@sumicom/quicksave-shared 0.7.1 → 0.8.1

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,cAAc,YAAY,CAAC;AAG3B,cAAc,eAAe,CAAC;AAG9B,cAAc,YAAY,CAAC;AAG3B,cAAc,aAAa,CAAC;AAG5B,cAAc,eAAe,CAAC;AAG9B,cAAc,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,cAAc,YAAY,CAAC;AAG3B,cAAc,eAAe,CAAC;AAG9B,cAAc,YAAY,CAAC;AAG3B,cAAc,aAAa,CAAC;AAG5B,cAAc,eAAe,CAAC;AAG9B,cAAc,kBAAkB,CAAC;AAGjC,cAAc,mBAAmB,CAAC;AAGlC,cAAc,kBAAkB,CAAC"}

package/dist/index.js

@@ -10,4 +10,8 @@ export * from './crypto.js';
 export * from './protocol.js';
 // Permission utilities
 export * from './permissions.js';
+// Signed sync envelope
+export * from './syncEnvelope.js';
+// Signed V2 key-exchange helpers
+export * from './keyExchange.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,QAAQ;AACR,cAAc,YAAY,CAAC;AAE3B,kBAAkB;AAClB,cAAc,eAAe,CAAC;AAE9B,kCAAkC;AAClC,cAAc,YAAY,CAAC;AAE3B,mBAAmB;AACnB,cAAc,aAAa,CAAC;AAE5B,qBAAqB;AACrB,cAAc,eAAe,CAAC;AAE9B,uBAAuB;AACvB,cAAc,kBAAkB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,QAAQ;AACR,cAAc,YAAY,CAAC;AAE3B,kBAAkB;AAClB,cAAc,eAAe,CAAC;AAE9B,kCAAkC;AAClC,cAAc,YAAY,CAAC;AAE3B,mBAAmB;AACnB,cAAc,aAAa,CAAC;AAE5B,qBAAqB;AACrB,cAAc,eAAe,CAAC;AAE9B,uBAAuB;AACvB,cAAc,kBAAkB,CAAC;AAEjC,uBAAuB;AACvB,cAAc,mBAAmB,CAAC;AAElC,iCAAiC;AACjC,cAAc,kBAAkB,CAAC"}

package/dist/keyExchange.d.ts

@@ -0,0 +1,58 @@
+/**
+ * Canonical body signed by the PWA in a V2 key exchange. The agent
+ * re-derives this string locally and verifies the Ed25519 signature against
+ * the claimed `sigPubkey` (TOFU on first pair, pinned match on subsequent).
+ *
+ * Binding fields:
+ * - `agentId`: prevents an envelope captured by one agent from being replayed
+ *   against another agent (each agent TOFU-pins a single group identity).
+ * - `sigPubkey`: prevents key-substitution — the claimed signing pubkey is
+ *   itself part of the signed body, so an attacker can't swap it after the
+ *   fact without re-signing.
+ * - `encryptedDEK`: binds the signature to this specific handshake's DEK so a
+ *   captured envelope can't be spliced with a different DEK.
+ * - `timestamp`: freshness (agent enforces a ±bounded window).
+ *
+ * Separator `|` is not valid in base64url, so the fields cannot collide.
+ */
+export declare function canonicalKeyExchangeV2Body(params: {
+    agentId: string;
+    sigPubkey: string;
+    encryptedDEK: string;
+    timestamp: number;
+}): string;
+export interface SignKeyExchangeV2Input {
+    agentId: string;
+    encryptedDEK: string;
+    timestamp: number;
+    signingPublicKey: Uint8Array;
+    signingSecretKey: Uint8Array;
+    /** base64 encoder; injected to avoid a crypto-lib-specific dependency here. */
+    encodeBase64: (bytes: Uint8Array) => string;
+}
+export interface SignedKeyExchangeV2 {
+    sigPubkey: string;
+    signature: string;
+}
+/**
+ * Produce the `sigPubkey + signature` pair the PWA attaches to the V2 key
+ * exchange envelope.
+ */
+export declare function signKeyExchangeV2(input: SignKeyExchangeV2Input): SignedKeyExchangeV2;
+export interface VerifyKeyExchangeV2Input {
+    agentId: string;
+    encryptedDEK: string;
+    timestamp: number;
+    sigPubkey: string;
+    signature: string;
+    /** base64 decoder (usually `decodeBase64` from crypto.ts). */
+    decodeBase64: (b64: string) => Uint8Array;
+}
+/**
+ * Verify the Ed25519 signature on a V2 key exchange. Does *not* check the
+ * timestamp window or whether `sigPubkey` matches a pinned identity — the
+ * caller is responsible for those policy decisions (unpaired vs paired
+ * branches diverge on how to interpret `sigPubkey`).
+ */
+export declare function verifyKeyExchangeV2Signature(input: VerifyKeyExchangeV2Input): boolean;
+//# sourceMappingURL=keyExchange.d.ts.map

