1id 0.1.0 → 0.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -42,12 +42,14 @@ console.log(`I am ${me.handle} (tier: ${me.trust_tier})`);
42
42
 
43
43
  ## Trust Tiers
44
44
 
45
- | Tier | Hardware | Sybil Resistance |
46
- |------|----------|-----------------|
47
- | `sovereign` | TPM (discrete/firmware) | Highest manufacturer-attested |
48
- | `sovereign-portable` | YubiKey / Nitrokey | High manufacturer-attested |
49
- | `virtual` | VMware/Hyper-V vTPM | Medium hypervisor-attested |
50
- | `declared` | None (software keys) | Lowest self-asserted |
45
+ | Tier | Hardware | Sybil Resistant | Trust Level |
46
+ |------|----------|-----------------|-------------|
47
+ | `sovereign` | TPM (Intel, AMD, Infineon) with valid cert | Yes | Highest |
48
+ | `sovereign-portable` | YubiKey / Nitrokey / Feitian with attestation | Yes | Highest |
49
+ | `legacy` | Hardware TPM or security key with expired cert | Yes | High |
50
+ | `virtual` | VMware / Hyper-V / QEMU vTPM | No | Verified Hardware |
51
+ | `enclave` | Apple Secure Enclave (TOFU) | No | Verified Hardware |
52
+ | `declared` | None (software keys) | No | Software |
51
53
 
52
54
  **CRITICAL**: `request_tier` is a REQUIREMENT, not a preference. You get exactly what you ask for, or an exception. No silent fallbacks.
53
55
 
@@ -117,7 +119,7 @@ try {
117
119
  The SDK uses a two-tier architecture:
118
120
 
119
121
  1. **TypeScript SDK** (this package) — handles enrollment orchestration, credential storage, OAuth2 token management, and software key operations using Node.js built-in `crypto`
120
- 2. **Go binary** (`oneid-enroll`) — handles all TPM/HSM hardware operations. Auto-downloaded from [GitHub releases](https://github.com/AuraFriday/oneid-enroll/releases) when needed
122
+ 2. **Go binary** (`oneid-enroll`) — handles all TPM/HSM hardware operations. Auto-downloaded from [GitHub releases](https://github.com/1id-com/oneid-enroll/releases) when needed
121
123
 
122
124
  For `declared` tier enrollment, only the TypeScript SDK is needed. For `sovereign` (TPM) tier, the Go binary is automatically fetched.
123
125
 
@@ -148,4 +150,4 @@ Apache 2.0 — see [LICENSE](LICENSE).
148
150
  - [1id.com](https://1id.com) — Service homepage
149
151
  - [Enrollment guide](https://1id.com/enroll.md) — Machine-readable enrollment instructions
150
152
  - [Python SDK](https://pypi.org/project/oneid/) — `pip install oneid`
151
- - [Go binary](https://github.com/AuraFriday/oneid-enroll) — TPM/HSM helper
153
+ - [Go binary](https://github.com/1id-com/oneid-enroll) — TPM/HSM helper
package/dist/cli.d.ts ADDED
@@ -0,0 +1,17 @@
1
+ #!/usr/bin/env node
2
+ /**
3
+ * Command-line interface for the 1id.com SDK (Node.js).
4
+ *
5
+ * Usage:
6
+ * oneid whoami -- Show enrolled identity info
7
+ * oneid token -- Print a fresh bearer token (for scripting)
8
+ * oneid enroll -- Enroll this machine
9
+ * oneid status -- Check if enrolled
10
+ *
11
+ * Examples:
12
+ * oneid enroll --tier declared --email owner@example.com
13
+ * TOKEN=$(oneid token)
14
+ * curl -H "Authorization: Bearer $TOKEN" https://api.example.com/
15
+ */
16
+ export {};
17
+ //# sourceMappingURL=cli.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;GAaG"}
package/dist/cli.js ADDED
@@ -0,0 +1,201 @@
1
+ #!/usr/bin/env node
2
+ /**
3
+ * Command-line interface for the 1id.com SDK (Node.js).
4
+ *
5
+ * Usage:
6
+ * oneid whoami -- Show enrolled identity info
7
+ * oneid token -- Print a fresh bearer token (for scripting)
8
+ * oneid enroll -- Enroll this machine
9
+ * oneid status -- Check if enrolled
10
+ *
11
+ * Examples:
12
+ * oneid enroll --tier declared --email owner@example.com
13
+ * TOKEN=$(oneid token)
14
+ * curl -H "Authorization: Bearer $TOKEN" https://api.example.com/
15
+ */
16
+ import { credentials_exist, load_credentials, get_credentials_file_path, delete_credentials } from "./credentials.js";
17
+ import { enroll } from "./enroll.js";
18
+ import { get_token } from "./auth.js";
19
+ const VERSION = "0.2.0";
20
+ function print_help() {
21
+ console.log(`oneid ${VERSION} -- 1id.com identity for AI agents
22
+
23
+ Usage: oneid <command> [options]
24
+
25
+ Commands:
26
+ whoami Show enrolled identity info
27
+ token Print a fresh bearer token
28
+ enroll Enroll this machine with 1id.com
29
+ status Check enrollment status
30
+
31
+ Enroll options:
32
+ --tier <tier> Trust tier: sovereign, declared, etc. (default: declared)
33
+ --email <email> Operator email for handle purchases
34
+ --handle <name> Requested vanity handle
35
+ --force Re-enroll even if already enrolled
36
+
37
+ Token options:
38
+ --json Output as JSON (includes expiry)
39
+ --refresh Force token refresh
40
+
41
+ Whoami options:
42
+ --json Output as JSON
43
+
44
+ Global:
45
+ --version Show version
46
+ --help Show this help`);
47
+ }
48
+ function parse_named_argument(args, flag_name) {
49
+ const flag_index = args.indexOf(flag_name);
50
+ if (flag_index !== -1 && flag_index + 1 < args.length) {
51
+ return args[flag_index + 1];
52
+ }
53
+ return undefined;
54
+ }
55
+ function has_flag(args, flag_name) {
56
+ return args.includes(flag_name);
57
+ }
58
+ async function command_whoami(args) {
59
+ const output_as_json = has_flag(args, "--json");
60
+ if (!credentials_exist()) {
61
+ console.error("Not enrolled. Run: oneid enroll");
62
+ return 1;
63
+ }
64
+ try {
65
+ const credentials = load_credentials();
66
+ const info = {
67
+ internal_id: credentials.client_id,
68
+ trust_tier: credentials.trust_tier,
69
+ key_algorithm: credentials.key_algorithm,
70
+ enrolled_at: credentials.enrolled_at || null,
71
+ };
72
+ if (output_as_json) {
73
+ console.log(JSON.stringify(info, null, 2));
74
+ }
75
+ else {
76
+ console.log(`Identity: ${info.internal_id}`);
77
+ console.log(`Trust tier: ${info.trust_tier}`);
78
+ console.log(`Algorithm: ${info.key_algorithm}`);
79
+ if (info.enrolled_at) {
80
+ console.log(`Enrolled: ${info.enrolled_at}`);
81
+ }
82
+ }
83
+ return 0;
84
+ }
85
+ catch (error) {
86
+ console.error(`Error: ${error.message}`);
87
+ return 1;
88
+ }
89
+ }
90
+ async function command_token(args) {
91
+ const output_as_json = has_flag(args, "--json");
92
+ const force_refresh = has_flag(args, "--refresh");
93
+ if (!credentials_exist()) {
94
+ console.error("Not enrolled. Run: oneid enroll");
95
+ return 1;
96
+ }
97
+ try {
98
+ const token = await get_token(force_refresh);
99
+ if (output_as_json) {
100
+ console.log(JSON.stringify({
101
+ access_token: token.access_token,
102
+ token_type: token.token_type,
103
+ expires_at: token.expires_at.toISOString(),
104
+ }, null, 2));
105
+ }
106
+ else {
107
+ // Raw token for scripting: $(oneid token)
108
+ console.log(token.access_token);
109
+ }
110
+ return 0;
111
+ }
112
+ catch (error) {
113
+ console.error(`Authentication failed: ${error.message}`);
114
+ return 1;
115
+ }
116
+ }
117
+ async function command_enroll(args) {
118
+ const request_tier = parse_named_argument(args, "--tier") || "declared";
119
+ const operator_email = parse_named_argument(args, "--email");
120
+ const requested_handle = parse_named_argument(args, "--handle");
121
+ const force_reenroll = has_flag(args, "--force");
122
+ if (credentials_exist() && !force_reenroll) {
123
+ console.error("Already enrolled. Use --force to re-enroll (replaces current identity).");
124
+ return 1;
125
+ }
126
+ if (force_reenroll && credentials_exist()) {
127
+ delete_credentials();
128
+ }
129
+ try {
130
+ const identity = await enroll({
131
+ request_tier: request_tier,
132
+ operator_email: operator_email,
133
+ requested_handle: requested_handle,
134
+ });
135
+ console.log("Enrolled successfully!");
136
+ console.log(`Identity: ${identity.internal_id}`);
137
+ console.log(`Handle: ${identity.handle}`);
138
+ console.log(`Trust tier: ${identity.trust_tier}`);
139
+ return 0;
140
+ }
141
+ catch (error) {
142
+ console.error(`Enrollment failed: ${error.message}`);
143
+ return 1;
144
+ }
145
+ }
146
+ async function command_status(_args) {
147
+ const credentials_file_path = get_credentials_file_path();
148
+ if (credentials_exist()) {
149
+ console.log("Enrolled: yes");
150
+ console.log(`Credentials: ${credentials_file_path}`);
151
+ try {
152
+ const credentials = load_credentials();
153
+ console.log(`Identity: ${credentials.client_id}`);
154
+ console.log(`Tier: ${credentials.trust_tier}`);
155
+ }
156
+ catch {
157
+ console.log("Identity: (unable to read)");
158
+ }
159
+ return 0;
160
+ }
161
+ else {
162
+ console.log("Enrolled: no");
163
+ console.log(`Expected credentials at: ${credentials_file_path}`);
164
+ return 1;
165
+ }
166
+ }
167
+ async function main() {
168
+ const args = process.argv.slice(2);
169
+ if (args.length === 0 || has_flag(args, "--help") || has_flag(args, "-h")) {
170
+ print_help();
171
+ process.exit(0);
172
+ }
173
+ if (has_flag(args, "--version") || has_flag(args, "-v")) {
174
+ console.log(`oneid ${VERSION}`);
175
+ process.exit(0);
176
+ }
177
+ const command = args[0];
178
+ const command_args = args.slice(1);
179
+ let exit_code;
180
+ switch (command) {
181
+ case "whoami":
182
+ exit_code = await command_whoami(command_args);
183
+ break;
184
+ case "token":
185
+ exit_code = await command_token(command_args);
186
+ break;
187
+ case "enroll":
188
+ exit_code = await command_enroll(command_args);
189
+ break;
190
+ case "status":
191
+ exit_code = await command_status(command_args);
192
+ break;
193
+ default:
194
+ console.error(`Unknown command: ${command}`);
195
+ print_help();
196
+ exit_code = 1;
197
+ }
198
+ process.exit(exit_code);
199
+ }
200
+ main();
201
+ //# sourceMappingURL=cli.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"cli.js","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtH,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGtC,MAAM,OAAO,GAAG,OAAO,CAAC;AAExB,SAAS,UAAU;IACjB,OAAO,CAAC,GAAG,CAAC,SAAS,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;qCAyBO,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAc,EAAE,SAAiB;IAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC3C,IAAI,UAAU,KAAK,CAAC,CAAC,IAAI,UAAU,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACtD,OAAO,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ,CAAC,IAAc,EAAE,SAAiB;IACjD,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAc;IAC1C,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAEhD,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACjD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,gBAAgB,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG;YACX,WAAW,EAAE,WAAW,CAAC,SAAS;YAClC,UAAU,EAAE,WAAW,CAAC,UAAU;YAClC,aAAa,EAAE,WAAW,CAAC,aAAa;YACxC,WAAW,EAAE,WAAW,CAAC,WAAW,IAAI,IAAI;SAC7C,CAAC;QAEF,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;YAC9C,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;YACjD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;gBACrB,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,UAAU,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACzC,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAc;IACzC,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAChD,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAElD,IAAI,CAAC,iBAAiB,EAAE,EAAE,CAAC;QACzB,OAAO,CAAC,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACjD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,aAAa,CAAC,CAAC;QAE7C,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;gBACzB,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE;aAC3C,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACf,CAAC;aAAM,CAAC;YACN,0CAA0C;YAC1C,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAClC,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,0BAA0B,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACzD,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAc;IAC1C,MAAM,YAAY,GAAG,oBAAoB,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,UAAU,CAAC;IACxE,MAAM,cAAc,GAAG,oBAAoB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC7D,MAAM,gBAAgB,GAAG,oBAAoB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAChE,MAAM,cAAc,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAEjD,IAAI,iBAAiB,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC;QAC3C,OAAO,CAAC,KAAK,CAAC,yEAAyE,CAAC,CAAC;QACzF,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,cAAc,IAAI,iBAAiB,EAAE,EAAE,CAAC;QAC1C,kBAAkB,EAAE,CAAC;IACvB,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC;YAC5B,YAAY,EAAE,YAAyB;YACvC,cAAc,EAAE,cAAc;YAC9B,gBAAgB,EAAE,gBAAgB;SACnC,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,eAAe,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;QACnD,OAAO,CAAC,GAAG,CAAC,eAAe,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,eAAe,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;QAClD,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,sBAAsB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QACrD,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,KAAe;IAC3C,MAAM,qBAAqB,GAAG,yBAAyB,EAAE,CAAC;IAE1D,IAAI,iBAAiB,EAAE,EAAE,CAAC;QACxB,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QAC7B,OAAO,CAAC,GAAG,CAAC,gBAAgB,qBAAqB,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,gBAAgB,EAAE,CAAC;YACvC,OAAO,CAAC,GAAG,CAAC,aAAa,WAAW,CAAC,SAAS,EAAE,CAAC,CAAC;YAClD,OAAO,CAAC,GAAG,CAAC,SAAS,WAAW,CAAC,UAAU,EAAE,CAAC,CAAC;QACjD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC5B,OAAO,CAAC,GAAG,CAAC,4BAA4B,qBAAqB,EAAE,CAAC,CAAC;QACjE,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEnC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;QAC1E,UAAU,EAAE,CAAC;QACb,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;QAChC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAEnC,IAAI,SAAiB,CAAC;IACtB,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,QAAQ;YACX,SAAS,GAAG,MAAM,cAAc,CAAC,YAAY,CAAC,CAAC;YAC/C,MAAM;QACR,KAAK,OAAO;YACV,SAAS,GAAG,MAAM,aAAa,CAAC,YAAY,CAAC,CAAC;YAC9C,MAAM;QACR,KAAK,QAAQ;YACX,SAAS,GAAG,MAAM,cAAc,CAAC,YAAY,CAAC,CAAC;YAC/C,MAAM;QACR,KAAK,QAAQ;YACX,SAAS,GAAG,MAAM,cAAc,CAAC,YAAY,CAAC,CAAC;YAC/C,MAAM;QACR;YACE,OAAO,CAAC,KAAK,CAAC,oBAAoB,OAAO,EAAE,CAAC,CAAC;YAC7C,UAAU,EAAE,CAAC;YACb,SAAS,GAAG,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;AAC1B,CAAC;AAED,IAAI,EAAE,CAAC"}
package/dist/client.d.ts CHANGED
@@ -35,6 +35,15 @@ export declare class OneIDAPIClient {
35
35
  * Begin TPM/HSM-based enrollment (sovereign/sovereign-portable tiers).
