@solarpunkltd/swarm-chat-js 7.3.0 → 8.0.0

package/dist/message/message.d.ts

@@ -1,13 +1,18 @@
 import { PrivateKey } from '@ethersphere/bee-js';
 import { z } from 'zod';
+import { type ChatBinding, type ChatIdentity } from './binding.js';
 /**
- * The chat message of version 7: what a browser sends as a GSOC payload, what the server verifies before it
+ * The chat message of version 8: what a browser sends as a GSOC payload, what the server verifies before it
  * publishes, and what every feed entry carries back as `msg`. This module is the only place its bytes are built,
- * signed, checked and read, and the server imports it from here rather than keeping a copy.
+ * signed, checked and read, and the server imports it from here rather than keeping a copy. A message of any other
+ * version fails the shape check.
  */
-export declare const MESSAGE_VERSION = 7;
-/** Measured on the UTF-8 of the whole JSON object, on top of the per-field caps. */
-export declare const MAX_MESSAGE_BYTES = 2048;
+export declare const MESSAGE_VERSION = 8;
+/**
+ * Measured on the UTF-8 of the whole JSON object, on top of the per-field caps. Large enough for a 500 character text
+ * of two byte characters with a Swarm ID binding, at every other cap.
+ */
+export declare const MAX_MESSAGE_BYTES = 3072;
 export declare const MAX_TOPIC_CHARACTERS = 128;
 export declare const MAX_TEXT_CHARACTERS = 500;
 export declare const MAX_NAME_CHARACTERS = 20;
@@ -17,13 +22,19 @@ export declare const MessageType: {
     readonly REACTION: 'reaction';
 };
 export type MessageType = (typeof MessageType)[keyof typeof MessageType];
+/** Who paid for the inbox write: the gateway's stamp, or the sender's own. */
+export declare const MessageVia: {
+    readonly GATEWAY: 'gateway';
+    readonly OWN_STAMP: 'own-stamp';
+};
+export type MessageVia = (typeof MessageVia)[keyof typeof MessageVia];
 /**
  * Characters are counted as Unicode code points, never as UTF-16 units, so an emoji outside the basic plane counts
  * once. A composer that shows a count uses this function, so it and the check agree.
  */
 export declare function countCharacters(value: string): number;
 export declare const chatMessageSchema: z.ZodObject<{
-    v: z.ZodLiteral<7>;
+    v: z.ZodLiteral<8>;
     topic: z.ZodString;
     id: z.ZodString;
     type: z.ZodEnum<{
@@ -36,19 +47,39 @@ export declare const chatMessageSchema: z.ZodObject<{
     name: z.ZodString;
     addr: z.ZodString;
     ts: z.ZodNumber;
+    via: z.ZodEnum<{
+        gateway: "gateway";
+        "own-stamp": "own-stamp";
+    }>;
+    own: z.ZodBoolean;
+    idb: z.ZodOptional<z.ZodObject<{
+        msg: z.ZodString;
+        sig: z.ZodString;
+    }, z.core.$strict>>;
     sig: z.ZodString;
 }, z.core.$strict>;
 export type ChatMessage = z.infer<typeof chatMessageSchema>;
 export type UnsignedChatMessage = Omit<ChatMessage, 'sig'>;
-export type ChatMessageRefusal = 'too-large' | 'not-utf8' | 'not-json' | 'shape' | 'signature';
+export type ChatMessageRefusal = 'too-large' | 'not-utf8' | 'not-json' | 'shape' | 'signature' | 'binding';
+/** `identity` is null for a guest, a message with no binding. */
 export type ChatMessageCheck = {
     ok: true;
     message: ChatMessage;
+    identity: ChatIdentity | null;
 } | {
     ok: false;
     reason: ChatMessageRefusal;
     detail: string;
 };
+/**
+ * `origin` is the site the chat runs on, a bare origin such as `https://example.com`, and is required: a binding for
+ * any other site is refused, so a binding signed for one site never passes in another site's chat.
+ */
+export interface VerifyOptions {
+    origin: string;
+    /** Accept a binding for `http://localhost`, `http://127.0.0.1` or `http://[::1]`, as only a development build signs. */
+    allowLocalHttp?: boolean;
+}
 export declare class ChatMessageError extends Error {
     readonly reason: ChatMessageRefusal;
     constructor(reason: ChatMessageRefusal, detail: string);
@@ -69,6 +100,12 @@ export interface ChatMessageDraft {
     id?: string;
     /** The sender's clock in milliseconds, `Date.now()` when left out. */
     ts?: number;
+    /** Who pays for the inbox write. Required, since nothing can tell from here. */
+    via: MessageVia;
+    /** Whether the sender also keeps a copy in its own feed, false when left out. */
+    own?: boolean;
+    /** The sender's Swarm ID chat binding, given only for a signed-in sender. */
+    idb?: ChatBinding;
 }
 export interface SignedChatMessage {
     message: ChatMessage;
@@ -76,15 +113,24 @@ export interface SignedChatMessage {
 }
 /**
  * Builds and signs a message, and throws a ChatMessageError before signing anything that the server would refuse:
- * a field outside its cap, or a payload over MAX_MESSAGE_BYTES.
+ * a field outside its cap, a payload over MAX_MESSAGE_BYTES, or a binding that is not for this key.
  */
 export declare function createChatMessage(privateKey: PrivateKey | Uint8Array | string, draft: ChatMessageDraft): SignedChatMessage;
-/** Whether `sig` was made over this message's signed bytes by the key behind `addr`. */
+/**
+ * Whether `sig` was made over this message's signed bytes by the key behind `addr`, in its one canonical spelling: v 27
+ * or 28 and a low s, as bee-js signs. bee-js would also recover the signer from the high s twin, or from any other v.
+ */
 export declare function hasValidSignature(message: ChatMessage): boolean;
-/** Checks a message that arrived as an object, its shape and its signature. */
-export declare function checkChatMessage(value: unknown): ChatMessageCheck;
 /**
- * Checks a message as it arrived on the wire: the byte cap on the raw payload, then UTF-8, JSON, the shape and the
- * signature. Never throws, since the server calls it on whatever anybody writes to the chat's GSOC address.
