zapo-js 0.1.1 → 0.2.0

package/dist/client/messaging/participants.js

@@ -0,0 +1,193 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createGroupParticipantsCache = createGroupParticipantsCache;
+const PromiseDedup_1 = require("../../infra/perf/PromiseDedup");
+const jid_1 = require("../../protocol/jid");
+const primitives_1 = require("../../util/primitives");
+function createGroupParticipantsCache(options) {
+    const { participantsStore, queryGroupParticipantJids, logger } = options;
+    const dedup = new PromiseDedup_1.PromiseDedup();
+    const sanitizeParticipantUsers = (participants) => {
+        const deduped = new Set();
+        for (const participant of participants) {
+            if (!participant || !participant.includes('@')) {
+                continue;
+            }
+            try {
+                deduped.add((0, jid_1.toUserJid)(participant));
+            }
+            catch (error) {
+                logger.trace('ignoring malformed participant jid', {
+                    participant,
+                    message: (0, primitives_1.toError)(error).message
+                });
+            }
+        }
+        return [...deduped];
+    };
+    const areParticipantListsEqual = (left, right) => {
+        if (left.length !== right.length) {
+            return false;
+        }
+        for (let index = 0; index < left.length; index += 1) {
+            if (left[index] !== right[index]) {
+                return false;
+            }
+        }
+        return true;
+    };
+    const mergeParticipantUsersIntoCache = async (groupJid, cachedParticipants, participantsToAdd) => {
+        if (participantsToAdd.length === 0) {
+            return;
+        }
+        const nextParticipants = [...cachedParticipants];
+        const existing = new Set(cachedParticipants);
+        for (const participant of participantsToAdd) {
+            if (existing.has(participant)) {
+                continue;
+            }
+            existing.add(participant);
+            nextParticipants.push(participant);
+        }
+        if (nextParticipants.length === cachedParticipants.length) {
+            return;
+        }
+        await participantsStore.upsertGroupParticipants({
+            groupJid,
+            participants: nextParticipants,
+            updatedAtMs: Date.now()
+        });
+    };
+    const removeParticipantUsersFromCache = async (groupJid, cachedParticipants, participantsToRemove) => {
+        if (participantsToRemove.length === 0) {
+            return;
+        }
+        const removed = new Set(participantsToRemove);
+        const nextParticipants = cachedParticipants.filter((participant) => !removed.has(participant));
+        if (nextParticipants.length === cachedParticipants.length) {
+            return;
+        }
+        if (nextParticipants.length === 0) {
+            await participantsStore.deleteGroupParticipants(groupJid);
+            return;
+        }
+        await participantsStore.upsertGroupParticipants({
+            groupJid,
+            participants: nextParticipants,
+            updatedAtMs: Date.now()
+        });
+    };
+    const replaceParticipantUsersInCache = async (groupJid, cachedParticipants, participantsToReplace, replacementParticipants) => {
+        const toReplace = new Set(participantsToReplace);
+        const nextParticipants = cachedParticipants.filter((participant) => !toReplace.has(participant));
+        const existing = new Set(nextParticipants);
+        for (const participant of replacementParticipants) {
+            if (existing.has(participant)) {
+                continue;
+            }
+            existing.add(participant);
+            nextParticipants.push(participant);
+        }
+        if (areParticipantListsEqual(cachedParticipants, nextParticipants)) {
+            return;
+        }
+        if (nextParticipants.length === 0) {
+            await participantsStore.deleteGroupParticipants(groupJid);
