@towns-protocol/sdk 0.0.191

package/dist/sign.js

@@ -0,0 +1,268 @@
+import { bigIntToBytes, bin_equal, bin_fromHexString, bin_toHexString, check, } from '@towns-protocol/dlog';
+import { isDefined, assert, hasElements } from './check';
+import { Err, StreamEventSchema, EnvelopeSchema, StreamAndCookieSchema, SyncCookieSchema, EventRefSchema, } from '@towns-protocol/proto';
+import { assertBytes } from 'ethereum-cryptography/utils';
+import { recoverPublicKey, signSync, verify } from 'ethereum-cryptography/secp256k1';
+import { genIdBlob, streamIdAsBytes, streamIdAsString, userIdFromAddress } from './id';
+import { checkDelegateSig } from './signerContext';
+import { keccak256 } from 'ethereum-cryptography/keccak';
+import { createHash } from 'crypto';
+import { create, fromBinary, toBinary } from '@bufbuild/protobuf';
+import { eventIdsFromSnapshot } from './persistenceStore';
+export const _impl_makeEvent_impl_ = async (context, payload, prevMiniblockHash, tags) => {
+    const streamEvent = create(StreamEventSchema, {
+        creatorAddress: context.creatorAddress,
+        salt: genIdBlob(),
+        prevMiniblockHash,
+        payload,
+        createdAtEpochMs: BigInt(Date.now()),
+        tags,
+    });
+    if (context.delegateSig !== undefined) {
+        streamEvent.delegateSig = context.delegateSig;
+        streamEvent.delegateExpiryEpochMs = context.delegateExpiryEpochMs ?? 0n;
+    }
+    const event = toBinary(StreamEventSchema, streamEvent);
+    const hash = riverHash(event);
+    const signature = await riverSign(hash, context.signerPrivateKey());
+    return create(EnvelopeSchema, { hash, signature, event });
+};
+export const makeEvent = async (context, payload, prevMiniblockHash, tags) => {
+    // const pl: Payload = payload instanceof Payload ? payload : new Payload(payload)
+    const pl = payload; // todo check this
+    check(isDefined(pl), "Payload can't be undefined", Err.BAD_PAYLOAD);
+    check(isDefined(pl.case), "Payload can't be empty", Err.BAD_PAYLOAD);
+    check(isDefined(pl.value), "Payload value can't be empty", Err.BAD_PAYLOAD);
+    check(isDefined(pl.value.content), "Payload content can't be empty", Err.BAD_PAYLOAD);
+    check(isDefined(pl.value.content.case), "Payload content case can't be empty", Err.BAD_PAYLOAD);
+    if (prevMiniblockHash) {
+        check(prevMiniblockHash.length === 32, `prevMiniblockHash should be 32 bytes, got ${prevMiniblockHash.length}`, Err.BAD_HASH_FORMAT);
+    }
+    return _impl_makeEvent_impl_(context, pl, prevMiniblockHash, tags);
+};
+export const makeEvents = async (context, payloads, prevMiniblockHash) => {
+    const events = [];
+    for (const payload of payloads) {
+        const event = await makeEvent(context, payload, prevMiniblockHash);
+        events.push(event);
+    }
+    return events;
+};
+export const unpackStream = async (stream, opts) => {
+    assert(stream !== undefined, 'bad stream');
+    const streamAndCookie = await unpackStreamAndCookie(stream, opts);
+    assert(stream.miniblocks.length > 0, `bad stream: no blocks ${streamIdAsString(streamAndCookie.nextSyncCookie.streamId)}`);
+    const snapshot = streamAndCookie.miniblocks[0].header.snapshot;
+    const prevSnapshotMiniblockNum = streamAndCookie.miniblocks[0].header.prevSnapshotMiniblockNum;
+    assert(snapshot !== undefined, `bad block: snapshot is undefined ${streamIdAsString(streamAndCookie.nextSyncCookie.streamId)}`);
+    const eventIds = [
+        ...streamAndCookie.miniblocks.flatMap((mb) => mb.events.map((e) => e.hashStr), streamAndCookie.events.map((e) => e.hashStr)),
+        ...eventIdsFromSnapshot(snapshot),
+    ];
+    return {
+        streamAndCookie,
+        snapshot,
+        prevSnapshotMiniblockNum,
+        eventIds,
+    };
+};
+export const unpackStreamEx = async (miniblocks, opts) => {
+    const streamAndCookie = create(StreamAndCookieSchema, {});
+    streamAndCookie.events = [];
+    streamAndCookie.miniblocks = miniblocks;
+    // We don't need to set a valid nextSyncCookie here, as we are currently using getStreamEx only
+    // for fetching media streams, and the result does not return a nextSyncCookie. However, it does
+    // need to be non-null to avoid runtime errors when unpacking the stream into a StreamStateView,
+    // which parses content by type.
+    streamAndCookie.nextSyncCookie = create(SyncCookieSchema);
+    return unpackStream(streamAndCookie, opts);
+};
+export const unpackStreamAndCookie = async (streamAndCookie, opts) => {
+    assert(streamAndCookie.nextSyncCookie !== undefined, 'bad stream: no cookie');
+    const miniblocks = await Promise.all(streamAndCookie.miniblocks.map(async (mb) => await unpackMiniblock(mb, opts)));
+    return {
+        events: await unpackEnvelopes(streamAndCookie.events, opts),
+        nextSyncCookie: streamAndCookie.nextSyncCookie,
+        miniblocks: miniblocks,
+    };
+};
+// returns all events + the header event and pointer to header content
+export const unpackMiniblock = async (miniblock, opts) => {
+    check(isDefined(miniblock.header), 'Miniblock header is not set');
+    const header = await unpackEnvelope(miniblock.header, opts);
+    check(header.event.payload.case === 'miniblockHeader', `bad miniblock header: wrong case received: ${header.event.payload.case}`);
+    const events = await unpackEnvelopes(miniblock.events, opts);
+    return {
+        hash: miniblock.header.hash,
+        header: header.event.payload.value,
+        events: [...events, header],
+    };
+};
+export const unpackEnvelope = async (envelope, opts) => {
+    check(hasElements(envelope.event), 'Event base is not set', Err.BAD_EVENT);
+    check(hasElements(envelope.hash), 'Event hash is not set', Err.BAD_EVENT);
+    check(hasElements(envelope.signature), 'Event signature is not set', Err.BAD_EVENT);
+    const event = fromBinary(StreamEventSchema, envelope.event);
+    let hash = envelope.hash;
+    const doCheckEventHash = opts?.disableHashValidation !== true;
+    if (doCheckEventHash) {
+        hash = riverHash(envelope.event);
+        check(bin_equal(hash, envelope.hash), 'Event id is not valid', Err.BAD_EVENT_ID);
+    }
+    const doCheckEventSignature = opts?.disableSignatureValidation !== true;
+    if (doCheckEventSignature) {
+        checkEventSignature(event, hash, envelope.signature);
+    }
+    return makeParsedEvent(event, envelope.hash, envelope.signature);
+};
+export function checkEventSignature(event, hash, signature) {
+    const recoveredPubKey = riverRecoverPubKey(hash, signature);
+    if (!hasElements(event.delegateSig)) {
+        const address = publicKeyToAddress(recoveredPubKey);
+        check(bin_equal(address, event.creatorAddress), 'Event signature is not valid', Err.BAD_EVENT_SIGNATURE);
+    }
+    else {
+        checkDelegateSig({
+            delegatePubKey: recoveredPubKey,
+            creatorAddress: event.creatorAddress,
+            delegateSig: event.delegateSig,
+            expiryEpochMs: event.delegateExpiryEpochMs,
+        });
+    }
+}
+export function makeParsedEvent(event, hash, signature) {
+    hash = hash ?? riverHash(toBinary(StreamEventSchema, event));
+    return {
+        event,
+        hash,
+        hashStr: bin_toHexString(hash),
+        signature,
+        creatorUserId: userIdFromAddress(event.creatorAddress),
+    };
+}
+export const unpackEnvelopes = async (event, opts) => {
+    const ret = [];
+    //let prevEventHash: Uint8Array | undefined = undefined
+    for (const e of event) {
+        // TODO: this handling of prevEventHash is not correct,
+        // hashes should be checked against all preceding events in the stream.