+ * Verifies a message that arrived as an object: its shape, its signature, and, when it carries a binding, that the
+ * binding is the fork's four lines for this `addr` and for `options.origin`, and recovers an account. A message whose
+ * binding fails is refused as `binding`, never passed as a guest, and so is a bound message checked with no origin.
+ * Never throws, and touches no DOM and no Node API, so a page runs it in a Web Worker as the server runs it.
+ */
+export declare function verifyChatMessage(value: unknown, options: VerifyOptions): ChatMessageCheck;
+/**
+ * Verifies a message as it arrived on the wire: the byte cap on the raw payload, then UTF-8, JSON, and everything
+ * `verifyChatMessage` checks. Never throws, since the server calls it on whatever anybody writes to the chat's GSOC
+ * address.
  */
-export declare function parseChatMessage(payload: Uint8Array): ChatMessageCheck;
+export declare function parseChatMessage(payload: Uint8Array, options: VerifyOptions): ChatMessageCheck;

package/dist/message/ownFeed.d.ts

@@ -0,0 +1,9 @@
+/**
+ * A sender may keep a copy of each message it sends in a feed of its own, owned by its chat address `addr`, and says
+ * so with `own: true`. That feed is named by `ownFeedTopic(chatTopic)`, turned into a feed topic with
+ * `Topic.fromString` as the chat's own feed is named by `chatTopic`. The prefix carries a version, so a later layout of
+ * the copies takes a new topic rather than mixing with this one.
+ */
+export declare const OWN_FEED_TOPIC_PREFIX = "swarm-chat-own-feed-v1:";
+/** The topic string of the feed where the sender keeps its copies of the messages it sent to chat `chatTopic`. */
+export declare function ownFeedTopic(chatTopic: string): string;

package/dist/message-Bmwh3SCs.cjs

@@ -0,0 +1,3 @@
+let e=require("@ethersphere/bee-js"),t=require("zod"),n=require("@ethersphere/core-sdk/crypto");var r=115792089237316195423570985008687907852837564279074904382605163141518161494337n,i=r/2n;function a(e,t){let n=BigInt(`0x${e}`),a=BigInt(`0x${t}`);return n>0n&&n<r&&a>0n&&a<=i}var o=`Swarm ID chat binding v1`,s=512,c=`Site: `,l=`Chat address: `,ee=`Date: `,te=`
+`,u=4,d=`Ethereum Signed Message:
+`,ne=new Set([27,28]),f=/^0x[0-9a-f]{40}$/,p=/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/,m=/^[a-z0-9-]+(\.[a-z0-9-]+)*$/,re=new Set([`localhost`,`127.0.0.1`,`[::1]`]),h=t.z.strictObject({msg:t.z.string().max(512),sig:t.z.string().regex(/^0x[0-9a-f]{130}$/,`expected 0x and 130 lowercase hex characters`)}),g=new TextEncoder;function ie(e,t){let n;try{n=new URL(e)}catch{return!1}let r=n.protocol===`https:`,i=t&&n.protocol===`http:`&&re.has(n.hostname);return!r&&!i||!i&&!m.test(n.hostname)?!1:n.host!==``&&n.username===``&&n.password===``&&n.origin===e}function _(e){if(!p.test(e))return!1;let t=Date.parse(e);return!Number.isNaN(t)&&new Date(t).toISOString()===e}function v(e,t){return e.startsWith(t)?e.slice(t.length):null}function ae(e){let t=g.encode(e),n=g.encode(`${d}${t.length}`),r=new Uint8Array(n.length+t.length);return r.set(n),r.set(t,n.length),r}function oe(e){return Array.from(e,e=>e.toString(16).padStart(2,`0`)).join(``)}function y(e,t){let r=t.slice(2,66),i=t.slice(66,130),o=parseInt(t.slice(130),16);if(!ne.has(o)||!a(r,i))return null;try{let t=(0,n.recoverPublicKey)(ae(e),BigInt(`0x${r}`),BigInt(`0x${i}`),BigInt(o));return`0x${oe((0,n.publicKeyToAddress)(t))}`}catch{return null}}function b(e,t,n={}){if(!h.safeParse(e).success)return{ok:!1,detail:`not a binding of a text and a 65 byte signature`};let r=e.msg.split(te);if(r.length!==u||r[0]!==`Swarm ID chat binding v1`)return{ok:!1,detail:`not the ${u} lines of a ${o}`};let i=v(r[1],c),a=v(r[2],l),s=v(r[3],ee);if(i===null||!ie(i,n.allowLocalHttp===!0))return{ok:!1,detail:`the binding does not name a clean site origin`};if(a===null||!f.test(a))return{ok:!1,detail:`the binding does not name a chat address as 0x and 40 lowercase hex characters`};if(s===null||!_(s))return{ok:!1,detail:`the binding date is not ISO 8601 UTC with milliseconds`};if(a!==`0x${t}`)return{ok:!1,detail:`the binding is for another chat address than addr`};if(n.origin!==void 0&&i!==n.origin)return{ok:!1,detail:`the binding is for ${i}, not ${n.origin}`};let d=y(e.msg,e.sig);return d===null?