ping-openmls-sdk 0.0.1

package/README.md

@@ -0,0 +1,63 @@
+# ping-openmls-sdk
+
+OpenMLS-based secure messaging for browsers, React Native, RN-Web, and Electron/Tauri.
+Crypto runs in a Web Worker so the UI is never blocked.
+
+## Install
+
+```bash
+npm install ping-openmls-sdk
+```
+
+## Usage
+
+```typescript
+import { MessagingClient } from "ping-openmls-sdk";
+import { IndexedDbStorage } from "ping-openmls-sdk/storage/indexeddb";
+import { WebSocketTransport } from "ping-openmls-sdk/transport/websocket";
+
+// 1. Identity — generate once per user, then persist (encrypted) by your auth flow.
+const identityExport = await MessagingClient.generateIdentity();
+
+// 2. Plug in storage + transport.
+const storage   = new IndexedDbStorage();
+const transport = new WebSocketTransport({ baseUrl: "https://relay.example.com" });
+
+// 3. Init.
+const client = await MessagingClient.init({
+  identityExport, deviceLabel: "Web", storage, transport,
+});
+
+// 4. Use.
+const convo = await client.createConversation({ name: "Team" });
+await convo.addMembers([bobKeyPackage]);
+await convo.send(new TextEncoder().encode("hello"));
+
+client.onMessage((msg) => {
+  console.log(new TextDecoder().decode(msg.plaintext));
+});
+
+// 5. Catch up after reconnect.
+await client.syncConversations();
+```
+
+## Architecture
+
+The SDK is a thin TypeScript shell over a Rust core compiled to WebAssembly. The Worker owns
+the WASM instance; the main thread does not import WASM at all. See
+[`docs/ARCHITECTURE.md`](../../docs/ARCHITECTURE.md) for details.
+
+## Bundle size
+
+Aim: ≤ 350 KiB gzipped for the WASM blob, ≤ 8 KiB gzipped for the TS surface. We achieve this
+by:
+
+- Building the WASM with `--release`, `wasm-opt -O3`, and stripping symbols.
+- Lazy-initializing WASM only on first `init()` (so `MessagingClient.generateIdentity()` doesn't
+  pay the cost on cold pages).
+- No CBOR or crypto libraries on the main thread.
+
+## React Native
+
+On RN, native binaries are preferred — install `@ping-openmls-sdk/react-native-macos` (autolinked). On RN-Web,
+this package's WASM build is used as-is.

package/dist/index.cjs

@@ -0,0 +1,463 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var src_exports = {};
+__export(src_exports, {
+  IndexedDbStorage: () => IndexedDbStorage,
+  MessagingClient: () => MessagingClient,
+  WebSocketTransport: () => WebSocketTransport
+});
+module.exports = __toCommonJS(src_exports);
+
+// src/storage/indexeddb.ts
+var DB_NAME = "ping-sdk";
+var DB_VERSION = 1;
+var STORE = "kv";
+function open() {
+  return new Promise((resolve, reject) => {
+    const req = indexedDB.open(DB_NAME, DB_VERSION);
+    req.onupgradeneeded = () => {
+      const db = req.result;
+      if (!db.objectStoreNames.contains(STORE)) {
+        const os = db.createObjectStore(STORE, { keyPath: ["ns", "key"] });
+        os.createIndex("ns", "ns", { unique: false });
+      }
+    };
+    req.onsuccess = () => resolve(req.result);
+    req.onerror = () => reject(req.error);
+  });
+}
+var IndexedDbStorage = class {
+  dbPromise;
+  constructor() {
+    this.dbPromise = open();
+  }
+  async get(namespace, key) {
+    const db = await this.dbPromise;
+    return new Promise((resolve, reject) => {
+      const tx = db.transaction(STORE, "readonly");
+      const r = tx.objectStore(STORE).get([namespace, key]);
+      r.onsuccess = () => resolve(r.result?.value ?? null);
+      r.onerror = () => reject(r.error);
+    });
+  }
+  async put(namespace, key, value) {
+    const db = await this.dbPromise;
+    return new Promise((resolve, reject) => {
+      const tx = db.transaction(STORE, "readwrite");
+      tx.objectStore(STORE).put({ ns: namespace, key, value });
+      tx.oncomplete = () => resolve();
+      tx.onerror = () => reject(tx.error);
+    });
+  }
+  async del(namespace, key) {
+    const db = await this.dbPromise;
+    return new Promise((resolve, reject) => {
+      const tx = db.transaction(STORE, "readwrite");
+      tx.objectStore(STORE).delete([namespace, key]);
+      tx.oncomplete = () => resolve();
+      tx.onerror = () => reject(tx.error);
+    });
+  }
+  async listKeys(namespace, prefix) {
+    const db = await this.dbPromise;
+    return new Promise((resolve, reject) => {
+      const tx = db.transaction(STORE, "readonly");
+      const idx = tx.objectStore(STORE).index("ns");
+      const req = idx.openCursor(IDBKeyRange.only(namespace));
+      const out = [];
+      req.onsuccess = () => {
+        const cur = req.result;
+        if (!cur) return resolve(out);
+        const row = cur.value;
+        if (!prefix || row.key.startsWith(prefix)) out.push(row.key);
+        cur.continue();
+      };
+      req.onerror = () => reject(req.error);
+    });
+  }
+};
+
+// src/transport/websocket.ts
+var WebSocketTransport = class {
+  constructor(cfg) {
+    this.cfg = cfg;
+    this.fetchImpl = cfg.fetchImpl ?? globalThis.fetch.bind(globalThis);
+    this.openSocket();
+  }
+  cfg;
+  ws = null;
+  liveHandlers = /* @__PURE__ */ new Set();
+  fetchImpl;
+  openSocket() {
+    if (typeof WebSocket === "undefined") return;
+    const url = `${this.cfg.baseUrl.replace(/^http/, "ws")}/stream`;
+    this.ws = new WebSocket(url);
+    this.ws.onmessage = (ev) => {
+      const text = typeof ev.data === "string" ? ev.data : new TextDecoder().decode(ev.data);
+      try {
+        const env = JSON.parse(text, reviver);
+        for (const h of this.liveHandlers) h(env);
+      } catch (e) {
+        if (typeof console !== "undefined") console.debug("[ping-sdk] WS frame parse error:", e);
+      }
+    };
+    this.ws.onclose = () => setTimeout(() => this.openSocket(), 1e3);
+  }
+  async send(envelope) {
+    const res = await this.fetchImpl(`${this.cfg.baseUrl}/send`, {
+      method: "POST",
+      headers: {
+        "content-type": "application/json",
+        ...this.cfg.authHeader ? { authorization: this.cfg.authHeader } : {}
+      },
+      body: JSON.stringify(envelope, replacer)
+    });
+    if (res.status === 409) throw new Error("EpochOccupied");
+    if (!res.ok) throw new Error(`transport send failed: ${res.status}`);
+  }
+  async fetchSince(conversationId, cursor, limit) {
+    const url = new URL(`${this.cfg.baseUrl}/sync`);
+    url.searchParams.set("conv", toHex(conversationId));
+    url.searchParams.set("cursor", btoaUrl(cursor));
+    url.searchParams.set("limit", String(limit));
+    const res = await this.fetchImpl(url.toString(), {
+      headers: { ...this.cfg.authHeader ? { authorization: this.cfg.authHeader } : {} }
+    });
+    if (!res.ok) throw new Error(`transport fetch failed: ${res.status}`);
+    const text = await res.text();
+    return JSON.parse(text, reviver);
+  }
+  subscribe(onEvent) {
+    this.liveHandlers.add(onEvent);
+    return { unsubscribe: () => this.liveHandlers.delete(onEvent) };
+  }
+  async discoverDevices(userId) {
+    const res = await this.fetchImpl(`${this.cfg.baseUrl}/devices/${toHex(userId)}`, {
+      headers: { ...this.cfg.authHeader ? { authorization: this.cfg.authHeader } : {} }
+    });
+    if (!res.ok) throw new Error(`device discovery failed: ${res.status}`);
+    const text = await res.text();
+    return JSON.parse(text, reviver);
+  }
+};
+function replacer(_k, v) {
+  if (v instanceof Uint8Array) return { _bytes: Array.from(v) };
+  return v;
+}
+function reviver(_k, v) {
+  if (v && typeof v === "object" && Array.isArray(v._bytes)) {
+    return new Uint8Array(v._bytes);
+  }
+  return v;
+}
+function toHex(b) {
+  let s = "";
+  for (const v of b) s += v.toString(16).padStart(2, "0");
+  return s;
+}
+function btoaUrl(b) {
+  let s = "";
+  for (const v of b) s += String.fromCharCode(v);
+  return btoa(s).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+
+// src/index.ts
+var import_meta = {};
+var MessagingClient = class _MessagingClient {
+  worker;
+  nextId = 1;
+  pending = /* @__PURE__ */ new Map();
+  storage;
+  transport;
+  now;
+  messageHandlers = /* @__PURE__ */ new Set();
+  conversationHandlers = /* @__PURE__ */ new Set();
+  subscription = null;
+  metaCache = /* @__PURE__ */ new Map();
+  // Cached at init() so dispatchIncoming can skip envelopes we sent ourselves — the relay
+  // broadcasts to all WS subscribers including the sender, and re-applying our own already-
+  // merged commits would error with "epoch differs".