+        ret.push(await unpackEnvelope(e, opts));
+        //prevEventHash = e.hash!
+    }
+    return ret;
+};
+// First unpacks miniblocks, including header events, then unpacks events from the minipool
+export const unpackStreamEnvelopes = async (stream, opts) => {
+    const ret = [];
+    for (const mb of stream.miniblocks) {
+        ret.push(...(await unpackEnvelopes(mb.events, opts)));
+        ret.push(await unpackEnvelope(mb.header, opts));
+    }
+    ret.push(...(await unpackEnvelopes(stream.events, opts)));
+    return ret;
+};
+export const makeEventRef = (streamId, event) => {
+    return create(EventRefSchema, {
+        streamId: streamIdAsBytes(streamId),
+        hash: event.hash,
+        signature: event.signature,
+    });
+};
+// Create hash header as Uint8Array from string 'CSBLANCA'
+const HASH_HEADER = new Uint8Array([67, 83, 66, 76, 65, 78, 67, 65]);
+// Create hash separator as Uint8Array from string 'ABCDEFG>'
+const HASH_SEPARATOR = new Uint8Array([65, 66, 67, 68, 69, 70, 71, 62]);
+// Create hash footer as Uint8Array from string '<GFEDCBA'
+const HASH_FOOTER = new Uint8Array([60, 71, 70, 69, 68, 67, 66, 65]);
+// Header for delegate signature 'RIVERSIG'
+const RIVER_SIG_HEADER = new Uint8Array([82, 73, 86, 69, 82, 83, 73, 71]);
+function numberToUint8Array64LE(num) {
+    const result = new Uint8Array(8);
+    for (let i = 0; num != 0; i++, num = num >>> 8) {
+        result[i] = num & 0xff;
+    }
+    return result;
+}
+function bigintToUint8Array64(num, endianMode) {
+    const buffer = new ArrayBuffer(8);
+    const view = new DataView(buffer);
+    view.setBigInt64(0, num, endianMode === 'littleEndian'); // true for little endian
+    return new Uint8Array(buffer);
+}
+function pushByteToUint8Array(arr, byte) {
+    const ret = new Uint8Array(arr.length + 1);
+    ret.set(arr);
+    ret[arr.length] = byte;
+    return ret;
+}
+function checkSignature(signature) {
+    assertBytes(signature, 65);
+}
+function checkHash(hash) {
+    assertBytes(hash, 32);
+}
+export function riverHash(data) {
+    assertBytes(data);
+    const hasher = keccak256.create();
+    hasher.update(HASH_HEADER);
+    hasher.update(numberToUint8Array64LE(data.length));
+    hasher.update(HASH_SEPARATOR);
+    hasher.update(data);
+    hasher.update(HASH_FOOTER);
+    return hasher.digest();
+}
+export function riverDelegateHashSrc(devicePublicKey, expiryEpochMs) {
+    assertBytes(devicePublicKey);
+    check(expiryEpochMs >= 0, 'Expiry should be positive');
+    check(devicePublicKey.length === 64 || devicePublicKey.length === 65, 'Bad public key');
+    const expiryBytes = bigintToUint8Array64(expiryEpochMs, 'littleEndian');
+    const retVal = new Uint8Array(RIVER_SIG_HEADER.length + devicePublicKey.length + expiryBytes.length);
+    retVal.set(RIVER_SIG_HEADER);
+    retVal.set(devicePublicKey, RIVER_SIG_HEADER.length);
+    retVal.set(expiryBytes, RIVER_SIG_HEADER.length + devicePublicKey.length);
+    return retVal;
+}
+export function notificationServiceHash(userId, expiration, // unix seconds
+challenge) {
+    const PREFIX = 'NS_AUTH:';
+    const prefixBytes = new TextEncoder().encode(PREFIX);
+    const expirationBytes = bigIntToBytes(expiration);
+    // aellis - i don't understand why we need to slice here, the go and ios code both truncate the leading 0's
+    check(userId.length === 20, 'User ID should be 20 bytes');
+    check(challenge.length === 16, 'Challenge should be 16 bytes');
+    return createHash('sha256')
+        .update(prefixBytes)
+        .update(userId)
+        .update(expirationBytes)
+        .update(challenge)
+        .digest();
+}
+export async function riverSign(hash, privateKey) {
+    checkHash(hash);
+    // TODO(HNT-1380): why async sign doesn't work in node? Use async sign in the browser, sync sign in node?
+    const [sig, recovery] = signSync(hash, privateKey, { recovered: true, der: false });
+    return pushByteToUint8Array(sig, recovery);
+}
+export function riverVerifySignature(hash, signature, publicKey) {
+    checkHash(hash);
+    checkSignature(signature);
+    return verify(signature.slice(0, 64), hash, publicKey);
+}
+export function riverRecoverPubKey(hash, signature) {
+    checkHash(hash);
+    checkSignature(signature);
+    return recoverPublicKey(hash, signature.slice(0, 64), signature[64]);
+}
+export function publicKeyToAddress(publicKey) {
+    assertBytes(publicKey, 64, 65);
+    if (publicKey.length === 65) {
+        publicKey = publicKey.slice(1);
+    }
+    return keccak256(publicKey).slice(-20);
+}
+export function publicKeyToUint8Array(publicKey) {
+    // Uncompressed public key in string form should start with '0x04'.
