@vex-chat/libvex 5.2.0 → 5.3.1

package/dist/types/identity.d.ts

@@ -1,3 +1,8 @@
+/**
+ * Copyright (c) 2020-2026 Vex Heavy Industries LLC
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ * Commercial licenses available at vex.wtf
+ */
 /**
  * SDK credential storage types. Moved from `@vex-chat/types`
  * because only the SDK and app consumers use them.

package/dist/types/identity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../src/types/identity.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACrB,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,iBAAiB,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjD;AAED,6DAA6D;AAC7D,MAAM,WAAW,iBAAiB;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CACpB"}
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../src/types/identity.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;;GAGG;AAEH;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACrB,KAAK,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,iBAAiB,CAAC,CAAC;IAC3D,IAAI,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACjD;AAED,6DAA6D;AAC7D,MAAM,WAAW,iBAAiB;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CACpB"}

package/dist/types/identity.js

@@ -1,6 +1,7 @@
 /**
- * SDK credential storage types. Moved from `@vex-chat/types`
- * because only the SDK and app consumers use them.
+ * Copyright (c) 2020-2026 Vex Heavy Industries LLC
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ * Commercial licenses available at vex.wtf
  */
 export {};
 //# sourceMappingURL=identity.js.map

package/dist/types/identity.js.map

@@ -1 +1 @@
-{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../src/types/identity.ts"],"names":[],"mappings":"AAAA;;;GAGG"}
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../src/types/identity.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/types/index.d.ts

@@ -1,3 +1,8 @@
+/**
+ * Copyright (c) 2020-2026 Vex Heavy Industries LLC
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ * Commercial licenses available at vex.wtf
+ */
 export type { KeyPair, PreKeysCrypto, SessionCrypto, UnsavedPreKey, XKeyRing, } from "./crypto.js";
 export type { KeyStore, StoredCredentials } from "./identity.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACR,OAAO,EACP,aAAa,EACb,aAAa,EACb,aAAa,EACb,QAAQ,GACX,MAAM,aAAa,CAAC;AAErB,YAAY,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,YAAY,EACR,OAAO,EACP,aAAa,EACb,aAAa,EACb,aAAa,EACb,QAAQ,GACX,MAAM,aAAa,CAAC;AAErB,YAAY,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC"}

package/dist/types/index.js

@@ -1,2 +1,7 @@
+/**
+ * Copyright (c) 2020-2026 Vex Heavy Industries LLC
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ * Commercial licenses available at vex.wtf
+ */
 export {};
 //# sourceMappingURL=index.js.map

package/dist/types/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":""}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/dist/utils/capitalize.d.ts

@@ -1,3 +1,8 @@
+/**
+ * Copyright (c) 2020-2026 Vex Heavy Industries LLC
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ * Commercial licenses available at vex.wtf
+ */
 /**
  * @hidden
  */

package/dist/utils/capitalize.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"capitalize.d.ts","sourceRoot":"","sources":["../../src/utils/capitalize.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,eAAO,MAAM,UAAU,GAAI,GAAG,MAAM,KAAG,MAEtC,CAAC"}
+{"version":3,"file":"capitalize.d.ts","sourceRoot":"","sources":["../../src/utils/capitalize.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;GAEG;AACH,eAAO,MAAM,UAAU,GAAI,GAAG,MAAM,KAAG,MAEtC,CAAC"}

package/dist/utils/capitalize.js

@@ -1,3 +1,8 @@
+/**
+ * Copyright (c) 2020-2026 Vex Heavy Industries LLC
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ * Commercial licenses available at vex.wtf
+ */
 /**
  * @hidden
  */

package/dist/utils/capitalize.js.map

@@ -1 +1 @@
-{"version":3,"file":"capitalize.js","sourceRoot":"","sources":["../../src/utils/capitalize.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAS,EAAU,EAAE;IAC5C,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC,CAAC"}
+{"version":3,"file":"capitalize.js","sourceRoot":"","sources":["../../src/utils/capitalize.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;GAEG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAS,EAAU,EAAE;IAC5C,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAClD,CAAC,CAAC"}