{ok:!1,detail:`the binding signature recovers no account`}:{ok:!0,identity:{account:d,site:i,date:s}}}var x=8,S=3072,se=128,ce=500,C=20,w={TEXT:`text`,THREAD:`thread`,REACTION:`reaction`},T={GATEWAY:`gateway`,OWN_STAMP:`own-stamp`};function E(e){let t=0;for(let n of e)t++;return t}function D(e){return t.z.string().regex(RegExp(`^[0-9a-f]{${e}}$`),`expected ${e} lowercase hex characters`)}function O(e,n){return t.z.string().refine(t=>{let r=E(t);return r>=e&&r<=n},`expected ${e} to ${n} characters`)}var k=D(32),A=t.z.strictObject({v:t.z.literal(8),topic:O(1,128),id:k,type:t.z.enum([w.TEXT,w.THREAD,w.REACTION]),target:t.z.union([t.z.literal(``),k]),text:O(1,500),name:O(1,20),addr:D(40),ts:t.z.number().int().nonnegative().max(2**53-1),via:t.z.enum([T.GATEWAY,T.OWN_STAMP]),own:t.z.boolean(),idb:h.optional(),sig:D(130)}).refine(e=>e.type===w.TEXT==(e.target===``),{message:`a text message has no target, a thread reply or a reaction names one`,path:[`target`]}),j=class extends Error{constructor(e,t){super(`chat message refused (${e}): ${t}`),this.reason=e,this.name=`ChatMessageError`}},M=new TextEncoder,le=`1b`,ue=`1c`,de=new TextDecoder(`utf-8`,{fatal:!0});function N(e){return M.encode(JSON.stringify([e.v,e.topic,e.id,e.type,e.target,e.text,e.name,e.addr,e.ts,e.via,e.own,e.idb?.msg??``,e.idb?.sig??``]))}function P(e){let t={v:e.v,topic:e.topic,id:e.id,type:e.type,target:e.target,text:e.text,name:e.name,addr:e.addr,ts:e.ts,via:e.via,own:e.own,...e.idb?{idb:{msg:e.idb.msg,sig:e.idb.sig}}:{},sig:e.sig};return M.encode(JSON.stringify(t))}function F(){let e=crypto.getRandomValues(new Uint8Array(16));return Array.from(e,e=>e.toString(16).padStart(2,`0`)).join(``)}function I(e){return e.issues.map(e=>`${e.path.join(`.`)||`message`}: ${e.message}`).join(`, `)}function L(t,n){let r=t instanceof e.PrivateKey?t:new e.PrivateKey(t),i={v:8,topic:n.topic,id:n.id??F(),type:n.type,target:n.target??``,text:n.text,name:n.name,addr:r.publicKey().address().toHex(),ts:n.ts??Date.now(),via:n.via,own:n.own??!1,...n.idb?{idb:n.idb}:{}},a={...i,sig:`0`.repeat(130)},o=A.safeParse(a);if(!o.success)throw new j(`shape`,I(o.error));let s=P(a).byteLength;if(s>3072)throw new j(`too-large`,`${s} bytes, the cap is ${S}`);if(i.idb){let e=b(i.idb,i.addr,{allowLocalHttp:!0});if(!e.ok)throw new j(`binding`,e.detail)}let c={...i,sig:r.sign(N(i)).toHex()};return{message:c,bytes:P(c)}}function R(t){let n=t.sig.slice(128);if(n!==le&&n!==ue||!a(t.sig.slice(0,64),t.sig.slice(64,128)))return!1;try{return new e.Signature(t.sig).recoverPublicKey(N(t)).address().toHex()===t.addr}catch{return!1}}function z(e,t){let n=A.safeParse(e);if(!n.success)return{ok:!1,reason:`shape`,detail:I(n.error)};let r=n.data;if(!R(r))return{ok:!1,reason:`signature`,detail:`the signature was not made by addr over these fields`};if(!r.idb)return{ok:!0,message:r,identity:null};if(typeof t?.origin!=`string`)return{ok:!1,reason:`binding`,detail:`no origin was given to check the binding against`};let i=b(r.idb,r.addr,t);return i.ok?{ok:!0,message:r,identity:i.identity}:{ok:!1,reason:`binding`,detail:i.detail}}function B(e,t){if(e.byteLength>3072)return{ok:!1,reason:`too-large`,detail:`${e.byteLength} bytes, the cap is ${S}`};let n;try{n=de.decode(e)}catch{return{ok:!1,reason:`not-utf8`,detail:`the payload is not valid UTF-8`}}let r;try{r=JSON.parse(n)}catch{return{ok:!1,reason:`not-json`,detail:`the payload is not JSON`}}return z(r,t)}var V=`swarm-chat-own-feed-v1:`;function H(e){return`${V}${e}`}var fe=4096,pe=t.z.string().regex(/^[0-9a-f]{64}([0-9a-f]{64})?$/,`expected a 64 or 128 hex character reference`),U=t.z.number().int().nonnegative().max(2**53-1),W=t.z.strictObject({ref:pe,toSeq:U}),G=t.z.strictObject({v:t.z.literal(8),seq:U,at:U,msg:A,history:W.nullable()}),K=t.z.strictObject({seq:U,at:U,msg:A}),q=t.z.strictObject({v:t.z.literal(8),topic:t.z.string().min(1),fromSeq:U,toSeq:U,messages:t.z.array(t.z.unknown()),prev:W.nullable()}).refine(e=>e.fromSeq<=e.toSeq,{message:`fromSeq is after toSeq`,path:[`fromSeq`]}),me=new TextDecoder(`utf-8`,{fatal:!0});function J(e){let t;try{t=me.decode(e)}catch{return{ok:!1,reason:`not-utf8`,detail:`the payload is not valid UTF-8`}}try{return{ok:!0,value:JSON.parse(t)}}catch{return{ok:!1,reason:`not-json`,detail:`the payload is not JSON`}}}function Y(e){return e.issues.map(e=>`${e.path.join(`.`)||`value`}: ${e.message}`).join(`, `)}function he(e,t,n){let r=J(e);if(!r.ok)return r;let i=G.safeParse(r.value);return i.success?i.data.seq===t?i.data.msg.topic===n?{ok:!0,value:i.data}:{ok:!1,reason:`mismatch`,detail:`the message belongs to another chat`}:{ok:!1,reason:`mismatch`,detail:`seq ${i.data.seq} at index ${t}`}:{ok:!1,reason:`shape`,detail:Y(i.error)}}function ge(e,t,n){let r=J(e);if(!r.ok)return r;let i=q.safeParse(r.value);if(!i.success)return{ok:!1,reason:`shape`,detail:Y(i.error)};if(i.data.topic!==t||i.data.toSeq!