+            return;
+        }
+        await participantsStore.upsertGroupParticipants({
+            groupJid,
+            participants: nextParticipants,
+            updatedAtMs: Date.now()
+        });
+    };
+    const resolveGroupJidForParticipantCacheEvent = (event) => {
+        if (event.action === 'linked_group_promote' || event.action === 'linked_group_demote') {
+            return event.contextGroupJid ?? event.groupJid ?? null;
+        }
+        return event.groupJid ?? null;
+    };
+    const extractParticipantUsersFromGroupEvent = (event) => {
+        const candidates = [];
+        for (const participant of event.participants ?? []) {
+            if (participant.jid) {
+                candidates.push(participant.jid);
+            }
+            if (participant.lidJid) {
+                candidates.push(participant.lidJid);
+            }
+            if (participant.phoneJid) {
+                candidates.push(participant.phoneJid);
+            }
+        }
+        return sanitizeParticipantUsers(candidates);
+    };
+    const refreshParticipantUsers = (groupJid) => dedup.run(`refresh:${groupJid}`, async () => {
+        const queried = await queryGroupParticipantJids(groupJid);
+        const participants = sanitizeParticipantUsers(queried);
+        await participantsStore.upsertGroupParticipants({
+            groupJid,
+            participants,
+            updatedAtMs: Date.now()
+        });
+        return participants;
+    });
+    const resolveParticipantUsers = (groupJid) => dedup.run(`resolve:${groupJid}`, async () => {
+        const cached = await participantsStore.getGroupParticipants(groupJid);
+        if (cached && cached.participants.length > 0) {
+            return sanitizeParticipantUsers(cached.participants);
+        }
+        return refreshParticipantUsers(groupJid);
+    });
+    const mutateFromGroupEvent = async (event) => {
+        const groupJid = resolveGroupJidForParticipantCacheEvent(event);
+        if (!groupJid) {
+            return;
+        }
+        if (event.action === 'delete') {
+            await participantsStore.deleteGroupParticipants(groupJid);
+            return;
+        }
+        const participantUsers = extractParticipantUsersFromGroupEvent(event);
+        if (event.action === 'create') {
+            if (participantUsers.length === 0) {
+                return;
+            }
+            await participantsStore.upsertGroupParticipants({
+                groupJid,
+                participants: participantUsers,
+                updatedAtMs: Date.now()
+            });
+            return;
+        }
+        const cached = await participantsStore.getGroupParticipants(groupJid);
+        if (!cached || cached.participants.length === 0) {
+            return;
+        }
+        const cachedParticipants = sanitizeParticipantUsers(cached.participants);
+        if (cachedParticipants.length === 0) {
+            return;
+        }
+        if (event.action === 'add' ||
+            event.action === 'promote' ||
+            event.action === 'demote' ||
+            event.action === 'linked_group_promote' ||
+            event.action === 'linked_group_demote') {
+            await mergeParticipantUsersIntoCache(groupJid, cachedParticipants, participantUsers);
+            return;
+        }
+        if (event.action === 'remove') {
+            await removeParticipantUsersFromCache(groupJid, cachedParticipants, participantUsers);
+            return;
+        }
+        if (event.action === 'modify') {
+            const authorUsers = event.authorJid ? sanitizeParticipantUsers([event.authorJid]) : [];
+            await replaceParticipantUsersInCache(groupJid, cachedParticipants, authorUsers, participantUsers);
+        }
+    };
+    return {
+        resolveParticipantUsers,
+        refreshParticipantUsers,
+        mutateFromGroupEvent
+    };
+}

