@zapo-js/fake-server 0.3.0

package/dist/protocol/signal/fake-peer-session.js

@@ -0,0 +1,207 @@
+"use strict";
+/**
+ * Fake-peer-side Signal Protocol session.
+ *
+ * This is the encrypter half: a fake peer (acting as "Alice") sends messages
+ * to the real `WaClient` (acting as "Bob"). It implements just enough of
+ * the WhatsApp Web Signal Protocol to:
+ *
+ *   1. Run X3DH against the client's prekey bundle (captured from the
+ *      client's PreKey upload IQ).
+ *   2. Maintain a sending chain key.
+ *   3. Encrypt a plaintext into a `PreKeySignalMessage` (first message)
+ *      or `SignalMessage` (subsequent messages).
+ *
+ * Sources:
+ *   /deobfuscated/WASignal/WASignalWhitepaper.js          (X3DH inputs)
+ *   /deobfuscated/WASignal/WASignalSessions.js            (session structure)
+ *   /deobfuscated/WASignal/WASignalCipher.js              (encrypt path)
+ *   /deobfuscated/pb/WASignalWhisperTextProtocol_pb.js    (protobuf shapes)
+ *
+ * Cross-checked against the lib's `initiateSessionOutgoing` /
+ * `encryptMsg` (`src/signal/session/SignalSession.ts`,
+ * `src/signal/session/SignalRatchet.ts`) — the byte-level recipe is the
+ * same; the only difference is that this fake-peer implementation does
+ * **not** persist sessions or implement the receive ratchet (the fake
+ * server doesn't need to handle inbound messages from the real client to
+ * make Phase 8 work).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FakePeerSession = void 0;
+exports.generateFakePeerIdentity = generateFakePeerIdentity;
+const crypto_1 = require("../../transport/crypto");
+const protos_1 = require("../../transport/protos");
+const SIGNAL_VERSION = 3;
+const SIGNAL_MAC_SIZE = 8;
+const SIGNAL_PREFIX_FF = new Uint8Array(32).fill(0xff);
+const MESSAGE_KEY_LABEL = new Uint8Array([1]);
+const CHAIN_KEY_LABEL = new Uint8Array([2]);
+async function generateFakePeerIdentity() {
+    const identityKeyPair = await crypto_1.X25519.generateKeyPair();
+    return {
+        identityKeyPair,
+        registrationId: Math.floor(Math.random() * 0x3fff) + 1
+    };
+}
+class FakePeerSession {
+    constructor(identity, localPub, remotePub, rootKey, sendChain, firstMessageHeader) {
+        this.identity = identity;
+        this.localPub = localPub;
+        this.remotePub = remotePub;
+        this.rootKey = rootKey;
+        this.sendChain = sendChain;
+        this.firstMessageHeader = firstMessageHeader;
+    }
+    get registrationId() {
+        return this.identity.registrationId;
+    }
+    /**
+     * Initiates a new outgoing session against the client's prekey bundle.
+     *
+     * Mirrors the X3DH initiator path of `initiateSessionOutgoing` (lib)
+     * and the deobfuscated `WASignalSessions.initiateSessionOutgoing`:
+     *
+     *   localOneTimeBase = generate ephemeral keypair (Alice's "base key")
+     *
+     *   DH1 = ECDH(local.identity.priv, remote.signedPreKey.pub)
+     *   DH2 = ECDH(localOneTimeBase.priv, remote.identity.pub)
+     *   DH3 = ECDH(localOneTimeBase.priv, remote.signedPreKey.pub)
+     *   DH4 = ECDH(localOneTimeBase.priv, remote.oneTimePreKey.pub)  [optional]
+     *
+     *   secret = 0xFF*32 || DH1 || DH2 || DH3 || [DH4]
+     *   [rootKey, chainKey] = HKDF_split(secret, salt=null, info="WhisperText")
+     *
+     *   Then a single send-ratchet kick:
+     *     sendRatchetKeyPair = generateKeyPair()
+     *     sharedSecret = ECDH(sendRatchetKeyPair.priv, remoteRatchetKey)
+     *     [rootKey, chainKey] = HKDF_split(sharedSecret, salt=rootKey, info="WhisperRatchet")
+     *
+     *   Where remoteRatchetKey = remote.signedPreKey.pub (no separate
+     *   ratchet key in the upload IQ — this matches the lib's behavior).
+     */
+    static async initiate(identity, bundle, oneTimePreKey) {
+        const localPub = (0, crypto_1.toSerializedPubKey)(identity.identityKeyPair.pubKey);
+        const remoteIdentity = (0, crypto_1.toSerializedPubKey)(bundle.identityKey);
+        const remoteSigned = (0, crypto_1.toSerializedPubKey)(bundle.signedPreKey.publicKey);
+        const localBase = await crypto_1.X25519.generateKeyPair();
+        const localBaseSerialized = (0, crypto_1.toSerializedPubKey)(localBase.pubKey);
+        // Resolve which one-time prekey we're consuming. Callers normally pass
+        // the one we want to consume; if omitted, take the first.
+        const consumedOneTime = oneTimePreKey ?? bundle.preKeys[0];
+        const remoteOneTime = consumedOneTime ? (0, crypto_1.toSerializedPubKey)(consumedOneTime.publicKey) : null;
+        // X3DH DHs.
+        const [dh1, dh2, dh3, dh4] = await Promise.all([
+            crypto_1.X25519.scalarMult(identity.identityKeyPair.privKey, (0, crypto_1.toRawPubKey)(remoteSigned)),
+            crypto_1.X25519.scalarMult(localBase.privKey, (0, crypto_1.toRawPubKey)(remoteIdentity)),
+            crypto_1.X25519.scalarMult(localBase.privKey, (0, crypto_1.toRawPubKey)(remoteSigned)),
+            remoteOneTime
