@ryopc/koshi 0.2.0 → 1.1.0

package/README.md

@@ -1,6 +1,6 @@
 # 🏄 koshi — Terminal-Native Decentralized SNS
 
-**Version 0.2.0** · MIT License · by [game_ryo](https://github.com/ryopc)
+**Version 1.1.0** · MIT License · by [game_ryo](https://github.com/ryopc)
 
 > A terminal-native, decentralized social network powered by ed25519 cryptography.
 
@@ -12,7 +12,10 @@
 - **📝 Posts** — Create and view posts on the koshi board
 - **👥 Follow System** — Follow/unfollow other users
 - **✉️ Direct Messages** — Signed, private DMs
-- **📡 Real-time** — WebSocket-powered live updates
+- **💬 Real-time Chat** — Interactive DM chat via WebSocket
+- **📡 Real-time Feed** — WebSocket-powered live updates
+- **✏️ Profile Editing** — Update your display name, bio, and avatar
+- **🛠️ Admin Controls** — User management, account deletion, admin grants
 - **💻 Terminal-native** — Beautiful CLI with chalk colors and spinners
 - **🐳 Docker-ready** — Containerized for easy deployment
 - **☁️ Render.com** — One-click deploy to Render.com
@@ -96,9 +99,12 @@ The `kb` command is your gateway to the koshi board.
 | `kb unfollow <username>` | Unfollow a user |
 | `kb dm <username> <message>` | Send a direct message |
 | `kb dms [--unread]` | View your direct messages |
+| `kb chat <username>` | Start an interactive real-time DM chat |
+| `kb edit-profile --display-name=... --bio=...` | Update your own profile |
 | `kb profile [username]` | View a user profile |
 | `kb search <query>` | Search users by username |
 | `kb realtime` | Connect to the real-time event stream |
+| `kb admin <command>` | Admin commands (users, delete-user, grant, revoke) |
 | `kb help [command]` | Show help |
 
 ### Examples
@@ -122,11 +128,26 @@ kb follow bob
 # Send a DM
 kb dm bob "Hey, how's it going?"
 
+# Start an interactive real-time DM chat
+kb chat bob
+
+# Edit your profile
+kb edit-profile --display-name="Alice" --bio="Building the terminal future"
+
 # Search for users
 kb search alice
 
 # Live stream
 kb realtime
+
+# Admin: list all users
+kb admin users
+
+# Admin: delete a user account (requires confirmation)
+kb admin delete-user bob
+
+# Admin: grant admin privileges
+kb admin grant alice
 ```
 
 ### Configuration
@@ -240,6 +261,17 @@ Authorization: Bearer <token>
 | PUT | `/api/dms/:id/read` | Yes | Mark DM as read |
 | GET | `/api/dms/unread/count` | Yes | Count unread DMs |
 
+#### Admin
+
+| Method | Path | Auth | Description |
+|--------|------|------|-------------|
+| GET | `/api/admin/users` | Admin | List all users |
+| GET | `/api/admin/users/:id` | Admin | Get user details (with keys, DM count) |
+| DELETE | `/api/admin/users/:id` | Admin | Permanently delete a user account |
+| PUT | `/api/admin/users/:id/admin` | Admin | Grant or revoke admin privileges |
+
+> Admin privileges: Set `ADMIN_USERNAME` environment variable, or mark user as admin via `UPDATE users SET is_admin = TRUE WHERE username = '...';`
+
 #### WebSocket
 
 Connect: `ws://host:port/ws?token={jwt}`
@@ -339,6 +371,7 @@ volumes:
 
 - **Ed25519 Signatures** — All posts and DMs are signed for authenticity
 - **JWT Auth** — Tokens expire after 24 hours
+- **Admin Auth** — Admin-only endpoints protected by `requireAdmin` middleware
 - **Rate Limiting** — Auth endpoints limited to 10 req/min per IP
 - **SQL Injection Prevention** — Parameterized queries throughout
 - **Input Validation** — All endpoints validate input
@@ -376,7 +409,8 @@ koshi/
 │   │   ├── auth.js       # Auth routes (register/login)
 │   │   ├── users.js      # User management routes
 │   │   ├── posts.js      # Posts routes (koshi board)
-│   │   └── dms.js        # Direct messages routes
+│   │   ├── dms.js        # Direct messages routes
+│   │   └── admin.js      # Admin routes (users, delete, grant)
 │   ├── auth/
 │   │   ├── ed25519.js    # Ed25519 crypto utilities
 │   │   ├── jwt.js        # JWT token utilities

package/bin/cli.js

@@ -521,6 +521,56 @@ async function cmdProfile(args) {
     }
 }
 
+// ============================================================================
+// Command: edit-profile
+// ============================================================================
+async function cmdEditProfile(args) {
+    const config = loadConfig();
+    if (!config.token) {
+        console.error(chalk.red('✖ Not logged in.'));
+        process.exit(1);
+    }
+
+    // Parse flags
+    let displayName, bio, avatarUrl;
+    for (const arg of args) {
+        if (arg.startsWith('--display-name=')) {
