@threadbase-sh/streamer 1.56.0 → 1.58.0

package/dist/cli.cjs

@@ -97011,7 +97011,12 @@ function toDeviceView(row) {
     capabilities: parseCapabilities(row.capabilities),
     createdAt: row.created_at,
     lastSeenAt: row.last_seen_at,
-    revokedAt: row.revoked_at
+    revokedAt: row.revoked_at,
+    // Reported from `e2ee_required` rather than from the key's presence. The
+    // two agree today, but they answer different questions — the key is what a
+    // handshake is checked against, `e2ee_required` is whether plaintext is
+    // refused — and it is the second one a user is asking about.
+    e2ee: row.e2ee_required === 1
   };
 }
 var import_crypto3, DevicesRepository;
@@ -97029,13 +97034,29 @@ var init_devices_repository = __esm({
       touchStmt;
       deleteStmt;
       deleteRevokedStmt;
+      byE2eeStaticPubStmt;
+      repairStmt;
       constructor(db) {
         this.insertStmt = db.prepare(`
       INSERT INTO devices (
-        device_id, public_key, token_hash, name, capabilities, created_at
+        device_id, public_key, token_hash, name, capabilities, created_at,
+        e2ee_static_pub, e2ee_required, e2ee_version
       ) VALUES (
-        @device_id, @public_key, @token_hash, @name, @capabilities, @created_at
+        @device_id, @public_key, @token_hash, @name, @capabilities, @created_at,
+        @e2ee_static_pub, @e2ee_required, @e2ee_version
       )
+    `);
+        this.byE2eeStaticPubStmt = db.prepare("SELECT * FROM devices WHERE e2ee_static_pub = ?");
+        this.repairStmt = db.prepare(`
+      UPDATE devices SET
+        public_key = @public_key,
+        token_hash = @token_hash,
+        name = @name,
+        capabilities = @capabilities,
+        e2ee_required = 1,
+        e2ee_version = @e2ee_version,
+        revoked_at = NULL
+      WHERE device_id = @device_id
     `);
         this.byTokenHashStmt = db.prepare("SELECT * FROM devices WHERE token_hash = ?");
         this.byIdStmt = db.prepare("SELECT * FROM devices WHERE device_id = ?");
@@ -97052,19 +97073,42 @@ var init_devices_repository = __esm({
        * moment it exists outside the client.
        */
       register(args) {
-        const deviceId = (0, import_crypto3.randomUUID)();
         const deviceToken = generateDeviceToken();
         const capabilities = capabilitiesForPreset(args.preset ?? "full");
+        const now = args.now ?? Date.now();
+        const existing = args.e2eeStaticPub ? this.byE2eeStaticPubStmt.get(args.e2eeStaticPub) : void 0;
+        if (existing) {
+          this.repairStmt.run({
+            device_id: existing.device_id,
+            public_key: args.publicKey,
+            token_hash: hashDeviceToken(deviceToken),
+            name: args.name ?? null,
+            capabilities: JSON.stringify(capabilities),
+            e2ee_version: args.e2eeVersion ?? null
+          });
+          return { deviceId: existing.device_id, deviceToken, capabilities };
+        }
+        const deviceId = (0, import_crypto3.randomUUID)();
         this.insertStmt.run({
           device_id: deviceId,
           public_key: args.publicKey,
           token_hash: hashDeviceToken(deviceToken),
           name: args.name ?? null,
           capabilities: JSON.stringify(capabilities),
-          created_at: args.now ?? Date.now()
+          created_at: now,
+          e2ee_static_pub: args.e2eeStaticPub ?? null,
+          // The downgrade lock, set in the same write that records the key. Once
+          // set, nothing a client can send clears it (design.md §6.3) — which is
+          // what makes it a lock rather than a preference.
+          e2ee_required: args.e2eeStaticPub ? 1 : 0,
+          e2ee_version: args.e2eeVersion ?? null
         });
         return { deviceId, deviceToken, capabilities };
       }
+      /** The device that owns a Noise static key, or null. */
+      getByE2eeStaticPub(staticPub) {
+        return this.byE2eeStaticPubStmt.get(staticPub) ?? null;
+      }
       /**
        * Resolve a presented token to a device, or null.
        *
@@ -145659,6 +145703,7 @@ function readBody2(req) {
 // src/api/handlers/conversations.handlers.ts
 var SEARCH_OVERFETCH = 4;
 var SEARCH_MAX_SCAN = 1e3;
+var MAX_BYTES_CEILING = 32 * 1024 * 1024;
 var ConversationHandlers = class {
   constructor(deps) {
     this.deps = deps;
@@ -146064,7 +146109,7 @@ var ConversationHandlers = class {
     const total = filtered.length;
     const hasAnchor = url2.searchParams.has("anchor_index");
     const hasAfter = url2.searchParams.has("after_index");
-    const usePaging = url2.searchParams.has("msg_limit") || url2.searchParams.has("before_index") || hasAnchor || hasAfter;
+    const usePaging = url2.searchParams.has("msg_limit") || url2.searchParams.has("before_index") || url2.searchParams.has("max_bytes") || hasAnchor || hasAfter;
     let slice = filtered;
     let fromIdx = 0;
     let messagePagination;
@@ -146186,6 +146231,28 @@ var ConversationHandlers = class {
         content
       };
     });
+    const requestedMaxBytes = intParam(url2, "max_bytes", 0);
+    if (requestedMaxBytes > 0 && messagesPayload.length > 0) {
+      const budget = Math.min(requestedMaxBytes, MAX_BYTES_CEILING);
+      let used = 0;
+      let firstKept = messagesPayload.length - 1;
+      for (let i = messagesPayload.length - 1; i >= 0; i--) {
+        const size = Buffer.byteLength(JSON.stringify(messagesPayload[i]));
+        if (i < messagesPayload.length - 1 && used + size > budget) break;
+        used += size;
+        firstKept = i;
+      }
+      if (firstKept > 0) {
+        messagesPayload.splice(0, firstKept);
+        if (messagePagination) {
+          const newFrom = fromIdx + firstKept;
+          messagePagination.from_index = newFrom;
+          messagePagination.has_more_older = newFrom > 0;
+          messagePagination.next_before_index = newFrom > 0 ? newFrom : null;
+        }
+      }
+      if (messagePagination) messagePagination.served_bytes = used;
+    }
     const conv = conversation;
     const cachedConvMeta = this.cache?.getMetaById(id);
     const convProvider = coerceProviderForRunner(conv.provider ?? cachedConvMeta?.provider);