36
36
  */
37
37
  enroll_begin(ek_certificate_pem: string, ak_public_key_pem: string, ak_tpmt_public_b64?: string, ek_public_key_pem?: string, ek_certificate_chain_pem?: string[], hsm_type?: string, operator_email?: string | null, requested_handle?: string | null): Promise<Record<string, unknown>>;
38
+ /**
39
+ * Begin PIV-based enrollment (sovereign-portable tier).
40
+ *
41
+ * Sends the PIV attestation certificate, chain, and signing public key
42
+ * to the PIV-specific server endpoint. The server validates the chain
43
+ * against the Yubico Root CA, checks the anti-Sybil registry by device
44
+ * serial, and returns a nonce challenge for signature verification.
45
+ */
46
+ enroll_begin_piv(attestation_cert_pem: string, attestation_chain_pem: string[], signing_key_public_pem: string, hsm_type?: string, operator_email?: string | null, requested_handle?: string | null): Promise<Record<string, unknown>>;
38
47
  /**
39
48
  * Complete TPM/HSM-based enrollment by proving HSM possession.
40
49
  */
@@ -1 +1 @@
1
- {"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AA6FH;;;;;GAKG;AACH,qBAAa,cAAc;IACzB,SAAgB,YAAY,EAAE,MAAM,CAAC;IACrC,SAAgB,oBAAoB,EAAE,MAAM,CAAC;gBAG3C,YAAY,GAAE,MAA6B,EAC3C,oBAAoB,GAAE,MAA0C;IAMlE;;OAEG;YACW,aAAa;IAyB3B;;OAEG;IACG,eAAe,CACnB,gBAAgB,EAAE,MAAM,EACxB,aAAa,EAAE,MAAM,EACrB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,EAC9B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,GAC/B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAWnC;;OAEG;IACG,YAAY,CAChB,kBAAkB,EAAE,MAAM,EAC1B,iBAAiB,EAAE,MAAM,EACzB,kBAAkB,GAAE,MAAW,EAC/B,iBAAiB,GAAE,MAAW,EAC9B,wBAAwB,CAAC,EAAE,MAAM,EAAE,EACnC,QAAQ,GAAE,MAAc,EACxB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,EAC9B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,GAC/B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAenC;;OAEG;IACG,eAAe,CACnB,qBAAqB,EAAE,MAAM,EAC7B,oBAAoB,EAAE,MAAM,GAC3B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAOnC;;OAEG;IACG,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAItE;;;;OAIG;IACG,iCAAiC,CACrC,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAuEnC;;OAEG;IACG,yBAAyB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAGvF"}
1
+ {"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AA6FH;;;;;GAKG;AACH,qBAAa,cAAc;IACzB,SAAgB,YAAY,EAAE,MAAM,CAAC;IACrC,SAAgB,oBAAoB,EAAE,MAAM,CAAC;gBAG3C,YAAY,GAAE,MAA6B,EAC3C,oBAAoB,GAAE,MAA0C;IAMlE;;OAEG;YACW,aAAa;IAyB3B;;OAEG;IACG,eAAe,CACnB,gBAAgB,EAAE,MAAM,EACxB,aAAa,EAAE,MAAM,EACrB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,EAC9B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,GAC/B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAWnC;;OAEG;IACG,YAAY,CAChB,kBAAkB,EAAE,MAAM,EAC1B,iBAAiB,EAAE,MAAM,EACzB,kBAAkB,GAAE,MAAW,EAC/B,iBAAiB,GAAE,MAAW,EAC9B,wBAAwB,CAAC,EAAE,MAAM,EAAE,EACnC,QAAQ,GAAE,MAAc,EACxB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,EAC9B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,GAC/B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAenC;;;;;;;OAOG;IACG,gBAAgB,CACpB,oBAAoB,EAAE,MAAM,EAC5B,qBAAqB,EAAE,MAAM,EAAE,EAC/B,sBAAsB,EAAE,MAAM,EAC9B,QAAQ,GAAE,MAAkB,EAC5B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,EAC9B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,GAC/B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAanC;;OAEG;IACG,eAAe,CACnB,qBAAqB,EAAE,MAAM,EAC7B,oBAAoB,EAAE,MAAM,GAC3B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAOnC;;OAEG;IACG,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAItE;;;;OAIG;IACG,iCAAiC,CACrC,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAuEnC;;OAEG;IACG,yBAAyB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAGvF"}
package/dist/client.js CHANGED
@@ -19,7 +19,7 @@ import { DEFAULT_API_BASE_URL } from "./credentials.js";
19
19
  import { EnrollmentError, NetworkError, raise_from_server_error_response, } from "./exceptions.js";
20
20
  // -- HTTP client configuration --
21
21
  const DEFAULT_HTTP_TIMEOUT_MILLISECONDS = 30_000;
22
- const USER_AGENT = "oneid-sdk-node/0.1.0";
22
+ const USER_AGENT = "oneid-sdk-node/0.3.0";
23
23
  /**
24
24
  * Make a raw HTTP(S) request and return the parsed JSON body.
25
25
  * Uses only Node.js built-in modules.
@@ -140,6 +140,29 @@ export class OneIDAPIClient {
140
140
  }
141
141
  return this._make_request("POST", "/api/v1/enroll/begin", request_body);
142
142
  }
143
+ /**
144
+ * Begin PIV-based enrollment (sovereign-portable tier).
145
+ *
146
+ * Sends the PIV attestation certificate, chain, and signing public key
147
+ * to the PIV-specific server endpoint. The server validates the chain
148
+ * against the Yubico Root CA, checks the anti-Sybil registry by device
149
+ * serial, and returns a nonce challenge for signature verification.
150
+ */
151
+ async enroll_begin_piv(attestation_cert_pem, attestation_chain_pem, signing_key_public_pem, hsm_type = "yubikey", operator_email, requested_handle) {
152
+ const request_body = {
153
+ attestation_cert_pem,
154
+ attestation_chain_pem,
155
+ signing_key_public_pem,
156
+ hsm_type,
157
+ };
158
+ if (operator_email != null) {
159
+ request_body["operator_email"] = operator_email;
160
+ }
161
+ if (requested_handle != null) {
162
+ request_body["requested_handle"] = requested_handle;
163
+ }
164
+ return this._make_request("POST", "/api/v1/enroll/begin/piv", request_body);
165
+ }
143
166
  /**
144
167
  * Complete TPM/HSM-based enrollment by proving HSM possession.
145
168
  */
@@ -1 +1 @@
1
- {"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AACpC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EACL,eAAe,EACf,YAAY,EACZ,gCAAgC,GACjC,MAAM,iBAAiB,CAAC;AAEzB,kCAAkC;AAClC,MAAM,iCAAiC,GAAG,MAAM,CAAC;AACjD,MAAM,UAAU,GAAG,sBAAsB,CAAC;AAS1C;;;GAGG;AACH,SAAS,iBAAiB,CACxB,QAAgB,EAChB,OAAuB,EACvB,oBAA4B;IAE5B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAC3C,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAE1C,MAAM,eAAe,GAA2B;YAC9C,YAAY,EAAE,UAAU;YACxB,QAAQ,EAAE,kBAAkB;YAC5B,GAAG,OAAO,CAAC,OAAO;SACnB,CAAC;QAEF,IAAI,mBAAuC,CAAC;QAC5C,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC;YAC9B,mBAAmB,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACxD,eAAe,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;YACrD,eAAe,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,QAAQ,EAAE,CAAC;QACxF,CAAC;QAED,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAC3B;YACE,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,IAAI,EAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM;YAC/B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE,eAAe;YACxB,OAAO,EAAE,oBAAoB;SAC9B,EACD,CAAC,GAAG,EAAE,EAAE;YACN,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3D,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBACzD,IAAI,CAAC;oBACH,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;oBACzC,OAAO,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;gBACnE,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,CAAC,IAAI,YAAY,CACrB,8BAA8B,GAAG,CAAC,IAAI,UAAU,GAAG,CAAC,UAAU,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAC7F,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QAEF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAY,EAAE,EAAE;YAC/B,MAAM,CAAC,IAAI,YAAY,CAAC,wBAAwB,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACjF,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YACrB,GAAG,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,YAAY,CACrB,cAAc,GAAG,CAAC,IAAI,oBAAoB,oBAAoB,IAAI,CACnE,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,mBAAmB,IAAI,IAAI,EAAE,CAAC;YAChC,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACjC,CAAC;QACD,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,cAAc;IACT,YAAY,CAAS;IACrB,oBAAoB,CAAS;IAE7C,YACE,eAAuB,oBAAoB,EAC3C,uBAA+B,iCAAiC;QAEhE,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,oBAAoB,GAAG,oBAAoB,CAAC;IACnD,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa,CACzB,MAAc,EACd,QAAgB,EAChB,SAA0C,EAC1C,OAAgC;QAEhC,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CACtC,IAAI,CAAC,YAAY,EACjB,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,EAC9C,IAAI,CAAC,oBAAoB,CAC1B,CAAC;QAEF,MAAM,aAAa,GAAG,QAAQ,CAAC,IAA+B,CAAC;QAE/D,4CAA4C;QAC5C,IAAI,CAAC,aAAa,EAAE,EAAE,EAAE,CAAC;YACvB,MAAM,UAAU,GAAG,CAAC,aAAa,EAAE,KAAK,IAAI,EAAE,CAA2B,CAAC;YAC1E,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,IAAI,eAAe,CAAC;YACtD,MAAM,aAAa,GAAG,UAAU,CAAC,OAAO,IAAI,wBAAwB,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC3F,gCAAgC,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QAC9D,CAAC;QAED,OAAO,CAAC,aAAa,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,gBAAwB,EACxB,aAAqB,EACrB,cAA8B,EAC9B,gBAAgC;QAEhC,MAAM,YAAY,GAA4B;YAC5C,gBAAgB;YAChB,aAAa;SACd,CAAC;QACF,IAAI,cAAc,IAAI,IAAI,EAAE,CAAC;YAAC,YAAY,CAAC,gBAAgB,CAAC,GAAG,cAAc,CAAC;QAAC,CAAC;QAChF,IAAI,gBAAgB,IAAI,IAAI,EAAE,CAAC;YAAC,YAAY,CAAC,kBAAkB,CAAC,GAAG,gBAAgB,CAAC;QAAC,CAAC;QAEtF,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,yBAAyB,EAAE,YAAY,CAAC,CAAC;IAC7E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,kBAA0B,EAC1B,iBAAyB,EACzB,qBAA6B,EAAE,EAC/B,oBAA4B,EAAE,EAC9B,wBAAmC,EACnC,WAAmB,KAAK,EACxB,cAA8B,EAC9B,gBAAgC;QAEhC,MAAM,YAAY,GAA4B;YAC5C,kBAAkB;YAClB,iBAAiB;YACjB,iBAAiB;YACjB,kBAAkB;YAClB,QAAQ;SACT,CAAC;QACF,IAAI,wBAAwB,EAAE,CAAC;YAAC,YAAY,CAAC,0BAA0B,CAAC,GAAG,wBAAwB,CAAC;QAAC,CAAC;QACtG,IAAI,cAAc,IAAI,IAAI,EAAE,CAAC;YAAC,YAAY,CAAC,gBAAgB,CAAC,GAAG,cAAc,CAAC;QAAC,CAAC;QAChF,IAAI,gBAAgB,IAAI,IAAI,EAAE,CAAC;YAAC,YAAY,CAAC,kBAAkB,CAAC,GAAG,gBAAgB,CAAC;QAAC,CAAC;QAEtF,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,sBAAsB,EAAE,YAAY,CAAC,CAAC;IAC1E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,qBAA6B,EAC7B,oBAA4B;QAE5B,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,yBAAyB,EAAE;YAC3D,qBAAqB;YACrB,oBAAoB;SACrB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,QAAgB;QACjC,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,oBAAoB,QAAQ,EAAE,CAAC,CAAC;IACnE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,iCAAiC,CACrC,SAAiB,EACjB,aAAqB;QAErB,MAAM,UAAU,GAAG,8CAA8C,CAAC;QAClE,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC;YACpC,UAAU,EAAE,oBAAoB;YAChC,SAAS;YACT,aAAa;SACd,CAAC,CAAC,QAAQ,EAAE,CAAC;QAEd,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;YACnD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC;YAC3C,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;YAE1C,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAC3B;gBACE,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvC,IAAI,EAAE,GAAG,CAAC,QAAQ;gBAClB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,mCAAmC;oBACnD,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;oBACzD,YAAY,EAAE,UAAU;iBACzB;gBACD,OAAO,EAAE,IAAI,CAAC,oBAAoB;aACnC,EACD,CAAC,GAAG,EAAE,EAAE;gBACN,MAAM,MAAM,GAAa,EAAE,CAAC;gBAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC3D,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACjB,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;oBACzD,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAA4B,CAAC;wBAC/D,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;4BAC3B,MAAM,iBAAiB,GACpB,MAAM,CAAC,iBAA4B;gCACnC,MAAM,CAAC,KAAgB;gCACxB,QAAQ,GAAG,CAAC,UAAU,EAAE,CAAC;4BAC3B,MAAM,CAAC,IAAI,eAAe,CACxB,8BAA8B,GAAG,CAAC,UAAU,MAAM,iBAAiB,EAAE,CACtE,CAAC,CAAC;4BACH,OAAO;wBACT,CAAC;wBACD,OAAO,CAAC,MAAM,CAAC,CAAC;oBAClB,CAAC;oBAAC,MAAM,CAAC;wBACP,MAAM,CAAC,IAAI,YAAY,CACrB,0CAA0C,GAAG,CAAC,UAAU,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CACvF,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CACF,CAAC;YAEF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAY,EAAE,EAAE;gBAC/B,MAAM,CAAC,IAAI,YAAY,CACrB,uCAAuC,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CACpE,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;gBACrB,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,YAAY,CACrB,oBAAoB,GAAG,CAAC,IAAI,oBAAoB,IAAI,CAAC,oBAAoB,IAAI,CAC9E,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACrB,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,yBAAyB,CAAC,WAAmB;QACjD,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,kBAAkB,WAAW,EAAE,CAAC,CAAC;IACpE,CAAC;CACF"}