package/dist/client/persistence/WriteBehindPersistence.js

@@ -0,0 +1,129 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WriteBehindPersistence = void 0;
+const BackgroundQueue_1 = require("../../infra/perf/BackgroundQueue");
+const primitives_1 = require("../../util/primitives");
+function mergeThread(previous, incoming) {
+    return {
+        jid: incoming.jid,
+        name: incoming.name ?? previous.name,
+        unreadCount: incoming.unreadCount ?? previous.unreadCount,
+        archived: incoming.archived ?? previous.archived,
+        pinned: incoming.pinned ?? previous.pinned,
+        muteEndMs: incoming.muteEndMs ?? previous.muteEndMs,
+        markedAsUnread: incoming.markedAsUnread ?? previous.markedAsUnread,
+        ephemeralExpiration: incoming.ephemeralExpiration ?? previous.ephemeralExpiration
+    };
+}
+function mergeContact(previous, incoming) {
+    return {
+        jid: incoming.jid,
+        displayName: incoming.displayName ?? previous.displayName,
+        pushName: incoming.pushName ?? previous.pushName,
+        lid: incoming.lid ?? previous.lid,
+        phoneNumber: incoming.phoneNumber ?? previous.phoneNumber,
+        lastUpdatedMs: Math.max(previous.lastUpdatedMs, incoming.lastUpdatedMs)
+    };
+}
+class WriteBehindPersistence {
+    constructor(stores, logger, options = {}) {
+        this.logger = logger;
+        this.flushTimeoutMs = options.flushTimeoutMs ?? 5000;
+        const queueOptions = (domain) => ({
+            maxPendingKeys: options.maxPendingKeys ?? 4096,
+            maxWriteConcurrency: options.maxWriteConcurrency ?? 4,
+            flushTimeoutMs: this.flushTimeoutMs,
+            onError: (key, error, attempt) => {
+                this.logger.warn('write-behind error', {
+                    domain,
+                    key,
+                    attempt,
+                    message: (0, primitives_1.toError)(error).message
+                });
+            },
+            onPressure: (pendingKeys) => {
+                this.logger.warn('write-behind pressure', {
+                    domain,
+                    pendingKeys
+                });
+            },
+            onDiscard: (key) => {
+                this.logger.warn('write-behind discarded pending write', {
+                    domain,
+                    key
+                });
+            }
+        });
+        this.queues = {
+            messages: new BackgroundQueue_1.BackgroundQueue((_key, value) => stores.messageStore.upsert(value), queueOptions('messages')),
+            threads: new BackgroundQueue_1.BackgroundQueue((_key, value) => stores.threadStore.upsert(value), {
+                ...queueOptions('threads'),
+                coalesce: (previous, incoming) => mergeThread(previous, incoming)
+            }),
+            contacts: new BackgroundQueue_1.BackgroundQueue((_key, value) => stores.contactStore.upsert(value), {
+                ...queueOptions('contacts'),
+                coalesce: (previous, incoming) => mergeContact(previous, incoming)
+            })
+        };
+    }
+    persistMessage(record) {
+        this.queues.messages.enqueue(`msg:${record.id}`, record);
+    }
+    persistMessageAsync(record) {
+        return this.queues.messages.enqueueAsync(`msg:${record.id}`, record);
+    }
+    persistThread(record) {
+        this.queues.threads.enqueue(`thread:${record.jid}`, record);
+    }
+    persistThreadAsync(record) {
+        return this.queues.threads.enqueueAsync(`thread:${record.jid}`, record);
+    }
+    persistContact(record) {
+        this.queues.contacts.enqueue(`contact:${record.jid}`, record);
+    }
+    persistContactAsync(record) {
+        return this.queues.contacts.enqueueAsync(`contact:${record.jid}`, record);
+    }
+    async flush(timeoutMs = this.flushTimeoutMs) {
+        const [messages, threads, contacts] = await Promise.all([
+            this.queues.messages.flush(timeoutMs),
+            this.queues.threads.flush(timeoutMs),
+            this.queues.contacts.flush(timeoutMs)
+        ]);
+        const result = this.toDrainResult(messages, threads, contacts);
+        if (result.remaining > 0) {
+            this.logger.warn('write-behind flush finished with pending writes', {
+                messagesRemaining: messages.remaining,
+                threadsRemaining: threads.remaining,
+                contactsRemaining: contacts.remaining
+            });
+        }
+        return result;
+    }
+    async destroy(timeoutMs = this.flushTimeoutMs) {
+        const [messages, threads, contacts] = await Promise.all([
+            this.queues.messages.destroy(timeoutMs),
+            this.queues.threads.destroy(timeoutMs),
+            this.queues.contacts.destroy(timeoutMs)
+        ]);
+        const result = this.toDrainResult(messages, threads, contacts);
+        if (result.remaining > 0) {
+            this.logger.warn('write-behind destroy finished with pending writes', {
+                messagesRemaining: messages.remaining,
+                threadsRemaining: threads.remaining,
+                contactsRemaining: contacts.remaining
+            });
+        }
+        return result;
+    }
+    toDrainResult(messages, threads, contacts) {
+        return {
+            messages,
+            threads,
+            contacts,
+            flushed: messages.flushed + threads.flushed + contacts.flushed,
+            remaining: messages.remaining + threads.remaining + contacts.remaining
+        };
+    }
+}
+exports.WriteBehindPersistence = WriteBehindPersistence;

