ping-openmls-sdk 0.1.1 → 0.2.0

package/dist/transport/websocket.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/wire-contract.ts","../../src/transport/websocket.ts"],"sourcesContent":["// Ping wire contract — TypeScript counterpart to the `ping-wire-contract` Rust crate.\n//\n// MUST stay in lockstep with `core/ping-wire-contract/src/lib.rs`. The full normative spec\n// lives in `docs/PING_WIRE_CONTRACT.md`.\n//\n// What this module is for: code paths that cross the network boundary (transports, relays,\n// service workers) that need to advertise or validate ping-wire-contract conformance from\n// JavaScript without round-tripping through WASM.\n\nimport type { MessageEnvelope } from \"./types\";\n\n/** Ping wire contract version. Bumped on incompatible profile changes. */\nexport const PING_WIRE_CONTRACT_VERSION = 1;\n\n/** Canonical CBOR content type. Production transports MUST use this. */\nexport const CONTENT_TYPE_CBOR = \"application/vnd.ping.wire.v1+cbor\";\n\n/** JSON projection — development and tooling only. Production MUST NOT use this. */\nexport const CONTENT_TYPE_JSON = \"application/vnd.ping.wire.v1+json\";\n\n/** Header used over transports that don't surface a content type (e.g. WebSocket). */\nexport const PING_WIRE_CONTRACT_HEADER = \"X-Ping-Wire-Contract\";\n\n/** Header value: `ping/<VERSION>`. */\nexport const PING_WIRE_CONTRACT_HEADER_VALUE = `ping/${PING_WIRE_CONTRACT_VERSION}`;\n\nexport type ValidationErrorKind =\n  | \"UnsupportedVersion\"\n  | \"BadConversationIdLen\"\n  | \"BadSenderDeviceLen\"\n  | \"ContentHashMismatch\";\n\nexport class ValidationError extends Error {\n  constructor(public readonly kind: ValidationErrorKind, message: string) {\n    super(message);\n    this.name = \"PingWireContractValidationError\";\n  }\n}\n\nconst KIND_DISCRIMINANT: Record<MessageEnvelope[\"kind\"], number> = {\n  Application: 1,\n  Commit: 2,\n  Welcome: 3,\n  Proposal: 4,\n  KeyPackage: 5,\n};\n\nasync function sha256(bytes: Uint8Array): Promise<Uint8Array> {\n  // `crypto.subtle` is available in browsers, Node 20+, and Workers. `bytes.buffer`\n  // is typed as `ArrayBufferLike` which TS won't accept as `BufferSource` (the union\n  // includes `SharedArrayBuffer`); pass an explicit ArrayBuffer slice instead.\n  const ab = bytes.buffer.slice(bytes.byteOffset, bytes.byteOffset + bytes.byteLength) as ArrayBuffer;\n  const hash = await crypto.subtle.digest(\"SHA-256\", ab);\n  return new Uint8Array(hash);\n}\n\nfunction bytesEqual(a: Uint8Array, b: Uint8Array): boolean {\n  if (a.length !== b.length) return false;\n  for (let i = 0; i < a.length; i++) if (a[i] !== b[i]) return false;\n  return true;\n}\n\n/**\n * Validate an envelope against the ping-wire-contract.\n *\n * Receivers claiming contract conformance MUST call this before applying any envelope.\n * External consumers using the raw envelope under their own profile are not bound by\n * these rules.\n */\nexport async function validate(env: MessageEnvelope): Promise<void> {\n  if (env.v !== PING_WIRE_CONTRACT_VERSION) {\n    throw new ValidationError(\n      \"UnsupportedVersion\",\n      `unsupported wire-contract version: envelope says v=${env.v}, expected v=${PING_WIRE_CONTRACT_VERSION}`,\n    );\n  }\n  if (env.conversation_id.length !== 16) {\n    throw new ValidationError(\n      \"BadConversationIdLen\",\n      `conversation_id must be 16 bytes (ULID), got ${env.conversation_id.length}`,\n    );\n  }\n  if (env.sender_device.length !== 32) {\n    throw new ValidationError(\n      \"BadSenderDeviceLen\",\n      `sender_device must be 32 bytes, got ${env.sender_device.length}`,\n    );\n  }\n  const buf = new Uint8Array(1 + env.payload.length);\n  buf[0] = KIND_DISCRIMINANT[env.kind];\n  buf.set(env.payload, 1);\n  const computed = await sha256(buf);\n  if (!bytesEqual(computed, env.content_hash)) {\n    throw new ValidationError(\n      \"ContentHashMismatch\",\n      \"content_hash mismatch: envelope is forged, corrupted, or built by a non-conformant sender\",\n    );\n  }\n}\n\n/**\n * True if the supplied content type negotiates the ping-wire-contract.\n *\n * Tolerates whitespace and parameters (e.g. `; charset=utf-8`).\n */\nexport function negotiates(contentType: string | null | undefined): boolean {\n  if (!contentType) return false;\n  const primary = contentType.split(\";\")[0]?.trim().toLowerCase() ?? \"\";\n  return primary === CONTENT_TYPE_CBOR || primary === CONTENT_TYPE_JSON;\n}\n","// Reference WebSocket transport. Treats the server as an opaque relay that:\n//   - accepts a CBOR-encoded MessageEnvelope on `send`\n//   - returns events newer than a cursor on `fetchSince`\n//   - streams new events on the WS itself for `subscribe`\n//   - exposes a directory endpoint for `discoverDevices`\n//\n// This is a sample. Real deployments will tune framing / auth.\n\nimport type { ConversationId, DiscoveredDevice, MessageEnvelope, Transport, UserId } from \"../types\";\nimport {\n  CONTENT_TYPE_JSON,\n  PING_WIRE_CONTRACT_HEADER,\n  PING_WIRE_CONTRACT_HEADER_VALUE,\n} from \"../wire-contract\";\n\nexport interface WsTransportConfig {\n  baseUrl: string;          // ws[s]://...\n  authHeader?: string;      // optional bearer token\n  fetchImpl?: typeof fetch; // override for SSR / tests\n}\n\nexport class WebSocketTransport implements Transport {\n  private ws: WebSocket | null = null;\n  private liveHandlers = new Set<(env: MessageEnvelope) => void>();\n  private fetchImpl: typeof fetch;\n\n  constructor(private cfg: WsTransportConfig) {\n    this.fetchImpl = cfg.fetchImpl ?? globalThis.fetch.bind(globalThis);\n    this.openSocket();\n  }\n\n  private openSocket() {\n    if (typeof WebSocket === \"undefined\") return;\n    const url = `${this.cfg.baseUrl.replace(/^http/, \"ws\")}/stream`;\n    this.ws = new WebSocket(url);\n    this.ws.onmessage = (ev) => {\n      // Server sends one JSON envelope per text frame.\n      const text = typeof ev.data === \"string\" ? ev.data : new TextDecoder().decode(ev.data as ArrayBuffer);\n      try {\n        const env = JSON.parse(text, reviver) as MessageEnvelope;\n        for (const h of this.liveHandlers) h(env);\n      } catch (e) {\n        if (typeof console !== \"undefined\") console.debug(\"[ping-sdk] WS frame parse error:\", e);\n      }\n    };\n    this.ws.onclose = () => setTimeout(() => this.openSocket(), 1000);\n  }\n\n  async send(envelope: MessageEnvelope): Promise<void> {\n    // We're emitting the JSON projection of the ping-wire-contract. Production transports\n    // would use CONTENT_TYPE_CBOR with a real CBOR codec; for the demo path the JSON shape\n    // is the documented development projection.\n    const res = await this.fetchImpl(`${this.cfg.baseUrl}/send`, {\n      method: \"POST\",\n      headers: {\n        \"content-type\": CONTENT_TYPE_JSON,\n        [PING_WIRE_CONTRACT_HEADER]: PING_WIRE_CONTRACT_HEADER_VALUE,\n        ...(this.cfg.authHeader ? { authorization: this.cfg.authHeader } : {}),\n      },\n      body: JSON.stringify(envelope, replacer),\n    });\n    if (res.status === 409) throw new Error(\"EpochOccupied\");\n    if (!res.ok) throw new Error(`transport send failed: ${res.status}`);\n  }\n\n  async fetchSince(conversationId: ConversationId, cursor: Uint8Array, limit: number): Promise<MessageEnvelope[]> {\n    const url = new URL(`${this.cfg.baseUrl}/sync`);\n    url.searchParams.set(\"conv\", toHex(conversationId));\n    url.searchParams.set(\"cursor\", btoaUrl(cursor));\n    url.searchParams.set(\"limit\", String(limit));\n    const res = await this.fetchImpl(url.toString(), {\n      headers: { ...(this.cfg.authHeader ? { authorization: this.cfg.authHeader } : {}) },\n    });\n    if (!res.ok) throw new Error(`transport fetch failed: ${res.status}`);\n    const text = await res.text();\n    return JSON.parse(text, reviver) as MessageEnvelope[];\n  }\n\n  subscribe(onEvent: (env: MessageEnvelope) => void): { unsubscribe(): void } {\n    this.liveHandlers.add(onEvent);\n    return { unsubscribe: () => this.liveHandlers.delete(onEvent) };\n  }\n\n  async discoverDevices(userId: UserId): Promise<DiscoveredDevice[]> {\n    const res = await this.fetchImpl(`${this.cfg.baseUrl}/devices/${toHex(userId)}`, {\n      headers: { ...(this.cfg.authHeader ? { authorization: this.cfg.authHeader } : {}) },\n    });\n    if (!res.ok) throw new Error(`device discovery failed: ${res.status}`);\n    const text = await res.text();\n    return JSON.parse(text, reviver) as DiscoveredDevice[];\n  }\n}\n\n// ---- Wire codec ----\n//\n// Demo wire format: JSON with byte fields wrapped as `{ _bytes: number[] }`. The relay's\n// `envFromJson`/`envToJson` use the same shape. The spec calls for CBOR; v0.2 swaps in a\n// real CBOR codec, but the JSON form is much friendlier to debug.\n//\n// (decodeEnvelope helpers used to live here; collapsed into inline JSON.parse calls above.)\n\nfunction replacer(_k: string, v: unknown): unknown {\n  if (v instanceof Uint8Array) return { _bytes: Array.from(v) };\n  return v;\n}\nfunction reviver(_k: string, v: unknown): unknown {\n  if (v && typeof v === \"object\" && Array.isArray((v as { _bytes?: number[] })._bytes)) {\n    return new Uint8Array((v as { _bytes: number[] })._bytes);\n  }\n  return v;\n}\n\nfunction toHex(b: Uint8Array): string {\n  let s = \"\"; for (const v of b) s += v.toString(16).padStart(2, \"0\"); return s;\n}\nfunction btoaUrl(b: Uint8Array): string {\n  let s = \"\"; for (const v of b) s += String.fromCharCode(v);\n  return btoa(s).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n"],"mappings":";AAYO,IAAM,6BAA6B;AAMnC,IAAM,oBAAoB;AAG1B,IAAM,4BAA4B;AAGlC,IAAM,kCAAkC,QAAQ,0BAA0B;;;ACH1E,IAAM,qBAAN,MAA8C;AAAA,EAKnD,YAAoB,KAAwB;AAAxB;AAClB,SAAK,YAAY,IAAI,aAAa,WAAW,MAAM,KAAK,UAAU;AAClE,SAAK,WAAW;AAAA,EAClB;AAAA,EAHoB;AAAA,EAJZ,KAAuB;AAAA,EACvB,eAAe,oBAAI,IAAoC;AAAA,EACvD;AAAA,EAOA,aAAa;AACnB,QAAI,OAAO,cAAc,YAAa;AACtC,UAAM,MAAM,GAAG,KAAK,IAAI,QAAQ,QAAQ,SAAS,IAAI,CAAC;AACtD,SAAK,KAAK,IAAI,UAAU,GAAG;AAC3B,SAAK,GAAG,YAAY,CAAC,OAAO;AAE1B,YAAM,OAAO,OAAO,GAAG,SAAS,WAAW,GAAG,OAAO,IAAI,YAAY,EAAE,OAAO,GAAG,IAAmB;AACpG,UAAI;AACF,cAAM,MAAM,KAAK,MAAM,MAAM,OAAO;AACpC,mBAAW,KAAK,KAAK,aAAc,GAAE,GAAG;AAAA,MAC1C,SAAS,GAAG;AACV,YAAI,OAAO,YAAY,YAAa,SAAQ,MAAM,oCAAoC,CAAC;AAAA,MACzF;AAAA,IACF;AACA,SAAK,GAAG,UAAU,MAAM,WAAW,MAAM,KAAK,WAAW,GAAG,GAAI;AAAA,EAClE;AAAA,EAEA,MAAM,KAAK,UAA0C;AAInD,UAAM,MAAM,MAAM,KAAK,UAAU,GAAG,KAAK,IAAI,OAAO,SAAS;AAAA,MAC3D,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,CAAC,yBAAyB,GAAG;AAAA,QAC7B,GAAI,KAAK,IAAI,aAAa,EAAE,eAAe,KAAK,IAAI,WAAW,IAAI,CAAC;AAAA,MACtE;AAAA,MACA,MAAM,KAAK,UAAU,UAAU,QAAQ;AAAA,IACzC,CAAC;AACD,QAAI,IAAI,WAAW,IAAK,OAAM,IAAI,MAAM,eAAe;AACvD,QAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,0BAA0B,IAAI,MAAM,EAAE;AAAA,EACrE;AAAA,EAEA,MAAM,WAAW,gBAAgC,QAAoB,OAA2C;AAC9G,UAAM,MAAM,IAAI,IAAI,GAAG,KAAK,IAAI,OAAO,OAAO;AAC9C,QAAI,aAAa,IAAI,QAAQ,MAAM,cAAc,CAAC;AAClD,QAAI,aAAa,IAAI,UAAU,QAAQ,MAAM,CAAC;AAC9C,QAAI,aAAa,IAAI,SAAS,OAAO,KAAK,CAAC;AAC3C,UAAM,MAAM,MAAM,KAAK,UAAU,IAAI,SAAS,GAAG;AAAA,MAC/C,SAAS,EAAE,GAAI,KAAK,IAAI,aAAa,EAAE,eAAe,KAAK,IAAI,WAAW,IAAI,CAAC,EAAG;AAAA,IACpF,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,2BAA2B,IAAI,MAAM,EAAE;AACpE,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,WAAO,KAAK,MAAM,MAAM,OAAO;AAAA,EACjC;AAAA,EAEA,UAAU,SAAkE;AAC1E,SAAK,aAAa,IAAI,OAAO;AAC7B,WAAO,EAAE,aAAa,MAAM,KAAK,aAAa,OAAO,OAAO,EAAE;AAAA,EAChE;AAAA,EAEA,MAAM,gBAAgB,QAA6C;AACjE,UAAM,MAAM,MAAM,KAAK,UAAU,GAAG,KAAK,IAAI,OAAO,YAAY,MAAM,MAAM,CAAC,IAAI;AAAA,MAC/E,SAAS,EAAE,GAAI,KAAK,IAAI,aAAa,EAAE,eAAe,KAAK,IAAI,WAAW,IAAI,CAAC,EAAG;AAAA,IACpF,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,4BAA4B,IAAI,MAAM,EAAE;AACrE,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,WAAO,KAAK,MAAM,MAAM,OAAO;AAAA,EACjC;AACF;AAUA,SAAS,SAAS,IAAY,GAAqB;AACjD,MAAI,aAAa,WAAY,QAAO,EAAE,QAAQ,MAAM,KAAK,CAAC,EAAE;AAC5D,SAAO;AACT;AACA,SAAS,QAAQ,IAAY,GAAqB;AAChD,MAAI,KAAK,OAAO,MAAM,YAAY,MAAM,QAAS,EAA4B,MAAM,GAAG;AACpF,WAAO,IAAI,WAAY,EAA2B,MAAM;AAAA,EAC1D;AACA,SAAO;AACT;AAEA,SAAS,MAAM,GAAuB;AACpC,MAAI,IAAI;AAAI,aAAW,KAAK,EAAG,MAAK,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAAG,SAAO;AAC9E;AACA,SAAS,QAAQ,GAAuB;AACtC,MAAI,IAAI;AAAI,aAAW,KAAK,EAAG,MAAK,OAAO,aAAa,CAAC;AACzD,SAAO,KAAK,CAAC,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,EAAE;AAC1E;","names":[]}
