@verbeth/sdk 0.1.4 → 0.1.6

package/dist/src/client/VerbethClientBuilder.d.ts

@@ -0,0 +1,105 @@
+/**
+ * Builder pattern and factory function for VerbethClient.
+ *
+ * Provides a fluent API for client setup, reducing boilerplate
+ * and making the initialization order explicit.
+ */
+import type { Signer } from 'ethers';
+import type { IExecutor } from '../executor.js';
+import type { IdentityKeyPair, IdentityProof } from '../types.js';
+import type { SessionStore, PendingStore, VerbethClientCallbacks } from './types.js';
+import { VerbethClient } from './VerbethClient.js';
+/**
+ * Options for createVerbethClient factory function.
+ */
+export interface CreateVerbethClientOptions {
+    address: string;
+    signer: Signer;
+    identityKeyPair: IdentityKeyPair;
+    identityProof: IdentityProof;
+    executor: IExecutor;
+    sessionStore?: SessionStore;
+    pendingStore?: PendingStore;
+    callbacks?: VerbethClientCallbacks;
+}
+/**
+ * Factory function for one-liner client creation.
+ *
+ * @example
+ * ```typescript
+ * const client = createVerbethClient({
+ *   address,
+ *   signer,
+ *   identityKeyPair,
+ *   identityProof,
+ *   executor,
+ *   sessionStore,
+ *   pendingStore,
+ * });
+ * ```
+ */
+export declare function createVerbethClient(options: CreateVerbethClientOptions): VerbethClient;
+/**
+ * Builder for fluent VerbethClient construction.
+ *
+ * @example
+ * ```typescript
+ * const client = new VerbethClientBuilder()
+ *   .withAddress(address)
+ *   .withSigner(signer)
+ *   .withIdentity(keyPair, proof)
+ *   .withExecutor(executor)
+ *   .withStorage(sessionStore, pendingStore)
+ *   .build();
+ * ```
+ */
+export declare class VerbethClientBuilder {
+    private address?;
+    private signer?;
+    private identityKeyPair?;
+    private identityProof?;
+    private executor?;
+    private sessionStore?;
+    private pendingStore?;
+    private callbacks?;
+    /**
+     * Set the user's blockchain address.
+     */
+    withAddress(address: string): this;
+    /**
+     * Set the ethers Signer for transaction signing.
+     */
+    withSigner(signer: Signer): this;
+    /**
+     * Set the identity keypair and proof.
+     */
+    withIdentity(keyPair: IdentityKeyPair, proof: IdentityProof): this;
+    /**
+     * Set the contract executor.
+     */
+    withExecutor(executor: IExecutor): this;
+    /**
+     * Set storage adapters for sessions and pending messages.
+     * Both are optional - only set what you need.
+     */
+    withStorage(sessionStore?: SessionStore, pendingStore?: PendingStore): this;
+    /**
+     * Set the session store adapter.
+     */
+    withSessionStore(store: SessionStore): this;
+    /**
+     * Set the pending message store adapter.
+     */
+    withPendingStore(store: PendingStore): this;
+    /**
+     * Set optional callbacks for events.
+     */
+    withCallbacks(callbacks: VerbethClientCallbacks): this;
+    /**
+     * Build the VerbethClient instance.
+     *
+     * @throws Error if required fields are missing
+     */
+    build(): VerbethClient;
+}
+//# sourceMappingURL=VerbethClientBuilder.d.ts.map