+                ? crypto_1.X25519.scalarMult(localBase.privKey, (0, crypto_1.toRawPubKey)(remoteOneTime))
+                : Promise.resolve(null)
+        ]);
+        const sharedParts = [SIGNAL_PREFIX_FF, dh1, dh2, dh3];
+        if (dh4)
+            sharedParts.push(dh4);
+        const shared = concatBytes(sharedParts);
+        const [rootKey, chainKey] = await (0, crypto_1.hkdfSplit)(shared, null, 'WhisperText');
+        // Single send-ratchet kick: generate sendRatchet, mix DH(send.priv, remoteSigned).
+        const sendRatchet = await crypto_1.X25519.generateKeyPair();
+        const ratchetSecret = await crypto_1.X25519.scalarMult(sendRatchet.privKey, (0, crypto_1.toRawPubKey)(remoteSigned));
+        const [nextRootKey, sendChainKey] = await (0, crypto_1.hkdfSplit)(ratchetSecret, rootKey, 'WhisperRatchet');
+        const sendChain = {
+            ratchetPubKey: (0, crypto_1.toSerializedPubKey)(sendRatchet.pubKey),
+            ratchetPrivKey: sendRatchet.privKey,
+            chainKey: sendChainKey,
+            nextIndex: 0
+        };
+        // Pin the chain key reference to silence "ts(6133): never read" — it
+        // is read on every encrypt() invocation. (Defensive no-op.)
+        void chainKey;
+        return new FakePeerSession(identity, localPub, remoteIdentity, nextRootKey, sendChain, {
+            preKeyId: consumedOneTime?.keyId,
+            signedPreKeyId: bundle.signedPreKey.keyId,
+            baseKey: localBaseSerialized
+        });
+    }
+    /**
+     * Encrypts a plaintext message and returns either a `pkmsg` (first
+     * message in the session — wraps the SignalMessage in a
+     * PreKeySignalMessage envelope) or `msg` (subsequent messages).
+     */
+    async encrypt(plaintext) {
+        const { nextChainKey, messageKey } = await deriveMessageKey(this.sendChain.nextIndex, this.sendChain.chainKey);
+        const [cipherKey, macKey] = await Promise.all([
+            (0, crypto_1.importAesCbcKey)(messageKey.cipherKey),
+            (0, crypto_1.importHmacKey)(messageKey.macKey)
+        ]);
+        const ciphertext = await (0, crypto_1.aesCbcEncrypt)(cipherKey, messageKey.iv, plaintext);
+        const signalMessage = protos_1.proto.SignalMessage.encode({
+            ratchetKey: this.sendChain.ratchetPubKey,
+            counter: messageKey.index,
+            previousCounter: 0,
+            ciphertext
+        }).finish();
+        const versioned = (0, crypto_1.prependVersion)(signalMessage, SIGNAL_VERSION);
+        const macInput = concatBytes([this.localPub, this.remotePub, versioned]);
+        const fullMac = await (0, crypto_1.hmacSign)(macKey, macInput);
+        const truncatedMac = fullMac.subarray(0, SIGNAL_MAC_SIZE);
+        const inner = concatBytes([versioned, truncatedMac]);
+        // Advance chain (single-direction; no ratchet rotation in fake peer).
+        this.sendChain = {
+            ...this.sendChain,
+            chainKey: nextChainKey,
+            nextIndex: messageKey.index + 1
+        };
+        // rootKey is unused after the initial kick because we never rotate
+        // ratchets on the peer side. Keep the field for completeness.
+        void this.rootKey;
+        if (this.firstMessageHeader) {
+            const header = this.firstMessageHeader;
+            this.firstMessageHeader = null;
+            const preKeyMessage = protos_1.proto.PreKeySignalMessage.encode({
+                registrationId: this.identity.registrationId,
+                preKeyId: header.preKeyId,
+                signedPreKeyId: header.signedPreKeyId,
+                baseKey: header.baseKey,
+                identityKey: this.localPub,
+                message: inner
+            }).finish();
+            return {
+                type: 'pkmsg',
+                ciphertext: (0, crypto_1.prependVersion)(preKeyMessage, SIGNAL_VERSION)
+            };
+        }
+        return { type: 'msg', ciphertext: inner };
+    }
+}
+exports.FakePeerSession = FakePeerSession;
+async function deriveMessageKey(index, chainKey) {
+    const hmacKey = await (0, crypto_1.importHmacKey)(chainKey);
+    const [messageInputKey, nextChainRaw] = await Promise.all([
+        (0, crypto_1.hmacSign)(hmacKey, MESSAGE_KEY_LABEL),
+        (0, crypto_1.hmacSign)(hmacKey, CHAIN_KEY_LABEL)
+    ]);
+    const expanded = await (0, crypto_1.hkdf)(messageInputKey, null, 'WhisperMessageKeys', 80);
+    const messageKey = {
+        index,
+        cipherKey: expanded.subarray(0, 32),
+        macKey: expanded.subarray(32, 64),
+        iv: expanded.subarray(64, 80)
+    };
+    return {
+        nextChainKey: nextChainRaw.subarray(0, 32),
+        messageKey
+    };
+}
+function concatBytes(parts) {
+    let total = 0;
+    for (const part of parts)
+        total += part.byteLength;
+    const out = new Uint8Array(total);
+    let offset = 0;
+    for (const part of parts) {
+        out.set(part, offset);
+        offset += part.byteLength;
+    }
+    return out;
+}
+//# sourceMappingURL=fake-peer-session.js.map