+{"version":3,"sources":["../../src/wire-contract.ts","../../src/transport/websocket.ts"],"sourcesContent":["// Ping wire contract — TypeScript counterpart to the `ping-wire-contract` Rust crate.\n//\n// MUST stay in lockstep with `core/ping-wire-contract/src/lib.rs`. The full normative spec\n// lives in `docs/PING_WIRE_CONTRACT.md`.\n//\n// What this module is for: code paths that cross the network boundary (transports, relays,\n// service workers) that need to advertise or validate ping-wire-contract conformance from\n// JavaScript without round-tripping through WASM.\n\nimport type { MessageEnvelope } from \"./types\";\n\n/**\n * Ping wire contract version. Bumped on incompatible profile changes.\n *\n * Currently `2` — CR-6 changes the `content_hash` semantics for `Application` envelopes\n * (now hashed over plaintext, not the MLS ciphertext). Receivers run a 90-day dual-accept\n * window per Q-ARCH-02; see [[validate]] for the per-version routing.\n */\nexport const PING_WIRE_CONTRACT_VERSION = 2;\n\n/** Lowest envelope version accepted by [[validate]] during the dual-accept window. */\nexport const WIRE_VERSION_MIN_ACCEPTED = 1;\n\n/** Canonical CBOR content type. Production transports SHOULD use this. */\nexport const CONTENT_TYPE_CBOR = \"application/vnd.ping.wire.v2+cbor\";\n\n/** JSON projection — development and tooling only. Production MUST NOT use this. */\nexport const CONTENT_TYPE_JSON = \"application/vnd.ping.wire.v2+json\";\n\n/** Legacy v1 CBOR type, accepted during the CR-6 dual-accept window. */\nexport const CONTENT_TYPE_CBOR_LEGACY_V1 = \"application/vnd.ping.wire.v1+cbor\";\n\n/** Legacy v1 JSON type, accepted during the CR-6 dual-accept window. */\nexport const CONTENT_TYPE_JSON_LEGACY_V1 = \"application/vnd.ping.wire.v1+json\";\n\n/** Header used over transports that don't surface a content type (e.g. WebSocket). */\nexport const PING_WIRE_CONTRACT_HEADER = \"X-Ping-Wire-Contract\";\n\n/** Header value: `ping/<VERSION>`. */\nexport const PING_WIRE_CONTRACT_HEADER_VALUE = `ping/${PING_WIRE_CONTRACT_VERSION}`;\n\nexport type ValidationErrorKind =\n  | \"UnsupportedVersion\"\n  | \"BadConversationIdLen\"\n  | \"BadSenderDeviceLen\"\n  | \"ContentHashMismatch\";\n\nexport class ValidationError extends Error {\n  constructor(public readonly kind: ValidationErrorKind, message: string) {\n    super(message);\n    this.name = \"PingWireContractValidationError\";\n  }\n}\n\nconst KIND_DISCRIMINANT: Record<MessageEnvelope[\"kind\"], number> = {\n  Application: 1,\n  Commit: 2,\n  Welcome: 3,\n  Proposal: 4,\n  KeyPackage: 5,\n};\n\nasync function sha256(bytes: Uint8Array): Promise<Uint8Array> {\n  // `crypto.subtle` is available in browsers, Node 20+, and Workers. `bytes.buffer`\n  // is typed as `ArrayBufferLike` which TS won't accept as `BufferSource` (the union\n  // includes `SharedArrayBuffer`); pass an explicit ArrayBuffer slice instead.\n  const ab = bytes.buffer.slice(bytes.byteOffset, bytes.byteOffset + bytes.byteLength) as ArrayBuffer;\n  const hash = await crypto.subtle.digest(\"SHA-256\", ab);\n  return new Uint8Array(hash);\n}\n\nfunction bytesEqual(a: Uint8Array, b: Uint8Array): boolean {\n  if (a.length !== b.length) return false;\n  for (let i = 0; i < a.length; i++) if (a[i] !== b[i]) return false;\n  return true;\n}\n\n/**\n * Validate an envelope against the ping-wire-contract.\n *\n * Receivers claiming contract conformance MUST call this before applying any envelope.\n * External consumers using the raw envelope under their own profile are not bound by\n * these rules.\n *\n * CR-6 dual-accept window: `v ∈ [WIRE_VERSION_MIN_ACCEPTED, PING_WIRE_CONTRACT_VERSION]`\n * passes the version gate. For v=2 `Application` envelopes the content_hash is over\n * plaintext, so this function skips that check — callers MUST run\n * [[verifyApplicationContentHash]] after MLS decrypt to close the loop.\n */\nexport async function validate(env: MessageEnvelope): Promise<void> {\n  if (env.v < WIRE_VERSION_MIN_ACCEPTED || env.v > PING_WIRE_CONTRACT_VERSION) {\n    throw new ValidationError(\n      \"UnsupportedVersion\",\n      `unsupported wire-contract version: envelope says v=${env.v}, expected v∈[${WIRE_VERSION_MIN_ACCEPTED}, ${PING_WIRE_CONTRACT_VERSION}]`,\n    );\n  }\n  if (env.conversation_id.length !== 16) {\n    throw new ValidationError(\n      \"BadConversationIdLen\",\n      `conversation_id must be 16 bytes (ULID), got ${env.conversation_id.length}`,\n    );\n  }\n  if (env.sender_device.length !== 32) {\n    throw new ValidationError(\n      \"BadSenderDeviceLen\",\n      `sender_device must be 32 bytes, got ${env.sender_device.length}`,\n    );\n  }\n  // CR-6 routing: skip the hash check for v=2 application envelopes.\n  if (env.v >= 2 && env.kind === \"Application\") {\n    return;\n  }\n  const buf = new Uint8Array(1 + env.payload.length);\n  buf[0] = KIND_DISCRIMINANT[env.kind];\n  buf.set(env.payload, 1);\n  const computed = await sha256(buf);\n  if (!bytesEqual(computed, env.content_hash)) {\n    throw new ValidationError(\n      \"ContentHashMismatch\",\n      \"content_hash mismatch: envelope is forged, corrupted, or built by a non-conformant sender\",\n    );\n  }\n}\n\n/**\n * Verify a v=2 `Application` envelope's content_hash against the decrypted plaintext.\n *\n * Caller MUST run this after MLS decrypt for application envelopes whose `v >= 2`. For\n * v=1 envelopes or handshake kinds this is a no-op (those are covered by [[validate]]).\n */\nexport async function verifyApplicationContentHash(\n  env: MessageEnvelope,\n  plaintext: Uint8Array,\n): Promise<void> {\n  if (env.v < 2 || env.kind !== \"Application\") return;\n  const computed = await sha256(plaintext);\n  if (!bytesEqual(computed, env.content_hash)) {\n    throw new ValidationError(\n      \"ContentHashMismatch\",\n      \"v=2 application content_hash mismatch against decrypted plaintext\",\n    );\n  }\n}\n\n/**\n * True if the supplied content type negotiates the ping-wire-contract.\n *\n * Accepts the v2 canonical types AND the v1 legacy types during the CR-6 dual-accept\n * window. Tolerates whitespace and parameters (e.g. `; charset=utf-8`).\n */\nexport function negotiates(contentType: string | null | undefined): boolean {\n  if (!contentType) return false;\n  const primary = contentType.split(\";\")[0]?.trim().toLowerCase() ?? \"\";\n  return (\n    primary === CONTENT_TYPE_CBOR\n    || primary === CONTENT_TYPE_JSON\n    || primary === CONTENT_TYPE_CBOR_LEGACY_V1\n    || primary === CONTENT_TYPE_JSON_LEGACY_V1\n  );\n}\n","// Reference WebSocket transport. Treats the server as an opaque relay that:\n//   - accepts a CBOR-encoded MessageEnvelope on `send`\n//   - returns events newer than a cursor on `fetchSince`\n//   - streams new events on the WS itself for `subscribe`\n//   - exposes a directory endpoint for `discoverDevices`\n//\n// This is a sample. Real deployments will tune framing / auth.\n\nimport type { ConversationId, DiscoveredDevice, MessageEnvelope, Transport, UserId } from \"../types\";\nimport {\n  CONTENT_TYPE_JSON,\n  PING_WIRE_CONTRACT_HEADER,\n  PING_WIRE_CONTRACT_HEADER_VALUE,\n} from \"../wire-contract\";\n\nexport interface WsTransportConfig {\n  baseUrl: string;          // ws[s]://...\n  authHeader?: string;      // optional bearer token\n  fetchImpl?: typeof fetch; // override for SSR / tests\n}\n\nexport class WebSocketTransport implements Transport {\n  private ws: WebSocket | null = null;\n  private liveHandlers = new Set<(env: MessageEnvelope) => void>();\n  private fetchImpl: typeof fetch;\n\n  constructor(private cfg: WsTransportConfig) {\n    this.fetchImpl = cfg.fetchImpl ?? globalThis.fetch.bind(globalThis);\n    this.openSocket();\n  }\n\n  private openSocket() {\n    if (typeof WebSocket === \"undefined\") return;\n    const url = `${this.cfg.baseUrl.replace(/^http/, \"ws\")}/stream`;\n    this.ws = new WebSocket(url);\n    this.ws.onmessage = (ev) => {\n      // Server sends one JSON envelope per text frame.\n      const text = typeof ev.data === \"string\" ? ev.data : new TextDecoder().decode(ev.data as ArrayBuffer);\n      try {\n        const env = JSON.parse(text, reviver) as MessageEnvelope;\n        for (const h of this.liveHandlers) h(env);\n      } catch (e) {\n        if (typeof console !== \"undefined\") console.debug(\"[ping-sdk] WS frame parse error:\", e);\n      }\n    };\n    this.ws.onclose = () => setTimeout(() => this.openSocket(), 1000);\n  }\n\n  async send(envelope: MessageEnvelope): Promise<void> {\n    // We're emitting the JSON projection of the ping-wire-contract. Production transports\n    // would use CONTENT_TYPE_CBOR with a real CBOR codec; for the demo path the JSON shape\n    // is the documented development projection.\n    const res = await this.fetchImpl(`${this.cfg.baseUrl}/send`, {\n      method: \"POST\",\n      headers: {\n        \"content-type\": CONTENT_TYPE_JSON,\n        [PING_WIRE_CONTRACT_HEADER]: PING_WIRE_CONTRACT_HEADER_VALUE,\n        ...(this.cfg.authHeader ? { authorization: this.cfg.authHeader } : {}),\n      },\n      body: JSON.stringify(envelope, replacer),\n    });\n    if (res.status === 409) throw new Error(\"EpochOccupied\");\n    if (!res.ok) throw new Error(`transport send failed: ${res.status}`);\n  }\n\n  async fetchSince(conversationId: ConversationId, cursor: Uint8Array, limit: number): Promise<MessageEnvelope[]> {\n    const url = new URL(`${this.cfg.baseUrl}/sync`);\n    url.searchParams.set(\"conv\", toHex(conversationId));\n    url.searchParams.set(\"cursor\", btoaUrl(cursor));\n    url.searchParams.set(\"limit\", String(limit));\n    const res = await this.fetchImpl(url.toString(), {\n      headers: { ...(this.cfg.authHeader ? { authorization: this.cfg.authHeader } : {}) },\n    });\n    if (!res.ok) throw new Error(`transport fetch failed: ${res.status}`);\n    const text = await res.text();\n    return JSON.parse(text, reviver) as MessageEnvelope[];\n  }\n\n  subscribe(onEvent: (env: MessageEnvelope) => void): { unsubscribe(): void } {\n    this.liveHandlers.add(onEvent);\n    return { unsubscribe: () => this.liveHandlers.delete(onEvent) };\n  }\n\n  async discoverDevices(userId: UserId): Promise<DiscoveredDevice[]> {\n    const res = await this.fetchImpl(`${this.cfg.baseUrl}/devices/${toHex(userId)}`, {\n      headers: { ...(this.cfg.authHeader ? { authorization: this.cfg.authHeader } : {}) },\n    });\n    if (!res.ok) throw new Error(`device discovery failed: ${res.status}`);\n    const text = await res.text();\n    return JSON.parse(text, reviver) as DiscoveredDevice[];\n  }\n}\n\n// ---- Wire codec ----\n//\n// Demo wire format: JSON with byte fields wrapped as `{ _bytes: number[] }`. The relay's\n// `envFromJson`/`envToJson` use the same shape. The spec calls for CBOR; v0.2 swaps in a\n// real CBOR codec, but the JSON form is much friendlier to debug.\n//\n// (decodeEnvelope helpers used to live here; collapsed into inline JSON.parse calls above.)\n\nfunction replacer(_k: string, v: unknown): unknown {\n  if (v instanceof Uint8Array) return { _bytes: Array.from(v) };\n  return v;\n}\nfunction reviver(_k: string, v: unknown): unknown {\n  if (v && typeof v === \"object\" && Array.isArray((v as { _bytes?: number[] })._bytes)) {\n    return new Uint8Array((v as { _bytes: number[] })._bytes);\n  }\n  return v;\n}\n\nfunction toHex(b: Uint8Array): string {\n  let s = \"\"; for (const v of b) s += v.toString(16).padStart(2, \"0\"); return s;\n}\nfunction btoaUrl(b: Uint8Array): string {\n  let s = \"\"; for (const v of b) s += String.fromCharCode(v);\n  return btoa(s).replace(/\\+/g, \"-\").replace(/\\//g, \"_\").replace(/=+$/, \"\");\n}\n"],"mappings":";AAkBO,IAAM,6BAA6B;AASnC,IAAM,oBAAoB;AAS1B,IAAM,4BAA4B;AAGlC,IAAM,kCAAkC,QAAQ,0BAA0B;;;AClB1E,IAAM,qBAAN,MAA8C;AAAA,EAKnD,YAAoB,KAAwB;AAAxB;AAClB,SAAK,YAAY,IAAI,aAAa,WAAW,MAAM,KAAK,UAAU;AAClE,SAAK,WAAW;AAAA,EAClB;AAAA,EAHoB;AAAA,EAJZ,KAAuB;AAAA,EACvB,eAAe,oBAAI,IAAoC;AAAA,EACvD;AAAA,EAOA,aAAa;AACnB,QAAI,OAAO,cAAc,YAAa;AACtC,UAAM,MAAM,GAAG,KAAK,IAAI,QAAQ,QAAQ,SAAS,IAAI,CAAC;AACtD,SAAK,KAAK,IAAI,UAAU,GAAG;AAC3B,SAAK,GAAG,YAAY,CAAC,OAAO;AAE1B,YAAM,OAAO,OAAO,GAAG,SAAS,WAAW,GAAG,OAAO,IAAI,YAAY,EAAE,OAAO,GAAG,IAAmB;AACpG,UAAI;AACF,cAAM,MAAM,KAAK,MAAM,MAAM,OAAO;AACpC,mBAAW,KAAK,KAAK,aAAc,GAAE,GAAG;AAAA,MAC1C,SAAS,GAAG;AACV,YAAI,OAAO,YAAY,YAAa,SAAQ,MAAM,oCAAoC,CAAC;AAAA,MACzF;AAAA,IACF;AACA,SAAK,GAAG,UAAU,MAAM,WAAW,MAAM,KAAK,WAAW,GAAG,GAAI;AAAA,EAClE;AAAA,EAEA,MAAM,KAAK,UAA0C;AAInD,UAAM,MAAM,MAAM,KAAK,UAAU,GAAG,KAAK,IAAI,OAAO,SAAS;AAAA,MAC3D,QAAQ;AAAA,MACR,SAAS;AAAA,QACP,gBAAgB;AAAA,QAChB,CAAC,yBAAyB,GAAG;AAAA,QAC7B,GAAI,KAAK,IAAI,aAAa,EAAE,eAAe,KAAK,IAAI,WAAW,IAAI,CAAC;AAAA,MACtE;AAAA,MACA,MAAM,KAAK,UAAU,UAAU,QAAQ;AAAA,IACzC,CAAC;AACD,QAAI,IAAI,WAAW,IAAK,OAAM,IAAI,MAAM,eAAe;AACvD,QAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,0BAA0B,IAAI,MAAM,EAAE;AAAA,EACrE;AAAA,EAEA,MAAM,WAAW,gBAAgC,QAAoB,OAA2C;AAC9G,UAAM,MAAM,IAAI,IAAI,GAAG,KAAK,IAAI,OAAO,OAAO;AAC9C,QAAI,aAAa,IAAI,QAAQ,MAAM,cAAc,CAAC;AAClD,QAAI,aAAa,IAAI,UAAU,QAAQ,MAAM,CAAC;AAC9C,QAAI,aAAa,IAAI,SAAS,OAAO,KAAK,CAAC;AAC3C,UAAM,MAAM,MAAM,KAAK,UAAU,IAAI,SAAS,GAAG;AAAA,MAC/C,SAAS,EAAE,GAAI,KAAK,IAAI,aAAa,EAAE,eAAe,KAAK,IAAI,WAAW,IAAI,CAAC,EAAG;AAAA,IACpF,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,2BAA2B,IAAI,MAAM,EAAE;AACpE,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,WAAO,KAAK,MAAM,MAAM,OAAO;AAAA,EACjC;AAAA,EAEA,UAAU,SAAkE;AAC1E,SAAK,aAAa,IAAI,OAAO;AAC7B,WAAO,EAAE,aAAa,MAAM,KAAK,aAAa,OAAO,OAAO,EAAE;AAAA,EAChE;AAAA,EAEA,MAAM,gBAAgB,QAA6C;AACjE,UAAM,MAAM,MAAM,KAAK,UAAU,GAAG,KAAK,IAAI,OAAO,YAAY,MAAM,MAAM,CAAC,IAAI;AAAA,MAC/E,SAAS,EAAE,GAAI,KAAK,IAAI,aAAa,EAAE,eAAe,KAAK,IAAI,WAAW,IAAI,CAAC,EAAG;AAAA,IACpF,CAAC;AACD,QAAI,CAAC,IAAI,GAAI,OAAM,IAAI,MAAM,4BAA4B,IAAI,MAAM,EAAE;AACrE,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,WAAO,KAAK,MAAM,MAAM,OAAO;AAAA,EACjC;AACF;AAUA,SAAS,SAAS,IAAY,GAAqB;AACjD,MAAI,aAAa,WAAY,QAAO,EAAE,QAAQ,MAAM,KAAK,CAAC,EAAE;AAC5D,SAAO;AACT;AACA,SAAS,QAAQ,IAAY,GAAqB;AAChD,MAAI,KAAK,OAAO,MAAM,YAAY,MAAM,QAAS,EAA4B,MAAM,GAAG;AACpF,WAAO,IAAI,WAAY,EAA2B,MAAM;AAAA,EAC1D;AACA,SAAO;AACT;AAEA,SAAS,MAAM,GAAuB;AACpC,MAAI,IAAI;AAAI,aAAW,KAAK,EAAG,MAAK,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG;AAAG,SAAO;AAC9E;AACA,SAAS,QAAQ,GAAuB;AACtC,MAAI,IAAI;AAAI,aAAW,KAAK,EAAG,MAAK,OAAO,aAAa,CAAC;AACzD,SAAO,KAAK,CAAC,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,GAAG,EAAE,QAAQ,OAAO,EAAE;AAC1E;","names":[]}