==n.toSeq)return{ok:!1,reason:`mismatch`,detail:`the file is not the one its link names`};let{fromSeq:a,toSeq:o,prev:s}=i.data,c=[],l=0;for(let e of i.data.messages){let n=K.safeParse(e);n.success&&n.data.seq>=a&&n.data.seq<=o&&n.data.msg.topic===t?c.push(n.data):l++}return{ok:!0,value:{topic:t,fromSeq:a,toSeq:o,rows:c,prev:s,skipped:l}}}var _e=1,ve=2e3,ye=3e4,be=256,X=t.z.strictObject({v:t.z.literal(1),newest:t.z.number().int().min(-1).max(2**53-1),writtenAt:t.z.number().int().nonnegative().max(2**53-1)});function Z(e){if(!Number.isInteger(e)||e<=0)throw RangeError(`a note slot is a positive whole number of milliseconds, not ${e}`)}function xe(e,t){return Z(t),Math.floor(e/t)}function Se(e,t){return Z(t),(e+1)*t}function Q(e,t,n){return`${e}/note/${t}/${n}`}function $(t,n,r){return e.Identifier.fromString(Q(t,n,r))}function Ce(t,n,r,i){let a=$(t,n,r);return new e.Reference(e.Bytes.keccak256(e.Bytes.concat(a.toUint8Array(),new e.EthAddress(i).toUint8Array())))}var we=new TextEncoder,Te=new TextDecoder(`utf-8`,{fatal:!0});function Ee(e){let t={v:1,newest:e.newest,writtenAt:e.writtenAt};return we.encode(JSON.stringify(t))}function De(e){if(e.length>256)return null;try{let t=X.safeParse(JSON.parse(Te.decode(e)));return t.success?t.data:null}catch{return null}}Object.defineProperty(exports,"A",{enumerable:!0,get:function(){return A}}),Object.defineProperty(exports,"B",{enumerable:!0,get:function(){return s}}),Object.defineProperty(exports,"C",{enumerable:!0,get:function(){return S}}),Object.defineProperty(exports,"D",{enumerable:!0,get:function(){return x}}),Object.defineProperty(exports,"E",{enumerable:!0,get:function(){return se}}),Object.defineProperty(exports,"F",{enumerable:!0,get:function(){return F}}),Object.defineProperty(exports,"H",{enumerable:!0,get:function(){return b}}),Object.defineProperty(exports,"I",{enumerable:!0,get:function(){return B}}),Object.defineProperty(exports,"L",{enumerable:!0,get:function(){return N}}),Object.defineProperty(exports,"M",{enumerable:!0,get:function(){return L}}),Object.defineProperty(exports,"N",{enumerable:!0,get:function(){return P}}),Object.defineProperty(exports,"O",{enumerable:!0,get:function(){return w}}),Object.defineProperty(exports,"P",{enumerable:!0,get:function(){return R}}),Object.defineProperty(exports,"R",{enumerable:!0,get:function(){return z}}),Object.defineProperty(exports,"S",{enumerable:!0,get:function(){return j}}),Object.defineProperty(exports,"T",{enumerable:!0,get:function(){return ce}}),Object.defineProperty(exports,"V",{enumerable:!0,get:function(){return h}}),Object.defineProperty(exports,"_",{enumerable:!0,get:function(){return K}}),Object.defineProperty(exports,"a",{enumerable:!0,get:function(){return Ee}}),Object.defineProperty(exports,"b",{enumerable:!0,get:function(){return V}}),Object.defineProperty(exports,"c",{enumerable:!0,get:function(){return Q}}),Object.defineProperty(exports,"d",{enumerable:!0,get:function(){return De}}),Object.defineProperty(exports,"f",{enumerable:!0,get:function(){return X}}),Object.defineProperty(exports,"g",{enumerable:!0,get:function(){return W}}),Object.defineProperty(exports,"h",{enumerable:!0,get:function(){return q}}),Object.defineProperty(exports,"i",{enumerable:!0,get:function(){return _e}}),Object.defineProperty(exports,"j",{enumerable:!0,get:function(){return E}}),Object.defineProperty(exports,"k",{enumerable:!0,get:function(){return T}}),Object.defineProperty(exports,"l",{enumerable:!0,get:function(){return Se}}),Object.defineProperty(exports,"m",{enumerable:!0,get:function(){return G}}),Object.defineProperty(exports,"n",{enumerable:!0,get:function(){return ve}}),Object.defineProperty(exports,"o",{enumerable:!0,get:function(){return Ce}}),Object.defineProperty(exports,"p",{enumerable:!0,get:function(){return fe}}),Object.defineProperty(exports,"r",{enumerable:!0,get:function(){return be}}),Object.defineProperty(exports,"s",{enumerable:!0,get:function(){return $}}),Object.defineProperty(exports,"t",{enumerable:!0,get:function(){return ye}}),Object.defineProperty(exports,"u",{enumerable:!0,get:function(){return xe}}),Object.defineProperty(exports,"v",{enumerable:!0,get:function(){return he}}),Object.defineProperty(exports,"w",{enumerable:!0,get:function(){return C}}),Object.defineProperty(exports,"x",{enumerable:!0,get:function(){return H}}),Object.defineProperty(exports,"y",{enumerable:!0,get:function(){return ge}}),Object.defineProperty(exports,"z",{enumerable:!0,get:function(){return o}});

package/dist/message-Dbh8qrpg.js

@@ -0,0 +1,455 @@
+import { Bytes as e, EthAddress as t, Identifier as n, PrivateKey as r, Reference as i, Signature as a } from "@ethersphere/bee-js";
+import { z as o } from "zod";
+import { publicKeyToAddress as s, recoverPublicKey as c } from "@ethersphere/core-sdk/crypto";
+//#region src/message/canonicalSignature.ts
+var l = 115792089237316195423570985008687907852837564279074904382605163141518161494337n, ee = l / 2n;
+function u(e, t) {