package/dist/src/client/VerbethClientBuilder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"VerbethClientBuilder.d.ts","sourceRoot":"","sources":["../../../src/client/VerbethClientBuilder.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAC;AACrF,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,eAAe,CAAC;IACjC,aAAa,EAAE,aAAa,CAAC;IAC7B,QAAQ,EAAE,SAAS,CAAC;IACpB,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,YAAY,CAAC,EAAE,YAAY,CAAC;IAC5B,SAAS,CAAC,EAAE,sBAAsB,CAAC;CACpC;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,0BAA0B,GAAG,aAAa,CAmBtF;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,oBAAoB;IAC/B,OAAO,CAAC,OAAO,CAAC,CAAS;IACzB,OAAO,CAAC,MAAM,CAAC,CAAS;IACxB,OAAO,CAAC,eAAe,CAAC,CAAkB;IAC1C,OAAO,CAAC,aAAa,CAAC,CAAgB;IACtC,OAAO,CAAC,QAAQ,CAAC,CAAY;IAC7B,OAAO,CAAC,YAAY,CAAC,CAAe;IACpC,OAAO,CAAC,YAAY,CAAC,CAAe;IACpC,OAAO,CAAC,SAAS,CAAC,CAAyB;IAE3C;;OAEG;IACH,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAKlC;;OAEG;IACH,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAKhC;;OAEG;IACH,YAAY,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,GAAG,IAAI;IAMlE;;OAEG;IACH,YAAY,CAAC,QAAQ,EAAE,SAAS,GAAG,IAAI;IAKvC;;;OAGG;IACH,WAAW,CAAC,YAAY,CAAC,EAAE,YAAY,EAAE,YAAY,CAAC,EAAE,YAAY,GAAG,IAAI;IAU3E;;OAEG;IACH,gBAAgB,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI;IAK3C;;OAEG;IACH,gBAAgB,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI;IAK3C;;OAEG;IACH,aAAa,CAAC,SAAS,EAAE,sBAAsB,GAAG,IAAI;IAKtD;;;;OAIG;IACH,KAAK,IAAI,aAAa;CA4BvB"}

package/dist/src/client/VerbethClientBuilder.js

@@ -0,0 +1,146 @@
+// packages/sdk/src/client/VerbethClientBuilder.ts
+import { VerbethClient } from './VerbethClient.js';
+/**
+ * Factory function for one-liner client creation.
+ *
+ * @example
+ * ```typescript
+ * const client = createVerbethClient({
+ *   address,
+ *   signer,
+ *   identityKeyPair,
+ *   identityProof,
+ *   executor,
+ *   sessionStore,
+ *   pendingStore,
+ * });
+ * ```
+ */
+export function createVerbethClient(options) {
+    const client = new VerbethClient({
+        address: options.address,
+        signer: options.signer,
+        identityKeyPair: options.identityKeyPair,
+        identityProof: options.identityProof,
+        executor: options.executor,
+        callbacks: options.callbacks,
+    });
+    if (options.sessionStore) {
+        client.setSessionStore(options.sessionStore);
+    }
+    if (options.pendingStore) {
+        client.setPendingStore(options.pendingStore);
+    }
+    return client;
+}
+/**
+ * Builder for fluent VerbethClient construction.
+ *
+ * @example
+ * ```typescript
+ * const client = new VerbethClientBuilder()
+ *   .withAddress(address)
+ *   .withSigner(signer)
+ *   .withIdentity(keyPair, proof)
+ *   .withExecutor(executor)
+ *   .withStorage(sessionStore, pendingStore)
+ *   .build();
+ * ```
+ */
+export class VerbethClientBuilder {
+    /**
+     * Set the user's blockchain address.
+     */
+    withAddress(address) {
+        this.address = address;
+        return this;
+    }
+    /**
+     * Set the ethers Signer for transaction signing.
+     */
+    withSigner(signer) {
+        this.signer = signer;
+        return this;
+    }
+    /**
+     * Set the identity keypair and proof.
+     */
+    withIdentity(keyPair, proof) {
+        this.identityKeyPair = keyPair;
+        this.identityProof = proof;
+        return this;
+    }
+    /**
+     * Set the contract executor.
+     */
+    withExecutor(executor) {
+        this.executor = executor;
+        return this;
+    }
+    /**
+     * Set storage adapters for sessions and pending messages.
+     * Both are optional - only set what you need.
+     */
+    withStorage(sessionStore, pendingStore) {
+        if (sessionStore) {
+            this.sessionStore = sessionStore;
+        }
+        if (pendingStore) {
+            this.pendingStore = pendingStore;
+        }
+        return this;
+    }
+    /**
+     * Set the session store adapter.
+     */
+    withSessionStore(store) {
+        this.sessionStore = store;
+        return this;
+    }
+    /**
+     * Set the pending message store adapter.
+     */
+    withPendingStore(store) {
+        this.pendingStore = store;
+        return this;
+    }
+    /**
+     * Set optional callbacks for events.
+     */
+    withCallbacks(callbacks) {
+        this.callbacks = callbacks;
+        return this;
+    }
+    /**
+     * Build the VerbethClient instance.
+     *
+     * @throws Error if required fields are missing
+     */
+    build() {
+        if (!this.address) {
+            throw new Error('VerbethClientBuilder: address is required. Call withAddress().');
+        }
+        if (!this.signer) {
+            throw new Error('VerbethClientBuilder: signer is required. Call withSigner().');
+        }
+        if (!this.identityKeyPair) {
+            throw new Error('VerbethClientBuilder: identityKeyPair is required. Call withIdentity().');
+        }
+        if (!this.identityProof) {
+            throw new Error('VerbethClientBuilder: identityProof is required. Call withIdentity().');
+        }
+        if (!this.executor) {
+            throw new Error('VerbethClientBuilder: executor is required. Call withExecutor().');
+        }
+        return createVerbethClient({
+            address: this.address,
+            signer: this.signer,
+            identityKeyPair: this.identityKeyPair,
+            identityProof: this.identityProof,
+            executor: this.executor,
+            sessionStore: this.sessionStore,
+            pendingStore: this.pendingStore,
+            callbacks: this.callbacks,
+        });
+    }
+}