+            displayName = arg.slice('--display-name='.length);
+        } else if (arg.startsWith('--bio=')) {
+            bio = arg.slice('--bio='.length);
+        } else if (arg.startsWith('--avatar-url=')) {
+            avatarUrl = arg.slice('--avatar-url='.length);
+        }
+    }
+
+    if (!displayName && !bio && !avatarUrl) {
+        console.error(chalk.red('✖ Error: Provide at least one field to update.'));
+        console.error(chalk.dim('  Usage: kb edit-profile --display-name="My Name" --bio="Hello!" --avatar-url="https://..."'));
+        process.exit(1);
+    }
+
+    const spinner = ora('Updating profile...').start();
+
+    try {
+        const body = {};
+        if (displayName !== undefined) body.displayName = displayName.trim();
+        if (bio !== undefined) body.bio = bio.trim();
+        if (avatarUrl !== undefined) body.avatarUrl = avatarUrl;
+
+        const data = await apiRequest('PUT', '/api/users/me', body, config.token);
+
+        spinner.succeed(chalk.green('Profile updated!'));
+
+        console.log(`\n  ${chalk.bold('Username:')}       ${chalk.cyan(data.username)}`);
+        if (data.displayName) console.log(`  ${chalk.bold('Display Name:')}   ${data.displayName}`);
+        if (data.bio) console.log(`  ${chalk.bold('Bio:')}            ${data.bio}`);
+        if (data.avatarUrl) console.log(`  ${chalk.bold('Avatar:')}         ${chalk.dim(data.avatarUrl)}`);
+    } catch (err) {
+        spinner.fail(chalk.red(`Failed to update profile: ${err.message}`));
+        process.exit(1);
+    }
+}
+
 // ============================================================================
 // Command: search
 // ============================================================================
@@ -600,12 +650,28 @@ function showHelp(command = null) {
         },
         profile: {
             usage: 'kb profile [username]',
-            desc: 'View a user profile (default: your own)',
+            desc: 'View a user profile',
+        },
+        'edit-profile': {
+            usage: 'kb edit-profile --display-name=... --bio=... --avatar-url=...',
+            desc: 'Update your own profile',
         },
         search: {
             usage: 'kb search <query>',
             desc: 'Search users by username or display name',
         },
+        chat: {
+            usage: 'kb chat <username>',
+            desc: 'Real-time interactive DM chat',
+        },
+        realtime: {
+            usage: 'kb realtime',
+            desc: 'Stream live posts and events',
+        },
+        admin: {
+            usage: 'kb admin <command>',
+            desc: 'Admin: users, delete-user, grant, revoke',
+        },
         help: {
             usage: 'kb help [command]',
             desc: 'Show this help message',
@@ -623,7 +689,7 @@ function showHelp(command = null) {
     }
 
     console.log(`\n  ${chalk.bold.cyan('🏄 koshi — Terminal-Native Decentralized SNS')}`);
-    console.log(`  ${chalk.dim('Version 0.2.0')}`);
+    console.log(`  ${chalk.dim('Version 1.1.0')}`);
     console.log(`\n  ${chalk.bold('Usage:')} kb <command> [options]\n`);
     console.log(`  ${chalk.bold('Commands:')}\n`);
 
@@ -647,12 +713,336 @@ function showHelp(command = null) {
 // Command: version
 // ============================================================================
 function showVersion() {
-    console.log('koshi v0.2.0');
+    console.log('koshi v1.1.0');
     console.log('Terminal-native decentralized SNS');
     console.log('License: MIT');
     console.log('Author: game_ryo');
 }
 
+// ============================================================================
+// Command: admin
+// ============================================================================
+async function cmdAdmin(args) {
+    const config = loadConfig();
+    if (!config.token) {
+        console.error(chalk.red('✖ Not logged in. Admin commands require authentication.'));
+        process.exit(1);
+    }
+
+    const subcommand = args[0];
+
+    if (!subcommand || subcommand === 'help') {
+        console.log(`\n  ${chalk.bold.cyan('🛠️  Admin Commands')}`);
+        console.log(`  ${chalk.dim('─'.repeat(50))}`);
+        console.log(`  ${chalk.cyan('kb admin users')}          List all registered users`);
+        console.log(`  ${chalk.cyan('kb admin user <id>')}      View detailed user info`);
+        console.log(`  ${chalk.cyan('kb admin delete-user <username>')}  Permanently delete a user account`);
