark Archer",
75
- deviceName: "Kitchen display",
76
- });
77
- });
78
- it("bounds invalid local display metadata before signing it", () => {
79
- const device = new device_1.Device((0, utils_1.newid)(), (0, utils_1.newid)(), (0, keys_1.newKeys)(), {
80
- deviceName: "x".repeat(data_1.DISPLAY_NAME_MAX_LENGTH + 1),
81
- });
82
- expect(device.getDeviceInfo().contents.deviceName).toHaveLength(data_1.DISPLAY_NAME_MAX_LENGTH);
83
- });
84
- });
85
- describe("handshakeResponse", () => {
86
- it("should return a valid and correct handshake response object", async () => {
87
- const connectionId = (0, utils_1.newid)();
88
- const handshake = client.getHandshake(connectionId, "localhost");
89
- const handshakeResponse = server.handshakeResponse(handshake, connectionId, "localhost");
90
- expect(handshakeResponse.userId).toBe(userId2);
91
- expect(handshakeResponse.deviceId).toBe(server.deviceId);
92
- expect(handshakeResponse.publicKey).toBe(server.publicKey);
93
- expect(handshakeResponse.publicBoxKey).toBe(server.publicBoxKey);
94
- expect(handshakeResponse.connectionId).toBe(connectionId);
95
- });
96
- it("should detect when requests and responses are being forwarded through a different connection", async () => {
97
- const c1 = {
98
- connectionId: (0, utils_1.newid)(),
99
- };
100
- const c2 = {
101
- connectionId: (0, utils_1.newid)(),
102
- };
103
- const handshake = client.getHandshake(c1.connectionId, "localhost");
104
- expect(() => server.handshakeResponse(handshake, c2.connectionId, "localhost")).toThrow(/Invalid connectionId/);
105
- });
106
- it("rejects signed handshake metadata that exceeds the display-name limit", () => {
107
- const connectionId = (0, utils_1.newid)();
108
- const handshake = client.signObjectWithSecretKey({
109
- connectionId,
110
- userId: client.userId,
111
- deviceId: client.deviceId,
112
- publicKey: client.publicKey,
113
- publicBoxKey: client.publicBoxKey,
114
- userName: "x".repeat(data_1.DISPLAY_NAME_MAX_LENGTH + 1),
115
- serverAddress: "localhost",
116
- timestamp: Date.now(),
117
- });
118
- expect(() => server.handshakeResponse(handshake, connectionId, "localhost")).toThrow();
119
- });
120
- it("should reject a handshake signed by a different key than the one claimed in the payload (key confusion)", async () => {
121
- const connectionId = (0, utils_1.newid)();
122
- // Imposter holds a random secret key but claims the real client's publicKey/publicBoxKey.
123
- // getHandshake signs with the random key, so signedObj.publicKey != contents.publicKey.
124
- const clientImposter = new device_1.Device(userId1, client.deviceId, {
125
- secretKey: (0, keys_1.newKeys)().secretKey,
126
- publicKey: client.publicKey,
127
- publicBoxKey: client.publicBoxKey,
128
- });
129
- const handshake = clientImposter.getHandshake(connectionId, "localhost");
130
- expect(() => server.handshakeResponse(handshake, connectionId, "localhost")).toThrow(/signing key does not match claimed identity key/i);
131
- });
132
- it("should detect when requests and responses are being forwarded through a different address", async () => {
133
- const connToServer = {
134
- connectionId: (0, utils_1.newid)(),
135
- };
136
- const _connToClient = {
137
- connectionId: connToServer.connectionId,
138
- };
139
- const _manInTheMiddle = new device_1.Device(userId2);
140
- // const mitmAddress = manInTheMiddle.publicAddress || manInTheMiddle.localAddress;
141
- // const connToManInTheMiddle = {
142
- // connectionId: connToServer.connectionId,
143
- // remoteAddress: mitmAddress
144
- // };
145
- // // client is being intercepted
146
- // {
147
- // expect(() => {
148
- // doHandshake(client, connToManInTheMiddle, server, connToClient);
149
- // }).toThrow(/Invalid client address/);
150
- // }
151
- // // server is being intercepted
152
- // {
153
- // expect(() => {
154