package/dist/protocol/signal/fake-peer-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake-peer-session.js","sourceRoot":"","sources":["../../../src/protocol/signal/fake-peer-session.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;;;AAiCH,4DAMC;AArCD,mDAa+B;AAC/B,mDAA8C;AAI9C,MAAM,cAAc,GAAG,CAAC,CAAA;AACxB,MAAM,eAAe,GAAG,CAAC,CAAA;AACzB,MAAM,gBAAgB,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACtD,MAAM,iBAAiB,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAC7C,MAAM,eAAe,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AASpC,KAAK,UAAU,wBAAwB;IAC1C,MAAM,eAAe,GAAG,MAAM,eAAM,CAAC,eAAe,EAAE,CAAA;IACtD,OAAO;QACH,eAAe;QACf,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC;KACzD,CAAA;AACL,CAAC;AAmBD,MAAa,eAAe;IAUxB,YACI,QAA0B,EAC1B,QAAoB,EACpB,SAAqB,EACrB,OAAmB,EACnB,SAAyB,EACzB,kBAAuC;QAEvC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACxB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAA;QACxB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAC1B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAA;QAC1B,IAAI,CAAC,kBAAkB,GAAG,kBAAkB,CAAA;IAChD,CAAC;IAED,IAAW,cAAc;QACrB,OAAO,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAA;IACvC,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACI,MAAM,CAAC,KAAK,CAAC,QAAQ,CACxB,QAA0B,EAC1B,MAA0B,EAC1B,aAA0E;QAE1E,MAAM,QAAQ,GAAG,IAAA,2BAAkB,EAAC,QAAQ,CAAC,eAAe,CAAC,MAAM,CAAC,CAAA;QACpE,MAAM,cAAc,GAAG,IAAA,2BAAkB,EAAC,MAAM,CAAC,WAAW,CAAC,CAAA;QAC7D,MAAM,YAAY,GAAG,IAAA,2BAAkB,EAAC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;QAEtE,MAAM,SAAS,GAAG,MAAM,eAAM,CAAC,eAAe,EAAE,CAAA;QAChD,MAAM,mBAAmB,GAAG,IAAA,2BAAkB,EAAC,SAAS,CAAC,MAAM,CAAC,CAAA;QAEhE,uEAAuE;QACvE,0DAA0D;QAC1D,MAAM,eAAe,GAAG,aAAa,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAA;QAC1D,MAAM,aAAa,GAAG,eAAe,CAAC,CAAC,CAAC,IAAA,2BAAkB,EAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;QAE5F,YAAY;QACZ,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC3C,eAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,eAAe,CAAC,OAAO,EAAE,IAAA,oBAAW,EAAC,YAAY,CAAC,CAAC;YAC9E,eAAM,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,IAAA,oBAAW,EAAC,cAAc,CAAC,CAAC;YACjE,eAAM,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,IAAA,oBAAW,EAAC,YAAY,CAAC,CAAC;YAC/D,aAAa;gBACT,CAAC,CAAC,eAAM,CAAC,UAAU,CAAC,SAAS,CAAC,OAAO,EAAE,IAAA,oBAAW,EAAC,aAAa,CAAC,CAAC;gBAClE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAoB,IAAI,CAAC;SACjD,CAAC,CAAA;QACF,MAAM,WAAW,GAAiB,CAAC,gBAAgB,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAA;QACnE,IAAI,GAAG;YAAE,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC9B,MAAM,MAAM,GAAG,WAAW,CAAC,WAAW,CAAC,CAAA;QAEvC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,MAAM,IAAA,kBAAS,EAAC,MAAM,EAAE,IAAI,EAAE,aAAa,CAAC,CAAA;QAExE,mFAAmF;QACnF,MAAM,WAAW,GAAG,MAAM,eAAM,CAAC,eAAe,EAAE,CAAA;QAClD,MAAM,aAAa,GAAG,MAAM,eAAM,CAAC,UAAU,CACzC,WAAW,CAAC,OAAO,EACnB,IAAA,oBAAW,EAAC,YAAY,CAAC,CAC5B,CAAA;QACD,MAAM,CAAC,WAAW,EAAE,YAAY,CAAC,GAAG,MAAM,IAAA,kBAAS,EAC/C,aAAa,EACb,OAAO,EACP,gBAAgB,CACnB,CAAA;QAED,MAAM,SAAS,GAAmB;YAC9B,aAAa,EAAE,IAAA,2BAAkB,EAAC,WAAW,CAAC,MAAM,CAAC;YACrD,cAAc,EAAE,WAAW,CAAC,OAAO;YACnC,QAAQ,EAAE,YAAY;YACtB,SAAS,EAAE,CAAC;SACf,CAAA;QAED,qEAAqE;QACrE,4DAA4D;QAC5D,KAAK,QAAQ,CAAA;QAEb,OAAO,IAAI,eAAe,CAAC,QAAQ,EAAE,QAAQ,EAAE,cAAc,EAAE,WAAW,EAAE,SAAS,EAAE;YACnF,QAAQ,EAAE,eAAe,EAAE,KAAK;YAChC,cAAc,EAAE,MAAM,CAAC,YAAY,CAAC,KAAK;YACzC,OAAO,EAAE,mBAAmB;SAC/B,CAAC,CAAA;IACN,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,OAAO,CAChB,SAAqB;QAErB,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,GAAG,MAAM,gBAAgB,CACvD,IAAI,CAAC,SAAS,CAAC,SAAS,EACxB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAC1B,CAAA;QACD,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC1C,IAAA,wBAAe,EAAC,UAAU,CAAC,SAAS,CAAC;YACrC,IAAA,sBAAa,EAAC,UAAU,CAAC,MAAM,CAAC;SACnC,CAAC,CAAA;QACF,MAAM,UAAU,GAAG,MAAM,IAAA,sBAAa,EAAC,SAAS,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,CAAC,CAAA;QAE3E,MAAM,aAAa,GAAG,cAAK,CAAC,aAAa,CAAC,MAAM,CAAC;YAC7C,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,aAAa;YACxC,OAAO,EAAE,UAAU,CAAC,KAAK;YACzB,eAAe,EAAE,CAAC;YAClB,UAAU;SACb,CAAC,CAAC,MAAM,EAAE,CAAA;QACX,MAAM,SAAS,GAAG,IAAA,uBAAc,EAAC,aAAa,EAAE,cAAc,CAAC,CAAA;QAE/D,MAAM,QAAQ,GAAG,WAAW,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAA;QACxE,MAAM,OAAO,GAAG,MAAM,IAAA,iBAAQ,EAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;QAChD,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,eAAe,CAAC,CAAA;QACzD,MAAM,KAAK,GAAG,WAAW,CAAC,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC,CAAA;QAEpD,sEAAsE;QACtE,IAAI,CAAC,SAAS,GAAG;YACb,GAAG,IAAI,CAAC,SAAS;YACjB,QAAQ,EAAE,YAAY;YACtB,SAAS,EAAE,UAAU,CAAC,KAAK,GAAG,CAAC;SAClC,CAAA;QACD,mEAAmE;QACnE,8DAA8D;QAC9D,KAAK,IAAI,CAAC,OAAO,CAAA;QAEjB,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,kBAAkB,CAAA;YACtC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAA;YAC9B,MAAM,aAAa,GAAG,cAAK,CAAC,mBAAmB,CAAC,MAAM,CAAC;gBACnD,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,cAAc;gBAC5C,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,cAAc,EAAE,MAAM,CAAC,cAAc;gBACrC,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,WAAW,EAAE,IAAI,CAAC,QAAQ;gBAC1B,OAAO,EAAE,KAAK;aACjB,CAAC,CAAC,MAAM,EAAE,CAAA;YACX,OAAO;gBACH,IAAI,EAAE,OAAO;gBACb,UAAU,EAAE,IAAA,uBAAc,EAAC,aAAa,EAAE,cAAc,CAAC;aAC5D,CAAA;QACL,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,CAAA;IAC7C,CAAC;CACJ;AA/KD,0CA+KC;AASD,KAAK,UAAU,gBAAgB,CAC3B,KAAa,EACb,QAAoB;IAEpB,MAAM,OAAO,GAAG,MAAM,IAAA,sBAAa,EAAC,QAAQ,CAAC,CAAA;IAC7C,MAAM,CAAC,eAAe,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACtD,IAAA,iBAAQ,EAAC,OAAO,EAAE,iBAAiB,CAAC;QACpC,IAAA,iBAAQ,EAAC,OAAO,EAAE,eAAe,CAAC;KACrC,CAAC,CAAA;IACF,MAAM,QAAQ,GAAG,MAAM,IAAA,aAAI,EAAC,eAAe,EAAE,IAAI,EAAE,oBAAoB,EAAE,EAAE,CAAC,CAAA;IAC5E,MAAM,UAAU,GAAsB;QAClC,KAAK;QACL,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;QACnC,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC;QACjC,EAAE,EAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC;KAChC,CAAA;IACD,OAAO;QACH,YAAY,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;QAC1C,UAAU;KACb,CAAA;AACL,CAAC;AAED,SAAS,WAAW,CAAC,KAA4B;IAC7C,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,KAAK,IAAI,IAAI,CAAC,UAAU,CAAA;IAClD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAA;IACjC,IAAI,MAAM,GAAG,CAAC,CAAA;IACd,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QACrB,MAAM,IAAI,IAAI,CAAC,UAAU,CAAA;IAC7B,CAAC;IACD,OAAO,GAAG,CAAA;AACd,CAAC"}