package/dist/src/client/hsrMatcher.d.ts

@@ -0,0 +1,22 @@
+export interface PendingContactEntry {
+    address: string;
+    handshakeEphemeralSecret: Uint8Array;
+    kemSecretKey: Uint8Array;
+}
+/**
+ * Match an HSR event to a pending contact by computing hybrid tags.
+ *
+ * For each pending contact, attempts to decrypt the HSR payload and compute
+ * the expected tag. Returns the address of the first matching contact.
+ *
+ * Complexity: O(N) where N = number of pending contacts.
+ * Per contact: NaCl decrypt + ML-KEM decapsulate + HKDF tag computation.
+ *
+ * @param pendingContacts - Contacts with pending handshakes
+ * @param inResponseToTag - The tag from the HSR event (topics[1])
+ * @param R - Responder's ephemeral public key (from HSR event data)
+ * @param encryptedPayload - JSON string of the encrypted HSR payload
+ * @returns Address of matching contact, or null if no match
+ */
+export declare function matchHsrToContact(pendingContacts: PendingContactEntry[], inResponseToTag: `0x${string}`, R: Uint8Array, encryptedPayload: string): string | null;
+//# sourceMappingURL=hsrMatcher.d.ts.map

package/dist/src/client/hsrMatcher.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hsrMatcher.d.ts","sourceRoot":"","sources":["../../../src/client/hsrMatcher.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,wBAAwB,EAAE,UAAU,CAAC;IACrC,YAAY,EAAE,UAAU,CAAC;CAC1B;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAC/B,eAAe,EAAE,mBAAmB,EAAE,EACtC,eAAe,EAAE,KAAK,MAAM,EAAE,EAC9B,CAAC,EAAE,UAAU,EACb,gBAAgB,EAAE,MAAM,GACvB,MAAM,GAAG,IAAI,CAaf"}

