@silicaclaw/cli 2026.3.20-1 → 2026.3.20-11

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@silicaclaw/cli",
-  "version": "2026.3.20-1",
+  "version": "2026.3.20-11",
   "private": false,
   "publishConfig": {
     "access": "public"

package/packages/core/dist/packages/core/src/index.d.ts

@@ -4,6 +4,8 @@ export * from "./identity";
 export * from "./profile";
 export * from "./presence";
 export * from "./socialMessage";
+export * from "./privateCrypto";
+export * from "./privateMessage";
 export * from "./indexing";
 export * from "./directory";
 export * from "./publicProfileSummary";

package/packages/core/dist/packages/core/src/index.js

@@ -20,6 +20,8 @@ __exportStar(require("./identity"), exports);
 __exportStar(require("./profile"), exports);
 __exportStar(require("./presence"), exports);
 __exportStar(require("./socialMessage"), exports);
+__exportStar(require("./privateCrypto"), exports);
+__exportStar(require("./privateMessage"), exports);
 __exportStar(require("./indexing"), exports);
 __exportStar(require("./directory"), exports);
 __exportStar(require("./publicProfileSummary"), exports);

package/packages/core/dist/packages/core/src/privateCrypto.d.ts

@@ -0,0 +1,17 @@
+import { PrivateEncryptionKeyPair } from "./types";
+export declare function createPrivateEncryptionKeyPair(now?: number): PrivateEncryptionKeyPair;
+export declare function encryptPrivatePayload(input: {
+    plaintext: string;
+    recipient_public_key: string;
+    sender_keypair?: PrivateEncryptionKeyPair | null;
+}): {
+    ciphertext: string;
+    nonce: string;
+    sender_encryption_public_key: string;
+};
+export declare function decryptPrivatePayload(input: {
+    ciphertext: string;
+    nonce: string;
+    sender_encryption_public_key: string;
+    recipient_private_key: string;
+}): string | null;

package/packages/core/dist/packages/core/src/privateCrypto.js

@@ -0,0 +1,40 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createPrivateEncryptionKeyPair = createPrivateEncryptionKeyPair;
+exports.encryptPrivatePayload = encryptPrivatePayload;
+exports.decryptPrivatePayload = decryptPrivatePayload;
+const tweetnacl_1 = __importDefault(require("tweetnacl"));
+const crypto_1 = require("./crypto");
+function createPrivateEncryptionKeyPair(now = Date.now()) {
+    const pair = tweetnacl_1.default.box.keyPair();
+    return {
+        public_key: (0, crypto_1.toBase64)(pair.publicKey),
+        private_key: (0, crypto_1.toBase64)(pair.secretKey),
+        created_at: now,
+    };
+}
+function encryptPrivatePayload(input) {
+    const sender = input.sender_keypair || createPrivateEncryptionKeyPair();
+    const nonce = tweetnacl_1.default.randomBytes(tweetnacl_1.default.box.nonceLength);
+    const message = Buffer.from(String(input.plaintext || ""), "utf8");
+    const ciphertext = tweetnacl_1.default.box(new Uint8Array(message), nonce, (0, crypto_1.fromBase64)(input.recipient_public_key), (0, crypto_1.fromBase64)(sender.private_key));
+    return {
+        ciphertext: (0, crypto_1.toBase64)(ciphertext),
+        nonce: (0, crypto_1.toBase64)(nonce),
+        sender_encryption_public_key: sender.public_key,
+    };
+}
+function decryptPrivatePayload(input) {
+    try {
+        const opened = tweetnacl_1.default.box.open((0, crypto_1.fromBase64)(input.ciphertext), (0, crypto_1.fromBase64)(input.nonce), (0, crypto_1.fromBase64)(input.sender_encryption_public_key), (0, crypto_1.fromBase64)(input.recipient_private_key));
+        if (!opened)
+            return null;
+        return Buffer.from(opened).toString("utf8");
+    }
+    catch {
+        return null;
+    }
+}