+	let n = BigInt(`0x${e}`), r = BigInt(`0x${t}`);
+	return n > 0n && n < l && r > 0n && r <= ee;
+}
+//#endregion
+//#region src/message/binding.ts
+var d = "Swarm ID chat binding v1", te = 512, ne = "Site: ", re = "Chat address: ", ie = "Date: ", ae = "\n", f = 4, oe = "Ethereum Signed Message:\n", p = /* @__PURE__ */ new Set([27, 28]), m = /^0x[0-9a-f]{40}$/, se = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/, ce = /^[a-z0-9-]+(\.[a-z0-9-]+)*$/, le = /* @__PURE__ */ new Set([
+	"localhost",
+	"127.0.0.1",
+	"[::1]"
+]), h = o.strictObject({
+	msg: o.string().max(512),
+	sig: o.string().regex(/^0x[0-9a-f]{130}$/, "expected 0x and 130 lowercase hex characters")
+}), g = new TextEncoder();
+function ue(e, t) {
+	let n;
+	try {
+		n = new URL(e);
+	} catch {
+		return !1;
+	}
+	let r = n.protocol === "https:", i = t && n.protocol === "http:" && le.has(n.hostname);
+	return !r && !i || !i && !ce.test(n.hostname) ? !1 : n.host !== "" && n.username === "" && n.password === "" && n.origin === e;
+}
+function _(e) {
+	if (!se.test(e)) return !1;
+	let t = Date.parse(e);
+	return !Number.isNaN(t) && new Date(t).toISOString() === e;
+}
+function v(e, t) {
+	return e.startsWith(t) ? e.slice(t.length) : null;
+}
+function de(e) {
+	let t = g.encode(e), n = g.encode(`${oe}${t.length}`), r = new Uint8Array(n.length + t.length);
+	return r.set(n), r.set(t, n.length), r;
+}
+function fe(e) {
+	return Array.from(e, (e) => e.toString(16).padStart(2, "0")).join("");
+}
+function y(e, t) {
+	let n = t.slice(2, 66), r = t.slice(66, 130), i = parseInt(t.slice(130), 16);
+	if (!p.has(i) || !u(n, r)) return null;
+	try {
+		let t = c(de(e), BigInt(`0x${n}`), BigInt(`0x${r}`), BigInt(i));
+		return `0x${fe(s(t))}`;
+	} catch {
+		return null;
+	}
+}
+function b(e, t, n = {}) {
+	if (!h.safeParse(e).success) return {
+		ok: !1,
+		detail: "not a binding of a text and a 65 byte signature"
+	};
+	let r = e.msg.split(ae);
+	if (r.length !== f || r[0] !== "Swarm ID chat binding v1") return {
+		ok: !1,
+		detail: `not the ${f} lines of a ${d}`
+	};
+	let i = v(r[1], ne), a = v(r[2], re), o = v(r[3], ie);
+	if (i === null || !ue(i, n.allowLocalHttp === !0)) return {
+		ok: !1,
+		detail: "the binding does not name a clean site origin"
+	};
+	if (a === null || !m.test(a)) return {
+		ok: !1,
+		detail: "the binding does not name a chat address as 0x and 40 lowercase hex characters"
+	};
+	if (o === null || !_(o)) return {
+		ok: !1,
+		detail: "the binding date is not ISO 8601 UTC with milliseconds"
+	};
+	if (a !== `0x${t}`) return {
+		ok: !1,
+		detail: "the binding is for another chat address than addr"
+	};
+	if (n.origin !== void 0 && i !== n.origin) return {
+		ok: !1,
+		detail: `the binding is for ${i}, not ${n.origin}`
+	};
+	let s = y(e.msg, e.sig);
+	return s === null ? {
+		ok: !1,
+		detail: "the binding signature recovers no account"
+	} : {
+		ok: !0,
+		identity: {
+			account: s,
+			site: i,
+			date: o
+		}
+	};
+}
+//#endregion
+//#region src/message/message.ts
+var x = 8, S = 3072, pe = 128, me = 500, he = 20, C = {
+	TEXT: "text",
+	THREAD: "thread",
+	REACTION: "reaction"
+}, w = {
+	GATEWAY: "gateway",
+	OWN_STAMP: "own-stamp"
+};
+function T(e) {
+	let t = 0;
+	for (let n of e) t++;
+	return t;
+}
+function E(e) {
+	return o.string().regex(RegExp(`^[0-9a-f]{${e}}$`), `expected ${e} lowercase hex characters`);
+}
+function D(e, t) {
+	return o.string().refine((n) => {
+		let r = T(n);
+		return r >= e && r <= t;
+	}, `expected ${e} to ${t} characters`);
+}
+var O = E(32), k = o.strictObject({
+	v: o.literal(8),
+	topic: D(1, 128),
+	id: O,
+	type: o.enum([
+		C.TEXT,
+		C.THREAD,
+		C.REACTION
+	]),
+	target: o.union([o.literal(""), O]),
+	text: D(1, 500),
+	name: D(1, 20),
+	addr: E(40),
+	ts: o.number().int().nonnegative().max(2 ** 53 - 1),
+	via: o.enum([w.GATEWAY, w.OWN_STAMP]),
+	own: o.boolean(),
+	idb: h.optional(),
+	sig: E(130)
+}).refine((e) => e.type === C.TEXT == (e.target === ""), {
+	message: "a text message has no target, a thread reply or a reaction names one",
+	path: ["target"]
+}), A = class extends Error {
+	constructor(e, t) {
+		super(`chat message refused (${e}): ${t}`), this.reason = e, this.name = "ChatMessageError";
+	}
+}, j = new TextEncoder(), M = "1b", N = "1c", P = new TextDecoder("utf-8", { fatal: !0 });
+function F(e) {
+	return j.encode(JSON.stringify([
+		e.v,
+		e.topic,
+		e.id,
+		e.type,
+		e.target,
+		e.text,
+		e.name,
+		e.addr,
+		e.ts,
+		e.via,
+		e.own,
+		e.idb?.msg ?? "",
+		e.idb?.sig ?? ""
+	]));
+}
+function I(e) {
+	let t = {
+		v: e.v,
+		topic: e.topic,
+		id: e.id,
+		type: e.type,
+		target: e.target,
+		text: e.text,
+		name: e.name,
+		addr: e.addr,
+		ts: e.ts,
+		via: e.via,