package/dist/utils/fipsMailExtra.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Copyright (c) 2020-2026 Vex Heavy Industries LLC
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ * Commercial licenses available at vex.wtf
+ */
+export declare const FIPS_INITIAL_EXTRA_V1: readonly [number, number, number];
+export declare function isFipsInitialExtraV1(buf: Uint8Array): boolean;
+/**
+ * P-256 fips (Web Crypto) initial mail `extra` bytes (version 1). Length-prefixed segments
+ * (variable lengths) plus a 6-byte OTK index, AD length includes both identity raw publics.
+ */
+export declare function encodeFipsInitialExtraV1(signPub: Uint8Array, ephPub: Uint8Array, pk: Uint8Array, ad: Uint8Array, index6: Uint8Array): Uint8Array;
+/**
+ * @returns [signKey, ephKey, ad, index6] (Uint8Array slices, index is always length 6)
+ */
+export declare function decodeFipsInitialExtraV1(extra: Uint8Array): [Uint8Array, Uint8Array, Uint8Array, Uint8Array];
+export declare function isFipsSubsequentExtraV1(buf: Uint8Array): boolean;
+/**
+ * P-256 fips subsequent mail: session lookup key (variable, typically 65B uncompressed ECDH public).
+ */
+export declare function encodeFipsSubsequentExtraV1(sessionPub: Uint8Array): Uint8Array;
+export declare function decodeFipsSubsequentExtraV1(extra: Uint8Array): Uint8Array;
+/** P-256: message bytes signed to bind a prekey (FIPS) — 1-byte tag + uncompressed public. */
+export declare function fipsP256PreKeySignPayload(preKeyRawPublic: Uint8Array): Uint8Array;
+/**
+ * P-256 identity AD: concatenation of our and their P-256 ECDH identity publics (uncompressed, 65B each if standard).
+ * Used instead of `xEncode` + X25519 for FIPS.
+ */
+export declare function fipsP256AdFromIdentityPubs(ourIdentityRaw: Uint8Array, theirIdentityFromBundle: Uint8Array): Uint8Array;
+//# sourceMappingURL=fipsMailExtra.d.ts.map

package/dist/utils/fipsMailExtra.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fipsMailExtra.d.ts","sourceRoot":"","sources":["../../src/utils/fipsMailExtra.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,eAAO,MAAM,qBAAqB,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAE1D,CAAC;AAoBX,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAO7D;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACpC,OAAO,EAAE,UAAU,EACnB,MAAM,EAAE,UAAU,EAClB,EAAE,EAAE,UAAU,EACd,EAAE,EAAE,UAAU,EACd,MAAM,EAAE,UAAU,GACnB,UAAU,CAiBZ;AAED;;GAEG;AACH,wBAAgB,wBAAwB,CACpC,KAAK,EAAE,UAAU,GAClB,CAAC,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,CAAC,CAgClD;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAOhE;AAED;;GAEG;AACH,wBAAgB,2BAA2B,CACvC,UAAU,EAAE,UAAU,GACvB,UAAU,CASZ;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,CAazE;AAED,8FAA8F;AAC9F,wBAAgB,yBAAyB,CACrC,eAAe,EAAE,UAAU,GAC5B,UAAU,CAEZ;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CACtC,cAAc,EAAE,UAAU,EAC1B,uBAAuB,EAAE,UAAU,GACpC,UAAU,CAEZ"}