- // doHandshake(client, connToServer, server, connToManInTheMiddle);
155
- // }).toThrow(/Invalid server address/);
156
- // }
157
- });
158
- });
159
- });
160
- });
161
- /*
162
- describe(ServerDevice, () => {
163
- describe("newConnection", () => {
164
- it("should create a new connection with a valid server device and valid client device", async () => {
165
- const serverDevice = new Device();
166
- const server = new ServerDevice(serverDevice);
167
-
168
- const clientDevice = new Device();
169
-
170
- let conn = await server.newConnection(clientDevice.address);
171
-
172
- // don't allow RPC calls to the server before the handshake is complete
173
- {
174
- const result: any = await conn.rpcCall('ping', {}).catch((err) => err);
175
- expect(result?.message).toMatch(/Connection not verified/);
176
- }
177
-
178
- const handshakeSigned = clientDevice.getHandshake({ connectionId: conn.connectionId, remoteAddress: serverDevice.address });
179
- const handshakeBoxed = clientDevice.boxDataForDevice(handshakeSigned, serverDevice);
180
- const responseBox = await conn.completeHandshake(handshakeBoxed);
181
- const responseSigned = clientDevice.openBoxWithSecretKey(responseBox);
182
- const response = openSignedObject(responseSigned) as IDeviceHandshake;
183
- expect(response.userId).toBe(serverDevice.userId);
184
- expect(response.deviceId).toBe(serverDevice.deviceId);
185
- expect(response.publicKey).toBe(serverDevice.publicKey);
186
- expect(response.publicBoxKey).toBe(serverDevice.publicBoxKey);
187
- expect(response.localAddress).toBe(serverDevice.localAddress);
188
- expect(response.publicAddress).toBe(serverDevice.publicAddress);
189
- expect(response.connectionId).toBe(conn.connectionId);
190
- expect(response.remoteAddress).toBe(clientDevice.address);
191
-
192
- conn = await server.getConnection(conn.connectionId);
193
-
194
- expect(conn.server).toEqual({
195
- userId: serverDevice.userId,
196
- deviceId: serverDevice.deviceId,
197
- publicKey: serverDevice.publicKey,
198
- publicBoxKey: serverDevice.publicBoxKey
199
- });
200
- expect(conn.client).toEqual({
201
- userId: clientDevice.userId,
202
- deviceId: clientDevice.deviceId,
203
- publicKey: clientDevice.publicKey,
204
- publicBoxKey: clientDevice.publicBoxKey
205
- });
206
- expect(conn.clientAddress).toBe(clientDevice.address);
207
- expect(conn.secure).toBe(true);
208
- expect(conn.verified).toBe(true);
209
-
210
- // allow RPC calls to the server after the handshake is complete
211
- {
212
- const result: any = await conn.rpcCall('ping', {}).catch((err) => err);
213
- expect(result).toBe('pong');
214
- }
215
- });
216
-
217
- it("should leave connections as insecure if the remoteAddress doesn't match", async () => {
218
- const serverDevice = new Device();
219
- const server = new ServerDevice(serverDevice);
220
-
221
- const clientDevice = new Device();
222
-
223
- let conn = await server.newConnection(clientDevice.address);
224
-
225
- const handshakeSigned = clientDevice.getHandshake({ connectionId: conn.connectionId, remoteAddress: 'using proxy' });
226
- const handshakeBoxed = clientDevice.boxDataForDevice(handshakeSigned, serverDevice);
227
- const responseBox = await conn.completeHandshake(handshakeBoxed);
228
- const response = clientDevice.openBoxedAndSignedData(responseBox) as IDeviceHandshake;
229
- expect(response.userId).toBe(serverDevice.userId);
230
-
231
- conn = await server.getConnection(conn.connectionId);
232
-
233
- expect(conn.verified).toBe(true);
234
- expect(conn.secure).toBe(false);
235
-
236
- // confirm responses are signed and boxed
237
- const resultBox = await conn.rpcCall('ping', {}).catch((err) => err) as IDataBox;
238
- const result = clientDevice.openBoxedAndSignedData(resultBox);
239
- expect(result).toBe('pong');
240
- });
241
- });
242
- })
243
- */
@@ -1 +0,0 @@
1
