@wishknish/knishio-client-js 0.8.1 → 0.9.0

package/src/Wallet.js

@@ -283,11 +283,11 @@ export default class Wallet {
    * Initializes the ML-KEM key pair
    */
   initializeMLKEM () {
-    // Generate a 64-byte (512-bit) seed from the Knish.IO private key  
+    // Generate a 64-byte (512-bit) seed from the Knish.IO private key
     // Use deterministic approach: generateSecret(key, 128) → 128 hex chars = 64 bytes
-    const seedHex = generateSecret(this.key, 128)  // 128 hex chars = 64 bytes
+    const seedHex = generateSecret(this.key, 128) // 128 hex chars = 64 bytes
 
-    // Convert the hex string to a Uint8Array  
+    // Convert the hex string to a Uint8Array
     const seed = new Uint8Array(64)
     for (let i = 0; i < 64; i++) {
       seed[i] = parseInt(seedHex.substr(i * 2, 2), 16)
@@ -398,6 +398,47 @@ export default class Wallet {
     remainderWallet.tokenUnits = remainderTokenUnits
   }
 
+  /**
+   * Split token units across MULTIPLE recipients (WP line 544).
+   *
+   * The source retains the SENT union (all units leaving), each recipient gets its own subset,
+   * and the remainder gets the KEPT units (those not assigned to any recipient). Mirrors
+   * splitUnits() but N-way: the source's tokenUnits become the union (not a single recipient's
+   * subset) so the source atom carries the full SENT set the validator reads as the authority.
+   *
+   * @param {array[]} recipientUnitLists - array of unit-id arrays, parallel to recipientWallets
+   * @param {Wallet[]} recipientWallets
+   * @param {Wallet} remainderWallet
+   */
+  splitUnitsMulti (
+    recipientUnitLists,
+    recipientWallets,
+    remainderWallet
+  ) {
+    // The union of all unit ids leaving the source
+    const sentIds = new Set()
+    recipientUnitLists.forEach(unitList => {
+      unitList.forEach(id => sentIds.add(id))
+    })
+
+    // Nothing to split (fungible transfer) — leave token units untouched
+    if (sentIds.size === 0) {
+      return
+    }
+
+    // Each recipient gets its own subset of the source's token units
+    recipientWallets.forEach((recipientWallet, index) => {
+      const ids = recipientUnitLists[index]
+      recipientWallet.tokenUnits = this.tokenUnits.filter(tokenUnit => ids.includes(tokenUnit.id))
+    })
+
+    // The remainder keeps everything not sent to any recipient
+    remainderWallet.tokenUnits = this.tokenUnits.filter(tokenUnit => !sentIds.has(tokenUnit.id))
+
+    // The source carries the SENT union (the ownership authority the validator reads)
+    this.tokenUnits = this.tokenUnits.filter(tokenUnit => sentIds.has(tokenUnit.id))
+  }
+
   /**
    * Create a remainder wallet from the source one
    *
@@ -454,6 +495,17 @@ export default class Wallet {
   }
 
   async decryptMessage (encryptedData) {
+    const decryptedString = await this._mlkemDecryptToString(encryptedData)
+    return decryptedString === null ? null : JSON.parse(decryptedString)
+  }
+
+  /**
+   * ML-KEM768 decapsulate + AES-256-GCM decrypt → the RAW decrypted UTF-8 string
+   * (no JSON.parse). Shared by {@link decryptMessage} (which JSON.parses the result)
+   * and the PQ CipherHash transport ({@link decryptMyMessageML768}, which needs the raw
+   * response JSON text). PQ-transport Phase E (cycle 163).
+   */
+  async _mlkemDecryptToString (encryptedData) {
     const { cipherText, encryptedMessage } = encryptedData
 
     let sharedSecret
@@ -486,9 +538,8 @@ export default class Wallet {
       return null
     }
 
