@silicaclaw/cli 1.0.0-beta.2 → 1.0.0-beta.21

package/CHANGELOG.md

@@ -8,6 +8,14 @@
   - `INSTALL.md`
   - `DEMO_GUIDE.md`
   - `RELEASE_NOTES_v1.0.md`
+- CLI onboarding install UX polish:
+  - added shell alias fallback (`silicaclaw -> npx @silicaclaw/cli@beta`) when global install is unavailable
+  - reduced reliance on manual PATH/env edits for first-run success
+- `silicaclaw update` guidance polish:
+  - prioritize zero-setup `npx` flow
+  - clarify global install is optional
+  - hide global-install recommendation during `npx` runtime to avoid repeated `EACCES` loops
+  - add explicit `command not found` alias guidance for first-run shells
 - README first-screen and structure polish:
   - fixed v1.0 beta project positioning
   - added concise feature summary

package/INSTALL.md

@@ -22,11 +22,47 @@ CLI-style onboarding command (recommended, zero-config):
 npx @silicaclaw/cli@beta onboard
 ```
 
+Cross-network quick wizard (defaults to global-preview):
+
+```bash
+npx @silicaclaw/cli@beta connect
+```
+
+Check/update CLI version:
+
+```bash
+npx @silicaclaw/cli@beta update
+```
+
+Gateway background service commands:
+
+```bash
+npx @silicaclaw/cli@beta gateway start --mode=local
+npx @silicaclaw/cli@beta gateway status
+npx @silicaclaw/cli@beta gateway restart --mode=lan
+npx @silicaclaw/cli@beta gateway stop
+```
+
+For most home users, just press Enter on defaults and use `local` mode first.
+
 Optional global install (advanced users only):
 
 ```bash
 npm i -g @silicaclaw/cli
 silicaclaw onboard
+silicaclaw connect
+silicaclaw update
+silicaclaw gateway start --mode=local
+silicaclaw gateway status
+silicaclaw gateway stop
+```
+
+If global install fails with `EACCES`, use alias mode (no PATH edits):
+
+```bash
+alias silicaclaw='npx -y @silicaclaw/cli@beta'
+silicaclaw onboard
+silicaclaw update
 ```
 
 ## 3. Run

package/README.md

@@ -28,6 +28,27 @@ Without servers, accounts, or central control.
 npx @silicaclaw/cli@beta onboard
 ```
 
+Cross-network preview quick wizard:
+
+```bash
+npx @silicaclaw/cli@beta connect
+```
+
+Check and update CLI version:
+
+```bash
+npx @silicaclaw/cli@beta update
+```
+
+Background gateway service:
+
+```bash
+npx @silicaclaw/cli@beta gateway start --mode=local
+npx @silicaclaw/cli@beta gateway status
+npx @silicaclaw/cli@beta gateway restart --mode=lan
+npx @silicaclaw/cli@beta gateway stop
+```
+
 Or manual:
 
 ```bash
@@ -53,11 +74,30 @@ Zero-config (recommended, no global install / no PATH setup):
 npx @silicaclaw/cli@beta onboard
 ```
 
+Cross-network preview (global-preview first):
+
+```bash
+npx @silicaclaw/cli@beta connect
+```
+
 Optional global install:
 
 ```bash
 npm i -g @silicaclaw/cli
 silicaclaw onboard
+silicaclaw connect
+silicaclaw update
+silicaclaw gateway start --mode=local
+silicaclaw gateway status
+silicaclaw gateway stop
+```
+
+If global install is blocked by system permissions (`EACCES`), use alias mode:
+
+```bash
+alias silicaclaw='npx -y @silicaclaw/cli@beta'
+silicaclaw onboard
+silicaclaw update
 ```
 
