space-data-module-sdk 0.1.0 → 0.2.0

package/src/index.js

@@ -3,6 +3,13 @@ export * from "./compliance/index.js";
 export * from "./auth/index.js";
 export * from "./transport/index.js";
 export * from "./compiler/index.js";
+export * from "./bundle/index.js";
 export * from "./standards/index.js";
-export { DefaultManifestExports } from "./runtime/constants.js";
-
+export * from "./host/index.js";
+export {
+  DefaultManifestExports,
+  DrainPolicy,
+  ExternalInterfaceDirection,
+  ExternalInterfaceKind,
+  RuntimeTarget,
+} from "./runtime/constants.js";

package/src/manifest/normalize.js

@@ -39,10 +39,37 @@ const capabilityKindByName = Object.freeze({
   random: CapabilityKind.RANDOM,
   logging: CapabilityKind.LOGGING,
   timers: CapabilityKind.TIMERS,
+  schedule_cron: CapabilityKind.SCHEDULE_CRON,
+  cron: CapabilityKind.SCHEDULE_CRON,
   pubsub: CapabilityKind.PUBSUB,
+  http: CapabilityKind.HTTP,
+  filesystem: CapabilityKind.FILESYSTEM,
+  pipe: CapabilityKind.PIPE,
+  network: CapabilityKind.NETWORK,
+  database: CapabilityKind.DATABASE,
   protocol_dial: CapabilityKind.PROTOCOL_DIAL,
   protocol_handle: CapabilityKind.PROTOCOL_HANDLE,
+  tls: CapabilityKind.TLS,
+  mqtt: CapabilityKind.MQTT,
+  websocket: CapabilityKind.WEBSOCKET,
+  tcp: CapabilityKind.TCP,
+  udp: CapabilityKind.UDP,
+  process_exec: CapabilityKind.PROCESS_EXEC,
+  exec: CapabilityKind.PROCESS_EXEC,
+  context_read: CapabilityKind.CONTEXT_READ,
+  context_write: CapabilityKind.CONTEXT_WRITE,
+  storage_adapter: CapabilityKind.STORAGE_ADAPTER,
   storage_query: CapabilityKind.STORAGE_QUERY,
+  storage_write: CapabilityKind.STORAGE_WRITE,
+  wallet_sign: CapabilityKind.WALLET_SIGN,
+  ipfs: CapabilityKind.IPFS,
+  crypto_hash: CapabilityKind.CRYPTO_HASH,
+  crypto_sign: CapabilityKind.CRYPTO_SIGN,
+  crypto_verify: CapabilityKind.CRYPTO_VERIFY,
+  crypto_encrypt: CapabilityKind.CRYPTO_ENCRYPT,
+  crypto_decrypt: CapabilityKind.CRYPTO_DECRYPT,
+  crypto_key_agreement: CapabilityKind.CRYPTO_KEY_AGREEMENT,
+  crypto_kdf: CapabilityKind.CRYPTO_KDF,
   scene_access: CapabilityKind.SCENE_ACCESS,
   entity_access: CapabilityKind.ENTITY_ACCESS,
   render_hooks: CapabilityKind.RENDER_HOOKS,
@@ -238,6 +265,11 @@ export function toEmbeddedPluginManifest(input = {}) {
       "externalInterfaces are not yet representable in the embedded FlatBuffer manifest schema and were omitted from the compiled artifact.",
     );
   }
+  if (Array.isArray(input.runtimeTargets) && input.runtimeTargets.length > 0) {
+    warnings.push(
+      "runtimeTargets are not yet representable in the embedded FlatBuffer manifest schema and were omitted from the compiled artifact.",
+    );
+  }
 
   const capabilities = Array.isArray(input.capabilities)
     ? input.capabilities
@@ -272,4 +304,3 @@ export function toEmbeddedPluginManifest(input = {}) {
     warnings,
   };
 }
-

package/src/runtime/constants.js

@@ -14,21 +14,38 @@ export const ExternalInterfaceKind = Object.freeze({
   CLOCK: "clock",
   RANDOM: "random",
   TIMER: "timer",
+  SCHEDULE: "schedule",
   PUBSUB: "pubsub",
   PROTOCOL: "protocol",
   HTTP: "http",
+  WEBSOCKET: "websocket",
+  MQTT: "mqtt",
+  TCP: "tcp",
+  UDP: "udp",
+  TLS: "tls",
   FILESYSTEM: "filesystem",
   PIPE: "pipe",
   NETWORK: "network",
   DATABASE: "database",
+  EXEC: "exec",
+  CRYPTO: "crypto",
+  CONTEXT: "context",
   LOCAL_RUNTIME: "local-runtime",
   HOST_SERVICE: "host-service",
 });
 