-    let decryptedString
     try {
-      decryptedString = new TextDecoder().decode(decryptedUint8)
+      return new TextDecoder().decode(decryptedUint8)
     } catch (e) {
       console.warn('Wallet::decryptMessage() - Decoding failed', e)
       console.info('Wallet::decryptMessage() - my public key', this.pubkey)
@@ -497,8 +548,40 @@ export default class Wallet {
       console.info('Wallet::decryptMessage() - decrypted Uint8Array', decryptedUint8)
       return null
     }
+  }
+
+  /**
+   * Multi-recipient map key for a public key: `Base64_standard(SHAKE256(pubkey_utf8, 8 bytes))`
+   * — matches the validator's `hash_share` and the other SDKs' `hashShare`/`shortHash`.
+   * `shake256(pubkey, 64)` = 64 bits = 8 bytes, hex; hex-decode → standard base64. PQ Phase E.
+   */
+  hashShare (pubkey) {
+    const hex = shake256(pubkey, 64)
+    const bytes = Uint8Array.from(hex.match(/.{2}/g).map(b => parseInt(b, 16)))
+    return this.serializeKey(bytes)
+  }
 
-    return JSON.parse(decryptedString)
+  /**
+   * Post-quantum (ML-KEM768) `CipherHash` request envelope: a stringified single-recipient
+   * map `{ "<hashShare(recipientPubkey)>": {cipherText, encryptedMessage} }` (object-valued,
+   * via {@link encryptMessage}). Matches the Rust validator's CipherHash handler. PQ Phase E.
+   */
+  async encryptStringML768 (message, recipientPubkey) {
+    const envelope = await this.encryptMessage(message, recipientPubkey)
+    return JSON.stringify({ [this.hashShare(recipientPubkey)]: envelope })
+  }
+
+  /**
+   * Decrypt a `CipherHash` response map addressed to THIS wallet's ML-KEM pubkey
+   * (`hashShare(this.pubkey)`) → the RAW decrypted GraphQL response JSON text (NOT JSON.parsed;
+   * it replaces the HTTP response body for the normal parser). `null` if no entry / decrypt fails.
+   */
+  async decryptMyMessageML768 (map) {
+    const envelope = map[this.hashShare(this.pubkey)]
+    if (!envelope) {
+      return null
+    }
+    return this._mlkemDecryptToString(envelope)
   }
 
   async encryptWithSharedSecret (message, sharedSecret) {

package/src/index.js

@@ -91,7 +91,6 @@ import QueryMetaTypeViaAtom from './query/QueryMetaTypeViaAtom.js'
 import QueryMetaTypeViaMolecule from './query/QueryMetaTypeViaMolecule.js'
 import QueryPolicy from './query/QueryPolicy.js'
 import QueryToken from './query/QueryToken.js'
-import QueryUserActivity from './query/QueryUserActivity.js'
 import QueryWalletBundle from './query/QueryWalletBundle.js'
 import QueryWalletList from './query/QueryWalletList.js'
 
@@ -142,7 +141,6 @@ import ResponsePeering from './response/ResponsePeering.js'
 import ResponsePolicy from './response/ResponsePolicy.js'
 import ResponseProposeMolecule from './response/ResponseProposeMolecule.js'
 import ResponseQueryActiveSession from './response/ResponseQueryActiveSession.js'
-import ResponseQueryUserActivity from './response/ResponseQueryUserActivity.js'
 import ResponseRequestAuthorization from './response/ResponseRequestAuthorization.js'
 import ResponseRequestAuthorizationGuest from './response/ResponseRequestAuthorizationGuest.js'
 import ResponseRequestTokens from './response/ResponseRequestTokens.js'
@@ -253,7 +251,6 @@ export {
   QueryMetaTypeViaMolecule,
   QueryPolicy,
   QueryToken,
-  QueryUserActivity,
   QueryWalletBundle,
   QueryWalletList,
 
@@ -298,7 +295,6 @@ export {
   ResponsePolicy,
   ResponseProposeMolecule,
   ResponseQueryActiveSession,
-  ResponseQueryUserActivity,
   ResponseRequestAuthorization,
   ResponseRequestAuthorizationGuest,
   ResponseRequestTokens,

package/src/instance/Rules/Callback.js

@@ -52,6 +52,7 @@ import { isNumeric } from '../../libraries/strings.js'
 import { intersect } from '../../libraries/array.js'
 import CodeException from '../../exception/CodeException.js'
 
