@rine-network/core 0.5.1 → 0.5.2

package/dist/index.js

@@ -1857,6 +1857,50 @@ async function fetchAndIngestPendingSKDistributions(client, configDir, agentId,
 	return ingested;
 }
 //#endregion
+//#region src/group-invite-ops.ts
+/**
+* Message type for the best-effort group-invite notification DM.
+*
+* Underscore-namespaced like `rine.v1.sender_key_distribution`. Sealed by the
+* inviter and delivered to the invitee's normal inbox; it is a convenience
+* nudge — `GET /groups/invites` is the authoritative source of truth.
+*/
+const GROUP_INVITE_TYPE = "rine.v1.group_invite";
+/**
+* Seal a `rine.v1.group_invite` notification to the invitee and POST it.
+*
+* Reuses the 1:1 DM crypto path (`fetchRecipientKeys` + `encryptMessage`), so
+* hybrid PQ is auto-negotiated when the invitee publishes an ML-KEM key. The
+* sealed payload carries `invited_by = inviterAgentId` (also cryptographically
+* bound via the sender signature). `X-Rine-Agent` selects the inviter as sender.
+*
+* Best-effort by contract: callers wrap this so a failure (e.g. groups_only
+* 403, missing keys) warns but never fails the invite.
+*/
+async function sendGroupInviteNotification(client, configDir, inviterAgentId, inviteeAgentId, invite) {
+	const recipientKeys = await fetchRecipientKeys(client, inviteeAgentId);
+	const payload = {
+		group_id: invite.group_id,
+		group_handle: invite.group_handle,
+		invited_by: inviterAgentId,
+		message: invite.message
+	};
+	const encrypted = await encryptMessage(configDir, inviterAgentId, recipientKeys.encryption, payload, recipientKeys.pqEncryption);
+	await client.post("/messages", {
+		to_agent_id: inviteeAgentId,
+		type: GROUP_INVITE_TYPE,
+		...encrypted
+	}, { "X-Rine-Agent": inviterAgentId });
+}
+/**
+* List the calling agent's open group invites via the authoritative pull
+* endpoint `GET /groups/invites`. `extraHeaders` lets multi-agent orgs pass
+* `X-Rine-Agent` to disambiguate which agent's invites to list.
+*/
+async function listMyInvites(client, extraHeaders) {
+	return (await client.get("/groups/invites", void 0, extraHeaders)).items;
+}
+//#endregion
 //#region src/mls-ops.ts
 /**
 * Generate and upload MLS key packages for an agent, enabling other agents
@@ -2039,4 +2083,4 @@ async function performAgentCreation(client, configDir, profile, params) {
 	return agent;
 }
 //#endregion
-export { DEFAULT_API_URL, HttpClient, MLKEM_CT_SIZE, MLS_CIPHER_SUITE_ID, RineApiError, UUID_RE, VERSION_HYBRID, VERSION_MLS, addMemberToMlsGroup, addMlsGroupMember, advanceChain, agentIdFromKid, agentKeysExist, bytesToUuid, cacheMlsSelfRead, cacheToken, claimKeyPackages, createMlsGroup, decodeEnvelope, decryptGroupMessage, decryptMessage, decryptMlsAppMessage, deleteMlsState, deletePrivateKeyPackage, deriveMessageKey, distributeSenderKey, encodeEnvelope, encryptGroupMessage, encryptMessage, encryptMlsAppMessage, encryptMlsGroupMessage, encryptionPublicKeyToJWK, externalJoinMlsGroup, fetchAgents, fetchAndIngestPendingSKDistributions, fetchGroupInfo, fetchHandshakes, fetchOAuthToken, fetchRecipientKeys, fetchWelcomes, formatError, fromBase64Url, generateAgentKeys, generateEncryptionKeyPair, generateMlsKeyPackage, generatePqKeyPair, generateSenderKey, generateSigningKeyPair, getAgentPublicKeys, getCredentialEntry, getMlsCipherSuite, getMlsContext, getOrCreateSenderKey, getOrRefreshToken, ingestSenderKeyDistribution, initMlsGroup, isBareAgentName, jwkToPqPublicKey, jwkToPublicKey, listPrivateKeyPackages, loadAgentKeys, loadCredentials, loadMlsState, loadPrivateKeyPackage, loadSenderKeyStates, loadTokenCache, lookupMlsSelfRead, mlsAck, mlsCommit, fromBase64 as mlsFromBase64, mlsInit, mlsNack, toBase64 as mlsToBase64, needsRotation, normalizeHandle, open, openGroup, openHybrid, performAgentCreation, performRegistration, pqPublicKeyToJWK, processMlsCommit, processMlsWelcome, processMlsWelcomes, publishMlsKeyPackages, removeMemberFromMlsGroup, removeMlsGroupMember, resolveAgent, resolveApiUrl, resolveConfigDir, resolveHandleViaWebFinger, resolveToUuid, saveAgentKeys, saveCredentials, saveMlsState, savePqEncryptionKey, savePrivateKeyPackages, saveSenderKeyState, saveTokenCache, seal, sealGroup, sealHybrid, signPayload, signingPublicKeyToJWK, solveTimeLock, solveTimeLockWithProgress, submitProposal, syncMlsGroup, toBase64Url, uploadKeyPackages, uuidToBytes, validateEncryptionKey, validatePathId, validateSigningKey, validateSlug, verifySignature };
+export { DEFAULT_API_URL, GROUP_INVITE_TYPE, HttpClient, MLKEM_CT_SIZE, MLS_CIPHER_SUITE_ID, RineApiError, UUID_RE, VERSION_HYBRID, VERSION_MLS, addMemberToMlsGroup, addMlsGroupMember, advanceChain, agentIdFromKid, agentKeysExist, bytesToUuid, cacheMlsSelfRead, cacheToken, claimKeyPackages, createMlsGroup, decodeEnvelope, decryptGroupMessage, decryptMessage, decryptMlsAppMessage, deleteMlsState, deletePrivateKeyPackage, deriveMessageKey, distributeSenderKey, encodeEnvelope, encryptGroupMessage, encryptMessage, encryptMlsAppMessage, encryptMlsGroupMessage, encryptionPublicKeyToJWK, externalJoinMlsGroup, fetchAgents, fetchAndIngestPendingSKDistributions, fetchGroupInfo, fetchHandshakes, fetchOAuthToken, fetchRecipientKeys, fetchWelcomes, formatError, fromBase64Url, generateAgentKeys, generateEncryptionKeyPair, generateMlsKeyPackage, generatePqKeyPair, generateSenderKey, generateSigningKeyPair, getAgentPublicKeys, getCredentialEntry, getMlsCipherSuite, getMlsContext, getOrCreateSenderKey, getOrRefreshToken, ingestSenderKeyDistribution, initMlsGroup, isBareAgentName, jwkToPqPublicKey, jwkToPublicKey, listMyInvites, listPrivateKeyPackages, loadAgentKeys, loadCredentials, loadMlsState, loadPrivateKeyPackage, loadSenderKeyStates, loadTokenCache, lookupMlsSelfRead, mlsAck, mlsCommit, fromBase64 as mlsFromBase64, mlsInit, mlsNack, toBase64 as mlsToBase64, needsRotation, normalizeHandle, open, openGroup, openHybrid, performAgentCreation, performRegistration, pqPublicKeyToJWK, processMlsCommit, processMlsWelcome, processMlsWelcomes, publishMlsKeyPackages, removeMemberFromMlsGroup, removeMlsGroupMember, resolveAgent, resolveApiUrl, resolveConfigDir, resolveHandleViaWebFinger, resolveToUuid, saveAgentKeys, saveCredentials, saveMlsState, savePqEncryptionKey, savePrivateKeyPackages, saveSenderKeyState, saveTokenCache, seal, sealGroup, sealHybrid, sendGroupInviteNotification, signPayload, signingPublicKeyToJWK, solveTimeLock, solveTimeLockWithProgress, submitProposal, syncMlsGroup, toBase64Url, uploadKeyPackages, uuidToBytes, validateEncryptionKey, validatePathId, validateSigningKey, validateSlug, verifySignature };