package/dist/utils/fipsMailExtra.js

@@ -0,0 +1,114 @@
+/**
+ * Copyright (c) 2020-2026 Vex Heavy Industries LLC
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ * Commercial licenses available at vex.wtf
+ */
+import { xConcat } from "@vex-chat/crypto";
+export const FIPS_INITIAL_EXTRA_V1 = [
+    0xf1, 0x02, 0x01,
+];
+const FIPS_SUBSEQUENT_V1 = [
+    0xf1, 0x03, 0x01,
+];
+function u16be(n) {
+    if (!Number.isInteger(n) || n < 0 || n > 65535) {
+        throw new Error(`FIPS: invalid u16 length: ${String(n)}`);
+    }
+    return [n >> 8, n & 0xff];
+}
+function u16read(buf, offset) {
+    if (offset + 2 > buf.length) {
+        return -1;
+    }
+    return ((buf[offset] ?? 0) * 256 + (buf[offset + 1] ?? 0)) >>> 0;
+}
+export function isFipsInitialExtraV1(buf) {
+    return (buf.length >= 3 &&
+        buf[0] === FIPS_INITIAL_EXTRA_V1[0] &&
+        buf[1] === FIPS_INITIAL_EXTRA_V1[1] &&
+        buf[2] === FIPS_INITIAL_EXTRA_V1[2]);
+}
+/**
+ * P-256 fips (Web Crypto) initial mail `extra` bytes (version 1). Length-prefixed segments
+ * (variable lengths) plus a 6-byte OTK index, AD length includes both identity raw publics.
+ */
+export function encodeFipsInitialExtraV1(signPub, ephPub, pk, ad, index6) {
+    if (index6.length !== 6) {
+        throw new Error("FIPS: OTK index must be 6 bytes.");
+    }
+    const a = (len) => new Uint8Array([...u16be(len)]);
+    return xConcat(Uint8Array.from([...FIPS_INITIAL_EXTRA_V1]), a(signPub.length), signPub, a(ephPub.length), ephPub, a(pk.length), pk, a(ad.length), ad, index6);
+}
+/**
+ * @returns [signKey, ephKey, ad, index6] (Uint8Array slices, index is always length 6)
+ */
+export function decodeFipsInitialExtraV1(extra) {
+    if (!isFipsInitialExtraV1(extra)) {
+        throw new Error("FIPS: not a v1 initial extra payload.");
+    }
+    let p = 3;
+    const readSeg = (label) => {
+        const len = u16read(extra, p);
+        if (len < 0) {
+            throw new Error(`FIPS: extra too short (need len for ${label} at ${String(p)}).`);
+        }
+        p += 2;
+        if (p + len > extra.length) {
+            throw new Error(`FIPS: truncated ${label} segment (need ${String(len + p)} but got ${String(extra.length)}).`);
+        }
+        const seg = extra.subarray(p, p + len);
+        p += len;
+        return seg;
+    };
+    const signKey = readSeg("sign");
+    const ephKey = readSeg("eph");
+    const _pk = readSeg("PK");
+    const ad = readSeg("ad");
+    void _pk; // not required for DH / open (matches tweetnacl extra layout)
+    if (p + 6 > extra.length) {
+        throw new Error("FIPS: missing 6-byte OTK index at end of extra.");
+    }
+    const index6 = extra.subarray(p, p + 6);
+    return [signKey, ephKey, ad, index6];
+}
+export function isFipsSubsequentExtraV1(buf) {
+    return (buf.length >= 3 &&
+        buf[0] === FIPS_SUBSEQUENT_V1[0] &&
+        buf[1] === FIPS_SUBSEQUENT_V1[1] &&
+        buf[2] === FIPS_SUBSEQUENT_V1[2]);
+}
+/**
+ * P-256 fips subsequent mail: session lookup key (variable, typically 65B uncompressed ECDH public).
+ */
+export function encodeFipsSubsequentExtraV1(sessionPub) {
+    if (sessionPub.length > 65535) {
+        throw new Error("FIPS: session public key is too long.");
+    }
+    return xConcat(Uint8Array.from([...FIPS_SUBSEQUENT_V1]), new Uint8Array([...u16be(sessionPub.length)]), sessionPub);
+}
+export function decodeFipsSubsequentExtraV1(extra) {
+    if (!isFipsSubsequentExtraV1(extra)) {
+        throw new Error("FIPS: not a v1 subsequent extra.");
+    }
+    const len = u16read(extra, 3);
+    if (len < 0) {
+        throw new Error("FIPS: bad subsequent extra length field.");
+    }
+    const p = 5;
+    if (p + len > extra.length) {
+        throw new Error("FIPS: subsequent extra truncated.");
+    }
+    return extra.subarray(p, p + len);
+}
+/** P-256: message bytes signed to bind a prekey (FIPS) — 1-byte tag + uncompressed public. */
+export function fipsP256PreKeySignPayload(preKeyRawPublic) {
+    return xConcat(new Uint8Array([0xa1]), preKeyRawPublic);
+}
+/**
+ * P-256 identity AD: concatenation of our and their P-256 ECDH identity publics (uncompressed, 65B each if standard).
+ * Used instead of `xEncode` + X25519 for FIPS.
+ */
+export function fipsP256AdFromIdentityPubs(ourIdentityRaw, theirIdentityFromBundle) {
+    return xConcat(ourIdentityRaw, theirIdentityFromBundle);
+}
+//# sourceMappingURL=fipsMailExtra.js.map