+        console.log(`  ${chalk.cyan('kb admin grant <username>')}     Grant admin privileges`);
+        console.log(`  ${chalk.cyan('kb admin revoke <username>')}    Revoke admin privileges`);
+        console.log(`  ${chalk.dim('─'.repeat(50))}\n`);
+        return;
+    }
+
+    switch (subcommand) {
+        case 'users':
+            await cmdAdminUsers(config);
+            break;
+        case 'user':
+            await cmdAdminUserDetail(config, args.slice(1));
+            break;
+        case 'delete-user':
+            await cmdAdminDeleteUser(config, args.slice(1));
+            break;
+        case 'grant':
+            await cmdAdminSetAdmin(config, args.slice(1), true);
+            break;
+        case 'revoke':
+            await cmdAdminSetAdmin(config, args.slice(1), false);
+            break;
+        default:
+            console.error(chalk.red(`✖ Unknown admin command: "${subcommand}"`));
+            process.exit(1);
+    }
+}
+
+async function cmdAdminUsers(config) {
+    const spinner = ora('Fetching user list...').start();
+    try {
+        const data = await apiRequest('GET', '/api/admin/users', null, config.token);
+        spinner.stop();
+
+        console.log(`\n  ${chalk.bold.cyan(`👥 All Users (${data.total} total)`)}`);
+        console.log(`  ${chalk.dim('─'.repeat(70))}`);
+
+        for (const user of data.users) {
+            const adminBadge = user.isAdmin ? chalk.yellow(' [ADMIN]') : '';
+            const display = user.displayName || '(no display name)';
+            console.log(`  ${chalk.bold(user.username)}${adminBadge} ${chalk.dim(`— ${display}`)}`);
+            console.log(`    ${chalk.dim(`ID: ${user.id}  |  Posts: ${user.postsCount}  |  Followers: ${user.followersCount}  |  Joined: ${new Date(user.createdAt).toLocaleDateString()}`)}`);
+            console.log();
+        }
+    } catch (err) {
+        spinner.fail(chalk.red(`Failed to list users: ${err.message}`));
+        process.exit(1);
+    }
+}
+
+async function cmdAdminUserDetail(config, args) {
+    const userId = args[0];
+    if (!userId) {
+        console.error(chalk.red('✖ Error: User ID is required. Usage: kb admin user <id>'));
+        process.exit(1);
+    }
+
+    const spinner = ora('Fetching user details...').start();
+    try {
+        const data = await apiRequest('GET', `/api/admin/users/${userId}`, null, config.token);
+        spinner.stop();
+
+        console.log(`\n  ${chalk.bold.cyan('🔍 User Details')}`);
+        console.log(`  ${chalk.dim('─'.repeat(50))}`);
+        console.log(`  ${chalk.bold('Username:')}       ${chalk.cyan(data.username)}`);
+        console.log(`  ${chalk.bold('ID:')}             ${chalk.dim(data.id)}`);
+        console.log(`  ${chalk.bold('Public Key:')}     ${chalk.dim(data.publicKey ? data.publicKey.substring(0, 32) + '...' : 'N/A')}`);
+        if (data.displayName) console.log(`  ${chalk.bold('Display Name:')}   ${data.displayName}`);
+        if (data.bio) console.log(`  ${chalk.bold('Bio:')}            ${data.bio}`);
+        console.log(`  ${chalk.bold('Admin:')}          ${data.isAdmin ? chalk.green('✓ Yes') : chalk.dim('No')}`);
+        console.log(`  ${chalk.bold('Posts:')}          ${data.postsCount}`);
+        console.log(`  ${chalk.bold('DMs:')}            ${data.dmsCount}`);
+        console.log(`  ${chalk.bold('Followers:')}      ${data.followersCount}`);
+        console.log(`  ${chalk.bold('Following:')}      ${data.followingCount}`);
+        console.log(`  ${chalk.bold('Joined:')}         ${new Date(data.createdAt).toLocaleDateString()}`);
+    } catch (err) {
+        spinner.fail(chalk.red(`Failed to fetch user: ${err.message}`));
+        process.exit(1);
+    }
+}
+
+async function cmdAdminDeleteUser(config, args) {
+    const username = args.find(a => !a.startsWith('--'));
+    const force = args.includes('--force');
+
+    if (!username) {
+        console.error(chalk.red('✖ Error: Username is required. Usage: kb admin delete-user <username>'));
+        process.exit(1);
+    }
+
+    if (!force) {
+        // Confirm deletion interactively
+        console.log(`\n  ${chalk.yellow('⚠️  WARNING: This will permanently delete the user and all their data.')}`);
+        console.log(`  ${chalk.yellow('This action cannot be undone.')}\n`);
+        console.log(`  ${chalk.bold('Target:')} @${username}`);
+        console.log();
+
+        const confirmation = await new Promise((resolve) => {
+            process.stdout.write(`  ${chalk.bold('Type the username to confirm')}: `);
