Add project files.

Wingnal.Service/Protos/Groups.proto

@@ -0,0 +1,310 @@
+/*
+ * Copyright 2020 Signal Messenger, LLC
+ * SPDX-License-Identifier: AGPL-3.0-only
+ */
+
+syntax = "proto3";
+
+package signal;
+
+option java_package = "org.signal.storageservice.storage.protos.groups";
+option java_outer_classname = "GroupProtos";
+option java_multiple_files = true;
+option csharp_namespace = "Wingnal.Service.Protos.Groups";
+
+message AvatarUploadAttributes {
+  string key = 1;
+  string credential = 2;
+  string acl = 3;
+  string algorithm = 4;
+  string date = 5;
+  string policy = 6;
+  string signature = 7;
+}
+
+// Stored data
+
+message Member {
+  enum Role {
+    UNKNOWN = 0;
+    DEFAULT = 1;
+    ADMINISTRATOR = 2;
+  }
+
+  bytes userId = 1;
+  Role role = 2;
+  bytes profileKey = 3;
+  bytes presentation = 4;
+  uint32 joinedAtVersion = 5;
+  bytes labelEmoji = 6; // decrypts to a UTF-8 string
+  bytes labelString = 7; // decrypts to a UTF-8 string
+}
+
+message MemberPendingProfileKey {
+  Member member = 1;
+  bytes addedByUserId = 2;
+  uint64 timestamp = 3;  // ms since epoch
+}
+
+message MemberPendingAdminApproval {
+  bytes userId = 1;
+  bytes profileKey = 2;
+  bytes presentation = 3;
+  uint64 timestamp = 4;  // ms since epoch
+}
+
+message MemberBanned {
+  bytes userId = 1;
+  uint64 timestamp = 2;  // ms since epoch
+}
+
+message AccessControl {
+  enum AccessRequired {
+    UNKNOWN = 0;
+    ANY = 1;
+    MEMBER = 2;
+    ADMINISTRATOR = 3;
+    UNSATISFIABLE = 4;
+  }
+
+  AccessRequired attributes = 1;
+  AccessRequired members = 2;
+  AccessRequired addFromInviteLink = 3;
+  AccessRequired memberLabel = 4;
+}
+
+message Group {
+  bytes publicKey = 1;
+  bytes title = 2;
+  bytes description = 11;
+  // The URL for this group's avatar. The content at this URL can be
+  // decrypted/deserialized into a `GroupAttributeBlob`.
+  string avatarUrl = 3;
+  bytes disappearingMessagesTimer = 4;
+  AccessControl accessControl = 5;
+  uint32 version = 6;
+  repeated Member members = 7;
+  repeated MemberPendingProfileKey membersPendingProfileKey = 8;
+  repeated MemberPendingAdminApproval membersPendingAdminApproval = 9;
+  bytes inviteLinkPassword = 10;
+  bool announcements_only = 12;
+  repeated MemberBanned members_banned = 13;
+  bool terminated = 14;
+  // next: 15
+}
+
+message GroupAttributeBlob {
+  oneof content {
+    string title = 1;
+    bytes avatar = 2;
+    uint32 disappearingMessagesDuration = 3;
+    string descriptionText = 4;
+  }
+}
+
+message GroupInviteLink {
+  message GroupInviteLinkContentsV1 {
+    bytes groupMasterKey = 1;
+    bytes inviteLinkPassword = 2;
+  }
+
+  oneof contents {
+    GroupInviteLinkContentsV1 contentsV1 = 1;
+  }
+}
+
+message GroupJoinInfo {
+  bytes publicKey = 1;
+  bytes title = 2;
+  bytes description = 8;
+  string avatar = 3;
+  uint32 memberCount = 4;
+  AccessControl.AccessRequired addFromInviteLink = 5;
+  uint32 version = 6;
+  bool pendingAdminApproval = 7;
+  // bool pendingAdminApprovalFull = 9;
+  // next: 10
+}
+
+// Deltas
+
+message GroupChange {
+
+  message Actions {
+
+    message AddMemberAction {
+      Member added = 1;
+      bool joinFromInviteLink = 2;
+    }
+
+    message DeleteMemberAction {
+      bytes deletedUserId = 1;
+    }
+
+    message ModifyMemberRoleAction {
+      bytes userId = 1;
+      Member.Role role = 2;
+    }
+
+    message ModifyMemberLabelAction {
+      bytes userId = 1;
+      bytes labelEmoji = 2; // decrypts to a UTF-8 string
+      bytes labelString = 3; // decrypts to a UTF-8 string
+    }
+
+    message ModifyMemberProfileKeyAction {
+      bytes presentation = 1;
+      bytes user_id = 2;
+      bytes profile_key = 3;
+    }
+
+    message AddMemberPendingProfileKeyAction {
+      MemberPendingProfileKey added = 1;
+    }
+
+    message DeleteMemberPendingProfileKeyAction {
+      bytes deletedUserId = 1;
+    }
+
+    message PromoteMemberPendingProfileKeyAction {
+      bytes presentation = 1;
+      bytes user_id = 2;
+      bytes profile_key = 3;
+    }
+
+    message PromoteMemberPendingPniAciProfileKeyAction {
+      bytes presentation = 1;
+      bytes user_id = 2;
+      bytes pni = 3;
+      bytes profile_key = 4;
+    }
+
+    message AddMemberPendingAdminApprovalAction {
+      MemberPendingAdminApproval added = 1;
+    }
+