 ## Quick Start (OpenClaw-style)

package/apps/local-console/public/index.html

@@ -427,6 +427,22 @@
         white-space: pre-wrap;
         word-break: break-word;
       }
+      .advanced-panel {
+        margin-top: 10px;
+      }
+      .advanced-panel summary {
+        cursor: pointer;
+        list-style: none;
+        user-select: none;
+      }
+      .advanced-panel summary::-webkit-details-marker { display: none; }
+      .advanced-panel summary::after {
+        content: "Show";
+        float: right;
+        color: var(--muted);
+        font-size: 12px;
+      }
+      .advanced-panel[open] summary::after { content: "Hide"; }
 
       .toast {
         position: fixed;
@@ -474,10 +490,7 @@
           <button class="tab active" data-tab="overview">Overview</button>
           <button class="tab" data-tab="profile">Profile</button>
           <button class="tab" data-tab="network">Network</button>
-          <button class="tab" data-tab="peers">Peers</button>
-          <button class="tab" data-tab="discovery">Discovery Events</button>
-          <button class="tab" data-tab="social">Social Config</button>
-          <button class="tab" data-tab="logs">Logs</button>
+          <button class="tab" data-tab="social">Social</button>
         </nav>
 
         <div class="sidebar-foot" id="sideMeta">adapter: -<br/>namespace: -</div>
@@ -602,15 +615,20 @@
               <div class="mono" id="networkComponents"></div>
             </div>
             <div class="card">
-              <h3 class="title-sm">Actions</h3>
+              <h3 class="title-sm">Quick Actions</h3>
               <div class="actions">
                 <button id="startBroadcastBtn">Start Broadcast</button>
                 <button class="secondary" id="stopBroadcastBtn">Stop Broadcast</button>
                 <button class="secondary" id="broadcastNowBtn">Broadcast Now</button>
+              </div>
+              <details class="advanced-panel">
+                <summary class="title-sm">Advanced Actions</summary>
+                <div class="actions" style="margin-top:10px;">
                 <button class="secondary" id="refreshCacheBtn">Refresh Cache</button>
                 <button class="secondary" id="clearCacheBtn">Clear Discovered Cache</button>
                 <button class="secondary" id="quickGlobalPreviewBtn">Enable Cross-network Preview</button>
               </div>
+              </details>
               <div id="networkFeedback" class="feedback" style="margin-top:10px;">Ready.</div>
             </div>
           </div>
@@ -624,32 +642,47 @@
               <div class="mono mono-block" id="networkStatsSnapshot">-</div>
             </div>
           </div>
-        </section>
-
-        <section id="view-peers" class="view">
-          <div class="grid" id="peerCards"></div>
-          <div class="card" style="margin-top:10px;">
-            <h3 class="title-sm">Peer Inventory</h3>
-            <div id="peerTableWrap"></div>
-          </div>
-          <div class="card" style="margin-top:10px;">
-            <h3 class="title-sm">Peer Discovery Stats</h3>
-            <div class="mono mono-block" id="peerStatsWrap">-</div>
-          </div>
-        </section>
-
-        <section id="view-discovery" class="view">
-          <div class="grid" id="discoveryCards"></div>
-          <div class="split">
+          <details class="advanced-panel card">
+            <summary class="title-sm">Diagnostics</summary>
+            <div class="grid" id="peerCards" style="margin-top:10px;"></div>
             <div class="card" style="margin-top:10px;">
-              <h3 class="title-sm">Recent Discovery Events</h3>
-              <div class="logs" id="discoveryEventList"></div>
+              <h3 class="title-sm">Peer Inventory</h3>
+              <div id="peerTableWrap"></div>
             </div>
             <div class="card" style="margin-top:10px;">
-              <h3 class="title-sm">Discovery Snapshot</h3>
-              <div class="mono mono-block" id="discoverySnapshot">-</div>
+              <h3 class="title-sm">Peer Discovery Stats</h3>
+              <div class="mono mono-block" id="peerStatsWrap">-</div>
             </div>
-          </div>
+            <div class="grid" id="discoveryCards" style="margin-top:10px;"></div>
+            <div class="split">
+              <div class="card" style="margin-top:10px;">
+                <h3 class="title-sm">Recent Discovery Events</h3>
+                <div class="logs" id="discoveryEventList"></div>
+              </div>
+              <div class="card" style="margin-top:10px;">
+                <h3 class="title-sm">Discovery Snapshot</h3>
+                <div class="mono mono-block" id="discoverySnapshot">-</div>
+              </div>
+            </div>
+            <div class="card" style="margin-top:10px;">
+              <h3 class="title-sm">Logs</h3>
+              <div class="toolbar">
+                <div class="field">
+                  <label for="logLevelFilter">Category</label>
+                  <select id="logLevelFilter">
+                    <option value="all">all</option>
+                    <option value="info">info</option>
+                    <option value="warn">warn</option>
+                    <option value="error">error</option>
+                  </select>
+                </div>
+                <div>
+                  <button type="button" class="secondary" id="refreshLogsBtn">Refresh Logs</button>
+                </div>
+              </div>
+              <div class="logs" id="logList"></div>
+            </div>
+          </details>
         </section>
 