package/dist/protocol/signal/fake-sender-key.d.ts

@@ -0,0 +1,15 @@
+/** SenderKey state used by fake peers for group encryption. */
+export interface FakeSenderKeyEncryptionResult {
+    readonly ciphertext: Uint8Array;
+    readonly distributionMessage: Uint8Array;
+    readonly keyId: number;
+}
+export declare class FakeSenderKey {
+    private state;
+    private constructor();
+    static generate(): Promise<FakeSenderKey>;
+    get id(): number;
+    encrypt(plaintext: Uint8Array): Promise<FakeSenderKeyEncryptionResult>;
+    private buildDistributionMessage;
+}
+//# sourceMappingURL=fake-sender-key.d.ts.map

package/dist/protocol/signal/fake-sender-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake-sender-key.d.ts","sourceRoot":"","sources":["../../../src/protocol/signal/fake-sender-key.ts"],"names":[],"mappings":"AAAA,+DAA+D;AA6B/D,MAAM,WAAW,6BAA6B;IAC1C,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAA;IAC/B,QAAQ,CAAC,mBAAmB,EAAE,UAAU,CAAA;IACxC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACzB;AAED,qBAAa,aAAa;IACtB,OAAO,CAAC,KAAK,CAAgB;IAE7B,OAAO;WAIa,QAAQ,IAAI,OAAO,CAAC,aAAa,CAAC;IAetD,IAAW,EAAE,IAAI,MAAM,CAEtB;IAEY,OAAO,CAAC,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,6BAA6B,CAAC;IAsCnF,OAAO,CAAC,wBAAwB;CASnC"}

package/dist/protocol/signal/fake-sender-key.js

@@ -0,0 +1,91 @@
+"use strict";
+/** SenderKey state used by fake peers for group encryption. */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FakeSenderKey = void 0;
+const crypto_1 = require("../../transport/crypto");
+const protos_1 = require("../../transport/protos");
+const SIGNAL_GROUP_VERSION = 3;
+const WHISPER_GROUP_INFO = new TextEncoder().encode('WhisperGroup');
+const MESSAGE_KEY_LABEL = new Uint8Array([1]);
+const CHAIN_KEY_LABEL = new Uint8Array([2]);
+class FakeSenderKey {
+    constructor(state) {
+        this.state = state;
+    }
+    static async generate() {
+        const [chainKey, signingKeyPair, idBytes] = await Promise.all([
+            (0, crypto_1.randomBytesAsync)(32),
+            crypto_1.X25519.generateKeyPair(),
+            (0, crypto_1.randomBytesAsync)(4)
+        ]);
+        const id = ((idBytes[0] << 24) | (idBytes[1] << 16) | (idBytes[2] << 8) | idBytes[3]) >>> 0;
+        return new FakeSenderKey({
+            id,
+            chainKey,
+            iteration: 0,
+            signingKeyPair
+        });
+    }
+    get id() {
+        return this.state.id;
+    }
+    async encrypt(plaintext) {
+        const distributionMessage = this.buildDistributionMessage();
+        const { messageKey, nextChainKey } = await deriveSenderKeyMessageKey(this.state.iteration, this.state.chainKey);
+        const { iv, cipherKey } = splitSenderKeyMessageSeed(messageKey.seed);
+        const cipherKeyHandle = await (0, crypto_1.importAesCbcKey)(cipherKey);
+        const ciphertext = await (0, crypto_1.aesCbcEncrypt)(cipherKeyHandle, iv, plaintext);
+        const senderKeyMessage = protos_1.proto.SenderKeyMessage.encode({
+            id: this.state.id,
+            iteration: messageKey.iteration,
+            ciphertext
+        }).finish();
+        const versioned = (0, crypto_1.prependVersion)(senderKeyMessage, SIGNAL_GROUP_VERSION);
+        const signature = await (0, crypto_1.xeddsaSign)(this.state.signingKeyPair.privKey, versioned);
+        const finalCiphertext = new Uint8Array(versioned.byteLength + signature.byteLength);
+        finalCiphertext.set(versioned, 0);
+        finalCiphertext.set(signature, versioned.byteLength);
+        this.state = {
+            ...this.state,
+            chainKey: nextChainKey,
+            iteration: messageKey.iteration + 1
+        };
+        return {
+            ciphertext: finalCiphertext,
+            distributionMessage,
+            keyId: this.state.id
+        };
+    }
+    buildDistributionMessage() {
+        const proto1 = protos_1.proto.SenderKeyDistributionMessage.encode({
+            id: this.state.id,
+            iteration: this.state.iteration,
+            chainKey: this.state.chainKey,
+            signingKey: (0, crypto_1.toSerializedPubKey)(this.state.signingKeyPair.pubKey)
+        }).finish();
+        return (0, crypto_1.prependVersion)(proto1, SIGNAL_GROUP_VERSION);
+    }
+}
+exports.FakeSenderKey = FakeSenderKey;
+async function deriveSenderKeyMessageKey(iteration, chainKey) {
+    const hmacKey = await (0, crypto_1.importHmacKey)(chainKey);
+    const [messageInputKey, nextChainRaw] = await Promise.all([
+        (0, crypto_1.hmacSign)(hmacKey, MESSAGE_KEY_LABEL),
+        (0, crypto_1.hmacSign)(hmacKey, CHAIN_KEY_LABEL)
+    ]);
+    const seed = await (0, crypto_1.hkdf)(messageInputKey, null, WHISPER_GROUP_INFO, 50);
+    return {
+        messageKey: { iteration, seed },
+        nextChainKey: nextChainRaw.subarray(0, 32)
+    };
+}
+function splitSenderKeyMessageSeed(seed) {
+    if (seed.byteLength < 48) {
+        throw new Error(`sender key message seed too short: ${seed.byteLength}`);
+    }
+    return {
+        iv: seed.subarray(0, 16),
+        cipherKey: seed.subarray(16, 48)
+    };
+}
+//# sourceMappingURL=fake-sender-key.js.map

