mirror of
https://github.com/stablyai/orca.git
synced 2026-11-01 01:27:35 +00:00
OrcaWinandm4air
f9794d8efc
* refactor(remote): one paired E2EE handshake core for desktop, CLI, web and mobile clients Every paired client now builds its hello, checks the host's ready, seals its auth frame and opens host frames through src/shared/paired-e2ee-client-handshake. Platforms inject their own NaCl/base64 primitives. The v2 client session and its pure-JS key schedule (@noble/hashes 1.8.0, the version mobile pins) move to src/shared, and the per-host v2 latch policy is shared with an injected store. No wire change: frames match the captured legacy and v2 fixtures byte for byte, and a cross-version test drives the core against the released host and the released client against this host. The auth step is now async so a device-key signer can slot in later. * fix(remote): keep @noble/hashes out of the CLI's unbundled runtime The packaged CLI loads src/shared output from disk, so a bare @noble/hashes import failed the packaged-runtime check. The v2 key schedule is now a primitive: Node clients use the node:crypto schedule (moved to src/shared so the CLI can reach it), while the browser and phone keep the pure-JS one. * fix(mobile): re-check the v2 latch before sending a legacy auth frame The auth step is async, so another socket can latch the host to v2 while a legacy auth frame is being sealed. Refuse it at send time, as before. --------- Co-authored-by: m4air <m4air@Mac.localdomain>
34 lines
1.5 KiB
TypeScript
34 lines
1.5 KiB
TypeScript
// Why: desktop/CLI (Node), web and mobile each keep their own NaCl box and
|
|
// base64 adapters (size limits, Hermes typed-array quirks, no Buffer in a
|
|
// browser), so the shared handshake core takes them as a parameter.
|
|
export type PairedE2EEKeyPair = { publicKey: Uint8Array; secretKey: Uint8Array }
|
|
|
|
export type PairedE2EEV2KeySchedule = {
|
|
mobileToDesktopKey: Uint8Array
|
|
desktopToMobileKey: Uint8Array
|
|
sessionId: Uint8Array
|
|
transcriptHash: Uint8Array
|
|
}
|
|
|
|
export type PairedE2EEPrimitives = {
|
|
generateKeyPair: () => PairedE2EEKeyPair
|
|
deriveSharedKey: (ourSecretKey: Uint8Array, peerPublicKey: Uint8Array) => Uint8Array
|
|
randomBytes: (length: number) => Uint8Array
|
|
encodeBase64: (bytes: Uint8Array) => string
|
|
// Throws on input the platform decoder rejects.
|
|
decodeBase64: (value: string) => Uint8Array
|
|
publicKeyFromBase64: (value: string) => Uint8Array
|
|
publicKeyToBase64: (key: Uint8Array) => string
|
|
sealLegacyText: (plaintext: string, sharedKey: Uint8Array) => string
|
|
openLegacyText: (frame: string, sharedKey: Uint8Array) => string | null
|
|
sealLegacyBinary: (plaintext: Uint8Array, sharedKey: Uint8Array) => Uint8Array<ArrayBuffer>
|
|
openLegacyBinary: (frame: Uint8Array, sharedKey: Uint8Array) => Uint8Array | null
|
|
// Why injected: Node uses node:crypto, so the CLI's unbundled runtime needs no extra package.
|
|
deriveV2KeySchedule: (args: {
|
|
sharedSecret: Uint8Array
|
|
transcript: Uint8Array
|
|
clientNonce: Uint8Array
|
|
desktopNonce: Uint8Array
|
|
}) => PairedE2EEV2KeySchedule
|
|
}
|