1
+ {"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AACpC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EACL,eAAe,EACf,YAAY,EACZ,gCAAgC,GACjC,MAAM,iBAAiB,CAAC;AAEzB,kCAAkC;AAClC,MAAM,iCAAiC,GAAG,MAAM,CAAC;AACjD,MAAM,UAAU,GAAG,sBAAsB,CAAC;AAS1C;;;GAGG;AACH,SAAS,iBAAiB,CACxB,QAAgB,EAChB,OAAuB,EACvB,oBAA4B;IAE5B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAC3C,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAE1C,MAAM,eAAe,GAA2B;YAC9C,YAAY,EAAE,UAAU;YACxB,QAAQ,EAAE,kBAAkB;YAC5B,GAAG,OAAO,CAAC,OAAO;SACnB,CAAC;QAEF,IAAI,mBAAuC,CAAC;QAC5C,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC;YAC9B,mBAAmB,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;YACxD,eAAe,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;YACrD,eAAe,CAAC,gBAAgB,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,QAAQ,EAAE,CAAC;QACxF,CAAC;QAED,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAC3B;YACE,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,IAAI,EAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,MAAM;YAC/B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,OAAO,EAAE,eAAe;YACxB,OAAO,EAAE,oBAAoB;SAC9B,EACD,CAAC,GAAG,EAAE,EAAE;YACN,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3D,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;gBACzD,IAAI,CAAC;oBACH,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;oBACzC,OAAO,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;gBACnE,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,CAAC,IAAI,YAAY,CACrB,8BAA8B,GAAG,CAAC,IAAI,UAAU,GAAG,CAAC,UAAU,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAC7F,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CACF,CAAC;QAEF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAY,EAAE,EAAE;YAC/B,MAAM,CAAC,IAAI,YAAY,CAAC,wBAAwB,QAAQ,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACjF,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;YACrB,GAAG,CAAC,OAAO,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,YAAY,CACrB,cAAc,GAAG,CAAC,IAAI,oBAAoB,oBAAoB,IAAI,CACnE,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,mBAAmB,IAAI,IAAI,EAAE,CAAC;YAChC,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACjC,CAAC;QACD,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,cAAc;IACT,YAAY,CAAS;IACrB,oBAAoB,CAAS;IAE7C,YACE,eAAuB,oBAAoB,EAC3C,uBAA+B,iCAAiC;QAEhE,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACrD,IAAI,CAAC,oBAAoB,GAAG,oBAAoB,CAAC;IACnD,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,aAAa,CACzB,MAAc,EACd,QAAgB,EAChB,SAA0C,EAC1C,OAAgC;QAEhC,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CACtC,IAAI,CAAC,YAAY,EACjB,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,EAC9C,IAAI,CAAC,oBAAoB,CAC1B,CAAC;QAEF,MAAM,aAAa,GAAG,QAAQ,CAAC,IAA+B,CAAC;QAE/D,4CAA4C;QAC5C,IAAI,CAAC,aAAa,EAAE,EAAE,EAAE,CAAC;YACvB,MAAM,UAAU,GAAG,CAAC,aAAa,EAAE,KAAK,IAAI,EAAE,CAA2B,CAAC;YAC1E,MAAM,UAAU,GAAG,UAAU,CAAC,IAAI,IAAI,eAAe,CAAC;YACtD,MAAM,aAAa,GAAG,UAAU,CAAC,OAAO,IAAI,wBAAwB,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC3F,gCAAgC,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QAC9D,CAAC;QAED,OAAO,CAAC,aAAa,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,gBAAwB,EACxB,aAAqB,EACrB,cAA8B,EAC9B,gBAAgC;QAEhC,MAAM,YAAY,GAA4B;YAC5C,gBAAgB;YAChB,aAAa;SACd,CAAC;QACF,IAAI,cAAc,IAAI,IAAI,EAAE,CAAC;YAAC,YAAY,CAAC,gBAAgB,CAAC,GAAG,cAAc,CAAC;QAAC,CAAC;QAChF,IAAI,gBAAgB,IAAI,IAAI,EAAE,CAAC;YAAC,YAAY,CAAC,kBAAkB,CAAC,GAAG,gBAAgB,CAAC;QAAC,CAAC;QAEtF,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,yBAAyB,EAAE,YAAY,CAAC,CAAC;IAC7E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAChB,kBAA0B,EAC1B,iBAAyB,EACzB,qBAA6B,EAAE,EAC/B,oBAA4B,EAAE,EAC9B,wBAAmC,EACnC,WAAmB,KAAK,EACxB,cAA8B,EAC9B,gBAAgC;QAEhC,MAAM,YAAY,GAA4B;YAC5C,kBAAkB;YAClB,iBAAiB;YACjB,iBAAiB;YACjB,kBAAkB;YAClB,QAAQ;SACT,CAAC;QACF,IAAI,wBAAwB,EAAE,CAAC;YAAC,YAAY,CAAC,0BAA0B,CAAC,GAAG,wBAAwB,CAAC;QAAC,CAAC;QACtG,IAAI,cAAc,IAAI,IAAI,EAAE,CAAC;YAAC,YAAY,CAAC,gBAAgB,CAAC,GAAG,cAAc,CAAC;QAAC,CAAC;QAChF,IAAI,gBAAgB,IAAI,IAAI,EAAE,CAAC;YAAC,YAAY,CAAC,kBAAkB,CAAC,GAAG,gBAAgB,CAAC;QAAC,CAAC;QAEtF,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,sBAAsB,EAAE,YAAY,CAAC,CAAC;IAC1E,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,gBAAgB,CACpB,oBAA4B,EAC5B,qBAA+B,EAC/B,sBAA8B,EAC9B,WAAmB,SAAS,EAC5B,cAA8B,EAC9B,gBAAgC;QAEhC,MAAM,YAAY,GAA4B;YAC5C,oBAAoB;YACpB,qBAAqB;YACrB,sBAAsB;YACtB,QAAQ;SACT,CAAC;QACF,IAAI,cAAc,IAAI,IAAI,EAAE,CAAC;YAAC,YAAY,CAAC,gBAAgB,CAAC,GAAG,cAAc,CAAC;QAAC,CAAC;QAChF,IAAI,gBAAgB,IAAI,IAAI,EAAE,CAAC;YAAC,YAAY,CAAC,kBAAkB,CAAC,GAAG,gBAAgB,CAAC;QAAC,CAAC;QAEtF,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,0BAA0B,EAAE,YAAY,CAAC,CAAC;IAC9E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,qBAA6B,EAC7B,oBAA4B;QAE5B,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,yBAAyB,EAAE;YAC3D,qBAAqB;YACrB,oBAAoB;SACrB,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,QAAgB;QACjC,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,oBAAoB,QAAQ,EAAE,CAAC,CAAC;IACnE,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,iCAAiC,CACrC,SAAiB,EACjB,aAAqB;QAErB,MAAM,UAAU,GAAG,8CAA8C,CAAC;QAClE,MAAM,SAAS,GAAG,IAAI,eAAe,CAAC;YACpC,UAAU,EAAE,oBAAoB;YAChC,SAAS;YACT,aAAa;SACd,CAAC,CAAC,QAAQ,EAAE,CAAC;QAEd,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;YACnD,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC;YAC3C,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;YAE1C,MAAM,GAAG,GAAG,SAAS,CAAC,OAAO,CAC3B;gBACE,QAAQ,EAAE,GAAG,CAAC,QAAQ;gBACtB,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvC,IAAI,EAAE,GAAG,CAAC,QAAQ;gBAClB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,mCAAmC;oBACnD,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE;oBACzD,YAAY,EAAE,UAAU;iBACzB;gBACD,OAAO,EAAE,IAAI,CAAC,oBAAoB;aACnC,EACD,CAAC,GAAG,EAAE,EAAE;gBACN,MAAM,MAAM,GAAa,EAAE,CAAC;gBAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC3D,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;oBACjB,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;oBACzD,IAAI,CAAC;wBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAA4B,CAAC;wBAC/D,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;4BAC3B,MAAM,iBAAiB,GACpB,MAAM,CAAC,iBAA4B;gCACnC,MAAM,CAAC,KAAgB;gCACxB,QAAQ,GAAG,CAAC,UAAU,EAAE,CAAC;4BAC3B,MAAM,CAAC,IAAI,eAAe,CACxB,8BAA8B,GAAG,CAAC,UAAU,MAAM,iBAAiB,EAAE,CACtE,CAAC,CAAC;4BACH,OAAO;wBACT,CAAC;wBACD,OAAO,CAAC,MAAM,CAAC,CAAC;oBAClB,CAAC;oBAAC,MAAM,CAAC;wBACP,MAAM,CAAC,IAAI,YAAY,CACrB,0CAA0C,GAAG,CAAC,UAAU,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CACvF,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC,CAAC,CAAC;YACL,CAAC,CACF,CAAC;YAEF,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAY,EAAE,EAAE;gBAC/B,MAAM,CAAC,IAAI,YAAY,CACrB,uCAAuC,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CACpE,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE;gBACrB,GAAG,CAAC,OAAO,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,YAAY,CACrB,oBAAoB,GAAG,CAAC,IAAI,oBAAoB,IAAI,CAAC,oBAAoB,IAAI,CAC9E,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YAEH,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YACrB,GAAG,CAAC,GAAG,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,yBAAyB,CAAC,WAAmB;QACjD,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,kBAAkB,WAAW,EAAE,CAAC,CAAC;IACpE,CAAC;CACF"}
@@ -24,7 +24,7 @@ export declare const DEFAULT_TOKEN_ENDPOINT = "https://1id.com/realms/agents/pro
24
24
  * without re-enrolling.
25
25
  */
26
26
  export interface StoredCredentials {
27
- /** The 1id internal ID (e.g., '1id_a7b3c9d2'), used as OAuth2 client_id. */
27
+ /** The 1id internal ID (e.g., '1id-a7b3c9d2'), used as OAuth2 client_id. */
28
28
  client_id: string;
29
29
  /** OAuth2 client secret issued by Keycloak. */
30
30
  client_secret: string;
@@ -1 +1 @@
1
- {"version":3,"file":"enroll.d.ts","sourceRoot":"","sources":["../src/enroll.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AASH,OAAO,EAGL,KAAK,QAAQ,EACb,YAAY,EAEb,MAAM,eAAe,CAAC;AAqBvB;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,2CAA2C;IAC3C,YAAY,EAAE,MAAM,CAAC;IACrB,oDAAoD;IACpD,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,6DAA6D;IAC7D,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,gFAAgF;IAChF,aAAa,CAAC,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAAC;IAC7C,iEAAiE;IACjE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,CA8CtE"}
1
+ {"version":3,"file":"enroll.d.ts","sourceRoot":"","sources":["../src/enroll.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AASH,OAAO,EAGL,KAAK,QAAQ,EACb,YAAY,EAEb,MAAM,eAAe,CAAC;AAqBvB;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,2CAA2C;IAC3C,YAAY,EAAE,MAAM,CAAC;IACrB,oDAAoD;IACpD,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,6DAA6D;IAC7D,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,gFAAgF;IAChF,aAAa,CAAC,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAAC;IAC7C,iEAAiE;IACjE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,MAAM,CAAC,OAAO,EAAE,aAAa,GAAG,OAAO,CAAC,QAAQ,CAAC,CAqDtE"}
package/dist/enroll.js CHANGED
@@ -72,6 +72,9 @@ export async function enroll(options) {
72
72
  if (tier === TrustTier.DECLARED) {
73
73
  return enroll_declared_tier(options.operator_email ?? null, options.requested_handle ?? null, resolved_key_algorithm, api_base_url);
74
74
  }
75
+ else if (tier === TrustTier.SOVEREIGN_PORTABLE) {
76
+ return enroll_piv_tier(tier, options.operator_email ?? null, options.requested_handle ?? null, api_base_url);
77
+ }
75
78
  else if (TIERS_REQUIRING_HSM.has(tier)) {
76
79
  return enroll_hsm_tier(tier, options.operator_email ?? null, options.requested_handle ?? null, api_base_url);
77
80
  }
@@ -127,6 +130,91 @@ async function enroll_declared_tier(operator_email, requested_handle, key_algori
127
130
  key_algorithm,
128
131
  };
129
132
  }
133
+ /**
134
+ * Enroll at the sovereign-portable tier using a PIV device (YubiKey).
