[WIP] Security work While on holiday

test/task8-options.type-test.ts

@@ -0,0 +1,78 @@
+import type {
+  MTPDataValueInput,
+  MTPClientOptions,
+  MTPOpenRelayMetadataOptions,
+  MTPOpenRelayContentOptions,
+  MTPClient,
+  MTPSendProtectedOptions,
+  MTPSendSealedRelayOptions,
+} from "../src/sdk/index.js";
+
+const recipients = [new Uint8Array([1])];
+
+const clientOptions: MTPClientOptions = {
+  url: "https://example.invalid",
+  credentials: {
+    clientId: 1,
+    keyring: recipients[0],
+    // @ts-expect-error keyringBytes was removed from the stable credential API
+    keyringBytes: recipients[0],
+  },
+};
+
+const protectedOptions: MTPSendProtectedOptions = {
+  receiverId: 2,
+  recipients,
+  signaturePurpose: 32,
+  encryptionPurpose: 33,
+  // @ts-expect-error sendProtected has only receiverId
+  receiver: 3,
+};
+
+const relayOptions: MTPSendSealedRelayOptions = {
+  finalRecipientId: 2,
+  nextHopId: 3,
+  metadataRecipients: recipients,
+  contentRecipients: recipients,
+  // @ts-expect-error sealed relay frames never expose an outer sender
+  sender: 1,
+};
+
+const metadataValues: MTPDataValueInput[] = [
+  null,
+  true,
+  42,
+  42n,
+  "metadata",
+  new Uint8Array([1, 2]),
+  ["nested", false],
+  { Metadata: "typed container" },
+];
+
+const relayReceiveOptions: MTPOpenRelayMetadataOptions = {
+  resolveSignerPublicKeys: () => recipients,
+};
+
+const contentReceiveOptions: MTPOpenRelayContentOptions = {
+  // @ts-expect-error replayGuard belongs to metadata opening or subscriptions
+  replayGuard: { accept: () => true },
+};
+
+declare const client: MTPClient;
+void client.sendProtected("ProtectedMessage", "scalar protected content", protectedOptions);
+void client.sendSealedRelay("ProtectedMessage", new Uint8Array([1, 2, 3]), relayOptions);
+
+// @ts-expect-error sealed relay subscriptions accept application type names, not numeric IDs
+client.subscribeSealedRelay(32, () => {});
+
+// @ts-expect-error relay receive uses the key-history resolver API
+relayReceiveOptions.senderPublicKey = recipients[0];
+// @ts-expect-error relay receive selects a verification policy, not a signature suite
+relayReceiveOptions.signatureSuite = "dual";
+
+void protectedOptions;
+void relayOptions;
+void metadataValues;
+void relayReceiveOptions;
+void contentReceiveOptions;
+void clientOptions;