package/dist/keyExchange.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyExchange.d.ts","sourceRoot":"","sources":["../src/keyExchange.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,EAAE;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB,GAAG,MAAM,CAQT;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,UAAU,CAAC;IAC7B,gBAAgB,EAAE,UAAU,CAAC;IAC7B,+EAA+E;IAC/E,YAAY,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,MAAM,CAAC;CAC7C;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,sBAAsB,GAC5B,mBAAmB,CAUrB;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,8DAA8D;IAC9D,YAAY,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,UAAU,CAAC;CAC3C;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAC1C,KAAK,EAAE,wBAAwB,GAC9B,OAAO,CAaT"}

package/dist/keyExchange.js

@@ -0,0 +1,64 @@
+import { sign, verify } from './crypto.js';
+/**
+ * Canonical body signed by the PWA in a V2 key exchange. The agent
+ * re-derives this string locally and verifies the Ed25519 signature against
+ * the claimed `sigPubkey` (TOFU on first pair, pinned match on subsequent).
+ *
+ * Binding fields:
+ * - `agentId`: prevents an envelope captured by one agent from being replayed
+ *   against another agent (each agent TOFU-pins a single group identity).
+ * - `sigPubkey`: prevents key-substitution — the claimed signing pubkey is
+ *   itself part of the signed body, so an attacker can't swap it after the
+ *   fact without re-signing.
+ * - `encryptedDEK`: binds the signature to this specific handshake's DEK so a
+ *   captured envelope can't be spliced with a different DEK.
+ * - `timestamp`: freshness (agent enforces a ±bounded window).
+ *
+ * Separator `|` is not valid in base64url, so the fields cannot collide.
+ */
+export function canonicalKeyExchangeV2Body(params) {
+    return [
+        'key-exchange-v2',
+        params.agentId,
+        params.sigPubkey,
+        params.encryptedDEK,
+        String(params.timestamp),
+    ].join('|');
+}
+/**
+ * Produce the `sigPubkey + signature` pair the PWA attaches to the V2 key
+ * exchange envelope.
+ */
+export function signKeyExchangeV2(input) {
+    const sigPubkey = input.encodeBase64(input.signingPublicKey);
+    const body = canonicalKeyExchangeV2Body({
+        agentId: input.agentId,
+        sigPubkey,
+        encryptedDEK: input.encryptedDEK,
+        timestamp: input.timestamp,
+    });
+    const signature = sign(body, input.signingSecretKey);
+    return { sigPubkey, signature };
+}
+/**
+ * Verify the Ed25519 signature on a V2 key exchange. Does *not* check the
+ * timestamp window or whether `sigPubkey` matches a pinned identity — the
+ * caller is responsible for those policy decisions (unpaired vs paired
+ * branches diverge on how to interpret `sigPubkey`).
+ */
+export function verifyKeyExchangeV2Signature(input) {
+    try {
+        const body = canonicalKeyExchangeV2Body({
+            agentId: input.agentId,
+            sigPubkey: input.sigPubkey,
+            encryptedDEK: input.encryptedDEK,
+            timestamp: input.timestamp,
+        });
+        const pubKey = input.decodeBase64(input.sigPubkey);
+        return verify(body, input.signature, pubKey);
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=keyExchange.js.map

package/dist/keyExchange.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyExchange.js","sourceRoot":"","sources":["../src/keyExchange.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAE3C;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,0BAA0B,CAAC,MAK1C;IACC,OAAO;QACL,iBAAiB;QACjB,MAAM,CAAC,OAAO;QACd,MAAM,CAAC,SAAS;QAChB,MAAM,CAAC,YAAY;QACnB,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;KACzB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAiBD;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAA6B;IAE7B,MAAM,SAAS,GAAG,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,0BAA0B,CAAC;QACtC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,SAAS;QACT,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAC;IACH,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACrD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AAClC,CAAC;AAYD;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAC1C,KAA+B;IAE/B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,0BAA0B,CAAC;YACtC,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,SAAS,EAAE,KAAK,CAAC,SAAS;SAC3B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QACnD,OAAO,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/protocol.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEvD;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAO1E;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAChC,IAAI,EAAE,WAAW,EACjB,OAAO,EAAE,IAAI,GACZ;IACD,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,YAAY,EAAE,WAAW,CAAC;CAC3B,CAIA;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAclD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAEzD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAE3D;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,YAAY,EAAE,WAAW,GAAG,WAAW,CAErE;AAED;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAyBvD,CAAC"}
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEvD;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAO1E;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAChC,IAAI,EAAE,WAAW,EACjB,OAAO,EAAE,IAAI,GACZ;IACD,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,YAAY,EAAE,WAAW,CAAC;CAC3B,CAIA;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAclD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAEzD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAE3D;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,YAAY,EAAE,WAAW,GAAG,WAAW,CAErE;AAED;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CA0BvD,CAAC"}