135
+ *
136
+ * This uses the Go binary (oneid-enroll) to:
137
+ * 1. Detect available HSMs and select a PIV device
138
+ * 2. Extract PIV attestation data (no elevation needed)
139
+ * 3. Send attestation to the PIV-specific server endpoint
140
+ * 4. Receive a nonce challenge
141
+ * 5. Sign the nonce with the PIV key (no elevation needed)
142
+ * 6. Send the signed nonce to the activate endpoint
143
+ * 7. Receive identity + OAuth2 credentials
144
+ * 8. Store credentials locally
145
+ */
146
+ async function enroll_piv_tier(request_tier, operator_email, requested_handle, api_base_url) {
147
+ const { detect_available_hsms, extract_attestation_data, sign_challenge_with_piv, } = await import("./helper.js");
148
+ const detected_hsms = await detect_available_hsms();
149
+ if (detected_hsms.length === 0) {
150
+ throw new NoHSMError(`No hardware security module found. ` +
151
+ `The '${request_tier}' tier requires a YubiKey or similar PIV device.`);
152
+ }
153
+ const selected_hsm = select_hsm_for_tier(detected_hsms, request_tier);
154
+ if (selected_hsm == null) {
155
+ const hsm_types = detected_hsms.map(h => h.type ?? "unknown").join(", ");
156
+ throw new NoHSMError(`Found HSM(s) (${hsm_types}) but none are compatible with the '${request_tier}' tier.`);
157
+ }
158
+ const attestation_data = await extract_attestation_data(selected_hsm);
159
+ const api_client = new OneIDAPIClient(api_base_url);
160
+ const begin_response = await api_client.enroll_begin_piv(attestation_data.attestation_cert_pem, attestation_data.attestation_chain_pem ?? [], attestation_data.signing_key_public_pem, selected_hsm.type ?? "yubikey", operator_email, requested_handle);
161
+ const nonce_challenge_b64 = begin_response.nonce_challenge;
162
+ const sign_result = await sign_challenge_with_piv(nonce_challenge_b64);
163
+ const signed_nonce_b64 = sign_result.signature_b64;
164
+ const activate_response = await api_client.enroll_activate(begin_response.enrollment_session_id, signed_nonce_b64);
165
+ const identity_data = (activate_response.identity ?? {});
166
+ const credentials_data = (activate_response.credentials ?? {});
167
+ const internal_id = identity_data.internal_id ?? "";
168
+ const handle = identity_data.handle ?? `@${internal_id.slice(0, 12)}`;
169
+ const trust_tier_str = identity_data.trust_tier ?? request_tier;
170
+ const enrolled_at_str = identity_data.registered_at ?? new Date().toISOString();
171
+ const stored_credentials = {
172
+ client_id: credentials_data.client_id ?? internal_id,
173
+ client_secret: credentials_data.client_secret ?? "",
174
+ token_endpoint: credentials_data.token_endpoint ??
175
+ `${api_base_url}/realms/agents/protocol/openid-connect/token`,
176
+ api_base_url,
177
+ trust_tier: trust_tier_str,
178
+ key_algorithm: "ecdsa-p256",
179
+ hsm_key_reference: "piv-slot-9a",
180
+ enrolled_at: enrolled_at_str,
181
+ };
182
+ save_credentials(stored_credentials);
183
+ let enrolled_at;
184
+ try {
185
+ enrolled_at = new Date(enrolled_at_str);
186
+ }
187
+ catch {
188
+ enrolled_at = new Date();
189
+ }
190
+ let trust_tier;
191
+ const valid_tiers = Object.values(TrustTier);
192
+ if (valid_tiers.includes(trust_tier_str)) {
193
+ trust_tier = trust_tier_str;
194
+ }
195
+ else {
196
+ trust_tier = request_tier;
197
+ }
198
+ let hsm_type;
199
+ const hsm_type_str = selected_hsm.type ?? "yubikey";
200
+ const valid_hsm_types = Object.values(HSMType);
201
+ if (valid_hsm_types.includes(hsm_type_str)) {
202
+ hsm_type = hsm_type_str;
203
+ }
204
+ else {
205
+ hsm_type = HSMType.YUBIKEY;
206
+ }
207
+ return {
208
+ internal_id,
209
+ handle,
210
+ trust_tier,
211
+ hsm_type,
212
+ hsm_manufacturer: selected_hsm.manufacturer ?? null,
213
+ enrolled_at,
214
+ device_count: identity_data.device_count ?? 1,
215
+ key_algorithm: KeyAlgorithm.ECDSA_P256,
216
+ };
217
+ }
130
218
  /**
131
219
  * Enroll at an HSM-backed trust tier (sovereign, sovereign-portable, etc.).
132
220
  */
@@ -1 +1 @@
1
- {"version":3,"file":"enroll.js","sourceRoot":"","sources":["../src/enroll.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EACL,oBAAoB,EAEpB,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EACL,qBAAqB,EACrB,OAAO,EAEP,YAAY,EACZ,SAAS,GACV,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE7C,yDAAyD;AACzD,MAAM,mBAAmB,GAA2B,IAAI,GAAG,CAAC;IAC1D,SAAS,CAAC,SAAS;IACnB,SAAS,CAAC,kBAAkB;IAC5B,SAAS,CAAC,MAAM;IAChB,SAAS,CAAC,OAAO;IACjB,SAAS,CAAC,OAAO;CAClB,CAAC,CAAC;AAEH,oCAAoC;AACpC,MAAM,4BAA4B,GAAuC;IACvE,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC;IAC9B,CAAC,SAAS,CAAC,kBAAkB,CAAC,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC;IAC9E,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC;IAC7D,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC;IAC5B,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,gBAAgB,CAAC;CACxC,CAAC;AAkBF;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,OAAsB;IACjD,4CAA4C;IAC5C,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAa,CAAC;IACzD,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,eAAe,CACvB,wBAAwB,OAAO,CAAC,YAAY,mBAAmB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACxF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,YAAyB,CAAC;IAE/C,0BAA0B;IAC1B,IAAI,sBAAoC,CAAC;IACzC,IAAI,OAAO,CAAC,aAAa,IAAI,IAAI,EAAE,CAAC;QAClC,sBAAsB,GAAG,qBAAqB,CAAC;IACjD,CAAC;SAAM,IAAI,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;QACrD,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAa,CAAC;QACjE,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,eAAe,CACvB,2BAA2B,OAAO,CAAC,aAAa,aAAa,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC3F,CAAC;QACJ,CAAC;QACD,sBAAsB,GAAG,OAAO,CAAC,aAA6B,CAAC;IACjE,CAAC;SAAM,CAAC;QACN,sBAAsB,GAAG,OAAO,CAAC,aAAa,CAAC;IACjD,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,oBAAoB,CAAC;IAElE,2CAA2C;IAC3C,IAAI,IAAI,KAAK,SAAS,CAAC,QAAQ,EAAE,CAAC;QAChC,OAAO,oBAAoB,CACzB,OAAO,CAAC,cAAc,IAAI,IAAI,EAC9B,OAAO,CAAC,gBAAgB,IAAI,IAAI,EAChC,sBAAsB,EACtB,YAAY,CACb,CAAC;IACJ,CAAC;SAAM,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,OAAO,eAAe,CACpB,IAAI,EACJ,OAAO,CAAC,cAAc,IAAI,IAAI,EAC9B,OAAO,CAAC,gBAAgB,IAAI,IAAI,EAChC,YAAY,CACb,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,eAAe,CAAC,SAAS,IAAI,0BAA0B,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,oBAAoB,CACjC,cAA6B,EAC7B,gBAA+B,EAC/B,aAA2B,EAC3B,YAAoB;IAEpB,2BAA2B;IAC3B,MAAM,EAAE,eAAe,EAAE,cAAc,EAAE,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC;IAE5E,4CAA4C;IAC5C,MAAM,UAAU,GAAG,IAAI,cAAc,CAAC,YAAY,CAAC,CAAC;IACpD,MAAM,eAAe,GAAG,MAAM,UAAU,CAAC,eAAe,CACtD,cAAc,EACd,aAAa,EACb,cAAc,EACd,gBAAgB,CACjB,CAAC;IAEF,gCAAgC;IAChC,MAAM,aAAa,GAAG,CAAC,eAAe,CAAC,QAAQ,IAAI,EAAE,CAA4B,CAAC;IAClF,MAAM,gBAAgB,GAAG,CAAC,eAAe,CAAC,WAAW,IAAI,EAAE,CAA4B,CAAC;IAExF,MAAM,WAAW,GAAI,aAAa,CAAC,WAAsB,IAAI,EAAE,CAAC;IAChE,MAAM,MAAM,GAAI,aAAa,CAAC,MAAiB,IAAI,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IAClF,MAAM,eAAe,GAAI,aAAa,CAAC,aAAwB,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE5F,oCAAoC;IACpC,MAAM,kBAAkB,GAAsB;QAC5C,SAAS,EAAG,gBAAgB,CAAC,SAAoB,IAAI,WAAW;QAChE,aAAa,EAAG,gBAAgB,CAAC,aAAwB,IAAI,EAAE;QAC/D,cAAc,EAAG,gBAAgB,CAAC,cAAyB;YACzD,GAAG,YAAY,8CAA8C;QAC/D,YAAY;QACZ,UAAU,EAAE,SAAS,CAAC,QAAQ;QAC9B,aAAa;QACb,eAAe;QACf,WAAW,EAAE,eAAe;KAC7B,CAAC;IACF,MAAM,qBAAqB,GAAG,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,CAAC,gCAAgC,qBAAqB,EAAE,CAAC,CAAC;IAErE,iCAAiC;IACjC,IAAI,WAAiB,CAAC;IACtB,IAAI,CAAC;QACH,WAAW,GAAG,IAAI,IAAI,CAAC,eAAe,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,OAAO;QACL,WAAW;QACX,MAAM;QACN,UAAU,EAAE,SAAS,CAAC,QAAQ;QAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,gBAAgB,EAAE,IAAI;QACtB,WAAW;QACX,YAAY,EAAE,CAAC;QACf,aAAa;KACd,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,eAAe,CAC5B,YAAuB,EACvB,cAA6B,EAC7B,gBAA+B,EAC/B,YAAoB;IAEpB,MAAM,EACJ,qBAAqB,EACrB,wBAAwB,EACxB,mBAAmB,GACpB,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IAEhC,oCAAoC;IACpC,MAAM,aAAa,GAAG,MAAM,qBAAqB,EAAE,CAAC;IAEpD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,UAAU,CAClB,qCAAqC;YACrC,QAAQ,YAAY,oDAAoD,CACzE,CAAC;IACJ,CAAC;IAED,qCAAqC;IACrC,MAAM,YAAY,GAAG,mBAAmB,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IACtE,IAAI,YAAY,IAAI,IAAI,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAE,CAAC,CAAC,IAAe,IAAI,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrF,MAAM,IAAI,UAAU,CAClB,iBAAiB,SAAS,uCAAuC,YAAY,SAAS,CACvF,CAAC;IACJ,CAAC;IAED,mDAAmD;IACnD,MAAM,gBAAgB,GAAG,MAAM,wBAAwB,CAAC,YAAY,CAAC,CAAC;IAEtE,uCAAuC;IACvC,MAAM,UAAU,GAAG,IAAI,cAAc,CAAC,YAAY,CAAC,CAAC;IACpD,MAAM,cAAc,GAAG,MAAM,UAAU,CAAC,YAAY,CAClD,gBAAgB,CAAC,WAAqB,EACrC,gBAAgB,CAAC,aAAwB,IAAI,EAAE,EAC/C,gBAAgB,CAAC,kBAA6B,IAAI,EAAE,EACpD,gBAAgB,CAAC,aAAwB,IAAI,EAAE,EAC/C,gBAAgB,CAAC,SAAsB,IAAI,SAAS,EACpD,YAAY,CAAC,IAAe,IAAI,KAAK,EACtC,cAAc,EACd,gBAAgB,CACjB,CAAC;IAEF,2DAA2D;IAC3D,MAAM,oBAAoB,GAAG,MAAM,mBAAmB,CACpD,YAAY,EACZ,cAAc,CAAC,eAAyB,EACxC,cAAc,CAAC,gBAA0B,EACxC,gBAAgB,CAAC,SAAoB,IAAI,YAAY,CACvD,CAAC;IAEF,0CAA0C;IAC1C,MAAM,iBAAiB,GAAG,MAAM,UAAU,CAAC,eAAe,CACxD,cAAc,CAAC,qBAA+B,EAC9C,oBAAoB,CACrB,CAAC;IAEF,gDAAgD;IAChD,MAAM,aAAa,GAAG,CAAC,iBAAiB,CAAC,QAAQ,IAAI,EAAE,CAA4B,CAAC;IACpF,MAAM,gBAAgB,GAAG,CAAC,iBAAiB,CAAC,WAAW,IAAI,EAAE,CAA4B,CAAC;IAE1F,MAAM,WAAW,GAAI,aAAa,CAAC,WAAsB,IAAI,EAAE,CAAC;IAChE,MAAM,MAAM,GAAI,aAAa,CAAC,MAAiB,IAAI,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IAClF,MAAM,cAAc,GAAI,aAAa,CAAC,UAAqB,IAAI,YAAY,CAAC;IAC5E,MAAM,eAAe,GAAI,aAAa,CAAC,aAAwB,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE5F,MAAM,kBAAkB,GAAsB;QAC5C,SAAS,EAAG,gBAAgB,CAAC,SAAoB,IAAI,WAAW;QAChE,aAAa,EAAG,gBAAgB,CAAC,aAAwB,IAAI,EAAE;QAC/D,cAAc,EAAG,gBAAgB,CAAC,cAAyB;YACzD,GAAG,YAAY,8CAA8C;QAC/D,YAAY;QACZ,UAAU,EAAE,cAAc;QAC1B,aAAa,EAAE,QAAQ;QACvB,iBAAiB,EAAG,gBAAgB,CAAC,SAAoB,IAAI,IAAI;QACjE,WAAW,EAAE,eAAe;KAC7B,CAAC;IACF,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;IAErC,IAAI,WAAiB,CAAC;IACtB,IAAI,CAAC;QACH,WAAW,GAAG,IAAI,IAAI,CAAC,eAAe,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,0BAA0B;IAC1B,IAAI,UAAqB,CAAC;IAC1B,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAa,CAAC;IACzD,IAAI,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACzC,UAAU,GAAG,cAA2B,CAAC;IAC3C,CAAC;SAAM,CAAC;QACN,UAAU,GAAG,YAAY,CAAC;IAC5B,CAAC;IAED,wBAAwB;IACxB,IAAI,QAAiB,CAAC;IACtB,MAAM,YAAY,GAAI,YAAY,CAAC,IAAe,IAAI,KAAK,CAAC;IAC5D,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAa,CAAC;IAC3D,IAAI,eAAe,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC3C,QAAQ,GAAG,YAAuB,CAAC;IACrC,CAAC;SAAM,CAAC;QACN,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC;IACzB,CAAC;IAED,OAAO;QACL,WAAW;QACX,MAAM;QACN,UAAU;QACV,QAAQ;QACR,gBAAgB,EAAG,YAAY,CAAC,YAAuB,IAAI,IAAI;QAC/D,WAAW;QACX,YAAY,EAAG,aAAa,CAAC,YAAuB,IAAI,CAAC;QACzD,aAAa,EAAE,YAAY,CAAC,QAAQ;KACrC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAC1B,aAAwC,EACxC,YAAuB;IAEvB,MAAM,eAAe,GAAG,4BAA4B,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;IAEzE,KAAK,MAAM,cAAc,IAAI,eAAe,EAAE,CAAC;QAC7C,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;YAChC,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBAChC,OAAO,GAAG,CAAC;YACb,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}