- export {};
@@ -1,219 +0,0 @@
1
- "use strict";
2
- Object.defineProperty(exports, "__esModule", { value: true });
3
- const nacl = require("tweetnacl");
4
- const utils_1 = require("../utils");
5
- const frame_cipher_1 = require("./frame-cipher");
6
- function randomKey() {
7
- return nacl.randomBytes(32);
8
- }
9
- function derivationParams() {
10
- return {
11
- ephemeralSharedSecret: nacl.randomBytes(32),
12
- staticSharedSecret: nacl.randomBytes(32),
13
- connectionId: (0, utils_1.newid)(),
14
- clientDeviceId: (0, utils_1.newid)(),
15
- serverDeviceId: (0, utils_1.newid)(),
16
- timestamp: Date.now(),
17
- };
18
- }
19
- function innerFrame(type, payload) {
20
- const frame = new Uint8Array(1 + payload.length);
21
- frame[0] = type;
22
- frame.set(payload, 1);
23
- return frame;
24
- }
25
- describe("frame-cipher", () => {
26
- describe("seal / open", () => {
27
- it("round-trips an inner frame with exactly FRAME_CIPHER_OVERHEAD bytes added", () => {
28
- const key = randomKey();
29
- const connectionId = (0, utils_1.newid)();
30
- const sealer = new frame_cipher_1.FrameSealer(key.slice(), connectionId);
31
- const opener = new frame_cipher_1.FrameOpener(key.slice(), connectionId);
32
- const inner = innerFrame(0x10, new Uint8Array([1, 2, 3, 4, 5]));
33
- const sealed = sealer.seal(inner);
34
- expect(sealed[0]).toBe(frame_cipher_1.FRAME_ENC);
35
- expect(sealed.length).toBe(inner.length + frame_cipher_1.FRAME_CIPHER_OVERHEAD);
36
- expect(Buffer.from(opener.open(sealed) ?? [])).toEqual(Buffer.from(inner));
37
- });
38
- it("round-trips an empty inner frame and a large inner frame", () => {
39
- const key = randomKey();
40
- const { sealer, opener } = (0, frame_cipher_1.createFrameCiphers)({ sendKey: key.slice(), receiveKey: key.slice() }, "conn");
41
- const empty = new Uint8Array(0);
42
- expect(opener.open(sealer.seal(empty))?.length).toBe(0);
43
- const large = new Uint8Array(512 * 1024);
44
- for (let i = 0; i < large.length; i++)
45
- large[i] = i % 251;
46
- const opened = opener.open(sealer.seal(large));
47
- expect(opened).not.toBeNull();
48
- expect(Buffer.from(opened)).toEqual(Buffer.from(large));
49
- });
50
- it("does not leak the inner frame bytes on the wire", () => {
51
- const key = randomKey();
52
- const sealer = new frame_cipher_1.FrameSealer(key, "conn");
53
- const marker = Buffer.from("SECRET-MARKER-0123456789abcdef");
54
- const sealed = Buffer.from(sealer.seal(innerFrame(0x00, marker)));
55
- expect(sealed.indexOf(marker)).toBe(-1);
56
- });
57
- it("fails to open with the wrong key", () => {
58
- const sealer = new frame_cipher_1.FrameSealer(randomKey(), "conn");
59
- const opener = new frame_cipher_1.FrameOpener(randomKey(), "conn");
60
- expect(opener.open(sealer.seal(innerFrame(0x00, new Uint8Array([9]))))).toBeNull();
61
- });
62
- it("fails to open with the wrong connectionId (AAD)", () => {
63
- const key = randomKey();
64
- const sealer = new frame_cipher_1.FrameSealer(key.slice(), "conn-a");
65
- const opener = new frame_cipher_1.FrameOpener(key.slice(), "conn-b");
66
- expect(opener.open(sealer.seal(innerFrame(0x00, new Uint8Array([9]))))).toBeNull();
67
- });
68
- it("fails to open a frame sealed for the other direction", () => {
69
- const derived = (0, frame_cipher_1.deriveFrameKeys)(derivationParams());
70
- const client = (0, frame_cipher_1.createFrameCiphers)((0, frame_cipher_1.frameKeysForRole)(derived, "client"), "conn");
71
- const server = (0, frame_cipher_1.createFrameCiphers)((0, frame_cipher_1.frameKeysForRole)(derived, "server"), "conn");
72
- const sealed = client.sealer.seal(innerFrame(0x00, new Uint8Array([1])));
73
- // The client's own opener holds the server-to-client key: wrong direction.
74
- expect(client.opener.open(sealed)).toBeNull();
75
- // The server's opener holds the client-to-server key and is at counter 0.