package/packages/core/dist/packages/core/src/privateMessage.d.ts

@@ -0,0 +1,23 @@
+import { AgentIdentity, PrivateMessageReceiptRecord, PrivateMessageRecord } from "./types";
+export declare function signPrivateMessage(input: {
+    identity: AgentIdentity;
+    message_id: string;
+    conversation_id: string;
+    to_agent_id: string;
+    sender_encryption_public_key: string;
+    recipient_encryption_public_key: string;
+    ciphertext: string;
+    nonce: string;
+    created_at?: number;
+}): PrivateMessageRecord;
+export declare function verifyPrivateMessage(record: PrivateMessageRecord): boolean;
+export declare function signPrivateMessageReceipt(input: {
+    identity: AgentIdentity;
+    receipt_id: string;
+    message_id: string;
+    conversation_id: string;
+    to_agent_id: string;
+    status: "received" | "read";
+    created_at?: number;
+}): PrivateMessageReceiptRecord;
+export declare function verifyPrivateMessageReceipt(record: PrivateMessageReceiptRecord): boolean;

package/packages/core/dist/packages/core/src/privateMessage.js

@@ -0,0 +1,74 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.signPrivateMessage = signPrivateMessage;
+exports.verifyPrivateMessage = verifyPrivateMessage;
+exports.signPrivateMessageReceipt = signPrivateMessageReceipt;
+exports.verifyPrivateMessageReceipt = verifyPrivateMessageReceipt;
+const crypto_1 = require("./crypto");
+function unsignedPrivateMessage(record) {
+    const { signature: _signature, ...rest } = record;
+    return rest;
+}
+function unsignedPrivateMessageReceipt(record) {
+    const { signature: _signature, ...rest } = record;
+    return rest;
+}
+function signPrivateMessage(input) {
+    const payload = {
+        type: "private.message",
+        message_id: input.message_id,
+        conversation_id: input.conversation_id,
+        from_agent_id: input.identity.agent_id,
+        to_agent_id: input.to_agent_id,
+        sender_public_key: input.identity.public_key,
+        sender_encryption_public_key: input.sender_encryption_public_key,
+        recipient_encryption_public_key: input.recipient_encryption_public_key,
+        cipher_scheme: "nacl-box-v1",
+        ciphertext: input.ciphertext,
+        nonce: input.nonce,
+        created_at: input.created_at ?? Date.now(),
+    };
+    return {
+        ...payload,
+        signature: (0, crypto_1.signPayload)(payload, input.identity.private_key),
+    };
+}
+function verifyPrivateMessage(record) {
+    try {
+        if ((0, crypto_1.hashPublicKey)((0, crypto_1.fromBase64)(record.sender_public_key)) !== record.from_agent_id) {
+            return false;
+        }
+        return (0, crypto_1.verifyPayload)(unsignedPrivateMessage(record), record.signature, record.sender_public_key);
+    }
+    catch {
+        return false;
+    }
+}
+function signPrivateMessageReceipt(input) {
+    const payload = {
+        type: "private.message.receipt",
+        receipt_id: input.receipt_id,
+        message_id: input.message_id,
+        conversation_id: input.conversation_id,
+        from_agent_id: input.identity.agent_id,
+        to_agent_id: input.to_agent_id,
+        sender_public_key: input.identity.public_key,
+        status: input.status,
+        created_at: input.created_at ?? Date.now(),
+    };
+    return {
+        ...payload,
+        signature: (0, crypto_1.signPayload)(payload, input.identity.private_key),
+    };
+}
+function verifyPrivateMessageReceipt(record) {
+    try {
+        if ((0, crypto_1.hashPublicKey)((0, crypto_1.fromBase64)(record.sender_public_key)) !== record.from_agent_id) {
+            return false;
+        }
+        return (0, crypto_1.verifyPayload)(unsignedPrivateMessageReceipt(record), record.signature, record.sender_public_key);
+    }
+    catch {
+        return false;
+    }
+}