package/dist/{types-jd8CLdi_.d.cts → types-DYtsj5dy.d.cts}

@@ -55,6 +55,33 @@ interface DiscoveredDevice {
     device_id: DeviceId;
     key_package: Bytes;
 }
+/** [CR-2] Pair supplied to `addMembers`. Maps 1:1 to `DiscoveredDevice` so hosts can
+ *  rename a directory result and pass it through unchanged. */
+interface KeyPackageEntry {
+    deviceId: DeviceId;
+    keyPackage: Bytes;
+}
+/** [CR-13] One host-supplied (conversation, last-AppEvent) pair for
+ *  `buildLinkingTicket`. The new device renders these as "what you missed". */
+interface CatchupAppEvent {
+    conversationId: ConversationId;
+    appEventBytes: Bytes;
+}
+/** [CR-13] Decoded `LinkingTicket.catchup_snapshot`. The `group_state_bytes` field is
+ *  reserved for CR-7 — empty until that ships. */
+interface CatchupSnapshotEntry {
+    conversation_id: ConversationId;
+    meta: ConversationMeta;
+    group_state_bytes: Bytes;
+}
+interface CatchupSnapshotView {
+    v: number;
+    conversation_metas: CatchupSnapshotEntry[];
+    last_app_events_per_conv: {
+        conversation_id: ConversationId;
+        app_event_bytes: Bytes;
+    }[];
+}
 interface Storage {
     get(namespace: string, key: string): Promise<Uint8Array | null>;
     put(namespace: string, key: string, value: Uint8Array): Promise<void>;
@@ -71,4 +98,4 @@ interface Transport {
     discoverDevices(userId: UserId): Promise<DiscoveredDevice[]>;
 }
 
-export type { Bytes as B, ConversationId as C, DiscoveredDevice as D, Hlc as H, IncomingMessage as I, LinkingTicket as L, MessageEnvelope as M, Storage as S, Transport as T, UserId as U, ConversationMeta as a, DeviceId as b, DeviceInfo as c, MessageKind as d };
+export type { Bytes as B, ConversationId as C, DiscoveredDevice as D, Hlc as H, IncomingMessage as I, KeyPackageEntry as K, LinkingTicket as L, MessageEnvelope as M, Storage as S, Transport as T, UserId as U, ConversationMeta as a, DeviceId as b, CatchupAppEvent as c, CatchupSnapshotView as d, CatchupSnapshotEntry as e, DeviceInfo as f, MessageKind as g };

package/dist/{types-jd8CLdi_.d.ts → types-DYtsj5dy.d.ts}

@@ -55,6 +55,33 @@ interface DiscoveredDevice {
     device_id: DeviceId;
     key_package: Bytes;
 }
+/** [CR-2] Pair supplied to `addMembers`. Maps 1:1 to `DiscoveredDevice` so hosts can
+ *  rename a directory result and pass it through unchanged. */
+interface KeyPackageEntry {
+    deviceId: DeviceId;
+    keyPackage: Bytes;
+}
+/** [CR-13] One host-supplied (conversation, last-AppEvent) pair for
+ *  `buildLinkingTicket`. The new device renders these as "what you missed". */
+interface CatchupAppEvent {
+    conversationId: ConversationId;
+    appEventBytes: Bytes;
+}
+/** [CR-13] Decoded `LinkingTicket.catchup_snapshot`. The `group_state_bytes` field is
+ *  reserved for CR-7 — empty until that ships. */
+interface CatchupSnapshotEntry {
+    conversation_id: ConversationId;
+    meta: ConversationMeta;
+    group_state_bytes: Bytes;
+}
+interface CatchupSnapshotView {
+    v: number;
+    conversation_metas: CatchupSnapshotEntry[];
+    last_app_events_per_conv: {
+        conversation_id: ConversationId;
+        app_event_bytes: Bytes;
+    }[];
+}
 interface Storage {
     get(namespace: string, key: string): Promise<Uint8Array | null>;
     put(namespace: string, key: string, value: Uint8Array): Promise<void>;
@@ -71,4 +98,4 @@ interface Transport {
     discoverDevices(userId: UserId): Promise<DiscoveredDevice[]>;
 }
 
-export type { Bytes as B, ConversationId as C, DiscoveredDevice as D, Hlc as H, IncomingMessage as I, LinkingTicket as L, MessageEnvelope as M, Storage as S, Transport as T, UserId as U, ConversationMeta as a, DeviceId as b, DeviceInfo as c, MessageKind as d };
+export type { Bytes as B, ConversationId as C, DiscoveredDevice as D, Hlc as H, IncomingMessage as I, KeyPackageEntry as K, LinkingTicket as L, MessageEnvelope as M, Storage as S, Transport as T, UserId as U, ConversationMeta as a, DeviceId as b, CatchupAppEvent as c, CatchupSnapshotView as d, CatchupSnapshotEntry as e, DeviceInfo as f, MessageKind as g };

package/dist/worker.cjs

@@ -125,9 +125,11 @@ async function dispatch(msg) {
     case "send":
       return await ensureClient().send(msg.conv, msg.plaintext, msg.nowMs);
     case "addMembers":
-      return await ensureClient().addMembers(msg.conv, msg.kps, msg.nowMs);
+      return await ensureClient().addMembers(msg.conv, msg.entries, msg.nowMs);
     case "removeMembers":
       return await ensureClient().removeMembers(msg.conv, new Uint32Array(msg.leaves), msg.nowMs);
+    case "revokeDevice":
+      return await ensureClient().revokeDevice(msg.deviceId, msg.nowMs);
     case "processEnvelope": {
       const result = await ensureClient().processEnvelope(msg.envelope, msg.nowMs);
       self.postMessage({
@@ -140,10 +142,32 @@ async function dispatch(msg) {
     case "syncConversations":
       return await ensureClient().syncConversations(msg.nowMs);
     case "buildLinkingTicket":
-      return await ensureClient().buildLinkingTicket(msg.newDeviceId, msg.newDeviceKp, msg.nowMs);
+      return await ensureClient().buildLinkingTicket(
+        msg.newDeviceId,
+        msg.newDeviceKp,
+        msg.lastAppEvents,
+        msg.nowMs
+      );
     case "consumeLinkingTicket":
       await ensureClient().consumeLinkingTicket(msg.ticket, msg.nowMs);
       return null;
+    case "decodeCatchupSnapshot":
+      return (0, import_ping_wasm.decodeCatchupSnapshot)(msg.snapshotBytes);
+    case "exportConversationSecret":
+      return ensureClient().exportConversationSecret(
+        msg.conv,
+        msg.label,
+        msg.context,
+        msg.length
+      );
+    case "sealLinkingTicket":
+      return (0, import_ping_wasm.sealLinkingTicket)(msg.ticket, msg.newDevicePub);
+    case "openLinkingTicket":
+      return (0, import_ping_wasm.openLinkingTicket)(msg.sealed, msg.newDevicePriv);
+    case "exportConversationStateSnapshot":
+      return ensureClient().exportConversationStateSnapshot(msg.conv, msg.nowMs);
+    case "importStateSnapshot":
+      return await ensureClient().importStateSnapshot(msg.snapshotBytes, msg.nowMs);
     default:
       throw new Error(`unknown request kind: ${msg.kind}`);
   }