+    check(typeof publicKey === 'string' && publicKey.startsWith('0x04') && publicKey.length === 132, 'Bad public key', Err.BAD_PUBLIC_KEY);
+    return bin_fromHexString(publicKey);
+}
+//# sourceMappingURL=sign.js.map

package/dist/sign.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign.js","sourceRoot":"","sources":["../src/sign.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,aAAa,EACb,SAAS,EACT,iBAAiB,EACjB,eAAe,EACf,KAAK,GACR,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,SAAS,CAAA;AACxD,OAAO,EAIH,GAAG,EAKH,iBAAiB,EACjB,cAAc,EACd,qBAAqB,EACrB,gBAAgB,EAChB,cAAc,GACjB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAA;AACzD,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,iCAAiC,CAAA;AACpF,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,MAAM,CAAA;AAEtF,OAAO,EAAiB,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AACjE,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,CAAA;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AACnC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AACjE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AAezD,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EACtC,OAAsB,EACtB,OAA6C,EAC7C,iBAA8B,EAC9B,IAAyB,EACR,EAAE;IACnB,MAAM,WAAW,GAAG,MAAM,CAAC,iBAAiB,EAAE;QAC1C,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,IAAI,EAAE,SAAS,EAAE;QACjB,iBAAiB;QACjB,OAAO;QACP,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QACpC,IAAI;KACP,CAAC,CAAA;IACF,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACpC,WAAW,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAA;QAC7C,WAAW,CAAC,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,IAAI,EAAE,CAAA;IAC3E,CAAC;IAED,MAAM,KAAK,GAAG,QAAQ,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAA;IACtD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAA;IAC7B,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAA;IAEnE,OAAO,MAAM,CAAC,cAAc,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAA;AAC7D,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,SAAS,GAAG,KAAK,EAC1B,OAAsB,EACtB,OAA6C,EAC7C,iBAA8B,EAC9B,IAAyB,EACR,EAAE;IACnB,kFAAkF;IAClF,MAAM,EAAE,GAAG,OAAO,CAAA,CAAC,kBAAkB;IACrC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,4BAA4B,EAAE,GAAG,CAAC,WAAW,CAAC,CAAA;IACnE,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,wBAAwB,EAAE,GAAG,CAAC,WAAW,CAAC,CAAA;IACpE,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,8BAA8B,EAAE,GAAG,CAAC,WAAW,CAAC,CAAA;IAC3E,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,gCAAgC,EAAE,GAAG,CAAC,WAAW,CAAC,CAAA;IACrF,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,qCAAqC,EAAE,GAAG,CAAC,WAAW,CAAC,CAAA;IAE/F,IAAI,iBAAiB,EAAE,CAAC;QACpB,KAAK,CACD,iBAAiB,CAAC,MAAM,KAAK,EAAE,EAC/B,6CAA6C,iBAAiB,CAAC,MAAM,EAAE,EACvE,GAAG,CAAC,eAAe,CACtB,CAAA;IACL,CAAC;IAED,OAAO,qBAAqB,CAAC,OAAO,EAAE,EAAE,EAAE,iBAAiB,EAAE,IAAI,CAAC,CAAA;AACtE,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAC3B,OAAsB,EACtB,QAAgD,EAChD,iBAA8B,EACX,EAAE;IACrB,MAAM,MAAM,GAAe,EAAE,CAAA;IAC7B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAA;QAClE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IACtB,CAAC;IACD,OAAO,MAAM,CAAA;AACjB,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAC7B,MAAmC,EACnC,IAAoC,EACP,EAAE;IAC/B,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,YAAY,CAAC,CAAA;IAC1C,MAAM,eAAe,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IACjE,MAAM,CACF,MAAM,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAC5B,yBAAyB,gBAAgB,CAAC,eAAe,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,CACvF,CAAA;IAED,MAAM,QAAQ,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAA;IAC9D,MAAM,wBAAwB,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,wBAAwB,CAAA;IAC9F,MAAM,CACF,QAAQ,KAAK,SAAS,EACtB,oCAAoC,gBAAgB,CAChD,eAAe,CAAC,cAAc,CAAC,QAAQ,CAC1C,EAAE,CACN,CAAA;IACD,MAAM,QAAQ,GAAG;QACb,GAAG,eAAe,CAAC,UAAU,CAAC,OAAO,CACjC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EACvC,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAC/C;QACD,GAAG,oBAAoB,CAAC,QAAQ,CAAC;KACpC,CAAA;IAED,OAAO;QACH,eAAe;QACf,QAAQ;QACR,wBAAwB;QACxB,QAAQ;KACX,CAAA;AACL,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,EAC/B,UAAuB,EACvB,IAAoC,EACP,EAAE;IAC/B,MAAM,eAAe,GAAoB,MAAM,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAA;IAC1E,eAAe,CAAC,MAAM,GAAG,EAAE,CAAA;IAC3B,eAAe,CAAC,UAAU,GAAG,UAAU,CAAA;IACvC,+FAA+F;IAC/F,gGAAgG;IAChG,gGAAgG;IAChG,gCAAgC;IAChC,eAAe,CAAC,cAAc,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAAA;IACzD,OAAO,YAAY,CAAC,eAAe,EAAE,IAAI,CAAC,CAAA;AAC9C,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EACtC,eAAgC,EAChC,IAAoC,EACN,EAAE;IAChC,MAAM,CAAC,eAAe,CAAC,cAAc,KAAK,SAAS,EAAE,uBAAuB,CAAC,CAAA;IAC7E,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,eAAe,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,MAAM,eAAe,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAChF,CAAA;IACD,OAAO;QACH,MAAM,EAAE,MAAM,eAAe,CAAC,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC;QAC3D,cAAc,EAAE,eAAe,CAAC,cAAc;QAC9C,UAAU,EAAE,UAAU;KACzB,CAAA;AACL,CAAC,CAAA;AAED,sEAAsE;AACtE,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAChC,SAAoB,EACpB,IAAoC,EACZ,EAAE;IAC1B,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,6BAA6B,CAAC,CAAA;IACjE,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC3D,KAAK,CACD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,iBAAiB,EAC/C,8CAA8C,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAC5E,CAAA;IACD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IAC5D,OAAO;QACH,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,IAAI;QAC3B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK;QAClC,MAAM,EAAE,CAAC,GAAG,MAAM,EAAE,MAAM,CAAC;KAC9B,CAAA;AACL,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,EAC/B,QAAkB,EAClB,IAAoC,EAChB,EAAE;IACtB,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,uBAAuB,EAAE,GAAG,CAAC,SAAS,CAAC,CAAA;IAC1E,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,uBAAuB,EAAE,GAAG,CAAC,SAAS,CAAC,CAAA;IACzE,KAAK,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,4BAA4B,EAAE,GAAG,CAAC,SAAS,CAAC,CAAA;IAEnF,MAAM,KAAK,GAAG,UAAU,CAAC,iBAAiB,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;IAC3D,IAAI,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAA;IAExB,MAAM,gBAAgB,GAAG,IAAI,EAAE,qBAAqB,KAAK,IAAI,CAAA;IAC7D,IAAI,gBAAgB,EAAE,CAAC;QACnB,IAAI,GAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QAChC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,uBAAuB,EAAE,GAAG,CAAC,YAAY,CAAC,CAAA;IACpF,CAAC;IAED,MAAM,qBAAqB,GAAG,IAAI,EAAE,0BAA0B,KAAK,IAAI,CAAA;IACvE,IAAI,qBAAqB,EAAE,CAAC;QACxB,mBAAmB,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAA;IACxD,CAAC;IAED,OAAO,