package/dist/protocol/signal/fake-sender-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake-sender-key.js","sourceRoot":"","sources":["../../../src/protocol/signal/fake-sender-key.ts"],"names":[],"mappings":";AAAA,+DAA+D;;;AAE/D,mDAY+B;AAC/B,mDAA8C;AAE9C,MAAM,oBAAoB,GAAG,CAAC,CAAA;AAC9B,MAAM,kBAAkB,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAA;AACnE,MAAM,iBAAiB,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAC7C,MAAM,eAAe,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAe3C,MAAa,aAAa;IAGtB,YAAoB,KAAqB;QACrC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;IACtB,CAAC;IAEM,MAAM,CAAC,KAAK,CAAC,QAAQ;QACxB,MAAM,CAAC,QAAQ,EAAE,cAAc,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC1D,IAAA,yBAAgB,EAAC,EAAE,CAAC;YACpB,eAAM,CAAC,eAAe,EAAE;YACxB,IAAA,yBAAgB,EAAC,CAAC,CAAC;SACtB,CAAC,CAAA;QACF,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAA;QAC3F,OAAO,IAAI,aAAa,CAAC;YACrB,EAAE;YACF,QAAQ;YACR,SAAS,EAAE,CAAC;YACZ,cAAc;SACjB,CAAC,CAAA;IACN,CAAC;IAED,IAAW,EAAE;QACT,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAA;IACxB,CAAC;IAEM,KAAK,CAAC,OAAO,CAAC,SAAqB;QACtC,MAAM,mBAAmB,GAAG,IAAI,CAAC,wBAAwB,EAAE,CAAA;QAE3D,MAAM,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,MAAM,yBAAyB,CAChE,IAAI,CAAC,KAAK,CAAC,SAAS,EACpB,IAAI,CAAC,KAAK,CAAC,QAAQ,CACtB,CAAA;QAED,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,yBAAyB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;QACpE,MAAM,eAAe,GAAG,MAAM,IAAA,wBAAe,EAAC,SAAS,CAAC,CAAA;QACxD,MAAM,UAAU,GAAG,MAAM,IAAA,sBAAa,EAAC,eAAe,EAAE,EAAE,EAAE,SAAS,CAAC,CAAA;QAEtE,MAAM,gBAAgB,GAAG,cAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC;YACnD,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE;YACjB,SAAS,EAAE,UAAU,CAAC,SAAS;YAC/B,UAAU;SACb,CAAC,CAAC,MAAM,EAAE,CAAA;QACX,MAAM,SAAS,GAAG,IAAA,uBAAc,EAAC,gBAAgB,EAAE,oBAAoB,CAAC,CAAA;QAExE,MAAM,SAAS,GAAG,MAAM,IAAA,mBAAU,EAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;QAEhF,MAAM,eAAe,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;QACnF,eAAe,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAA;QACjC,eAAe,CAAC,GAAG,CAAC,SAAS,EAAE,SAAS,CAAC,UAAU,CAAC,CAAA;QAEpD,IAAI,CAAC,KAAK,GAAG;YACT,GAAG,IAAI,CAAC,KAAK;YACb,QAAQ,EAAE,YAAY;YACtB,SAAS,EAAE,UAAU,CAAC,SAAS,GAAG,CAAC;SACtC,CAAA;QAED,OAAO;YACH,UAAU,EAAE,eAAe;YAC3B,mBAAmB;YACnB,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE;SACvB,CAAA;IACL,CAAC;IAEO,wBAAwB;QAC5B,MAAM,MAAM,GAAG,cAAK,CAAC,4BAA4B,CAAC,MAAM,CAAC;YACrD,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE;YACjB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS;YAC/B,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ;YAC7B,UAAU,EAAE,IAAA,2BAAkB,EAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC;SACnE,CAAC,CAAC,MAAM,EAAE,CAAA;QACX,OAAO,IAAA,uBAAc,EAAC,MAAM,EAAE,oBAAoB,CAAC,CAAA;IACvD,CAAC;CACJ;AAzED,sCAyEC;AAOD,KAAK,UAAU,yBAAyB,CACpC,SAAiB,EACjB,QAAoB;IAKpB,MAAM,OAAO,GAAG,MAAM,IAAA,sBAAa,EAAC,QAAQ,CAAC,CAAA;IAC7C,MAAM,CAAC,eAAe,EAAE,YAAY,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACtD,IAAA,iBAAQ,EAAC,OAAO,EAAE,iBAAiB,CAAC;QACpC,IAAA,iBAAQ,EAAC,OAAO,EAAE,eAAe,CAAC;KACrC,CAAC,CAAA;IACF,MAAM,IAAI,GAAG,MAAM,IAAA,aAAI,EAAC,eAAe,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAA;IACtE,OAAO;QACH,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;QAC/B,YAAY,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;KAC7C,CAAA;AACL,CAAC;AAED,SAAS,yBAAyB,CAAC,IAAgB;IAI/C,IAAI,IAAI,CAAC,UAAU,GAAG,EAAE,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,sCAAsC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAA;IAC5E,CAAC;IACD,OAAO;QACH,EAAE,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC;QACxB,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC;KACnC,CAAA;AACL,CAAC"}

package/dist/protocol/signal/prekey-upload.d.ts

@@ -0,0 +1,22 @@
+/** Parser for client prekey upload IQs (`xmlns=encrypt`, `type=set`). */
+import type { BinaryNode } from '../../transport/codec';
+export interface ClientPreKeyEntry {
+    readonly keyId: number;
+    readonly publicKey: Uint8Array;
+}
+export interface ClientSignedPreKey {
+    readonly keyId: number;
+    readonly publicKey: Uint8Array;
+    readonly signature: Uint8Array;
+}
+export interface ClientPreKeyBundle {
+    readonly registrationId: number;
+    readonly identityKey: Uint8Array;
+    readonly signedPreKey: ClientSignedPreKey;
+    readonly preKeys: readonly ClientPreKeyEntry[];
+}
+export declare class PreKeyUploadParseError extends Error {
+    constructor(message: string);
+}
+export declare function parsePreKeyUploadIq(iq: BinaryNode): ClientPreKeyBundle;
+//# sourceMappingURL=prekey-upload.d.ts.map