package/packages/core/dist/packages/core/src/profile.js

@@ -15,6 +15,7 @@ function signProfile(input, identity) {
         bio: input.bio,
         tags: input.tags,
         avatar_url: input.avatar_url,
+        private_encryption_public_key: input.private_encryption_public_key,
         public_enabled: input.public_enabled,
         updated_at: Date.now(),
     };
@@ -34,6 +35,7 @@ function createDefaultProfileInput(agentId) {
         bio: "",
         tags: [],
         avatar_url: "",
+        private_encryption_public_key: "",
         public_enabled: false,
     };
 }

package/packages/core/dist/packages/core/src/publicProfileSummary.d.ts

@@ -7,9 +7,11 @@ export type ProfileVisibility = {
 };
 export type PublicProfileSummary = {
     agent_id: string;
+    is_self: boolean;
     display_name: string;
     bio: string;
     avatar_url?: string;
+    private_encryption_public_key?: string;
     public_enabled: boolean;
     updated_at: number;
     online: boolean;
@@ -30,6 +32,7 @@ export type PublicProfileSummary = {
         display_name: string;
         bio: string;
         avatar_url?: string;
+        private_encryption_public_key?: string;
         tags: string[];
         public_enabled: boolean;
         profile_version: string;
@@ -57,6 +60,7 @@ export type PublicProfileSummary = {
 export declare function deriveCapabilitiesSummary(tags: string[]): string[];
 export declare function buildPublicProfileSummary(args: {
     profile: PublicProfile;
+    is_self?: boolean;
     online: boolean;
     last_seen_at: number | null;
     network_mode?: string;

package/packages/core/dist/packages/core/src/publicProfileSummary.js

@@ -53,9 +53,11 @@ function buildPublicProfileSummary(args) {
     ].filter((field) => Boolean(field));
     return {
         agent_id: args.profile.agent_id,
+        is_self: Boolean(args.is_self),
         display_name: args.profile.display_name,
         bio: args.profile.bio,
         avatar_url: args.profile.avatar_url,
+        private_encryption_public_key: args.profile.private_encryption_public_key,
         public_enabled: args.profile.public_enabled,
         updated_at: args.profile.updated_at,
         online: args.online,
@@ -76,6 +78,7 @@ function buildPublicProfileSummary(args) {
             display_name: args.profile.display_name,
             bio: args.profile.bio,
             avatar_url: args.profile.avatar_url,
+            private_encryption_public_key: args.profile.private_encryption_public_key,
             tags,
             public_enabled: args.profile.public_enabled,
             profile_version: args.profile_version ?? "v1",

package/packages/core/dist/packages/core/src/types.d.ts

@@ -4,12 +4,18 @@ export type AgentIdentity = {
     private_key: string;
     created_at: number;
 };
+export type PrivateEncryptionKeyPair = {
+    public_key: string;
+    private_key: string;
+    created_at: number;
+};
 export type PublicProfile = {
     agent_id: string;
     display_name: string;
     bio: string;
     tags: string[];
     avatar_url?: string;
+    private_encryption_public_key?: string;
     public_enabled: boolean;
     updated_at: number;
     signature: string;
@@ -51,6 +57,40 @@ export type SocialMessageObservationRecord = {
     observed_at: number;
     signature: string;
 };
+export type PrivateMessageRecord = {
+    type: "private.message";
+    message_id: string;
+    conversation_id: string;
+    from_agent_id: string;
+    to_agent_id: string;
+    sender_public_key: string;
+    sender_encryption_public_key: string;
+    recipient_encryption_public_key: string;
+    cipher_scheme: "nacl-box-v1";
+    ciphertext: string;
+    nonce: string;
+    created_at: number;
+    signature: string;
+};
+export type PrivateMessageReceiptRecord = {
+    type: "private.message.receipt";
+    receipt_id: string;
+    message_id: string;
+    conversation_id: string;
+    from_agent_id: string;
+    to_agent_id: string;
+    sender_public_key: string;
+    status: "received" | "read";
+    created_at: number;
+    signature: string;
+};
+export type PrivateConversationSummary = {
+    conversation_id: string;
+    peer_agent_id: string;
+    last_message_at: number | null;
+    last_message_preview: string;
+    unread_count: number;
+};
 export type DirectoryState = {
     profiles: Record<string, PublicProfile>;
     presence: Record<string, number>;