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAA;AACpE,CAAC,CAAA;AAED,MAAM,UAAU,mBAAmB,CAC/B,KAIC,EACD,IAAgB,EAChB,SAAqB;IAErB,MAAM,eAAe,GAAG,kBAAkB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAA;IAE3D,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,kBAAkB,CAAC,eAAe,CAAC,CAAA;QACnD,KAAK,CACD,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,cAAc,CAAC,EACxC,8BAA8B,EAC9B,GAAG,CAAC,mBAAmB,CAC1B,CAAA;IACL,CAAC;SAAM,CAAC;QACJ,gBAAgB,CAAC;YACb,cAAc,EAAE,eAAe;YAC/B,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,aAAa,EAAE,KAAK,CAAC,qBAAqB;SAC7C,CAAC,CAAA;IACN,CAAC;AACL,CAAC;AAED,MAAM,UAAU,eAAe,CAC3B,KAAkB,EAClB,IAA4B,EAC5B,SAAiC;IAEjC,IAAI,GAAG,IAAI,IAAI,SAAS,CAAC,QAAQ,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC,CAAA;IAC5D,OAAO;QACH,KAAK;QACL,IAAI;QACJ,OAAO,EAAE,eAAe,CAAC,IAAI,CAAC;QAC9B,SAAS;QACT,aAAa,EAAE,iBAAiB,CAAC,KAAK,CAAC,cAAc,CAAC;KACnC,CAAA;AAC3B,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,EAChC,KAAiB,EACjB,IAAoC,EACd,EAAE;IACxB,MAAM,GAAG,GAAkB,EAAE,CAAA;IAC7B,uDAAuD;IACvD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACpB,uDAAuD;QACvD,uEAAuE;QACvE,GAAG,CAAC,IAAI,CAAC,MAAM,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAA;QACvC,yBAAyB;IAC7B,CAAC;IACD,OAAO,GAAG,CAAA;AACd,CAAC,CAAA;AAED,2FAA2F;AAC3F,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EACtC,MAAuB,EACvB,IAAoC,EACd,EAAE;IACxB,MAAM,GAAG,GAAkB,EAAE,CAAA;IAE7B,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACjC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,eAAe,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;QACrD,GAAG,CAAC,IAAI,CAAC,MAAM,cAAc,CAAC,EAAE,CAAC,MAAO,EAAE,IAAI,CAAC,CAAC,CAAA;IACpD,CAAC;IAED,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,eAAe,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;IACzD,OAAO,GAAG,CAAA;AACd,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,QAA6B,EAAE,KAAe,EAAY,EAAE;IACrF,OAAO,MAAM,CAAC,cAAc,EAAE;QAC1B,QAAQ,EAAE,eAAe,CAAC,QAAQ,CAAC;QACnC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,SAAS,EAAE,KAAK,CAAC,SAAS;KAC7B,CAAC,CAAA;AACN,CAAC,CAAA;AAED,0DAA0D;AAC1D,MAAM,WAAW,GAAG,IAAI,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;AACpE,6DAA6D;AAC7D,MAAM,cAAc,GAAG,IAAI,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;AACvE,0DAA0D;AAC1D,MAAM,WAAW,GAAG,IAAI,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;AACpE,2CAA2C;AAC3C,MAAM,gBAAgB,GAAG,IAAI,UAAU,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;AAEzE,SAAS,sBAAsB,CAAC,GAAW;IACvC,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAA;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,GAAG,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC;QAC7C,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,IAAI,CAAA;IAC1B,CAAC;IACD,OAAO,MAAM,CAAA;AACjB,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAW,EAAE,UAAwC;IAC/E,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAA;IACjC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAA;IACjC,IAAI,CAAC,WAAW,CAAC,CAAC,EAAE,GAAG,EAAE,UAAU,KAAK,cAAc,CAAC,CAAA,CAAC,yBAAyB;IACjF,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,CAAA;AACjC,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAe,EAAE,IAAY;IACvD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC1C,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IACZ,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,CAAA;IACtB,OAAO,GAAG,CAAA;AACd,CAAC;AAED,SAAS,cAAc,CAAC,SAAqB;IACzC,WAAW,CAAC,SAAS,EAAE,EAAE,CAAC,CAAA;AAC9B,CAAC;AAED,SAAS,SAAS,CAAC,IAAgB;IAC/B,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;AACzB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAgB;IACtC,WAAW,CAAC,IAAI,CAAC,CAAA;IACjB,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,CAAA;IACjC,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;IAC1B,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAA;IAClD,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA;IAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACnB,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAA;IAC1B,OAAO,MAAM,CAAC,MAAM,EAAE,CAAA;AAC1B,CAAC;AAED,MAAM,UAAU,oBAAoB,CAChC,eAA2B,EAC3B,aAAqB;IAErB,WAAW,CAAC,eAAe,CAAC,CAAA;IAC5B,KAAK,CAAC,aAAa,IAAI,CAAC,EAAE,2BAA2B,CAAC,CAAA;IACtD,KAAK,CAAC,eAAe,CAAC,MAAM,KAAK,EAAE,IAAI,eAAe,CAAC,MAAM,KAAK,EAAE,EAAE,gBAAgB,CAAC,CAAA;IACvF,MAAM,WAAW,GAAG,oBAAoB,CAAC,aAAa,EAAE,cAAc,CAAC,CAAA;IACvE,MAAM,MAAM,GAAG,IAAI,UAAU,CACzB,gBAAgB,CAAC,MAAM,GAAG,eAAe,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,CACxE,CAAA;IACD,MAAM,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;IAC5B,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAA;IACpD,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,gBAAgB,CAAC,MAAM,GAAG,eAAe,CAAC,MAAM,CAAC,CAAA;IACzE,OAAO,MAAM,CAAA;AACjB,CAAC;AAED,MAAM,UAAU,uBAAuB,CACnC,MAAkB,EAClB,UAAkB,EAAE,eAAe;AACnC,SAAqB;IAErB,MAAM,MAAM,GAAG,UAAU,CAAA;IACzB,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACpD,MAAM,eAAe,GAAG,aAAa,CAAC,UAAU,CAAC,CAAA;IACjD,2GAA2G;IAC3G,KAAK,CAAC,MAAM,CAAC,MAAM,KAAK,EAAE,EAAE,4BAA4B,CAAC,CAAA;IACzD,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,EAAE,EAAE,8BAA8B,CAAC,CAAA;IAC9D,OAAO,UAAU,CAAC,QAAQ,CAAC;SACtB,MAAM,CAAC,WAAW,CAAC;SACnB,MAAM,CAAC,MAAM,CAAC;SACd,MAAM,CAAC,eAAe,CAAC;SACvB,MAAM,CAAC,SAAS,CAAC;SACjB,MAAM,EAAE,CAAA;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC3B,IAAgB,EAChB,UAA+B;IAE/B,SAAS,CAAC,IAAI,CAAC,CAAA;IACf,yGAAyG;IACzG,MAAM,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAA;IACnF,OAAO,oBAAoB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;AAC9C,CAAC;AAED,MAAM,UAAU,oBAAoB,CAChC,IAAgB,EAChB,SAAqB,EACrB,SAA8B;IAE9B,SAAS,CAAC,IAAI,CAAC,CAAA;IACf,cAAc,CAAC,SAAS,CAAC,CAAA;IACzB,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,CAAC,CAAA;AAC1D,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAgB,EAAE,SAAqB;IACtE,SAAS,CAAC,IAAI,CAAC,CAAA;IACf,cAAc,CAAC,SAAS,CAAC,CAAA;IACzB,OAAO,gBAAgB,CAAC,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,CAAA;AACxE,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,SAAqB;IACpD,WAAW,CAAC,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;IAC9B,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC1B,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAClC,CAAC;IACD,OAAO,SAAS,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAA;AAC1C,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,SAAiB;IACnD,mEAAmE;IACnE,KAAK,CACD,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,GAAG,EACzF,gBAAgB,EAChB,GAAG,CAAC,cAAc,CACrB,CAAA;IACD,OAAO,iBAAiB,CAAC,SAAS,CAAC,CAAA;AACvC,CAAC"}

package/dist/signerContext.d.ts

@@ -0,0 +1,60 @@
+import { ethers } from 'ethers';
+/**
+ * SignerContext is a context used for signing events.
