@agimon-ai/doompi-core 0.0.1-alpha.100

package/dist/src/services/webauthn/index.cjs

@@ -0,0 +1,262 @@
+const require_index = require("../webauthnPolicy/index.cjs");
+let node_crypto = require("node:crypto");
+let _simplewebauthn_server = require("@simplewebauthn/server");
+//#region src/services/webauthn/index.ts
+const ID_BYTES = 8;
+const CEREMONY_ID_BYTES = 16;
+const USER_ID_BYTES = 16;
+const MAX_PENDING_CEREMONIES = 256;
+const RP_NAME = "DoomPi cockpit";
+/** One synthetic owner: there is exactly one person here, and passkeys need a subject. */
+const OWNER_NAME = "this machine";
+function describe(error) {
+	return error instanceof Error ? error.message : String(error);
+}
+/**
+* Passkeys over the tunnel, and the step-up gate in front of the two actions a
+* live session should not be enough for.
+*
+* `rpID` and `expectedOrigin` come from the configured tunnel hostname, never
+* from the request. That is the entire scope of a credential, so a caller that
+* could influence it could mint credentials against somebody else's origin.
+*/
+function createWebAuthn(options) {
+	const now = options.now ?? (() => Date.now());
+	const notice = options.onNotice ?? (() => {});
+	/** One synthetic subject, stable for the life of the process. */
+	const userId = (0, node_crypto.randomBytes)(USER_ID_BYTES);
+	const pending = /* @__PURE__ */ new Map();
+	const support = () => {
+		const origin = options.publicOrigin();
+		const rpId = require_index.relyingPartyId(origin);
+		if (origin === void 0) return {
+			supported: false,
+			reason: "Remote access is not on."
+		};
+		if (rpId === void 0) return {
+			supported: false,
+			reason: "A quick tunnel gets a new hostname every start, so a passkey registered now would not work again. Configure a named tunnel to use passkeys."
+		};
+		return {
+			supported: true,
+			rpId
+		};
+	};
+	const ceremonyKey = (id, caller, type) => `${type}\u0000${caller}\u0000${id}`;
+	const ttlFor = (held) => held.type === "step-up" ? require_index.STEP_UP_CHALLENGE_TTL_MS : require_index.CEREMONY_TTL_MS;
+	const sweepPending = () => {
+		const at = now();
+		for (const [id, held] of pending) if (!require_index.challengeIsFresh(held.issuedAt, at, ttlFor(held))) pending.delete(id);
+	};
+	const remember = (type, caller, challenge, action) => {
+		sweepPending();
+		while (pending.size >= MAX_PENDING_CEREMONIES) {
+			const oldest = pending.keys().next().value;
+			if (oldest === void 0) break;
+			pending.delete(oldest);
+		}
+		let id;
+		do
+			id = (0, node_crypto.randomBytes)(CEREMONY_ID_BYTES).toString("base64url");
+		while (pending.has(ceremonyKey(id, caller, type)));
+		pending.set(ceremonyKey(id, caller, type), {
+			challenge,
+			issuedAt: now(),
+			caller,
+			type,
+			...action === void 0 ? {} : { action }
+		});
+		return id;
+	};
+	const take = (id, caller, type, action) => {
+		const key = ceremonyKey(id, caller, type);
+		const held = pending.get(key);
+		if (held === void 0) return void 0;
+		if (!require_index.challengeIsFresh(held.issuedAt, now(), ttlFor(held))) {
+			pending.delete(key);
+			return;
+		}
+		if (held.caller !== caller || held.type !== type || held.action !== action) return void 0;
+		pending.delete(key);
+		return held.challenge;
+	};
+	return {
+		support,
+		async beginRegistration(caller, label) {
+			const ready = support();
+			if (!ready.supported) return void 0;
+			const options_ = await (0, _simplewebauthn_server.generateRegistrationOptions)({
+				rpName: RP_NAME,
+				rpID: ready.rpId,
+				userID: userId,
+				userName: OWNER_NAME,
+				userDisplayName: label,
+				attestationType: "none",
+				authenticatorSelection: {
+					residentKey: "required",
+					userVerification: "required",
+					authenticatorAttachment: "platform"
+				},
+				excludeCredentials: options.credentials().map((credential) => ({ id: credential.credentialId }))
+			});
+			return {
+				ceremonyId: remember("registration", caller, options_.challenge),
+				options: options_
+			};
+		},
+		async finishRegistration(ceremonyId, caller, response, label) {
+			const ready = support();
+			if (!ready.supported) return {
+				ok: false,
+				error: ready.reason
+			};
+			const challenge = take(ceremonyId, caller, "registration");
+			if (challenge === void 0) return {
+				ok: false,
+				error: "That registration expired. Try again."
+			};
+			try {
+				const verification = await (0, _simplewebauthn_server.verifyRegistrationResponse)({
+					response,
+					expectedChallenge: challenge,
+					expectedOrigin: `https://${ready.rpId}`,
+					expectedRPID: ready.rpId,
+					requireUserVerification: true
+				});
+				if (!verification.verified || verification.registrationInfo === void 0) return {
