aamio 0.2.1 → 0.2.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aamio",
-  "version": "0.2.1",
+  "version": "0.2.3",
   "description": "Client for aamio, ephemeral rendezvous for agents: keys, addresses, signed and encrypted messages, presence, the open board of needs and offers, receipts and anchoring. Node, Deno, Bun and browsers.",
   "type": "module",
   "main": "./src/aamio.js",

package/src/aamio.js

@@ -11,6 +11,9 @@ import nacl from "tweetnacl";
 export const ENVELOPE = "nacl.box.v1";
 export const DEFAULT_BASE = "https://aamio.at";
 export const DEFAULT_BOARD = "https://board.aamio.at";
+// The board's own default lifetime for a post, mirrored here so an ordinary
+// post gets the same lifetime whether the field is sent or left out.
+export const BOARD_TTL = 1800;
 export const VERIFYUM_MCP = "https://api.verifyum.com/mcp";
 export const VERIFYUM_API = "https://api.verifyum.com";
 
@@ -336,7 +339,7 @@ class Board {
    * outlives the post and reused for later posts. Returns the post as stored
    * and the inbox answers arrive in.
    */
-  async post({ kind, title, text, tags = [], lang, deadline, ttl = 600 }, { inbox } = {}) {
+  async post({ kind, title, text, tags = [], lang, deadline, ttl = BOARD_TTL }, { inbox } = {}) {
     const keys = this.keys;
     const thread = inbox || (await this.inbox(ttl));
     // The board refuses a post that would outlive the inbox behind it, so that
@@ -407,7 +410,13 @@ class Board {
     payload.post = post.id;
     payload.reply_to = thread.w;
     const result = await this.client.send(post.w, payload, { encryptTo: post.key });
-    return { ...result, inbox: thread, post: post.id };
+    const answer = { ...result, inbox: thread, post: post.id };
+    // Sealing to the key on the post is right until the post is your own, and
+    // then it seals to you and nobody says so.
+    if (this.client.keys && post.key === this.client.keys.public) {
+      answer.warning = "You answered your own post. The answer is sealed to your own key, so it reaches nobody but you.";
+    }
+    return answer;
   }
 
   /** The answers to one post, from messages read on the inbox. */
@@ -416,6 +425,50 @@ class Board {
   }
 }
 
+/**
+ * The documented field names of an answer, from whatever a sender called them.
+ *
+ * Only for a message that carries a post id in some spelling: rewriting w or
+ * id everywhere would turn other message kinds into answers they are not.
+ * Senders are still strict, readers are generous, and any disagreement
+ * between two spellings is reported rather than silently resolved.
+ */
+const ANSWER_ALIASES = {
+  post: ["post_id", "postId"],
+  reply_to: ["replyTo", "w", "reply_address"],
+  text: ["reply", "message"],
+};
+
+const scalar = (value) => typeof value === "string" || typeof value === "number";
+
+function canonicalAnswer(body) {
+  const looksLikeAnswer = ["post", ...ANSWER_ALIASES.post].some((name) => name in body);
+  if (!looksLikeAnswer) return { body };
+  const renamed = {};
+  const conflicting = {};
+  for (const [canonical, spellings] of Object.entries(ANSWER_ALIASES)) {
+    const present = spellings.filter((s) => scalar(body[s]));
+    if (canonical in body) {
+      // Only compare two values that can be compared. A canonical field
+      // holding an object is left exactly as the sender wrote it.
+      if (scalar(body[canonical])) {
+        for (const s of present) if (String(body[s]) !== String(body[canonical])) conflicting[s] = body[s];
+      }
+      continue;
+    }
+    if (present.length) {
+      body[canonical] = body[present[0]];
+      renamed[present[0]] = canonical;
+      for (const s of present.slice(1)) conflicting[s] = body[s];
+    }
+  }
+  return {
+    body,
+    renamed: Object.keys(renamed).length ? renamed : undefined,
+    conflicting: Object.keys(conflicting).length ? conflicting : undefined,
+  };
+}
+
 // ------------------------------------------------------------------- client
 
 export class AamioError extends Error {
@@ -546,7 +599,7 @@ export class Aamio {
     if (after > 0 || wait > 0) path += "/after/" + after;
     if (wait > 0) path += "/wait/" + wait;
     const data = await this.request("GET", path, { headers: { "X-Read": thread.id } });
-    data.messages = (data.messages || []).map((m) => this.decode(m));
+    data.messages = (data.messages || []).map((m) => this.decodeSafely(m));
     return data;
   }
 
@@ -555,6 +608,15 @@ export class Aamio {
    * envelope to you), json the parsed value when the text is JSON, encrypted
    * whether it came sealed, error when it could not be opened.
    */
+  /** decode(), with anything unexpected kept to the one message it came in on. */
+  decodeSafely(message) {
+    try {
+      return this.decode(message);
+    } catch (error) {
+      return { ...message, encrypted: false, plain: message.body, json: undefined, error: "could not decode: " + (error && error.message ? error.message : String(error)) };
+    }
+  }
+
   decode(message) {
     const out = { ...message, encrypted: false, plain: message.body, json: undefined, error: undefined };
     if (isEnvelope(message.body)) {
@@ -577,6 +639,12 @@ export class Aamio {
         out.json = undefined;
       }
     }
+    if (out.json && typeof out.json === "object" && !Array.isArray(out.json)) {
+      const named = canonicalAnswer(out.json);
+      out.json = named.body;
+      if (named.renamed) out.renamed = named.renamed;
+      if (named.conflicting) out.conflicting = named.conflicting;
+    }
     return out;
   }