1
+ {"version":3,"file":"enroll.js","sourceRoot":"","sources":["../src/enroll.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EACL,oBAAoB,EAEpB,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC9D,OAAO,EACL,qBAAqB,EACrB,OAAO,EAEP,YAAY,EACZ,SAAS,GACV,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE7C,yDAAyD;AACzD,MAAM,mBAAmB,GAA2B,IAAI,GAAG,CAAC;IAC1D,SAAS,CAAC,SAAS;IACnB,SAAS,CAAC,kBAAkB;IAC5B,SAAS,CAAC,MAAM;IAChB,SAAS,CAAC,OAAO;IACjB,SAAS,CAAC,OAAO;CAClB,CAAC,CAAC;AAEH,oCAAoC;AACpC,MAAM,4BAA4B,GAAuC;IACvE,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC;IAC9B,CAAC,SAAS,CAAC,kBAAkB,CAAC,EAAE,CAAC,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,CAAC;IAC9E,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC;IAC7D,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,CAAC;IAC5B,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,gBAAgB,CAAC;CACxC,CAAC;AAkBF;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,OAAsB;IACjD,4CAA4C;IAC5C,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAa,CAAC;IACzD,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,eAAe,CACvB,wBAAwB,OAAO,CAAC,YAAY,mBAAmB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACxF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,YAAyB,CAAC;IAE/C,0BAA0B;IAC1B,IAAI,sBAAoC,CAAC;IACzC,IAAI,OAAO,CAAC,aAAa,IAAI,IAAI,EAAE,CAAC;QAClC,sBAAsB,GAAG,qBAAqB,CAAC;IACjD,CAAC;SAAM,IAAI,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;QACrD,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAa,CAAC;QACjE,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,eAAe,CACvB,2BAA2B,OAAO,CAAC,aAAa,aAAa,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC3F,CAAC;QACJ,CAAC;QACD,sBAAsB,GAAG,OAAO,CAAC,aAA6B,CAAC;IACjE,CAAC;SAAM,CAAC;QACN,sBAAsB,GAAG,OAAO,CAAC,aAAa,CAAC;IACjD,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,oBAAoB,CAAC;IAElE,2CAA2C;IAC3C,IAAI,IAAI,KAAK,SAAS,CAAC,QAAQ,EAAE,CAAC;QAChC,OAAO,oBAAoB,CACzB,OAAO,CAAC,cAAc,IAAI,IAAI,EAC9B,OAAO,CAAC,gBAAgB,IAAI,IAAI,EAChC,sBAAsB,EACtB,YAAY,CACb,CAAC;IACJ,CAAC;SAAM,IAAI,IAAI,KAAK,SAAS,CAAC,kBAAkB,EAAE,CAAC;QACjD,OAAO,eAAe,CACpB,IAAI,EACJ,OAAO,CAAC,cAAc,IAAI,IAAI,EAC9B,OAAO,CAAC,gBAAgB,IAAI,IAAI,EAChC,YAAY,CACb,CAAC;IACJ,CAAC;SAAM,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,OAAO,eAAe,CACpB,IAAI,EACJ,OAAO,CAAC,cAAc,IAAI,IAAI,EAC9B,OAAO,CAAC,gBAAgB,IAAI,IAAI,EAChC,YAAY,CACb,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,eAAe,CAAC,SAAS,IAAI,0BAA0B,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,oBAAoB,CACjC,cAA6B,EAC7B,gBAA+B,EAC/B,aAA2B,EAC3B,YAAoB;IAEpB,2BAA2B;IAC3B,MAAM,EAAE,eAAe,EAAE,cAAc,EAAE,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC;IAE5E,4CAA4C;IAC5C,MAAM,UAAU,GAAG,IAAI,cAAc,CAAC,YAAY,CAAC,CAAC;IACpD,MAAM,eAAe,GAAG,MAAM,UAAU,CAAC,eAAe,CACtD,cAAc,EACd,aAAa,EACb,cAAc,EACd,gBAAgB,CACjB,CAAC;IAEF,gCAAgC;IAChC,MAAM,aAAa,GAAG,CAAC,eAAe,CAAC,QAAQ,IAAI,EAAE,CAA4B,CAAC;IAClF,MAAM,gBAAgB,GAAG,CAAC,eAAe,CAAC,WAAW,IAAI,EAAE,CAA4B,CAAC;IAExF,MAAM,WAAW,GAAI,aAAa,CAAC,WAAsB,IAAI,EAAE,CAAC;IAChE,MAAM,MAAM,GAAI,aAAa,CAAC,MAAiB,IAAI,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IAClF,MAAM,eAAe,GAAI,aAAa,CAAC,aAAwB,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE5F,oCAAoC;IACpC,MAAM,kBAAkB,GAAsB;QAC5C,SAAS,EAAG,gBAAgB,CAAC,SAAoB,IAAI,WAAW;QAChE,aAAa,EAAG,gBAAgB,CAAC,aAAwB,IAAI,EAAE;QAC/D,cAAc,EAAG,gBAAgB,CAAC,cAAyB;YACzD,GAAG,YAAY,8CAA8C;QAC/D,YAAY;QACZ,UAAU,EAAE,SAAS,CAAC,QAAQ;QAC9B,aAAa;QACb,eAAe;QACf,WAAW,EAAE,eAAe;KAC7B,CAAC;IACF,MAAM,qBAAqB,GAAG,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;IACnE,OAAO,CAAC,GAAG,CAAC,gCAAgC,qBAAqB,EAAE,CAAC,CAAC;IAErE,iCAAiC;IACjC,IAAI,WAAiB,CAAC;IACtB,IAAI,CAAC;QACH,WAAW,GAAG,IAAI,IAAI,CAAC,eAAe,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,OAAO;QACL,WAAW;QACX,MAAM;QACN,UAAU,EAAE,SAAS,CAAC,QAAQ;QAC9B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,gBAAgB,EAAE,IAAI;QACtB,WAAW;QACX,YAAY,EAAE,CAAC;QACf,aAAa;KACd,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,KAAK,UAAU,eAAe,CAC5B,YAAuB,EACvB,cAA6B,EAC7B,gBAA+B,EAC/B,YAAoB;IAEpB,MAAM,EACJ,qBAAqB,EACrB,wBAAwB,EACxB,uBAAuB,GACxB,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IAEhC,MAAM,aAAa,GAAG,MAAM,qBAAqB,EAAE,CAAC;IACpD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,UAAU,CAClB,qCAAqC;YACrC,QAAQ,YAAY,kDAAkD,CACvE,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,mBAAmB,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IACtE,IAAI,YAAY,IAAI,IAAI,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAE,CAAC,CAAC,IAAe,IAAI,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrF,MAAM,IAAI,UAAU,CAClB,iBAAiB,SAAS,uCAAuC,YAAY,SAAS,CACvF,CAAC;IACJ,CAAC;IAED,MAAM,gBAAgB,GAAG,MAAM,wBAAwB,CAAC,YAAY,CAAC,CAAC;IAEtE,MAAM,UAAU,GAAG,IAAI,cAAc,CAAC,YAAY,CAAC,CAAC;IACpD,MAAM,cAAc,GAAG,MAAM,UAAU,CAAC,gBAAgB,CACtD,gBAAgB,CAAC,oBAA8B,EAC9C,gBAAgB,CAAC,qBAAkC,IAAI,EAAE,EAC1D,gBAAgB,CAAC,sBAAgC,EAChD,YAAY,CAAC,IAAe,IAAI,SAAS,EAC1C,cAAc,EACd,gBAAgB,CACjB,CAAC;IAEF,MAAM,mBAAmB,GAAG,cAAc,CAAC,eAAyB,CAAC;IAErE,MAAM,WAAW,GAAG,MAAM,uBAAuB,CAAC,mBAAmB,CAAC,CAAC;IACvE,MAAM,gBAAgB,GAAG,WAAW,CAAC,aAAuB,CAAC;IAE7D,MAAM,iBAAiB,GAAG,MAAM,UAAU,CAAC,eAAe,CACxD,cAAc,CAAC,qBAA+B,EAC9C,gBAAgB,CACjB,CAAC;IAEF,MAAM,aAAa,GAAG,CAAC,iBAAiB,CAAC,QAAQ,IAAI,EAAE,CAA4B,CAAC;IACpF,MAAM,gBAAgB,GAAG,CAAC,iBAAiB,CAAC,WAAW,IAAI,EAAE,CAA4B,CAAC;IAE1F,MAAM,WAAW,GAAI,aAAa,CAAC,WAAsB,IAAI,EAAE,CAAC;IAChE,MAAM,MAAM,GAAI,aAAa,CAAC,MAAiB,IAAI,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IAClF,MAAM,cAAc,GAAI,aAAa,CAAC,UAAqB,IAAI,YAAY,CAAC;IAC5E,MAAM,eAAe,GAAI,aAAa,CAAC,aAAwB,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE5F,MAAM,kBAAkB,GAAsB;QAC5C,SAAS,EAAG,gBAAgB,CAAC,SAAoB,IAAI,WAAW;QAChE,aAAa,EAAG,gBAAgB,CAAC,aAAwB,IAAI,EAAE;QAC/D,cAAc,EAAG,gBAAgB,CAAC,cAAyB;YACzD,GAAG,YAAY,8CAA8C;QAC/D,YAAY;QACZ,UAAU,EAAE,cAAc;QAC1B,aAAa,EAAE,YAAY;QAC3B,iBAAiB,EAAE,aAAa;QAChC,WAAW,EAAE,eAAe;KAC7B,CAAC;IACF,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;IAErC,IAAI,WAAiB,CAAC;IACtB,IAAI,CAAC;QACH,WAAW,GAAG,IAAI,IAAI,CAAC,eAAe,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,IAAI,UAAqB,CAAC;IAC1B,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAa,CAAC;IACzD,IAAI,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACzC,UAAU,GAAG,cAA2B,CAAC;IAC3C,CAAC;SAAM,CAAC;QACN,UAAU,GAAG,YAAY,CAAC;IAC5B,CAAC;IAED,IAAI,QAAiB,CAAC;IACtB,MAAM,YAAY,GAAI,YAAY,CAAC,IAAe,IAAI,SAAS,CAAC;IAChE,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAa,CAAC;IAC3D,IAAI,eAAe,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC3C,QAAQ,GAAG,YAAuB,CAAC;IACrC,CAAC;SAAM,CAAC;QACN,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IAC7B,CAAC;IAED,OAAO;QACL,WAAW;QACX,MAAM;QACN,UAAU;QACV,QAAQ;QACR,gBAAgB,EAAG,YAAY,CAAC,YAAuB,IAAI,IAAI;QAC/D,WAAW;QACX,YAAY,EAAG,aAAa,CAAC,YAAuB,IAAI,CAAC;QACzD,aAAa,EAAE,YAAY,CAAC,UAAU;KACvC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,eAAe,CAC5B,YAAuB,EACvB,cAA6B,EAC7B,gBAA+B,EAC/B,YAAoB;IAEpB,MAAM,EACJ,qBAAqB,EACrB,wBAAwB,EACxB,mBAAmB,GACpB,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC;IAEhC,oCAAoC;IACpC,MAAM,aAAa,GAAG,MAAM,qBAAqB,EAAE,CAAC;IAEpD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,UAAU,CAClB,qCAAqC;YACrC,QAAQ,YAAY,oDAAoD,CACzE,CAAC;IACJ,CAAC;IAED,qCAAqC;IACrC,MAAM,YAAY,GAAG,mBAAmB,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IACtE,IAAI,YAAY,IAAI,IAAI,EAAE,CAAC;QACzB,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAE,CAAC,CAAC,IAAe,IAAI,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrF,MAAM,IAAI,UAAU,CAClB,iBAAiB,SAAS,uCAAuC,YAAY,SAAS,CACvF,CAAC;IACJ,CAAC;IAED,mDAAmD;IACnD,MAAM,gBAAgB,GAAG,MAAM,wBAAwB,CAAC,YAAY,CAAC,CAAC;IAEtE,uCAAuC;IACvC,MAAM,UAAU,GAAG,IAAI,cAAc,CAAC,YAAY,CAAC,CAAC;IACpD,MAAM,cAAc,GAAG,MAAM,UAAU,CAAC,YAAY,CAClD,gBAAgB,CAAC,WAAqB,EACrC,gBAAgB,CAAC,aAAwB,IAAI,EAAE,EAC/C,gBAAgB,CAAC,kBAA6B,IAAI,EAAE,EACpD,gBAAgB,CAAC,aAAwB,IAAI,EAAE,EAC/C,gBAAgB,CAAC,SAAsB,IAAI,SAAS,EACpD,YAAY,CAAC,IAAe,IAAI,KAAK,EACtC,cAAc,EACd,gBAAgB,CACjB,CAAC;IAEF,2DAA2D;IAC3D,MAAM,oBAAoB,GAAG,MAAM,mBAAmB,CACpD,YAAY,EACZ,cAAc,CAAC,eAAyB,EACxC,cAAc,CAAC,gBAA0B,EACxC,gBAAgB,CAAC,SAAoB,IAAI,YAAY,CACvD,CAAC;IAEF,0CAA0C;IAC1C,MAAM,iBAAiB,GAAG,MAAM,UAAU,CAAC,eAAe,CACxD,cAAc,CAAC,qBAA+B,EAC9C,oBAAoB,CACrB,CAAC;IAEF,gDAAgD;IAChD,MAAM,aAAa,GAAG,CAAC,iBAAiB,CAAC,QAAQ,IAAI,EAAE,CAA4B,CAAC;IACpF,MAAM,gBAAgB,GAAG,CAAC,iBAAiB,CAAC,WAAW,IAAI,EAAE,CAA4B,CAAC;IAE1F,MAAM,WAAW,GAAI,aAAa,CAAC,WAAsB,IAAI,EAAE,CAAC;IAChE,MAAM,MAAM,GAAI,aAAa,CAAC,MAAiB,IAAI,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;IAClF,MAAM,cAAc,GAAI,aAAa,CAAC,UAAqB,IAAI,YAAY,CAAC;IAC5E,MAAM,eAAe,GAAI,aAAa,CAAC,aAAwB,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAE5F,MAAM,kBAAkB,GAAsB;QAC5C,SAAS,EAAG,gBAAgB,CAAC,SAAoB,IAAI,WAAW;QAChE,aAAa,EAAG,gBAAgB,CAAC,aAAwB,IAAI,EAAE;QAC/D,cAAc,EAAG,gBAAgB,CAAC,cAAyB;YACzD,GAAG,YAAY,8CAA8C;QAC/D,YAAY;QACZ,UAAU,EAAE,cAAc;QAC1B,aAAa,EAAE,QAAQ;QACvB,iBAAiB,EAAG,gBAAgB,CAAC,SAAoB,IAAI,IAAI;QACjE,WAAW,EAAE,eAAe;KAC7B,CAAC;IACF,gBAAgB,CAAC,kBAAkB,CAAC,CAAC;IAErC,IAAI,WAAiB,CAAC;IACtB,IAAI,CAAC;QACH,WAAW,GAAG,IAAI,IAAI,CAAC,eAAe,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC;IAC3B,CAAC;IAED,0BAA0B;IAC1B,IAAI,UAAqB,CAAC;IAC1B,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAa,CAAC;IACzD,IAAI,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;QACzC,UAAU,GAAG,cAA2B,CAAC;IAC3C,CAAC;SAAM,CAAC;QACN,UAAU,GAAG,YAAY,CAAC;IAC5B,CAAC;IAED,wBAAwB;IACxB,IAAI,QAAiB,CAAC;IACtB,MAAM,YAAY,GAAI,YAAY,CAAC,IAAe,IAAI,KAAK,CAAC;IAC5D,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAa,CAAC;IAC3D,IAAI,eAAe,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC3C,QAAQ,GAAG,YAAuB,CAAC;IACrC,CAAC;SAAM,CAAC;QACN,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC;IACzB,CAAC;IAED,OAAO;QACL,WAAW;QACX,MAAM;QACN,UAAU;QACV,QAAQ;QACR,gBAAgB,EAAG,YAAY,CAAC,YAAuB,IAAI,IAAI;QAC/D,WAAW;QACX,YAAY,EAAG,aAAa,CAAC,YAAuB,IAAI,CAAC;QACzD,aAAa,EAAE,YAAY,CAAC,QAAQ;KACrC,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAS,mBAAmB,CAC1B,aAAwC,EACxC,YAAuB;IAEvB,MAAM,eAAe,GAAG,4BAA4B,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC;IAEzE,KAAK,MAAM,cAAc,IAAI,eAAe,EAAE,CAAC;QAC7C,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;YAChC,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;gBAChC,OAAO,GAAG,CAAC;YACb,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}
package/dist/helper.d.ts CHANGED
@@ -48,6 +48,16 @@ export declare function extract_attestation_data(hsm: Record<string, unknown>):
48
48
  * Decrypt a credential activation challenge via the HSM (requires elevation).
