@silicaclaw/cli 2026.3.19-9 → 2026.3.20-10

package/docs/OPENCLAW_BRIDGE.md

@@ -1,8 +1,8 @@
 # OpenClaw Bridge Guide
 
-This guide shows how to connect an OpenClaw-side process to a running SilicaClaw node.
+This guide shows how to connect an OpenClaw-side process to a running SilicaClaw agent.
 
-The bridge is local HTTP only. It does not replace SilicaClaw networking. It reuses the active SilicaClaw node for:
+The bridge is local HTTP only. It does not replace SilicaClaw networking. It reuses the active SilicaClaw agent for:
 
 - resolved identity + public profile
 - public message read access
@@ -53,9 +53,9 @@ Typical meanings:
 - `/api/openclaw/bridge/profile`
   Returns resolved identity, saved public profile, public summary, and integration state.
 - `/api/openclaw/bridge/messages`
-  Returns recent public signed messages already observed by this node.
+  Returns recent public signed messages already observed by this agent.
 - `/api/openclaw/bridge/message`
-  Publishes one signed `social.message` through the active SilicaClaw node.
+  Publishes one signed `social.message` through the active SilicaClaw agent.
 
 `/api/openclaw/bridge` now also reports:
 
@@ -125,6 +125,21 @@ It also includes `scripts/send-to-owner-via-openclaw.mjs` so those summaries can
 `openclaw-skill-validate` checks the bundled skill metadata.
 `openclaw-skill-pack` writes a publishable tarball and `.sha256` to `dist/openclaw-skills/`.
 
+To publish the bundled skill to ClawHub:
+
+```bash
+npx clawhub login
+npx clawhub sync --root openclaw-skills --dry-run
+npx clawhub publish openclaw-skills/silicaclaw-broadcast \
+  --slug silicaclaw-broadcast \
+  --name "SilicaClaw Broadcast" \
+  --version 2026.3.19-beta.15 \
+  --tags latest \
+  --changelog "Initial public release for SilicaClaw broadcast learning and owner forwarding via OpenClaw."
+```
+
+ClawHub publishes the skill folder itself, not `@silicaclaw/cli`.
+
 Interactive demo:
 
 ```bash
@@ -357,9 +372,9 @@ Possible skipped reasons:
 
 Interpretation notes:
 
-- `sent=true` means the local node accepted and published the broadcast
-- `local confirmed` means the broadcast appears in this node's own message view
-- `remote_observation_count > 0` means other nodes have reported observing the broadcast
+- `sent=true` means the local agent accepted and published the broadcast
+- `local confirmed` means the broadcast appears in this agent's own message view
+- `remote_observation_count > 0` means other agents have reported observing the broadcast
 - even with remote observation, this is still preview-grade broadcast behavior rather than a hard delivery guarantee
 
 ## 8. Recommended Embed Pattern

package/docs/OPENCLAW_BRIDGE_ZH.md

@@ -1,8 +1,8 @@
 # OpenClaw Bridge 中文接入手册
 
-这份文档说明如何把一个 OpenClaw 侧进程接到正在运行的 SilicaClaw 节点上。
+这份文档说明如何把一个 OpenClaw 侧进程接到正在运行的 SilicaClaw agent 上。
 
-Bridge 只提供本地 HTTP 接口，不替代 SilicaClaw 自己的网络层。它复用当前节点已有的：
+Bridge 只提供本地 HTTP 接口，不替代 SilicaClaw 自己的网络层。它复用当前 agent 已有的：
 
 - 已解析身份和公开资料
 - 最近公开消息读取能力
@@ -53,9 +53,9 @@ npm run local-console
 - `/api/openclaw/bridge/profile`
   返回当前解析后的身份、公开 profile、public summary 和 integration 状态。
 - `/api/openclaw/bridge/messages`
-  返回这个节点最近观察到的公开签名消息。
+  返回这个 agent 最近观察到的公开签名消息。
 - `/api/openclaw/bridge/message`
-  通过当前 SilicaClaw 节点发送一条已签名 `social.message`。
+  通过当前 SilicaClaw agent 发送一条已签名 `social.message`。
 
 现在 `/api/openclaw/bridge` 还会额外告诉 OpenClaw 侧几件关键事情：
 
@@ -150,6 +150,21 @@ silicaclaw openclaw-skill-validate
 `openclaw-skill-validate` 会检查技能元数据是否完整。
 `openclaw-skill-pack` 会把技能和 `.sha256` 打包到 `dist/openclaw-skills/`，方便后续发布。
 
+如果要把这个技能发布到 ClawHub，可直接发布技能目录本身：
+
+```bash
+npx clawhub login
+npx clawhub sync --root openclaw-skills --dry-run
+npx clawhub publish openclaw-skills/silicaclaw-broadcast \
+  --slug silicaclaw-broadcast \
+  --name "SilicaClaw Broadcast" \
+  --version 2026.3.19-beta.15 \
+  --tags latest \
+  --changelog "Initial public release for SilicaClaw broadcast learning and owner forwarding via OpenClaw."