+/* eslint-disable accessor-pairs -- intentional setter-only fluent rule builder; values are read directly via __field, no getter needed */
 export default class Callback {
   /**
    *

package/src/instance/Rules/Meta.js

@@ -47,9 +47,7 @@ License: https://github.com/WishKnish/KnishIO-Client-JS/blob/master/LICENSE
 */
 
 export default class Meta {
-  constructor ({}) {
-    const args = arguments[0]
-
+  constructor (args = {}) {
     for (const key in args) {
       this[`__${ key }`] = args[key]
     }

package/src/instance/Rules/Rule.js

@@ -51,6 +51,7 @@ import Condition from './Condition.js'
 import RuleArgumentException from './exception/RuleArgumentException.js'
 import MetaMissingException from '../../exception/MetaMissingException.js'
 
+/* eslint-disable accessor-pairs -- intentional setter-only fluent rule builder; values are read directly via __field, no getter needed */
 export default class Rule {
   /**
    *

package/src/libraries/strings.js

@@ -1,5 +1,6 @@
 import Hex from './Hex.js'
 
+/* eslint-disable no-extend-native -- intentional guarded String.prototype polyfill (trim) + SDK camel/snake-case helpers relied on across the codebase */
 if (!String.prototype.trim) {
   String.prototype.trim = function () {
     return this.replace(/^[\s\uFEFF\xA0]+|[\s\uFEFF\xA0]+$/g, '')

package/src/libraries/urql/UrqlClientWrapper.js

@@ -7,6 +7,25 @@ import {
 import { createClient as createWSClient } from 'graphql-ws'
 import { pipe, map, subscribe } from 'wonka'
 
+// PQ-transport Phase E (cycle 163): the post-quantum CipherHash wrapper query. The validator
+// intercepts the `CipherHash` op, decrypts `$Hash`, executes the inner request, and returns the
+// encrypted response in `{ data: { CipherHash: { hash } } }`.
+const CIPHER_HASH_QUERY = 'query ( $Hash: String! ) { CipherHash ( Hash: $Hash ) { hash } }'
+
+/**
+ * Light parse of a GraphQL request body's operation type + root field name, for the CipherHash
+ * bypass decision (no full GraphQL parse needed). Operation type = the first query/mutation/
+ * subscription keyword (default 'query' for an anonymous `{ ... }`); root field = the first
+ * identifier inside the top-level selection set.
+ */
+function parseOperation (query) {
+  const typeMatch = (query || '').match(/\b(query|mutation|subscription)\b/i)
+  const type = typeMatch ? typeMatch[1].toLowerCase() : 'query'
+  const braceIdx = (query || '').indexOf('{')
+  const nameMatch = braceIdx >= 0 ? query.slice(braceIdx + 1).match(/[A-Za-z_][A-Za-z0-9_]*/) : null
+  return { type, name: nameMatch ? nameMatch[0] : '' }
+}
+
 class UrqlClientWrapper {
   constructor ({ serverUri, socket = null, encrypt = false }) {
     this.$__client = this.createUrqlClient({ serverUri, socket, encrypt })
@@ -44,6 +63,10 @@ class UrqlClientWrapper {
     return createClient({
       url: serverUri,
       exchanges,
+      // PQ-transport Phase E: when encryption is on, route fetch through the CipherHash
+      // wrapper (encrypt the request body to the validator's ML-KEM pubkey, decrypt the
+      // response). Undefined → urql uses the global fetch (plaintext).
+      ...(encrypt ? { fetch: (input, init) => this.cipherFetch(input, init) } : {}),
       fetchOptions: () => ({
         headers: {
           'X-Auth-Token': this.$__authToken
@@ -54,6 +77,71 @@ class UrqlClientWrapper {
     })
   }
 