package/dist/protocol.js

@@ -83,5 +83,6 @@ export const REQUEST_RESPONSE_MAP = {
     // Session registry (history)
     'session:update-history': 'session:update-history:response',
     'session:delete-history': 'session:delete-history:response',
+    'session:list-archived': 'session:list-archived:response',
 };
 //# sourceMappingURL=protocol.js.map

package/dist/protocol.js.map

@@ -1 +1 @@
-{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACpE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAI,IAAiB,EAAE,OAAU;IAC5D,OAAO;QACL,EAAE,EAAE,iBAAiB,EAAE;QACvB,IAAI;QACJ,OAAO;QACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAiB,EACjB,OAAa;IAKb,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,GAAG,IAAI,WAA0B,CAAC;IACvD,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;AACnC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAEhC,IACE,OAAO,MAAM,KAAK,QAAQ;QAC1B,MAAM,KAAK,IAAI;QACf,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ;QAC7B,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;QAC/B,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,EACpC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO,MAAiB,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAgB;IAChD,OAAO,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,YAAyB;IACtD,OAAO,YAAY,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAgB,CAAC;AAC9D,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA2B;IAC1D,YAAY,EAAE,qBAAqB;IACnC,UAAU,EAAE,mBAAmB;IAC/B,WAAW,EAAE,oBAAoB;IACjC,aAAa,EAAE,sBAAsB;IACrC,YAAY,EAAE,qBAAqB;IACnC,SAAS,EAAE,kBAAkB;IAC7B,cAAc,EAAE,uBAAuB;IACvC,cAAc,EAAE,uBAAuB;IACvC,aAAa,EAAE,sBAAsB;IACrC,aAAa,EAAE,sBAAsB;IACrC,mBAAmB,EAAE,4BAA4B;IACjD,oBAAoB,EAAE,6BAA6B;IACnD,qBAAqB,EAAE,8BAA8B;IACrD,SAAS,EAAE,eAAe;IAC1B,IAAI,EAAE,MAAM;IACZ,kBAAkB;IAClB,cAAc,EAAE,uBAAuB;IACvC,eAAe,EAAE,wBAAwB;IACzC,eAAe,EAAE,wBAAwB;IACzC,qBAAqB,EAAE,8BAA8B;IACrD,wBAAwB,EAAE,iCAAiC;IAC3D,6BAA6B;IAC7B,wBAAwB,EAAE,iCAAiC;IAC3D,wBAAwB,EAAE,iCAAiC;CAC5D,CAAC"}
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,UAAU,iBAAiB;IAC/B,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACpE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAI,IAAiB,EAAE,OAAU;IAC5D,OAAO;QACL,EAAE,EAAE,iBAAiB,EAAE;QACvB,IAAI;QACJ,OAAO;QACP,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAiB,EACjB,OAAa;IAKb,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC7C,MAAM,YAAY,GAAG,GAAG,IAAI,WAA0B,CAAC;IACvD,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;AACnC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAEhC,IACE,OAAO,MAAM,KAAK,QAAQ;QAC1B,MAAM,KAAK,IAAI;QACf,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ;QAC7B,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ;QAC/B,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,EACpC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IAED,OAAO,MAAiB,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;AACjC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAgB;IAChD,OAAO,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,YAAyB;IACtD,OAAO,YAAY,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAgB,CAAC;AAC9D,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA2B;IAC1D,YAAY,EAAE,qBAAqB;IACnC,UAAU,EAAE,mBAAmB;IAC/B,WAAW,EAAE,oBAAoB;IACjC,aAAa,EAAE,sBAAsB;IACrC,YAAY,EAAE,qBAAqB;IACnC,SAAS,EAAE,kBAAkB;IAC7B,cAAc,EAAE,uBAAuB;IACvC,cAAc,EAAE,uBAAuB;IACvC,aAAa,EAAE,sBAAsB;IACrC,aAAa,EAAE,sBAAsB;IACrC,mBAAmB,EAAE,4BAA4B;IACjD,oBAAoB,EAAE,6BAA6B;IACnD,qBAAqB,EAAE,8BAA8B;IACrD,SAAS,EAAE,eAAe;IAC1B,IAAI,EAAE,MAAM;IACZ,kBAAkB;IAClB,cAAc,EAAE,uBAAuB;IACvC,eAAe,EAAE,wBAAwB;IACzC,eAAe,EAAE,wBAAwB;IACzC,qBAAqB,EAAE,8BAA8B;IACrD,wBAAwB,EAAE,iCAAiC;IAC3D,6BAA6B;IAC7B,wBAAwB,EAAE,iCAAiC;IAC3D,wBAAwB,EAAE,iCAAiC;IAC3D,uBAAuB,EAAE,gCAAgC;CAC1D,CAAC"}