package/dist/protocol/signal/prekey-upload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prekey-upload.d.ts","sourceRoot":"","sources":["../../../src/protocol/signal/prekey-upload.ts"],"names":[],"mappings":"AAAA,yEAAyE;AAEzE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAEvD,MAAM,WAAW,iBAAiB;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAA;CACjC;AAED,MAAM,WAAW,kBAAkB;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAA;IAC9B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAA;CACjC;AAED,MAAM,WAAW,kBAAkB;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;IAC/B,QAAQ,CAAC,WAAW,EAAE,UAAU,CAAA;IAChC,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAA;IACzC,QAAQ,CAAC,OAAO,EAAE,SAAS,iBAAiB,EAAE,CAAA;CACjD;AAED,qBAAa,sBAAuB,SAAQ,KAAK;gBAC1B,OAAO,EAAE,MAAM;CAIrC;AAED,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,UAAU,GAAG,kBAAkB,CAmCtE"}

package/dist/protocol/signal/prekey-upload.js

@@ -0,0 +1,113 @@
+"use strict";
+/** Parser for client prekey upload IQs (`xmlns=encrypt`, `type=set`). */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PreKeyUploadParseError = void 0;
+exports.parsePreKeyUploadIq = parsePreKeyUploadIq;
+class PreKeyUploadParseError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'PreKeyUploadParseError';
+    }
+}
+exports.PreKeyUploadParseError = PreKeyUploadParseError;
+function parsePreKeyUploadIq(iq) {
+    if (iq.tag !== 'iq') {
+        throw new PreKeyUploadParseError(`expected iq stanza, got ${iq.tag}`);
+    }
+    if (iq.attrs.xmlns !== 'encrypt' || iq.attrs.type !== 'set') {
+        throw new PreKeyUploadParseError(`expected iq with xmlns=encrypt type=set, got xmlns=${iq.attrs.xmlns} type=${iq.attrs.type}`);
+    }
+    const children = iq.content;
+    if (!Array.isArray(children)) {
+        throw new PreKeyUploadParseError('iq has no children');
+    }
+    const registrationNode = findChild(children, 'registration');
+    const identityNode = findChild(children, 'identity');
+    const listNode = findChild(children, 'list');
+    const skeyNode = findChild(children, 'skey');
+    const registrationId = readBigEndianInt(requireBytes(registrationNode?.content, 'registration'));
+    const identityKey = requireBytes(identityNode?.content, 'identity');
+    if (identityKey.byteLength !== 32) {
+        throw new PreKeyUploadParseError(`identity key must be 32 bytes, got ${identityKey.byteLength}`);
+    }
+    const signedPreKey = parseSignedPreKey(skeyNode);
+    const preKeys = parsePreKeyList(listNode);
+    return {
+        registrationId,
+        identityKey,
+        signedPreKey,
+        preKeys
+    };
+}
+function findChild(children, tag) {
+    for (const child of children) {
+        if (child.tag === tag)
+            return child;
+    }
+    return null;
+}
+function parseSignedPreKey(node) {
+    if (!node) {
+        throw new PreKeyUploadParseError('skey child missing');
+    }
+    if (!Array.isArray(node.content)) {
+        throw new PreKeyUploadParseError('skey has no inner nodes');
+    }
+    const idNode = findChild(node.content, 'id');
+    const valueNode = findChild(node.content, 'value');
+    const signatureNode = findChild(node.content, 'signature');
+    const keyId = readBigEndianInt(requireBytes(idNode?.content, 'skey.id'));
+    const publicKey = requireBytes(valueNode?.content, 'skey.value');
+    const signature = requireBytes(signatureNode?.content, 'skey.signature');
+    if (publicKey.byteLength !== 32) {
+        throw new PreKeyUploadParseError(`skey value must be 32 bytes, got ${publicKey.byteLength}`);
+    }
+    if (signature.byteLength !== 64) {
+        throw new PreKeyUploadParseError(`skey signature must be 64 bytes, got ${signature.byteLength}`);
+    }
+    return { keyId, publicKey, signature };
+}
+function parsePreKeyList(node) {
+    if (!node) {
+        throw new PreKeyUploadParseError('list child missing');
+    }
+    if (!Array.isArray(node.content)) {
+        throw new PreKeyUploadParseError('list has no inner key entries');
+    }
+    const out = [];
+    for (const entry of node.content) {
+        if (entry.tag !== 'key')
+            continue;
+        if (!Array.isArray(entry.content))
+            continue;
+        const idNode = findChild(entry.content, 'id');
+        const valueNode = findChild(entry.content, 'value');
+        const keyId = readBigEndianInt(requireBytes(idNode?.content, 'key.id'));
+        const publicKey = requireBytes(valueNode?.content, 'key.value');
+        if (publicKey.byteLength !== 32) {
+            throw new PreKeyUploadParseError(`key value must be 32 bytes, got ${publicKey.byteLength}`);
+        }
+        out.push({ keyId, publicKey });
+    }
+    if (out.length === 0) {
+        throw new PreKeyUploadParseError('list is empty');
+    }
+    return out;
+}
+function requireBytes(content, label) {
+    if (content === undefined || content === null) {
+        throw new PreKeyUploadParseError(`${label} child has no content`);
+    }
+    if (!(content instanceof Uint8Array)) {
+        throw new PreKeyUploadParseError(`${label} content must be bytes`);
+    }
+    return content;
+}
+function readBigEndianInt(bytes) {
+    let value = 0;
+    for (let i = 0; i < bytes.byteLength; i += 1) {
+        value = value * 256 + bytes[i];
+    }
+    return value;
+}
+//# sourceMappingURL=prekey-upload.js.map