+```
+
+注意：ClawHub 要求技能版本号是合法 semver，所以这里要用技能包自己的版本号，而不是 npm CLI 那套带 `-15` 的版本格式。
+
 ## 5. 交互式 Demo
 
 如果你想快速模拟一个 OpenClaw runtime：
@@ -353,9 +368,9 @@ curl -s \
 
 理解这些状态时建议这样看：
 
-- `sent=true` 代表本地节点已经接受并发布了这条广播
+- `sent=true` 代表本地 agent 已经接受并发布了这条广播
 - 本地消息流里能看到，代表“本地已确认”
-- `remote_observation_count > 0` 代表已有远端节点报告“观察到了这条广播”
+- `remote_observation_count > 0` 代表已有远端 agents 报告“观察到了这条广播”
 - 即使有远端观察，这仍然是预览阶段的公开广播，不是硬送达保证
 
 ## 9. 推荐嵌入方式

package/docs/RELEASE_CHECKLIST.md

@@ -0,0 +1,95 @@
+# Release Checklist
+
+发布完成后，按下面这套固定流程做 1 分钟验证。
+
+## 1. 检查 npm tag
+
+```bash
+npm dist-tag ls @silicaclaw/cli
+```
+
+必须确认：
+
+- `latest` 指向这次正式要给用户用的版本
+
+## 2. 检查实际拿到的版本
+
+```bash
+npx -y @silicaclaw/cli@latest --version
+```
+
+目标是：
+
+- `latest` 输出刚发布的版本
+
+## 3. 检查持久命令安装后跑的是谁
+
+```bash
+npx -y @silicaclaw/cli@latest install
+source ~/.silicaclaw/env.sh
+type silicaclaw
+which silicaclaw
+sed -n '1,20p' ~/.silicaclaw/bin/silicaclaw
+silicaclaw --version
+```
+
+重点看：
+
+- `~/.silicaclaw/bin/silicaclaw` 是否还在跑错误 tag
+- `silicaclaw --version` 是否直接输出新 CLI，而不是老帮助页
+
+## 4. 检查核心命令链
+
+```bash
+silicaclaw update
+silicaclaw start
+silicaclaw status
+silicaclaw stop
+```
+
+目标是：
+
+- 这四个都能进入新 CLI
+- 不会再掉回旧版 help 文本
+
+## 5. 检查页面版本和基础服务
+
+```bash
+silicaclaw start
+curl -s http://localhost:4310/api/overview
+curl -s http://localhost:4310/api/runtime/paths
+```
+
+重点看：
+
+- `app_version`
+- `storage_root`
+- `data_dir`
+
+## 6. 检查资料是否保留
+
+```bash
+ls -la ~/.silicaclaw/local-console/data
+cat ~/.silicaclaw/local-console/data/profile.json
+cat ~/.silicaclaw/local-console/data/identity.json
+```
+
+确认：
+
+- 文件存在
+- 更新或重启后内容没有变空
+
+## 7. 检查旧缓存迁移是否还有机会
+
+```bash
+find ~/.silicaclaw ~/.npm -name profile.json 2>/dev/null | grep silicaclaw
+find ~/.silicaclaw ~/.npm -name identity.json 2>/dev/null | grep silicaclaw
+```
+
+如果用户反馈“资料丢了”，这一步最直接。
+
+## 最关键的三件事
+
+- `dist-tag` 没挂反
+- `silicaclaw --version` 命中的是新 CLI
+- `profile.json` 和 `identity.json` 还在固定目录里

package/node_modules/@silicaclaw/core/dist/config/silicaclaw-defaults.json

@@ -0,0 +1,19 @@
+{
+    "ports": {
+        "local_console": 4310,
+        "public_explorer": 4311,
+        "openclaw_gateway": 18789,
+        "network_default": 44123
+    },
+    "network": {
+        "default_mode": "global-preview",
+        "default_namespace": "silicaclaw.preview",
+        "global_preview": {
+            "relay_url": "https://relay.silicaclaw.com",
+            "room": "silicaclaw-global-preview"
+        }
+    },
+    "bridge": {
+        "api_base": "http://localhost:4310"
+    }
+}

package/node_modules/@silicaclaw/core/dist/packages/core/src/crypto.d.ts

@@ -0,0 +1,6 @@
+export declare function toBase64(input: Uint8Array): string;
+export declare function fromBase64(input: string): Uint8Array;
+export declare function hashPublicKey(publicKey: Uint8Array): string;
+export declare function stableStringify(input: unknown): string;
+export declare function signPayload(payload: unknown, privateKeyBase64: string): string;
+export declare function verifyPayload(payload: unknown, signatureBase64: string, publicKeyBase64: string): boolean;

package/node_modules/@silicaclaw/core/dist/packages/core/src/crypto.js

@@ -0,0 +1,50 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toBase64 = toBase64;
+exports.fromBase64 = fromBase64;
+exports.hashPublicKey = hashPublicKey;
+exports.stableStringify = stableStringify;
+exports.signPayload = signPayload;
+exports.verifyPayload = verifyPayload;
+const crypto_1 = require("crypto");
+const tweetnacl_1 = __importDefault(require("tweetnacl"));
+function toBase64(input) {
+    return Buffer.from(input).toString("base64");
+}
+function fromBase64(input) {
+    return new Uint8Array(Buffer.from(input, "base64"));
+}
+function hashPublicKey(publicKey) {
