Files
quicproquo/sdks/typescript
Christian Nennemann a05da9b751 feat: upgrade OpenMLS 0.5 → 0.8 for security patches and GREASE support
Migrates all MLS code in quicprochat-core from OpenMLS 0.5 to 0.8:
- StorageProvider replaces OpenMlsKeyStore (keystore.rs full rewrite)
- HybridCryptoProvider updated for new OpenMlsProvider trait
- Group operations updated for new API signatures
- MLS state persistence via MemoryStorage serialization
- tls_codec 0.3 → 0.4, openmls_traits/rust_crypto 0.2 → 0.5
2026-03-21 19:14:06 +01:00
..

@quicprochat/client

TypeScript SDK for quicprochat -- an E2E encrypted group messenger built on MLS (RFC 9420), hybrid post-quantum key exchange (X25519 + ML-KEM-768), and sealed sender envelopes.

Features

  • WASM-powered crypto -- Ed25519 signatures, hybrid KEM, sealed sender, message padding, safety numbers -- all compiled from the Rust quicprochat-core crate via wasm-pack.
  • High-level client API -- QpqClient wraps transport + crypto into a type-safe interface for resolving users, creating channels, and exchanging messages.
  • Offline mode -- All crypto operations work without a server connection. Use QpqClient.offline() for key generation, signing, encryption, etc.
  • Transport abstraction -- Pluggable Transport interface with a built-in WebSocketTransport for browser environments.

Quick start

import { QpqClient } from "@quicprochat/client";

// Crypto-only (no server needed)
const client = await QpqClient.offline();
const alice = client.generateIdentity();
const bob = client.generateIdentity();
const safetyNumber = client.computeSafetyNumber(alice.publicKey, bob.publicKey);
console.log("Safety number:", safetyNumber);

// Sign and verify
const msg = new TextEncoder().encode("hello");
const sig = client.sign(alice.seed, msg);
console.log("Valid:", client.verify(alice.publicKey, msg, sig));

Server connection

The native qpc server speaks Cap'n Proto RPC over QUIC/TCP with Noise_XX. Browsers cannot open raw TCP sockets, so a WebSocket bridge proxy is required for full server connectivity:

const client = await QpqClient.connect({ addr: "wss://bridge.example.com" });
const peerKey = await client.resolveUser("bob");
const channel = await client.createChannel(peerKey);

Building

npm install
npm run build    # compiles to dist/

Project structure

src/
  index.ts       -- public API exports
  client.ts      -- QpqClient class (high-level API)
  transport.ts   -- Transport interface + WebSocket implementation
  crypto.ts      -- WASM crypto wrapper
  types.ts       -- TypeScript type definitions
pkg/             -- WASM output (built by wasm-pack)
demo/            -- Browser demo page