package/dist/protocol/signal/prekey-upload.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prekey-upload.js","sourceRoot":"","sources":["../../../src/protocol/signal/prekey-upload.ts"],"names":[],"mappings":";AAAA,yEAAyE;;;AA6BzE,kDAmCC;AA1CD,MAAa,sBAAuB,SAAQ,KAAK;IAC7C,YAAmB,OAAe;QAC9B,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAA;IACxC,CAAC;CACJ;AALD,wDAKC;AAED,SAAgB,mBAAmB,CAAC,EAAc;IAC9C,IAAI,EAAE,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;QAClB,MAAM,IAAI,sBAAsB,CAAC,2BAA2B,EAAE,CAAC,GAAG,EAAE,CAAC,CAAA;IACzE,CAAC;IACD,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAC1D,MAAM,IAAI,sBAAsB,CAC5B,sDAAsD,EAAE,CAAC,KAAK,CAAC,KAAK,SAAS,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAC/F,CAAA;IACL,CAAC;IACD,MAAM,QAAQ,GAAG,EAAE,CAAC,OAAO,CAAA;IAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,sBAAsB,CAAC,oBAAoB,CAAC,CAAA;IAC1D,CAAC;IAED,MAAM,gBAAgB,GAAG,SAAS,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAA;IAC5D,MAAM,YAAY,GAAG,SAAS,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAA;IACpD,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IAC5C,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IAE5C,MAAM,cAAc,GAAG,gBAAgB,CAAC,YAAY,CAAC,gBAAgB,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAA;IAChG,MAAM,WAAW,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,EAAE,UAAU,CAAC,CAAA;IACnE,IAAI,WAAW,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;QAChC,MAAM,IAAI,sBAAsB,CAC5B,sCAAsC,WAAW,CAAC,UAAU,EAAE,CACjE,CAAA;IACL,CAAC;IACD,MAAM,YAAY,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAA;IAChD,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAA;IAEzC,OAAO;QACH,cAAc;QACd,WAAW;QACX,YAAY;QACZ,OAAO;KACV,CAAA;AACL,CAAC;AAED,SAAS,SAAS,CAAC,QAA+B,EAAE,GAAW;IAC3D,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,GAAG,KAAK,GAAG;YAAE,OAAO,KAAK,CAAA;IACvC,CAAC;IACD,OAAO,IAAI,CAAA;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAuB;IAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;QACR,MAAM,IAAI,sBAAsB,CAAC,oBAAoB,CAAC,CAAA;IAC1D,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,sBAAsB,CAAC,yBAAyB,CAAC,CAAA;IAC/D,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;IAC5C,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;IAClD,MAAM,aAAa,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAA;IAC1D,MAAM,KAAK,GAAG,gBAAgB,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAA;IACxE,MAAM,SAAS,GAAG,YAAY,CAAC,SAAS,EAAE,OAAO,EAAE,YAAY,CAAC,CAAA;IAChE,MAAM,SAAS,GAAG,YAAY,CAAC,aAAa,EAAE,OAAO,EAAE,gBAAgB,CAAC,CAAA;IACxE,IAAI,SAAS,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,sBAAsB,CAAC,oCAAoC,SAAS,CAAC,UAAU,EAAE,CAAC,CAAA;IAChG,CAAC;IACD,IAAI,SAAS,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,sBAAsB,CAC5B,wCAAwC,SAAS,CAAC,UAAU,EAAE,CACjE,CAAA;IACL,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,CAAA;AAC1C,CAAC;AAED,SAAS,eAAe,CAAC,IAAuB;IAC5C,IAAI,CAAC,IAAI,EAAE,CAAC;QACR,MAAM,IAAI,sBAAsB,CAAC,oBAAoB,CAAC,CAAA;IAC1D,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,sBAAsB,CAAC,+BAA+B,CAAC,CAAA;IACrE,CAAC;IACD,MAAM,GAAG,GAAwB,EAAE,CAAA;IACnC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC/B,IAAI,KAAK,CAAC,GAAG,KAAK,KAAK;YAAE,SAAQ;QACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;YAAE,SAAQ;QAC3C,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAC7C,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACnD,MAAM,KAAK,GAAG,gBAAgB,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAA;QACvE,MAAM,SAAS,GAAG,YAAY,CAAC,SAAS,EAAE,OAAO,EAAE,WAAW,CAAC,CAAA;QAC/D,IAAI,SAAS,CAAC,UAAU,KAAK,EAAE,EAAE,CAAC;YAC9B,MAAM,IAAI,sBAAsB,CAC5B,mCAAmC,SAAS,CAAC,UAAU,EAAE,CAC5D,CAAA;QACL,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;IAClC,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnB,MAAM,IAAI,sBAAsB,CAAC,eAAe,CAAC,CAAA;IACrD,CAAC;IACD,OAAO,GAAG,CAAA;AACd,CAAC;AAED,SAAS,YAAY,CAAC,OAA0C,EAAE,KAAa;IAC3E,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QAC5C,MAAM,IAAI,sBAAsB,CAAC,GAAG,KAAK,uBAAuB,CAAC,CAAA;IACrE,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,YAAY,UAAU,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,sBAAsB,CAAC,GAAG,KAAK,wBAAwB,CAAC,CAAA;IACtE,CAAC;IACD,OAAO,OAAO,CAAA;AAClB,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAiB;IACvC,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,KAAK,GAAG,KAAK,GAAG,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;IAClC,CAAC;IACD,OAAO,KAAK,CAAA;AAChB,CAAC"}

package/dist/protocol/stream/stream-error.d.ts

@@ -0,0 +1,8 @@
+/** Builders for `<stream:error/>` stanzas pushed to the client. */
+import type { BinaryNode } from '../../transport/codec';
+export declare function buildStreamErrorCode(code: number): BinaryNode;
+export declare function buildStreamErrorReplaced(): BinaryNode;
+export declare function buildStreamErrorDeviceRemoved(): BinaryNode;
+export declare function buildStreamErrorAck(id: string): BinaryNode;
+export declare function buildStreamErrorXmlNotWellFormed(): BinaryNode;
+//# sourceMappingURL=stream-error.d.ts.map

package/dist/protocol/stream/stream-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream-error.d.ts","sourceRoot":"","sources":["../../../src/protocol/stream/stream-error.ts"],"names":[],"mappings":"AAAA,mEAAmE;AAEnE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAIvD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAK7D;AAED,wBAAgB,wBAAwB,IAAI,UAAU,CAWrD;AAED,wBAAgB,6BAA6B,IAAI,UAAU,CAW1D;AAED,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,MAAM,GAAG,UAAU,CAW1D;AAED,wBAAgB,gCAAgC,IAAI,UAAU,CAW7D"}

package/dist/protocol/stream/stream-error.js

@@ -0,0 +1,64 @@
+"use strict";
+/** Builders for `<stream:error/>` stanzas pushed to the client. */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildStreamErrorCode = buildStreamErrorCode;
+exports.buildStreamErrorReplaced = buildStreamErrorReplaced;
+exports.buildStreamErrorDeviceRemoved = buildStreamErrorDeviceRemoved;
+exports.buildStreamErrorAck = buildStreamErrorAck;
+exports.buildStreamErrorXmlNotWellFormed = buildStreamErrorXmlNotWellFormed;
+const STREAM_ERROR_TAG = 'stream:error';
+function buildStreamErrorCode(code) {
+    return {
+        tag: STREAM_ERROR_TAG,
+        attrs: { code: String(code) }
+    };
+}
+function buildStreamErrorReplaced() {
+    return {
+        tag: STREAM_ERROR_TAG,
+        attrs: {},
+        content: [
+            {
+                tag: 'conflict',
+                attrs: { type: 'replaced' }
+            }
+        ]
+    };
+}
+function buildStreamErrorDeviceRemoved() {
+    return {
+        tag: STREAM_ERROR_TAG,
+        attrs: {},
+        content: [
+            {
+                tag: 'conflict',
+                attrs: { type: 'device_removed' }
+            }
+        ]
+    };
+}
+function buildStreamErrorAck(id) {
+    return {
+        tag: STREAM_ERROR_TAG,
+        attrs: {},
+        content: [
+            {
+                tag: 'ack',
+                attrs: { id }
+            }
+        ]
+    };
+}
+function buildStreamErrorXmlNotWellFormed() {
+    return {
+        tag: STREAM_ERROR_TAG,
+        attrs: {},
+        content: [
+            {
+                tag: 'xml-not-well-formed',
+                attrs: {}
+            }
+        ]
+    };
+}
+//# sourceMappingURL=stream-error.js.map