+    message DeleteMemberPendingAdminApprovalAction {
+      bytes deletedUserId = 1;
+    }
+
+    message PromoteMemberPendingAdminApprovalAction {
+      bytes userId = 1;
+      Member.Role role = 2;
+    }
+
+    message AddMemberBannedAction {
+      MemberBanned added = 1;
+    }
+
+    message DeleteMemberBannedAction {
+      bytes deletedUserId = 1;
+    }
+
+    message ModifyTitleAction {
+      bytes title = 1;
+    }
+
+    message ModifyDescriptionAction {
+      bytes description = 1;
+    }
+
+    message ModifyAvatarAction {
+      string avatar = 1;
+    }
+
+    message ModifyDisappearingMessageTimerAction {
+      bytes timer = 1;
+    }
+
+    message ModifyAttributesAccessControlAction {
+      AccessControl.AccessRequired attributesAccess = 1;
+    }
+
+    message ModifyMembersAccessControlAction {
+      AccessControl.AccessRequired membersAccess = 1;
+    }
+
+    message ModifyAddFromInviteLinkAccessControlAction {
+      AccessControl.AccessRequired addFromInviteLinkAccess = 1;
+    }
+
+    message ModifyMemberLabelAccessControlAction {
+      AccessControl.AccessRequired memberLabelAccess = 1;
+    }
+
+    message ModifyInviteLinkPasswordAction {
+      bytes inviteLinkPassword = 1;
+    }
+
+    message ModifyAnnouncementsOnlyAction {
+      bool announcements_only = 1;
+    }
+
+    message TerminateGroupAction {}
+
+    bytes sourceUserId = 1;
+    // clients should not provide this value; the server will provide it in the response buffer to ensure the signature is binding to a particular group
+    // if clients set it during a request the server will respond with 400.
+    bytes group_id = 25;
+    uint32 version = 2;
+
+    repeated AddMemberAction addMembers = 3;
+    repeated DeleteMemberAction deleteMembers = 4;
+    repeated ModifyMemberRoleAction modifyMemberRoles = 5;
+    repeated ModifyMemberProfileKeyAction modifyMemberProfileKeys = 6;
+    repeated AddMemberPendingProfileKeyAction addMembersPendingProfileKey = 7;
+    repeated DeleteMemberPendingProfileKeyAction deleteMembersPendingProfileKey = 8;
+    repeated PromoteMemberPendingProfileKeyAction promoteMembersPendingProfileKey = 9;
+    ModifyTitleAction modifyTitle = 10;
+    ModifyAvatarAction modifyAvatar = 11;
+    ModifyDisappearingMessageTimerAction modifyDisappearingMessageTimer = 12;
+    ModifyAttributesAccessControlAction modifyAttributesAccess = 13;
+    ModifyMembersAccessControlAction modifyMemberAccess = 14;
+    ModifyAddFromInviteLinkAccessControlAction modifyAddFromInviteLinkAccess = 15;  // change epoch = 1
+    repeated AddMemberPendingAdminApprovalAction addMembersPendingAdminApproval = 16;  // change epoch = 1
+    repeated DeleteMemberPendingAdminApprovalAction deleteMembersPendingAdminApproval = 17;  // change epoch = 1
+    repeated PromoteMemberPendingAdminApprovalAction promoteMembersPendingAdminApproval = 18;  // change epoch = 1
+    ModifyInviteLinkPasswordAction modifyInviteLinkPassword = 19;  // change epoch = 1
+    ModifyDescriptionAction modifyDescription = 20;  // change epoch = 2
+    ModifyAnnouncementsOnlyAction modify_announcements_only = 21;  // change epoch = 3
+    repeated AddMemberBannedAction add_members_banned = 22;  // change epoch = 4
+    repeated DeleteMemberBannedAction delete_members_banned = 23;  // change epoch = 4
+    repeated PromoteMemberPendingPniAciProfileKeyAction promote_members_pending_pni_aci_profile_key = 24;  // change epoch = 5
+    repeated ModifyMemberLabelAction modifyMemberLabels = 26; // change epoch = 6;
+    ModifyMemberLabelAccessControlAction modifyMemberLabelAccess = 27; // change epoch = 6
+    TerminateGroupAction terminate_group = 28; // change epoch = 7
+    // next: 29
+  }
+
+  bytes actions = 1;
+  bytes serverSignature = 2;
+  uint32 changeEpoch = 3;
+}
+
+// External credentials
+
+message ExternalGroupCredential {
+  string token = 1;
+}
+
+// API responses
+
+message GroupResponse {
+  Group group = 1;
+  bytes group_send_endorsements_response = 2;
+}
+
+message GroupChanges {
+  message GroupChangeState {
+    GroupChange groupChange = 1;
+    Group groupState = 2;
+  }
+
+  repeated GroupChangeState groupChanges = 1;
+  bytes group_send_endorsements_response = 2;
+}
+
+message GroupChangeResponse {
+  GroupChange group_change = 1;
+  bytes group_send_endorsements_response = 2;
+}