+  /**
+   * Whether an outgoing GraphQL request body should be wrapped in CipherHash. Bypass (plaintext):
+   * introspection `__schema`, `ContinuId`, the `AccessToken` mutation, and the U-isotope
+   * `ProposeMolecule` (auth bootstrap — the key exchange itself can't be encrypted). Mirrors the
+   * Kotlin/validator bypass set.
+   */
+  shouldEncrypt (body) {
+    let parsed
+    try {
+      parsed = JSON.parse(body)
+    } catch (e) {
+      return false
+    }
+    const { type, name } = parseOperation(parsed.query)
+    if (type === 'query' && (name === '__schema' || name === 'ContinuId')) return false
+    if (type === 'mutation' && name === 'AccessToken') return false
+    if (type === 'mutation' && name === 'ProposeMolecule') {
+      const isotope = parsed.variables && parsed.variables.molecule &&
+        parsed.variables.molecule.atoms && parsed.variables.molecule.atoms[0] &&
+        parsed.variables.molecule.atoms[0].isotope
+      if (isotope === 'U') return false
+    }
+    return true
+  }
+
+  /**
+   * Custom `fetch` that wraps a GraphQL request in the ML-KEM CipherHash envelope and decrypts the
+   * response (PQ-transport Phase E). Operates on the raw POST body (mirrors Kotlin's
+   * encryptBody/decryptBody). Reads the CURRENT client wallet + validator pubkey from auth.
+   */
+  async cipherFetch (input, init) {
+    const wallet = this.getWallet()
+    const serverPubkey = this.getPubKey()
+    let encryptedRequest = false
+    let requestInit = init
+
+    if (wallet && serverPubkey && init && typeof init.body === 'string' && this.shouldEncrypt(init.body)) {
+      const hashVar = await wallet.encryptStringML768(init.body, serverPubkey)
+      requestInit = { ...init, body: JSON.stringify({ query: CIPHER_HASH_QUERY, variables: { Hash: hashVar } }) }
+      encryptedRequest = true
+    }
+
+    const response = await fetch(input, requestInit)
+    if (!encryptedRequest) {
+      return response
+    }
+
+    // Decrypt the CipherHash response back to the inner GraphQL response JSON.
+    const text = await response.text()
+    const init2 = { status: response.status, statusText: response.statusText, headers: response.headers }
+    let parsed
+    try {
+      parsed = JSON.parse(text)
+    } catch (e) {
+      return new Response(text, init2)
+    }
+    const hash = parsed && parsed.data && parsed.data.CipherHash && parsed.data.CipherHash.hash
+    if (typeof hash !== 'string') {
+      // Plaintext (e.g. a validator-side error response) — pass through unchanged.
+      return new Response(text, init2)
+    }
+    const decrypted = await wallet.decryptMyMessageML768(JSON.parse(hash))
+    return new Response(decrypted != null ? decrypted : text, init2)
+  }
+
   setAuthData ({ token, pubkey, wallet }) {
     this.$__authToken = token
     this.$__pubkey = pubkey
@@ -67,24 +155,55 @@ class UrqlClientWrapper {
     })
   }
 
+  /**
+   * Builds the urql operation options forwarded with a query/mutation.
+   *
+   * Forwards the requestPolicy (so a long-lived client does not serve stale
+   * cache-first reads) and, when the caller supplied a per-query abort signal,
+   * the signal too — while re-supplying the X-Auth-Token header. urql REPLACES
+   * (not merges) the client-level fetchOptions with any operation-context
+   * fetchOptions (createRequestOperation builds the op context as
+   * {...baseOpts, ...opts}), so forwarding fetchOptions WITHOUT the header would
+   * drop X-Auth-Token and break auth. The header here is byte-identical to the
+   * client-level one set in createUrqlClient.
+   *
+   * @param {object} context
+   * @returns {object|undefined}
+   */
+  buildRequestOptions (context) {
+    if (!context) {
+      return undefined
+    }
+    const opts = {}
+    if (context.requestPolicy) {
+      opts.requestPolicy = context.requestPolicy
+    }
+    const callerSignal = context.fetchOptions && context.fetchOptions.signal
+    if (callerSignal) {
+      // Combine the per-query abort signal with the 60s timeout so either can
+      // cancel the request; fall back to the caller signal where AbortSignal.any
+      // is unavailable.
+      const signal = (typeof AbortSignal !== 'undefined' && typeof AbortSignal.any === 'function')
+        ? AbortSignal.any([callerSignal, AbortSignal.timeout(60000)])
+        : callerSignal
+      opts.fetchOptions = {
+        headers: { 'X-Auth-Token': this.$__authToken },
+        signal
+      }
+    }
+    return Object.keys(opts).length ? opts : undefined
+  }
+
   async query (request) {
     const { query, variables, context } = request
-    // Forward ONLY urql's requestPolicy (e.g. 'network-only') so a long-lived
-    // client does not serve stale cache-first reads. We deliberately do NOT
-    // forward the whole context: urql REPLACES (not merges) the client-level
-    // fetchOptions with any context.fetchOptions (createRequestOperation builds
-    // the op context as {...baseOpts, ...opts}), which would drop the
-    // X-Auth-Token header set in createUrqlClient and break authentication.
-    const opts = (context && context.requestPolicy) ? { requestPolicy: context.requestPolicy } : undefined
+    const opts = this.buildRequestOptions(context)
     const result = await this.$__client.query(query, variables || {}, opts).toPromise()
     return this.formatResponse(result)
   }
 