package/dist/worker.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/worker.ts"],"sourcesContent":["// Web Worker entry. Owns the WASM `PingClient` instance. Receives Requests from the main thread\n// and posts Responses back. Storage / Transport calls back to the main thread are tracked by id.\n//\n// The WASM module is loaded lazily on the first `init` so that ephemeral identity-only spawns\n// (used by `MessagingClient.generateIdentity()`) don't pay the cost.\n\n/// <reference lib=\"webworker\" />\n\nimport init, { PingClient } from \"../wasm/ping_wasm\";\nimport type { Request, Response } from \"./protocol\";\nimport type { MessageEnvelope } from \"./types\";\n\ndeclare const self: DedicatedWorkerGlobalScope;\n\nlet client: PingClient | null = null;\nlet wasmReady: Promise<void> | null = null;\n\nconst pendingStorage = new Map<number, (r: { ok: boolean; value: unknown }) => void>();\nconst pendingTransport = new Map<number, (r: { ok: boolean; value: unknown }) => void>();\nlet nextStorageId = 1;\nlet nextTransportId = 1;\n\nconst proxyStorage = {\n  get: (namespace: string, key: string) => callMain<Uint8Array | null>(\"storage\", \"get\", [namespace, key]),\n  put: (namespace: string, key: string, value: Uint8Array) =>\n        callMain<void>(\"storage\", \"put\", [namespace, key, value]),\n  del: (namespace: string, key: string) => callMain<void>(\"storage\", \"del\", [namespace, key]),\n  listKeys: (namespace: string, prefix: string) =>\n        callMain<string[]>(\"storage\", \"listKeys\", [namespace, prefix]),\n};\nconst proxyTransport = {\n  send: (envelope: MessageEnvelope) => callMain<void>(\"transport\", \"send\", [envelope]),\n  fetchSince: (conv: Uint8Array, cursor: Uint8Array, limit: number) =>\n        callMain<MessageEnvelope[]>(\"transport\", \"fetchSince\", [conv, cursor, limit]),\n  discoverDevices: (userId: Uint8Array) => callMain<unknown[]>(\"transport\", \"discoverDevices\", [userId]),\n};\n\nfunction callMain<T>(kind: \"storage\" | \"transport\", method: string, args: unknown[]): Promise<T> {\n  return new Promise((resolve, reject) => {\n    const id = kind === \"storage\" ? nextStorageId++ : nextTransportId++;\n    const map = kind === \"storage\" ? pendingStorage : pendingTransport;\n    map.set(id, ({ ok, value }) => ok ? resolve(value as T) : reject(new Error(String(value))));\n    self.postMessage({ kind: `${kind}.call`, id, method, args } as Response);\n  });\n}\n\nasync function ensureWasm() {\n  if (wasmReady) return wasmReady;\n  // The bundled wasm path is rewritten by the build script to be relative to `dist/`.\n  wasmReady = init().then(() => undefined);\n  return wasmReady;\n}\n\nself.onmessage = async (ev: MessageEvent<Request>) => {\n  const msg = ev.data;\n\n  // Storage / transport responses from the main thread.\n  if (msg.kind === \"storage.reply\") {\n    const slot = pendingStorage.get(msg.id);\n    if (slot) {\n      pendingStorage.delete(msg.id);\n      msg.ok ? slot({ ok: true, value: msg.value })\n             : slot({ ok: false, value: msg.error });\n    }\n    return;\n  }\n  if (msg.kind === \"transport.reply\") {\n    const slot = pendingTransport.get(msg.id);\n    if (slot) {\n      pendingTransport.delete(msg.id);\n      msg.ok ? slot({ ok: true, value: msg.value })\n             : slot({ ok: false, value: msg.error });\n    }\n    return;\n  }\n\n  try {\n    const value = await dispatch(msg);\n    (self.postMessage as (m: Response) => void)({ kind: \"result\", id: msg.id, ok: true, value });\n  } catch (e) {\n    (self.postMessage as (m: Response) => void)({\n      kind: \"result\", id: msg.id, ok: false, error: e instanceof Error ? e.message : String(e),\n    });\n  }\n};\n\nasync function dispatch(msg: Request): Promise<unknown> {\n  await ensureWasm();\n  switch (msg.kind) {\n    case \"init\": {\n      client = await PingClient.init(\n        msg.identityExport, msg.deviceLabel,\n        proxyStorage as unknown as never,\n        proxyTransport as unknown as never,\n        msg.nowMs,\n      );\n      // Wire decrypted application-message callback back to the main thread.\n      client.onMessage((m: unknown) => {\n        (self.postMessage as (m: Response) => void)({ kind: \"event.message\", msg: m as never });\n      });\n      return null;\n    }\n    case \"generateIdentity\":\n      return PingClient.generateIdentity();\n    case \"userId\":          return ensureClient().userId();\n    case \"deviceId\":        return ensureClient().deviceId();\n    case \"freshKeyPackage\": return ensureClient().freshKeyPackage();\n    case \"createConversation\":\n      return await ensureClient().createConversation(msg.name ?? undefined, msg.nowMs);\n    case \"joinConversation\": {\n      const id = await ensureClient().joinConversation(msg.welcome, msg.nowMs) as Uint8Array;\n      // Notify the main thread that we just entered a new conversation. We forward the\n      // Welcome's `sender_device` so the host can label \"joined chat with <inviter>\".\n      (self.postMessage as (m: Response) => void)({\n        kind: \"event.conversation\",\n        id,\n        epoch: 0,\n        sender: msg.welcome.sender_device,\n      });\n      return id;\n    }\n    case \"listConversations\":\n      return ensureClient().listConversations();\n    case \"send\":\n      return await ensureClient().send(msg.conv, msg.plaintext, msg.nowMs);\n    case \"addMembers\":\n      return await ensureClient().addMembers(msg.conv, msg.kps, msg.nowMs);\n    case \"removeMembers\":\n      // wasm-bindgen exposes Vec<u32> as Uint32Array; convert from the protocol's number[].\n      return await ensureClient().removeMembers(msg.conv, new Uint32Array(msg.leaves), msg.nowMs);\n    case \"processEnvelope\": {\n      const result = await ensureClient().processEnvelope(msg.envelope, msg.nowMs);\n      (self.postMessage as (m: Response) => void)({\n        kind: \"event.conversation\",\n        id: msg.envelope.conversation_id,\n        epoch: msg.envelope.epoch,\n      });\n      return result;\n    }\n    case \"syncConversations\":\n      return await ensureClient().syncConversations(msg.nowMs);\n    case \"buildLinkingTicket\":\n      return await ensureClient().buildLinkingTicket(msg.newDeviceId, msg.newDeviceKp, msg.nowMs);\n    case \"consumeLinkingTicket\":\n      await ensureClient().consumeLinkingTicket(msg.ticket, msg.nowMs);\n      return null;\n    default:\n      throw new Error(`unknown request kind: ${(msg as { kind: string }).kind}`);\n  }\n}\n\nfunction ensureClient(): PingClient {\n  if (!client) throw new Error(\"client not initialised\");\n  return client;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAQA,uBAAiC;AAMjC,IAAI,SAA4B;AAChC,IAAI,YAAkC;AAEtC,IAAM,iBAAiB,oBAAI,IAA0D;AACrF,IAAM,mBAAmB,oBAAI,IAA0D;AACvF,IAAI,gBAAgB;AACpB,IAAI,kBAAkB;AAEtB,IAAM,eAAe;AAAA,EACnB,KAAK,CAAC,WAAmB,QAAgB,SAA4B,WAAW,OAAO,CAAC,WAAW,GAAG,CAAC;AAAA,EACvG,KAAK,CAAC,WAAmB,KAAa,UAChC,SAAe,WAAW,OAAO,CAAC,WAAW,KAAK,KAAK,CAAC;AAAA,EAC9D,KAAK,CAAC,WAAmB,QAAgB,SAAe,WAAW,OAAO,CAAC,WAAW,GAAG,CAAC;AAAA,EAC1F,UAAU,CAAC,WAAmB,WACxB,SAAmB,WAAW,YAAY,CAAC,WAAW,MAAM,CAAC;AACrE;AACA,IAAM,iBAAiB;AAAA,EACrB,MAAM,CAAC,aAA8B,SAAe,aAAa,QAAQ,CAAC,QAAQ,CAAC;AAAA,EACnF,YAAY,CAAC,MAAkB,QAAoB,UAC7C,SAA4B,aAAa,cAAc,CAAC,MAAM,QAAQ,KAAK,CAAC;AAAA,EAClF,iBAAiB,CAAC,WAAuB,SAAoB,aAAa,mBAAmB,CAAC,MAAM,CAAC;AACvG;AAEA,SAAS,SAAY,MAA+B,QAAgB,MAA6B;AAC/F,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,KAAK,SAAS,YAAY,kBAAkB;AAClD,UAAM,MAAM,SAAS,YAAY,iBAAiB;AAClD,QAAI,IAAI,IAAI,CAAC,EAAE,IAAI,MAAM,MAAM,KAAK,QAAQ,KAAU,IAAI,OAAO,IAAI,MAAM,OAAO,KAAK,CAAC,CAAC,CAAC;AAC1F,SAAK,YAAY,EAAE,MAAM,GAAG,IAAI,SAAS,IAAI,QAAQ,KAAK,CAAa;AAAA,EACzE,CAAC;AACH;AAEA,eAAe,aAAa;AAC1B,MAAI,UAAW,QAAO;AAEtB,kBAAY,iBAAAA,SAAK,EAAE,KAAK,MAAM,MAAS;AACvC,SAAO;AACT;AAEA,KAAK,YAAY,OAAO,OAA8B;AACpD,QAAM,MAAM,GAAG;AAGf,MAAI,IAAI,SAAS,iBAAiB;AAChC,UAAM,OAAO,eAAe,IAAI,IAAI,EAAE;AACtC,QAAI,MAAM;AACR,qBAAe,OAAO,IAAI,EAAE;AAC5B,UAAI,KAAK,KAAK,EAAE,IAAI,MAAM,OAAO,IAAI,MAAM,CAAC,IACnC,KAAK,EAAE,IAAI,OAAO,OAAO,IAAI,MAAM,CAAC;AAAA,IAC/C;AACA;AAAA,EACF;AACA,MAAI,IAAI,SAAS,mBAAmB;AAClC,UAAM,OAAO,iBAAiB,IAAI,IAAI,EAAE;AACxC,QAAI,MAAM;AACR,uBAAiB,OAAO,IAAI,EAAE;AAC9B,UAAI,KAAK,KAAK,EAAE,IAAI,MAAM,OAAO,IAAI,MAAM,CAAC,IACnC,KAAK,EAAE,IAAI,OAAO,OAAO,IAAI,MAAM,CAAC;AAAA,IAC/C;AACA;AAAA,EACF;AAEA,MAAI;AACF,UAAM,QAAQ,MAAM,SAAS,GAAG;AAChC,IAAC,KAAK,YAAsC,EAAE,MAAM,UAAU,IAAI,IAAI,IAAI,IAAI,MAAM,MAAM,CAAC;AAAA,EAC7F,SAAS,GAAG;AACV,IAAC,KAAK,YAAsC;AAAA,MAC1C,MAAM;AAAA,MAAU,IAAI,IAAI;AAAA,MAAI,IAAI;AAAA,MAAO,OAAO,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AAAA,IACzF,CAAC;AAAA,EACH;AACF;AAEA,eAAe,SAAS,KAAgC;AACtD,QAAM,WAAW;AACjB,UAAQ,IAAI,MAAM;AAAA,IAChB,KAAK,QAAQ;AACX,eAAS,MAAM,4BAAW;AAAA,QACxB,IAAI;AAAA,QAAgB,IAAI;AAAA,QACxB;AAAA,QACA;AAAA,QACA,IAAI;AAAA,MACN;AAEA,aAAO,UAAU,CAAC,MAAe;AAC/B,QAAC,KAAK,YAAsC,EAAE,MAAM,iBAAiB,KAAK,EAAW,CAAC;AAAA,MACxF,CAAC;AACD,aAAO;AAAA,IACT;AAAA,IACA,KAAK;AACH,aAAO,4BAAW,iBAAiB;AAAA,IACrC,KAAK;AAAmB,aAAO,aAAa,EAAE,OAAO;AAAA,IACrD,KAAK;AAAmB,aAAO,aAAa,EAAE,SAAS;AAAA,IACvD,KAAK;AAAmB,aAAO,aAAa,EAAE,gBAAgB;AAAA,IAC9D,KAAK;AACH,aAAO,MAAM,aAAa,EAAE,mBAAmB,IAAI,QAAQ,QAAW,IAAI,KAAK;AAAA,IACjF,KAAK,oBAAoB;AACvB,YAAM,KAAK,MAAM,aAAa,EAAE,iBAAiB,IAAI,SAAS,IAAI,KAAK;AAGvE,MAAC,KAAK,YAAsC;AAAA,QAC1C,MAAM;AAAA,QACN;AAAA,QACA,OAAO;AAAA,QACP,QAAQ,IAAI,QAAQ;AAAA,MACtB,CAAC;AACD,aAAO;AAAA,IACT;AAAA,IACA,KAAK;AACH,aAAO,aAAa,EAAE,kBAAkB;AAAA,IAC1C,KAAK;AACH,aAAO,MAAM,aAAa,EAAE,KAAK,IAAI,MAAM,IAAI,WAAW,IAAI,KAAK;AAAA,IACrE,KAAK;AACH,aAAO,MAAM,aAAa,EAAE,WAAW,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK;AAAA,IACrE,KAAK;AAEH,aAAO,MAAM,aAAa,EAAE,cAAc,IAAI,MAAM,IAAI,YAAY,IAAI,MAAM,GAAG,IAAI,KAAK;AAAA,IAC5F,KAAK,mBAAmB;AACtB,YAAM,SAAS,MAAM,aAAa,EAAE,gBAAgB,IAAI,UAAU,IAAI,KAAK;AAC3E,MAAC,KAAK,YAAsC;AAAA,QAC1C,MAAM;AAAA,QACN,IAAI,IAAI,SAAS;AAAA,QACjB,OAAO,IAAI,SAAS;AAAA,MACtB,CAAC;AACD,aAAO;AAAA,IACT;AAAA,IACA,KAAK;AACH,aAAO,MAAM,aAAa,EAAE,kBAAkB,IAAI,KAAK;AAAA,IACzD,KAAK;AACH,aAAO,MAAM,aAAa,EAAE,mBAAmB,IAAI,aAAa,IAAI,aAAa,IAAI,KAAK;AAAA,IAC5F,KAAK;AACH,YAAM,aAAa,EAAE,qBAAqB,IAAI,QAAQ,IAAI,KAAK;AAC/D,aAAO;AAAA,IACT;AACE,YAAM,IAAI,MAAM,yBAA0B,IAAyB,IAAI,EAAE;AAAA,EAC7E;AACF;AAEA,SAAS,eAA2B;AAClC,MAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,wBAAwB;AACrD,SAAO;AACT;","names":["init"]}