+            process.stdin.once('data', (buf) => {
+                resolve(buf.toString().trim());
+            });
+        });
+
+        if (confirmation !== username) {
+            console.log(chalk.yellow('\n  ✖ Confirmation does not match. Aborted.'));
+            process.exit(1);
+        }
+    }
+
+    const spinner = ora(`Deleting user @${username}...`).start();
+
+    try {
+        // Resolve username to ID first
+        const userData = await apiRequest('GET', `/api/users/${username}`, null, config.token);
+
+        const result = await apiRequest('DELETE', `/api/admin/users/${userData.id}`, {}, config.token);
+
+        spinner.succeed(chalk.green(`User @${username} has been permanently deleted.`));
+    } catch (err) {
+        spinner.fail(chalk.red(`Delete failed: ${err.message}`));
+        process.exit(1);
+    }
+}
+
+async function cmdAdminSetAdmin(config, args, makeAdmin) {
+    const username = args[0];
+    if (!username) {
+        const action = makeAdmin ? 'grant' : 'revoke';
+        console.error(chalk.red(`✖ Error: Username is required. Usage: kb admin ${action} <username>`));
+        process.exit(1);
+    }
+
+    const actionLabel = makeAdmin ? 'Granting admin to' : 'Revoking admin from';
+    const spinner = ora(`${actionLabel} @${username}...`).start();
+
+    try {
+        const userData = await apiRequest('GET', `/api/users/${username}`, null, config.token);
+
+        const result = await apiRequest('PUT', `/api/admin/users/${userData.id}/admin`, {
+            isAdmin: makeAdmin,
+        }, config.token);
+
+        if (makeAdmin) {
+            spinner.succeed(chalk.green(`@${username} is now an admin!`));
+        } else {
+            spinner.succeed(chalk.yellow(`Admin privileges removed from @${username}.`));
+        }
+    } catch (err) {
+        spinner.fail(chalk.red(`Failed: ${err.message}`));
+        process.exit(1);
+    }
+}
+
+// ============================================================================
+// Command: chat (interactive real-time DM mode)
+// ============================================================================
+async function cmdChat(args) {
+    const config = loadConfig();
+    if (!config.token || !config.secretKey) {
+        console.error(chalk.red('✖ Not logged in. Use "kb login" or "kb register" first.'));
+        process.exit(1);
+    }
+
+    const targetUsername = args[0];
+    if (!targetUsername) {
+        console.error(chalk.red('✖ Error: Usage: kb chat <username>'));
+        process.exit(1);
+    }
+
+    console.log(`\n  ${chalk.bold.cyan('💬 Live Chat with')} ${chalk.bold(targetUsername)}`);
+    console.log(`  ${chalk.dim('Connect to real-time DMs. Type your message and press Enter.')}`);
+    console.log(`  ${chalk.dim('Type /exit or press Ctrl+C to quit.')}\n`);
+
+    try {
+        // Resolve target user
+        const userData = await apiRequest('GET', `/api/users/${targetUsername}`, null, config.token);
+        const { default: WebSocket } = await import('ws');
+
+        // Connect to WebSocket
+        const ws = new WebSocket(`${WS_URL}/ws?token=${config.token}`);
+
+        ws.on('open', () => {
+            console.log(chalk.green('  ✓ Connected!\n'));
+            promptForInput();
+        });
+
+        // Handle incoming messages
+        ws.on('message', (data) => {
+            try {
+                const msg = JSON.parse(data.toString());
+
+                switch (msg.type) {
+                    case 'connected':
+                        // Initial connection confirmation
+                        break;
+
+                    case 'dm_received':
+                        if (msg.payload.from.username === targetUsername) {
+                            console.log(`\n  ${chalk.bold.green(`${targetUsername}:`)} ${msg.payload.content}`);
+                            promptForInput();
+                        }
+                        break;
+
+                    case 'dm:sent':
+                        console.log(`\n  ${chalk.bold.cyan(`You:`)} ${msg.payload.content}`);
+                        promptForInput();
+                        break;
+
+                    case 'error':
+                        console.log(`\n  ${chalk.red(`✖ Error: ${msg.payload.message}`)}`);
+                        promptForInput();
+                        break;
+
+                    case 'user_online':
+                        if (msg.payload.username === targetUsername) {