+ *
+ * Two different scenarios are supported:
+ *
+ * 1. Signing is delegeted from the user key to the device key, and events are signed with device key.
+ *    In this case, `signerPrivateKey` should return a device private key, and `delegateSig` should be
+ *    a signature of the device public key by the user private key.
+ *
+ * 2. Events are signed with the user key. In this case, `signerPrivateKey` should return a user private key.
+ *    `delegateSig` should be undefined.
+ *
+ * In both scenarios `creatorAddress` should be set to the user address derived from the user public key.
+ *
+ * @param signerPrivateKey - a function that returns a private key to sign events
+ * @param creatorAddress - a creator, i.e. user address derived from the user public key
+ * @param delegateSig - an optional delegate signature
+ * @param delegateExpiryEpochMs - an optional delegate expiry epoch
+ */
+export interface SignerContext {
+    signerPrivateKey: () => string;
+    creatorAddress: Uint8Array;
+    delegateSig?: Uint8Array;
+    delegateExpiryEpochMs?: bigint;
+}
+export declare const checkDelegateSig: (params: {
+    delegatePubKey: Uint8Array | string;
+    creatorAddress: Uint8Array | string;
+    delegateSig: Uint8Array;
+    expiryEpochMs: bigint;
+}) => void;
+export declare const recoverPublicKeyFromDelegateSig: (params: {
+    delegatePubKey: Uint8Array | string;
+    delegateSig: Uint8Array;
+    expiryEpochMs: bigint;
+}) => Uint8Array;
+export declare function makeSignerContext(primaryWallet: ethers.Signer, delegateWallet: ethers.Wallet, inExpiryEpochMs?: bigint | {
+    days?: number;
+    hours?: number;
+    minutes?: number;
+    seconds?: number;
+}): Promise<SignerContext>;
+export declare function makeBearerToken(signer: ethers.Signer, expiry: bigint | {
+    days?: number;
+    hours?: number;
+    minutes?: number;
+    seconds?: number;
+}): Promise<string>;
+export declare function makeSignerContextFromBearerToken(bearerTokenStr: string): Promise<SignerContext>;
+export declare function makeSignerDelegate(signer: ethers.Signer, expiry?: bigint | {
+    days?: number;
+    hours?: number;
+    minutes?: number;
+    seconds?: number;
+}): Promise<{
+    delegateWallet: ethers.Wallet;
+    signerContext: SignerContext;
+}>;
+//# sourceMappingURL=signerContext.d.ts.map

package/dist/signerContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signerContext.d.ts","sourceRoot":"","sources":["../src/signerContext.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAM/B;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,aAAa;IAC1B,gBAAgB,EAAE,MAAM,MAAM,CAAA;IAC9B,cAAc,EAAE,UAAU,CAAA;IAC1B,WAAW,CAAC,EAAE,UAAU,CAAA;IACxB,qBAAqB,CAAC,EAAE,MAAM,CAAA;CACjC;AAED,eAAO,MAAM,gBAAgB,WAAY;IACrC,cAAc,EAAE,UAAU,GAAG,MAAM,CAAA;IACnC,cAAc,EAAE,UAAU,GAAG,MAAM,CAAA;IACnC,WAAW,EAAE,UAAU,CAAA;IACvB,aAAa,EAAE,MAAM,CAAA;CACxB,KAAG,IAWH,CAAA;AAED,eAAO,MAAM,+BAA+B,WAAY;IACpD,cAAc,EAAE,UAAU,GAAG,MAAM,CAAA;IACnC,WAAW,EAAE,UAAU,CAAA;IACvB,aAAa,EAAE,MAAM,CAAA;CACxB,KAAG,UAYH,CAAA;AAgBD,wBAAsB,iBAAiB,CACnC,aAAa,EAAE,MAAM,CAAC,MAAM,EAC5B,cAAc,EAAE,MAAM,CAAC,MAAM,EAC7B,eAAe,CAAC,EACV,MAAM,GACN;IACI,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;CACnB,GACR,OAAO,CAAC,aAAa,CAAC,CAgBxB;AAGD,wBAAsB,eAAe,CACjC,MAAM,EAAE,MAAM,CAAC,MAAM,EACrB,MAAM,EACA,MAAM,GACN;IACI,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;CACnB,GACR,OAAO,CAAC,MAAM,CAAC,CAQjB;AAED,wBAAsB,gCAAgC,CAClD,cAAc,EAAE,MAAM,GACvB,OAAO,CAAC,aAAa,CAAC,CAcxB;AAED,wBAAsB,kBAAkB,CACpC,MAAM,EAAE,MAAM,CAAC,MAAM,EACrB,MAAM,CAAC,EACD,MAAM,GACN;IACI,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,MAAM,CAAA;CACnB,GACR,OAAO,CAAC;IAAE,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC;IAAC,aAAa,EAAE,aAAa,CAAA;CAAE,CAAC,CAQ1E"}

package/dist/signerContext.js

@@ -0,0 +1,101 @@
+import { ecrecover, fromRpcSig, hashPersonalMessage } from '@ethereumjs/util';
+import { ethers } from 'ethers';
+import { bin_equal, bin_fromHexString, bin_toHexString, check } from '@towns-protocol/dlog';
+import { publicKeyToAddress, publicKeyToUint8Array, riverDelegateHashSrc } from './sign';
+import { BearerTokenSchema, Err } from '@towns-protocol/proto';
+import { create, fromBinary, toBinary } from '@bufbuild/protobuf';
+export const checkDelegateSig = (params) => {
+    const creatorAddress = typeof params.creatorAddress === 'string'
+        ? publicKeyToUint8Array(params.creatorAddress)
+        : params.creatorAddress;
+    const recoveredCreatorAddress = recoverPublicKeyFromDelegateSig(params);
+    check(bin_equal(recoveredCreatorAddress, creatorAddress), 'delegateSig does not match creatorAddress', Err.BAD_DELEGATE_SIG);
+};
+export const recoverPublicKeyFromDelegateSig = (params) => {
+    const { delegateSig, expiryEpochMs } = params;
+    const delegatePubKey = typeof params.delegatePubKey === 'string'
+        ? publicKeyToUint8Array(params.delegatePubKey)
+        : params.delegatePubKey;
+    const hashSource = riverDelegateHashSrc(delegatePubKey, expiryEpochMs);
+    const hash = hashPersonalMessage(Buffer.from(hashSource));
+    const { v, r, s } = fromRpcSig('0x' + bin_toHexString(delegateSig));
+    const recoveredCreatorPubKey = ecrecover(hash, v, r, s);
+    const recoveredCreatorAddress = Uint8Array.from(publicKeyToAddress(recoveredCreatorPubKey));
+    return recoveredCreatorAddress;
+};
+async function makeRiverDelegateSig(primaryWallet, devicePubKey, expiryEpochMs) {