package/dist/src/api-types.d.ts

@@ -33,6 +33,8 @@ export interface JoinRequestRead {
     created_at: string;
     resolved_at?: string;
     your_vote?: string;
+    group_handle?: string;
+    group_name?: string;
 }
 export interface AgentRead {
     id: string;

package/dist/src/group-invite-ops.d.ts

@@ -0,0 +1,34 @@
+import type { JoinRequestRead } from "./api-types.js";
+import type { HttpClient } from "./http.js";
+/**
+ * Message type for the best-effort group-invite notification DM.
+ *
+ * Underscore-namespaced like `rine.v1.sender_key_distribution`. Sealed by the
+ * inviter and delivered to the invitee's normal inbox; it is a convenience
+ * nudge — `GET /groups/invites` is the authoritative source of truth.
+ */
+export declare const GROUP_INVITE_TYPE = "rine.v1.group_invite";
+/** Cleartext fields the inviter supplies for the sealed invite payload. */
+export interface GroupInvitePayload {
+    group_id: string;
+    group_handle: string;
+    message: string | null;
+}
+/**
+ * Seal a `rine.v1.group_invite` notification to the invitee and POST it.
+ *
+ * Reuses the 1:1 DM crypto path (`fetchRecipientKeys` + `encryptMessage`), so
+ * hybrid PQ is auto-negotiated when the invitee publishes an ML-KEM key. The
+ * sealed payload carries `invited_by = inviterAgentId` (also cryptographically
+ * bound via the sender signature). `X-Rine-Agent` selects the inviter as sender.
+ *
+ * Best-effort by contract: callers wrap this so a failure (e.g. groups_only
+ * 403, missing keys) warns but never fails the invite.
+ */
+export declare function sendGroupInviteNotification(client: HttpClient, configDir: string, inviterAgentId: string, inviteeAgentId: string, invite: GroupInvitePayload): Promise<void>;
+/**
+ * List the calling agent's open group invites via the authoritative pull
+ * endpoint `GET /groups/invites`. `extraHeaders` lets multi-agent orgs pass
+ * `X-Rine-Agent` to disambiguate which agent's invites to list.
+ */
+export declare function listMyInvites(client: HttpClient, extraHeaders?: Record<string, string>): Promise<JoinRequestRead[]>;

package/dist/src/index.d.ts

@@ -7,6 +7,7 @@ export * from "./resolve-handle.js";
 export * from "./resolve-agent.js";
 export * from "./timelock.js";
 export * from "./sender-key-ops.js";
+export * from "./group-invite-ops.js";
 export * from "./crypto/index.js";
 export * from "./mls-ops.js";
 export { externalJoinMlsGroup } from "./mls-ops.js";

package/dist/test/group-invite-ops.test.d.ts

@@ -0,0 +1 @@
+export {};

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@rine-network/core",
-	"version": "0.5.1",
+	"version": "0.5.2",
 	"description": "Core library for rine.network — crypto, HTTP, config, agent resolution",
 	"author": "mmmbs <mmmbs@proton.me>",
 	"license": "EUPL-1.2",