package/packages/core/src/index.ts

@@ -4,6 +4,8 @@ export * from "./identity";
 export * from "./profile";
 export * from "./presence";
 export * from "./socialMessage";
+export * from "./privateCrypto";
+export * from "./privateMessage";
 export * from "./indexing";
 export * from "./directory";
 export * from "./publicProfileSummary";

package/packages/core/src/privateCrypto.ts

@@ -0,0 +1,57 @@
+import nacl from "tweetnacl";
+import { fromBase64, toBase64 } from "./crypto";
+import { PrivateEncryptionKeyPair } from "./types";
+
+export function createPrivateEncryptionKeyPair(now = Date.now()): PrivateEncryptionKeyPair {
+  const pair = nacl.box.keyPair();
+  return {
+    public_key: toBase64(pair.publicKey),
+    private_key: toBase64(pair.secretKey),
+    created_at: now,
+  };
+}
+
+export function encryptPrivatePayload(input: {
+  plaintext: string;
+  recipient_public_key: string;
+  sender_keypair?: PrivateEncryptionKeyPair | null;
+}): {
+  ciphertext: string;
+  nonce: string;
+  sender_encryption_public_key: string;
+} {
+  const sender = input.sender_keypair || createPrivateEncryptionKeyPair();
+  const nonce = nacl.randomBytes(nacl.box.nonceLength);
+  const message = Buffer.from(String(input.plaintext || ""), "utf8");
+  const ciphertext = nacl.box(
+    new Uint8Array(message),
+    nonce,
+    fromBase64(input.recipient_public_key),
+    fromBase64(sender.private_key),
+  );
+  return {
+    ciphertext: toBase64(ciphertext),
+    nonce: toBase64(nonce),
+    sender_encryption_public_key: sender.public_key,
+  };
+}
+
+export function decryptPrivatePayload(input: {
+  ciphertext: string;
+  nonce: string;
+  sender_encryption_public_key: string;
+  recipient_private_key: string;
+}): string | null {
+  try {
+    const opened = nacl.box.open(
+      fromBase64(input.ciphertext),
+      fromBase64(input.nonce),
+      fromBase64(input.sender_encryption_public_key),
+      fromBase64(input.recipient_private_key),
+    );
+    if (!opened) return null;
+    return Buffer.from(opened).toString("utf8");
+  } catch {
+    return null;
+  }
+}

package/packages/core/src/privateMessage.ts

@@ -0,0 +1,101 @@
+import {
+  AgentIdentity,
+  PrivateMessageReceiptRecord,
+  PrivateMessageRecord,
+} from "./types";
+import { fromBase64, hashPublicKey, signPayload, verifyPayload } from "./crypto";
+
+function unsignedPrivateMessage(
+  record: PrivateMessageRecord
+): Omit<PrivateMessageRecord, "signature"> {
+  const { signature: _signature, ...rest } = record;
+  return rest;
+}
+
+function unsignedPrivateMessageReceipt(
+  record: PrivateMessageReceiptRecord
+): Omit<PrivateMessageReceiptRecord, "signature"> {
+  const { signature: _signature, ...rest } = record;
+  return rest;
+}
+
+export function signPrivateMessage(input: {
+  identity: AgentIdentity;
+  message_id: string;
+  conversation_id: string;
+  to_agent_id: string;
+  sender_encryption_public_key: string;
+  recipient_encryption_public_key: string;
+  ciphertext: string;
+  nonce: string;
+  created_at?: number;
+}): PrivateMessageRecord {
+  const payload: Omit<PrivateMessageRecord, "signature"> = {
+    type: "private.message",
+    message_id: input.message_id,
+    conversation_id: input.conversation_id,
+    from_agent_id: input.identity.agent_id,
+    to_agent_id: input.to_agent_id,
+    sender_public_key: input.identity.public_key,
+    sender_encryption_public_key: input.sender_encryption_public_key,
+    recipient_encryption_public_key: input.recipient_encryption_public_key,
+    cipher_scheme: "nacl-box-v1",
+    ciphertext: input.ciphertext,
+    nonce: input.nonce,
+    created_at: input.created_at ?? Date.now(),
+  };
+
+  return {
+    ...payload,
+    signature: signPayload(payload, input.identity.private_key),
+  };
+}
+
+export function verifyPrivateMessage(record: PrivateMessageRecord): boolean {
+  try {
+    if (hashPublicKey(fromBase64(record.sender_public_key)) !== record.from_agent_id) {
+      return false;
+    }
+    return verifyPayload(unsignedPrivateMessage(record), record.signature, record.sender_public_key);
+  } catch {
+    return false;
+  }
+}
+
+export function signPrivateMessageReceipt(input: {
+  identity: AgentIdentity;
+  receipt_id: string;
+  message_id: string;
+  conversation_id: string;
+  to_agent_id: string;
+  status: "received" | "read";
+  created_at?: number;
+}): PrivateMessageReceiptRecord {
+  const payload: Omit<PrivateMessageReceiptRecord, "signature"> = {
+    type: "private.message.receipt",
+    receipt_id: input.receipt_id,
+    message_id: input.message_id,
+    conversation_id: input.conversation_id,
+    from_agent_id: input.identity.agent_id,
+    to_agent_id: input.to_agent_id,
+    sender_public_key: input.identity.public_key,
+    status: input.status,
+    created_at: input.created_at ?? Date.now(),
+  };
+
+  return {
+    ...payload,
+    signature: signPayload(payload, input.identity.private_key),
+  };
+}
+
+export function verifyPrivateMessageReceipt(record: PrivateMessageReceiptRecord): boolean {
+  try {
+    if (hashPublicKey(fromBase64(record.sender_public_key)) !== record.from_agent_id) {
+      return false;
+    }
+    return verifyPayload(unsignedPrivateMessageReceipt(record), record.signature, record.sender_public_key);
+  } catch {
+    return false;
+  }
+}

package/packages/core/src/profile.ts

@@ -13,6 +13,7 @@ export function signProfile(input: ProfileInput, identity: AgentIdentity): Publi
     bio: input.bio,
     tags: input.tags,
     avatar_url: input.avatar_url,
+    private_encryption_public_key: input.private_encryption_public_key,
     public_enabled: input.public_enabled,
     updated_at: Date.now(),
   };
@@ -34,6 +35,7 @@ export function createDefaultProfileInput(agentId: string): ProfileInput {
     bio: "",
     tags: [],
     avatar_url: "",
+    private_encryption_public_key: "",
     public_enabled: false,
   };
 }

package/packages/core/src/publicProfileSummary.ts

@@ -10,9 +10,11 @@ export type ProfileVisibility = {
 
 export type PublicProfileSummary = {
   agent_id: string;
+  is_self: boolean;
   display_name: string;
   bio: string;
   avatar_url?: string;
+  private_encryption_public_key?: string;
   public_enabled: boolean;
   updated_at: number;
   online: boolean;
@@ -33,6 +35,7 @@ export type PublicProfileSummary = {
     display_name: string;
     bio: string;
     avatar_url?: string;
+    private_encryption_public_key?: string;
     tags: string[];
     public_enabled: boolean;
     profile_version: string;
@@ -73,6 +76,7 @@ export function deriveCapabilitiesSummary(tags: string[]): string[] {
 
 export function buildPublicProfileSummary(args: {
   profile: PublicProfile;
+  is_self?: boolean;
   online: boolean;
   last_seen_at: number | null;
   network_mode?: string;
@@ -130,9 +134,11 @@ export function buildPublicProfileSummary(args: {
 