+    if (typeof devicePubKey === 'string') {
+        devicePubKey = publicKeyToUint8Array(devicePubKey);
+    }
+    check(devicePubKey.length === 65, 'Bad public key', Err.BAD_PUBLIC_KEY);
+    const hashSrc = riverDelegateHashSrc(devicePubKey, expiryEpochMs);
+    const delegateSig = bin_fromHexString(await primaryWallet.signMessage(hashSrc));
+    return delegateSig;
+}
+export async function makeSignerContext(primaryWallet, delegateWallet, inExpiryEpochMs) {
+    const expiryEpochMs = inExpiryEpochMs ?? 0n; // todo make expiry required param once implemented down stream HNT-5213
+    const delegateExpiryEpochMs = typeof expiryEpochMs === 'bigint' ? expiryEpochMs : makeExpiryEpochMs(expiryEpochMs);
+    const delegateSig = await makeRiverDelegateSig(primaryWallet, delegateWallet.publicKey, delegateExpiryEpochMs);
+    const creatorAddress = await primaryWallet.getAddress();
+    return {
+        signerPrivateKey: () => delegateWallet.privateKey.slice(2), // remove the 0x prefix
+        creatorAddress: bin_fromHexString(creatorAddress),
+        delegateSig,
+        delegateExpiryEpochMs,
+    };
+}
+// make auth token
+export async function makeBearerToken(signer, expiry) {
+    const delegate = await makeSignerDelegate(signer, expiry);
+    const bearerToken = create(BearerTokenSchema, {
+        delegatePrivateKey: delegate.delegateWallet.privateKey,
+        delegateSig: delegate.signerContext.delegateSig,
+        expiryEpochMs: delegate.signerContext.delegateExpiryEpochMs,
+    });
+    return bin_toHexString(toBinary(BearerTokenSchema, bearerToken));
+}
+export async function makeSignerContextFromBearerToken(bearerTokenStr) {
+    const bearerToken = fromBinary(BearerTokenSchema, bin_fromHexString(bearerTokenStr));
+    const delegateWallet = new ethers.Wallet(bearerToken.delegatePrivateKey);
+    const creatorAddress = recoverPublicKeyFromDelegateSig({
+        delegatePubKey: delegateWallet.publicKey,
+        delegateSig: bearerToken.delegateSig,
+        expiryEpochMs: bearerToken.expiryEpochMs,
+    });
+    return {
+        signerPrivateKey: () => bearerToken.delegatePrivateKey.slice(2), // remove the 0x prefix,
+        creatorAddress,
+        delegateSig: bearerToken.delegateSig,
+        delegateExpiryEpochMs: bearerToken.expiryEpochMs,
+    };
+}
+export async function makeSignerDelegate(signer, expiry) {
+    const delegateWallet = ethers.Wallet.createRandom();
+    const signerContext = await makeSignerContext(signer, delegateWallet, expiry);
+    return {
+        delegateWallet,
+        signerContext,
+    };
+}
+function makeExpiryEpochMs({ days, hours, minutes, seconds, }) {
+    const MS_PER_SECOND = 1000;
+    const MS_PER_MINUTE = MS_PER_SECOND * 60;
+    const MS_PER_HOUR = MS_PER_MINUTE * 60;
+    const MS_PER_DAY = MS_PER_HOUR * 24;
+    let delta = 0;
+    if (days) {
+        delta += MS_PER_DAY * days;
+    }
+    if (hours) {
+        delta += MS_PER_HOUR * hours;
+    }
+    if (minutes) {
+        delta += MS_PER_MINUTE * minutes;
+    }
+    if (seconds) {
+        delta += MS_PER_SECOND * seconds;
+    }
+    check(delta != 0, 'Bad expiration, no values were set');
+    return BigInt(Date.now() + delta);
+}
+//# sourceMappingURL=signerContext.js.map

package/dist/signerContext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signerContext.js","sourceRoot":"","sources":["../src/signerContext.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAC7E,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAC/B,OAAO,EAAE,SAAS,EAAE,iBAAiB,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAC3F,OAAO,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,QAAQ,CAAA;AACxF,OAAO,EAAE,iBAAiB,EAAE,GAAG,EAAE,MAAM,uBAAuB,CAAA;AAC9D,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AA4BjE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,MAKhC,EAAQ,EAAE;IACP,MAAM,cAAc,GAChB,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ;QACrC,CAAC,CAAC,qBAAqB,CAAC,MAAM,CAAC,cAAc,CAAC;QAC9C,CAAC,CAAC,MAAM,CAAC,cAAc,CAAA;IAC/B,MAAM,uBAAuB,GAAG,+BAA+B,CAAC,MAAM,CAAC,CAAA;IACvE,KAAK,CACD,SAAS,CAAC,uBAAuB,EAAE,cAAc,CAAC,EAClD,2CAA2C,EAC3C,GAAG,CAAC,gBAAgB,CACvB,CAAA;AACL,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,MAI/C,EAAc,EAAE;IACb,MAAM,EAAE,WAAW,EAAE,aAAa,EAAE,GAAG,MAAM,CAAA;IAC7C,MAAM,cAAc,GAChB,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ;QACrC,CAAC,CAAC,qBAAqB,CAAC,MAAM,CAAC,cAAc,CAAC;QAC9C,CAAC,CAAC,MAAM,CAAC,cAAc,CAAA;IAC/B,MAAM,UAAU,GAAG,oBAAoB,CAAC,cAAc,EAAE,aAAa,CAAC,CAAA;IACtE,MAAM,IAAI,GAAG,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAA;IACzD,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,UAAU,CAAC,IAAI,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC,CAAA;IACnE,MAAM,sBAAsB,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;IACvD,MAAM,uBAAuB,GAAG,UAAU,CAAC,IAAI,CAAC,kBAAkB,CAAC,sBAAsB,CAAC,CAAC,CAAA;IAC3F,OAAO,uBAAuB,CAAA;AAClC,CAAC,CAAA;AAED,KAAK,UAAU,oBAAoB,CAC/B,aAA4B,EAC5B,YAAiC,EACjC,aAAqB;IAErB,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;QACnC,YAAY,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAA;IACtD,CAAC;IACD,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,EAAE,EAAE,gBAAgB,EAAE,GAAG,CAAC,cAAc,CAAC,CAAA;IACvE,MAAM,OAAO,GAAG,oBAAoB,CAAC,YAAY,EAAE,aAAa,CAAC,CAAA;IACjE,MAAM,WAAW,GAAG,iBAAiB,CAAC,MAAM,aAAa,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAA;IAC/E,OAAO,WAAW,CAAA;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACnC,aAA4B,EAC5B,cAA6B,EAC7B,eAOO;IAEP,MAAM,aAAa,GAAG,eAAe,IAAI,EAAE,CAAA,CAAC,wEAAwE;IACpH,MAAM,qBAAqB,GACvB,OAAO,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAA;IACxF,MAAM,WAAW,GAAG,MAAM,oBAAoB,CAC1C,aAAa,EACb,cAAc,CAAC,SAAS,EACxB,qBAAqB,CACxB,CAAA;IACD,MAAM,cAAc,GAAG,MAAM,aAAa,CAAC,UAAU,EAAE,CAAA;IACvD,OAAO;QACH,gBAAgB,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,uBAAuB;QACnF,cAAc,EAAE,iBAAiB,CAAC,cAAc,CAAC;QACjD,WAAW;QACX,qBAAqB;KACxB,CAAA;AACL,CAAC;AAED,kBAAkB;AAClB,MAAM,CAAC,KAAK,UAAU,eAAe,CACjC,MAAqB,EACrB,MAOO;IAEP,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACzD,MAAM,WAAW,GAAG,MAAM,CAAC,iBAAiB,EAAE;QAC1C,kBAAkB,EAAE,QAAQ,CAAC,cAAc,CAAC,UAAU;QACtD,WAAW,EAAE,QAAQ,CAAC,aAAa,CAAC,WAAW;QAC/C,aAAa,EAAE,QAAQ,CAAC,aAAa,CAAC,qBAAqB;KAC9D,CAAC,CAAA;IACF,OAAO,eAAe,CAAC,QAAQ,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC,CAAA;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gCAAgC,CAClD,cAAsB;IAEtB,MAAM,WAAW,GAAG,UAAU,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,cAAc,CAAC,CAAC,CAAA;IACpF,MAAM,cAAc,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,kBAAkB,CAAC,CAAA;IACxE,MAAM,cAAc,GAAG,+BAA+B,CAAC;QACnD,cAAc,EAAE,cAAc,CAAC,SAAS;QACxC,WAAW,EAAE,WAAW,CAAC,WAAW;QACpC,aAAa,EAAE,WAAW,CAAC,aAAa;KAC3C,CAAC,CAAA;IACF,OAAO;QACH,gBAAgB,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,wBAAwB;QACzF,cAAc;QACd,WAAW,EAAE,WAAW,CAAC,WAAW;QACpC,qBAAqB,EAAE,WAAW,CAAC,aAAa;KACnD,CAAA;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACpC,MAAqB,EACrB,MAOO;IAEP,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,CAAA;IACnD,MAAM,aAAa,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,cAAc,EAAE,MAAM,CAAC,CAAA;IAE7E,OAAO;QACH,cAAc;QACd,aAAa;KAChB,CAAA;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,EACvB,IAAI,EACJ,KAAK,EACL,OAAO,EACP,OAAO,GAMV;IACG,MAAM,aAAa,GAAG,IAAI,CAAA;IAC1B,MAAM,aAAa,GAAG,aAAa,GAAG,EAAE,CAAA;IACxC,MAAM,WAAW,GAAG,aAAa,GAAG,EAAE,CAAA;IACtC,MAAM,UAAU,GAAG,WAAW,GAAG,EAAE,CAAA;IAEnC,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,IAAI,IAAI,EAAE,CAAC;QACP,KAAK,IAAI,UAAU,GAAG,IAAI,CAAA;IAC9B,CAAC;IACD,IAAI,KAAK,EAAE,CAAC;QACR,KAAK,IAAI,WAAW,GAAG,KAAK,CAAA;IAChC,CAAC;IACD,IAAI,OAAO,EAAE,CAAC;QACV,KAAK,IAAI,aAAa,GAAG,OAAO,CAAA;IACpC,CAAC;IACD,IAAI,OAAO,EAAE,CAAC;QACV,KAAK,IAAI,aAAa,GAAG,OAAO,CAAA;IACpC,CAAC;IACD,KAAK,CAAC,KAAK,IAAI,CAAC,EAAE,oCAAoC,CAAC,CAAA;IACvD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAA;AACrC,CAAC"}

package/dist/store/store.d.ts

@@ -0,0 +1,22 @@
+export declare enum LoadPriority {
+    high = "high",
+    low = "low"
+}
+export interface Identifiable {
+    id: string;
+}
+export declare class Store {
+    private db;
+    private transactionGroup?;
+    private isLoadedMap;
+    constructor(name: string, version: number, classes: any[]);
+    private checkTableName;
+    newTransactionGroup(name: string): void;
+    commitTransaction(): Promise<void>;
+    withTransaction<T>(name: string, fn: () => T): T;
+    load<T extends Identifiable>(tableName: string, id: string, loadPriority: LoadPriority, onLoad: (data?: T) => void, onError: (e: Error) => void, onCommitted: () => void): void;
+    save<T extends Identifiable>(tableName: string, data: T, onSaved: () => void, onError: (e: Error) => void, onCommitted: () => void): void;
+    private isLoaded;
+    private setIsLoaded;
+}
+//# sourceMappingURL=store.d.ts.map

package/dist/store/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/store/store.ts"],"names":[],"mappings":"AAKA,oBAAY,YAAY;IACpB,IAAI,SAAS;IACb,GAAG,QAAQ;CACd;AAED,MAAM,WAAW,YAAY;IACzB,EAAE,EAAE,MAAM,CAAA;CACb;AAyCD,qBAAa,KAAK;IACd,OAAO,CAAC,EAAE,CAAO;IACjB,OAAO,CAAC,gBAAgB,CAAC,CAAkB;IAC3C,OAAO,CAAC,WAAW,CAAkC;gBAEzC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE;IAOzD,OAAO,CAAC,cAAc;IAItB,mBAAmB,CAAC,IAAI,EAAE,MAAM;IAS1B,iBAAiB;IAsCvB,eAAe,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC;IAchD,IAAI,CAAC,CAAC,SAAS,YAAY,EACvB,SAAS,EAAE,MAAM,EACjB,EAAE,EAAE,MAAM,EACV,YAAY,EAAE,YAAY,EAC1B,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAC1B,OAAO,EAAE,CAAC,CAAC,EAAE,KAAK,KAAK,IAAI,EAC3B,WAAW,EAAE,MAAM,IAAI;IAuB3B,IAAI,CAAC,CAAC,SAAS,YAAY,EACvB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,CAAC,EACP,OAAO,EAAE,MAAM,IAAI,EACnB,OAAO,EAAE,CAAC,CAAC,EAAE,KAAK,KAAK,IAAI,EAC3B,WAAW,EAAE,MAAM,IAAI;IAqB3B,OAAO,CAAC,QAAQ;IAIhB,OAAO,CAAC,WAAW;CAMtB"}

package/dist/store/store.js

@@ -0,0 +1,165 @@
+import { check, dlog } from '@towns-protocol/dlog';
+import Dexie from 'dexie';
+const log = dlog('csb:dataStore');
+export var LoadPriority;
+(function (LoadPriority) {
+    LoadPriority["high"] = "high";
+    LoadPriority["low"] = "low";
+})(LoadPriority || (LoadPriority = {}));
+class TransactionBundler {
+    name;
+    constructor(name) {
+        this.name = name;
+    }
+    isWrite = false;
+    tableNames = [];
+    dbOps = [];
+    effects = [];
+    onCommitted = [];
+}
+class TransactionGroup {
+    name;
+    high;
+    low;
+    constructor(name) {
+        this.name = name;
+        this.high = new TransactionBundler('high');
+        this.low = new TransactionBundler('low');
+    }
+    get bundles() {
+        return [this.high, this.low];
+    }
+    get hasOps() {
+        return this.bundles.some((b) => b.dbOps.length > 0);
+    }
+}
+function makeSchema(classes) {
+    const schema = {};
+    for (const cls of classes) {
+        // eslint-disable-next-line @typescript-eslint/no-unsafe-member-access