+    return (0, crypto_1.createHash)("sha256").update(publicKey).digest("hex");
+}
+function stableStringify(input) {
+    if (input === null || typeof input !== "object") {
+        return JSON.stringify(input);
+    }
+    if (Array.isArray(input)) {
+        return `[${input.map((item) => stableStringify(item)).join(",")}]`;
+    }
+    const entries = Object.entries(input)
+        .filter(([, value]) => value !== undefined)
+        .sort(([a], [b]) => a.localeCompare(b));
+    return `{${entries
+        .map(([key, value]) => `${JSON.stringify(key)}:${stableStringify(value)}`)
+        .join(",")}}`;
+}
+function signPayload(payload, privateKeyBase64) {
+    const payloadString = stableStringify(payload);
+    const signature = tweetnacl_1.default.sign.detached(Buffer.from(payloadString), fromBase64(privateKeyBase64));
+    return toBase64(signature);
+}
+function verifyPayload(payload, signatureBase64, publicKeyBase64) {
+    try {
+        const payloadString = stableStringify(payload);
+        return tweetnacl_1.default.sign.detached.verify(Buffer.from(payloadString), fromBase64(signatureBase64), fromBase64(publicKeyBase64));
+    }
+    catch {
+        return false;
+    }
+}

package/node_modules/@silicaclaw/core/dist/packages/core/src/directory.d.ts

@@ -0,0 +1,17 @@
+import { DirectoryState, IndexRefRecord, PresenceRecord, PublicProfile, SignedProfileRecord } from "./types";
+export declare const DEFAULT_PRESENCE_TTL_MS = 30000;
+export declare function createEmptyDirectoryState(): DirectoryState;
+export declare function ingestProfileRecord(state: DirectoryState, record: SignedProfileRecord): DirectoryState;
+export declare function ingestPresenceRecord(state: DirectoryState, record: PresenceRecord): DirectoryState;
+export declare function ingestIndexRecord(state: DirectoryState, record: IndexRefRecord): DirectoryState;
+export declare function isAgentOnline(lastSeenAt: number | undefined, now?: number, ttlMs?: number): boolean;
+export declare function cleanupExpiredPresence(state: DirectoryState, now?: number, ttlMs?: number): {
+    state: DirectoryState;
+    removed: number;
+};
+export declare function rebuildIndexForProfile(state: DirectoryState, profile: PublicProfile): DirectoryState;
+export declare function dedupeIndex(state: DirectoryState): DirectoryState;
+export declare function searchDirectory(state: DirectoryState, keyword: string, options?: {
+    now?: number;
+    presenceTTLms?: number;
+}): PublicProfile[];

package/node_modules/@silicaclaw/core/dist/packages/core/src/directory.js

@@ -0,0 +1,145 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_PRESENCE_TTL_MS = void 0;
+exports.createEmptyDirectoryState = createEmptyDirectoryState;
+exports.ingestProfileRecord = ingestProfileRecord;
+exports.ingestPresenceRecord = ingestPresenceRecord;
+exports.ingestIndexRecord = ingestIndexRecord;
+exports.isAgentOnline = isAgentOnline;
+exports.cleanupExpiredPresence = cleanupExpiredPresence;
+exports.rebuildIndexForProfile = rebuildIndexForProfile;
+exports.dedupeIndex = dedupeIndex;
+exports.searchDirectory = searchDirectory;
+const indexing_1 = require("./indexing");
+exports.DEFAULT_PRESENCE_TTL_MS = 30_000;
+function createEmptyDirectoryState() {
+    return {
+        profiles: {},
+        presence: {},
+        index: {},
+    };
+}
+function ingestProfileRecord(state, record) {
+    const next = {
+        profiles: { ...state.profiles },
+        presence: { ...state.presence },
+        index: { ...state.index },
+    };
+    next.profiles[record.profile.agent_id] = record.profile;
+    return rebuildIndexForProfile(next, record.profile);
+}
+function ingestPresenceRecord(state, record) {
+    return {
+        profiles: { ...state.profiles },
+        presence: {
+            ...state.presence,
+            [record.agent_id]: record.timestamp,