76
- expect(server.opener.open(sealed)).not.toBeNull();
77
- });
78
- it("fails to open when a ciphertext bit is flipped", () => {
79
- const key = randomKey();
80
- const sealer = new frame_cipher_1.FrameSealer(key.slice(), "conn");
81
- const opener = new frame_cipher_1.FrameOpener(key.slice(), "conn");
82
- const sealed = sealer.seal(innerFrame(0x00, new Uint8Array([1, 2, 3])));
83
- sealed[2] ^= 0x01;
84
- expect(opener.open(sealed)).toBeNull();
85
- });
86
- it("fails to open when the tag is truncated or the type byte is wrong", () => {
87
- const key = randomKey();
88
- const sealer = new frame_cipher_1.FrameSealer(key.slice(), "conn");
89
- const sealed = sealer.seal(innerFrame(0x00, new Uint8Array([1, 2, 3])));
90
- expect(new frame_cipher_1.FrameOpener(key.slice(), "conn").open(sealed.subarray(0, sealed.length - 1))).toBeNull();
91
- expect(new frame_cipher_1.FrameOpener(key.slice(), "conn").open(new Uint8Array([frame_cipher_1.FRAME_ENC]))).toBeNull();
92
- const wrongType = sealed.slice();
93
- wrongType[0] = 0x00;
94
- expect(new frame_cipher_1.FrameOpener(key.slice(), "conn").open(wrongType)).toBeNull();
95
- });
96
- it("fails to open a replayed frame because the receive counter has advanced", () => {
97
- const key = randomKey();
98
- const sealer = new frame_cipher_1.FrameSealer(key.slice(), "conn");
99
- const opener = new frame_cipher_1.FrameOpener(key.slice(), "conn");
100
- const sealed = sealer.seal(innerFrame(0x00, new Uint8Array([7])));
101
- expect(opener.open(sealed)).not.toBeNull();
102
- expect(opener.open(sealed)).toBeNull();
103
- });
104
- it("fails to open frames delivered out of order", () => {
105
- const key = randomKey();
106
- const sealer = new frame_cipher_1.FrameSealer(key.slice(), "conn");
107
- const opener = new frame_cipher_1.FrameOpener(key.slice(), "conn");
108
- sealer.seal(innerFrame(0x00, new Uint8Array([1]))); // frame 0, never delivered
109
- const second = sealer.seal(innerFrame(0x00, new Uint8Array([2])));
110
- expect(opener.open(second)).toBeNull();
111
- });
112
- it("advances counters independently per direction", () => {
113
- const derived = (0, frame_cipher_1.deriveFrameKeys)(derivationParams());
114
- const client = (0, frame_cipher_1.createFrameCiphers)((0, frame_cipher_1.frameKeysForRole)(derived, "client"), "conn");
115
- const server = (0, frame_cipher_1.createFrameCiphers)((0, frame_cipher_1.frameKeysForRole)(derived, "server"), "conn");
116
- for (let i = 0; i < 5; i++) {
117
- const opened = server.opener.open(client.sealer.seal(innerFrame(0x00, new Uint8Array([i]))));
118
- expect(opened?.[1]).toBe(i);
119
- }
120
- expect(client.sealer.count).toBe(5);
121
- expect(server.opener.count).toBe(5);
122
- expect(server.sealer.count).toBe(0);
123
- expect(client.opener.count).toBe(0);
124
- const back = client.opener.open(server.sealer.seal(innerFrame(0x00, new Uint8Array([42]))));
125
- expect(back?.[1]).toBe(42);
126
- expect(server.sealer.count).toBe(1);
127
- expect(client.opener.count).toBe(1);
128
- });
129
- it("produces different ciphertext for identical plaintext on consecutive frames", () => {
130
- const sealer = new frame_cipher_1.FrameSealer(randomKey(), "conn");
131
- const inner = innerFrame(0x00, new Uint8Array([1, 2, 3, 4]));
132
- const a = Buffer.from(sealer.seal(inner));
133
- const b = Buffer.from(sealer.seal(inner));
134
- expect(a.equals(b)).toBe(false);
135
- });
136
- it("rejects keys of the wrong length", () => {
137
- expect(() => new frame_cipher_1.FrameSealer(new Uint8Array(16), "conn")).toThrow(/32 bytes/);
138
- expect(() => new frame_cipher_1.FrameOpener(new Uint8Array(31), "conn")).toThrow(/32 bytes/);
139
- });
140
- });
141
- describe("deriveFrameKeys", () => {
142
- it("is symmetric: both peers derive identical directional keys", () => {
143
- const params = derivationParams();
144
- const a = (0, frame_cipher_1.deriveFrameKeys)({ ...params });
145
- const b = (0, frame_cipher_1.deriveFrameKeys)({ ...params });
146
- expect(Buffer.from(a.clientToServer)).toEqual(Buffer.from(b.clientToServer));
147