+{"version":3,"sources":["../src/worker.ts"],"sourcesContent":["// Web Worker entry. Owns the WASM `PingClient` instance. Receives Requests from the main thread\n// and posts Responses back. Storage / Transport calls back to the main thread are tracked by id.\n//\n// The WASM module is loaded lazily on the first `init` so that ephemeral identity-only spawns\n// (used by `MessagingClient.generateIdentity()`) don't pay the cost.\n\n/// <reference lib=\"webworker\" />\n\nimport init, {\n  PingClient,\n  sealLinkingTicket as wasmSealLinkingTicket,\n  openLinkingTicket as wasmOpenLinkingTicket,\n  decodeCatchupSnapshot as wasmDecodeCatchupSnapshot,\n} from \"../wasm/ping_wasm\";\nimport type { Request, Response } from \"./protocol\";\nimport type { MessageEnvelope } from \"./types\";\n\ndeclare const self: DedicatedWorkerGlobalScope;\n\nlet client: PingClient | null = null;\nlet wasmReady: Promise<void> | null = null;\n\nconst pendingStorage = new Map<number, (r: { ok: boolean; value: unknown }) => void>();\nconst pendingTransport = new Map<number, (r: { ok: boolean; value: unknown }) => void>();\nlet nextStorageId = 1;\nlet nextTransportId = 1;\n\nconst proxyStorage = {\n  get: (namespace: string, key: string) => callMain<Uint8Array | null>(\"storage\", \"get\", [namespace, key]),\n  put: (namespace: string, key: string, value: Uint8Array) =>\n        callMain<void>(\"storage\", \"put\", [namespace, key, value]),\n  del: (namespace: string, key: string) => callMain<void>(\"storage\", \"del\", [namespace, key]),\n  listKeys: (namespace: string, prefix: string) =>\n        callMain<string[]>(\"storage\", \"listKeys\", [namespace, prefix]),\n};\nconst proxyTransport = {\n  send: (envelope: MessageEnvelope) => callMain<void>(\"transport\", \"send\", [envelope]),\n  fetchSince: (conv: Uint8Array, cursor: Uint8Array, limit: number) =>\n        callMain<MessageEnvelope[]>(\"transport\", \"fetchSince\", [conv, cursor, limit]),\n  discoverDevices: (userId: Uint8Array) => callMain<unknown[]>(\"transport\", \"discoverDevices\", [userId]),\n};\n\nfunction callMain<T>(kind: \"storage\" | \"transport\", method: string, args: unknown[]): Promise<T> {\n  return new Promise((resolve, reject) => {\n    const id = kind === \"storage\" ? nextStorageId++ : nextTransportId++;\n    const map = kind === \"storage\" ? pendingStorage : pendingTransport;\n    map.set(id, ({ ok, value }) => ok ? resolve(value as T) : reject(new Error(String(value))));\n    self.postMessage({ kind: `${kind}.call`, id, method, args } as Response);\n  });\n}\n\nasync function ensureWasm() {\n  if (wasmReady) return wasmReady;\n  // The bundled wasm path is rewritten by the build script to be relative to `dist/`.\n  wasmReady = init().then(() => undefined);\n  return wasmReady;\n}\n\nself.onmessage = async (ev: MessageEvent<Request>) => {\n  const msg = ev.data;\n\n  // Storage / transport responses from the main thread.\n  if (msg.kind === \"storage.reply\") {\n    const slot = pendingStorage.get(msg.id);\n    if (slot) {\n      pendingStorage.delete(msg.id);\n      msg.ok ? slot({ ok: true, value: msg.value })\n             : slot({ ok: false, value: msg.error });\n    }\n    return;\n  }\n  if (msg.kind === \"transport.reply\") {\n    const slot = pendingTransport.get(msg.id);\n    if (slot) {\n      pendingTransport.delete(msg.id);\n      msg.ok ? slot({ ok: true, value: msg.value })\n             : slot({ ok: false, value: msg.error });\n    }\n    return;\n  }\n\n  try {\n    const value = await dispatch(msg);\n    (self.postMessage as (m: Response) => void)({ kind: \"result\", id: msg.id, ok: true, value });\n  } catch (e) {\n    (self.postMessage as (m: Response) => void)({\n      kind: \"result\", id: msg.id, ok: false, error: e instanceof Error ? e.message : String(e),\n    });\n  }\n};\n\nasync function dispatch(msg: Request): Promise<unknown> {\n  await ensureWasm();\n  switch (msg.kind) {\n    case \"init\": {\n      client = await PingClient.init(\n        msg.identityExport, msg.deviceLabel,\n        proxyStorage as unknown as never,\n        proxyTransport as unknown as never,\n        msg.nowMs,\n      );\n      // Wire decrypted application-message callback back to the main thread.\n      client.onMessage((m: unknown) => {\n        (self.postMessage as (m: Response) => void)({ kind: \"event.message\", msg: m as never });\n      });\n      return null;\n    }\n    case \"generateIdentity\":\n      return PingClient.generateIdentity();\n    case \"userId\":          return ensureClient().userId();\n    case \"deviceId\":        return ensureClient().deviceId();\n    case \"freshKeyPackage\": return ensureClient().freshKeyPackage();\n    case \"createConversation\":\n      return await ensureClient().createConversation(msg.name ?? undefined, msg.nowMs);\n    case \"joinConversation\": {\n      const id = await ensureClient().joinConversation(msg.welcome, msg.nowMs) as Uint8Array;\n      // Notify the main thread that we just entered a new conversation. We forward the\n      // Welcome's `sender_device` so the host can label \"joined chat with <inviter>\".\n      (self.postMessage as (m: Response) => void)({\n        kind: \"event.conversation\",\n        id,\n        epoch: 0,\n        sender: msg.welcome.sender_device,\n      });\n      return id;\n    }\n    case \"listConversations\":\n      return ensureClient().listConversations();\n    case \"send\":\n      return await ensureClient().send(msg.conv, msg.plaintext, msg.nowMs);\n    case \"addMembers\":\n      // wasm-bindgen takes the entries as a plain array of {deviceId, keyPackage};\n      // serde-wasm-bindgen on the Rust side deserialises into Vec<JsAddMemberEntry>.\n      return await ensureClient().addMembers(msg.conv, msg.entries, msg.nowMs);\n    case \"removeMembers\":\n      // wasm-bindgen exposes Vec<u32> as Uint32Array; convert from the protocol's number[].\n      return await ensureClient().removeMembers(msg.conv, new Uint32Array(msg.leaves), msg.nowMs);\n    case \"revokeDevice\":\n      // [CR-2] returns the array of Commit envelopes the SDK has already broadcast.\n      return await ensureClient().revokeDevice(msg.deviceId, msg.nowMs);\n    case \"processEnvelope\": {\n      const result = await ensureClient().processEnvelope(msg.envelope, msg.nowMs);\n      (self.postMessage as (m: Response) => void)({\n        kind: \"event.conversation\",\n        id: msg.envelope.conversation_id,\n        epoch: msg.envelope.epoch,\n      });\n      return result;\n    }\n    case \"syncConversations\":\n      return await ensureClient().syncConversations(msg.nowMs);\n    case \"buildLinkingTicket\":\n      return await ensureClient().buildLinkingTicket(\n        msg.newDeviceId, msg.newDeviceKp, msg.lastAppEvents, msg.nowMs,\n      );\n    case \"consumeLinkingTicket\":\n      await ensureClient().consumeLinkingTicket(msg.ticket, msg.nowMs);\n      return null;\n    case \"decodeCatchupSnapshot\":\n      // Pure WASM — no client state required. The new device may call this in an\n      // ephemeral worker before init() completes.\n      return wasmDecodeCatchupSnapshot(msg.snapshotBytes);\n    case \"exportConversationSecret\":\n      // wasm-bindgen returns a Uint8Array sized to `length`. The bytes are a secret —\n      // the main thread is responsible for clearing the typed array when done.\n      return ensureClient().exportConversationSecret(\n        msg.conv, msg.label, msg.context, msg.length,\n      );\n    case \"sealLinkingTicket\":\n      // Pure WASM call — no client state required. Lets a sender seal a ticket from an\n      // ephemeral worker without standing up the full PingClient.\n      return wasmSealLinkingTicket(msg.ticket, msg.newDevicePub);\n    case \"openLinkingTicket\":\n      // Same — runs without an initialised client, which is the receiving device's\n      // pre-bootstrap state (it has the X25519 ephemeral key but no identity yet).\n      return wasmOpenLinkingTicket(msg.sealed, msg.newDevicePriv);\n    case \"exportConversationStateSnapshot\":\n      // [CR-7] state snapshot bytes are a secret (past epoch keys); the main thread\n      // is responsible for clearing the typed array when done.\n      return ensureClient().exportConversationStateSnapshot(msg.conv, msg.nowMs);\n    case \"importStateSnapshot\":\n      // [CR-7] returns the imported conversation id as a Uint8Array.\n      return await ensureClient().importStateSnapshot(msg.snapshotBytes, msg.nowMs);\n    default:\n      throw new Error(`unknown request kind: ${(msg as { kind: string }).kind}`);\n  }\n}\n\nfunction ensureClient(): PingClient {\n  if (!client) throw new Error(\"client not initialised\");\n  return client;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAQA,uBAKO;AAMP,IAAI,SAA4B;AAChC,IAAI,YAAkC;AAEtC,IAAM,iBAAiB,oBAAI,IAA0D;AACrF,IAAM,mBAAmB,oBAAI,IAA0D;AACvF,IAAI,gBAAgB;AACpB,IAAI,kBAAkB;AAEtB,IAAM,eAAe;AAAA,EACnB,KAAK,CAAC,WAAmB,QAAgB,SAA4B,WAAW,OAAO,CAAC,WAAW,GAAG,CAAC;AAAA,EACvG,KAAK,CAAC,WAAmB,KAAa,UAChC,SAAe,WAAW,OAAO,CAAC,WAAW,KAAK,KAAK,CAAC;AAAA,EAC9D,KAAK,CAAC,WAAmB,QAAgB,SAAe,WAAW,OAAO,CAAC,WAAW,GAAG,CAAC;AAAA,EAC1F,UAAU,CAAC,WAAmB,WACxB,SAAmB,WAAW,YAAY,CAAC,WAAW,MAAM,CAAC;AACrE;AACA,IAAM,iBAAiB;AAAA,EACrB,MAAM,CAAC,aAA8B,SAAe,aAAa,QAAQ,CAAC,QAAQ,CAAC;AAAA,EACnF,YAAY,CAAC,MAAkB,QAAoB,UAC7C,SAA4B,aAAa,cAAc,CAAC,MAAM,QAAQ,KAAK,CAAC;AAAA,EAClF,iBAAiB,CAAC,WAAuB,SAAoB,aAAa,mBAAmB,CAAC,MAAM,CAAC;AACvG;AAEA,SAAS,SAAY,MAA+B,QAAgB,MAA6B;AAC/F,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,KAAK,SAAS,YAAY,kBAAkB;AAClD,UAAM,MAAM,SAAS,YAAY,iBAAiB;AAClD,QAAI,IAAI,IAAI,CAAC,EAAE,IAAI,MAAM,MAAM,KAAK,QAAQ,KAAU,IAAI,OAAO,IAAI,MAAM,OAAO,KAAK,CAAC,CAAC,CAAC;AAC1F,SAAK,YAAY,EAAE,MAAM,GAAG,IAAI,SAAS,IAAI,QAAQ,KAAK,CAAa;AAAA,EACzE,CAAC;AACH;AAEA,eAAe,aAAa;AAC1B,MAAI,UAAW,QAAO;AAEtB,kBAAY,iBAAAA,SAAK,EAAE,KAAK,MAAM,MAAS;AACvC,SAAO;AACT;AAEA,KAAK,YAAY,OAAO,OAA8B;AACpD,QAAM,MAAM,GAAG;AAGf,MAAI,IAAI,SAAS,iBAAiB;AAChC,UAAM,OAAO,eAAe,IAAI,IAAI,EAAE;AACtC,QAAI,MAAM;AACR,qBAAe,OAAO,IAAI,EAAE;AAC5B,UAAI,KAAK,KAAK,EAAE,IAAI,MAAM,OAAO,IAAI,MAAM,CAAC,IACnC,KAAK,EAAE,IAAI,OAAO,OAAO,IAAI,MAAM,CAAC;AAAA,IAC/C;AACA;AAAA,EACF;AACA,MAAI,IAAI,SAAS,mBAAmB;AAClC,UAAM,OAAO,iBAAiB,IAAI,IAAI,EAAE;AACxC,QAAI,MAAM;AACR,uBAAiB,OAAO,IAAI,EAAE;AAC9B,UAAI,KAAK,KAAK,EAAE,IAAI,MAAM,OAAO,IAAI,MAAM,CAAC,IACnC,KAAK,EAAE,IAAI,OAAO,OAAO,IAAI,MAAM,CAAC;AAAA,IAC/C;AACA;AAAA,EACF;AAEA,MAAI;AACF,UAAM,QAAQ,MAAM,SAAS,GAAG;AAChC,IAAC,KAAK,YAAsC,EAAE,MAAM,UAAU,IAAI,IAAI,IAAI,IAAI,MAAM,MAAM,CAAC;AAAA,EAC7F,SAAS,GAAG;AACV,IAAC,KAAK,YAAsC;AAAA,MAC1C,MAAM;AAAA,MAAU,IAAI,IAAI;AAAA,MAAI,IAAI;AAAA,MAAO,OAAO,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AAAA,IACzF,CAAC;AAAA,EACH;AACF;AAEA,eAAe,SAAS,KAAgC;AACtD,QAAM,WAAW;AACjB,UAAQ,IAAI,MAAM;AAAA,IAChB,KAAK,QAAQ;AACX,eAAS,MAAM,4BAAW;AAAA,QACxB,IAAI;AAAA,QAAgB,IAAI;AAAA,QACxB;AAAA,QACA;AAAA,QACA,IAAI;AAAA,MACN;AAEA,aAAO,UAAU,CAAC,MAAe;AAC/B,QAAC,KAAK,YAAsC,EAAE,MAAM,iBAAiB,KAAK,EAAW,CAAC;AAAA,MACxF,CAAC;AACD,aAAO;AAAA,IACT;AAAA,IACA,KAAK;AACH,aAAO,4BAAW,iBAAiB;AAAA,IACrC,KAAK;AAAmB,aAAO,aAAa,EAAE,OAAO;AAAA,IACrD,KAAK;AAAmB,aAAO,aAAa,EAAE,SAAS;AAAA,IACvD,KAAK;AAAmB,aAAO,aAAa,EAAE,gBAAgB;AAAA,IAC9D,KAAK;AACH,aAAO,MAAM,aAAa,EAAE,mBAAmB,IAAI,QAAQ,QAAW,IAAI,KAAK;AAAA,IACjF,KAAK,oBAAoB;AACvB,YAAM,KAAK,MAAM,aAAa,EAAE,iBAAiB,IAAI,SAAS,IAAI,KAAK;AAGvE,MAAC,KAAK,YAAsC;AAAA,QAC1C,MAAM;AAAA,QACN;AAAA,QACA,OAAO;AAAA,QACP,QAAQ,IAAI,QAAQ;AAAA,MACtB,CAAC;AACD,aAAO;AAAA,IACT;AAAA,IACA,KAAK;AACH,aAAO,aAAa,EAAE,kBAAkB;AAAA,IAC1C,KAAK;AACH,aAAO,MAAM,aAAa,EAAE,KAAK,IAAI,MAAM,IAAI,WAAW,IAAI,KAAK;AAAA,IACrE,KAAK;AAGH,aAAO,MAAM,aAAa,EAAE,WAAW,IAAI,MAAM,IAAI,SAAS,IAAI,KAAK;AAAA,IACzE,KAAK;AAEH,aAAO,MAAM,aAAa,EAAE,cAAc,IAAI,MAAM,IAAI,YAAY,IAAI,MAAM,GAAG,IAAI,KAAK;AAAA,IAC5F,KAAK;AAEH,aAAO,MAAM,aAAa,EAAE,aAAa,IAAI,UAAU,IAAI,KAAK;AAAA,IAClE,KAAK,mBAAmB;AACtB,YAAM,SAAS,MAAM,aAAa,EAAE,gBAAgB,IAAI,UAAU,IAAI,KAAK;AAC3E,MAAC,KAAK,YAAsC;AAAA,QAC1C,MAAM;AAAA,QACN,IAAI,IAAI,SAAS;AAAA,QACjB,OAAO,IAAI,SAAS;AAAA,MACtB,CAAC;AACD,aAAO;AAAA,IACT;AAAA,IACA,KAAK;AACH,aAAO,MAAM,aAAa,EAAE,kBAAkB,IAAI,KAAK;AAAA,IACzD,KAAK;AACH,aAAO,MAAM,aAAa,EAAE;AAAA,QAC1B,IAAI;AAAA,QAAa,IAAI;AAAA,QAAa,IAAI;AAAA,QAAe,IAAI;AAAA,MAC3D;AAAA,IACF,KAAK;AACH,YAAM,aAAa,EAAE,qBAAqB,IAAI,QAAQ,IAAI,KAAK;AAC/D,aAAO;AAAA,IACT,KAAK;AAGH,iBAAO,iBAAAC,uBAA0B,IAAI,aAAa;AAAA,IACpD,KAAK;AAGH,aAAO,aAAa,EAAE;AAAA,QACpB,IAAI;AAAA,QAAM,IAAI;AAAA,QAAO,IAAI;AAAA,QAAS,IAAI;AAAA,MACxC;AAAA,IACF,KAAK;AAGH,iBAAO,iBAAAC,mBAAsB,IAAI,QAAQ,IAAI,YAAY;AAAA,IAC3D,KAAK;AAGH,iBAAO,iBAAAC,mBAAsB,IAAI,QAAQ,IAAI,aAAa;AAAA,IAC5D,KAAK;AAGH,aAAO,aAAa,EAAE,gCAAgC,IAAI,MAAM,IAAI,KAAK;AAAA,IAC3E,KAAK;AAEH,aAAO,MAAM,aAAa,EAAE,oBAAoB,IAAI,eAAe,IAAI,KAAK;AAAA,IAC9E;AACE,YAAM,IAAI,MAAM,yBAA0B,IAAyB,IAAI,EAAE;AAAA,EAC7E;AACF;AAEA,SAAS,eAA2B;AAClC,MAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,wBAAwB;AACrD,SAAO;AACT;","names":["init","wasmDecodeCatchupSnapshot","wasmSealLinkingTicket","wasmOpenLinkingTicket"]}