+		own: e.own,
+		...e.idb ? { idb: {
+			msg: e.idb.msg,
+			sig: e.idb.sig
+		} } : {},
+		sig: e.sig
+	};
+	return j.encode(JSON.stringify(t));
+}
+function L() {
+	let e = crypto.getRandomValues(/* @__PURE__ */ new Uint8Array(16));
+	return Array.from(e, (e) => e.toString(16).padStart(2, "0")).join("");
+}
+function R(e) {
+	return e.issues.map((e) => `${e.path.join(".") || "message"}: ${e.message}`).join(", ");
+}
+function ge(e, t) {
+	let n = e instanceof r ? e : new r(e), i = {
+		v: 8,
+		topic: t.topic,
+		id: t.id ?? L(),
+		type: t.type,
+		target: t.target ?? "",
+		text: t.text,
+		name: t.name,
+		addr: n.publicKey().address().toHex(),
+		ts: t.ts ?? Date.now(),
+		via: t.via,
+		own: t.own ?? !1,
+		...t.idb ? { idb: t.idb } : {}
+	}, a = {
+		...i,
+		sig: "0".repeat(130)
+	}, o = k.safeParse(a);
+	if (!o.success) throw new A("shape", R(o.error));
+	let s = I(a).byteLength;
+	if (s > 3072) throw new A("too-large", `${s} bytes, the cap is ${S}`);
+	if (i.idb) {
+		let e = b(i.idb, i.addr, { allowLocalHttp: !0 });
+		if (!e.ok) throw new A("binding", e.detail);
+	}
+	let c = {
+		...i,
+		sig: n.sign(F(i)).toHex()
+	};
+	return {
+		message: c,
+		bytes: I(c)
+	};
+}
+function z(e) {
+	let t = e.sig.slice(128);
+	if (t !== M && t !== N || !u(e.sig.slice(0, 64), e.sig.slice(64, 128))) return !1;
+	try {
+		return new a(e.sig).recoverPublicKey(F(e)).address().toHex() === e.addr;
+	} catch {
+		return !1;
+	}
+}
+function B(e, t) {
+	let n = k.safeParse(e);
+	if (!n.success) return {
+		ok: !1,
+		reason: "shape",
+		detail: R(n.error)
+	};
+	let r = n.data;
+	if (!z(r)) return {
+		ok: !1,
+		reason: "signature",
+		detail: "the signature was not made by addr over these fields"
+	};
+	if (!r.idb) return {
+		ok: !0,
+		message: r,
+		identity: null
+	};
+	if (typeof t?.origin != "string") return {
+		ok: !1,
+		reason: "binding",
+		detail: "no origin was given to check the binding against"
+	};
+	let i = b(r.idb, r.addr, t);
+	return i.ok ? {
+		ok: !0,
+		message: r,
+		identity: i.identity
+	} : {
+		ok: !1,
+		reason: "binding",
+		detail: i.detail
+	};
+}
+function _e(e, t) {
+	if (e.byteLength > 3072) return {
+		ok: !1,
+		reason: "too-large",
+		detail: `${e.byteLength} bytes, the cap is ${S}`
+	};
+	let n;
+	try {
+		n = P.decode(e);
+	} catch {
+		return {
+			ok: !1,
+			reason: "not-utf8",
+			detail: "the payload is not valid UTF-8"
+		};
+	}
+	let r;
+	try {
+		r = JSON.parse(n);
+	} catch {
+		return {
+			ok: !1,
+			reason: "not-json",
+			detail: "the payload is not JSON"
+		};
+	}
+	return B(r, t);
+}
+//#endregion
+//#region src/message/ownFeed.ts
+var V = "swarm-chat-own-feed-v1:";
+function ve(e) {
+	return `${V}${e}`;
+}
+//#endregion
+//#region src/message/entry.ts
+var ye = 4096, be = o.string().regex(/^[0-9a-f]{64}([0-9a-f]{64})?$/, "expected a 64 or 128 hex character reference"), H = o.number().int().nonnegative().max(2 ** 53 - 1), U = o.strictObject({
+	ref: be,
+	toSeq: H
+}), W = o.strictObject({
+	v: o.literal(8),
+	seq: H,
+	at: H,
+	msg: k,
+	history: U.nullable()
+}), G = o.strictObject({
+	seq: H,
+	at: H,
+	msg: k
+}), K = o.strictObject({
+	v: o.literal(8),
+	topic: o.string().min(1),
+	fromSeq: H,
+	toSeq: H,
+	messages: o.array(o.unknown()),
+	prev: U.nullable()
+}).refine((e) => e.fromSeq <= e.toSeq, {
+	message: "fromSeq is after toSeq",
+	path: ["fromSeq"]
+}), xe = new TextDecoder("utf-8", { fatal: !0 });
+function q(e) {
+	let t;
+	try {
+		t = xe.decode(e);
+	} catch {
+		return {
+			ok: !1,
+			reason: "not-utf8",
+			detail: "the payload is not valid UTF-8"
+		};
+	}
+	try {
+		return {
+			ok: !0,
+			value: JSON.parse(t)
+		};
+	} catch {
+		return {
+			ok: !1,
+			reason: "not-json",
+			detail: "the payload is not JSON"
+		};
+	}
+}
+function J(e) {
+	return e.issues.map((e) => `${e.path.join(".") || "value"}: ${e.message}`).join(", ");
+}
+function Se(e, t, n) {
+	let r = q(e);
+	if (!r.ok) return r;
+	let i = W.safeParse(r.value);
+	return i.success ? i.data.seq === t ? i.data.msg.topic === n ? {
+		ok: !0,
+		value: i.data
+	} : {
+		ok: !1,
+		reason: "mismatch",
+		detail: "the message belongs to another chat"
+	} : {
+		ok: !1,
+		reason: "mismatch",
+		detail: `seq ${i.data.seq} at index ${t}`
+	} : {
+		ok: !1,
+		reason: "shape",
+		detail: J(i.error)
+	};
+}
+function Ce(e, t, n) {
+	let r = q(e);
+	if (!r.ok) return r;
+	let i = K.safeParse(r.value);
+	if (!i.success) return {
+		ok: !1,
+		reason: "shape",
+		detail: J(i.error)
+	};
+	if (i.data.topic !== t || i.data.toSeq !== n.toSeq) return {
+		ok: !1,
+		reason: "mismatch",
+		detail: "the file is not the one its link names"
+	};
+	let { fromSeq: a, toSeq: o, prev: s } = i.data, c = [], l = 0;