+  ownDeviceId = null;
+  constructor(cfg, worker) {
+    this.worker = worker;
+    this.storage = cfg.storage;
+    this.transport = cfg.transport;
+    this.now = cfg.now ?? (() => Date.now());
+    this.worker.onmessage = (ev) => this.handleWorker(ev.data);
+  }
+  /** Generate a fresh identity. The returned bytes are a secret — store them encrypted. */
+  static async generateIdentity() {
+    const w = new Worker(new URL("./worker.js", import_meta.url), { type: "module" });
+    const id = 1;
+    return new Promise((resolve, reject) => {
+      w.onmessage = (ev) => {
+        const msg = ev.data;
+        if (msg.kind === "result" && msg.id === id) {
+          w.terminate();
+          msg.ok ? resolve(msg.value) : reject(new Error(msg.error));
+        }
+      };
+      const req = { kind: "generateIdentity", id };
+      w.postMessage(req);
+    });
+  }
+  static async init(cfg) {
+    const worker = new Worker(new URL("./worker.js", import_meta.url), { type: "module" });
+    const client = new _MessagingClient(cfg, worker);
+    await client.call({
+      kind: "init",
+      id: client.nextId++,
+      identityExport: cfg.identityExport,
+      deviceLabel: cfg.deviceLabel,
+      nowMs: client.now()
+    });
+    client.ownDeviceId = await client.deviceId();
+    client.subscription = cfg.transport.subscribe((envelope) => {
+      void client.dispatchIncoming(envelope);
+    });
+    return client;
+  }
+  /** Internal: route an inbound envelope to the right handler. */
+  async dispatchIncoming(envelope) {
+    if (this.ownDeviceId && sameBytesU8(envelope.sender_device, this.ownDeviceId)) {
+      return;
+    }
+    if (envelope.kind === "Welcome") {
+      try {
+        const known = await this.listConversations();
+        const already = known.some((m) => sameBytesU8(m.id, envelope.conversation_id));
+        if (already) return;
+        await this.joinConversation(envelope);
+      } catch (e) {
+        if (typeof console !== "undefined") console.debug("[ping-sdk] welcome ignored:", e);
+      }
+      return;
+    }
+    try {
+      await this.processEnvelope(envelope);
+    } catch (e) {
+      if (typeof console !== "undefined") console.debug("[ping-sdk] envelope drop:", e);
+    }
+  }
+  // ------------------------ Public API ------------------------
+  async userId() {
+    return await this.call({ kind: "userId", id: this.nextId++ });
+  }
+  async deviceId() {
+    return await this.call({ kind: "deviceId", id: this.nextId++ });
+  }
+  async freshKeyPackage() {
+    return await this.call({ kind: "freshKeyPackage", id: this.nextId++ });
+  }
+  async createConversation(opts = {}) {
+    const idBytes = await this.call({
+      kind: "createConversation",
+      id: this.nextId++,
+      name: opts.name ?? null,
+      nowMs: this.now()
+    });
+    return this.conversationProxy(idBytes);
+  }
+  async joinConversation(welcome) {
+    const idBytes = await this.call({
+      kind: "joinConversation",
+      id: this.nextId++,
+      welcome,
+      nowMs: this.now()
+    });
+    return this.conversationProxy(idBytes);
+  }
+  /**
+   * Get a `Conversation` proxy for an already-known conversation. Use this when you have a
+   * conversation id (e.g., from `listConversations()`) and want to send/addMembers without
+   * re-creating it. Throws if the id isn't known to the worker — call `listConversations()`
+   * first to verify membership.
+   */
+  getConversation(id) {
+    return this.conversationProxy(id);
+  }
+  async listConversations() {
+    const metas = await this.call({ kind: "listConversations", id: this.nextId++ });
+    this.metaCache.clear();
+    for (const m of metas) this.metaCache.set(hex(m.id), m);
+    return metas;
+  }
+  async syncConversations() {
+    return await this.call({
+      kind: "syncConversations",
+      id: this.nextId++,
+      nowMs: this.now()
+    });
+  }
+  async processEnvelope(envelope) {
+    return await this.call({
+      kind: "processEnvelope",
+      id: this.nextId++,
+      envelope,
+      nowMs: this.now()
+    });
+  }
+  async buildLinkingTicket(newDeviceId, newDeviceKp) {
+    return await this.call({
+      kind: "buildLinkingTicket",
+      id: this.nextId++,
+      newDeviceId,
+      newDeviceKp,
+      nowMs: this.now()
+    });
+  }
+  async consumeLinkingTicket(ticket) {
+    await this.call({
+      kind: "consumeLinkingTicket",
+      id: this.nextId++,
+      ticket,
+      nowMs: this.now()
+    });
+  }
+  /** Subscribe to decrypted application messages. */
+  onMessage(handler) {
+    this.messageHandlers.add(handler);
+    return () => this.messageHandlers.delete(handler);
+  }
+  /** Fired after every state-changing event for a conversation (Commit, member changes). */
+  /**
+   * Fires after every conversation state change — joining via Welcome, processing a Commit,
+   * etc. `sender` carries the device id of whoever triggered the event when known (e.g. the
+   * inviter's device on auto-join), so the host can label peers in its UI.