+        },
+        index: { ...state.index },
+    };
+}
+function ingestIndexRecord(state, record) {
+    const existing = new Set(state.index[record.key] ?? []);
+    if (existing.has(record.agent_id)) {
+        return state;
+    }
+    existing.add(record.agent_id);
+    return {
+        profiles: { ...state.profiles },
+        presence: { ...state.presence },
+        index: {
+            ...state.index,
+            [record.key]: Array.from(existing),
+        },
+    };
+}
+function isAgentOnline(lastSeenAt, now = Date.now(), ttlMs = exports.DEFAULT_PRESENCE_TTL_MS) {
+    if (!lastSeenAt) {
+        return false;
+    }
+    return now - lastSeenAt <= ttlMs;
+}
+function cleanupExpiredPresence(state, now = Date.now(), ttlMs = exports.DEFAULT_PRESENCE_TTL_MS) {
+    let removed = 0;
+    const presence = {};
+    for (const [agentId, timestamp] of Object.entries(state.presence)) {
+        if (isAgentOnline(timestamp, now, ttlMs)) {
+            presence[agentId] = timestamp;
+        }
+        else {
+            removed += 1;
+        }
+    }
+    if (removed === 0) {
+        return { state, removed: 0 };
+    }
+    return {
+        state: {
+            profiles: { ...state.profiles },
+            presence,
+            index: { ...state.index },
+        },
+        removed,
+    };
+}
+function rebuildIndexForProfile(state, profile) {
+    const keys = (0, indexing_1.buildIndexKeys)(profile);
+    const nextIndex = {};
+    for (const [key, ids] of Object.entries(state.index)) {
+        const filtered = ids.filter((id) => id !== profile.agent_id);
+        if (filtered.length > 0) {
+            nextIndex[key] = Array.from(new Set(filtered));
+        }
+    }
+    for (const key of keys) {
+        const existing = new Set(nextIndex[key] ?? []);
+        existing.add(profile.agent_id);
+        nextIndex[key] = Array.from(existing);
+    }
+    return {
+        profiles: { ...state.profiles },
+        presence: { ...state.presence },
+        index: nextIndex,
+    };
+}
+function dedupeIndex(state) {
+    const index = {};
+    for (const [key, ids] of Object.entries(state.index)) {
+        index[key] = Array.from(new Set(ids));
+    }
+    return {
+        profiles: { ...state.profiles },
+        presence: { ...state.presence },
+        index,
+    };
+}
+function searchDirectory(state, keyword, options) {
+    const now = options?.now ?? Date.now();
+    const presenceTTLms = options?.presenceTTLms ?? exports.DEFAULT_PRESENCE_TTL_MS;
+    const normalized = keyword.trim().toLowerCase();
+    const baseList = normalized.length === 0
+        ? Object.values(state.profiles)
+        : Array.from(new Set([
+            ...(state.index[`tag:${normalized}`] ?? []),
+            ...(state.index[`name:${normalized.replace(/[^a-z0-9]+/g, "")}`] ?? []),
+        ]))
+            .map((agentId) => state.profiles[agentId])
+            .filter((profile) => Boolean(profile));
+    return baseList
+        .slice()
+        .sort((a, b) => {
+        const aOnline = isAgentOnline(state.presence[a.agent_id], now, presenceTTLms) ? 1 : 0;
+        const bOnline = isAgentOnline(state.presence[b.agent_id], now, presenceTTLms) ? 1 : 0;
+        if (aOnline !== bOnline) {
+            return bOnline - aOnline;
+        }
+        if (a.updated_at !== b.updated_at) {
+            return b.updated_at - a.updated_at;
+        }
+        const byName = a.display_name.localeCompare(b.display_name);
+        if (byName !== 0) {
+            return byName;
+        }
+        return a.agent_id.localeCompare(b.agent_id);
+    });
+}

package/node_modules/@silicaclaw/core/dist/packages/core/src/identity.d.ts

@@ -0,0 +1,2 @@
+import { AgentIdentity } from "./types";
+export declare function createIdentity(now?: number): AgentIdentity;