package/dist/protocol/stream/stream-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream-error.js","sourceRoot":"","sources":["../../../src/protocol/stream/stream-error.ts"],"names":[],"mappings":";AAAA,mEAAmE;;AAMnE,oDAKC;AAED,4DAWC;AAED,sEAWC;AAED,kDAWC;AAED,4EAWC;AA3DD,MAAM,gBAAgB,GAAG,cAAc,CAAA;AAEvC,SAAgB,oBAAoB,CAAC,IAAY;IAC7C,OAAO;QACH,GAAG,EAAE,gBAAgB;QACrB,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE;KAChC,CAAA;AACL,CAAC;AAED,SAAgB,wBAAwB;IACpC,OAAO;QACH,GAAG,EAAE,gBAAgB;QACrB,KAAK,EAAE,EAAE;QACT,OAAO,EAAE;YACL;gBACI,GAAG,EAAE,UAAU;gBACf,KAAK,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE;aAC9B;SACJ;KACJ,CAAA;AACL,CAAC;AAED,SAAgB,6BAA6B;IACzC,OAAO;QACH,GAAG,EAAE,gBAAgB;QACrB,KAAK,EAAE,EAAE;QACT,OAAO,EAAE;YACL;gBACI,GAAG,EAAE,UAAU;gBACf,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE;aACpC;SACJ;KACJ,CAAA;AACL,CAAC;AAED,SAAgB,mBAAmB,CAAC,EAAU;IAC1C,OAAO;QACH,GAAG,EAAE,gBAAgB;QACrB,KAAK,EAAE,EAAE;QACT,OAAO,EAAE;YACL;gBACI,GAAG,EAAE,KAAK;gBACV,KAAK,EAAE,EAAE,EAAE,EAAE;aAChB;SACJ;KACJ,CAAA;AACL,CAAC;AAED,SAAgB,gCAAgC;IAC5C,OAAO;QACH,GAAG,EAAE,gBAAgB;QACrB,KAAK,EAAE,EAAE;QACT,OAAO,EAAE;YACL;gBACI,GAAG,EAAE,qBAAqB;gBAC1B,KAAK,EAAE,EAAE;aACZ;SACJ;KACJ,CAAA;AACL,CAAC"}

package/dist/state/fake-app-state-collection.d.ts

@@ -0,0 +1,35 @@
+/** In-memory app-state collection tracker (version/LTHash + patch queue). */
+import { FakeAppStateCrypto } from '../protocol/signal/fake-app-state-crypto';
+import { type Proto } from '../transport/protos';
+export interface FakeAppStateCollectionOptions {
+    readonly name: string;
+    readonly keyId: Uint8Array;
+    readonly keyData: Uint8Array;
+    readonly crypto?: FakeAppStateCrypto;
+}
+export interface FakeAppStateMutationDescriptor {
+    readonly operation: 'set' | 'remove';
+    readonly index: string;
+    readonly value: Proto.ISyncActionValue | null;
+    readonly version: number;
+}
+export declare class FakeAppStateCollection {
+    readonly name: string;
+    readonly keyId: Uint8Array;
+    readonly keyData: Uint8Array;
+    private readonly crypto;
+    private currentVersion;
+    private currentLtHash;
+    private readonly recordsByIndexMacHex;
+    private readonly pendingPatchMutations;
+    private hasUnflushedSnapshotChanges;
+    constructor(options: FakeAppStateCollectionOptions);
+    get version(): number;
+    get ltHash(): Uint8Array;
+    applyMutation(input: FakeAppStateMutationDescriptor): Promise<void>;
+    encodeSnapshot(): Promise<Uint8Array>;
+    encodePendingPatch(): Promise<Uint8Array>;
+    hasPending(): boolean;
+    private applyLtHash;
+}
+//# sourceMappingURL=fake-app-state-collection.d.ts.map

package/dist/state/fake-app-state-collection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fake-app-state-collection.d.ts","sourceRoot":"","sources":["../../src/state/fake-app-state-collection.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAE7E,OAAO,EAEH,kBAAkB,EAErB,MAAM,0CAA0C,CAAA;AACjD,OAAO,EAAS,KAAK,KAAK,EAAE,MAAM,qBAAqB,CAAA;AAEvD,MAAM,WAAW,6BAA6B;IAC1C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAA;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAA;CACvC;AAED,MAAM,WAAW,8BAA8B;IAC3C,QAAQ,CAAC,SAAS,EAAE,KAAK,GAAG,QAAQ,CAAA;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAA;IAC7C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAC3B;AASD,qBAAa,sBAAsB;IAC/B,SAAgB,IAAI,EAAE,MAAM,CAAA;IAC5B,SAAgB,KAAK,EAAE,UAAU,CAAA;IACjC,SAAgB,OAAO,EAAE,UAAU,CAAA;IACnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;IAC3C,OAAO,CAAC,cAAc,CAAI;IAC1B,OAAO,CAAC,aAAa,CAAsC;IAC3D,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAoC;IACzE,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAG9B;IACR,OAAO,CAAC,2BAA2B,CAAQ;gBAExB,OAAO,EAAE,6BAA6B;IAOzD,IAAW,OAAO,IAAI,MAAM,CAE3B;IAED,IAAW,MAAM,IAAI,UAAU,CAE9B;IAEY,aAAa,CAAC,KAAK,EAAE,8BAA8B,GAAG,OAAO,CAAC,IAAI,CAAC;IA8CnE,cAAc,IAAI,OAAO,CAAC,UAAU,CAAC;IA0BrC,kBAAkB,IAAI,OAAO,CAAC,UAAU,CAAC;IAgD/C,UAAU,IAAI,OAAO;YAId,WAAW;CAQ5B"}