+   */
+  onConversationUpdated(handler) {
+    this.conversationHandlers.add(handler);
+    return () => this.conversationHandlers.delete(handler);
+  }
+  async close() {
+    this.subscription?.unsubscribe();
+    this.worker.terminate();
+  }
+  // ------------------------ Internals ------------------------
+  conversationProxy(id) {
+    const self = this;
+    return {
+      id,
+      async send(plaintext) {
+        return await self.call({
+          kind: "send",
+          id: self.nextId++,
+          conv: id,
+          plaintext,
+          nowMs: self.now()
+        });
+      },
+      async addMembers(kps) {
+        await self.call({
+          kind: "addMembers",
+          id: self.nextId++,
+          conv: id,
+          kps,
+          nowMs: self.now()
+        });
+      },
+      async removeMembers(leaves) {
+        await self.call({
+          kind: "removeMembers",
+          id: self.nextId++,
+          conv: id,
+          leaves,
+          nowMs: self.now()
+        });
+      },
+      meta() {
+        const cached = self.metaCache.get(hex(id));
+        if (!cached) throw new Error("conversation meta not loaded; call listConversations() first");
+        return cached;
+      }
+    };
+  }
+  call(req) {
+    return new Promise((resolve, reject) => {
+      this.pending.set(req.id, { resolve, reject });
+      this.worker.postMessage(req);
+    });
+  }
+  async handleWorker(msg) {
+    switch (msg.kind) {
+      case "result": {
+        const slot = this.pending.get(msg.id);
+        if (!slot) return;
+        this.pending.delete(msg.id);
+        msg.ok ? slot.resolve(msg.value) : slot.reject(new Error(msg.error));
+        return;
+      }
+      case "event.message": {
+        for (const h of this.messageHandlers) h(msg.msg);
+        return;
+      }
+      case "event.conversation": {
+        for (const h of this.conversationHandlers) h(msg.id, msg.epoch, msg.sender);
+        return;
+      }
+      case "storage.call": {
+        try {
+          const v = await this.storage[msg.method]?.(...msg.args);
+          this.worker.postMessage({ kind: "storage.reply", id: msg.id, ok: true, value: v });
+        } catch (e) {
+          this.worker.postMessage({
+            kind: "storage.reply",
+            id: msg.id,
+            ok: false,
+            error: String(e)
+          });
+        }
+        return;
+      }
+      case "transport.call": {
+        try {
+          const v = await this.transport[msg.method]?.(...msg.args);
+          this.worker.postMessage({ kind: "transport.reply", id: msg.id, ok: true, value: v });
+        } catch (e) {
+          this.worker.postMessage({
+            kind: "transport.reply",
+            id: msg.id,
+            ok: false,
+            error: String(e)
+          });
+        }
+        return;
+      }
+    }
+  }
+};
+function hex(b) {
+  let s = "";
+  for (const v of b) s += v.toString(16).padStart(2, "0");
+  return s;
+}
+function sameBytesU8(a, b) {
+  if (a.length !== b.length) return false;
+  for (let i = 0; i < a.length; i++) if (a[i] !== b[i]) return false;
+  return true;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  IndexedDbStorage,
+  MessagingClient,
+  WebSocketTransport
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/storage/indexeddb.ts","../src/transport/websocket.ts"],"sourcesContent":["// Public entry point. Spawns the dedicated Worker that hosts the WASM instance and exposes a\n// Promise-based, identical-to-native API. Crypto runs off the main thread.\n\nimport type {\n  ConversationId, ConversationMeta, DeviceId, IncomingMessage,\n  LinkingTicket, MessageEnvelope, Storage, Transport, UserId,\n} from \"./types\";\nimport type { Request, Response } from \"./protocol\";\n\nexport type * from \"./types\";\n\n// Re-export the default Storage and Transport implementations from the main entry so consumers\n// whose bundlers don't honor package.json#exports (Metro with strict resolution, some legacy\n// Webpack configs) can still get them with a plain `import { ... } from \"ping-openmls-sdk\"`. Power\n// users who care about tree-shaking can keep using the subpath imports.\nexport { IndexedDbStorage } from \"./storage/indexeddb\";\nexport { WebSocketTransport } from \"./transport/websocket\";\n\nexport interface ClientConfig {\n  identityExport: Uint8Array;\n  deviceLabel: string;\n  storage: Storage;\n  transport: Transport;\n  /** Override the wall clock (test/sim only). */\n  now?: () => number;\n}\n\nexport interface Conversation {\n  readonly id: ConversationId;\n  send(plaintext: Uint8Array): Promise<MessageEnvelope>;\n  addMembers(keyPackages: Uint8Array[]): Promise<void>;\n  removeMembers(leafIndexes: number[]): Promise<void>;\n  meta(): ConversationMeta;\n}\n\nexport class MessagingClient {\n  private worker: Worker;\n  private nextId = 1;\n  private pending = new Map<number, { resolve: (v: unknown) => void; reject: (e: Error) => void }>();\n  private storage: Storage;\n  private transport: Transport;\n  private now: () => number;\n  private messageHandlers = new Set<(m: IncomingMessage) => void>();\n  private conversationHandlers = new Set<(id: ConversationId, epoch: number, sender?: DeviceId) => void>();\n  private subscription: { unsubscribe(): void } | null = null;\n  private metaCache = new Map<string, ConversationMeta>();\n  // Cached at init() so dispatchIncoming can skip envelopes we sent ourselves — the relay\n  // broadcasts to all WS subscribers including the sender, and re-applying our own already-\n  // merged commits would error with \"epoch differs\".\n  private ownDeviceId: Uint8Array | null = null;\n\n  private constructor(cfg: ClientConfig, worker: Worker) {\n    this.worker = worker;\n    this.storage = cfg.storage;\n    this.transport = cfg.transport;\n    this.now = cfg.now ?? (() => Date.now());\n    this.worker.onmessage = (ev) => this.handleWorker(ev.data as Response);\n  }\n\n  /** Generate a fresh identity. The returned bytes are a secret — store them encrypted. */\n  static async generateIdentity(): Promise<Uint8Array> {\n    // Spawn an ephemeral worker to call `generateIdentity` so we don't pull WASM into the main thread.