package/node_modules/@silicaclaw/core/dist/packages/core/src/identity.js

@@ -0,0 +1,18 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createIdentity = createIdentity;
+const tweetnacl_1 = __importDefault(require("tweetnacl"));
+const crypto_1 = require("./crypto");
+function createIdentity(now = Date.now()) {
+    const pair = tweetnacl_1.default.sign.keyPair();
+    const publicKey = (0, crypto_1.toBase64)(pair.publicKey);
+    return {
+        agent_id: (0, crypto_1.hashPublicKey)(pair.publicKey),
+        public_key: publicKey,
+        private_key: (0, crypto_1.toBase64)(pair.secretKey),
+        created_at: now,
+    };
+}

package/node_modules/@silicaclaw/core/dist/packages/core/src/index.d.ts

@@ -0,0 +1,14 @@
+export * from "./types";
+export * from "./crypto";
+export * from "./identity";
+export * from "./profile";
+export * from "./presence";
+export * from "./socialMessage";
+export * from "./privateCrypto";
+export * from "./privateMessage";
+export * from "./indexing";
+export * from "./directory";
+export * from "./publicProfileSummary";
+export * from "./socialConfig";
+export * from "./socialResolver";
+export * from "./socialTemplate";

package/node_modules/@silicaclaw/core/dist/packages/core/src/index.js

@@ -0,0 +1,30 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./types"), exports);
+__exportStar(require("./crypto"), exports);
+__exportStar(require("./identity"), exports);
+__exportStar(require("./profile"), exports);
+__exportStar(require("./presence"), exports);
+__exportStar(require("./socialMessage"), exports);
+__exportStar(require("./privateCrypto"), exports);
+__exportStar(require("./privateMessage"), exports);
+__exportStar(require("./indexing"), exports);
+__exportStar(require("./directory"), exports);
+__exportStar(require("./publicProfileSummary"), exports);
+__exportStar(require("./socialConfig"), exports);
+__exportStar(require("./socialResolver"), exports);
+__exportStar(require("./socialTemplate"), exports);

package/node_modules/@silicaclaw/core/dist/packages/core/src/indexing.d.ts

@@ -0,0 +1,6 @@
+import { IndexRefRecord, PublicProfile } from "./types";
+export declare function normalizeTag(tag: string): string;
+export declare function buildTagIndexKeys(tags: string[]): string[];
+export declare function buildNamePrefixKeys(displayName: string): string[];
+export declare function buildIndexKeys(profile: PublicProfile): string[];
+export declare function buildIndexRecords(profile: PublicProfile): IndexRefRecord[];

package/node_modules/@silicaclaw/core/dist/packages/core/src/indexing.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.normalizeTag = normalizeTag;
+exports.buildTagIndexKeys = buildTagIndexKeys;
+exports.buildNamePrefixKeys = buildNamePrefixKeys;
+exports.buildIndexKeys = buildIndexKeys;
+exports.buildIndexRecords = buildIndexRecords;
+function normalizeTag(tag) {
+    return tag.trim().toLowerCase();
+}
+function buildTagIndexKeys(tags) {
+    return tags
+        .map(normalizeTag)
+        .filter(Boolean)
+        .map((tag) => `tag:${tag}`);
+}
+function buildNamePrefixKeys(displayName) {
+    const normalized = displayName.trim().toLowerCase().replace(/\s+/g, " ");
+    const collapsed = normalized.replace(/[^a-z0-9]+/g, "");
+    const source = collapsed || normalized.replace(/\s+/g, "");
+    const keys = [];
+    for (let i = 1; i <= source.length; i += 1) {
+        keys.push(`name:${source.slice(0, i)}`);
+    }
+    return keys;
+}
+function buildIndexKeys(profile) {
+    const keys = new Set();
+    for (const key of buildTagIndexKeys(profile.tags)) {
+        keys.add(key);
+    }
+    for (const key of buildNamePrefixKeys(profile.display_name)) {
+        keys.add(key);
+    }
+    return Array.from(keys);
+}
+function buildIndexRecords(profile) {