package/dist/src/client/hsrMatcher.js

@@ -0,0 +1,31 @@
+// packages/sdk/src/client/hsrMatcher.ts
+import { computeHybridTagFromInitiator, decryptHandshakeResponse } from '../crypto.js';
+import { kem } from '../pq/kem.js';
+/**
+ * Match an HSR event to a pending contact by computing hybrid tags.
+ *
+ * For each pending contact, attempts to decrypt the HSR payload and compute
+ * the expected tag. Returns the address of the first matching contact.
+ *
+ * Complexity: O(N) where N = number of pending contacts.
+ * Per contact: NaCl decrypt + ML-KEM decapsulate + HKDF tag computation.
+ *
+ * @param pendingContacts - Contacts with pending handshakes
+ * @param inResponseToTag - The tag from the HSR event (topics[1])
+ * @param R - Responder's ephemeral public key (from HSR event data)
+ * @param encryptedPayload - JSON string of the encrypted HSR payload
+ * @returns Address of matching contact, or null if no match
+ */
+export function matchHsrToContact(pendingContacts, inResponseToTag, R, encryptedPayload) {
+    for (const contact of pendingContacts) {
+        const decrypted = decryptHandshakeResponse(encryptedPayload, contact.handshakeEphemeralSecret);
+        if (!decrypted?.kemCiphertext)
+            continue;
+        const kemSecret = kem.decapsulate(decrypted.kemCiphertext, contact.kemSecretKey);
+        const tag = computeHybridTagFromInitiator(contact.handshakeEphemeralSecret, R, kemSecret);
+        if (tag === inResponseToTag) {
+            return contact.address;
+        }
+    }
+    return null;
+}

package/dist/src/client/index.d.ts

@@ -1,3 +1,8 @@
 export { VerbethClient } from './VerbethClient.js';
-export type { VerbethClientConfig, HandshakeResult, HandshakeResponseResult } from './types.js';
+export { VerbethClientBuilder, createVerbethClient } from './VerbethClientBuilder.js';
+export { matchHsrToContact } from './hsrMatcher.js';
+export type { CreateVerbethClientOptions, } from './VerbethClientBuilder.js';
+export type { PendingContactEntry, } from './hsrMatcher.js';
+export type { VerbethClientConfig, VerbethClientCallbacks, TopicRatchetEvent, MessageDecryptedEvent, HandshakeResult, HandshakeResponseResult, SessionStore, PendingStore, PreparedMessage, DecryptedMessage, PendingMessage, PendingStatus, SendResult, ConfirmResult, SerializedSessionInfo, HsrEventData, CreateInitiatorSessionFromHsrParams, } from './types.js';
+export type { CreateInitiatorSessionParams, CreateResponderSessionParams, } from './VerbethClient.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/src/client/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/client/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,YAAY,EACV,mBAAmB,EACnB,eAAe,EACf,uBAAuB,EACxB,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/client/index.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AACtF,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpD,YAAY,EACV,0BAA0B,GAC3B,MAAM,2BAA2B,CAAC;AAEnC,YAAY,EACV,mBAAmB,GACpB,MAAM,iBAAiB,CAAC;AAEzB,YAAY,EACV,mBAAmB,EACnB,sBAAsB,EACtB,iBAAiB,EACjB,qBAAqB,EAErB,eAAe,EACf,uBAAuB,EAEvB,YAAY,EACZ,YAAY,EAEZ,eAAe,EACf,gBAAgB,EAChB,cAAc,EACd,aAAa,EAEb,UAAU,EACV,aAAa,EAEb,qBAAqB,EACrB,YAAY,EACZ,mCAAmC,GACpC,MAAM,YAAY,CAAC;AAEpB,YAAY,EACV,4BAA4B,EAC5B,4BAA4B,GAC7B,MAAM,oBAAoB,CAAC"}

package/dist/src/client/index.js

@@ -1,2 +1,4 @@
 // packages/sdk/src/client/index.ts
 export { VerbethClient } from './VerbethClient.js';
+export { VerbethClientBuilder, createVerbethClient } from './VerbethClientBuilder.js';
+export { matchHsrToContact } from './hsrMatcher.js';

