@voidly/agent-sdk 3.3.1 → 3.3.2

package/dist/index.js

@@ -4979,6 +4979,55 @@ var VoidlyAgent = class _VoidlyAgent {
               rawPlaintext = import_tweetnacl.default.secretbox.open(ciphertext, nonce, messageKey);
             }
           }
+          if (!rawPlaintext && envelopeDhRatchetKey && this.doubleRatchet && state) {
+            try {
+              const x25519Shared2 = import_tweetnacl.default.box.before(senderEncPub, this.encryptionKeyPair.secretKey);
+              let initialKey2;
+              if (envelopePqCiphertext && this.mlkemSecretKey) {
+                try {
+                  const pqCt2 = (0, import_tweetnacl_util.decodeBase64)(envelopePqCiphertext);
+                  const kem2 = new MlKem768();
+                  const pqShared2 = await kem2.decap(pqCt2, this.mlkemSecretKey);
+                  const combined2 = new Uint8Array(x25519Shared2.length + pqShared2.length);
+                  combined2.set(x25519Shared2, 0);
+                  combined2.set(pqShared2, x25519Shared2.length);
+                  initialKey2 = new Uint8Array(await globalThis.crypto.subtle.digest("SHA-256", combined2));
+                } catch {
+                  initialKey2 = x25519Shared2;
+                }
+              } else {
+                initialKey2 = x25519Shared2;
+              }
+              const senderDhPub2 = (0, import_tweetnacl_util.decodeBase64)(envelopeDhRatchetKey);
+              const dhOutput2 = import_tweetnacl.default.box.before(senderDhPub2, this.encryptionKeyPair.secretKey);
+              const { newRootKey: rk2, newChainKey: ck2 } = await kdfRK(initialKey2, dhOutput2);
+              let freshCk = ck2;
+              for (let fi = 1; fi < envelopeRatchetStep; fi++) {
+                const { nextChainKey: nck } = await ratchetStep(freshCk);
+                freshCk = nck;
+              }
+              const { nextChainKey: finalCk, messageKey: freshMk } = await ratchetStep(freshCk);
+              const freshPlain = import_tweetnacl.default.secretbox.open(ciphertext, nonce, freshMk);
+              if (freshPlain) {
+                rawPlaintext = freshPlain;
+                state.recvChainKey = finalCk;
+                state.recvStep = envelopeRatchetStep;
+                state.rootKey = rk2;
+                state.dhRecvPubKey = senderDhPub2;
+                state.prevSendStep = state.sendStep;
+                state.dhSendKeyPair = import_tweetnacl.default.box.keyPair();
+                state.sendStep = 0;
+                state.sendChainKey = initialKey2;
+                const dhOut3 = import_tweetnacl.default.box.before(senderDhPub2, state.dhSendKeyPair.secretKey);
+                const kdf3 = await kdfRK(state.rootKey, dhOut3);
+                state.rootKey = kdf3.newRootKey;
+                state.sendChainKey = kdf3.newChainKey;
+                if (state.dhSkippedKeys) state.dhSkippedKeys.clear();
+                if (state.skippedKeys) state.skippedKeys.clear();
+              }
+            } catch {
+            }
+          }
           if (!rawPlaintext) {
             rawPlaintext = import_tweetnacl.default.box.open(ciphertext, nonce, senderEncPub, this.encryptionKeyPair.secretKey);
           }

package/dist/index.mjs

@@ -4969,6 +4969,55 @@ var VoidlyAgent = class _VoidlyAgent {
               rawPlaintext = import_tweetnacl.default.secretbox.open(ciphertext, nonce, messageKey);
             }
           }
+          if (!rawPlaintext && envelopeDhRatchetKey && this.doubleRatchet && state) {
+            try {
+              const x25519Shared2 = import_tweetnacl.default.box.before(senderEncPub, this.encryptionKeyPair.secretKey);
+              let initialKey2;
+              if (envelopePqCiphertext && this.mlkemSecretKey) {
+                try {
+                  const pqCt2 = (0, import_tweetnacl_util.decodeBase64)(envelopePqCiphertext);
+                  const kem2 = new MlKem768();
+                  const pqShared2 = await kem2.decap(pqCt2, this.mlkemSecretKey);
+                  const combined2 = new Uint8Array(x25519Shared2.length + pqShared2.length);
+                  combined2.set(x25519Shared2, 0);
+                  combined2.set(pqShared2, x25519Shared2.length);
+                  initialKey2 = new Uint8Array(await globalThis.crypto.subtle.digest("SHA-256", combined2));
+                } catch {
+                  initialKey2 = x25519Shared2;
+                }
+              } else {
+                initialKey2 = x25519Shared2;
+              }
+              const senderDhPub2 = (0, import_tweetnacl_util.decodeBase64)(envelopeDhRatchetKey);
+              const dhOutput2 = import_tweetnacl.default.box.before(senderDhPub2, this.encryptionKeyPair.secretKey);
+              const { newRootKey: rk2, newChainKey: ck2 } = await kdfRK(initialKey2, dhOutput2);
+              let freshCk = ck2;
+              for (let fi = 1; fi < envelopeRatchetStep; fi++) {
+                const { nextChainKey: nck } = await ratchetStep(freshCk);
+                freshCk = nck;
+              }
+              const { nextChainKey: finalCk, messageKey: freshMk } = await ratchetStep(freshCk);
+              const freshPlain = import_tweetnacl.default.secretbox.open(ciphertext, nonce, freshMk);
+              if (freshPlain) {
+                rawPlaintext = freshPlain;
+                state.recvChainKey = finalCk;
+                state.recvStep = envelopeRatchetStep;
+                state.rootKey = rk2;
+                state.dhRecvPubKey = senderDhPub2;
+                state.prevSendStep = state.sendStep;
+                state.dhSendKeyPair = import_tweetnacl.default.box.keyPair();
+                state.sendStep = 0;
+                state.sendChainKey = initialKey2;
+                const dhOut3 = import_tweetnacl.default.box.before(senderDhPub2, state.dhSendKeyPair.secretKey);
+                const kdf3 = await kdfRK(state.rootKey, dhOut3);
+                state.rootKey = kdf3.newRootKey;
+                state.sendChainKey = kdf3.newChainKey;
+                if (state.dhSkippedKeys) state.dhSkippedKeys.clear();
+                if (state.skippedKeys) state.skippedKeys.clear();
+              }
+            } catch {
+            }
+          }
           if (!rawPlaintext) {
             rawPlaintext = import_tweetnacl.default.box.open(ciphertext, nonce, senderEncPub, this.encryptionKeyPair.secretKey);
           }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@voidly/agent-sdk",
-  "version": "3.3.1",
+  "version": "3.3.2",
   "description": "E2E encrypted agent-to-agent communication SDK — Double Ratchet, X3DH, deniable auth, ML-KEM-768 post-quantum, SSE streaming, ratchet persistence, multi-relay federation",
   "main": "dist/index.js",
   "module": "dist/index.mjs",