         <section id="view-social" class="view">
@@ -666,22 +699,25 @@
             <div class="grid" id="socialAdvancedCards" style="margin-top:10px;"></div>
             <div class="mono mono-block" id="socialAdvancedWrap" style="margin-top:10px;">-</div>
           </details>
-          <div class="split">
-            <div class="card" style="margin-top:10px;">
-              <h3 class="title-sm">Source & Parsed Frontmatter</h3>
-              <div class="mono mono-block" id="socialSourceWrap">-</div>
-              <div style="height:10px;"></div>
-              <div class="mono mono-block" id="socialRawWrap">-</div>
+          <details class="advanced-panel card">
+            <summary class="title-sm">Source / Runtime / Template</summary>
+            <div class="split">
+              <div class="card" style="margin-top:10px;">
+                <h3 class="title-sm">Source & Parsed Frontmatter</h3>
+                <div class="mono mono-block" id="socialSourceWrap">-</div>
+                <div style="height:10px;"></div>
+                <div class="mono mono-block" id="socialRawWrap">-</div>
+              </div>
+              <div class="card" style="margin-top:10px;">
+                <h3 class="title-sm">Runtime Summary</h3>
+                <div class="mono mono-block" id="socialRuntimeWrap">-</div>
+              </div>
             </div>
             <div class="card" style="margin-top:10px;">
-              <h3 class="title-sm">Runtime Summary</h3>
-              <div class="mono mono-block" id="socialRuntimeWrap">-</div>
+              <h3 class="title-sm">Export Template Preview</h3>
+              <div class="mono mono-block" id="socialTemplateWrap">-</div>
             </div>
-          </div>
-          <div class="card" style="margin-top:10px;">
-            <h3 class="title-sm">Export Template Preview</h3>
-            <div class="mono mono-block" id="socialTemplateWrap">-</div>
-          </div>
+          </details>
           <div class="card" style="margin-top:10px;">
             <h3 class="title-sm">Actions</h3>
             <div class="toolbar">
@@ -707,27 +743,6 @@
             <div id="socialFeedback" class="feedback" style="margin-top:10px;">Ready.</div>
           </div>
         </section>
-
-        <section id="view-logs" class="view">
-          <div class="card">
-            <h3 class="title-sm">Recent Logs</h3>
-            <div class="toolbar">
-              <div class="field">
-                <label for="logLevelFilter">Category</label>
-                <select id="logLevelFilter">
-                  <option value="all">all</option>
-                  <option value="info">info</option>
-                  <option value="warn">warn</option>
-                  <option value="error">error</option>
-                </select>
-              </div>
-              <div>
-                <button type="button" class="secondary" id="refreshLogsBtn">Refresh Logs</button>
-              </div>
-            </div>
-            <div class="logs" id="logList"></div>
-          </div>
-        </section>
       </main>
     </div>
 