package/dist/src/client/types.d.ts

@@ -1,9 +1,49 @@
+/**
+ * Client types for VerbethClient.
+ *
+ * Includes storage interfaces that apps implement to connect
+ * VerbethClient to their persistence layer.
+ */
 import type { Signer } from 'ethers';
 import type { IExecutor } from '../executor.js';
-import type { IdentityKeyPair, IdentityProof, DuplexTopics } from '../types.js';
+import type { IdentityKeyPair, IdentityProof } from '../types.js';
+import type { RatchetSession } from '../ratchet/types.js';
 import type nacl from 'tweetnacl';
+import type { KemKeyPair } from '../handshake.js';
+/**
+ * Event emitted when topic ratcheting occurs.
+ */
+export interface TopicRatchetEvent {
+    conversationId: string;
+    previousTopicInbound: string | null;
+    currentTopicInbound: string;
+    topicEpoch: number;
+}
+/**
+ * Event emitted after message decryption with topic match info.
+ */
+export interface MessageDecryptedEvent {
+    conversationId: string;
+    topicMatch: 'current' | 'next' | 'previous';
+    topicEpoch: number;
+}
+/**
+ * Optional callbacks for VerbethClient events.
+ */
+export interface VerbethClientCallbacks {
+    /**
+     * Called when a topic ratchet occurs (epoch advances).
+     * Useful for updating UI or triggering contact sync.
+     */
+    onTopicRatchet?: (event: TopicRatchetEvent) => void;
+    /**
+     * Called after successful message decryption.
+     * Provides topic match info for debugging/analytics.
+     */
+    onMessageDecrypted?: (event: MessageDecryptedEvent) => void;
+}
 /**
- * Configuration for creating a VerbethClient instance
+ * Configuration for creating a VerbethClient instance.
  */
 export interface VerbethClientConfig {
     executor: IExecutor;
@@ -11,20 +51,121 @@ export interface VerbethClientConfig {
     identityProof: IdentityProof;
     signer: Signer;
     address: string;
+    callbacks?: VerbethClientCallbacks;
 }
-/**
- * Result from initiating a handshake
- */
 export interface HandshakeResult {
     tx: any;
     ephemeralKeyPair: nacl.BoxKeyPair;
+    kemKeyPair: KemKeyPair;
 }
-/**
- * Result from accepting a handshake
- */
 export interface HandshakeResponseResult {
     tx: any;
-    duplexTopics: DuplexTopics;
-    tag: string;
+    topicOutbound: `0x${string}`;
+    topicInbound: `0x${string}`;
+    tag: `0x${string}`;
+    salt: Uint8Array;
+    responderEphemeralSecret: Uint8Array;
+    responderEphemeralPublic: Uint8Array;
+    kemSharedSecret?: Uint8Array;
+}
+/**
+ * Storage interface for ratchet sessions (to connect VerbethClient to a storage layer)
+ */
+export interface SessionStore {
+    get(conversationId: string): Promise<RatchetSession | null>;
+    /**
+     * Find session by any active inbound topic.
+     */
+    getByInboundTopic(topic: string): Promise<RatchetSession | null>;
+    save(session: RatchetSession): Promise<void>;
+}
+/**
+ * Result of prepareMessage contains everything needed to send and commit.
+ *
+ * Two-phase commit pattern:
+ * 1. prepareMessage() - encrypts and returns PreparedMessage
+ * 2. Send transaction using prepared.payload and prepared.topic
+ * 3. Session state is already committed for forward secrecy
+ */
+export interface PreparedMessage {
+    id: string;
+    conversationId: string;
+    topic: `0x${string}`;
+    payload: Uint8Array;
+    plaintext: string;
+    sessionBefore: RatchetSession;
+    sessionAfter: RatchetSession;
+    messageNumber: number;
+    createdAt: number;
+}
+/**
+ * Result of decryptMessage.
+ */
+export interface DecryptedMessage {
+    conversationId: string;
+    plaintext: string;
+    isOwnMessage: boolean;
+    session: RatchetSession;
+    topic: string;
+    topicMatch: 'current' | 'next' | 'previous';
+}
+export type PendingStatus = 'preparing' | 'submitted' | 'confirmed' | 'failed';
+/**
+ * Pending outbound message record.
+ * Used for matching on-chain confirmations to sent messages.
+ */
+export interface PendingMessage {
+    id: string;
+    conversationId: string;
+    topic: string;
+    payloadHex: string;
+    plaintext: string;
+    sessionStateBefore: string;
+    sessionStateAfter: string;
+    createdAt: number;
+    txHash: string | null;
+    status: PendingStatus;
+}
+/**
+ * Storage interface for pending outbound messages.
+ * Implement this to enable sendMessage/confirmTx/revertTx.
+ */
+export interface PendingStore {
+    save(pending: PendingMessage): Promise<void>;
+    get(id: string): Promise<PendingMessage | null>;
+    getByTxHash(txHash: string): Promise<PendingMessage | null>;
+    updateStatus(id: string, status: PendingStatus, txHash?: string): Promise<void>;
+    delete(id: string): Promise<void>;
+    getByConversation(conversationId: string): Promise<PendingMessage[]>;
+}
+export interface SendResult {
+    messageId: string;
+    txHash: string;
+    topic: `0x${string}`;
+    messageNumber: number;
+}
+export interface ConfirmResult {
+    conversationId: string;
+    plaintext: string;
+    messageId: string;
+}
+export interface SerializedSessionInfo {
+    conversationId: string;
+    topicEpoch: number;
+    sendingMsgNumber: number;
+    receivingMsgNumber: number;
+    currentTopicOutbound: string;
+    currentTopicInbound: string;
+}
+export interface HsrEventData {
+    inResponseToTag: `0x${string}`;
+    responderEphemeralPubKey: Uint8Array;
+    kemCiphertext?: Uint8Array;
+}
+export interface CreateInitiatorSessionFromHsrParams {
+    contactAddress: string;
+    myEphemeralSecret: Uint8Array;
+    myKemSecret?: Uint8Array;
+    hsrEvent: HsrEventData;
 }
 //# sourceMappingURL=types.d.ts.map

