@xdevplatform/chat-xdk 0.2.0 → 0.2.1

package/index.d.ts

@@ -496,13 +496,18 @@ export interface AttachmentInfo {
 export interface CreateChatOptions {
   /** 
    * Juicebox configuration JSON from the X API.
-   * Obtain this from: GET /2/dm/encryption/juicebox/config
+   * Obtain this from the `juicebox_config` field of
+   * GET /2/users/:id/public_keys (your own user, `public_key.fields=juicebox_config`).
    *
-   * Accepted shapes match the native bindings: the `sdk_config` wrapper
-   * (its embedded SDK config string is unwrapped for the Juicebox client),
-   * the `token_map` array (converted to a realms config with majority
-   * recover threshold), or a raw realms config. Realm auth tokens always
-   * come from `getAuthToken`, not the config.
+   * Accepted shapes match the native bindings and are checked in this
+   * order: the `sdk_config` wrapper (its embedded SDK config string is
+   * unwrapped for the Juicebox client), the X API `juicebox_config` object
+   * (its `key_store_token_map_json` string is used verbatim so realm public
+   * keys and server thresholds are preserved), a bare `token_map` array
+   * (converted to a realms config with majority recover threshold — no
+   * realm public keys, so only suitable for realms that don't require
+   * them), or a raw realms config. Realm auth tokens always come from
+   * `getAuthToken`, not the config.
    */
   juiceboxConfig: string;
   
@@ -527,7 +532,8 @@ export interface CreateChatOptions {
    * A non-negative integer wins over the config, including across later
    * `updateConfig()` calls. When omitted, the config's `max_guess_count`
    * applies when it is a non-negative integer (0 included), defaulting to
-   * 20 for the `sdk_config` shape and 5 otherwise.
+   * 20 for the `sdk_config` and `key_store_token_map_json` shapes and 5
+   * otherwise.
    */
   maxGuessCount?: number;
 }

package/index.js

@@ -159,8 +159,9 @@ async function loadJuiceboxSdk() {
  * Resolve the PIN guess budget for Juicebox registration, matching the
  * native bindings: a `max_guess_count` that is a non-negative integer
  * (including 0) applies as-is; a fractional, negative, or non-numeric value
- * falls back to the shape default — 20 for the `sdk_config` shape, 5
- * otherwise. An explicit `maxGuessCount` option overrides the config under
+ * falls back to the shape default — 20 for the `sdk_config` and
+ * `key_store_token_map_json` shapes, 5 otherwise. An explicit
+ * `maxGuessCount` option overrides the config under
  * the same integer rule. Exported for tests; `createChat` calls it
  * internally.
  *
@@ -176,25 +177,54 @@ export function resolveMaxGuessCount(configValue, maxGuessCount) {
   if (Number.isSafeInteger(fromConfig) && fromConfig >= 0) {
     return fromConfig;
   }
-  return typeof configValue?.sdk_config === "string" ? 20 : 5;
+  return typeof configValue?.sdk_config === "string" ||
+    typeof configValue?.key_store_token_map_json === "string"
+    ? 20
+    : 5;
 }
 
 /**
  * Derive the value to hand the Juicebox `Configuration` constructor from a
  * parsed X API config. The `sdk_config` wrapper shape is unwrapped to its
  * embedded SDK config JSON string (which the Juicebox constructor accepts
- * directly); a raw realms config passes through unchanged; the `token_map`
- * shape (an array of `{ key, value: { address } }` entries) is converted to
- * a realms config with majority recover threshold, the same derivation the
- * native bindings apply. A non-array `token_map` is rejected here, with the
- * same message the core parser uses, rather than handed to the Juicebox
- * constructor to fail obscurely. Realm auth tokens are not taken from the
- * config in this wrapper — they come from the `getAuthToken` callback.
+ * directly); the X API `juicebox_config` object shape is unwrapped to its
+ * `key_store_token_map_json` string, which is used **verbatim** because it
+ * carries each realm's `public_key` and the server's register/recover
+ * thresholds — the realms require both; a raw realms config passes through
+ * unchanged; a bare `token_map` shape (an array of
+ * `{ key, value: { address } }` entries, no `key_store_token_map_json`) is
+ * converted to a realms config with majority recover threshold, the same
+ * derivation the native bindings apply. A non-array `token_map` is rejected
+ * here, with the same message the core parser uses, rather than handed to
+ * the Juicebox constructor to fail obscurely. Realm auth tokens are not
+ * taken from the config in this wrapper — they come from the `getAuthToken`
+ * callback.
  */
 export function juiceboxClientConfig(configValue) {
   if (typeof configValue?.sdk_config === "string") {
     return configValue.sdk_config;
   }
+  if (configValue?.key_store_token_map_json !== undefined) {
+    if (typeof configValue.key_store_token_map_json !== "string") {
+      throw new Error("key_store_token_map_json must be a string");
+    }
+    // A malformed embedded config is an error rather than a fall-through to
+    // the lossy token_map derivation, which would silently drop the realm
+    // public keys and produce configs that can never reach the recover
+    // threshold. It must parse to a JSON object — merely valid JSON like
+    // "42" or "[]" would be handed to the Juicebox constructor to fail
+    // obscurely at setup/unlock time.
+    let parsed;
+    try {
+      parsed = JSON.parse(configValue.key_store_token_map_json);
+    } catch (e) {
+      throw new Error(`Invalid key_store_token_map_json: ${e.message}`);
+    }
+    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+      throw new Error("Invalid key_store_token_map_json: not a JSON object");
+    }
+    return configValue.key_store_token_map_json;
+  }
   if (
     configValue?.token_map !== undefined &&
     configValue?.realms === undefined &&

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xdevplatform/chat-xdk",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "X Chat SDK - End-to-end encryption for X Direct Messages",
   "type": "module",
   "main": "index.js",

package/pkg/package.json

@@ -2,7 +2,7 @@
   "name": "chat-xdk-wasm",
   "type": "module",
   "description": "X Chat SDK - WebAssembly bindings for JavaScript/TypeScript",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "license": "MIT",
   "repository": {
     "type": "git",