+	for (let e of i.data.messages) {
+		let n = G.safeParse(e);
+		n.success && n.data.seq >= a && n.data.seq <= o && n.data.msg.topic === t ? c.push(n.data) : l++;
+	}
+	return {
+		ok: !0,
+		value: {
+			topic: t,
+			fromSeq: a,
+			toSeq: o,
+			rows: c,
+			prev: s,
+			skipped: l
+		}
+	};
+}
+//#endregion
+//#region src/message/note.ts
+var we = 1, Y = 2e3, Te = 3e4, Ee = 256, X = o.strictObject({
+	v: o.literal(1),
+	newest: o.number().int().min(-1).max(2 ** 53 - 1),
+	writtenAt: o.number().int().nonnegative().max(2 ** 53 - 1)
+});
+function Z(e) {
+	if (!Number.isInteger(e) || e <= 0) throw RangeError(`a note slot is a positive whole number of milliseconds, not ${e}`);
+}
+function De(e, t) {
+	return Z(t), Math.floor(e / t);
+}
+function Oe(e, t) {
+	return Z(t), (e + 1) * t;
+}
+function Q(e, t, n) {
+	return `${e}/note/${t}/${n}`;
+}
+function $(e, t, r) {
+	return n.fromString(Q(e, t, r));
+}
+function ke(n, r, a, o) {
+	let s = $(n, r, a);
+	return new i(e.keccak256(e.concat(s.toUint8Array(), new t(o).toUint8Array())));
+}
+var Ae = new TextEncoder(), je = new TextDecoder("utf-8", { fatal: !0 });
+function Me(e) {
+	let t = {
+		v: 1,
+		newest: e.newest,
+		writtenAt: e.writtenAt
+	};
+	return Ae.encode(JSON.stringify(t));
+}
+function Ne(e) {
+	if (e.length > 256) return null;
+	try {
+		let t = X.safeParse(JSON.parse(je.decode(e)));
+		return t.success ? t.data : null;
+	} catch {
+		return null;
+	}
+}
+//#endregion
+export { k as A, te as B, S as C, x as D, pe as E, L as F, b as H, _e as I, F as L, ge as M, I as N, C as O, z as P, B as R, A as S, me as T, h as V, G as _, Me as a, V as b, Q as c, Ne as d, X as f, U as g, K as h, we as i, T as j, w as k, Oe as l, W as m, Y as n, ke as o, ye as p, Ee as r, $ as s, Te as t, De as u, Se as v, he as w, ve as x, Ce as y, d as z };

package/dist/message.cjs

@@ -1 +1 @@
-Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});let e=require("@ethersphere/bee-js"),t=require("zod");var n=7,r=2048,i=128,a=500,o=20,s={TEXT:`text`,THREAD:`thread`,REACTION:`reaction`};function c(e){let t=0;for(let n of e)t++;return t}function l(e){return t.z.string().regex(RegExp(`^[0-9a-f]{${e}}$`),`expected ${e} lowercase hex characters`)}function u(e,n){return t.z.string().refine(t=>{let r=c(t);return r>=e&&r<=n},`expected ${e} to ${n} characters`)}var d=l(32),f=t.z.strictObject({v:t.z.literal(7),topic:u(1,128),id:d,type:t.z.enum([s.TEXT,s.THREAD,s.REACTION]),target:t.z.union([t.z.literal(``),d]),text:u(1,500),name:u(1,20),addr:l(40),ts:t.z.number().int().nonnegative().max(2**53-1),sig:l(130)}).refine(e=>e.type===s.TEXT==(e.target===``),{message:`a text message has no target, a thread reply or a reaction names one`,path:[`target`]}),p=class extends Error{constructor(e,t){super(`chat message refused (${e}): ${t}`),this.reason=e,this.name=`ChatMessageError`}},m=new TextEncoder,h=new TextDecoder(`utf-8`,{fatal:!0});function g(e){return m.encode(JSON.stringify([e.v,e.topic,e.id,e.type,e.target,e.text,e.name,e.addr,e.ts]))}function _(e){let t={v:e.v,topic:e.topic,id:e.id,type:e.type,target:e.target,text:e.text,name:e.name,addr:e.addr,ts:e.ts,sig:e.sig};return m.encode(JSON.stringify(t))}function v(){let e=crypto.getRandomValues(new Uint8Array(16));return Array.from(e,e=>e.toString(16).padStart(2,`0`)).join(``)}function y(e){return e.issues.map(e=>`${e.path.join(`.`)||`message`}: ${e.message}`).join(`, `)}function b(t,n){let i=t instanceof e.PrivateKey?t:new e.PrivateKey(t),a={v:7,topic:n.topic,id:n.id??v(),type:n.type,target:n.target??``,text:n.text,name:n.name,addr:i.publicKey().address().toHex(),ts:n.ts??Date.now()},o={...a,sig:`0`.repeat(130)},s=f.safeParse(o);if(!s.success)throw new p(`shape`,y(s.error));let c=_(o).byteLength;if(c>2048)throw new p(`too-large`,`${c} bytes, the cap is ${r}`);let l={...a,sig:i.sign(g(a)).toHex()};return{message:l,bytes:_(l)}}function x(t){try{return new e.Signature(t.sig).recoverPublicKey(g(t)).address().toHex()===t.addr}catch{return!1}}function S(e){let t=f.safeParse(e);return t.success?x(t.data)?{ok:!0,message:t.data}:{ok:!1,reason:`signature`,detail:`the signature was not made by addr over these fields`}:{ok:!1,reason:`shape`,detail:y(t.error)}}function C(e){if(e.byteLength>2048)return{ok:!1,reason:`too-large`,detail:`${e.byteLength} bytes, the cap is ${r}`};let t;try{t=h.decode(e)}catch{return{ok:!1,reason:`not-utf8`,detail:`the payload is not valid UTF-8`}}let n;try{n=JSON.parse(t)}catch{return{ok:!1,reason:`not-json`,detail:`the payload is not JSON`}}return S(n)}var w=4096,T=t.z.string().regex(/^[0-9a-f]{64}([0-9a-f]{64})?