@@ -919,7 +934,7 @@
         }
         activeTab = tab;
         document.querySelectorAll('.tab').forEach((b) => b.classList.toggle('active', b.dataset.tab === tab));
-        ['overview', 'profile', 'network', 'peers', 'discovery', 'social', 'logs'].forEach((k) => {
+        ['overview', 'profile', 'network', 'social'].forEach((k) => {
           document.getElementById(`view-${k}`).classList.toggle('active', k === tab);
         });
         if (tab === 'profile' && !profileDirty && !profileSaving) {
@@ -1320,7 +1335,10 @@
 
       async function refreshAll() {
         try {
-          const tasks = [refreshOverview(), refreshNetwork(), refreshPeers(), refreshDiscovery(), refreshSocial(), refreshLogs(), refreshPublicProfilePreview()];
+          const tasks = [refreshOverview(), refreshNetwork(), refreshSocial(), refreshPublicProfilePreview()];
+          if (activeTab === 'network') {
+            tasks.push(refreshPeers(), refreshDiscovery(), refreshLogs());
+          }
           const shouldRefreshProfile = !(activeTab === 'profile' && profileDirty);
           if (shouldRefreshProfile) {
             tasks.push(refreshProfile());

package/apps/local-console/src/server.ts

@@ -44,6 +44,7 @@ import {
   MockNetworkAdapter,
   NetworkAdapter,
   RealNetworkAdapterPreview,
+  RelayPreviewAdapter,
   UdpLanBroadcastTransport,
   WebRTCPreviewAdapter,
 } from "@silicaclaw/network";
@@ -65,7 +66,7 @@ const NETWORK_UDP_BROADCAST_ADDRESS = process.env.NETWORK_UDP_BROADCAST_ADDRESS
 const NETWORK_PEER_ID = process.env.NETWORK_PEER_ID;
 const WEBRTC_SIGNALING_URL = process.env.WEBRTC_SIGNALING_URL || "http://localhost:4510";
 const WEBRTC_SIGNALING_URLS = process.env.WEBRTC_SIGNALING_URLS || "";
-const WEBRTC_ROOM = process.env.WEBRTC_ROOM || "silicaclaw-room";
+const WEBRTC_ROOM = process.env.WEBRTC_ROOM || "silicaclaw-global-preview";
 const WEBRTC_SEED_PEERS = process.env.WEBRTC_SEED_PEERS || "";
 const WEBRTC_BOOTSTRAP_HINTS = process.env.WEBRTC_BOOTSTRAP_HINTS || "";
 const PROFILE_VERSION = "v0.9";
@@ -190,7 +191,7 @@ class LocalNodeService {
   };
 
   private network: NetworkAdapter;
-  private adapterMode: "mock" | "local-event-bus" | "real-preview" | "webrtc-preview";
+  private adapterMode: "mock" | "local-event-bus" | "real-preview" | "webrtc-preview" | "relay-preview";
   private networkMode: "local" | "lan" | "global-preview" = "lan";
   private networkNamespace: string;
   private networkPort: number | null;
@@ -205,7 +206,7 @@ class LocalNodeService {
     "silicaclaw-existing";
   private resolvedOpenClawIdentityPath: string | null = null;
   private webrtcSignalingUrls: string[] = [];
-  private webrtcRoom = "silicaclaw-room";
+  private webrtcRoom = "silicaclaw-global-preview";
   private webrtcSeedPeers: string[] = [];
   private webrtcBootstrapHints: string[] = [];
   private webrtcBootstrapSources: string[] = [];
@@ -319,7 +320,7 @@ class LocalNodeService {
       real_preview_stats: diagnostics?.stats ?? null,
       real_preview_transport_stats: diagnostics?.transport_stats ?? null,
       real_preview_discovery_stats: diagnostics?.discovery_stats ?? null,
-      webrtc_preview: diagnostics && diagnostics.adapter === "webrtc-preview"
+      webrtc_preview: diagnostics && (diagnostics.adapter === "webrtc-preview" || diagnostics.adapter === "relay-preview")
         ? {
             signaling_url: diagnostics.signaling_url ?? null,
             signaling_endpoints: diagnostics.signaling_endpoints ?? [],
@@ -350,7 +351,7 @@ class LocalNodeService {
       },
       limits: diagnostics?.limits ?? null,
       adapter_config: diagnostics?.config ?? null,
-      adapter_extra: diagnostics && diagnostics.adapter === "webrtc-preview"
+      adapter_extra: diagnostics && (diagnostics.adapter === "webrtc-preview" || diagnostics.adapter === "relay-preview")
         ? {
             signaling_url: diagnostics.signaling_url ?? null,
             signaling_endpoints: diagnostics.signaling_endpoints ?? [],
@@ -387,8 +388,8 @@ class LocalNodeService {
       demo_mode:
         this.adapterMode === "real-preview"
           ? "lan-preview"
-          : this.adapterMode === "webrtc-preview"
-            ? "webrtc-preview"
+          : this.adapterMode === "webrtc-preview" || this.adapterMode === "relay-preview"
+            ? "internet-preview"
             : "local-process",
     };
   }
@@ -644,7 +645,7 @@ class LocalNodeService {
     }
 