package/dist/client/tokens/cs-token.js

@@ -0,0 +1,50 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CsTokenGenerator = void 0;
+const core_1 = require("../../crypto/core");
+const bytes_1 = require("../../util/bytes");
+const collections_1 = require("../../util/collections");
+const CS_TOKEN_CACHE_MAX = 5;
+class CsTokenGenerator {
+    constructor() {
+        this.cachedKey = null;
+        this.cachedSalt = null;
+        this.cache = new Map();
+    }
+    async generate(nctSalt, accountLid) {
+        const cached = this.cache.get(accountLid);
+        if (cached && this.isSameSalt(nctSalt)) {
+            return cached;
+        }
+        const key = await this.resolveKey(nctSalt);
+        const result = await (0, core_1.hmacSign)(key, bytes_1.TEXT_ENCODER.encode(accountLid));
+        (0, collections_1.setBoundedMapEntry)(this.cache, accountLid, result, CS_TOKEN_CACHE_MAX);
+        return result;
+    }
+    invalidate() {
+        this.cachedKey = null;
+        this.cachedSalt = null;
+        this.cache.clear();
+    }
+    isSameSalt(salt) {
+        if (!this.cachedSalt || this.cachedSalt.length !== salt.length) {
+            return false;
+        }
+        for (let i = 0; i < salt.length; i += 1) {
+            if (this.cachedSalt[i] !== salt[i]) {
+                return false;
+            }
+        }
+        return true;
+    }
+    async resolveKey(salt) {
+        if (this.cachedKey && this.isSameSalt(salt)) {
+            return this.cachedKey;
+        }
+        this.cachedKey = await (0, core_1.importHmacKey)(salt);
+        this.cachedSalt = salt;
+        this.cache.clear();
+        return this.cachedKey;
+    }
+}
+exports.CsTokenGenerator = CsTokenGenerator;

package/dist/client/tokens/tc-token.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.computeBucket = computeBucket;
+exports.tokenExpirationCutoffS = tokenExpirationCutoffS;
+exports.isTokenExpired = isTokenExpired;
+exports.shouldSendNewToken = shouldSendNewToken;
+exports.clampDuration = clampDuration;
+function computeBucket(unixTimeS, durationS) {
+    return Math.floor(unixTimeS / durationS);
+}
+function tokenExpirationCutoffS(nowS, durationS, numBuckets) {
+    const currentBucket = computeBucket(nowS, durationS);
+    const cutoffBucket = currentBucket - numBuckets;
+    return cutoffBucket * durationS;
+}
+function isTokenExpired(tokenTimestampS, nowS, durationS, numBuckets) {
+    const cutoff = tokenExpirationCutoffS(nowS, durationS, numBuckets);
+    return tokenTimestampS < cutoff;
+}
+function shouldSendNewToken(senderTimestampS, nowS, senderDurationS) {
+    return computeBucket(senderTimestampS, senderDurationS) !== computeBucket(nowS, senderDurationS);
+}
+function clampDuration(durationS, maxDurationS) {
+    return Math.min(durationS, maxDurationS);
+}