+        check(cls.tableName !== undefined, 'missing tableName, decorate with @persistedObservable');
+        // eslint-disable-next-line @typescript-eslint/no-unsafe-member-access
+        check(schema[cls.tableName] === undefined, `duplicate table name: ${cls.tableName}`);
+        // eslint-disable-next-line @typescript-eslint/no-unsafe-member-access
+        schema[cls.tableName] = 'id';
+    }
+    return schema;
+}
+export class Store {
+    db;
+    transactionGroup;
+    isLoadedMap = {};
+    constructor(name, version, classes) {
+        const schema = makeSchema(classes);
+        log('new Store', name, version, schema);
+        this.db = new Dexie(name);
+        this.db.version(version).stores(schema);
+    }
+    checkTableName(tableName) {
+        check(this.db._dbSchema[tableName] !== undefined, `table "${tableName}" not registered`);
+    }
+    newTransactionGroup(name) {
+        // log(`newTransactionGroup "${name}"`)
+        check(this.transactionGroup === undefined, `transaction already in progress named: ${this.transactionGroup?.name} while trying to start ${name}`);
+        this.transactionGroup = new TransactionGroup(name);
+    }
+    async commitTransaction() {
+        const time = Date.now();
+        check(this.transactionGroup !== undefined, 'transaction not started');
+        // save off the group
+        const tGroup = this.transactionGroup;
+        // clear before await so that any new ops are queued
+        this.transactionGroup = undefined;
+        // if no ops, return
+        if (!tGroup.hasOps) {
+            // log(`commitTransaction "${tGroup.name}" skipped (empty)`)
+            return;
+        }
+        log(`commitTransaction "${tGroup.name}"`, 'tables:', tGroup.bundles.map((b) => ({ [b.name]: b.tableNames })));
+        // iterate over InitialLoadPriority values
+        for (const bundle of tGroup.bundles) {
+            if (bundle.tableNames.length === 0) {
+                continue;
+            }
+            const mode = bundle.isWrite ? 'rw!' : 'r!';
+            await this.db.transaction(mode, bundle.tableNames, async () => {
+                for (const fn of bundle.dbOps) {
+                    await fn();
+                }
+            });
+            if (bundle.effects.length > 0 || bundle.onCommitted.length > 0) {
+                this.withTransaction(`${tGroup.name}>effects_${bundle.name}`, () => {
+                    bundle.effects.forEach((fn) => fn());
+                    bundle.onCommitted.map((fn) => fn());
+                });
+            }
+        }
+        log(`commitTransaction "${tGroup.name}" done`, 'elapsedMs:', Date.now() - time);
+    }
+    withTransaction(name, fn) {
+        if (this.transactionGroup !== undefined) {
+            return fn();
+        }
+        else {
+            this.newTransactionGroup(name);
+            const result = fn();
+            this.commitTransaction().catch((e) => {
+                log(`uncaught commitTransaction error in group ${name}`, e);
+                throw e;
+            });
+            return result;
+        }
+    }
+    load(tableName, id, loadPriority, onLoad, onError, onCommitted) {
+        log('+enqueue load', tableName, id, loadPriority);
+        this.checkTableName(tableName);
+        // make sure that we're loading in a transaction started with either withTransaction or newTransactionGroup
+        check(this.transactionGroup !== undefined, 'transaction not started');
+        // there should only be one model loaded per row, to prevent things like concurrent writes and out of sync data
+        check(!this.isLoaded(tableName, id), `model already loaded ${tableName}:${id}`);
+        this.setIsLoaded(tableName, id);
+        const bundler = this.transactionGroup[loadPriority];
+        bundler.tableNames.push(tableName);
+        const dbOp = async () => {
+            try {
+                const data = await this.db.table(tableName).get(id);
+                bundler.effects.push(() => onLoad(data));
+            }
+            catch (e) {
+                bundler.effects.push(() => onError(e));
+            }
+        };
+        bundler.dbOps.push(dbOp);
+        bundler.onCommitted.push(onCommitted);
+    }
+    save(tableName, data, onSaved, onError, onCommitted) {
+        log('+enqueue save', tableName, data.id);
+        this.checkTableName(tableName);
+        check(this.transactionGroup !== undefined, 'transaction not started');
+        const bundler = this.transactionGroup.low;
+        bundler.tableNames.push(tableName);
+        bundler.isWrite = true;
+        const dbOp = async () => {
+            try {
+                const id = await this.db.table(tableName).put(data);
+                check(id === data.id, 'id mismatch???');
+                bundler.effects.push(() => onSaved());
+            }
+            catch (e) {
+                bundler.effects.push(() => onError(e));
+            }
+        };
+        bundler.dbOps.push(dbOp);
+        bundler.onCommitted.push(onCommitted);
+    }
+    isLoaded(tableName, id) {
+        return this.isLoadedMap[tableName]?.has(id) ?? false;
+    }
+    setIsLoaded(tableName, id) {
+        if (this.isLoadedMap[tableName] === undefined) {
+            this.isLoadedMap[tableName] = new Set();
+        }
+        this.isLoadedMap[tableName].add(id);
+    }
+}
+//# sourceMappingURL=store.js.map