   async mutate (request) {
     const { mutation, variables, context } = request
-    // Forward requestPolicy only (see query() — never the whole context, which
-    // would clobber the auth-bearing client-level fetchOptions).
-    const opts = (context && context.requestPolicy) ? { requestPolicy: context.requestPolicy } : undefined
+    const opts = this.buildRequestOptions(context)
     const result = await this.$__client.mutation(mutation, variables || {}, opts).toPromise()
     return this.formatResponse(result)
   }

package/src/mutation/MutationTransferTokens.js

@@ -70,6 +70,24 @@ export default class MutationTransferTokens extends MutationProposeMolecule {
     this.$__molecule.check(this.$__molecule.sourceWallet)
   }
 
+  /**
+   * Fills the Molecule for a MULTI-recipient transfer (WP line 544)
+   *
+   * @param {Wallet[]} recipientWallets
+   * @param {number[]} amounts - parallel to recipientWallets
+   */
+  fillMoleculeMulti ({
+    recipientWallets,
+    amounts
+  }) {
+    this.$__molecule.initValues({
+      recipientWallets,
+      amounts
+    })
+    this.$__molecule.sign({})
+    this.$__molecule.check(this.$__molecule.sourceWallet)
+  }
+
   /**
    * Builds a Response object out of a JSON string
    *

package/src/query/QueryPolicy.js

@@ -48,7 +48,7 @@ License: https://github.com/WishKnish/KnishIO-Client-JS/blob/master/LICENSE
 
 import Query from './Query.js'
 import ResponsePolicy from '../response/ResponsePolicy.js'
-import { gql } from "@urql/core";
+import { gql } from '@urql/core'
 
 export default class QueryPolicy extends Query {
   /**

package/src/response/Response.js

@@ -176,7 +176,7 @@ export default class Response {
   /**
    * Enhanced interface methods for standardized response handling
    */
-  
+
   /**
    * Get error reason (alias for error() to match standardized interface)
    * @return {string|null}
@@ -247,7 +247,7 @@ export default class Response {
    */
   debug (label = null) {
     const debugPrefix = label ? `[${label}]` : `[${this.constructor.name}]`
-    
+
     if (this.success()) {
       console.debug(`${debugPrefix} Success:`, {
         payload: this.payload(),
@@ -261,7 +261,7 @@ export default class Response {
         rawData: this.$__response
       })
     }
-    
+
     return this
   }
 

package/src/response/ResponseActiveSession.js

@@ -46,7 +46,6 @@ Please visit https://github.com/WishKnish/KnishIO-Client-JS for information.
 License: https://github.com/WishKnish/KnishIO-Client-JS/blob/master/LICENSE
 */
 
-import Query from '../query/Query.js'
 import Response from './Response.js'
 
 export default class ResponseActiveSession extends Response {

package/src/response/ResponseAtom.js

@@ -46,7 +46,6 @@ Please visit https://github.com/WishKnish/KnishIO-Client-JS for information.
 License: https://github.com/WishKnish/KnishIO-Client-JS/blob/master/LICENSE
 */
 
-import Query from '../query/Query.js'
 import Response from './Response.js'
 
 /**

package/src/response/ResponseAuthorizationGuest.js

@@ -46,7 +46,6 @@ Please visit https://github.com/WishKnish/KnishIO-Client-JS for information.
 License: https://github.com/WishKnish/KnishIO-Client-JS/blob/master/LICENSE
 */
 
-import Query from '../query/Query.js'
 import Response from './Response.js'
 import Dot from '../libraries/Dot.js'
 import InvalidResponseException from '../exception/InvalidResponseException.js'

package/src/response/ResponseBalance.js

@@ -45,7 +45,6 @@ Please visit https://github.com/WishKnish/KnishIO-Client-JS for information.
 