package/dist/syncEnvelope.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Signed envelope for writes to `/sync/{keyHash}` routes. The envelope binds
+ * the ciphertext + action to a specific mailbox (`keyHash`) via Ed25519, and
+ * carries a nonce + timestamp so the relay can drop replays.
+ *
+ * Canonical body signed by the client (UTF-8, `|` separator):
+ *   `${action}|${sigPubkey}|${ts}|${nonce}|${keyHash}|${ciphertextHash}`
+ *
+ * `ciphertextHash` is URL-safe-base64 of SHA-512 over the ciphertext bytes.
+ * For actions that carry no ciphertext (e.g. lock-release) it is the empty
+ * string.
+ */
+export type SyncEnvelopeAction = 'sync-write' | 'sync-tombstone' | 'sync-lock-release';
+export interface SignedSyncEnvelope {
+    v: 1;
+    action: SyncEnvelopeAction;
+    /** Absent for actions that don't carry a payload (lock-release). */
+    ciphertext?: string;
+    /** URL-safe base64 Ed25519 public key. */
+    sigPubkey: string;
+    ts: number;
+    nonce: string;
+    sig: string;
+}
+export declare function hashCiphertext(ciphertext: string): string;
+export declare function canonicalEnvelopeBody(params: {
+    action: SyncEnvelopeAction;
+    sigPubkey: string;
+    ts: number;
+    nonce: string;
+    keyHash: string;
+    ciphertextHash: string;
+}): string;
+export interface CreateEnvelopeInput {
+    action: SyncEnvelopeAction;
+    keyHash: string;
+    ciphertext?: string;
+    signKeyPair: {
+        publicKey: Uint8Array;
+        secretKey: Uint8Array;
+    };
+    now?: () => number;
+}
+export declare function createSignedSyncEnvelope(input: CreateEnvelopeInput): SignedSyncEnvelope;
+/**
+ * Type-guard for parsed JSON bodies on the relay side.
+ * Only checks shape; signature verification happens separately.
+ */
+export declare function isSignedSyncEnvelope(x: unknown): x is SignedSyncEnvelope;
+//# sourceMappingURL=syncEnvelope.d.ts.map

package/dist/syncEnvelope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"syncEnvelope.d.ts","sourceRoot":"","sources":["../src/syncEnvelope.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,kBAAkB,GAC1B,YAAY,GACZ,gBAAgB,GAChB,mBAAmB,CAAC;AAExB,MAAM,WAAW,kBAAkB;IACjC,CAAC,EAAE,CAAC,CAAC;IACL,MAAM,EAAE,kBAAkB,CAAC;IAC3B,oEAAoE;IACpE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0CAA0C;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;CACb;AAmBD,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAGzD;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE;IAC5C,MAAM,EAAE,kBAAkB,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;CACxB,GAAG,MAAM,CAST;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE;QAAE,SAAS,EAAE,UAAU,CAAC;QAAC,SAAS,EAAE,UAAU,CAAA;KAAE,CAAC;IAC9D,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,mBAAmB,GACzB,kBAAkB,CA0BpB;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,kBAAkB,CAYxE"}