\n    const w = new Worker(new URL(\"./worker.js\", import.meta.url), { type: \"module\" });\n    const id = 1;\n    return new Promise<Uint8Array>((resolve, reject) => {\n      w.onmessage = (ev) => {\n        const msg = ev.data as Response;\n        if (msg.kind === \"result\" && msg.id === id) {\n          w.terminate();\n          msg.ok ? resolve(msg.value as Uint8Array) : reject(new Error(msg.error));\n        }\n      };\n      const req: Request = { kind: \"generateIdentity\", id };\n      w.postMessage(req);\n    });\n  }\n\n  static async init(cfg: ClientConfig): Promise<MessagingClient> {\n    const worker = new Worker(new URL(\"./worker.js\", import.meta.url), { type: \"module\" });\n    const client = new MessagingClient(cfg, worker);\n\n    await client.call({\n      kind: \"init\",\n      id: client.nextId++,\n      identityExport: cfg.identityExport,\n      deviceLabel: cfg.deviceLabel,\n      nowMs: client.now(),\n    });\n\n    // Cache the device id once so we can drop envelopes we sent ourselves on the WS echo.\n    client.ownDeviceId = await client.deviceId();\n\n    // Start the live subscription. We dispatch each envelope to the right handler:\n    //   - Welcome envelopes for unknown conversations → joinConversation\n    //   - Welcomes for already-joined conversations  → drop (server may broadcast duplicates)\n    //   - Welcomes addressed to other devices         → drop (we can't decrypt)\n    //   - Everything else                             → processEnvelope\n    client.subscription = cfg.transport.subscribe((envelope) => {\n      void client.dispatchIncoming(envelope);\n    });\n    return client;\n  }\n\n  /** Internal: route an inbound envelope to the right handler. */\n  private async dispatchIncoming(envelope: MessageEnvelope): Promise<void> {\n    // The relay broadcasts every envelope to every WS subscriber, including the sender. For\n    // our own sends, the local MLS state has already been advanced in-process — re-applying\n    // would either fail with \"epoch differs\" (commits) or be a no-op dedupe (application\n    // messages). Skip them here.\n    if (this.ownDeviceId && sameBytesU8(envelope.sender_device, this.ownDeviceId)) {\n      return;\n    }\n    if (envelope.kind === \"Welcome\") {\n      try {\n        const known = await this.listConversations();\n        const already = known.some((m) => sameBytesU8(m.id, envelope.conversation_id));\n        if (already) return;\n        await this.joinConversation(envelope);\n      } catch (e) {\n        // Welcomes are broadcast to every connected client; only one device's KeyPackage can\n        // decrypt each one, so most fail. Log at debug, drop silently.\n        if (typeof console !== \"undefined\") console.debug(\"[ping-sdk] welcome ignored:\", e);\n      }\n      return;\n    }\n    try {\n      await this.processEnvelope(envelope);\n    } catch (e) {\n      if (typeof console !== \"undefined\") console.debug(\"[ping-sdk] envelope drop:\", e);\n    }\n  }\n\n  // ------------------------ Public API ------------------------\n\n  async userId(): Promise<UserId> {\n    return await this.call({ kind: \"userId\", id: this.nextId++ }) as UserId;\n  }\n\n  async deviceId(): Promise<DeviceId> {\n    return await this.call({ kind: \"deviceId\", id: this.nextId++ }) as DeviceId;\n  }\n\n  async freshKeyPackage(): Promise<Uint8Array> {\n    return await this.call({ kind: \"freshKeyPackage\", id: this.nextId++ }) as Uint8Array;\n  }\n\n  async createConversation(opts: { name?: string } = {}): Promise<Conversation> {\n    const idBytes = await this.call({\n      kind: \"createConversation\", id: this.nextId++, name: opts.name ?? null, nowMs: this.now(),\n    }) as ConversationId;\n    return this.conversationProxy(idBytes);\n  }\n\n  async joinConversation(welcome: MessageEnvelope): Promise<Conversation> {\n    const idBytes = await this.call({\n      kind: \"joinConversation\", id: this.nextId++, welcome, nowMs: this.now(),\n    }) as ConversationId;\n    return this.conversationProxy(idBytes);\n  }\n\n  /**\n   * Get a `Conversation` proxy for an already-known conversation. Use this when you have a\n   * conversation id (e.g., from `listConversations()`) and want to send/addMembers without\n   * re-creating it. Throws if the id isn't known to the worker — call `listConversations()`\n   * first to verify membership.\n   */\n  getConversation(id: ConversationId): Conversation {\n    return this.conversationProxy(id);\n  }\n\n  async listConversations(): Promise<ConversationMeta[]> {\n    const metas = await this.call({ kind: \"listConversations\", id: this.nextId++ }) as ConversationMeta[];\n    this.metaCache.clear();\n    for (const m of metas) this.metaCache.set(hex(m.id), m);\n    return metas;\n  }\n\n  async syncConversations(): Promise<IncomingMessage[]> {\n    return await this.call({\n      kind: \"syncConversations\", id: this.nextId++, nowMs: this.now(),\n    }) as IncomingMessage[];\n  }\n\n  async processEnvelope(envelope: MessageEnvelope): Promise<IncomingMessage | null> {\n    return await this.call({\n      kind: \"processEnvelope\", id: this.nextId++, envelope, nowMs: this.now(),\n    }) as IncomingMessage | null;\n  }\n\n  async buildLinkingTicket(newDeviceId: DeviceId, newDeviceKp: Uint8Array): Promise<LinkingTicket> {\n    return await this.call({\n      kind: \"buildLinkingTicket\", id: this.nextId++,\n      newDeviceId, newDeviceKp, nowMs: this.now(),\n    }) as LinkingTicket;\n  }\n\n  async consumeLinkingTicket(ticket: LinkingTicket): Promise<void> {\n    await this.call({\n      kind: \"consumeLinkingTicket\", id: this.nextId++, ticket, nowMs: this.now(),\n    });\n  }\n\n  /** Subscribe to decrypted application messages. */\n  onMessage(handler: (m: IncomingMessage) => void): () => void {\n    this.messageHandlers.add(handler);\n    return () => this.messageHandlers.delete(handler);\n  }\n\n  /** Fired after every state-changing event for a conversation (Commit, member changes). */\n  /**\n   * Fires after every conversation state change — joining via Welcome, processing a Commit,\n   * etc. `sender` carries the device id of whoever triggered the event when known (e.g. the\n   * inviter's device on auto-join), so the host can label peers in its UI.