@storacha/clawracha 0.2.2 → 0.3.0

package/dist/utils/crypto.js

@@ -0,0 +1,90 @@
+/**
+ * Encryption helpers for private spaces.
+ * Uses @storacha/encrypt-upload-client with KMS-based key management.
+ */
+import { createGenericKMSAdapter } from "@storacha/encrypt-upload-client/factories.node";
+import { create as createEncryptedClient } from "@storacha/encrypt-upload-client";
+import { encryptFile, encryptedBlockStream } from "@storacha/encrypt-upload-client/utils/encrypt";
+const KMS_SERVICE_URL = "https://kms.storacha.network";
+const KMS_SERVICE_DID = "did:web:kms.storacha.network";
+let cachedAdapter = null;
+export function getKMSCryptoAdapter() {
+    if (cachedAdapter)
+        return cachedAdapter;
+    cachedAdapter = createGenericKMSAdapter(KMS_SERVICE_URL, KMS_SERVICE_DID);
+    return cachedAdapter;
+}
+export async function getEncryptedClient(storachaClient) {
+    const cryptoAdapter = getKMSCryptoAdapter();
+    return createEncryptedClient({
+        storachaClient,
+        cryptoAdapter,
+    });
+}
+export function makeEncryptionConfig(issuer, spaceDID, proofs) {
+    return {
+        issuer: issuer,
+        spaceDID,
+        proofs,
+    };
+}
+export function makeDecryptionConfig(spaceDID, decryptDelegation, proofs) {
+    return {
+        spaceDID,
+        decryptDelegation,
+        proofs,
+    };
+}
+/**
+ * Encrypt a BlobLike and return a block stream
+ * (UnixFS-encoded encrypted content + metadata block appended).
+ */
+export async function encryptToBlockStream(file, encryptionConfig) {
+    const adapter = getKMSCryptoAdapter();
+    const payload = await encryptFile(adapter, file, encryptionConfig);
+    return encryptedBlockStream(payload, adapter);
+}
+/**
+ * Wrap raw bytes as a BlobLike for encryption.
+ */
+export function bytesToBlobLike(bytes) {
+    return {
+        stream: () => new ReadableStream({
+            start(controller) {
+                controller.enqueue(bytes);
+                controller.close();
+            },
+        }),
+    };
+}
+/**
+ * Drain a ReadableStream into a single Uint8Array.
+ */
+async function drainStream(stream) {
+    const reader = stream.getReader();
+    const chunks = [];
+    while (true) {
+        const { done, value } = await reader.read();
+        if (done)
+            break;
+        chunks.push(value);
+    }
+    const totalLength = chunks.reduce((sum, c) => sum + c.length, 0);
+    const result = new Uint8Array(totalLength);
+    let offset = 0;
+    for (const chunk of chunks) {
+        result.set(chunk, offset);
+        offset += chunk.length;
+    }
+    return result;
+}
+/**
+ * Create a decrypt function for mdsync resolveValue.
+ * Fetches encrypted content by CID via EncryptedClient and returns decrypted bytes.
+ */
+export function makeDecryptFn(encryptedClient, decryptionConfig) {
+    return async (cid) => {
+        const { stream } = await encryptedClient.retrieveAndDecryptFile(cid, decryptionConfig);
+        return drainStream(stream);
+    };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@storacha/clawracha",
-  "version": "0.2.2",
+  "version": "0.3.0",
   "description": "OpenClaw plugin for Storacha workspace sync via UCN Pail",
   "type": "module",
   "files": [
@@ -29,9 +29,11 @@
     "@ipld/car": "^5.2.0",
     "@ipld/dag-cbor": "^9.2.5",
     "@storacha/client": "^2.0.4",
-    "@storacha/md-merge": "0.7.0",
+    "@storacha/encrypt-upload-client": "1.1.76-rc.0",
+    "@storacha/md-merge": "0.9.0",
     "@storacha/ucn": "1.1.1-rc.3",
     "@storacha/upload-client": "^1.3.9",
+    "@ucanto/core": "^10.4.6",
     "@ucanto/interface": "^11.0.1",
     "@web3-storage/pail": "0.6.3-rc.3",
     "carstream": "^2.3.0",