package/dist/worker.js

@@ -1,5 +1,10 @@
 // src/worker.ts
-import init, { PingClient } from "../wasm/ping_wasm";
+import init, {
+  PingClient,
+  sealLinkingTicket as wasmSealLinkingTicket,
+  openLinkingTicket as wasmOpenLinkingTicket,
+  decodeCatchupSnapshot as wasmDecodeCatchupSnapshot
+} from "../wasm/ping_wasm";
 var client = null;
 var wasmReady = null;
 var pendingStorage = /* @__PURE__ */ new Map();
@@ -101,9 +106,11 @@ async function dispatch(msg) {
     case "send":
       return await ensureClient().send(msg.conv, msg.plaintext, msg.nowMs);
     case "addMembers":
-      return await ensureClient().addMembers(msg.conv, msg.kps, msg.nowMs);
+      return await ensureClient().addMembers(msg.conv, msg.entries, msg.nowMs);
     case "removeMembers":
       return await ensureClient().removeMembers(msg.conv, new Uint32Array(msg.leaves), msg.nowMs);
+    case "revokeDevice":
+      return await ensureClient().revokeDevice(msg.deviceId, msg.nowMs);
     case "processEnvelope": {
       const result = await ensureClient().processEnvelope(msg.envelope, msg.nowMs);
       self.postMessage({
@@ -116,10 +123,32 @@ async function dispatch(msg) {
     case "syncConversations":
       return await ensureClient().syncConversations(msg.nowMs);
     case "buildLinkingTicket":
-      return await ensureClient().buildLinkingTicket(msg.newDeviceId, msg.newDeviceKp, msg.nowMs);
+      return await ensureClient().buildLinkingTicket(
+        msg.newDeviceId,
+        msg.newDeviceKp,
+        msg.lastAppEvents,
+        msg.nowMs
+      );
     case "consumeLinkingTicket":
       await ensureClient().consumeLinkingTicket(msg.ticket, msg.nowMs);
       return null;
+    case "decodeCatchupSnapshot":
+      return wasmDecodeCatchupSnapshot(msg.snapshotBytes);
+    case "exportConversationSecret":
+      return ensureClient().exportConversationSecret(
+        msg.conv,
+        msg.label,
+        msg.context,
+        msg.length
+      );
+    case "sealLinkingTicket":
+      return wasmSealLinkingTicket(msg.ticket, msg.newDevicePub);
+    case "openLinkingTicket":
+      return wasmOpenLinkingTicket(msg.sealed, msg.newDevicePriv);
+    case "exportConversationStateSnapshot":
+      return ensureClient().exportConversationStateSnapshot(msg.conv, msg.nowMs);
+    case "importStateSnapshot":
+      return await ensureClient().importStateSnapshot(msg.snapshotBytes, msg.nowMs);
     default:
       throw new Error(`unknown request kind: ${msg.kind}`);
   }