package/dist/src/client/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/client/types.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChF,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,SAAS,CAAC;IACpB,eAAe,EAAE,eAAe,CAAC;IACjC,aAAa,EAAE,aAAa,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,GAAG,CAAC;IACR,gBAAgB,EAAE,IAAI,CAAC,UAAU,CAAC;CACnC;AAED;;GAEG;AACH,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,GAAG,CAAC;IACR,YAAY,EAAE,YAAY,CAAC;IAC3B,GAAG,EAAE,MAAM,CAAC;CACb"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/client/types.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,EAAE,eAAe,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAClE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAC1D,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAElD;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,cAAc,EAAE,MAAM,CAAC;IACvB,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,mBAAmB,EAAE,MAAM,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IACpC,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,SAAS,GAAG,MAAM,GAAG,UAAU,CAAC;IAC5C,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,iBAAiB,KAAK,IAAI,CAAC;IAEpD;;;OAGG;IACH,kBAAkB,CAAC,EAAE,CAAC,KAAK,EAAE,qBAAqB,KAAK,IAAI,CAAC;CAC7D;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,SAAS,CAAC;IACpB,eAAe,EAAE,eAAe,CAAC;IACjC,aAAa,EAAE,aAAa,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,sBAAsB,CAAC;CACpC;AAED,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,GAAG,CAAC;IACR,gBAAgB,EAAE,IAAI,CAAC,UAAU,CAAC;IAClC,UAAU,EAAE,UAAU,CAAC;CACxB;AAED,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,GAAG,CAAC;IACR,aAAa,EAAE,KAAK,MAAM,EAAE,CAAC;IAC7B,YAAY,EAAE,KAAK,MAAM,EAAE,CAAC;IAC5B,GAAG,EAAE,KAAK,MAAM,EAAE,CAAC;IACnB,IAAI,EAAE,UAAU,CAAC;IACjB,wBAAwB,EAAE,UAAU,CAAC;IACrC,wBAAwB,EAAE,UAAU,CAAC;IACrC,eAAe,CAAC,EAAE,UAAU,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,GAAG,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IAE5D;;OAEG;IACH,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IACjE,IAAI,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9C;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,KAAK,MAAM,EAAE,CAAC;IACrB,OAAO,EAAE,UAAU,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,cAAc,CAAC;IAC9B,YAAY,EAAE,cAAc,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,OAAO,CAAC;IACtB,OAAO,EAAE,cAAc,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,SAAS,GAAG,MAAM,GAAG,UAAU,CAAC;CAC7C;AAGD,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,WAAW,GAAG,WAAW,GAAG,QAAQ,CAAC;AAE/E;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,aAAa,CAAC;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IAChD,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAAC;IAC5D,YAAY,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChF,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClC,iBAAiB,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;CACtE;AAED,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,KAAK,MAAM,EAAE,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB;AAGD,MAAM,WAAW,aAAa;IAC5B,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,cAAc,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAGD,MAAM,WAAW,YAAY;IAC3B,eAAe,EAAE,KAAK,MAAM,EAAE,CAAC;IAC/B,wBAAwB,EAAE,UAAU,CAAC;IACrC,aAAa,CAAC,EAAE,UAAU,CAAC;CAC5B;AAED,MAAM,WAAW,mCAAmC;IAClD,cAAc,EAAE,MAAM,CAAC;IACvB,iBAAiB,EAAE,UAAU,CAAC;IAC9B,WAAW,CAAC,EAAE,UAAU,CAAC;IACzB,QAAQ,EAAE,YAAY,CAAC;CACxB"}