package/dist/crypto/core/hkdf.js

@@ -4,23 +4,18 @@ exports.hkdf = hkdf;
 exports.hkdfSplit = hkdfSplit;
 const node_crypto_1 = require("node:crypto");
 const bytes_1 = require("../../util/bytes");
-/**
- * HKDF key derivation using SHA-256
- */
 async function hkdf(ikm, salt, info, outLength) {
     const key = await node_crypto_1.webcrypto.subtle.importKey('raw', ikm, 'HKDF', false, ['deriveBits']);
+    const infoBytes = typeof info === 'string' ? (info === '' ? bytes_1.EMPTY_BYTES : bytes_1.TEXT_ENCODER.encode(info)) : info;
     const bits = await node_crypto_1.webcrypto.subtle.deriveBits({
         name: 'HKDF',
         hash: 'SHA-256',
         salt: salt ?? bytes_1.EMPTY_BYTES,
-        info: typeof info === 'string' ? bytes_1.TEXT_ENCODER.encode(info) : info
+        info: infoBytes
     }, key, outLength * 8);
     return (0, bytes_1.toBytesView)(bits);
 }
-/**
- * HKDF key derivation that outputs two 32-byte keys
- */
 async function hkdfSplit(ikm, salt, info) {
     const out = await hkdf(ikm, salt, info, 64);
-    return [out.subarray(0, 32), out.subarray(32, 64)];
+    return [out.subarray(0, 32), out.subarray(32)];
 }

package/dist/crypto/core/index.js

@@ -3,14 +3,11 @@
  * Cryptographic utilities
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ed25519VerifyRaw = exports.aesCtrDecrypt = exports.aesCtrEncrypt = exports.pbkdf2DeriveAesCtrKey = exports.hmacSign = exports.importHmacSha512Key = exports.importHmacKey = exports.aesCbcDecrypt = exports.aesCbcEncrypt = exports.importAesCbcKey = exports.aesGcmDecrypt = exports.aesGcmEncrypt = exports.importAesGcmKey = exports.sha512 = exports.sha256 = exports.sha1 = exports.randomIntAsync = exports.randomBytesAsync = exports.buildNonce = exports.readVersionedContent = exports.prependVersion = exports.toRawPubKey = exports.toSerializedPubKey = exports.hkdfSplit = exports.hkdf = exports.assert32 = exports.decodeBase64Url = exports.X25519 = exports.Ed25519 = void 0;
+exports.aesCtrDecrypt = exports.aesCtrEncrypt = exports.pbkdf2DeriveAesCtrKey = exports.hmacSign = exports.importHmacSha512Key = exports.importHmacKey = exports.aesCbcDecrypt = exports.aesCbcEncrypt = exports.importAesCbcKey = exports.aesGcmDecrypt = exports.aesGcmEncrypt = exports.importAesGcmKey = exports.sha512 = exports.sha256 = exports.sha1 = exports.randomIntAsync = exports.randomFillAsync = exports.randomBytesAsync = exports.buildNonce = exports.readVersionedContent = exports.prependVersion = exports.toRawPubKey = exports.toSerializedPubKey = exports.hkdfSplit = exports.hkdf = exports.X25519 = exports.Ed25519 = void 0;
 var Ed25519_1 = require("../curves/Ed25519");
 Object.defineProperty(exports, "Ed25519", { enumerable: true, get: function () { return Ed25519_1.Ed25519; } });
 var X25519_1 = require("../curves/X25519");
 Object.defineProperty(exports, "X25519", { enumerable: true, get: function () { return X25519_1.X25519; } });
-var encoding_1 = require("../core/encoding");
-Object.defineProperty(exports, "decodeBase64Url", { enumerable: true, get: function () { return encoding_1.decodeBase64Url; } });
-Object.defineProperty(exports, "assert32", { enumerable: true, get: function () { return encoding_1.assert32; } });
 var hkdf_1 = require("../core/hkdf");
 Object.defineProperty(exports, "hkdf", { enumerable: true, get: function () { return hkdf_1.hkdf; } });
 Object.defineProperty(exports, "hkdfSplit", { enumerable: true, get: function () { return hkdf_1.hkdfSplit; } });
@@ -23,6 +20,7 @@ var nonce_1 = require("../core/nonce");
 Object.defineProperty(exports, "buildNonce", { enumerable: true, get: function () { return nonce_1.buildNonce; } });
 var random_1 = require("../core/random");
 Object.defineProperty(exports, "randomBytesAsync", { enumerable: true, get: function () { return random_1.randomBytesAsync; } });
+Object.defineProperty(exports, "randomFillAsync", { enumerable: true, get: function () { return random_1.randomFillAsync; } });
 Object.defineProperty(exports, "randomIntAsync", { enumerable: true, get: function () { return random_1.randomIntAsync; } });
 var primitives_1 = require("../core/primitives");
 Object.defineProperty(exports, "sha1", { enumerable: true, get: function () { return primitives_1.sha1; } });
@@ -40,4 +38,3 @@ Object.defineProperty(exports, "hmacSign", { enumerable: true, get: function ()
 Object.defineProperty(exports, "pbkdf2DeriveAesCtrKey", { enumerable: true, get: function () { return primitives_1.pbkdf2DeriveAesCtrKey; } });
 Object.defineProperty(exports, "aesCtrEncrypt", { enumerable: true, get: function () { return primitives_1.aesCtrEncrypt; } });
 Object.defineProperty(exports, "aesCtrDecrypt", { enumerable: true, get: function () { return primitives_1.aesCtrDecrypt; } });
-Object.defineProperty(exports, "ed25519VerifyRaw", { enumerable: true, get: function () { return primitives_1.ed25519VerifyRaw; } });