+export const RuntimeTarget = Object.freeze({
+  NODE: "node",
+  BROWSER: "browser",
+  WASI: "wasi",
+  SERVER: "server",
+  DESKTOP: "desktop",
+  EDGE: "edge",
+});
+
 export const DefaultManifestExports = Object.freeze({
   pluginBytesSymbol: "plugin_get_manifest_flatbuffer",
   pluginSizeSymbol: "plugin_get_manifest_flatbuffer_size",
   flowBytesSymbol: "flow_get_manifest_flatbuffer",
   flowSizeSymbol: "flow_get_manifest_flatbuffer_size",
 });
-

package/src/transport/pki.js

@@ -14,8 +14,6 @@ import {
   x25519SharedSecret,
 } from "../utils/wasmCrypto.js";
 
-const HKDF_SALT_LABEL = new TextEncoder().encode("space-data-module-sdk");
-
 function normalizePublicKey(value) {
   if (typeof value === "string") {
     return hexToBytes(value);
@@ -66,9 +64,6 @@ export async function encryptBytesForRecipient({
   }
   const sender = senderKeyPair ?? (await generateX25519Keypair());
   const salt = await randomBytes(32);
-  salt.set(
-    HKDF_SALT_LABEL.slice(0, Math.min(HKDF_SALT_LABEL.length, salt.length)),
-  );
   const iv = await randomBytes(12);
   const sharedSecret = await deriveSharedSecret(
     sender.privateKey,

package/src/utils/encoding.js

@@ -48,7 +48,15 @@ export function bytesToBase64(bytes) {
   return Buffer.from(toUint8Array(bytes)).toString("base64");
 }
 
+const MAX_BASE64_LENGTH = 256 * 1024 * 1024;
+
 export function base64ToBytes(base64) {
-  return new Uint8Array(Buffer.from(String(base64 ?? "").trim(), "base64"));
+  const str = String(base64 ?? "").trim();
+  if (str.length > MAX_BASE64_LENGTH) {
+    throw new RangeError(
+      `Base64 input exceeds ${MAX_BASE64_LENGTH} character limit.`,
+    );
+  }
+  return new Uint8Array(Buffer.from(str, "base64"));
 }
 

package/src/utils/wasmCrypto.js

@@ -24,6 +24,11 @@ export async function sha256Bytes(value) {
   return wallet.utils.sha256(toUint8Array(value));
 }
 
+export async function sha512Bytes(value) {
+  const wallet = await getWasmWallet();
+  return wallet.utils.sha512(toUint8Array(value));
+}
+
 export async function hkdfBytes(ikm, salt, info, length) {
   const wallet = await getWasmWallet();
   return wallet.utils.hkdf(
@@ -47,6 +52,50 @@ export async function x25519SharedSecret(privateKey, publicKey) {
   );
 }
 
+export async function secp256k1PublicKey(privateKey) {
+  const wallet = await getWasmWallet();
+  return wallet.curves.publicKeyFromPrivate(toUint8Array(privateKey));
+}
+
+export async function secp256k1SignDigest(digest, privateKey) {
+  const wallet = await getWasmWallet();
+  return wallet.curves.secp256k1.sign(
+    toUint8Array(digest),
+    toUint8Array(privateKey),
+  );
+}
+
+export async function secp256k1VerifyDigest(digest, signature, publicKey) {
+  const wallet = await getWasmWallet();
+  return wallet.curves.secp256k1.verify(
+    toUint8Array(digest),
+    toUint8Array(signature),
+    toUint8Array(publicKey),
+  );
+}
+
+export async function ed25519PublicKey(seed) {
+  const wallet = await getWasmWallet();
+  return wallet.curves.ed25519.publicKeyFromSeed(toUint8Array(seed));
+}
+
+export async function ed25519Sign(message, seed) {
+  const wallet = await getWasmWallet();
+  return wallet.curves.ed25519.sign(
+    toUint8Array(message),
+    toUint8Array(seed),
+  );
+}
+
+export async function ed25519Verify(message, signature, publicKey) {
+  const wallet = await getWasmWallet();
+  return wallet.curves.ed25519.verify(
+    toUint8Array(message),
+    toUint8Array(signature),
+    toUint8Array(publicKey),
+  );
+}
+
 export async function aesGcmEncrypt(key, plaintext, iv, aad = null) {
   const wallet = await getWasmWallet();
   return wallet.utils.aesGcm.encrypt(
@@ -67,4 +116,3 @@ export async function aesGcmDecrypt(key, ciphertext, tag, iv, aad = null) {
     aad ? toUint8Array(aad) : undefined,
   );
 }
-