package/dist/worker.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/worker.ts"],"sourcesContent":["// Web Worker entry. Owns the WASM `PingClient` instance. Receives Requests from the main thread\n// and posts Responses back. Storage / Transport calls back to the main thread are tracked by id.\n//\n// The WASM module is loaded lazily on the first `init` so that ephemeral identity-only spawns\n// (used by `MessagingClient.generateIdentity()`) don't pay the cost.\n\n/// <reference lib=\"webworker\" />\n\nimport init, { PingClient } from \"../wasm/ping_wasm\";\nimport type { Request, Response } from \"./protocol\";\nimport type { MessageEnvelope } from \"./types\";\n\ndeclare const self: DedicatedWorkerGlobalScope;\n\nlet client: PingClient | null = null;\nlet wasmReady: Promise<void> | null = null;\n\nconst pendingStorage = new Map<number, (r: { ok: boolean; value: unknown }) => void>();\nconst pendingTransport = new Map<number, (r: { ok: boolean; value: unknown }) => void>();\nlet nextStorageId = 1;\nlet nextTransportId = 1;\n\nconst proxyStorage = {\n  get: (namespace: string, key: string) => callMain<Uint8Array | null>(\"storage\", \"get\", [namespace, key]),\n  put: (namespace: string, key: string, value: Uint8Array) =>\n        callMain<void>(\"storage\", \"put\", [namespace, key, value]),\n  del: (namespace: string, key: string) => callMain<void>(\"storage\", \"del\", [namespace, key]),\n  listKeys: (namespace: string, prefix: string) =>\n        callMain<string[]>(\"storage\", \"listKeys\", [namespace, prefix]),\n};\nconst proxyTransport = {\n  send: (envelope: MessageEnvelope) => callMain<void>(\"transport\", \"send\", [envelope]),\n  fetchSince: (conv: Uint8Array, cursor: Uint8Array, limit: number) =>\n        callMain<MessageEnvelope[]>(\"transport\", \"fetchSince\", [conv, cursor, limit]),\n  discoverDevices: (userId: Uint8Array) => callMain<unknown[]>(\"transport\", \"discoverDevices\", [userId]),\n};\n\nfunction callMain<T>(kind: \"storage\" | \"transport\", method: string, args: unknown[]): Promise<T> {\n  return new Promise((resolve, reject) => {\n    const id = kind === \"storage\" ? nextStorageId++ : nextTransportId++;\n    const map = kind === \"storage\" ? pendingStorage : pendingTransport;\n    map.set(id, ({ ok, value }) => ok ? resolve(value as T) : reject(new Error(String(value))));\n    self.postMessage({ kind: `${kind}.call`, id, method, args } as Response);\n  });\n}\n\nasync function ensureWasm() {\n  if (wasmReady) return wasmReady;\n  // The bundled wasm path is rewritten by the build script to be relative to `dist/`.\n  wasmReady = init().then(() => undefined);\n  return wasmReady;\n}\n\nself.onmessage = async (ev: MessageEvent<Request>) => {\n  const msg = ev.data;\n\n  // Storage / transport responses from the main thread.\n  if (msg.kind === \"storage.reply\") {\n    const slot = pendingStorage.get(msg.id);\n    if (slot) {\n      pendingStorage.delete(msg.id);\n      msg.ok ? slot({ ok: true, value: msg.value })\n             : slot({ ok: false, value: msg.error });\n    }\n    return;\n  }\n  if (msg.kind === \"transport.reply\") {\n    const slot = pendingTransport.get(msg.id);\n    if (slot) {\n      pendingTransport.delete(msg.id);\n      msg.ok ? slot({ ok: true, value: msg.value })\n             : slot({ ok: false, value: msg.error });\n    }\n    return;\n  }\n\n  try {\n    const value = await dispatch(msg);\n    (self.postMessage as (m: Response) => void)({ kind: \"result\", id: msg.id, ok: true, value });\n  } catch (e) {\n    (self.postMessage as (m: Response) => void)({\n      kind: \"result\", id: msg.id, ok: false, error: e instanceof Error ? e.message : String(e),\n    });\n  }\n};\n\nasync function dispatch(msg: Request): Promise<unknown> {\n  await ensureWasm();\n  switch (msg.kind) {\n    case \"init\": {\n      client = await PingClient.init(\n        msg.identityExport, msg.deviceLabel,\n        proxyStorage as unknown as never,\n        proxyTransport as unknown as never,\n        msg.nowMs,\n      );\n      // Wire decrypted application-message callback back to the main thread.\n      client.onMessage((m: unknown) => {\n        (self.postMessage as (m: Response) => void)({ kind: \"event.message\", msg: m as never });\n      });\n      return null;\n    }\n    case \"generateIdentity\":\n      return PingClient.generateIdentity();\n    case \"userId\":          return ensureClient().userId();\n    case \"deviceId\":        return ensureClient().deviceId();\n    case \"freshKeyPackage\": return ensureClient().freshKeyPackage();\n    case \"createConversation\":\n      return await ensureClient().createConversation(msg.name ?? undefined, msg.nowMs);\n    case \"joinConversation\": {\n      const id = await ensureClient().joinConversation(msg.welcome, msg.nowMs) as Uint8Array;\n      // Notify the main thread that we just entered a new conversation. We forward the\n      // Welcome's `sender_device` so the host can label \"joined chat with <inviter>\".\n      (self.postMessage as (m: Response) => void)({\n        kind: \"event.conversation\",\n        id,\n        epoch: 0,\n        sender: msg.welcome.sender_device,\n      });\n      return id;\n    }\n    case \"listConversations\":\n      return ensureClient().listConversations();\n    case \"send\":\n      return await ensureClient().send(msg.conv, msg.plaintext, msg.nowMs);\n    case \"addMembers\":\n      return await ensureClient().addMembers(msg.conv, msg.kps, msg.nowMs);\n    case \"removeMembers\":\n      // wasm-bindgen exposes Vec<u32> as Uint32Array; convert from the protocol's number[].\n      return await ensureClient().removeMembers(msg.conv, new Uint32Array(msg.leaves), msg.nowMs);\n    case \"processEnvelope\": {\n      const result = await ensureClient().processEnvelope(msg.envelope, msg.nowMs);\n      (self.postMessage as (m: Response) => void)({\n        kind: \"event.conversation\",\n        id: msg.envelope.conversation_id,\n        epoch: msg.envelope.epoch,\n      });\n      return result;\n    }\n    case \"syncConversations\":\n      return await ensureClient().syncConversations(msg.nowMs);\n    case \"buildLinkingTicket\":\n      return await ensureClient().buildLinkingTicket(msg.newDeviceId, msg.newDeviceKp, msg.nowMs);\n    case \"consumeLinkingTicket\":\n      await ensureClient().consumeLinkingTicket(msg.ticket, msg.nowMs);\n      return null;\n    default:\n      throw new Error(`unknown request kind: ${(msg as { kind: string }).kind}`);\n  }\n}\n\nfunction ensureClient(): PingClient {\n  if (!client) throw new Error(\"client not initialised\");\n  return client;\n}\n"],"mappings":";AAQA,OAAO,QAAQ,kBAAkB;AAMjC,IAAI,SAA4B;AAChC,IAAI,YAAkC;AAEtC,IAAM,iBAAiB,oBAAI,IAA0D;AACrF,IAAM,mBAAmB,oBAAI,IAA0D;AACvF,IAAI,gBAAgB;AACpB,IAAI,kBAAkB;AAEtB,IAAM,eAAe;AAAA,EACnB,KAAK,CAAC,WAAmB,QAAgB,SAA4B,WAAW,OAAO,CAAC,WAAW,GAAG,CAAC;AAAA,EACvG,KAAK,CAAC,WAAmB,KAAa,UAChC,SAAe,WAAW,OAAO,CAAC,WAAW,KAAK,KAAK,CAAC;AAAA,EAC9D,KAAK,CAAC,WAAmB,QAAgB,SAAe,WAAW,OAAO,CAAC,WAAW,GAAG,CAAC;AAAA,EAC1F,UAAU,CAAC,WAAmB,WACxB,SAAmB,WAAW,YAAY,CAAC,WAAW,MAAM,CAAC;AACrE;AACA,IAAM,iBAAiB;AAAA,EACrB,MAAM,CAAC,aAA8B,SAAe,aAAa,QAAQ,CAAC,QAAQ,CAAC;AAAA,EACnF,YAAY,CAAC,MAAkB,QAAoB,UAC7C,SAA4B,aAAa,cAAc,CAAC,MAAM,QAAQ,KAAK,CAAC;AAAA,EAClF,iBAAiB,CAAC,WAAuB,SAAoB,aAAa,mBAAmB,CAAC,MAAM,CAAC;AACvG;AAEA,SAAS,SAAY,MAA+B,QAAgB,MAA6B;AAC/F,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,KAAK,SAAS,YAAY,kBAAkB;AAClD,UAAM,MAAM,SAAS,YAAY,iBAAiB;AAClD,QAAI,IAAI,IAAI,CAAC,EAAE,IAAI,MAAM,MAAM,KAAK,QAAQ,KAAU,IAAI,OAAO,IAAI,MAAM,OAAO,KAAK,CAAC,CAAC,CAAC;AAC1F,SAAK,YAAY,EAAE,MAAM,GAAG,IAAI,SAAS,IAAI,QAAQ,KAAK,CAAa;AAAA,EACzE,CAAC;AACH;AAEA,eAAe,aAAa;AAC1B,MAAI,UAAW,QAAO;AAEtB,cAAY,KAAK,EAAE,KAAK,MAAM,MAAS;AACvC,SAAO;AACT;AAEA,KAAK,YAAY,OAAO,OAA8B;AACpD,QAAM,MAAM,GAAG;AAGf,MAAI,IAAI,SAAS,iBAAiB;AAChC,UAAM,OAAO,eAAe,IAAI,IAAI,EAAE;AACtC,QAAI,MAAM;AACR,qBAAe,OAAO,IAAI,EAAE;AAC5B,UAAI,KAAK,KAAK,EAAE,IAAI,MAAM,OAAO,IAAI,MAAM,CAAC,IACnC,KAAK,EAAE,IAAI,OAAO,OAAO,IAAI,MAAM,CAAC;AAAA,IAC/C;AACA;AAAA,EACF;AACA,MAAI,IAAI,SAAS,mBAAmB;AAClC,UAAM,OAAO,iBAAiB,IAAI,IAAI,EAAE;AACxC,QAAI,MAAM;AACR,uBAAiB,OAAO,IAAI,EAAE;AAC9B,UAAI,KAAK,KAAK,EAAE,IAAI,MAAM,OAAO,IAAI,MAAM,CAAC,IACnC,KAAK,EAAE,IAAI,OAAO,OAAO,IAAI,MAAM,CAAC;AAAA,IAC/C;AACA;AAAA,EACF;AAEA,MAAI;AACF,UAAM,QAAQ,MAAM,SAAS,GAAG;AAChC,IAAC,KAAK,YAAsC,EAAE,MAAM,UAAU,IAAI,IAAI,IAAI,IAAI,MAAM,MAAM,CAAC;AAAA,EAC7F,SAAS,GAAG;AACV,IAAC,KAAK,YAAsC;AAAA,MAC1C,MAAM;AAAA,MAAU,IAAI,IAAI;AAAA,MAAI,IAAI;AAAA,MAAO,OAAO,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AAAA,IACzF,CAAC;AAAA,EACH;AACF;AAEA,eAAe,SAAS,KAAgC;AACtD,QAAM,WAAW;AACjB,UAAQ,IAAI,MAAM;AAAA,IAChB,KAAK,QAAQ;AACX,eAAS,MAAM,WAAW;AAAA,QACxB,IAAI;AAAA,QAAgB,IAAI;AAAA,QACxB;AAAA,QACA;AAAA,QACA,IAAI;AAAA,MACN;AAEA,aAAO,UAAU,CAAC,MAAe;AAC/B,QAAC,KAAK,YAAsC,EAAE,MAAM,iBAAiB,KAAK,EAAW,CAAC;AAAA,MACxF,CAAC;AACD,aAAO;AAAA,IACT;AAAA,IACA,KAAK;AACH,aAAO,WAAW,iBAAiB;AAAA,IACrC,KAAK;AAAmB,aAAO,aAAa,EAAE,OAAO;AAAA,IACrD,KAAK;AAAmB,aAAO,aAAa,EAAE,SAAS;AAAA,IACvD,KAAK;AAAmB,aAAO,aAAa,EAAE,gBAAgB;AAAA,IAC9D,KAAK;AACH,aAAO,MAAM,aAAa,EAAE,mBAAmB,IAAI,QAAQ,QAAW,IAAI,KAAK;AAAA,IACjF,KAAK,oBAAoB;AACvB,YAAM,KAAK,MAAM,aAAa,EAAE,iBAAiB,IAAI,SAAS,IAAI,KAAK;AAGvE,MAAC,KAAK,YAAsC;AAAA,QAC1C,MAAM;AAAA,QACN;AAAA,QACA,OAAO;AAAA,QACP,QAAQ,IAAI,QAAQ;AAAA,MACtB,CAAC;AACD,aAAO;AAAA,IACT;AAAA,IACA,KAAK;AACH,aAAO,aAAa,EAAE,kBAAkB;AAAA,IAC1C,KAAK;AACH,aAAO,MAAM,aAAa,EAAE,KAAK,IAAI,MAAM,IAAI,WAAW,IAAI,KAAK;AAAA,IACrE,KAAK;AACH,aAAO,MAAM,aAAa,EAAE,WAAW,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK;AAAA,IACrE,KAAK;AAEH,aAAO,MAAM,aAAa,EAAE,cAAc,IAAI,MAAM,IAAI,YAAY,IAAI,MAAM,GAAG,IAAI,KAAK;AAAA,IAC5F,KAAK,mBAAmB;AACtB,YAAM,SAAS,MAAM,aAAa,EAAE,gBAAgB,IAAI,UAAU,IAAI,KAAK;AAC3E,MAAC,KAAK,YAAsC;AAAA,QAC1C,MAAM;AAAA,QACN,IAAI,IAAI,SAAS;AAAA,QACjB,OAAO,IAAI,SAAS;AAAA,MACtB,CAAC;AACD,aAAO;AAAA,IACT;AAAA,IACA,KAAK;AACH,aAAO,MAAM,aAAa,EAAE,kBAAkB,IAAI,KAAK;AAAA,IACzD,KAAK;AACH,aAAO,MAAM,aAAa,EAAE,mBAAmB,IAAI,aAAa,IAAI,aAAa,IAAI,KAAK;AAAA,IAC5F,KAAK;AACH,YAAM,aAAa,EAAE,qBAAqB,IAAI,QAAQ,IAAI,KAAK;AAC/D,aAAO;AAAA,IACT;AACE,YAAM,IAAI,MAAM,yBAA0B,IAAyB,IAAI,EAAE;AAAA,EAC7E;AACF;AAEA,SAAS,eAA2B;AAClC,MAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,wBAAwB;AACrD,SAAO;AACT;","names":[]}