+                            console.log(`\n  ${chalk.green('🟢')} ${chalk.bold(targetUsername)} ${chalk.dim('is now online')}`);
+                        }
+                        break;
+
+                    case 'user_offline':
+                        if (msg.payload.userId === userData.id) {
+                            console.log(`\n  ${chalk.red('🔴')} ${chalk.bold(targetUsername)} ${chalk.dim('went offline')}`);
+                        }
+                        break;
+
+                    default:
+                        break;
+                }
+            } catch {
+                // Ignore parse errors
+            }
+        });
+
+        ws.on('close', () => {
+            console.log(chalk.yellow('\n  Disconnected.'));
+            process.exit(0);
+        });
+
+        ws.on('error', (err) => {
+            console.error(chalk.red(`\n  WebSocket error: ${err.message}`));
+            process.exit(1);
+        });
+
+        // Handle user input
+        let inputBuffer = '';
+        function promptForInput() {
+            process.stdout.write(chalk.cyan('  > '));
+        }
+
+        process.stdin.setEncoding('utf-8');
+        process.stdin.on('data', async (chunk) => {
+            inputBuffer += chunk;
+
+            if (inputBuffer.includes('\n')) {
+                const lines = inputBuffer.split('\n');
+                inputBuffer = lines.pop(); // Keep incomplete line
+
+                for (const line of lines) {
+                    const trimmed = line.trim();
+
+                    if (!trimmed) {
+                        promptForInput();
+                        continue;
+                    }
+
+                    if (trimmed === '/exit') {
+                        console.log(chalk.dim('  Closing connection...'));
+                        ws.close();
+                        return;
+                    }
+
+                    // Sign and send the message
+                    try {
+                        const { signMessage } = await import('../src/auth/ed25519.js');
+                        const signature = await signMessage(trimmed, config.secretKey);
+
+                        ws.send(JSON.stringify({
+                            type: 'dm:send',
+                            payload: {
+                                recipientId: userData.id,
+                                content: trimmed,
+                                signature,
+                            },
+                        }));
+                    } catch (err) {
+                        console.log(`  ${chalk.red(`✖ Failed to send: ${err.message}`)}`);
+                        promptForInput();
+                    }
+                }
+            }
+        });
+
+        // Graceful shutdown
+        process.on('SIGINT', () => {
+            console.log(chalk.dim('\n  Closing connection...'));
+            ws.close();
+            process.exit(0);
+        });
+
+    } catch (err) {
+        console.error(chalk.red(`Failed to start chat: ${err.message}`));
+        process.exit(1);
+    }
+}
+
 // ============================================================================
 // Command: realtime feed (stream mode)
 // ============================================================================
@@ -802,6 +1192,18 @@ async function main() {
             await cmdSearch(args.slice(1));
             break;
 
+        case 'edit-profile':
+            await cmdEditProfile(args.slice(1));
+            break;
+
+        case 'chat':
+            await cmdChat(args.slice(1));
+            break;
+
+        case 'admin':
+            await cmdAdmin(args.slice(1));
+            break;
+
         case 'realtime':
         case 'stream':
             await cmdRealtime();

package/bin/server.js

@@ -23,6 +23,7 @@ import { app, logger } from '../src/index.js';
 import { initWebSocket, startHeartbeat } from '../src/ws/index.js';
 import { closePool } from '../src/db/pool.js';
 import { getOnlineCount } from '../src/ws/index.js';
+import { runMigration } from '../src/db/migrate.js';
 
 // Load .env file in development
 try {
@@ -52,6 +53,20 @@ if (missing.length > 0) {
     process.exit(1);
 }
 
+// ============================================================================
+// Auto-migration: ensure database schema is up to date on startup
+// ============================================================================
+// This is especially important for Render free-tier instances that hibernate.