package/dist/src/crypto(old).d.ts

@@ -0,0 +1,46 @@
+import { HandshakeResponseContent } from './payload.js';
+import { IdentityProof } from './types.js';
+/**
+ * Encrypts a structured payload (JSON-serializable objects)
+ */
+export declare function encryptStructuredPayload<T>(payload: T, recipientPublicKey: Uint8Array, ephemeralSecretKey: Uint8Array, ephemeralPublicKey: Uint8Array, staticSigningSecretKey?: Uint8Array, staticSigningPublicKey?: Uint8Array): string;
+/**
+ * Decrypts a structured payload with converter function
+ */
+export declare function decryptStructuredPayload<T>(payloadJson: string, recipientSecretKey: Uint8Array, converter: (obj: any) => T, staticSigningPublicKey?: Uint8Array): T | null;
+export declare function encryptMessage(message: string, recipientPublicKey: Uint8Array, ephemeralSecretKey: Uint8Array, ephemeralPublicKey: Uint8Array, staticSigningSecretKey?: Uint8Array, staticSigningPublicKey?: Uint8Array): string;
+export declare function decryptMessage(payloadJson: string, recipientSecretKey: Uint8Array, staticSigningPublicKey?: Uint8Array): string | null;
+/**
+ * Decrypts handshake response and extracts individual keys from unified format
+ */
+export declare function decryptHandshakeResponse(payloadJson: string, initiatorEphemeralSecretKey: Uint8Array): HandshakeResponseContent | null;
+/**
+ * helper to decrypt handshake response and extract individual keys
+ */
+export declare function decryptAndExtractHandshakeKeys(payloadJson: string, initiatorEphemeralSecretKey: Uint8Array): {
+    identityPubKey: Uint8Array;
+    signingPubKey: Uint8Array;
+    ephemeralPubKey: Uint8Array;
+    note?: string;
+    identityProof: IdentityProof;
+} | null;
+/**
+ * Responder: tag = H( KDF( ECDH(r, viewPubA), "verbeth:hsr"))
+ */
+export declare function computeTagFromResponder(rSecretKey: Uint8Array, viewPubA: Uint8Array): `0x${string}`;
+/**
+ * Initiator: tag = H( KDF( ECDH(viewPrivA, R), "verbeth:hsr"))
+ */
+export declare function computeTagFromInitiator(viewPrivA: Uint8Array, R: Uint8Array): `0x${string}`;
+export declare function deriveLongTermShared(myIdentitySecretKey: Uint8Array, theirIdentityPublicKey: Uint8Array): Uint8Array;
+/**
+ * Directional duplex topics (Initiator-Responder, Responder-Initiator).
+ * Recommended salt: tag (bytes)
+ */
+export declare function deriveDuplexTopics(myIdentitySecretKey: Uint8Array, theirIdentityPublicKey: Uint8Array, salt?: Uint8Array): {
+    topicOut: `0x${string}`;
+    topicIn: `0x${string}`;
+    checksum: `0x${string}`;
+};
+export declare function verifyDuplexTopicsChecksum(topicOut: `0x${string}`, topicIn: `0x${string}`, checksum: `0x${string}`): boolean;
+//# sourceMappingURL=crypto(old).d.ts.map