package/dist/utils/fipsMailExtra.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fipsMailExtra.js","sourceRoot":"","sources":["../../src/utils/fipsMailExtra.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAE3C,MAAM,CAAC,MAAM,qBAAqB,GAAsC;IACpE,IAAI,EAAE,IAAI,EAAE,IAAI;CACV,CAAC;AAEX,MAAM,kBAAkB,GAAsC;IAC1D,IAAI,EAAE,IAAI,EAAE,IAAI;CACV,CAAC;AAEX,SAAS,KAAK,CAAC,CAAS;IACpB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,OAAO,CAAC,GAAe,EAAE,MAAc;IAC5C,IAAI,MAAM,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QAC1B,OAAO,CAAC,CAAC,CAAC;IACd,CAAC;IACD,OAAO,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAe;IAChD,OAAO,CACH,GAAG,CAAC,MAAM,IAAI,CAAC;QACf,GAAG,CAAC,CAAC,CAAC,KAAK,qBAAqB,CAAC,CAAC,CAAC;QACnC,GAAG,CAAC,CAAC,CAAC,KAAK,qBAAqB,CAAC,CAAC,CAAC;QACnC,GAAG,CAAC,CAAC,CAAC,KAAK,qBAAqB,CAAC,CAAC,CAAC,CACtC,CAAC;AACN,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CACpC,OAAmB,EACnB,MAAkB,EAClB,EAAc,EACd,EAAc,EACd,MAAkB;IAElB,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,CAAC,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC3D,OAAO,OAAO,CACV,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,qBAAqB,CAAC,CAAC,EAC3C,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EACjB,OAAO,EACP,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAChB,MAAM,EACN,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,EACZ,EAAE,EACF,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,EACZ,EAAE,EACF,MAAM,CACT,CAAC;AACN,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,wBAAwB,CACpC,KAAiB;IAEjB,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,EAAE;QAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC9B,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CACX,uCAAuC,KAAK,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,CACnE,CAAC;QACN,CAAC;QACD,CAAC,IAAI,CAAC,CAAC;QACP,IAAI,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACX,mBAAmB,KAAK,kBAAkB,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,YAAY,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAChG,CAAC;QACN,CAAC;QACD,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC;QACvC,CAAC,IAAI,GAAG,CAAC;QACT,OAAO,GAAG,CAAC;IACf,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACzB,KAAK,GAAG,CAAC,CAAC,8DAA8D;IACxE,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxC,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,GAAe;IACnD,OAAO,CACH,GAAG,CAAC,MAAM,IAAI,CAAC;QACf,GAAG,CAAC,CAAC,CAAC,KAAK,kBAAkB,CAAC,CAAC,CAAC;QAChC,GAAG,CAAC,CAAC,CAAC,KAAK,kBAAkB,CAAC,CAAC,CAAC;QAChC,GAAG,CAAC,CAAC,CAAC,KAAK,kBAAkB,CAAC,CAAC,CAAC,CACnC,CAAC;AACN,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,2BAA2B,CACvC,UAAsB;IAEtB,IAAI,UAAU,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,OAAO,CACV,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,kBAAkB,CAAC,CAAC,EACxC,IAAI,UAAU,CAAC,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAC7C,UAAU,CACb,CAAC;AACN,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,KAAiB;IACzD,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC9B,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QACV,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,CAAC,GAAG,CAAC,CAAC;IACZ,IAAI,CAAC,GAAG,GAAG,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC;AACtC,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,yBAAyB,CACrC,eAA2B;IAE3B,OAAO,OAAO,CAAC,IAAI,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;AAC5D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CACtC,cAA0B,EAC1B,uBAAmC;IAEnC,OAAO,OAAO,CAAC,cAAc,EAAE,uBAAuB,CAAC,CAAC;AAC5D,CAAC"}