49
49
  */
50
50
  export declare function activate_credential(_hsm: Record<string, unknown>, credential_blob_b64: string, encrypted_secret_b64: string, ak_handle: string): Promise<string>;
51
+ /**
52
+ * Sign a challenge nonce using the PIV key in slot 9a -- NO ELEVATION NEEDED.
53
+ *
54
+ * This is the core of PIV-backed challenge-response during enrollment.
55
+ * The agent signs the server-provided nonce with the YubiKey's PIV slot 9a
56
+ * key (ECDSA-SHA256), proving it controls the hardware that was attested.
57
+ *
58
+ * PIV slot 9a with pin-policy=NEVER means no human interaction required.
59
+ */
60
+ export declare function sign_challenge_with_piv(nonce_b64: string): Promise<Record<string, unknown>>;
51
61
  /**
52
62
  * Sign a challenge nonce using the TPM AK -- NO ELEVATION NEEDED.
53
63
  *
@@ -1 +1 @@
1
- {"version":3,"file":"helper.d.ts","sourceRoot":"","sources":["../src/helper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAoEH;;;;;;;;;GASG;AACH,wBAAgB,WAAW,IAAI,MAAM,GAAG,IAAI,CAyC3C;AAsJD;;;;;GAKG;AACH,wBAAsB,uBAAuB,IAAI,OAAO,CAAC,MAAM,CAAC,CAqB/D;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,EAAE,EACf,SAAS,GAAE,OAAc,EACzB,oBAAoB,GAAE,MAAe,GACpC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAgElC;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAShF;AAED;;GAEG;AACH,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC3B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAGlC;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,mBAAmB,EAAE,MAAM,EAC3B,oBAAoB,EAAE,MAAM,EAC5B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,CAQjB;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAKlC"}
1
+ {"version":3,"file":"helper.d.ts","sourceRoot":"","sources":["../src/helper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAmEH;;;;;;;;;GASG;AACH,wBAAgB,WAAW,IAAI,MAAM,GAAG,IAAI,CAyC3C;AAsJD;;;;;GAKG;AACH,wBAAsB,uBAAuB,IAAI,OAAO,CAAC,MAAM,CAAC,CAqB/D;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,EAAE,EACf,SAAS,GAAE,OAAc,EACzB,oBAAoB,GAAE,MAAe,GACpC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAgElC;AAED;;;;GAIG;AACH,wBAAsB,qBAAqB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAShF;AAED;;GAEG;AACH,wBAAsB,wBAAwB,CAC5C,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC3B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAGlC;AAED;;GAEG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,mBAAmB,EAAE,MAAM,EAC3B,oBAAoB,EAAE,MAAM,EAC5B,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,CAQjB;AAED;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAC3C,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAKlC;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAKlC"}
package/dist/helper.js CHANGED
@@ -30,7 +30,6 @@ const BINARY_NAME_PREFIX = "oneid-enroll";
30
30
  function get_platform_binary_name() {
31
31
  const system = os.platform();
32
32
  let machine = os.arch();
33
- // Normalize architecture names
34
33
  if (machine === "x64") {
35
34
  machine = "amd64";
36
35
  }
@@ -127,7 +126,7 @@ function download_file_to_path(url, destination, max_redirects = 5) {
127
126
  return;
128
127
  }
129
128
  const transport = url.startsWith("https:") ? https : http;
130
- transport.get(url, { headers: { "User-Agent": "oneid-sdk-node/0.1.0" } }, (res) => {
129
+ transport.get(url, { headers: { "User-Agent": "oneid-sdk-node/0.3.0" } }, (res) => {
131
130
  // Handle redirects (GitHub releases redirect to S3)
132
131
  if (res.statusCode && res.statusCode >= 300 && res.statusCode < 400 && res.headers.location) {
133
132
  download_file_to_path(res.headers.location, destination, max_redirects - 1)
@@ -163,7 +162,7 @@ function download_text_from_url(url, max_redirects = 5) {
163
162
  return;
164
163
  }
165
164
  const transport = url.startsWith("https:") ? https : http;
166
- transport.get(url, { headers: { "User-Agent": "oneid-sdk-node/0.1.0" } }, (res) => {
165
+ transport.get(url, { headers: { "User-Agent": "oneid-sdk-node/0.3.0" } }, (res) => {
167
166
  if (res.statusCode && res.statusCode >= 300 && res.statusCode < 400 && res.headers.location) {
168
167
  download_text_from_url(res.headers.location, max_redirects - 1)
169
168
  .then(resolve)
@@ -373,6 +372,21 @@ export async function activate_credential(_hsm, credential_blob_b64, encrypted_s
373
372
  ]);
374
373
  return output.decrypted_credential ?? "";
375
374
  }
375
+ /**
376
+ * Sign a challenge nonce using the PIV key in slot 9a -- NO ELEVATION NEEDED.
377
+ *
378
+ * This is the core of PIV-backed challenge-response during enrollment.
379
+ * The agent signs the server-provided nonce with the YubiKey's PIV slot 9a
380
+ * key (ECDSA-SHA256), proving it controls the hardware that was attested.
381
+ *
382
+ * PIV slot 9a with pin-policy=NEVER means no human interaction required.
383
+ */
384
+ export async function sign_challenge_with_piv(nonce_b64) {
385
+ return run_binary_command("sign", [
386
+ "--nonce", nonce_b64,
387
+ "--type", "yubikey",
388
+ ]);
389
+ }
376
390
  /**
377
391
  * Sign a challenge nonce using the TPM AK -- NO ELEVATION NEEDED.
378
392
  *
@@ -1 +1 @@
1
- {"version":3,"file":"helper.js","sourceRoot":"","sources":["../src/helper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,aAAa,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AACpC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,UAAU,EACV,cAAc,GACf,MAAM,iBAAiB,CAAC;AAEzB,6CAA6C;AAC7C,MAAM,oCAAoC,GACxC,mFAAmF,CAAC;AAEtF,iCAAiC;AACjC,MAAM,kBAAkB,GAAG,cAAc,CAAC;AAE1C;;GAEG;AACH,SAAS,wBAAwB;IAC/B,MAAM,MAAM,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;IAC7B,IAAI,OAAO,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;IAExB,+BAA+B;IAC/B,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QAAC,OAAO,GAAG,OAAO,CAAC;IAAC,CAAC;SACxC,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC,CAAC,qBAAqB,CAAC,CAAC;IAEvD,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,OAAO,GAAG,kBAAkB,YAAY,OAAO,MAAM,CAAC;IACxD,CAAC;SAAM,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,GAAG,kBAAkB,WAAW,OAAO,EAAE,CAAC;IACnD,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,kBAAkB,UAAU,OAAO,EAAE,CAAC;IAClD,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,0BAA0B;IACjC,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACrF,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IACzC,CAAC;SAAM,CAAC;QACN,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,6BAA6B,CAAC,SAAiB;IACtD,IAAI,CAAC;QACH,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,WAAW;IACzB,MAAM,WAAW,GAAG,wBAAwB,EAAE,CAAC;IAE/C,2BAA2B;IAC3B,MAAM,SAAS,GAAG,0BAA0B,EAAE,CAAC;IAC/C,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC7D,IAAI,6BAA6B,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACtD,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAED,qCAAqC;IACrC,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,WAAW,CAAC,CAAC;IAChE,IAAI,6BAA6B,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACrD,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,0BAA0B;IAC1B,MAAM,YAAY,GAAG,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,kBAAkB,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC;IAClG,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,YAAY,CAAC,CAAC;IAClE,IAAI,6BAA6B,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACtD,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAED,gBAAgB;IAChB,MAAM,aAAa,GAAG,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IACpE,KAAK,MAAM,cAAc,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,CAAC;QACzD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,GAAG,aAAa,IAAI,cAAc,EAAE,EAAE;gBAC1E,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;aAChC,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;YACxD,IAAI,UAAU,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC5C,OAAO,UAAU,CAAC;YACpB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,oBAAoB;QACtB,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAAC,GAAW,EAAE,WAAmB,EAAE,gBAAwB,CAAC;IACxF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,mBAAmB,CAAC,6CAA6C,CAAC,CAAC,CAAC;YAC/E,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1D,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,sBAAsB,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;YAChF,oDAAoD;YACpD,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBAC5F,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,EAAE,aAAa,GAAG,CAAC,CAAC;qBACxE,IAAI,CAAC,OAAO,CAAC;qBACb,KAAK,CAAC,MAAM,CAAC,CAAC;gBACjB,OAAO;YACT,CAAC;YAED,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,mBAAmB,CAC5B,2BAA2B,GAAG,UAAU,GAAG,CAAC,UAAU,EAAE,CACzD,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,MAAM,WAAW,GAAG,EAAE,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;YACtD,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACtB,WAAW,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;gBAC5B,WAAW,CAAC,KAAK,EAAE,CAAC;gBACpB,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;YACH,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC9B,MAAM,CAAC,IAAI,mBAAmB,CAAC,6BAA6B,WAAW,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC9F,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACrB,MAAM,CAAC,IAAI,mBAAmB,CAAC,2BAA2B,GAAG,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACpF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,sBAAsB,CAAC,GAAW,EAAE,gBAAwB,CAAC;IACpE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;YACxC,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1D,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,sBAAsB,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;YAChF,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBAC5F,sBAAsB,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,aAAa,GAAG,CAAC,CAAC;qBAC5D,IAAI,CAAC,OAAO,CAAC;qBACb,KAAK,CAAC,MAAM,CAAC,CAAC;gBACjB,OAAO;YACT,CAAC;YAED,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;gBAC5C,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3D,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7E,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,mCAAmC,CAChD,WAAmB,EACnB,gBAAwB;IAExB,MAAM,mBAAmB,GAAG,oCAAoC,CAAC,OAAO,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IACvG,MAAM,qBAAqB,GAAG,oCAAoC,CAAC,OAAO,CAAC,eAAe,EAAE,WAAW,GAAG,SAAS,CAAC,CAAC;IAErH,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACvD,EAAE,CAAC,SAAS,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEnD,sCAAsC;IACtC,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,yBAAyB,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAE7F,IAAI,CAAC;QACH,0BAA0B;QAC1B,MAAM,qBAAqB,CAAC,mBAAmB,EAAE,cAAc,CAAC,CAAC;QACjE,MAAM,eAAe,GAAG,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC;QAEzD,IAAI,eAAe,GAAG,OAAO,EAAE,CAAC;YAC9B,MAAM,IAAI,mBAAmB,CAC3B,4CAA4C,eAAe,WAAW;gBACtE,gEAAgE,CACjE,CAAC;QACJ,CAAC;QAED,kCAAkC;QAClC,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,MAAM,sBAAsB,CAAC,qBAAqB,CAAC,CAAC;YAC1E,MAAM,oBAAoB,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;YAEjF,MAAM,WAAW,GAAG,EAAE,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;YACpD,MAAM,kBAAkB,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YAEvG,IAAI,kBAAkB,KAAK,oBAAoB,EAAE,CAAC;gBAChD,MAAM,IAAI,mBAAmB,CAC3B,iCAAiC,WAAW,IAAI;oBAChD,aAAa,oBAAoB,UAAU,kBAAkB,IAAI;oBACjE,uEAAuE,CACxE,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,cAAc,EAAE,CAAC;YACxB,IAAI,cAAc,YAAY,mBAAmB,EAAE,CAAC;gBAAC,MAAM,cAAc,CAAC;YAAC,CAAC;YAC5E,kEAAkE;YAClE,OAAO,CAAC,IAAI,CACV,6CAA6C,cAAc,KAAK;gBAChE,kCAAkC,CACnC,CAAC;QACJ,CAAC;QAED,8CAA8C;QAC9C,IAAI,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACpC,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;QAClC,CAAC;QACD,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;QAEhD,mDAAmD;QACnD,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;YAC9B,EAAE,CAAC,SAAS,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;QACxC,CAAC;QAED,OAAO,gBAAgB,CAAC;IAC1B,CAAC;YAAS,CAAC;QACT,gCAAgC;QAChC,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;gBAAC,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;YAAC,CAAC;QACvE,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB;IAC3C,MAAM,iBAAiB,GAAG,WAAW,EAAE,CAAC;IACxC,IAAI,iBAAiB,IAAI,IAAI,EAAE,CAAC;QAC9B,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,oDAAoD;IACpD,MAAM,WAAW,GAAG,wBAAwB,EAAE,CAAC;IAC/C,MAAM,SAAS,GAAG,0BAA0B,EAAE,CAAC;IAC/C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAEtD,IAAI,CAAC;QACH,OAAO,MAAM,mCAAmC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAC7E,CAAC;IAAC,OAAO,cAAc,EAAE,CAAC;QACxB,MAAM,IAAI,mBAAmB,CAC3B,sEAAsE;YACtE,6BAA6B,cAAc,IAAI;YAC/C,sBAAsB,WAAW,IAAI;YACrC,6EAA6E,CAC9E,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAe,EACf,IAAe,EACf,YAAqB,IAAI,EACzB,uBAA+B,MAAM;IAErC,MAAM,WAAW,GAAG,MAAM,uBAAuB,EAAE,CAAC;IAEpD,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,IAAI,SAAS,EAAE,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAAC,CAAC;IAC3C,IAAI,IAAI,EAAE,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IAAC,CAAC;IAErC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,WAAW,GAAG,EAAE,CAAC;QACrB,IAAI,WAAW,GAAG,EAAE,CAAC;QAErB,MAAM,eAAe,GAAG,aAAa,CAAC,KAAK,CAAC,WAAW,EAAE,QAAQ,EAAE;YACjE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,OAAO,EAAE,oBAAoB;SAC9B,CAAC,CAAC;QAEH,eAAe,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,WAAW,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5F,eAAe,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,WAAW,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAE5F,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YAClC,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACrD,MAAM,CAAC,IAAI,mBAAmB,CAAC,qBAAqB,WAAW,kBAAkB,CAAC,CAAC,CAAC;YACtF,CAAC;iBAAM,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC5D,MAAM,CAAC,IAAI,mBAAmB,CAAC,qBAAqB,WAAW,qBAAqB,CAAC,CAAC,CAAC;YACzF,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,cAAc,CAAC,kBAAkB,WAAW,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,SAAS,EAAE,EAAE;YACxC,IAAI,MAA+B,CAAC;YAEpC,IAAI,SAAS,IAAI,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC;gBACpC,IAAI,CAAC;oBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC1C,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,CAAC,IAAI,cAAc,CACvB,uCAAuC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CACnE,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;YAC/E,CAAC;YAED,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;gBACpB,MAAM,UAAU,GAAI,MAAM,CAAC,UAAqB,IAAI,SAAS,CAAC;gBAC9D,MAAM,aAAa,GAAI,MAAM,CAAC,KAAgB,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,aAAa,SAAS,EAAE,CAAC,CAAC;gBAEnG,IAAI,UAAU,KAAK,cAAc,IAAI,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;oBACtG,MAAM,CAAC,IAAI,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC;gBACxC,CAAC;qBAAM,IAAI,UAAU,KAAK,YAAY,IAAI,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;oBACxE,MAAM,CAAC,IAAI,cAAc,CAAC,aAAa,CAAC,CAAC,CAAC;gBAC5C,CAAC;qBAAM,IAAI,UAAU,KAAK,kBAAkB,EAAE,CAAC;oBAC7C,MAAM,CAAC,IAAI,cAAc,CAAC,aAAa,CAAC,CAAC,CAAC;gBAC5C,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,IAAI,cAAc,CAAC,iBAAiB,OAAO,aAAa,aAAa,EAAE,CAAC,CAAC,CAAC;gBACnF,CAAC;gBACD,OAAO;YACT,CAAC;YAED,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAClD,OAAQ,MAAM,CAAC,IAAkC,IAAI,EAAE,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;QAC/C,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;QAC1D,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,GAA4B;IAE5B,MAAM,QAAQ,GAAI,GAAG,CAAC,IAAe,IAAI,KAAK,CAAC;IAC/C,OAAO,kBAAkB,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAA6B,EAC7B,mBAA2B,EAC3B,oBAA4B,EAC5B,SAAiB;IAEjB,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,UAAU,EAAE;QAClD,mBAAmB,EAAE,mBAAmB;QACxC,oBAAoB,EAAE,oBAAoB;QAC1C,aAAa,EAAE,SAAS;QACxB,YAAY;KACb,CAAC,CAAC;IACH,OAAQ,MAAM,CAAC,oBAA+B,IAAI,EAAE,CAAC;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,SAAiB,EACjB,SAAiB;IAEjB,OAAO,kBAAkB,CAAC,MAAM,EAAE;QAChC,SAAS,EAAE,SAAS;QACpB,aAAa,EAAE,SAAS;KACzB,CAAC,CAAC;AACL,CAAC"}
1
+ {"version":3,"file":"helper.js","sourceRoot":"","sources":["../src/helper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,aAAa,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,KAAK,MAAM,YAAY,CAAC;AACpC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EACL,mBAAmB,EACnB,cAAc,EACd,UAAU,EACV,cAAc,GACf,MAAM,iBAAiB,CAAC;AAEzB,6CAA6C;AAC7C,MAAM,oCAAoC,GACxC,mFAAmF,CAAC;AAEtF,iCAAiC;AACjC,MAAM,kBAAkB,GAAG,cAAc,CAAC;AAE1C;;GAEG;AACH,SAAS,wBAAwB;IAC/B,MAAM,MAAM,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;IAC7B,IAAI,OAAO,GAAW,EAAE,CAAC,IAAI,EAAE,CAAC;IAEhC,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QAAC,OAAO,GAAG,OAAO,CAAC;IAAC,CAAC;SACxC,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC,CAAC,qBAAqB,CAAC,CAAC;IAEvD,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,OAAO,GAAG,kBAAkB,YAAY,OAAO,MAAM,CAAC;IACxD,CAAC;SAAM,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,GAAG,kBAAkB,WAAW,OAAO,EAAE,CAAC;IACnD,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,kBAAkB,UAAU,OAAO,EAAE,CAAC;IAClD,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,0BAA0B;IACjC,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACrF,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IACzC,CAAC;SAAM,CAAC;QACN,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,6BAA6B,CAAC,SAAiB;IACtD,IAAI,CAAC;QACH,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,WAAW;IACzB,MAAM,WAAW,GAAG,wBAAwB,EAAE,CAAC;IAE/C,2BAA2B;IAC3B,MAAM,SAAS,GAAG,0BAA0B,EAAE,CAAC;IAC/C,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC7D,IAAI,6BAA6B,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACtD,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAED,qCAAqC;IACrC,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,WAAW,CAAC,CAAC;IAChE,IAAI,6BAA6B,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACrD,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,0BAA0B;IAC1B,MAAM,YAAY,GAAG,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,kBAAkB,MAAM,CAAC,CAAC,CAAC,kBAAkB,CAAC;IAClG,MAAM,kBAAkB,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,YAAY,CAAC,CAAC;IAClE,IAAI,6BAA6B,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACtD,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IAED,gBAAgB;IAChB,MAAM,aAAa,GAAG,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IACpE,KAAK,MAAM,cAAc,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,EAAE,CAAC;QACzD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,GAAG,aAAa,IAAI,cAAc,EAAE,EAAE;gBAC1E,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;aAChC,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;YACxD,IAAI,UAAU,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC5C,OAAO,UAAU,CAAC;YACpB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,oBAAoB;QACtB,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,qBAAqB,CAAC,GAAW,EAAE,WAAmB,EAAE,gBAAwB,CAAC;IACxF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,mBAAmB,CAAC,6CAA6C,CAAC,CAAC,CAAC;YAC/E,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1D,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,sBAAsB,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;YAChF,oDAAoD;YACpD,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBAC5F,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,EAAE,aAAa,GAAG,CAAC,CAAC;qBACxE,IAAI,CAAC,OAAO,CAAC;qBACb,KAAK,CAAC,MAAM,CAAC,CAAC;gBACjB,OAAO;YACT,CAAC;YAED,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,mBAAmB,CAC5B,2BAA2B,GAAG,UAAU,GAAG,CAAC,UAAU,EAAE,CACzD,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,MAAM,WAAW,GAAG,EAAE,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAC;YACtD,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;YACtB,WAAW,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;gBAC5B,WAAW,CAAC,KAAK,EAAE,CAAC;gBACpB,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;YACH,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;gBAC9B,MAAM,CAAC,IAAI,mBAAmB,CAAC,6BAA6B,WAAW,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC9F,CAAC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACrB,MAAM,CAAC,IAAI,mBAAmB,CAAC,2BAA2B,GAAG,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACpF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,sBAAsB,CAAC,GAAW,EAAE,gBAAwB,CAAC;IACpE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,CAAC,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC;YACxC,OAAO;QACT,CAAC;QAED,MAAM,SAAS,GAAG,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1D,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,YAAY,EAAE,sBAAsB,EAAE,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;YAChF,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,IAAI,GAAG,CAAC,UAAU,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;gBAC5F,sBAAsB,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,aAAa,GAAG,CAAC,CAAC;qBAC5D,IAAI,CAAC,OAAO,CAAC;qBACb,KAAK,CAAC,MAAM,CAAC,CAAC;gBACjB,OAAO;YACT,CAAC;YAED,IAAI,GAAG,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;gBAC3B,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;gBAC5C,OAAO;YACT,CAAC;YAED,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC3D,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7E,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,mCAAmC,CAChD,WAAmB,EACnB,gBAAwB;IAExB,MAAM,mBAAmB,GAAG,oCAAoC,CAAC,OAAO,CAAC,eAAe,EAAE,WAAW,CAAC,CAAC;IACvG,MAAM,qBAAqB,GAAG,oCAAoC,CAAC,OAAO,CAAC,eAAe,EAAE,WAAW,GAAG,SAAS,CAAC,CAAC;IAErH,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACvD,EAAE,CAAC,SAAS,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEnD,sCAAsC;IACtC,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,yBAAyB,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAE7F,IAAI,CAAC;QACH,0BAA0B;QAC1B,MAAM,qBAAqB,CAAC,mBAAmB,EAAE,cAAc,CAAC,CAAC;QACjE,MAAM,eAAe,GAAG,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC;QAEzD,IAAI,eAAe,GAAG,OAAO,EAAE,CAAC;YAC9B,MAAM,IAAI,mBAAmB,CAC3B,4CAA4C,eAAe,WAAW;gBACtE,gEAAgE,CACjE,CAAC;QACJ,CAAC;QAED,kCAAkC;QAClC,IAAI,CAAC;YACH,MAAM,aAAa,GAAG,MAAM,sBAAsB,CAAC,qBAAqB,CAAC,CAAC;YAC1E,MAAM,oBAAoB,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;YAEjF,MAAM,WAAW,GAAG,EAAE,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;YACpD,MAAM,kBAAkB,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;YAEvG,IAAI,kBAAkB,KAAK,oBAAoB,EAAE,CAAC;gBAChD,MAAM,IAAI,mBAAmB,CAC3B,iCAAiC,WAAW,IAAI;oBAChD,aAAa,oBAAoB,UAAU,kBAAkB,IAAI;oBACjE,uEAAuE,CACxE,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,OAAO,cAAc,EAAE,CAAC;YACxB,IAAI,cAAc,YAAY,mBAAmB,EAAE,CAAC;gBAAC,MAAM,cAAc,CAAC;YAAC,CAAC;YAC5E,kEAAkE;YAClE,OAAO,CAAC,IAAI,CACV,6CAA6C,cAAc,KAAK;gBAChE,kCAAkC,CACnC,CAAC;QACJ,CAAC;QAED,8CAA8C;QAC9C,IAAI,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;YACpC,EAAE,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC;QAClC,CAAC;QACD,EAAE,CAAC,UAAU,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;QAEhD,mDAAmD;QACnD,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,EAAE,CAAC;YAC9B,EAAE,CAAC,SAAS,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;QACxC,CAAC;QAED,OAAO,gBAAgB,CAAC;IAC1B,CAAC;YAAS,CAAC;QACT,gCAAgC;QAChC,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;gBAAC,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;YAAC,CAAC;QACvE,CAAC;QAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB;IAC3C,MAAM