package/dist/crypto/core/keys.js

@@ -5,22 +5,21 @@ exports.toRawPubKey = toRawPubKey;
 exports.versionByte = versionByte;
 exports.prependVersion = prependVersion;
 exports.readVersionedContent = readVersionedContent;
-const constants_1 = require("../core/constants");
+const bytes_1 = require("../../util/bytes");
+const SERIALIZED_PUB_KEY_PREFIX = 5;
 /**
  * Converts a 32-byte raw public key to 33-byte serialized format (with 0x05 prefix)
  */
 function toSerializedPubKey(key) {
     if (key.length === 33) {
-        if (key[0] !== constants_1.SERIALIZED_PUB_KEY_PREFIX) {
+        if (key[0] !== SERIALIZED_PUB_KEY_PREFIX) {
             throw new Error('invalid serialized signal public key prefix');
         }
         return key;
     }
-    if (key.length !== 32) {
-        throw new Error(`invalid signal public key length ${key.length}`);
-    }
+    (0, bytes_1.assertByteLength)(key, 32, `invalid signal public key length ${key.length}`);
     const out = new Uint8Array(33);
-    out[0] = constants_1.SERIALIZED_PUB_KEY_PREFIX;
+    out[0] = SERIALIZED_PUB_KEY_PREFIX;
     out.set(key, 1);
     return out;
 }
@@ -31,7 +30,7 @@ function toRawPubKey(key) {
     if (key.length === 32) {
         return key;
     }
-    if (key.length === 33 && key[0] === constants_1.SERIALIZED_PUB_KEY_PREFIX) {
+    if (key.length === 33 && key[0] === SERIALIZED_PUB_KEY_PREFIX) {
         return key.subarray(1);
     }
     throw new Error(`invalid signal public key length ${key.length}`);

package/dist/crypto/core/nonce.js

@@ -3,6 +3,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.buildNonce = buildNonce;
 /**
  * Builds a 12-byte nonce for AES-GCM encryption with counter in the last 4 bytes.
+ * Allocates a new buffer per call because concurrent Noise encrypt/decrypt operations
+ * may hold references to different nonces simultaneously.
  * Throws if counter exceeds uint32 range to prevent nonce reuse.
  */
 function buildNonce(counter) {