\n   */\n  onConversationUpdated(handler: (id: ConversationId, epoch: number, sender?: DeviceId) => void): () => void {\n    this.conversationHandlers.add(handler);\n    return () => this.conversationHandlers.delete(handler);\n  }\n\n  async close(): Promise<void> {\n    this.subscription?.unsubscribe();\n    this.worker.terminate();\n  }\n\n  // ------------------------ Internals ------------------------\n\n  private conversationProxy(id: ConversationId): Conversation {\n    const self = this;\n    return {\n      id,\n      async send(plaintext) {\n        return await self.call({\n          kind: \"send\", id: self.nextId++, conv: id, plaintext, nowMs: self.now(),\n        }) as MessageEnvelope;\n      },\n      async addMembers(kps) {\n        await self.call({\n          kind: \"addMembers\", id: self.nextId++, conv: id, kps, nowMs: self.now(),\n        });\n      },\n      async removeMembers(leaves) {\n        await self.call({\n          kind: \"removeMembers\", id: self.nextId++, conv: id, leaves, nowMs: self.now(),\n        });\n      },\n      meta() {\n        const cached = self.metaCache.get(hex(id));\n        if (!cached) throw new Error(\"conversation meta not loaded; call listConversations() first\");\n        return cached;\n      },\n    };\n  }\n\n  private call(req: Request): Promise<unknown> {\n    return new Promise((resolve, reject) => {\n      this.pending.set((req as { id: number }).id, { resolve, reject });\n      this.worker.postMessage(req);\n    });\n  }\n\n  private async handleWorker(msg: Response) {\n    switch (msg.kind) {\n      case \"result\": {\n        const slot = this.pending.get(msg.id);\n        if (!slot) return;\n        this.pending.delete(msg.id);\n        msg.ok ? slot.resolve(msg.value) : slot.reject(new Error(msg.error));\n        return;\n      }\n      case \"event.message\": {\n        for (const h of this.messageHandlers) h(msg.msg);\n        return;\n      }\n      case \"event.conversation\": {\n        for (const h of this.conversationHandlers) h(msg.id, msg.epoch, msg.sender);\n        return;\n      }\n      case \"storage.call\": {\n        try {\n          const v = await (this.storage as unknown as Record<string, (...a: unknown[]) => unknown>)\n            [msg.method]?.(...msg.args);\n          this.worker.postMessage({ kind: \"storage.reply\", id: msg.id, ok: true, value: v } as Request);\n        } catch (e) {\n          this.worker.postMessage({\n            kind: \"storage.reply\", id: msg.id, ok: false, error: String(e),\n          } as Request);\n        }\n        return;\n      }\n      case \"transport.call\": {\n        try {\n          const v = await (this.transport as unknown as Record<string, (...a: unknown[]) => unknown>)\n            [msg.method]?.(...msg.args);\n          this.worker.postMessage({ kind: \"transport.reply\", id: msg.id, ok: true, value: v } as Request);\n        } catch (e) {\n          this.worker.postMessage({\n            kind: \"transport.reply\", id: msg.id, ok: false, error: String(e),\n          } as Request);\n        }\n        return;\n      }\n    }\n  }\n}\n\nfunction hex(b: Uint8Array): string {\n  let s = \"\";\n  for (const v of b) s += v.toString(16).padStart(2, \"0\");\n  return s;\n}\n\nfunction sameBytesU8(a: Uint8Array, b: Uint8Array): boolean {\n  if (a.length !== b.length) return false;\n  for (let i = 0; i < a.length; i++) if (a[i] !== b[i]) return false;\n  return true;\n}\n","// Default IndexedDB-backed Storage implementation. Hosts can supply their own.\n\nimport type { Storage } from \"../types\";\n\nconst DB_NAME = \"ping-sdk\";\nconst DB_VERSION = 1;\nconst STORE = \"kv\";\n\ninterface Row { ns: string; key: string; value: Uint8Array }\n\nfunction open(): Promise<IDBDatabase> {\n  return new Promise((resolve, reject) => {\n    const req = indexedDB.open(DB_NAME, DB_VERSION);\n    req.onupgradeneeded = () => {\n      const db = req.result;\n      if (!db.objectStoreNames.contains(STORE)) {\n        const os = db.createObjectStore(STORE, { keyPath: [\"ns\", \"key\"] });\n        os.createIndex(\"ns\", \"ns\", { unique: false });\n      }\n    };\n    req.onsuccess = () => resolve(req.result);\n    req.onerror = () => reject(req.error);\n  });\n}\n\nexport class IndexedDbStorage implements Storage {\n  private dbPromise: Promise<IDBDatabase>;\n\n  constructor() { this.dbPromise = open(); }\n\n  async get(namespace: string, key: string): Promise<Uint8Array | null> {\n    const db = await this.dbPromise;\n    return new Promise((resolve, reject) => {\n      const tx = db.transaction(STORE, \"readonly\");\n      const r = tx.objectStore(STORE).get([namespace, key]);\n      r.onsuccess = () => resolve(((r.result as Row | undefined)?.value) ?? null);\n      r.onerror = () => reject(r.error);\n    });\n  }\n\n  async put(namespace: string, key: string, value: Uint8Array): Promise<void> {\n    const db = await this.dbPromise;\n    return new Promise((resolve, reject) => {\n      const tx = db.transaction(STORE, \"readwrite\");\n      tx.objectStore(STORE).put({ ns: namespace, key, value } as Row);\n      tx.oncomplete = () => resolve();\n      tx.onerror = () => reject(tx.error);\n    });\n  }\n\n  async del(namespace: string, key: string): Promise<void> {\n    const db = await this.dbPromise;\n    return new Promise((resolve, reject) => {\n      const tx = db.transaction(STORE, \"readwrite\");\n      tx.objectStore(STORE).delete([namespace, key]);\n      tx.oncomplete = () => resolve();\n      tx.onerror = () => reject(tx.error);\n    });\n  }\n\n  async listKeys(namespace: string, prefix: string): Promise<string[]> {\n    const db = await this.dbPromise;\n    return new Promise((resolve, reject) => {\n      const tx = db.transaction(STORE, \"readonly\");\n      const idx = tx.objectStore(STORE).index(\"ns\");\n      const req = idx.openCursor(IDBKeyRange.only(namespace));\n      const out: string[] = [];\n      req.onsuccess = () => {\n        const cur = req.result;\n        if (!cur) return resolve(out);\n        const row = cur.value as Row;\n        if (!prefix || row.key.startsWith(prefix)) out.push(row.key);\n        cur.continue();\n      };\n      req.onerror = () => reject(req.error);\n    });\n  }\n}\n","// Reference WebSocket transport. Treats the server as an opaque relay that:\n//   - accepts a CBOR-encoded MessageEnvelope on `send`\n//   - returns events newer than a cursor on `fetchSince`\n//   - streams new events on the WS itself for `subscribe`\n//   - exposes a directory endpoint for `discoverDevices`\n//\n// This is a sample. Real deployments will tune framing / auth.