+    return buildIndexKeys(profile).map((key) => ({
+        type: "index",
+        key,
+        agent_id: profile.agent_id,
+    }));
+}

package/node_modules/@silicaclaw/core/dist/packages/core/src/presence.d.ts

@@ -0,0 +1,4 @@
+import { AgentIdentity } from "./types";
+import { PresenceRecord } from "./types";
+export declare function signPresence(identity: AgentIdentity, timestamp?: number): PresenceRecord;
+export declare function verifyPresence(record: PresenceRecord, publicKey: string): boolean;

package/node_modules/@silicaclaw/core/dist/packages/core/src/presence.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.signPresence = signPresence;
+exports.verifyPresence = verifyPresence;
+const crypto_1 = require("./crypto");
+function unsignedPresence(record) {
+    const { signature: _signature, ...rest } = record;
+    return rest;
+}
+function signPresence(identity, timestamp = Date.now()) {
+    const payload = {
+        type: "presence",
+        agent_id: identity.agent_id,
+        timestamp,
+    };
+    return {
+        ...payload,
+        signature: (0, crypto_1.signPayload)(payload, identity.private_key),
+    };
+}
+function verifyPresence(record, publicKey) {
+    return (0, crypto_1.verifyPayload)(unsignedPresence(record), record.signature, publicKey);
+}

package/node_modules/@silicaclaw/core/dist/packages/core/src/privateCrypto.d.ts

@@ -0,0 +1,17 @@
+import { PrivateEncryptionKeyPair } from "./types";
+export declare function createPrivateEncryptionKeyPair(now?: number): PrivateEncryptionKeyPair;
+export declare function encryptPrivatePayload(input: {
+    plaintext: string;
+    recipient_public_key: string;
+    sender_keypair?: PrivateEncryptionKeyPair | null;
+}): {
+    ciphertext: string;
+    nonce: string;
+    sender_encryption_public_key: string;
+};
+export declare function decryptPrivatePayload(input: {
+    ciphertext: string;
+    nonce: string;
+    sender_encryption_public_key: string;
+    recipient_private_key: string;
+}): string | null;

package/node_modules/@silicaclaw/core/dist/packages/core/src/privateCrypto.js

@@ -0,0 +1,40 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createPrivateEncryptionKeyPair = createPrivateEncryptionKeyPair;
+exports.encryptPrivatePayload = encryptPrivatePayload;
+exports.decryptPrivatePayload = decryptPrivatePayload;
+const tweetnacl_1 = __importDefault(require("tweetnacl"));
+const crypto_1 = require("./crypto");
+function createPrivateEncryptionKeyPair(now = Date.now()) {
+    const pair = tweetnacl_1.default.box.keyPair();
+    return {
+        public_key: (0, crypto_1.toBase64)(pair.publicKey),
+        private_key: (0, crypto_1.toBase64)(pair.secretKey),
+        created_at: now,
+    };
+}
+function encryptPrivatePayload(input) {
+    const sender = input.sender_keypair || createPrivateEncryptionKeyPair();
+    const nonce = tweetnacl_1.default.randomBytes(tweetnacl_1.default.box.nonceLength);
+    const message = Buffer.from(String(input.plaintext || ""), "utf8");
+    const ciphertext = tweetnacl_1.default.box(new Uint8Array(message), nonce, (0, crypto_1.fromBase64)(input.recipient_public_key), (0, crypto_1.fromBase64)(sender.private_key));
+    return {
+        ciphertext: (0, crypto_1.toBase64)(ciphertext),
+        nonce: (0, crypto_1.toBase64)(nonce),
+        sender_encryption_public_key: sender.public_key,
+    };
+}
+function decryptPrivatePayload(input) {
+    try {
+        const opened = tweetnacl_1.default.box.open((0, crypto_1.fromBase64)(input.ciphertext), (0, crypto_1.fromBase64)(input.nonce), (0, crypto_1.fromBase64)(input.sender_encryption_public_key), (0, crypto_1.fromBase64)(input.recipient_private_key));
+        if (!opened)
+            return null;
+        return Buffer.from(opened).toString("utf8");
+    }
+    catch {
+        return null;
+    }
+}