@threadbase-sh/streamer 1.57.0 → 1.58.0

package/dist/index.cjs

@@ -4188,7 +4188,12 @@ function toDeviceView(row) {
     capabilities: parseCapabilities(row.capabilities),
     createdAt: row.created_at,
     lastSeenAt: row.last_seen_at,
-    revokedAt: row.revoked_at
+    revokedAt: row.revoked_at,
+    // Reported from `e2ee_required` rather than from the key's presence. The
+    // two agree today, but they answer different questions — the key is what a
+    // handshake is checked against, `e2ee_required` is whether plaintext is
+    // refused — and it is the second one a user is asking about.
+    e2ee: row.e2ee_required === 1
   };
 }
 var DevicesRepository = class {
@@ -4200,14 +4205,30 @@ var DevicesRepository = class {
   touchStmt;
   deleteStmt;
   deleteRevokedStmt;
+  byE2eeStaticPubStmt;
+  repairStmt;
   constructor(db) {
     this.insertStmt = db.prepare(`
       INSERT INTO devices (
-        device_id, public_key, token_hash, name, capabilities, created_at
+        device_id, public_key, token_hash, name, capabilities, created_at,
+        e2ee_static_pub, e2ee_required, e2ee_version
       ) VALUES (
-        @device_id, @public_key, @token_hash, @name, @capabilities, @created_at
+        @device_id, @public_key, @token_hash, @name, @capabilities, @created_at,
+        @e2ee_static_pub, @e2ee_required, @e2ee_version
       )
     `);
+    this.byE2eeStaticPubStmt = db.prepare("SELECT * FROM devices WHERE e2ee_static_pub = ?");
+    this.repairStmt = db.prepare(`
+      UPDATE devices SET
+        public_key = @public_key,
+        token_hash = @token_hash,
+        name = @name,
+        capabilities = @capabilities,
+        e2ee_required = 1,
+        e2ee_version = @e2ee_version,
+        revoked_at = NULL
+      WHERE device_id = @device_id
+    `);
     this.byTokenHashStmt = db.prepare("SELECT * FROM devices WHERE token_hash = ?");
     this.byIdStmt = db.prepare("SELECT * FROM devices WHERE device_id = ?");
     this.listStmt = db.prepare("SELECT * FROM devices ORDER BY created_at DESC");
@@ -4223,19 +4244,42 @@ var DevicesRepository = class {
    * moment it exists outside the client.
    */
   register(args) {
-    const deviceId = (0, import_crypto4.randomUUID)();
     const deviceToken = generateDeviceToken();
     const capabilities = capabilitiesForPreset(args.preset ?? "full");
+    const now = args.now ?? Date.now();
+    const existing = args.e2eeStaticPub ? this.byE2eeStaticPubStmt.get(args.e2eeStaticPub) : void 0;
+    if (existing) {
+      this.repairStmt.run({
+        device_id: existing.device_id,
+        public_key: args.publicKey,
+        token_hash: hashDeviceToken(deviceToken),
+        name: args.name ?? null,
+        capabilities: JSON.stringify(capabilities),
+        e2ee_version: args.e2eeVersion ?? null
+      });
+      return { deviceId: existing.device_id, deviceToken, capabilities };
+    }
+    const deviceId = (0, import_crypto4.randomUUID)();
     this.insertStmt.run({
       device_id: deviceId,
       public_key: args.publicKey,
       token_hash: hashDeviceToken(deviceToken),
       name: args.name ?? null,
       capabilities: JSON.stringify(capabilities),
-      created_at: args.now ?? Date.now()
+      created_at: now,
+      e2ee_static_pub: args.e2eeStaticPub ?? null,
+      // The downgrade lock, set in the same write that records the key. Once
+      // set, nothing a client can send clears it (design.md §6.3) — which is
+      // what makes it a lock rather than a preference.
+      e2ee_required: args.e2eeStaticPub ? 1 : 0,
+      e2ee_version: args.e2eeVersion ?? null
     });
     return { deviceId, deviceToken, capabilities };
   }
+  /** The device that owns a Noise static key, or null. */
+  getByE2eeStaticPub(staticPub) {
+    return this.byE2eeStaticPubStmt.get(staticPub) ?? null;
+  }
   /**
    * Resolve a presented token to a device, or null.
    *