,iBAAiB,GAAG,WAAW,EAAE,CAAC;IACxC,IAAI,iBAAiB,IAAI,IAAI,EAAE,CAAC;QAC9B,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IAED,oDAAoD;IACpD,MAAM,WAAW,GAAG,wBAAwB,EAAE,CAAC;IAC/C,MAAM,SAAS,GAAG,0BAA0B,EAAE,CAAC;IAC/C,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAEtD,IAAI,CAAC;QACH,OAAO,MAAM,mCAAmC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAC7E,CAAC;IAAC,OAAO,cAAc,EAAE,CAAC;QACxB,MAAM,IAAI,mBAAmB,CAC3B,sEAAsE;YACtE,6BAA6B,cAAc,IAAI;YAC/C,sBAAsB,WAAW,IAAI;YACrC,6EAA6E,CAC9E,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAe,EACf,IAAe,EACf,YAAqB,IAAI,EACzB,uBAA+B,MAAM;IAErC,MAAM,WAAW,GAAG,MAAM,uBAAuB,EAAE,CAAC;IAEpD,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,IAAI,SAAS,EAAE,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAAC,CAAC;IAC3C,IAAI,IAAI,EAAE,CAAC;QAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IAAC,CAAC;IAErC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,WAAW,GAAG,EAAE,CAAC;QACrB,IAAI,WAAW,GAAG,EAAE,CAAC;QAErB,MAAM,eAAe,GAAG,aAAa,CAAC,KAAK,CAAC,WAAW,EAAE,QAAQ,EAAE;YACjE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,OAAO,EAAE,oBAAoB;SAC9B,CAAC,CAAC;QAEH,eAAe,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,WAAW,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5F,eAAe,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,GAAG,WAAW,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAE5F,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YAClC,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACrD,MAAM,CAAC,IAAI,mBAAmB,CAAC,qBAAqB,WAAW,kBAAkB,CAAC,CAAC,CAAC;YACtF,CAAC;iBAAM,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC5D,MAAM,CAAC,IAAI,mBAAmB,CAAC,qBAAqB,WAAW,qBAAqB,CAAC,CAAC,CAAC;YACzF,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,IAAI,cAAc,CAAC,kBAAkB,WAAW,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,SAAS,EAAE,EAAE;YACxC,IAAI,MAA+B,CAAC;YAEpC,IAAI,SAAS,IAAI,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC;gBACpC,IAAI,CAAC;oBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC1C,CAAC;gBAAC,MAAM,CAAC;oBACP,MAAM,CAAC,IAAI,cAAc,CACvB,uCAAuC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CACnE,CAAC,CAAC;oBACH,OAAO;gBACT,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;YAC/E,CAAC;YAED,IAAI,SAAS,KAAK,CAAC,EAAE,CAAC;gBACpB,MAAM,UAAU,GAAI,MAAM,CAAC,UAAqB,IAAI,SAAS,CAAC;gBAC9D,MAAM,aAAa,GAAI,MAAM,CAAC,KAAgB,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,IAAI,aAAa,SAAS,EAAE,CAAC,CAAC;gBAEnG,IAAI,UAAU,KAAK,cAAc,IAAI,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;oBACtG,MAAM,CAAC,IAAI,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC;gBACxC,CAAC;qBAAM,IAAI,UAAU,KAAK,YAAY,IAAI,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;oBACxE,MAAM,CAAC,IAAI,cAAc,CAAC,aAAa,CAAC,CAAC,CAAC;gBAC5C,CAAC;qBAAM,IAAI,UAAU,KAAK,kBAAkB,EAAE,CAAC;oBAC7C,MAAM,CAAC,IAAI,cAAc,CAAC,aAAa,CAAC,CAAC,CAAC;gBAC5C,CAAC;qBAAM,CAAC;oBACN,MAAM,CAAC,IAAI,cAAc,CAAC,iBAAiB,OAAO,aAAa,aAAa,EAAE,CAAC,CAAC,CAAC;gBACnF,CAAC;gBACD,OAAO;YACT,CAAC;YAED,OAAO,CAAC,MAAM,CAAC,CAAC;QAClB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACzC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAClD,OAAQ,MAAM,CAAC,IAAkC,IAAI,EAAE,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;QAC/C,IAAI,KAAK,YAAY,mBAAmB,EAAE,CAAC;YAAC,MAAM,KAAK,CAAC;QAAC,CAAC;QAC1D,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,GAA4B;IAE5B,MAAM,QAAQ,GAAI,GAAG,CAAC,IAAe,IAAI,KAAK,CAAC;IAC/C,OAAO,kBAAkB,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAA6B,EAC7B,mBAA2B,EAC3B,oBAA4B,EAC5B,SAAiB;IAEjB,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,UAAU,EAAE;QAClD,mBAAmB,EAAE,mBAAmB;QACxC,oBAAoB,EAAE,oBAAoB;QAC1C,aAAa,EAAE,SAAS;QACxB,YAAY;KACb,CAAC,CAAC;IACH,OAAQ,MAAM,CAAC,oBAA+B,IAAI,EAAE,CAAC;AACvD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,SAAiB;IAEjB,OAAO,kBAAkB,CAAC,MAAM,EAAE;QAChC,SAAS,EAAE,SAAS;QACpB,QAAQ,EAAE,SAAS;KACpB,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,SAAiB,EACjB,SAAiB;IAEjB,OAAO,kBAAkB,CAAC,MAAM,EAAE;QAChC,SAAS,EAAE,SAAS;QACpB,aAAa,EAAE,SAAS;KACzB,CAAC,CAAC;AACL,CAAC"}
@@ -53,9 +53,9 @@ export declare enum HSMType {
53
53
  * Returned by enroll() and whoami(). All fields are readonly.
54
54
  */
55
55
  export interface Identity {
56
- /** Permanent unique identifier (e.g., '1id_a7b3c9d2'). Never changes. */
56
+ /** Permanent unique identifier (e.g., '1id-a7b3c9d2'). Never changes. */
57
57
  readonly internal_id: string;
58
- /** Display name (e.g., '@clawdia' or '@1id_a7b3c9d2'). */
58
+ /** Display name (e.g., '@clawdia' or '@1id-a7b3c9d2'). */
59
59
  readonly handle: string;
60
60
  /** The trust level assigned based on hardware attestation. */
61
61
  readonly trust_tier: TrustTier;
package/dist/keys.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"file":"keys.js","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAY7C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAAC,YAA0B,YAAY,CAAC,OAAO;IAC7E,IAAI,QAAuC,CAAC;IAE5C,IAAI,SAAS,KAAK,YAAY,CAAC,OAAO,EAAE,CAAC;QACvC,QAAQ,GAAG,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACnD,CAAC;SAAM,IAAI,SAAS,KAAK,YAAY,CAAC,UAAU,EAAE,CAAC;QACjD,QAAQ,GAAG,MAAM,CAAC,mBAAmB,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IACvE,CAAC;SAAM,IAAI,SAAS,KAAK,YAAY,CAAC,UAAU,EAAE,CAAC;QACjD,QAAQ,GAAG,MAAM,CAAC,mBAAmB,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IACvE,CAAC;SAAM,IAAI,SAAS,KAAK,YAAY,CAAC,QAAQ,EAAE,CAAC;QAC/C,QAAQ,GAAG,MAAM,CAAC,mBAAmB,CAAC,KAAK,EAAE;YAC3C,aAAa,EAAE,IAAI;YACnB,cAAc,EAAE,KAAK;SACtB,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,SAAS,KAAK,YAAY,CAAC,QAAQ,EAAE,CAAC;QAC/C,QAAQ,GAAG,MAAM,CAAC,mBAAmB,CAAC,KAAK,EAAE;YAC3C,aAAa,EAAE,IAAI;YACnB,cAAc,EAAE,KAAK;SACtB,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,MAAM,IAAI,KAAK,CACb,8BAA8B,SAAS,gBAAgB,gBAAgB,EAAE,CAC1E,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;QACjD,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,KAAK;KACd,CAAW,CAAC;IAEb,MAAM,cAAc,GAAG,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC;QAC/C,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,KAAK;KACd,CAAW,CAAC;IAEb,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC;AAC7C,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,+BAA+B,CAC7C,eAAuB,EACvB,eAAuB;IAEvB,MAAM,kBAAkB,GAAG,MAAM,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,kBAAkB,CAAC,iBAAiB,CAAC;IAEtD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,kBAAkB,CAAC,CAAC;IAChE,CAAC;SAAM,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC7B,oEAAoE;QACpE,MAAM,WAAW,GAAG,kBAAkB,CAAC,oBAAoB,CAAC;QAC5D,MAAM,cAAc,GAAG,WAAW,EAAE,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QACjF,OAAO,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,EAAE,kBAAkB,CAAC,CAAC;IAC1E,CAAC;SAAM,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC9B,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC5C,GAAG,EAAE,kBAAkB;YACvB,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,iBAAiB;SAC5C,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,qCAAqC,QAAQ,EAAE,CAAC,CAAC;IACnE,CAAC;AACH,CAAC"}
1
+ {"version":3,"file":"keys.js","sourceRoot":"","sources":["../src/keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAY7C;;;;;;;;;;GAUG;AACH,MAAM,UAAU,gBAAgB,CAAC,YAA0B,YAAY,CAAC,OAAO;IAC7E,IAAI,QAAuE,CAAC;IAE5E,IAAI,SAAS,KAAK,YAAY,CAAC,OAAO,EAAE,CAAC;QACvC,QAAQ,GAAG,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACnD,CAAC;SAAM,IAAI,SAAS,KAAK,YAAY,CAAC,UAAU,EAAE,CAAC;QACjD,QAAQ,GAAG,MAAM,CAAC,mBAAmB,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IACvE,CAAC;SAAM,IAAI,SAAS,KAAK,YAAY,CAAC,UAAU,EAAE,CAAC;QACjD,QAAQ,GAAG,MAAM,CAAC,mBAAmB,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IACvE,CAAC;SAAM,IAAI,SAAS,KAAK,YAAY,CAAC,QAAQ,EAAE,CAAC;QAC/C,QAAQ,GAAG,MAAM,CAAC,mBAAmB,CAAC,KAAK,EAAE;YAC3C,aAAa,EAAE,IAAI;YACnB,cAAc,EAAE,KAAK;SACtB,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,SAAS,KAAK,YAAY,CAAC,QAAQ,EAAE,CAAC;QAC/C,QAAQ,GAAG,MAAM,CAAC,mBAAmB,CAAC,KAAK,EAAE;YAC3C,aAAa,EAAE,IAAI;YACnB,cAAc,EAAE,KAAK;SACtB,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,MAAM,IAAI,KAAK,CACb,8BAA8B,SAAS,gBAAgB,gBAAgB,EAAE,CAC1E,CAAC;IACJ,CAAC;IAED,MAAM,eAAe,GAAG,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;QACjD,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,KAAK;KACd,CAAW,CAAC;IAEb,MAAM,cAAc,GAAG,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC;QAC/C,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,KAAK;KACd,CAAW,CAAC;IAEb,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC;AAC7C,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,+BAA+B,CAC7C,eAAuB,EACvB,eAAuB;IAEvB,MAAM,kBAAkB,GAAG,MAAM,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,kBAAkB,CAAC,iBAAiB,CAAC;IAEtD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,kBAAkB,CAAC,CAAC;IAChE,CAAC;SAAM,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QAC7B,oEAAoE;QACpE,MAAM,WAAW,GAAG,kBAAkB,CAAC,oBAAoB,CAAC;QAC5D,MAAM,cAAc,GAAG,WAAW,EAAE,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QACjF,OAAO,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,eAAe,EAAE,kBAAkB,CAAC,CAAC;IAC1E,CAAC;SAAM,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QAC9B,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,EAAE;YAC5C,GAAG,EAAE,kBAAkB;YACvB,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,iBAAiB;SAC5C,CAAC,CAAC;IACL,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,KAAK,CAAC,qCAAqC,QAAQ,EAAE,CAAC,CAAC;IACnE,CAAC;AACH,CAAC"}
@@ -105,7 +105,7 @@ describe("Credential storage (offline)", () => {
105
105
  });
106
106
  it("should save and load credentials", () => {
107
107
  const test_credentials = {
108
- client_id: "1id_test1234",
108
+ client_id: "1id-test1234",
109
109
  client_secret: "secret_abc123",
110
110
  token_endpoint: "https://1id.com/realms/agents/protocol/openid-connect/token",
111
111
  api_base_url: "https://1id.com",
@@ -117,7 +117,7 @@ describe("Credential storage (offline)", () => {
117
117
  save_credentials(test_credentials);
118
118
  assert.ok(credentials_exist(), "credentials should exist after save");
119
119
  const loaded = load_credentials();
120
- assert.equal(loaded.client_id, "1id_test1234");
120
+ assert.equal(loaded.client_id, "1id-test1234");
121
121
  assert.equal(loaded.client_secret, "secret_abc123");
122
122
  assert.equal(loaded.trust_tier, "declared");
123
123
  assert.equal(loaded.key_algorithm, "ed25519");
@@ -126,8 +126,8 @@ describe("Credential storage (offline)", () => {
126
126
  it("should handle whoami() with saved credentials", () => {
127
127
  // Credentials from previous test should still exist
128
128
  const identity = whoami();
129
- assert.equal(identity.internal_id, "1id_test1234");
130
- assert.equal(identity.handle, "@1id_test1234");
129
+ assert.equal(identity.internal_id, "1id-test1234");
130
+ assert.equal(identity.handle, "@1id-test1234");
131
131
  assert.equal(identity.trust_tier, TrustTier.DECLARED);
132
132
  assert.equal(identity.hsm_type, HSMType.SOFTWARE);
133
133
  assert.equal(identity.key_algorithm, KeyAlgorithm.ED25519);
package/package.json CHANGED
@@ -1,12 +1,14 @@
1
1
  {
2
2
  "name": "1id",
3
- "version": "0.1.0",
3
+ "version": "0.3.0",
4
4
  "description": "Hardware-anchored identity SDK for AI agents -- 1id.com",
5
5
  "keywords": [
6
6
  "identity",
7
7
  "ai",
8
8
  "agent",
9
9
  "tpm",
10
+ "yubikey",
11
+ "piv",
10
12
  "hardware",
11
13
  "oidc",
12
14
  "oauth2",
@@ -48,6 +50,7 @@
48
50
  "test:src": "npx tsc && node --test dist/test/test_declared_enrollment.js"
49
51
  },
50
52
  "devDependencies": {
53
+ "@types/node": "^25.3.0",
51
54
  "typescript": "^5.4"
52
55
  }
53
56
  }