   return {
     agent_id: args.profile.agent_id,
+    is_self: Boolean(args.is_self),
     display_name: args.profile.display_name,
     bio: args.profile.bio,
     avatar_url: args.profile.avatar_url,
+    private_encryption_public_key: args.profile.private_encryption_public_key,
     public_enabled: args.profile.public_enabled,
     updated_at: args.profile.updated_at,
     online: args.online,
@@ -153,6 +159,7 @@ export function buildPublicProfileSummary(args: {
       display_name: args.profile.display_name,
       bio: args.profile.bio,
       avatar_url: args.profile.avatar_url,
+      private_encryption_public_key: args.profile.private_encryption_public_key,
       tags,
       public_enabled: args.profile.public_enabled,
       profile_version: args.profile_version ?? "v1",

package/packages/core/src/types.ts

@@ -5,12 +5,19 @@ export type AgentIdentity = {
   created_at: number;
 };
 
+export type PrivateEncryptionKeyPair = {
+  public_key: string;
+  private_key: string;
+  created_at: number;
+};
+
 export type PublicProfile = {
   agent_id: string;
   display_name: string;
   bio: string;
   tags: string[];
   avatar_url?: string;
+  private_encryption_public_key?: string;
   public_enabled: boolean;
   updated_at: number;
   signature: string;
@@ -58,6 +65,43 @@ export type SocialMessageObservationRecord = {
   signature: string;
 };
 
+export type PrivateMessageRecord = {
+  type: "private.message";
+  message_id: string;
+  conversation_id: string;
+  from_agent_id: string;
+  to_agent_id: string;
+  sender_public_key: string;
+  sender_encryption_public_key: string;
+  recipient_encryption_public_key: string;
+  cipher_scheme: "nacl-box-v1";
+  ciphertext: string;
+  nonce: string;
+  created_at: number;
+  signature: string;
+};
+
+export type PrivateMessageReceiptRecord = {
+  type: "private.message.receipt";
+  receipt_id: string;
+  message_id: string;
+  conversation_id: string;
+  from_agent_id: string;
+  to_agent_id: string;
+  sender_public_key: string;
+  status: "received" | "read";
+  created_at: number;
+  signature: string;
+};
+
+export type PrivateConversationSummary = {
+  conversation_id: string;
+  peer_agent_id: string;
+  last_message_at: number | null;
+  last_message_preview: string;
+  unread_count: number;
+};
+
 export type DirectoryState = {
   profiles: Record<string, PublicProfile>;
   presence: Record<string, number>;

package/packages/network/dist/packages/network/src/relayPreview.d.ts

@@ -22,6 +22,10 @@ type RelayPeer = {
     last_seen_at: number;
     messages_seen: number;
     reconnect_attempts: number;
+    meta?: {
+        signal_queue_size?: number;
+        relay_queue_size?: number;
+    };
 };
 type RelayDiagnostics = {
     adapter: "relay-preview";
@@ -126,6 +130,7 @@ export declare class RelayPreviewAdapter implements NetworkAdapter {
     private started;
     private poller;
     private handlers;
+    private directHandlers;
     private peers;
     private seenMessageIds;
     private activeEndpoint;
@@ -150,10 +155,16 @@ export declare class RelayPreviewAdapter implements NetworkAdapter {
     stop(): Promise<void>;
     publish(topic: string, data: any): Promise<void>;
     subscribe(topic: string, handler: (data: any) => void): void;
+    sendDirect(peerId: string, topic: string, data: any): Promise<void>;
+    subscribeDirect(topic: string, handler: (data: any, meta?: {
+        peerId?: string;
+    }) => void): void;
     getDiagnostics(): RelayDiagnostics;
     private pollOnce;
     private refreshPeers;
     private onEnvelope;
+    private onDirectEnvelope;
+    private dispatchEnvelope;
     private recordDiscovery;
     private joinRoom;
     private maybeRefreshJoin;
@@ -162,5 +173,6 @@ export declare class RelayPreviewAdapter implements NetworkAdapter {
     private requestJson;
     private updatePeersFromList;
     private scheduleNextPoll;
+    private ensurePollingAlive;
 }
 export {};