package/dist/utils/formatBytes.d.ts

@@ -1,2 +1,7 @@
+/**
+ * Copyright (c) 2020-2026 Vex Heavy Industries LLC
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ * Commercial licenses available at vex.wtf
+ */
 export declare const formatBytes: (bytes: number, decimals?: number) => string;
 //# sourceMappingURL=formatBytes.d.ts.map

package/dist/utils/formatBytes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"formatBytes.d.ts","sourceRoot":"","sources":["../../src/utils/formatBytes.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,WAAW,GAAI,OAAO,MAAM,EAAE,iBAAY,WActD,CAAC"}
+{"version":3,"file":"formatBytes.d.ts","sourceRoot":"","sources":["../../src/utils/formatBytes.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,eAAO,MAAM,WAAW,GAAI,OAAO,MAAM,EAAE,iBAAY,WActD,CAAC"}

package/dist/utils/formatBytes.js

@@ -1,3 +1,8 @@
+/**
+ * Copyright (c) 2020-2026 Vex Heavy Industries LLC
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ * Commercial licenses available at vex.wtf
+ */
 export const formatBytes = (bytes, decimals = 2) => {
     if (bytes === 0) {
         return "0 Bytes";

package/dist/utils/formatBytes.js.map

@@ -1 +1 @@
-{"version":3,"file":"formatBytes.js","sourceRoot":"","sources":["../../src/utils/formatBytes.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAa,EAAE,QAAQ,GAAG,CAAC,EAAE,EAAE;IACvD,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,MAAM,CAAC,GAAG,IAAI,CAAC;IACf,MAAM,EAAE,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACvC,MAAM,KAAK,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAExE,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAEpD,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC;IACjC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;AACtC,CAAC,CAAC"}
+{"version":3,"file":"formatBytes.js","sourceRoot":"","sources":["../../src/utils/formatBytes.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,KAAa,EAAE,QAAQ,GAAG,CAAC,EAAE,EAAE;IACvD,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QACd,OAAO,SAAS,CAAC;IACrB,CAAC;IAED,MAAM,CAAC,GAAG,IAAI,CAAC;IACf,MAAM,EAAE,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACvC,MAAM,KAAK,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAExE,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAEpD,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC;IACjC,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;AACtC,CAAC,CAAC"}

package/dist/utils/resolveAtRestAesKey.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Copyright (c) 2020-2026 Vex Heavy Industries LLC
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ * Commercial licenses available at vex.wtf
+ */
+import { type CryptoProfile } from "@vex-chat/crypto";
+/**
+ * Produces the 32-byte at-rest key used by {@link Storage} (sqlite, memory) from
+ * a hex signing secret, matching the derivation used by {@link Client.create}.
+ * `setCryptoProfile(profile)` should already be in effect (or `tweetnacl` implied).
+ */
+export declare function resolveAtRestAesKeyFromSignKeyHex(privateKeyHex: string, profile: CryptoProfile): Promise<Uint8Array>;
+//# sourceMappingURL=resolveAtRestAesKey.d.ts.map

package/dist/utils/resolveAtRestAesKey.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveAtRestAesKey.d.ts","sourceRoot":"","sources":["../../src/utils/resolveAtRestAesKey.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACH,KAAK,aAAa,EAMrB,MAAM,kBAAkB,CAAC;AAE1B;;;;GAIG;AACH,wBAAsB,iCAAiC,CACnD,aAAa,EAAE,MAAM,EACrB,OAAO,EAAE,aAAa,GACvB,OAAO,CAAC,UAAU,CAAC,CAerB"}