 License: https://github.com/WishKnish/KnishIO-Client-JS/blob/master/LICENSE
 */
-import Query from '../query/Query.js'
 import Response from './Response.js'
 import ResponseWalletList from './ResponseWalletList.js'
 

package/src/response/ResponseContinuId.js

@@ -45,7 +45,6 @@ Please visit https://github.com/WishKnish/KnishIO-Client-JS for information.
 
 License: https://github.com/WishKnish/KnishIO-Client-JS/blob/master/LICENSE
 */
-import Query from '../query/Query.js'
 import Response from './Response.js'
 import Wallet from '../Wallet.js'
 

package/src/response/ResponseLinkIdentifier.js

@@ -45,7 +45,6 @@ Please visit https://github.com/WishKnish/KnishIO-Client-JS for information.
 
 License: https://github.com/WishKnish/KnishIO-Client-JS/blob/master/LICENSE
 */
-import Query from '../query/Query.js'
 import Response from './Response.js'
 import Dot from '../libraries/Dot.js'
 

package/src/response/ResponseMetaType.js

@@ -46,7 +46,6 @@ Please visit https://github.com/WishKnish/KnishIO-Client-JS for information.
 License: https://github.com/WishKnish/KnishIO-Client-JS/blob/master/LICENSE
 */
 
-import Query from '../query/Query.js'
 import Response from './Response.js'
 
 /**

package/src/response/ResponseMetaTypeViaAtom.js

@@ -46,7 +46,6 @@ Please visit https://github.com/WishKnish/KnishIO-Client-JS for information.
 License: https://github.com/WishKnish/KnishIO-Client-JS/blob/master/LICENSE
 */
 
-import Query from '../query/Query.js'
 import Response from './Response.js'
 
 export default class ResponseMetaTypeViaAtom extends Response {

package/src/response/ResponseMetaTypeViaMolecule.js

@@ -46,7 +46,6 @@ Please visit https://github.com/WishKnish/KnishIO-Client-JS for information.
 License: https://github.com/WishKnish/KnishIO-Client-JS/blob/master/LICENSE
 */
 
-import Query from '../query/Query.js'
 import Response from './Response.js'
 import CheckMolecule from '../libraries/CheckMolecule.js'
 

package/src/response/ResponsePolicy.js

@@ -46,7 +46,6 @@ Please visit https://github.com/WishKnish/KnishIO-Client-JS for information.
 License: https://github.com/WishKnish/KnishIO-Client-JS/blob/master/LICENSE
 */
 
-import Query from '../query/Query.js'
 import Response from './Response.js'
 
 export default class ResponsePolicy extends Response {

package/src/response/ResponseQueryActiveSession.js

@@ -46,7 +46,6 @@ Please visit https://github.com/WishKnish/KnishIO-Client-JS for information.
 License: https://github.com/WishKnish/KnishIO-Client-JS/blob/master/LICENSE
 */
 
-import Query from '../query/Query.js'
 import Response from './Response.js'
 
 /**

package/src/response/ResponseWalletBundle.js

@@ -45,7 +45,6 @@ Please visit https://github.com/WishKnish/KnishIO-Client-JS for information.
 
 License: https://github.com/WishKnish/KnishIO-Client-JS/blob/master/LICENSE
 */
-import Query from '../query/Query.js'
 import Response from './Response.js'
 import Meta from '../Meta.js'
 

package/src/response/ResponseWalletList.js

@@ -45,7 +45,6 @@ Please visit https://github.com/WishKnish/KnishIO-Client-JS for information.
 
 License: https://github.com/WishKnish/KnishIO-Client-JS/blob/master/LICENSE
 */
-import Query from '../query/Query.js'
 import Response from './Response.js'
 import Wallet from '../Wallet.js'
 import TokenUnit from '../TokenUnit.js'