$/,`expected a 64 or 128 hex character reference`),E=t.z.number().int().nonnegative().max(2**53-1),D=t.z.strictObject({ref:T,toSeq:E}),O=t.z.strictObject({v:t.z.literal(7),seq:E,at:E,msg:f,history:D.nullable()}),k=t.z.strictObject({seq:E,at:E,msg:f}),A=t.z.strictObject({v:t.z.literal(7),topic:t.z.string().min(1),fromSeq:E,toSeq:E,messages:t.z.array(t.z.unknown()),prev:D.nullable()}).refine(e=>e.fromSeq<=e.toSeq,{message:`fromSeq is after toSeq`,path:[`fromSeq`]}),j=new TextDecoder(`utf-8`,{fatal:!0});function M(e){let t;try{t=j.decode(e)}catch{return{ok:!1,reason:`not-utf8`,detail:`the payload is not valid UTF-8`}}try{return{ok:!0,value:JSON.parse(t)}}catch{return{ok:!1,reason:`not-json`,detail:`the payload is not JSON`}}}function N(e){return e.issues.map(e=>`${e.path.join(`.`)||`value`}: ${e.message}`).join(`, `)}function P(e,t,n){let r=M(e);if(!r.ok)return r;let i=O.safeParse(r.value);return i.success?i.data.seq===t?i.data.msg.topic===n?{ok:!0,value:i.data}:{ok:!1,reason:`mismatch`,detail:`the message belongs to another chat`}:{ok:!1,reason:`mismatch`,detail:`seq ${i.data.seq} at index ${t}`}:{ok:!1,reason:`shape`,detail:N(i.error)}}function F(e,t,n){let r=M(e);if(!r.ok)return r;let i=A.safeParse(r.value);if(!i.success)return{ok:!1,reason:`shape`,detail:N(i.error)};if(i.data.topic!==t||i.data.toSeq!==n.toSeq)return{ok:!1,reason:`mismatch`,detail:`the file is not the one its link names`};let{fromSeq:a,toSeq:o,prev:s}=i.data,c=[],l=0;for(let e of i.data.messages){let n=k.safeParse(e);n.success&&n.data.seq>=a&&n.data.seq<=o&&n.data.msg.topic===t?c.push(n.data):l++}return{ok:!0,value:{topic:t,fromSeq:a,toSeq:o,rows:c,prev:s,skipped:l}}}var I=1,L=2e3,R=3e4,z=256,B=t.z.strictObject({v:t.z.literal(1),newest:t.z.number().int().min(-1).max(2**53-1),writtenAt:t.z.number().int().nonnegative().max(2**53-1)});function V(e){if(!Number.isInteger(e)||e<=0)throw RangeError(`a note slot is a positive whole number of milliseconds, not ${e}`)}function H(e,t){return V(t),Math.floor(e/t)}function U(e,t){return V(t),(e+1)*t}function W(e,t,n){return`${e}/note/${t}/${n}`}function G(t,n,r){return e.Identifier.fromString(W(t,n,r))}function K(t,n,r,i){let a=G(t,n,r);return new e.Reference(e.Bytes.keccak256(e.Bytes.concat(a.toUint8Array(),new e.EthAddress(i).toUint8Array())))}var q=new TextEncoder,J=new TextDecoder(`utf-8`,{fatal:!0});function Y(e){let t={v:1,newest:e.newest,writtenAt:e.writtenAt};return q.encode(JSON.stringify(t))}function X(e){if(e.length>256)return null;try{let t=B.safeParse(JSON.parse(J.decode(e)));return t.success?t.data:null}catch{return null}}exports.ChatMessageError=p,exports.DEFAULT_NOTE_HEARTBEAT_MS=R,exports.DEFAULT_NOTE_SLOT_MS=L,exports.MAX_ENTRY_BYTES=w,exports.MAX_MESSAGE_BYTES=r,exports.MAX_NAME_CHARACTERS=o,exports.MAX_NOTE_BYTES=z,exports.MAX_TEXT_CHARACTERS=a,exports.MAX_TOPIC_CHARACTERS=i,exports.MESSAGE_VERSION=n,exports.MessageType=s,exports.NOTE_VERSION=I,exports.chatMessageSchema=f,exports.checkChatMessage=S,exports.countCharacters=c,exports.createChatMessage=b,exports.encodeChatMessage=_,exports.encodeSlotNote=Y,exports.feedEntrySchema=O,exports.hasValidSignature=x,exports.historyFileSchema=A,exports.historyLinkSchema=D,exports.historyRowSchema=k,exports.newMessageId=v,exports.noteAddress=K,exports.noteIdentifier=G,exports.noteIdentifierText=W,exports.noteSlotEnd=U,exports.noteSlotOf=H,exports.parseChatMessage=C,exports.parseFeedEntry=P,exports.parseHistoryFile=F,exports.parseSlotNote=X,exports.signedBytes=g,exports.slotNoteSchema=B;
+Object.defineProperty(exports,Symbol.toStringTag,{value:`Module`});const e=require("./message-Bmwh3SCs.cjs");exports.CHAT_BINDING_TITLE=e.z,exports.ChatMessageError=e.S,exports.DEFAULT_NOTE_HEARTBEAT_MS=e.t,exports.DEFAULT_NOTE_SLOT_MS=e.n,exports.MAX_BINDING_CHARACTERS=e.B,exports.MAX_ENTRY_BYTES=e.p,exports.MAX_MESSAGE_BYTES=e.C,exports.MAX_NAME_CHARACTERS=e.w,exports.MAX_NOTE_BYTES=e.r,exports.MAX_TEXT_CHARACTERS=e.T,exports.MAX_TOPIC_CHARACTERS=e.E,exports.MESSAGE_VERSION=e.D,exports.MessageType=e.O,exports.MessageVia=e.k,exports.NOTE_VERSION=e.i,exports.OWN_FEED_TOPIC_PREFIX=e.b,exports.chatBindingSchema=e.V,exports.chatMessageSchema=e.A,exports.checkChatBinding=e.H,exports.countCharacters=e.j,exports.createChatMessage=e.M,exports.encodeChatMessage=e.N,exports.encodeSlotNote=e.a,exports.feedEntrySchema=e.m,exports.hasValidSignature=e.P,exports.historyFileSchema=e.h,exports.historyLinkSchema=e.g,exports.historyRowSchema=e._,exports.newMessageId=e.F,exports.noteAddress=e.o,exports.noteIdentifier=e.s,exports.noteIdentifierText=e.c,exports.noteSlotEnd=e.l,exports.noteSlotOf=e.u,exports.ownFeedTopic=e.x,exports.parseChatMessage=e.I,exports.parseFeedEntry=e.v,exports.parseHistoryFile=e.y,exports.parseSlotNote=e.d,exports.signedBytes=e.L,exports.slotNoteSchema=e.f,exports.verifyChatMessage=e.R;