Wingnal.Service/Protos/Provisioning.proto

@@ -0,0 +1,49 @@
+syntax = "proto2";
+
+package signalservice;
+
+option csharp_namespace = "Wingnal.Service.Protos";
+
+// Mirrors libsignal-service's Provisioning.proto. Used for the secondary-device
+// linking flow: the primary phone encrypts a ProvisionMessage to the ephemeral
+// public key advertised by this client in the linking QR code.
+
+message ProvisioningUuid {
+    optional string uuid = 1;
+}
+
+// The encrypted device name shown for this linked device in the primary's device list.
+message DeviceName {
+    optional bytes ephemeralPublic = 1;
+    optional bytes syntheticIv     = 2;
+    optional bytes ciphertext      = 3;
+}
+
+message ProvisionEnvelope {
+    optional bytes publicKey = 1; // The primary device's ephemeral Curve25519 public key (33-byte DJB form).
+    optional bytes body      = 2; // version(1) || iv(16) || AES-256-CBC ciphertext || HMAC-SHA256(32).
+}
+
+message ProvisionMessage {
+    optional bytes  aciIdentityKeyPublic  = 1;
+    optional bytes  aciIdentityKeyPrivate = 2;
+    optional string number                = 3;
+    optional string provisioningCode      = 4;
+    optional string userAgent             = 5;
+    optional bytes  profileKey            = 6;
+    optional bool   readReceipts          = 7;
+    optional string aci                   = 8;
+    optional uint32 provisioningVersion   = 9;
+    optional string pni                   = 10;
+    optional bytes  pniIdentityKeyPublic  = 11;
+    optional bytes  pniIdentityKeyPrivate = 12;
+    optional bytes  masterKey             = 13; // deprecated upstream in favor of accountEntropyPool; kept optional for back-compat
+    // Link'n'sync (message-history transfer) fields — see docs/SYNC.md. When this device advertises the
+    // link+sync capability in the QR, the primary includes ephemeralBackupKey, the one-time AES key the
+    // transfer archive is encrypted under.
+    optional bytes  ephemeralBackupKey    = 14; // 32 bytes
+    optional string accountEntropyPool    = 15;
+    optional bytes  mediaRootBackupKey    = 16; // 32 bytes
+    optional bytes  aciBinary             = 17; // 16-byte UUID
+    optional bytes  pniBinary             = 18; // 16-byte UUID
+}