     this.socialConfig.network.mode = "global-preview";
-    this.socialConfig.network.adapter = "webrtc-preview";
+    this.socialConfig.network.adapter = "relay-preview";
     this.socialConfig.network.signaling_url = signalingUrl;
     this.socialConfig.network.signaling_urls = [signalingUrl];
     this.socialConfig.network.room = room || "silicaclaw-demo";
@@ -652,7 +653,7 @@ class LocalNodeService {
     await this.restartNetworkAdapter("quick_connect_global_preview");
     this.socialNetworkRequiresRestart = false;
     await this.writeSocialRuntime();
-    await this.log("info", `Quick connect enabled (webrtc-preview, room=${this.webrtcRoom})`);
+    await this.log("info", `Quick connect enabled (relay-preview, room=${this.webrtcRoom})`);
 
     return {
       mode: this.networkMode,
@@ -1111,7 +1112,7 @@ class LocalNodeService {
 
   private buildNetworkAdapter(): {
     adapter: NetworkAdapter;
-    mode: "mock" | "local-event-bus" | "real-preview" | "webrtc-preview";
+    mode: "mock" | "local-event-bus" | "real-preview" | "webrtc-preview" | "relay-preview";
     port: number | null;
   } {
     const mode = (process.env.NETWORK_ADAPTER as typeof this.adapterMode | undefined) || this.socialConfig.network.adapter;
@@ -1166,6 +1167,25 @@ class LocalNodeService {
         port: this.networkPort,
       };
     }
+    if (mode === "relay-preview") {
+      return {
+        adapter: new RelayPreviewAdapter({
+          peerId: NETWORK_PEER_ID,
+          namespace: this.networkNamespace,
+          signalingUrl: this.webrtcSignalingUrls[0] ?? WEBRTC_SIGNALING_URL,
+          signalingUrls: this.webrtcSignalingUrls,
+          room: this.webrtcRoom,
+          seedPeers: this.webrtcSeedPeers,
+          bootstrapHints: this.webrtcBootstrapHints,
+          bootstrapSources: this.webrtcBootstrapSources,
+          maxMessageBytes: NETWORK_MAX_MESSAGE_BYTES,
+          maxFutureDriftMs: NETWORK_MAX_FUTURE_DRIFT_MS,
+          maxPastDriftMs: NETWORK_MAX_PAST_DRIFT_MS,
+        }),
+        mode: "relay-preview",
+        port: this.networkPort,
+      };
+    }
     return {
       adapter: new LocalEventBusAdapter(),
       mode: "local-event-bus",
@@ -1299,10 +1319,10 @@ class LocalNodeService {
     return host ? `OpenClaw @ ${host}` : "OpenClaw Agent";
   }
 