package/dist/crypto/core/primitives.js

@@ -19,20 +19,22 @@ exports.hmacSign = hmacSign;
 exports.pbkdf2DeriveAesCtrKey = pbkdf2DeriveAesCtrKey;
 exports.aesCtrEncrypt = aesCtrEncrypt;
 exports.aesCtrDecrypt = aesCtrDecrypt;
-exports.ed25519VerifyRaw = ed25519VerifyRaw;
 const node_crypto_1 = require("node:crypto");
 const bytes_1 = require("../../util/bytes");
+async function digestBytes(algorithm, value) {
+    return (0, bytes_1.toBytesView)(await node_crypto_1.webcrypto.subtle.digest(algorithm, value));
+}
 // ============================================
 // Hash functions
 // ============================================
 async function sha256(value) {
-    return (0, bytes_1.toBytesView)(await node_crypto_1.webcrypto.subtle.digest('SHA-256', value));
+    return digestBytes('SHA-256', value);
 }
 async function sha1(value) {
-    return (0, bytes_1.toBytesView)(await node_crypto_1.webcrypto.subtle.digest('SHA-1', value));
+    return digestBytes('SHA-1', value);
 }
 async function sha512(value) {
-    return (0, bytes_1.toBytesView)(await node_crypto_1.webcrypto.subtle.digest('SHA-512', value));
+    return digestBytes('SHA-512', value);
 }
 function md5Bytes(input) {
     return (0, bytes_1.toBytesView)((0, node_crypto_1.createHash)('md5').update(input).digest());
@@ -44,12 +46,10 @@ async function importAesGcmKey(raw, usages) {
     return node_crypto_1.webcrypto.subtle.importKey('raw', raw, 'AES-GCM', false, usages);
 }
 async function aesGcmEncrypt(key, nonce, plaintext, aad = bytes_1.EMPTY_BYTES) {
-    const result = await node_crypto_1.webcrypto.subtle.encrypt({ name: 'AES-GCM', iv: nonce, additionalData: aad }, key, plaintext);
-    return (0, bytes_1.toBytesView)(result);
+    return (0, bytes_1.toBytesView)(await node_crypto_1.webcrypto.subtle.encrypt({ name: 'AES-GCM', iv: nonce, additionalData: aad }, key, plaintext));
 }
 async function aesGcmDecrypt(key, nonce, ciphertext, aad = bytes_1.EMPTY_BYTES) {
-    const result = await node_crypto_1.webcrypto.subtle.decrypt({ name: 'AES-GCM', iv: nonce, additionalData: aad }, key, ciphertext);
-    return (0, bytes_1.toBytesView)(result);
+    return (0, bytes_1.toBytesView)(await node_crypto_1.webcrypto.subtle.decrypt({ name: 'AES-GCM', iv: nonce, additionalData: aad }, key, ciphertext));
 }
 // ============================================
 // AES-CBC (for Signal protocol)
@@ -61,12 +61,10 @@ async function importAesCbcKey(keyBytes) {
     ]);
 }
 async function aesCbcEncrypt(key, iv, plaintext) {
-    const result = await node_crypto_1.webcrypto.subtle.encrypt({ name: 'AES-CBC', iv }, key, plaintext);
-    return (0, bytes_1.toBytesView)(result);
+    return (0, bytes_1.toBytesView)(await node_crypto_1.webcrypto.subtle.encrypt({ name: 'AES-CBC', iv }, key, plaintext));
 }
 async function aesCbcDecrypt(key, iv, ciphertext) {
-    const result = await node_crypto_1.webcrypto.subtle.decrypt({ name: 'AES-CBC', iv }, key, ciphertext);
-    return (0, bytes_1.toBytesView)(result);
+    return (0, bytes_1.toBytesView)(await node_crypto_1.webcrypto.subtle.decrypt({ name: 'AES-CBC', iv }, key, ciphertext));
 }
 // ============================================
 // HMAC-SHA256 (for Signal protocol)
@@ -105,17 +103,8 @@ async function pbkdf2DeriveAesCtrKey(password, salt, iterations) {
 // AES-CTR (for pairing code crypto)
 // ============================================
 async function aesCtrEncrypt(key, counter, plaintext) {
-    const result = await node_crypto_1.webcrypto.subtle.encrypt({ name: 'AES-CTR', counter, length: 64 }, key, plaintext);
-    return (0, bytes_1.toBytesView)(result);
+    return (0, bytes_1.toBytesView)(await node_crypto_1.webcrypto.subtle.encrypt({ name: 'AES-CTR', counter, length: 64 }, key, plaintext));
 }
 async function aesCtrDecrypt(key, counter, ciphertext) {
-    const result = await node_crypto_1.webcrypto.subtle.decrypt({ name: 'AES-CTR', counter, length: 64 }, key, ciphertext);
-    return (0, bytes_1.toBytesView)(result);
-}
-// ============================================
-// Ed25519 raw verify (for Signal variant sigs)
-// ============================================
-async function ed25519VerifyRaw(publicKey, signature, message) {
-    const cryptoKey = await node_crypto_1.webcrypto.subtle.importKey('raw', publicKey, { name: 'Ed25519' }, false, ['verify']);
-    return node_crypto_1.webcrypto.subtle.verify('Ed25519', cryptoKey, signature, message);
+    return (0, bytes_1.toBytesView)(await node_crypto_1.webcrypto.subtle.decrypt({ name: 'AES-CTR', counter, length: 64 }, key, ciphertext));
 }