package/dist/utils/resolveAtRestAesKey.js

@@ -0,0 +1,26 @@
+/**
+ * Copyright (c) 2020-2026 Vex Heavy Industries LLC
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ * Commercial licenses available at vex.wtf
+ */
+import { xEcdhKeyPairFromEcdsaKeyPairAsync, xSignKeyPairFromSecret, xSignKeyPairFromSecretAsync, XKeyConvert, XUtils, } from "@vex-chat/crypto";
+/**
+ * Produces the 32-byte at-rest key used by {@link Storage} (sqlite, memory) from
+ * a hex signing secret, matching the derivation used by {@link Client.create}.
+ * `setCryptoProfile(profile)` should already be in effect (or `tweetnacl` implied).
+ */
+export async function resolveAtRestAesKeyFromSignKeyHex(privateKeyHex, profile) {
+    const dec = XUtils.decodeHex(privateKeyHex);
+    if (profile === "tweetnacl") {
+        const sign = xSignKeyPairFromSecret(dec);
+        const id = XKeyConvert.convertKeyPair(sign);
+        if (!id) {
+            throw new Error("Could not convert signing key to X25519 identity.");
+        }
+        return XUtils.deriveLocalAtRestAesKey(id.secretKey, "tweetnacl");
+    }
+    const sign = await xSignKeyPairFromSecretAsync(dec);
+    const id = await xEcdhKeyPairFromEcdsaKeyPairAsync(sign);
+    return XUtils.deriveLocalAtRestAesKey(id.secretKey, "fips");
+}
+//# sourceMappingURL=resolveAtRestAesKey.js.map

package/dist/utils/resolveAtRestAesKey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolveAtRestAesKey.js","sourceRoot":"","sources":["../../src/utils/resolveAtRestAesKey.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAEH,iCAAiC,EACjC,sBAAsB,EACtB,2BAA2B,EAC3B,WAAW,EACX,MAAM,GACT,MAAM,kBAAkB,CAAC;AAE1B;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACnD,aAAqB,EACrB,OAAsB;IAEtB,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IAC5C,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,sBAAsB,CAAC,GAAG,CAAC,CAAC;QACzC,MAAM,EAAE,GAAG,WAAW,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,EAAE,EAAE,CAAC;YACN,MAAM,IAAI,KAAK,CACX,mDAAmD,CACtD,CAAC;QACN,CAAC;QACD,OAAO,MAAM,CAAC,uBAAuB,CAAC,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,2BAA2B,CAAC,GAAG,CAAC,CAAC;IACpD,MAAM,EAAE,GAAG,MAAM,iCAAiC,CAAC,IAAI,CAAC,CAAC;IACzD,OAAO,MAAM,CAAC,uBAAuB,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;AAChE,CAAC"}

package/dist/utils/sqlSessionToCrypto.d.ts

@@ -1,3 +1,8 @@
+/**
+ * Copyright (c) 2020-2026 Vex Heavy Industries LLC
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ * Commercial licenses available at vex.wtf
+ */
 import type { SessionCrypto } from "../types/index.js";
 import type { SessionSQL } from "@vex-chat/types";
 export declare function sqlSessionToCrypto(session: SessionSQL): SessionCrypto;

package/dist/utils/sqlSessionToCrypto.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sqlSessionToCrypto.d.ts","sourceRoot":"","sources":["../../src/utils/sqlSessionToCrypto.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAIlD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,UAAU,GAAG,aAAa,CAUrE"}
+{"version":3,"file":"sqlSessionToCrypto.d.ts","sourceRoot":"","sources":["../../src/utils/sqlSessionToCrypto.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAIlD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,UAAU,GAAG,aAAa,CAUrE"}

package/dist/utils/sqlSessionToCrypto.js

@@ -1,3 +1,8 @@
+/**
+ * Copyright (c) 2020-2026 Vex Heavy Industries LLC
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ * Commercial licenses available at vex.wtf
+ */
 import { XUtils } from "@vex-chat/crypto";
 export function sqlSessionToCrypto(session) {
     return {

package/dist/utils/sqlSessionToCrypto.js.map

@@ -1 +1 @@
-{"version":3,"file":"sqlSessionToCrypto.js","sourceRoot":"","sources":["../../src/utils/sqlSessionToCrypto.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,MAAM,UAAU,kBAAkB,CAAC,OAAmB;IAClD,OAAO;QACH,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC;QAClD,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC;QAC9C,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,EAAE,EAAE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,MAAM,EAAE,OAAO,CAAC,MAAM;KACzB,CAAC;AACN,CAAC"}
+{"version":3,"file":"sqlSessionToCrypto.js","sourceRoot":"","sources":["../../src/utils/sqlSessionToCrypto.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAE1C,MAAM,UAAU,kBAAkB,CAAC,OAAmB;IAClD,OAAO;QACH,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC;QAClD,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC;QAC9C,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,EAAE,EAAE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,MAAM,EAAE,OAAO,CAAC,MAAM;KACzB,CAAC;AACN,CAAC"}