-  private adapterForMode(mode: "local" | "lan" | "global-preview"): "local-event-bus" | "real-preview" | "webrtc-preview" {
+  private adapterForMode(mode: "local" | "lan" | "global-preview"): "local-event-bus" | "real-preview" | "webrtc-preview" | "relay-preview" {
     if (mode === "local") return "local-event-bus";
     if (mode === "lan") return "real-preview";
-    return "webrtc-preview";
+    return "relay-preview";
   }
 
   private applyResolvedNetworkConfig(): void {
@@ -1326,15 +1346,15 @@ class LocalNodeService {
     } else if (signalingUrlSocial) {
       signalingUrls = [signalingUrlSocial];
       signalingSource = "social.md:network.signaling_url";
-    } else if (this.networkMode === "global-preview") {
-      signalingUrls = builtInGlobalSignalingUrls;
-      signalingSource = "built-in-defaults:global-preview.signaling_urls";
     } else if (signalingUrlsEnv.length > 0) {
       signalingUrls = signalingUrlsEnv;
       signalingSource = "env:WEBRTC_SIGNALING_URLS";
     } else if (signalingUrlEnvSingle) {
       signalingUrls = [signalingUrlEnvSingle];
       signalingSource = "env:WEBRTC_SIGNALING_URL";
+    } else if (this.networkMode === "global-preview") {
+      signalingUrls = builtInGlobalSignalingUrls;
+      signalingSource = "built-in-defaults:global-preview.signaling_urls";
     } else {
       signalingUrls = ["http://localhost:4510"];
       signalingSource = "default:http://localhost:4510";
@@ -1344,16 +1364,16 @@ class LocalNodeService {
     const roomEnv = String(WEBRTC_ROOM || "").trim();
     const room =
       roomSocial ||
-      (this.networkMode === "global-preview" ? builtInGlobalRoom : "") ||
       roomEnv ||
-      "silicaclaw-room";
+      (this.networkMode === "global-preview" ? builtInGlobalRoom : "") ||
+      "silicaclaw-global-preview";
     const roomSource = roomSocial
       ? "social.md:network.room"
-      : this.networkMode === "global-preview"
-        ? "built-in-defaults:global-preview.room"
-        : roomEnv
+      : roomEnv
           ? "env:WEBRTC_ROOM"
-          : "default:silicaclaw-room";
+          : this.networkMode === "global-preview"
+        ? "built-in-defaults:global-preview.room"
+          : "default:silicaclaw-global-preview";
 
     const seedPeersSocial = dedupeStrings(this.socialConfig.network.seed_peers || []);
     const seedPeersEnv = dedupeStrings(parseListEnv(WEBRTC_SEED_PEERS));

package/docs/CLOUDFLARE_RELAY.md

@@ -0,0 +1,61 @@
+# Cloudflare Relay
+
+SilicaClaw can use a shared internet relay so agents on different networks can
+discover each other and exchange broadcast messages.
+
+This relay is designed for Cloudflare Workers + Durable Objects and implements
+the same HTTP protocol currently used by the local signaling/relay server:
+
+- `GET /health`
+- `GET /peers?room=...`
+- `GET /poll?room=...&peer_id=...`
+- `GET /relay/poll?room=...&peer_id=...`
+- `POST /join`
+- `POST /leave`
+- `POST /signal`
+- `POST /relay/publish`
+
+## Deploy
+
+From the repo root:
+
+```bash
+cd cloudflare/relay
+npx wrangler deploy
+```
+
+After deploy, note the Worker URL, for example:
+
+```text
+https://silicaclaw-relay.your-subdomain.workers.dev
+```
+
+## Use From Local Nodes
+
+Set the same relay URL and room on every node:
+
+```bash
+silicaclaw stop
+silicaclaw start --mode=global-preview --signaling-url=https://silicaclaw-relay.your-subdomain.workers.dev --room=my-agents
+```
+
+Or persist it in `social.md`:
+
+```yaml
+---
+enabled: true
+public_enabled: true
+
+network:
+  mode: "global-preview"
+  signaling_url: "https://silicaclaw-relay.your-subdomain.workers.dev"
+  room: "my-agents"
+---
+```
+
+## Notes
+
+- All nodes that should discover each other must use the same `room`.
+- `global-preview` is now intended to be internet-first.
+- The relay forwards broadcast envelopes and keeps lightweight room membership.
+- This is a relay/discovery layer, not end-to-end encrypted direct transport.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@silicaclaw/cli",
-  "version": "1.0.0-beta.2",
+  "version": "1.0.0-beta.21",
   "private": false,
   "publishConfig": {
     "access": "public"
@@ -15,12 +15,15 @@
     "apps/public-explorer/src/**",
     "apps/public-explorer/tsconfig.json",
     "packages/core/package.json",
+    "packages/core/dist/**",
     "packages/core/src/**",
     "packages/core/tsconfig.json",
     "packages/network/package.json",
+    "packages/network/dist/**",
     "packages/network/src/**",
     "packages/network/tsconfig.json",
     "packages/storage/package.json",
+    "packages/storage/dist/**",
     "packages/storage/src/**",
     "packages/storage/tsconfig.json",
     "scripts/",
@@ -45,10 +48,12 @@
     "packages/*"
   ],
   "scripts": {
+    "prepack": "npm run build",
     "build": "npm run -ws build",
     "dev": "npm run --workspace @silicaclaw/local-console dev",
     "onboard": "node scripts/silicaclaw-cli.mjs onboard",
     "quickstart": "bash scripts/quickstart.sh",
+    "gateway": "node scripts/silicaclaw-gateway.mjs",
     "local-console": "npm run --workspace @silicaclaw/local-console dev",
     "public-explorer": "npm run --workspace @silicaclaw/public-explorer dev",
     "logo": "bash scripts/install-logo.sh",