package/dist/crypto/core/random.js

@@ -1,32 +1,35 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.randomIntAsync = void 0;
 exports.randomBytesAsync = randomBytesAsync;
-exports.randomIntAsync = randomIntAsync;
+exports.randomFillAsync = randomFillAsync;
 const node_crypto_1 = require("node:crypto");
+const node_util_1 = require("node:util");
 const bytes_1 = require("../../util/bytes");
-/**
- * Generates cryptographically secure random bytes
- */
-function randomBytesAsync(size) {
-    return new Promise((resolve, reject) => {
-        (0, node_crypto_1.randomBytes)(size, (error, buffer) => {
-            if (error)
-                reject(error);
-            else
-                resolve((0, bytes_1.toBytesView)(buffer));
-        });
-    });
+const randomBytesAsyncImpl = (0, node_util_1.promisify)(node_crypto_1.randomBytes);
+const randomIntAsyncImpl = (0, node_util_1.promisify)(node_crypto_1.randomInt);
+async function randomBytesAsync(size) {
+    return (0, bytes_1.toBytesView)(await randomBytesAsyncImpl(size));
 }
-/**
- * Generates a cryptographically secure random integer in the range [min, max)
- */
-function randomIntAsync(min, max) {
-    return new Promise((resolve, reject) => {
-        (0, node_crypto_1.randomInt)(min, max, (error, value) => {
-            if (error)
+async function randomFillAsync(target, offset, size) {
+    await new Promise((resolve, reject) => {
+        const onDone = (error) => {
+            if (error) {
                 reject(error);
-            else
-                resolve(value);
-        });
+                return;
+            }
+            resolve();
+        };
+        if (offset === undefined) {
+            (0, node_crypto_1.randomFill)(target, onDone);
+            return;
+        }
+        if (size === undefined) {
+            (0, node_crypto_1.randomFill)(target, offset, onDone);
+            return;
+        }
+        (0, node_crypto_1.randomFill)(target, offset, size, onDone);
     });
+    return target;
 }
+exports.randomIntAsync = randomIntAsyncImpl;