- expect(Buffer.from(a.serverToClient)).toEqual(Buffer.from(b.serverToClient));
148
- expect(Buffer.from(a.clientToServer).equals(Buffer.from(a.serverToClient))).toBe(false);
149
- });
150
- it("maps roles onto directions so client.send == server.receive", () => {
151
- const derived = (0, frame_cipher_1.deriveFrameKeys)(derivationParams());
152
- const client = (0, frame_cipher_1.frameKeysForRole)(derived, "client");
153
- const server = (0, frame_cipher_1.frameKeysForRole)(derived, "server");
154
- expect(Buffer.from(client.sendKey)).toEqual(Buffer.from(server.receiveKey));
155
- expect(Buffer.from(client.receiveKey)).toEqual(Buffer.from(server.sendKey));
156
- });
157
- it("changes with every input", () => {
158
- const base = derivationParams();
159
- const reference = (0, frame_cipher_1.deriveFrameKeys)(base);
160
- const variants = [
161
- { ephemeralSharedSecret: nacl.randomBytes(32) },
162
- { staticSharedSecret: nacl.randomBytes(32) },
163
- { connectionId: (0, utils_1.newid)() },
164
- { clientDeviceId: (0, utils_1.newid)() },
165
- { serverDeviceId: (0, utils_1.newid)() },
166
- { timestamp: base.timestamp + 1 },
167
- ];
168
- for (const variant of variants) {
169
- const derived = (0, frame_cipher_1.deriveFrameKeys)({ ...base, ...variant });
170
- expect(Buffer.from(derived.clientToServer).equals(Buffer.from(reference.clientToServer))).toBe(false);
171
- expect(Buffer.from(derived.serverToClient).equals(Buffer.from(reference.serverToClient))).toBe(false);
172
- }
173
- });
174
- it("distinguishes swapped device IDs", () => {
175
- const base = derivationParams();
176
- const a = (0, frame_cipher_1.deriveFrameKeys)(base);
177
- const b = (0, frame_cipher_1.deriveFrameKeys)({
178
- ...base,
179
- clientDeviceId: base.serverDeviceId,
180
- serverDeviceId: base.clientDeviceId,
181
- });
182
- expect(Buffer.from(a.clientToServer).equals(Buffer.from(b.clientToServer))).toBe(false);
183
- });
184
- it("rejects malformed inputs", () => {
185
- const base = derivationParams();
186
- expect(() => (0, frame_cipher_1.deriveFrameKeys)({ ...base, ephemeralSharedSecret: new Uint8Array(31) })).toThrow(/32-byte/);
187
- expect(() => (0, frame_cipher_1.deriveFrameKeys)({ ...base, connectionId: "" })).toThrow(/connectionId/);
188
- expect(() => (0, frame_cipher_1.deriveFrameKeys)({ ...base, timestamp: -1 })).toThrow(/timestamp/);
189
- expect(() => (0, frame_cipher_1.deriveFrameKeys)({ ...base, timestamp: 1.5 })).toThrow(/timestamp/);
190
- });
191
- it("works end to end with real X25519 shared secrets", () => {
192
- const clientEph = nacl.box.keyPair();
193
- const serverEph = nacl.box.keyPair();
194
- const clientStatic = nacl.box.keyPair();
195
- const serverStatic = nacl.box.keyPair();
196
- const common = {
197
- connectionId: (0, utils_1.newid)(),
198
- clientDeviceId: (0, utils_1.newid)(),
199
- serverDeviceId: (0, utils_1.newid)(),
200
- timestamp: Date.now(),
201
- };
202
- const clientKeys = (0, frame_cipher_1.frameKeysForRole)((0, frame_cipher_1.deriveFrameKeys)({
203
- ...common,
204
- ephemeralSharedSecret: nacl.scalarMult(clientEph.secretKey, serverEph.publicKey),
205
- staticSharedSecret: nacl.scalarMult(clientStatic.secretKey, serverStatic.publicKey),
206
- }), "client");
207
- const serverKeys = (0, frame_cipher_1.frameKeysForRole)((0, frame_cipher_1.deriveFrameKeys)({
208
- ...common,
209
- ephemeralSharedSecret: nacl.scalarMult(serverEph.secretKey, clientEph.publicKey),
210
- staticSharedSecret: nacl.scalarMult(serverStatic.secretKey, clientStatic.publicKey),
211
- }), "server");
212
- const client = (0, frame_cipher_1.createFrameCiphers)(clientKeys, common.connectionId);
213
- const server = (0, frame_cipher_1.createFrameCiphers)(serverKeys, common.connectionId);
214
- const inner = innerFrame(0x11, Buffer.from("hello over x25519"));
215
- expect(Buffer.from(server.opener.open(client.sealer.seal(inner)) ?? [])).toEqual(Buffer.from(inner));
216
- expect(Buffer.from(client.opener.open(server.sealer.seal(inner)) ?? [])).toEqual(Buffer.from(inner));
217
- });
218
- });
219
- });
@@ -1 +0,0 @@
1
- export {};