+// The preDeployCommand only runs on fresh deploys, not on wake-up, so we
+// run the migration here to guarantee tables exist on every start.
+// ============================================================================
+const migrationResult = await runMigration();
+if (!migrationResult.success) {
+    logger.warn({ message: migrationResult.message }, 'Auto-migration did not complete. Server will still start.');
+} else {
+    logger.info('Auto-migration complete');
+}
+
 // Create HTTP server
 const server = createServer(app);
 
@@ -60,13 +75,15 @@ const wss = initWebSocket(server, logger);
 startHeartbeat();
 
 // Start listening
-server.listen(PORT, () => {
+// '0.0.0.0' を明示的に指定して、Render の外部からの通信を受け付けられるようにします。
+server.listen(PORT, '0.0.0.0', () => {
     logger.info(
+
         { port: PORT, env: process.env.NODE_ENV || 'development' },
         `🚀 koshi server running on port ${PORT}`
     );
     console.log(`\n  ╔══════════════════════════════════════════════╗`);
-    console.log(`  ║        🏄 koshi board server v0.2.0         ║`);
+    console.log(`  ║        🏄 koshi board server v1.1.0         ║`);
     console.log(`  ╠══════════════════════════════════════════════╣`);
     console.log(`  ║  REST API : http://localhost:${PORT}/api            ║`);
     console.log(`  ║  WebSocket: ws://localhost:${PORT}/ws               ║`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ryopc/koshi",
-  "version": "0.2.0",
+  "version": "1.1.0",
   "description": "Terminal-native decentralized SNS — koshi board",
   "type": "module",
   "bin": {
@@ -34,13 +34,13 @@
     "pg": "^8.11.3",
     "pino": "^8.14.1",
     "pino-pretty": "^10.2.0",
-    "uuid": "^9.0.0"
+    "uuid": "^14.0.0"
   },
   "license": "MIT",
   "author": "game_ryo",
   "repository": {
     "type": "git",
-    "url": "https://github.com/ryopc/koshi"
+    "url": "git+https://github.com/ryopc/koshi.git"
   },
   "engines": {
     "node": ">=18.0.0"

package/src/auth/ed25519.js

@@ -38,8 +38,11 @@ export function generateKeypair() {
  */
 export async function signMessage(message, secretKey) {
     const skBytes = hexToBytes(secretKey);
+    // @noble/ed25519 v2.x expects a 32-byte private key (seed), not the full
+    // 64-byte tweetnacl-format key. If given 64 bytes, take only the seed.
+    const seedBytes = skBytes.length === 64 ? skBytes.slice(0, 32) : skBytes;
     const msgBytes = new TextEncoder().encode(message);
-    const signature = await ed.sign(msgBytes, skBytes);
+    const signature = await ed.signAsync(msgBytes, seedBytes);
     return bytesToHex(signature);
 }
 
@@ -56,7 +59,8 @@ export async function verifySignature(message, signature, publicKey) {
         const msgBytes = new TextEncoder().encode(message);
         const sigBytes = hexToBytes(signature);
         const pkBytes = hexToBytes(publicKey);
-        return await ed.verify(sigBytes, msgBytes, pkBytes);
+        // Use verifyAsync to avoid needing etc.sha512Sync
+        return await ed.verifyAsync(sigBytes, msgBytes, pkBytes);
     } catch (err) {
         // If any input is malformed (wrong length, invalid hex, etc.), return false
         return false;