+{"version":3,"sources":["../src/worker.ts"],"sourcesContent":["// Web Worker entry. Owns the WASM `PingClient` instance. Receives Requests from the main thread\n// and posts Responses back. Storage / Transport calls back to the main thread are tracked by id.\n//\n// The WASM module is loaded lazily on the first `init` so that ephemeral identity-only spawns\n// (used by `MessagingClient.generateIdentity()`) don't pay the cost.\n\n/// <reference lib=\"webworker\" />\n\nimport init, {\n  PingClient,\n  sealLinkingTicket as wasmSealLinkingTicket,\n  openLinkingTicket as wasmOpenLinkingTicket,\n  decodeCatchupSnapshot as wasmDecodeCatchupSnapshot,\n} from \"../wasm/ping_wasm\";\nimport type { Request, Response } from \"./protocol\";\nimport type { MessageEnvelope } from \"./types\";\n\ndeclare const self: DedicatedWorkerGlobalScope;\n\nlet client: PingClient | null = null;\nlet wasmReady: Promise<void> | null = null;\n\nconst pendingStorage = new Map<number, (r: { ok: boolean; value: unknown }) => void>();\nconst pendingTransport = new Map<number, (r: { ok: boolean; value: unknown }) => void>();\nlet nextStorageId = 1;\nlet nextTransportId = 1;\n\nconst proxyStorage = {\n  get: (namespace: string, key: string) => callMain<Uint8Array | null>(\"storage\", \"get\", [namespace, key]),\n  put: (namespace: string, key: string, value: Uint8Array) =>\n        callMain<void>(\"storage\", \"put\", [namespace, key, value]),\n  del: (namespace: string, key: string) => callMain<void>(\"storage\", \"del\", [namespace, key]),\n  listKeys: (namespace: string, prefix: string) =>\n        callMain<string[]>(\"storage\", \"listKeys\", [namespace, prefix]),\n};\nconst proxyTransport = {\n  send: (envelope: MessageEnvelope) => callMain<void>(\"transport\", \"send\", [envelope]),\n  fetchSince: (conv: Uint8Array, cursor: Uint8Array, limit: number) =>\n        callMain<MessageEnvelope[]>(\"transport\", \"fetchSince\", [conv, cursor, limit]),\n  discoverDevices: (userId: Uint8Array) => callMain<unknown[]>(\"transport\", \"discoverDevices\", [userId]),\n};\n\nfunction callMain<T>(kind: \"storage\" | \"transport\", method: string, args: unknown[]): Promise<T> {\n  return new Promise((resolve, reject) => {\n    const id = kind === \"storage\" ? nextStorageId++ : nextTransportId++;\n    const map = kind === \"storage\" ? pendingStorage : pendingTransport;\n    map.set(id, ({ ok, value }) => ok ? resolve(value as T) : reject(new Error(String(value))));\n    self.postMessage({ kind: `${kind}.call`, id, method, args } as Response);\n  });\n}\n\nasync function ensureWasm() {\n  if (wasmReady) return wasmReady;\n  // The bundled wasm path is rewritten by the build script to be relative to `dist/`.\n  wasmReady = init().then(() => undefined);\n  return wasmReady;\n}\n\nself.onmessage = async (ev: MessageEvent<Request>) => {\n  const msg = ev.data;\n\n  // Storage / transport responses from the main thread.\n  if (msg.kind === \"storage.reply\") {\n    const slot = pendingStorage.get(msg.id);\n    if (slot) {\n      pendingStorage.delete(msg.id);\n      msg.ok ? slot({ ok: true, value: msg.value })\n             : slot({ ok: false, value: msg.error });\n    }\n    return;\n  }\n  if (msg.kind === \"transport.reply\") {\n    const slot = pendingTransport.get(msg.id);\n    if (slot) {\n      pendingTransport.delete(msg.id);\n      msg.ok ? slot({ ok: true, value: msg.value })\n             : slot({ ok: false, value: msg.error });\n    }\n    return;\n  }\n\n  try {\n    const value = await dispatch(msg);\n    (self.postMessage as (m: Response) => void)({ kind: \"result\", id: msg.id, ok: true, value });\n  } catch (e) {\n    (self.postMessage as (m: Response) => void)({\n      kind: \"result\", id: msg.id, ok: false, error: e instanceof Error ? e.message : String(e),\n    });\n  }\n};\n\nasync function dispatch(msg: Request): Promise<unknown> {\n  await ensureWasm();\n  switch (msg.kind) {\n    case \"init\": {\n      client = await PingClient.init(\n        msg.identityExport, msg.deviceLabel,\n        proxyStorage as unknown as never,\n        proxyTransport as unknown as never,\n        msg.nowMs,\n      );\n      // Wire decrypted application-message callback back to the main thread.\n      client.onMessage((m: unknown) => {\n        (self.postMessage as (m: Response) => void)({ kind: \"event.message\", msg: m as never });\n      });\n      return null;\n    }\n    case \"generateIdentity\":\n      return PingClient.generateIdentity();\n    case \"userId\":          return ensureClient().userId();\n    case \"deviceId\":        return ensureClient().deviceId();\n    case \"freshKeyPackage\": return ensureClient().freshKeyPackage();\n    case \"createConversation\":\n      return await ensureClient().createConversation(msg.name ?? undefined, msg.nowMs);\n    case \"joinConversation\": {\n      const id = await ensureClient().joinConversation(msg.welcome, msg.nowMs) as Uint8Array;\n      // Notify the main thread that we just entered a new conversation. We forward the\n      // Welcome's `sender_device` so the host can label \"joined chat with <inviter>\".\n      (self.postMessage as (m: Response) => void)({\n        kind: \"event.conversation\",\n        id,\n        epoch: 0,\n        sender: msg.welcome.sender_device,\n      });\n      return id;\n    }\n    case \"listConversations\":\n      return ensureClient().listConversations();\n    case \"send\":\n      return await ensureClient().send(msg.conv, msg.plaintext, msg.nowMs);\n    case \"addMembers\":\n      // wasm-bindgen takes the entries as a plain array of {deviceId, keyPackage};\n      // serde-wasm-bindgen on the Rust side deserialises into Vec<JsAddMemberEntry>.\n      return await ensureClient().addMembers(msg.conv, msg.entries, msg.nowMs);\n    case \"removeMembers\":\n      // wasm-bindgen exposes Vec<u32> as Uint32Array; convert from the protocol's number[].\n      return await ensureClient().removeMembers(msg.conv, new Uint32Array(msg.leaves), msg.nowMs);\n    case \"revokeDevice\":\n      // [CR-2] returns the array of Commit envelopes the SDK has already broadcast.\n      return await ensureClient().revokeDevice(msg.deviceId, msg.nowMs);\n    case \"processEnvelope\": {\n      const result = await ensureClient().processEnvelope(msg.envelope, msg.nowMs);\n      (self.postMessage as (m: Response) => void)({\n        kind: \"event.conversation\",\n        id: msg.envelope.conversation_id,\n        epoch: msg.envelope.epoch,\n      });\n      return result;\n    }\n    case \"syncConversations\":\n      return await ensureClient().syncConversations(msg.nowMs);\n    case \"buildLinkingTicket\":\n      return await ensureClient().buildLinkingTicket(\n        msg.newDeviceId, msg.newDeviceKp, msg.lastAppEvents, msg.nowMs,\n      );\n    case \"consumeLinkingTicket\":\n      await ensureClient().consumeLinkingTicket(msg.ticket, msg.nowMs);\n      return null;\n    case \"decodeCatchupSnapshot\":\n      // Pure WASM — no client state required. The new device may call this in an\n      // ephemeral worker before init() completes.\n      return wasmDecodeCatchupSnapshot(msg.snapshotBytes);\n    case \"exportConversationSecret\":\n      // wasm-bindgen returns a Uint8Array sized to `length`. The bytes are a secret —\n      // the main thread is responsible for clearing the typed array when done.\n      return ensureClient().exportConversationSecret(\n        msg.conv, msg.label, msg.context, msg.length,\n      );\n    case \"sealLinkingTicket\":\n      // Pure WASM call — no client state required. Lets a sender seal a ticket from an\n      // ephemeral worker without standing up the full PingClient.\n      return wasmSealLinkingTicket(msg.ticket, msg.newDevicePub);\n    case \"openLinkingTicket\":\n      // Same — runs without an initialised client, which is the receiving device's\n      // pre-bootstrap state (it has the X25519 ephemeral key but no identity yet).\n      return wasmOpenLinkingTicket(msg.sealed, msg.newDevicePriv);\n    case \"exportConversationStateSnapshot\":\n      // [CR-7] state snapshot bytes are a secret (past epoch keys); the main thread\n      // is responsible for clearing the typed array when done.\n      return ensureClient().exportConversationStateSnapshot(msg.conv, msg.nowMs);\n    case \"importStateSnapshot\":\n      // [CR-7] returns the imported conversation id as a Uint8Array.\n      return await ensureClient().importStateSnapshot(msg.snapshotBytes, msg.nowMs);\n    default:\n      throw new Error(`unknown request kind: ${(msg as { kind: string }).kind}`);\n  }\n}\n\nfunction ensureClient(): PingClient {\n  if (!client) throw new Error(\"client not initialised\");\n  return client;\n}\n"],"mappings":";AAQA,OAAO;AAAA,EACL;AAAA,EACA,qBAAqB;AAAA,EACrB,qBAAqB;AAAA,EACrB,yBAAyB;AAAA,OACpB;AAMP,IAAI,SAA4B;AAChC,IAAI,YAAkC;AAEtC,IAAM,iBAAiB,oBAAI,IAA0D;AACrF,IAAM,mBAAmB,oBAAI,IAA0D;AACvF,IAAI,gBAAgB;AACpB,IAAI,kBAAkB;AAEtB,IAAM,eAAe;AAAA,EACnB,KAAK,CAAC,WAAmB,QAAgB,SAA4B,WAAW,OAAO,CAAC,WAAW,GAAG,CAAC;AAAA,EACvG,KAAK,CAAC,WAAmB,KAAa,UAChC,SAAe,WAAW,OAAO,CAAC,WAAW,KAAK,KAAK,CAAC;AAAA,EAC9D,KAAK,CAAC,WAAmB,QAAgB,SAAe,WAAW,OAAO,CAAC,WAAW,GAAG,CAAC;AAAA,EAC1F,UAAU,CAAC,WAAmB,WACxB,SAAmB,WAAW,YAAY,CAAC,WAAW,MAAM,CAAC;AACrE;AACA,IAAM,iBAAiB;AAAA,EACrB,MAAM,CAAC,aAA8B,SAAe,aAAa,QAAQ,CAAC,QAAQ,CAAC;AAAA,EACnF,YAAY,CAAC,MAAkB,QAAoB,UAC7C,SAA4B,aAAa,cAAc,CAAC,MAAM,QAAQ,KAAK,CAAC;AAAA,EAClF,iBAAiB,CAAC,WAAuB,SAAoB,aAAa,mBAAmB,CAAC,MAAM,CAAC;AACvG;AAEA,SAAS,SAAY,MAA+B,QAAgB,MAA6B;AAC/F,SAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,UAAM,KAAK,SAAS,YAAY,kBAAkB;AAClD,UAAM,MAAM,SAAS,YAAY,iBAAiB;AAClD,QAAI,IAAI,IAAI,CAAC,EAAE,IAAI,MAAM,MAAM,KAAK,QAAQ,KAAU,IAAI,OAAO,IAAI,MAAM,OAAO,KAAK,CAAC,CAAC,CAAC;AAC1F,SAAK,YAAY,EAAE,MAAM,GAAG,IAAI,SAAS,IAAI,QAAQ,KAAK,CAAa;AAAA,EACzE,CAAC;AACH;AAEA,eAAe,aAAa;AAC1B,MAAI,UAAW,QAAO;AAEtB,cAAY,KAAK,EAAE,KAAK,MAAM,MAAS;AACvC,SAAO;AACT;AAEA,KAAK,YAAY,OAAO,OAA8B;AACpD,QAAM,MAAM,GAAG;AAGf,MAAI,IAAI,SAAS,iBAAiB;AAChC,UAAM,OAAO,eAAe,IAAI,IAAI,EAAE;AACtC,QAAI,MAAM;AACR,qBAAe,OAAO,IAAI,EAAE;AAC5B,UAAI,KAAK,KAAK,EAAE,IAAI,MAAM,OAAO,IAAI,MAAM,CAAC,IACnC,KAAK,EAAE,IAAI,OAAO,OAAO,IAAI,MAAM,CAAC;AAAA,IAC/C;AACA;AAAA,EACF;AACA,MAAI,IAAI,SAAS,mBAAmB;AAClC,UAAM,OAAO,iBAAiB,IAAI,IAAI,EAAE;AACxC,QAAI,MAAM;AACR,uBAAiB,OAAO,IAAI,EAAE;AAC9B,UAAI,KAAK,KAAK,EAAE,IAAI,MAAM,OAAO,IAAI,MAAM,CAAC,IACnC,KAAK,EAAE,IAAI,OAAO,OAAO,IAAI,MAAM,CAAC;AAAA,IAC/C;AACA;AAAA,EACF;AAEA,MAAI;AACF,UAAM,QAAQ,MAAM,SAAS,GAAG;AAChC,IAAC,KAAK,YAAsC,EAAE,MAAM,UAAU,IAAI,IAAI,IAAI,IAAI,MAAM,MAAM,CAAC;AAAA,EAC7F,SAAS,GAAG;AACV,IAAC,KAAK,YAAsC;AAAA,MAC1C,MAAM;AAAA,MAAU,IAAI,IAAI;AAAA,MAAI,IAAI;AAAA,MAAO,OAAO,aAAa,QAAQ,EAAE,UAAU,OAAO,CAAC;AAAA,IACzF,CAAC;AAAA,EACH;AACF;AAEA,eAAe,SAAS,KAAgC;AACtD,QAAM,WAAW;AACjB,UAAQ,IAAI,MAAM;AAAA,IAChB,KAAK,QAAQ;AACX,eAAS,MAAM,WAAW;AAAA,QACxB,IAAI;AAAA,QAAgB,IAAI;AAAA,QACxB;AAAA,QACA;AAAA,QACA,IAAI;AAAA,MACN;AAEA,aAAO,UAAU,CAAC,MAAe;AAC/B,QAAC,KAAK,YAAsC,EAAE,MAAM,iBAAiB,KAAK,EAAW,CAAC;AAAA,MACxF,CAAC;AACD,aAAO;AAAA,IACT;AAAA,IACA,KAAK;AACH,aAAO,WAAW,iBAAiB;AAAA,IACrC,KAAK;AAAmB,aAAO,aAAa,EAAE,OAAO;AAAA,IACrD,KAAK;AAAmB,aAAO,aAAa,EAAE,SAAS;AAAA,IACvD,KAAK;AAAmB,aAAO,aAAa,EAAE,gBAAgB;AAAA,IAC9D,KAAK;AACH,aAAO,MAAM,aAAa,EAAE,mBAAmB,IAAI,QAAQ,QAAW,IAAI,KAAK;AAAA,IACjF,KAAK,oBAAoB;AACvB,YAAM,KAAK,MAAM,aAAa,EAAE,iBAAiB,IAAI,SAAS,IAAI,KAAK;AAGvE,MAAC,KAAK,YAAsC;AAAA,QAC1C,MAAM;AAAA,QACN;AAAA,QACA,OAAO;AAAA,QACP,QAAQ,IAAI,QAAQ;AAAA,MACtB,CAAC;AACD,aAAO;AAAA,IACT;AAAA,IACA,KAAK;AACH,aAAO,aAAa,EAAE,kBAAkB;AAAA,IAC1C,KAAK;AACH,aAAO,MAAM,aAAa,EAAE,KAAK,IAAI,MAAM,IAAI,WAAW,IAAI,KAAK;AAAA,IACrE,KAAK;AAGH,aAAO,MAAM,aAAa,EAAE,WAAW,IAAI,MAAM,IAAI,SAAS,IAAI,KAAK;AAAA,IACzE,KAAK;AAEH,aAAO,MAAM,aAAa,EAAE,cAAc,IAAI,MAAM,IAAI,YAAY,IAAI,MAAM,GAAG,IAAI,KAAK;AAAA,IAC5F,KAAK;AAEH,aAAO,MAAM,aAAa,EAAE,aAAa,IAAI,UAAU,IAAI,KAAK;AAAA,IAClE,KAAK,mBAAmB;AACtB,YAAM,SAAS,MAAM,aAAa,EAAE,gBAAgB,IAAI,UAAU,IAAI,KAAK;AAC3E,MAAC,KAAK,YAAsC;AAAA,QAC1C,MAAM;AAAA,QACN,IAAI,IAAI,SAAS;AAAA,QACjB,OAAO,IAAI,SAAS;AAAA,MACtB,CAAC;AACD,aAAO;AAAA,IACT;AAAA,IACA,KAAK;AACH,aAAO,MAAM,aAAa,EAAE,kBAAkB,IAAI,KAAK;AAAA,IACzD,KAAK;AACH,aAAO,MAAM,aAAa,EAAE;AAAA,QAC1B,IAAI;AAAA,QAAa,IAAI;AAAA,QAAa,IAAI;AAAA,QAAe,IAAI;AAAA,MAC3D;AAAA,IACF,KAAK;AACH,YAAM,aAAa,EAAE,qBAAqB,IAAI,QAAQ,IAAI,KAAK;AAC/D,aAAO;AAAA,IACT,KAAK;AAGH,aAAO,0BAA0B,IAAI,aAAa;AAAA,IACpD,KAAK;AAGH,aAAO,aAAa,EAAE;AAAA,QACpB,IAAI;AAAA,QAAM,IAAI;AAAA,QAAO,IAAI;AAAA,QAAS,IAAI;AAAA,MACxC;AAAA,IACF,KAAK;AAGH,aAAO,sBAAsB,IAAI,QAAQ,IAAI,YAAY;AAAA,IAC3D,KAAK;AAGH,aAAO,sBAAsB,IAAI,QAAQ,IAAI,aAAa;AAAA,IAC5D,KAAK;AAGH,aAAO,aAAa,EAAE,gCAAgC,IAAI,MAAM,IAAI,KAAK;AAAA,IAC3E,KAAK;AAEH,aAAO,MAAM,aAAa,EAAE,oBAAoB,IAAI,eAAe,IAAI,KAAK;AAAA,IAC9E;AACE,YAAM,IAAI,MAAM,yBAA0B,IAAyB,IAAI,EAAE;AAAA,EAC7E;AACF;AAEA,SAAS,eAA2B;AAClC,MAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,wBAAwB;AACrD,SAAO;AACT;","names":[]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ping-openmls-sdk",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "description": "OpenMLS-based secure messaging SDK — runs in browsers, React Native, RN-Web, and Electron/Tauri.",
   "license": "Apache-2.0",
   "type": "module",

package/wasm/package.json

@@ -0,0 +1,17 @@
+{
+  "name": "ping-openmls-sdk-wasm",
+  "type": "module",
+  "description": "wasm-bindgen surface for the Ping OpenMLS SDK — drives the ping-openmls-sdk npm package",
+  "version": "0.2.0",
+  "license": "Apache-2.0",
+  "files": [
+    "ping_wasm_bg.wasm",
+    "ping_wasm.js",
+    "ping_wasm.d.ts"
+  ],
+  "main": "ping_wasm.js",
+  "types": "ping_wasm.d.ts",
+  "sideEffects": [
+    "./snippets/*"
+  ]
+}