package/dist/syncEnvelope.js

@@ -0,0 +1,71 @@
+import nacl from 'tweetnacl';
+function toUrlSafe(b64) {
+    return b64.replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/g, '');
+}
+function bytesToUrlSafe(bytes) {
+    let bin = '';
+    for (let i = 0; i < bytes.length; i++)
+        bin += String.fromCharCode(bytes[i]);
+    // btoa is available in browser + Node 16+ globals
+    return toUrlSafe(btoa(bin));
+}
+function randomNonce(size = 16) {
+    const buf = new Uint8Array(size);
+    (globalThis.crypto ?? require('crypto').webcrypto).getRandomValues(buf);
+    return bytesToUrlSafe(buf);
+}
+export function hashCiphertext(ciphertext) {
+    const bytes = new TextEncoder().encode(ciphertext);
+    return bytesToUrlSafe(nacl.hash(bytes));
+}
+export function canonicalEnvelopeBody(params) {
+    return [
+        params.action,
+        params.sigPubkey,
+        String(params.ts),
+        params.nonce,
+        params.keyHash,
+        params.ciphertextHash,
+    ].join('|');
+}
+export function createSignedSyncEnvelope(input) {
+    const ts = (input.now ?? Date.now)();
+    const nonce = randomNonce();
+    const sigPubkey = bytesToUrlSafe(input.signKeyPair.publicKey);
+    const ciphertextHash = input.ciphertext ? hashCiphertext(input.ciphertext) : '';
+    const canonical = canonicalEnvelopeBody({
+        action: input.action,
+        sigPubkey,
+        ts,
+        nonce,
+        keyHash: input.keyHash,
+        ciphertextHash,
+    });
+    const sigBytes = nacl.sign.detached(new TextEncoder().encode(canonical), input.signKeyPair.secretKey);
+    return {
+        v: 1,
+        action: input.action,
+        ciphertext: input.ciphertext,
+        sigPubkey,
+        ts,
+        nonce,
+        sig: bytesToUrlSafe(sigBytes),
+    };
+}
+/**
+ * Type-guard for parsed JSON bodies on the relay side.
+ * Only checks shape; signature verification happens separately.
+ */
+export function isSignedSyncEnvelope(x) {
+    if (!x || typeof x !== 'object')
+        return false;
+    const e = x;
+    return (e.v === 1 &&
+        typeof e.action === 'string' &&
+        (e.ciphertext === undefined || typeof e.ciphertext === 'string') &&
+        typeof e.sigPubkey === 'string' &&
+        typeof e.ts === 'number' &&
+        typeof e.nonce === 'string' &&
+        typeof e.sig === 'string');
+}
+//# sourceMappingURL=syncEnvelope.js.map

package/dist/syncEnvelope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"syncEnvelope.js","sourceRoot":"","sources":["../src/syncEnvelope.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AA+B7B,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACzE,CAAC;AAED,SAAS,cAAc,CAAC,KAAiB;IACvC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,GAAG,IAAI,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,kDAAkD;IAClD,OAAO,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,WAAW,CAAC,IAAI,GAAG,EAAE;IAC5B,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC,UAAU,CAAC,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;IACxE,OAAO,cAAc,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,UAAkB;IAC/C,MAAM,KAAK,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACnD,OAAO,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAOrC;IACC,OAAO;QACL,MAAM,CAAC,MAAM;QACb,MAAM,CAAC,SAAS;QAChB,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QACjB,MAAM,CAAC,KAAK;QACZ,MAAM,CAAC,OAAO;QACd,MAAM,CAAC,cAAc;KACtB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAUD,MAAM,UAAU,wBAAwB,CACtC,KAA0B;IAE1B,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACrC,MAAM,KAAK,GAAG,WAAW,EAAE,CAAC;IAC5B,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IAC9D,MAAM,cAAc,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,MAAM,SAAS,GAAG,qBAAqB,CAAC;QACtC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,SAAS;QACT,EAAE;QACF,KAAK;QACL,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,cAAc;KACf,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CACjC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EACnC,KAAK,CAAC,WAAW,CAAC,SAAS,CAC5B,CAAC;IACF,OAAO;QACL,CAAC,EAAE,CAAC;QACJ,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,SAAS;QACT,EAAE;QACF,KAAK;QACL,GAAG,EAAE,cAAc,CAAC,QAAQ,CAAC;KAC9B,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,CAAU;IAC7C,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9C,MAAM,CAAC,GAAG,CAA4B,CAAC;IACvC,OAAO,CACL,CAAC,CAAC,CAAC,KAAK,CAAC;QACT,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;QAC5B,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC;QAChE,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;QAC/B,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ;QACxB,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;QAC3B,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,CAC1B,CAAC;AACJ,CAAC"}

package/dist/syncEnvelope.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=syncEnvelope.test.d.ts.map

package/dist/syncEnvelope.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"syncEnvelope.test.d.ts","sourceRoot":"","sources":["../src/syncEnvelope.test.ts"],"names":[],"mappings":""}