Wingnal.Service/Protos/SealedSender.proto

@@ -0,0 +1,67 @@
+syntax = "proto2";
+
+// Mirrors libsignal rust/protocol/src/proto/sealed_sender.proto (tag v0.96.1). Used to parse inbound
+// UNIDENTIFIED_SENDER envelopes (sealed sender), so messages other people send us are received.
+
+package signal.proto.sealed_sender;
+
+option csharp_namespace = "Wingnal.Service.Protos.SealedSender";
+
+message ServerCertificate {
+    message Certificate {
+        optional uint32 id  = 1;
+        optional bytes  key = 2;
+    }
+
+    optional bytes certificate = 1;
+    optional bytes signature   = 2;
+}
+
+message SenderCertificate {
+    message Certificate {
+        optional string            senderE164    = 1;
+        oneof senderUuid {
+            string                 uuidString    = 6;
+            bytes                  uuidBytes     = 7;
+        }
+        optional uint32            senderDevice  = 2;
+        optional fixed64           expires       = 3;
+        optional bytes             identityKey   = 4;
+        oneof signer {
+            bytes /*ServerCertificate*/ certificate = 5;
+            uint32                      id          = 8;
+        }
+    }
+
+    optional bytes certificate = 1;
+    optional bytes signature   = 2;
+}
+
+message UnidentifiedSenderMessage {
+
+    message Message {
+        enum Type {
+            PREKEY_MESSAGE         = 1;
+            MESSAGE                = 2;
+            reserved 3 to 6;
+            SENDERKEY_MESSAGE      = 7;
+            PLAINTEXT_CONTENT      = 8;
+        }
+
+        enum ContentHint {
+            reserved     0;
+            RESENDABLE = 1;
+            IMPLICIT   = 2;
+        }
+
+        optional Type type = 1;
+        optional bytes senderCertificate = 2;
+        optional bytes content = 3;
+        optional ContentHint contentHint = 4;
+        optional bytes groupId = 5;
+    }
+
+    optional bytes ephemeralPublic  = 1;
+    optional bytes encryptedStatic  = 2;
+    optional bytes encryptedMessage = 3;
+}

Wingnal.Service/Protos/WebSocketResources.proto

@@ -0,0 +1,36 @@
+syntax = "proto2";
+
+package signalservice;
+
+option csharp_namespace = "Wingnal.Service.Protos";
+
+// Signal tunnels an HTTP-like request/response protocol over a single WebSocket.
+// Every binary frame on the socket is a WebSocketMessage.
+
+message WebSocketRequestMessage {
+    optional string verb    = 1;
+    optional string path    = 2;
+    optional bytes  body    = 3;
+    repeated string headers = 5;
+    optional uint64 id      = 4;
+}
+
+message WebSocketResponseMessage {
+    optional uint64 id      = 1;
+    optional uint32 status  = 2;
+    optional string message = 3;
+    repeated string headers = 5;
+    optional bytes  body    = 4;
+}
+
+message WebSocketMessage {
+    enum Type {
+        UNKNOWN  = 0;
+        REQUEST  = 1;
+        RESPONSE = 2;
+    }
+
+    optional Type                     type     = 1;
+    optional WebSocketRequestMessage  request  = 2;
+    optional WebSocketResponseMessage response = 3;
+}