package/dist/src/crypto(old).d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto(old).d.ts","sourceRoot":"","sources":["../../src/crypto(old).ts"],"names":[],"mappings":"AAMA,OAAO,EAML,wBAAwB,EAEzB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAE3C;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,CAAC,EACxC,OAAO,EAAE,CAAC,EACV,kBAAkB,EAAE,UAAU,EAC9B,kBAAkB,EAAE,UAAU,EAC9B,kBAAkB,EAAE,UAAU,EAC9B,sBAAsB,CAAC,EAAE,UAAU,EACnC,sBAAsB,CAAC,EAAE,UAAU,GAClC,MAAM,CAcR;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CAAC,CAAC,EACxC,WAAW,EAAE,MAAM,EACnB,kBAAkB,EAAE,UAAU,EAC9B,SAAS,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,EAC1B,sBAAsB,CAAC,EAAE,UAAU,GAClC,CAAC,GAAG,IAAI,CAaV;AAGD,wBAAgB,cAAc,CAC5B,OAAO,EAAE,MAAM,EACf,kBAAkB,EAAE,UAAU,EAC9B,kBAAkB,EAAE,UAAU,EAC9B,kBAAkB,EAAE,UAAU,EAC9B,sBAAsB,CAAC,EAAE,UAAU,EACnC,sBAAsB,CAAC,EAAE,UAAU,GAClC,MAAM,CAUR;AAED,wBAAgB,cAAc,CAC5B,WAAW,EAAE,MAAM,EACnB,kBAAkB,EAAE,UAAU,EAC9B,sBAAsB,CAAC,EAAE,UAAU,GAClC,MAAM,GAAG,IAAI,CAQf;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CACtC,WAAW,EAAE,MAAM,EACnB,2BAA2B,EAAE,UAAU,GACtC,wBAAwB,GAAG,IAAI,CAgBjC;AAED;;GAEG;AACH,wBAAgB,8BAA8B,CAC5C,WAAW,EAAE,MAAM,EACnB,2BAA2B,EAAE,UAAU,GACtC;IACD,cAAc,EAAE,UAAU,CAAC;IAC3B,aAAa,EAAE,UAAU,CAAC;IAC1B,eAAe,EAAE,UAAU,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,aAAa,EAAE,aAAa,CAAC;CAC9B,GAAG,IAAI,CAcP;AAWD;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,UAAU,EACtB,QAAQ,EAAE,UAAU,GACnB,KAAK,MAAM,EAAE,CAGf;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,UAAU,EACrB,CAAC,EAAE,UAAU,GACZ,KAAK,MAAM,EAAE,CAGf;AAkBD,wBAAgB,oBAAoB,CAClC,mBAAmB,EAAE,UAAU,EAC/B,sBAAsB,EAAE,UAAU,GACjC,UAAU,CAEZ;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,mBAAmB,EAAE,UAAU,EAC/B,sBAAsB,EAAE,UAAU,EAClC,IAAI,CAAC,EAAE,UAAU,GAChB;IAAE,QAAQ,EAAE,KAAK,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,KAAK,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,KAAK,MAAM,EAAE,CAAA;CAAE,CAW9E;AAED,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,KAAK,MAAM,EAAE,EACvB,OAAO,EAAE,KAAK,MAAM,EAAE,EACtB,QAAQ,EAAE,KAAK,MAAM,EAAE,GACtB,OAAO,CAOT"}