\n\nimport type { ConversationId, DiscoveredDevice, MessageEnvelope, Transport, UserId } from \"../types\";\n\nexport interface WsTransportConfig {\n  baseUrl: string;          // ws[s]://...\n  authHeader?: string;      // optional bearer token\n  fetchImpl?: typeof fetch; // override for SSR / tests\n}\n\nexport class WebSocketTransport implements Transport {\n  private ws: WebSocket | null = null;\n  private liveHandlers = new Set<(env: MessageEnvelope) => void>();\n  private fetchImpl: typeof fetch;\n\n  constructor(private cfg: WsTransportConfig) {\n    this.fetchImpl = cfg.fetchImpl ?? globalThis.fetch.bind(globalThis);\n    this.openSocket();\n  }\n\n  private openSocket() {\n    if (typeof WebSocket === \"undefined\") return;\n    const url = `${this.cfg.baseUrl.replace(/^http/, \"ws\")}/stream`;\n    this.ws = new WebSocket(url);\n    this.ws.onmessage = (ev) => {\n      // Server sends one JSON envelope per text frame.\n      const text = typeof ev.data === \"string\" ? ev.data : new TextDecoder().decode(ev.data as ArrayBuffer);\n      try {\n        const env = JSON.parse(text, reviver) as MessageEnvelope;\n        for (const h of this.liveHandlers) h(env);\n      } catch (e) {\n        if (typeof console !== \"undefined\") console.debug(\"[ping-sdk] WS frame parse error:\", e);\n      }\n    };\n    this.ws.onclose = () => setTimeout(() => this.openSocket(), 1000);\n  }\n\n  async send(envelope: MessageEnvelope): Promise<void> {\n    const res = await this.fetchImpl(`${this.cfg.baseUrl}/send`, {\n      method: \"POST\",\n      headers: {\n        \"content-type\": \"application/json\",\n        ...(this.cfg.authHeader ? { authorization: this.cfg.authHeader } : {}),\n      },\n      body: JSON.stringify(envelope, replacer),\n    });\n    if (res.status === 409) throw new Error(\"EpochOccupied\");\n    if (!res.ok) throw new Error(`transport send failed: ${res.status}`);\n  }\n\n  async fetchSince(conversationId: ConversationId, cursor: Uint8Array, limit: number): Promise<MessageEnvelope[]> {\n    const url = new URL(`${this.cfg.baseUrl}/sync`);\n    url.searchParams.set(\"conv\", toHex(conversationId));\n    url.searchParams.set(\"cursor\", btoaUrl(cursor));\n    url.searchParams.set(\"limit\", String(limit));\n    const res = await this.fetchImpl(url.toString(), {\n      headers: { ...(this.cfg.authHeader ? { authorization: this.cfg.authHeader } : {}) },\n    });\n    if (!res.ok) throw new Error(`transport fetch failed: ${res.status}`);\n    const text = await res.text();\n    return JSON.parse(text, reviver) as MessageEnvelope[];\n  }\n\n  subscribe(onEvent: (env: MessageEnvelope) => void): { unsubscribe(): void } {\n    this.liveHandlers.add(onEvent);\n    return { unsubscribe: () => this.liveHandlers.delete(onEvent) };\n  }\n\n  async discoverDevices(userId: UserId): Promise<DiscoveredDevice[]> {\n    const res = await this.fetchImpl(`${this.cfg.baseUrl}/devices/${toHex(userId)}`, {\n      headers: { ...(this.cfg.authHeader ? { authorization: this.cfg.authHeader } : {}) },\n    });\n    if (!res.ok) throw new Error(`device discovery failed: ${res.status}`);\n    const text = await res.text();\n    return JSON.parse(text, reviver) as DiscoveredDevice[];\n  }\n}\n\n// ---- Wire codec ----\n//\n// Demo wire format: JSON with byte fields wrapped as `{ _bytes: number[] }`. The relay's\n// `envFromJson`/`envToJson` use the same shape. The spec calls for CBOR; v0.2 swaps in a\n// real CBOR codec, but the JSON form is much friendlier to debug.\n//\n// (decodeEnvelope helpers used to live here; collapsed into inline JSON.parse calls above.)\n\nfunction replacer(_k: string, v: unknown): unknown {\n  if (v instanceof Uint8Array) return { _bytes: Array.from(v) };\n  return v;\n}\nfunction reviver(_k: string, v: unknown): unknown {\n  if (v && typeof v === \"object\" && Array.isArray((v as { _bytes?: number[] })._bytes)) {\n    return new Uint8Array((v as { _bytes: number[] })._bytes);\n  }\n  return v;\n}\n\nfunction toHex(b: Uint8Array): string {\n  let s = \"\"; for (const v of b) s += v.toString(16).padStart(2, \"0\"); return s;\n}\nfunction btoaUrl(b: Uint8Array): string {\n  let s = \"\"; for (const v of b) s += String.fromCharCode(v);\n  return btoa(s).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACIA,IAAM,UAAU;AAChB,IAAM,aAAa;AACnB,IAAM,QAAQ;AAId,SAAS,OAA6B;AACpC,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,MAAM,UAAU,KAAK,SAAS,UAAU;AAC9C,QAAI,kBAAkB,MAAM;AAC1B,YAAM,KAAK,IAAI;AACf,UAAI,CAAC,GAAG,iBAAiB,SAAS,KAAK,GAAG;AACxC,cAAM,KAAK,GAAG,kBAAkB,OAAO,EAAE,SAAS,CAAC,MAAM,KAAK,EAAE,CAAC;AACjE,WAAG,YAAY,MAAM,MAAM,EAAE,QAAQ,MAAM,CAAC;AAAA,MAC9C;AAAA,IACF;AACA,QAAI,YAAY,MAAM,QAAQ,IAAI,MAAM;AACxC,QAAI,UAAU,MAAM,OAAO,IAAI,KAAK;AAAA,EACtC,CAAC;AACH;AAEO,IAAM,mBAAN,MAA0C;AAAA,EACvC;AAAA,EAER,cAAc;AAAE,SAAK,YAAY,KAAK;AAAA,EAAG;AAAA,EAEzC,MAAM,IAAI,WAAmB,KAAyC;AACpE,UAAM,KAAK,MAAM,KAAK;AACtB,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,YAAM,KAAK,GAAG,YAAY,OAAO,UAAU;AAC3C,YAAM,IAAI,GAAG,YAAY,KAAK,EAAE,IAAI,CAAC,WAAW,GAAG,CAAC;AACpD,QAAE,YAAY,MAAM,QAAU,EAAE,QAA4B,SAAU,IAAI;AAC1E,QAAE,UAAU,MAAM,OAAO,EAAE,KAAK;AAAA,IAClC,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,IAAI,WAAmB,KAAa,OAAkC;AAC1E,UAAM,KAAK,MAAM,KAAK;AACtB,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,YAAM,KAAK,GAAG,YAAY,OAAO,WAAW;AAC5C,SAAG,YAAY,KAAK,EAAE,IAAI,EAAE,IAAI,WAAW,KAAK,MAAM,CAAQ;AAC9D,SAAG,aAAa,MAAM,QAAQ;AAC9B,SAAG,UAAU,MAAM,OAAO,GAAG,KAAK;AAAA,IACpC,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,IAAI,WAAmB,KAA4B;AACvD,UAAM,KAAK,MAAM,KAAK;AACtB,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,YAAM,KAAK,GAAG,YAAY,OAAO,WAAW;AAC5C,SAAG,YAAY,KAAK,EAAE,OAAO,CAAC,WAAW,GAAG,CAAC;AAC7C,SAAG,aAAa,MAAM,QAAQ;AAC9B,SAAG,UAAU,MAAM,OAAO,GAAG,KAAK;AAAA,IACpC,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,SAAS,WAAmB,QAAmC;AACnE,UAAM,KAAK,MAAM,KAAK;AACtB,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,YAAM,KAAK,GAAG,YAAY,OAAO,UAAU;AAC3C,YAAM,MAAM,GAAG,YAAY,KAAK,EAAE,MAAM,IAAI;AAC5C,YAAM,MAAM,IAAI,WAAW,YAAY,KAAK,SAAS,CAAC;AACtD,YAAM,MAAgB,CAAC;AACvB,