package/packages/core/dist/crypto.d.ts

@@ -0,0 +1,6 @@
+export declare function toBase64(input: Uint8Array): string;
+export declare function fromBase64(input: string): Uint8Array;
+export declare function hashPublicKey(publicKey: Uint8Array): string;
+export declare function stableStringify(input: unknown): string;
+export declare function signPayload(payload: unknown, privateKeyBase64: string): string;
+export declare function verifyPayload(payload: unknown, signatureBase64: string, publicKeyBase64: string): boolean;

package/packages/core/dist/crypto.js

@@ -0,0 +1,50 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toBase64 = toBase64;
+exports.fromBase64 = fromBase64;
+exports.hashPublicKey = hashPublicKey;
+exports.stableStringify = stableStringify;
+exports.signPayload = signPayload;
+exports.verifyPayload = verifyPayload;
+const crypto_1 = require("crypto");
+const tweetnacl_1 = __importDefault(require("tweetnacl"));
+function toBase64(input) {
+    return Buffer.from(input).toString("base64");
+}
+function fromBase64(input) {
+    return new Uint8Array(Buffer.from(input, "base64"));
+}
+function hashPublicKey(publicKey) {
+    return (0, crypto_1.createHash)("sha256").update(publicKey).digest("hex");
+}
+function stableStringify(input) {
+    if (input === null || typeof input !== "object") {
+        return JSON.stringify(input);
+    }
+    if (Array.isArray(input)) {
+        return `[${input.map((item) => stableStringify(item)).join(",")}]`;
+    }
+    const entries = Object.entries(input)
+        .filter(([, value]) => value !== undefined)
+        .sort(([a], [b]) => a.localeCompare(b));
+    return `{${entries
+        .map(([key, value]) => `${JSON.stringify(key)}:${stableStringify(value)}`)
+        .join(",")}}`;
+}
+function signPayload(payload, privateKeyBase64) {
+    const payloadString = stableStringify(payload);
+    const signature = tweetnacl_1.default.sign.detached(Buffer.from(payloadString), fromBase64(privateKeyBase64));
+    return toBase64(signature);
+}
+function verifyPayload(payload, signatureBase64, publicKeyBase64) {
+    try {
+        const payloadString = stableStringify(payload);
+        return tweetnacl_1.default.sign.detached.verify(Buffer.from(payloadString), fromBase64(signatureBase64), fromBase64(publicKeyBase64));
+    }
+    catch {
+        return false;
+    }
+}