feat(chat): Implement end-to-end encrypted swarm messaging system

- Add Swarm Chat documentation with architecture, API endpoints, and security considerations - Create database schema for chat conversations, messages, and typing indicators - Implement chat API endpoints for sending, receiving, and managing messages - Add client-side encryption utilities using RSA-OAEP with SHA-256 - Create chat page UI for viewing conversations and messages - Add chat type definitions for TypeScript support - Update database schema with new chat tables and relationships - Update sidebar navigation to include chat link - Enable true end-to-end encrypted messaging across swarm nodes without ActivityPub limitations
2026-01-26 20:00:17 +01:00
parent c5a5985aa6
commit 6b8eeb6814
13 changed files with 5957 additions and 0 deletions
@@ -0,0 +1,115 @@
+/**
+ * Swarm Chat Inbox
+ * 
+ * POST: Receives chat messages from other swarm nodes
+ */
+
+import { NextRequest, NextResponse } from 'next/server';
+import { db, users, chatConversations, chatMessages } from '@/db';
+import { eq, and } from 'drizzle-orm';
+import { z } from 'zod';
+import type { SwarmChatMessagePayload } from '@/lib/swarm/chat-types';
+
+const chatMessageSchema = z.object({
+  messageId: z.string(),
+  senderHandle: z.string(),
+  senderDisplayName: z.string().optional(),
+  senderAvatarUrl: z.string().optional(),
+  senderNodeDomain: z.string(),
+  recipientHandle: z.string(),
+  encryptedContent: z.string(),
+  timestamp: z.string(),
+  signature: z.string().optional(),
+});
+
+export async function POST(request: NextRequest) {
+  try {
+    if (!db) {
+      return NextResponse.json({ error: 'Database not available' }, { status: 503 });
+    }
+
+    const body = await request.json();
+    const data = chatMessageSchema.parse(body) as SwarmChatMessagePayload;
+
+    // Find the recipient (local user)
+    const recipient = await db.query.users.findFirst({
+      where: eq(users.handle, data.recipientHandle.toLowerCase()),
+    });
+
+    if (!recipient) {
+      return NextResponse.json({ error: 'Recipient not found' }, { status: 404 });
+    }
+
+    if (recipient.isSuspended) {
+      return NextResponse.json({ error: 'Recipient not available' }, { status: 404 });
+    }
+
+    // Check if message already exists (prevent duplicates)
+    const swarmMessageId = `swarm:${data.senderNodeDomain}:${data.messageId}`;
+    const existingMessage = await db.query.chatMessages.findFirst({
+      where: eq(chatMessages.swarmMessageId, swarmMessageId),
+    });
+
+    if (existingMessage) {
+      return NextResponse.json({
+        success: true,
+        message: 'Message already received',
+      });
+    }
+
+    // Get or create conversation
+    const senderFullHandle = `${data.senderHandle}@${data.senderNodeDomain}`;
+    let conversation = await db.query.chatConversations.findFirst({
+      where: and(
+        eq(chatConversations.participant1Id, recipient.id),
+        eq(chatConversations.participant2Handle, senderFullHandle)
+      ),
+    });
+
+    if (!conversation) {
+      const [newConversation] = await db.insert(chatConversations).values({
+        participant1Id: recipient.id,
+        participant2Handle: senderFullHandle,
+        lastMessageAt: new Date(data.timestamp),
+        lastMessagePreview: '[Encrypted message]',
+      }).returning();
+      conversation = newConversation;
+    }
+
+    // Store the message
+    const [newMessage] = await db.insert(chatMessages).values({
+      conversationId: conversation.id,
+      senderHandle: senderFullHandle,
+      senderDisplayName: data.senderDisplayName,
+      senderAvatarUrl: data.senderAvatarUrl,
+      senderNodeDomain: data.senderNodeDomain,
+      encryptedContent: data.encryptedContent,
+      swarmMessageId,
+      deliveredAt: new Date(),
+      createdAt: new Date(data.timestamp),
+    }).returning();
+
+    // Update conversation last message
+    await db.update(chatConversations)
+      .set({
+        lastMessageAt: new Date(data.timestamp),
+        lastMessagePreview: '[Encrypted message]',
+        updatedAt: new Date(),
+      })
+      .where(eq(chatConversations.id, conversation.id));
+
+    console.log(`[Swarm Chat] Received message from ${senderFullHandle} to ${data.recipientHandle}`);
+
+    return NextResponse.json({
+      success: true,
+      message: 'Message received',
+      messageId: newMessage.id,
+    });
+  } catch (error) {
+    if (error instanceof z.ZodError) {
+      return NextResponse.json({ error: 'Invalid payload', details: error.issues }, { status: 400 });
+    }
+    console.error('Swarm chat inbox error:', error);
+    return NextResponse.json({ error: 'Failed to receive message' }, { status: 500 });
+  }
+}