UAAI,YAAY,MAAM;AACpB,cAAM,MAAM,IAAI;AAChB,YAAI,CAAC,IAAK,QAAO,QAAQ,GAAG;AAC5B,cAAM,MAAM,IAAI;AAChB,YAAI,CAAC,UAAU,IAAI,IAAI,WAAW,MAAM,EAAG,KAAI,KAAK,IAAI,GAAG;AAC3D,YAAI,SAAS;AAAA,MACf;AACA,UAAI,UAAU,MAAM,OAAO,IAAI,KAAK;AAAA,IACtC,CAAC;AAAA,EACH;AACF;;;AC7DO,IAAM,qBAAN,MAA8C;AAAA,EAKnD,YAAoB,KAAwB;AAAxB;AAClB,SAAK,YAAY,IAAI,aAAa,WAAW,MAAM,KAAK,UAAU;AAClE,SAAK,WAAW;AAAA,EAClB;AAAA,EAHoB;AAAA,EAJZ,KAAuB;AAAA,EACvB,eAAe,oBAAI,IAAoC;AAAA,EACvD;AAAA,EAOA,aAAa;AACnB,QAAI,OAAO,cAAc,YAAa;AACtC,UAAM,MAAM,GAAG,KAAK,IAAI,QAAQ,QAAQ,SAAS,IAAI,CAAC;AACtD,SAAK,KAAK,IAAI,UAAU,GAAG;AAC3B,SAAK,GAAG,YAAY,CAAC,OAAO;AAE1B,YAAM,OAAO,OAAO,GAAG,SAAS,WAAW,GAAG,OAAO,IAAI,YAAY,EAAE,OAAO,GAAG,IAAmB;AACpG,UAAI;AACF,cAAM,MAAM,KAAK,MAAM,MAAM,OAAO;AACpC,mBAAW,KAAK,KAAK,aAAc,GAAE,GAAG;AAAA,MAC1C,SAAS,GAAG;AACV,YAAI,OAAO,YAAY,YAAa,SAAQ,MAAM,oCAAoC,CAAC;AAAA,MACzF;AAAA,IACF;AACA,SAAK,GAAG,UAAU,MAAM,WAAW,MAAM,KAAK,WAAW,GAAG,GAAI;AAAA,EAClE;AAAA,EAEA,MAAM,KAAK,UAA0C;AACnD,UAAM,MAAM,MAAM,KAAK,UAAU,GAAG,KAAK,IAAI,OAAO,SAAS;AAAA,MAC3D,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,GAAI,KAAK,IAAI,aAAa,EAAE,eAAe,KAAK,IAAI,WAAW,IAAI,CAAC;AAAA,MACtE;AAAA,MACA,MAAM,KAAK,UAAU,UAAU,QAAQ;AAAA,IACzC,CAAC;AACD,QAAI,IAAI,WAAW,IAAK,OAAM,IAAI,MAAM,eAAe;AACvD,QAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,0BAA0B,IAAI,MAAM,EAAE;AAAA,EACrE;AAAA,EAEA,MAAM,WAAW,gBAAgC,QAAoB,OAA2C;AAC9G,UAAM,MAAM,IAAI,IAAI,GAAG,KAAK,IAAI,OAAO,OAAO;AAC9C,QAAI,aAAa,IAAI,QAAQ,MAAM,cAAc,CAAC;AAClD,QAAI,aAAa,IAAI,UAAU,QAAQ,MAAM,CAAC;AAC9C,QAAI,aAAa,IAAI,SAAS,OAAO,KAAK,CAAC;AAC3C,UAAM,MAAM,MAAM,KAAK,UAAU,IAAI,SAAS,GAAG;AAAA,MAC/C,SAAS,EAAE,GAAI,KAAK,IAAI,aAAa,EAAE,eAAe,KAAK,IAAI,WAAW,IAAI,CAAC,EAAG;AAAA,IACpF,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,2BAA2B,IAAI,MAAM,EAAE;AACpE,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,WAAO,KAAK,MAAM,MAAM,OAAO;AAAA,EACjC;AAAA,EAEA,UAAU,SAAkE;AAC1E,SAAK,aAAa,IAAI,OAAO;AAC7B,WAAO,EAAE,aAAa,MAAM,KAAK,aAAa,OAAO,OAAO,EAAE;AAAA,EAChE;AAAA,EAEA,MAAM,gBAAgB,QAA6C;AACjE,UAAM,MAAM,MAAM,KAAK,UAAU,GAAG,KAAK,IAAI,OAAO,YAAY,MAAM,MAAM,CAAC,IAAI;AAAA,MAC/E,SAAS,EAAE,GAAI,KAAK,IAAI,aAAa,EAAE,eAAe,KAAK,IAAI,WAAW,IAAI,CAAC,EAAG;AAAA,IACpF,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,4BAA4B,IAAI,MAAM,EAAE;AACrE,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,WAAO,KAAK,MAAM,MAAM,OAAO;AAAA,EACjC;AACF;AAUA,SAAS,SAAS,IAAY,GAAqB;AACjD,MAAI,aAAa,WAAY,QAAO,EAAE,QAAQ,MAAM,KAAK,CAAC,EAAE;AAC5D,SAAO;AACT;AACA,SAAS,QAAQ,IAAY,GAAqB;AAChD,MAAI,KAAK,OAAO,MAAM,YAAY,MAAM,QAAS,EAA4B,MAAM,GAAG;AACpF,WAAO,IAAI,WAAY,EAA2B,MAAM;AAAA,EAC1D;AACA,SAAO;AACT;AAEA,SAAS,MAAM,GAAuB;AACpC,MAAI,IAAI;AAAI,aAAW,KAAK,EAAG,MAAK,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAAG,SAAO;AAC9E;AACA,SAAS,QAAQ,GAAuB;AACtC,MAAI,IAAI;AAAI,aAAW,KAAK,EAAG,MAAK,OAAO,aAAa,CAAC;AACzD,SAAO,KAAK,CAAC,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,EAAE;AAC1E;;;AF7GA;AAmCO,IAAM,kBAAN,MAAM,iBAAgB;AAAA,EACnB;AAAA,EACA,SAAS;AAAA,EACT,UAAU,oBAAI,IAA2E;AAAA,EACzF;AAAA,EACA;AAAA,EACA;AAAA,EACA,kBAAkB,oBAAI,IAAkC;AAAA,EACxD,uBAAuB,oBAAI,IAAoE;AAAA,EAC/F,eAA+C;AAAA,EAC/C,YAAY,oBAAI,IAA8B;AAAA;AAAA;AAAA;AAAA,EAI9C,cAAiC;AAAA,EAEjC,YAAY,KAAmB,QAAgB;AACrD,SAAK,SAAS;AACd,SAAK,UAAU,IAAI;AACnB,SAAK,YAAY,IAAI;AACrB,SAAK,MAAM,IAAI,QAAQ,MAAM,KAAK,IAAI;AACtC,SAAK,OAAO,YAAY,CAAC,OAAO,KAAK,aAAa,GAAG,IAAgB;AAAA,EACvE;AAAA;AAAA,EAGA,aAAa,mBAAwC;AAEnD,UAAM,IAAI,IAAI,OAAO,IAAI,IAAI,eAAe,YAAY,GAAG,GAAG,EAAE,MAAM,SAAS,CAAC;AAChF,UAAM,KAAK;AACX,WAAO,IAAI,QAAoB,CAAC,SAAS,WAAW;AAClD,QAAE,YAAY,CAAC,OAAO;AACpB,cAAM,MAAM,GAAG;AACf,YAAI,IAAI,SAAS,YAAY,IAAI,OAAO,IAAI;AAC1C,YAAE,UAAU;AACZ,cAAI,KAAK,QAAQ,IAAI,KAAmB,IAAI,OAAO,IAAI,MAAM,IAAI,KAAK,CAAC;AAAA,QACzE;AAAA,MACF;AACA,YAAM,MAAe,EAAE,MAAM,oBAAoB,GAAG;AACpD,QAAE,YAAY,GAAG;AAAA,IACnB,CAAC;AAAA,EACH;AAAA,EAEA,aAAa,KAAK,KAA6C;AAC7D,UAAM,SAAS,IAAI,OAAO,IAAI,IAAI,eAAe,YAAY,GAAG,GAAG,EAAE,MAAM,SAAS,CAAC;AACrF,UAAM,SAAS,IAAI,iBAAgB,KAAK,MAAM;AAE9C,UAAM,OAAO,KAAK;AAAA,MAChB,MAAM;AAAA,MACN,IAAI,OAAO;AAAA,MACX,gBAAgB,IAAI;AAAA,MACpB,aAAa,IAAI;AAAA,MACjB,OAAO,OAAO,IAAI;AAAA,IACpB,CAAC;AAGD,WAAO,cAAc,MAAM,OAAO,SAAS;AAO3C,WAAO,eAAe,IAAI,UAAU,UAAU,CAAC,aAAa;AAC1D,WAAK,OAAO,iBAAiB,QAAQ;AAAA,IACvC,CAAC;AACD,WAAO;AAAA,EACT;AAAA;AAAA,EAGA,MAAc,iBAAiB,UAA0C;AAKvE,QAAI,KAAK,eAAe,YAAY,SAAS,eAAe,KAAK,WAAW,GAAG;AAC7E;AAAA,IACF;AACA,QAAI,SAAS,SAAS,WAAW;AAC/B,UAAI;AACF,cAAM,QAAQ,MAAM,KAAK,kBAAkB;AAC3C,cAAM,UAAU,MAAM,KAAK,CAAC,MAAM,YAAY,EAAE,IAAI,SAAS,eAAe,CAAC;AAC7E,YAAI,QAAS;AACb,cAAM,KAAK,iBAAiB,QAAQ;AAAA,MACtC,SAAS,GAAG;AAGV,YAAI,OAAO,YAAY,YAAa,SAAQ,MAAM,+BAA+B,CAAC;AAAA,MACpF;AACA;AAAA,IACF;AACA,QAAI;AACF,YAAM,KAAK,gBAAgB,QAAQ;AAAA,IACrC,SAAS,GAAG;AACV,UAAI,OAAO,YAAY,YAAa,SAAQ,MAAM,6BAA6B,CAAC;AAAA,IAClF;AAAA,EACF;AAAA;AAAA,EAIA,MAAM,SAA0B;AAC9B,WAAO,MAAM,KAAK,KAAK,EAAE,MAAM,UAAU,IAAI,KAAK,SAAS,CAAC;AAAA,EAC9D;AAAA,EAEA,MAAM,WAA8B;AAClC,WAAO,MAAM,KAAK,KAAK,EAAE,MAAM,YAAY,IAAI,KAAK,SAAS,CAAC;AAAA,EAChE;AAAA,EAEA,MAAM,kBAAuC;AAC3C,WAAO,MAAM,KAAK,KAAK,EAAE,MAAM,mBAAmB,IAAI,KAAK,SAAS,CAAC;AAAA,EACvE;AAAA,EAEA,MAAM,mBAAmB,OAA0B,CAAC,GAA0B;AAC5E,UAAM,UAAU,MAAM,KAAK,KAAK;AAAA,MAC9B,MAAM;AAAA,MAAsB,IAAI,KAAK;AAAA,MAAU,MAAM,KAAK,QAAQ;AAAA,MAAM,OAAO,KAAK,IAAI;AAAA,IAC1F,CAAC;AACD,WAAO,KAAK,kBAAkB,OAAO;AAAA,EACvC;AAAA,EAEA,MAAM,iBAAiB,SAAiD;AACtE,UAAM,UAAU,MAAM,KAAK,KAAK;AAAA,MAC9B,MAAM;AAAA,MAAoB,IAAI,KAAK;AAAA,MAAU;AAAA,MAAS,OAAO,KAAK,IAAI;AAAA,IACxE,CAAC;AACD,WAAO,KAAK,kBAAkB,OAAO;AAAA,EACvC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,gBAAgB,IAAkC;AAChD,WAAO,KAAK,kBAAkB,EAAE;AAAA,EAClC;AAAA,EAEA,MAAM,oBAAiD;AACrD,UAAM,QAAQ,MAAM,KAAK,KAAK,EAAE,MAAM,qBAAqB,IAAI,KAAK,SAAS,CAAC;AAC9E,SAAK,UAAU,MAAM;AACrB,eAAW,KAAK,MAAO,MAAK,UAAU,IAAI,IAAI,EAAE,EAAE,GAAG,CAAC;AACtD,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,oBAAgD;AACpD,WAAO,MAAM,KAAK,KAAK;AAAA,MACrB,MAAM;AAAA,MAAqB,IAAI,KAAK;AAAA,MAAU,OAAO,KAAK,IAAI;AAAA,IAChE,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,gBAAgB,UAA4D;AAChF,WAAO,MAAM,KAAK,KAAK;AAAA,MACrB,MAAM;AAAA,MAAmB,IAAI,KAAK;AAAA,MAAU;AAAA,MAAU,OAAO,KAAK,IAAI;AAAA,IACxE,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,mBAAmB,aAAuB,aAAiD;AAC/F,WAAO,MAAM,KAAK,KAAK;AAAA,MACrB,MAAM;AAAA,MAAsB,IAAI,KAAK;AAAA,MACrC;AAAA,MAAa;AAAA,MAAa,OAAO,KAAK,IAAI;AAAA,IAC5C,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,qBAAqB,QAAsC;AAC/D,UAAM,KAAK,KAAK;AAAA,MACd,MAAM;AAAA,MAAwB,IAAI,KAAK;AAAA,MAAU;AAAA,MAAQ,OAAO,KAAK,IAAI;AAAA,IAC3E,CAAC;AAAA,EACH;AAAA;AAAA,EAGA,UAAU,SAAmD;AAC3D,SAAK,gBAAgB,IAAI,OAAO;AAChC,WAAO,MAAM,KAAK,gBAAgB,OAAO,OAAO;AAAA,EAClD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,sBAAsB,SAAqF;AACzG,SAAK,qBAAqB,IAAI,OAAO;AACrC,WAAO,MAAM,KAAK,qBAAqB,OAAO,OAAO;AAAA,EACvD;AAAA,EAEA,MAAM,QAAuB;AAC3B,SAAK,cAAc,YAAY;AAC/B,SAAK,OAAO,UAAU;AAAA,EACxB;AAAA;AAAA,EAIQ,kBAAkB,IAAkC;AAC1D,UAAM,OAAO;AACb,WAAO;AAAA,MACL;AAAA,MACA,MAAM,KAAK,WAAW;AACpB,eAAO,MAAM,KAAK,KAAK;AAAA,UACrB,MAAM;AAAA,UAAQ,IAAI,KAAK;AAAA,UAAU,MAAM;AAAA,UAAI;AAAA,UAAW,OAAO,KAAK,IAAI;AAAA,QACxE,CAAC;AAAA,MACH;AAAA,MACA,MAAM,WAAW,KAAK;AACpB,cAAM,KAAK,KAAK;AAAA,UACd,MAAM;AAAA,UAAc,IAAI,KAAK;AAAA,UAAU,MAAM;AAAA,UAAI;AAAA,UAAK,OAAO,KAAK,IAAI;AAAA,QACxE,CAAC;AAAA,MACH;AAAA,MACA,MAAM,cAAc,QAAQ;AAC1B,cAAM,KAAK,KAAK;AAAA,UACd,MAAM;AAAA,UAAiB,IAAI,KAAK;AAAA,UAAU,MAAM;AAAA,UAAI;AAAA,UAAQ,OAAO,KAAK,IAAI;AAAA,QAC9E,CAAC;AAAA,MACH;AAAA,MACA,OAAO;AACL,cAAM,SAAS,KAAK,UAAU,IAAI,IAAI,EAAE,CAAC;AACzC,YAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,8DAA8D;AAC3F,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AAAA,EAEQ,KAAK,KAAgC;AAC3C,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,WAAK,QAAQ,IAAK,IAAuB,IAAI,EAAE,SAAS,OAAO,CAAC;AAChE,WAAK,OAAO,YAAY,GAAG;AAAA,IAC7B,CAAC;AAAA,EACH;AAAA,EAEA,MAAc,aAAa,KAAe;AACxC,YAAQ,IAAI,MAAM;AAAA,MAChB,KAAK,UAAU;AACb,cAAM,OAAO,KAAK,QAAQ,IAAI,IAAI,EAAE;AACpC,YAAI,CAAC,KAAM;AACX,aAAK,QAAQ,OAAO,IAAI,EAAE;AAC1B,YAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,IAAI,KAAK,OAAO,IAAI,MAAM,IAAI,KAAK,CAAC;AACnE;AAAA,MACF;AAAA,MACA,KAAK,iBAAiB;AACpB,mBAAW,KAAK,KAAK,gBAAiB,GAAE,IAAI,GAAG;AAC/C;AAAA,MACF;AAAA,MACA,KAAK,sBAAsB;AACzB,mBAAW,KAAK,KAAK,qBAAsB,GAAE,IAAI,IAAI,IAAI,OAAO,IAAI,MAAM;AAC1E;AAAA,MACF;AAAA,MACA,KAAK,gBAAgB;AACnB,YAAI;AACF,gBAAM,IAAI,MAAO,KAAK,QACnB,IAAI,MAAM,IAAI,GAAG,IAAI,IAAI;AAC5B,eAAK,OAAO,YAAY,EAAE,MAAM,iBAAiB,IAAI,IAAI,IAAI,IAAI,MAAM,OAAO,EAAE,CAAY;AAAA,QAC9F,SAAS,GAAG;AACV,eAAK,OAAO,YAAY;AAAA,YACtB,MAAM;AAAA,YAAiB,IAAI,IAAI;AAAA,YAAI,IAAI;AAAA,YAAO,OAAO,OAAO,CAAC;AAAA,UAC/D,CAAY;AAAA,QACd;AACA;AAAA,MACF;AAAA,MACA,KAAK,kBAAkB;AACrB,YAAI;AACF,gBAAM,IAAI,MAAO,KAAK,UACnB,IAAI,MAAM,IAAI,GAAG,IAAI,IAAI;AAC5B,eAAK,OAAO,YAAY,EAAE,MAAM,mBAAmB,IAAI,IAAI,IAAI,IAAI,MAAM,OAAO,EAAE,CAAY;AAAA,QAChG,SAAS,GAAG;AACV,eAAK,OAAO,YAAY;AAAA,YACtB,MAAM;AAAA,YAAmB,IAAI,IAAI;AAAA,YAAI,IAAI;AAAA,YAAO,OAAO,OAAO,CAAC;AAAA,UACjE,CAAY;AAAA,QACd;AACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAEA,SAAS,IAAI,GAAuB;AAClC,MAAI,IAAI;AACR,aAAW,KAAK,EAAG,MAAK,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AACtD,SAAO;AACT;AAEA,SAAS,YAAY,GAAe,GAAwB;AAC1D,MAAI,EAAE,WAAW,EAAE,OAAQ,QAAO;AAClC,WAAS,IAAI,GAAG,IAAI,EAAE,QAAQ,IAAK,KAAI,EAAE,CAAC,MAAM,EAAE,CAAC,EAAG,QAAO;AAC7D,SAAO;AACT;","names":[]}

package/dist/index.d.cts

@@ -0,0 +1,73 @@
+import { S as Storage, T as Transport, C as ConversationId, M as MessageEnvelope, a as ConversationMeta, U as UserId, D as DeviceId, I as IncomingMessage, L as LinkingTicket } from './types-COHY5NU8.cjs';
+export { B as Bytes, b as DeviceInfo, c as DiscoveredDevice, H as Hlc, d as MessageKind } from './types-COHY5NU8.cjs';
+export { IndexedDbStorage } from './storage/indexeddb.cjs';
+export { WebSocketTransport } from './transport/websocket.cjs';
+
+interface ClientConfig {
+    identityExport: Uint8Array;
+    deviceLabel: string;
+    storage: Storage;
+    transport: Transport;
+    /** Override the wall clock (test/sim only). */
+    now?: () => number;
+}
+interface Conversation {
+    readonly id: ConversationId;
+    send(plaintext: Uint8Array): Promise<MessageEnvelope>;
+    addMembers(keyPackages: Uint8Array[]): Promise<void>;
+    removeMembers(leafIndexes: number[]): Promise<void>;
+    meta(): ConversationMeta;
+}
+declare class MessagingClient {
+    private worker;
+    private nextId;
+    private pending;
+    private storage;
+    private transport;
+    private now;
+    private messageHandlers;
+    private conversationHandlers;
+    private subscription;
+    private metaCache;
+    private ownDeviceId;
+    private constructor();
+    /** Generate a fresh identity. The returned bytes are a secret — store them encrypted. */
+    static generateIdentity(): Promise<Uint8Array>;
+    static init(cfg: ClientConfig): Promise<MessagingClient>;
+    /** Internal: route an inbound envelope to the right handler. */
+    private dispatchIncoming;
+    userId(): Promise<UserId>;
+    deviceId(): Promise<DeviceId>;
+    freshKeyPackage(): Promise<Uint8Array>;
+    createConversation(opts?: {
+        name?: string;
+    }): Promise<Conversation>;
+    joinConversation(welcome: MessageEnvelope): Promise<Conversation>;
+    /**
+     * Get a `Conversation` proxy for an already-known conversation. Use this when you have a
+     * conversation id (e.g., from `listConversations()`) and want to send/addMembers without
+     * re-creating it. Throws if the id isn't known to the worker — call `listConversations()`
+     * first to verify membership.
+     */
+    getConversation(id: ConversationId): Conversation;
+    listConversations(): Promise<ConversationMeta[]>;
+    syncConversations(): Promise<IncomingMessage[]>;
+    processEnvelope(envelope: MessageEnvelope): Promise<IncomingMessage | null>;
+    buildLinkingTicket(newDeviceId: DeviceId, newDeviceKp: Uint8Array): Promise<LinkingTicket>;
+    consumeLinkingTicket(ticket: LinkingTicket): Promise<void>;
+    /** Subscribe to decrypted application messages. */
+    onMessage(handler: (m: IncomingMessage) => void): () => void;
+    /** Fired after every state-changing event for a conversation (Commit, member changes). */
+    /**
+     * Fires after every conversation state change — joining via Welcome, processing a Commit,
+     * etc. `sender` carries the device id of whoever triggered the event when known (e.g. the
+     * inviter's device on auto-join), so the host can label peers in its UI.
+     */
+    onConversationUpdated(handler: (id: ConversationId, epoch: number, sender?: DeviceId) => void): () => void;
+    close(): Promise<void>;
+    private conversationProxy;
+    private call;
+    private handleWorker;
+}
+
+export { type ClientConfig, type Conversation, ConversationId, ConversationMeta, DeviceId, IncomingMessage, LinkingTicket, MessageEnvelope, MessagingClient, Storage, Transport, UserId };