package/dist/utils/uint8uuid.d.ts

@@ -1,3 +1,8 @@
+/**
+ * Copyright (c) 2020-2026 Vex Heavy Industries LLC
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ * Commercial licenses available at vex.wtf
+ */
 /**
  * @ignore
  */

package/dist/utils/uint8uuid.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"uint8uuid.d.ts","sourceRoot":"","sources":["../../src/utils/uint8uuid.ts"],"names":[],"mappings":"AACA;;GAEG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,2BAEvC"}
+{"version":3,"file":"uint8uuid.d.ts","sourceRoot":"","sources":["../../src/utils/uint8uuid.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH;;GAEG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,2BAEvC"}

package/dist/utils/uint8uuid.js

@@ -1,3 +1,8 @@
+/**
+ * Copyright (c) 2020-2026 Vex Heavy Industries LLC
+ * Licensed under AGPL-3.0. See LICENSE for details.
+ * Commercial licenses available at vex.wtf
+ */
 import { parse as uuidParse } from "uuid";
 /**
  * @ignore

package/dist/utils/uint8uuid.js.map

@@ -1 +1 @@
-{"version":3,"file":"uint8uuid.js","sourceRoot":"","sources":["../../src/utils/uint8uuid.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACpC,OAAO,IAAI,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAC3C,CAAC"}
+{"version":3,"file":"uint8uuid.js","sourceRoot":"","sources":["../../src/utils/uint8uuid.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAC1C;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACpC,OAAO,IAAI,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAC3C,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@vex-chat/libvex",
-    "version": "5.2.0",
+    "version": "5.3.1",
     "description": "Library for communicating with xchat server.",
     "type": "module",
     "sideEffects": false,
@@ -51,7 +51,10 @@
     "files": [
         "dist",
         "src",
-        "LICENSE"
+        "LICENSE",
+        "LICENSE-COMMERCIAL",
+        "LICENSING.md",
+        "CLA.md"
     ],
     "author": "Extra <extrahash@protonmail.com>",
     "license": "AGPL-3.0-or-later",
@@ -65,6 +68,8 @@
         "build": "rimraf dist && tsc -p tsconfig.build.json",
         "format": "prettier --write .",
         "format:check": "prettier --check .",
+        "copyright:check": "node scripts/copyright-headers.mjs --check",
+        "copyright:apply": "node scripts/copyright-headers.mjs",
         "lint": "eslint src/",
         "lint:fix": "eslint src/ --fix",
         "lint:pkg": "publint --strict",
@@ -75,6 +80,8 @@
         "prepack": "npm run build",
         "docs": "npx typedoc --options typedoc.json",
         "test": "vitest run --project unit --silent",
+        "test:local-spire": "node scripts/test-local-spire.mjs",
+        "probe:mail": "node scripts/probe-multi-device-mail.mjs",
         "test:e2e": "vitest run --project node --project browser --silent",
         "license:check": "npx @onebeyond/license-checker scan --allowOnly MIT ISC BSD-2-Clause BSD-3-Clause Apache-2.0 0BSD MPL-2.0 CC0-1.0 CC-BY-4.0 Unlicense BlueOak-1.0.0 Python-2.0 Zlib PSF-2.0 Artistic-2.0 AGPL-3.0-or-later WTFPL --ignoreRootPackageLicense --disableReport"
     },
@@ -103,15 +110,18 @@
         "vitest": "3.2.4"
     },
     "dependencies": {
-        "@vex-chat/crypto": "2.0.1",
+        "@vex-chat/crypto": "2.1.2",
         "@vex-chat/types": "2.0.0",
         "axios": "1.15.0",
         "eventemitter3": "5.0.4",
         "kysely": "0.28.16",
         "msgpackr": "1.11.8",
-        "uuid": "13.0.0",
+        "uuid": "14.0.0",
         "zod": "4.3.6"
     },
+    "overrides": {
+        "postcss": "8.5.10"
+    },
     "peerDependencies": {
         "better-sqlite3": ">=11.0.0"
     },