+					ok: false,
+					error: "That passkey could not be verified."
+				};
+				const info = verification.registrationInfo;
+				const at = now();
+				const credential = {
+					id: (0, node_crypto.randomBytes)(ID_BYTES).toString("hex"),
+					credentialId: info.credential.id,
+					publicKey: Buffer.from(info.credential.publicKey).toString("base64url"),
+					counter: info.credential.counter,
+					transports: info.credential.transports ?? [],
+					label,
+					createdAt: at,
+					lastUsedAt: at
+				};
+				options.saveCredential(credential);
+				notice(`registered a passkey for ${label}`);
+				return {
+					ok: true,
+					id: credential.id
+				};
+			} catch (error) {
+				return {
+					ok: false,
+					error: describe(error)
+				};
+			}
+		},
+		async beginAuthentication(caller) {
+			const ready = support();
+			if (!ready.supported) return void 0;
+			const options_ = await (0, _simplewebauthn_server.generateAuthenticationOptions)({
+				rpID: ready.rpId,
+				userVerification: "required"
+			});
+			return {
+				ceremonyId: remember("authentication", caller, options_.challenge),
+				options: options_
+			};
+		},
+		async finishAuthentication(ceremonyId, caller, response) {
+			const ready = support();
+			if (!ready.supported) return {
+				ok: false,
+				error: ready.reason
+			};
+			const challenge = take(ceremonyId, caller, "authentication");
+			if (challenge === void 0) return {
+				ok: false,
+				error: "That sign-in expired. Try again."
+			};
+			return await verifyAgainst(challenge, ready.rpId, response);
+		},
+		async beginStepUp(caller, action) {
+			const ready = support();
+			if (!ready.supported) return void 0;
+			const options_ = await (0, _simplewebauthn_server.generateAuthenticationOptions)({
+				rpID: ready.rpId,
+				userVerification: "required"
+			});
+			return {
+				ceremonyId: remember("step-up", caller, options_.challenge, action),
+				options: options_
+			};
+		},
+		async finishStepUp(ceremonyId, caller, action, response) {
+			const ready = support();
+			if (!ready.supported) return false;
+			const challenge = take(ceremonyId, caller, "step-up", action);
+			if (challenge === void 0) return false;
+			return (await verifyAgainst(challenge, ready.rpId, response)).ok;
+		},
+		clearChallenges() {
+			pending.clear();
+		}
+	};
+	async function verifyAgainst(challenge, rpId, response) {
+		const presented = response.id;
+		if (typeof presented !== "string") return {
+			ok: false,
+			error: "That response named no credential."
+		};
+		const stored = options.credentials().find((candidate) => candidate.credentialId === presented);
+		if (stored === void 0) return {
+			ok: false,
+			error: "That passkey is not registered here."
+		};
+		try {
+			const verification = await (0, _simplewebauthn_server.verifyAuthenticationResponse)({
+				response,
+				expectedChallenge: challenge,
+				expectedOrigin: `https://${rpId}`,
+				expectedRPID: rpId,
+				requireUserVerification: true,
+				credential: {
+					id: stored.credentialId,
+					publicKey: new Uint8Array(Buffer.from(stored.publicKey, "base64url")),
+					counter: stored.counter,
+					transports: stored.transports
+				}
+			});
+			if (!verification.verified) return {
+				ok: false,
+				error: "That passkey did not verify."
+			};
+			const presentedCounter = verification.authenticationInfo.newCounter;
+			if (require_index.counterVerdict(stored.counter, presentedCounter) === "clone-suspected") {
+				options.removeCredential(stored.id);
+				notice(`revoked passkey ${stored.label}: its signature counter went backwards, which means a clone`);
+				return {
+					ok: false,
+					error: "That passkey looks cloned and has been revoked."
+				};
+			}
+			const updated = {
+				...stored,
+				counter: presentedCounter,
+				lastUsedAt: now()
+			};
+			options.saveCredential(updated);
+			return {
+				ok: true,
+				credential: updated
+			};
+		} catch (error) {
+			return {
+				ok: false,
+				error: describe(error)
+			};
+		}
+	}
+}
+//#endregion
+exports.createWebAuthn = createWebAuthn;
+
+//# sourceMappingURL=index.cjs.map

package/dist/src/services/webauthn/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.cjs","names":["randomBytes","relyingPartyId","STEP_UP_CHALLENGE_TTL_MS","CEREMONY_TTL_MS","challengeIsFresh","generateRegistrationOptions","verifyRegistrationResponse","generateAuthenticationOptions","verifyAuthenticationResponse","counterVerdict"],"sources":["../../../../src/services/webauthn/index.ts"],"sourcesContent":["import { randomBytes } from 'node:crypto';\n\nimport {\n  generateAuthenticationOptions,\n  generateRegistrationOptions,\n  verifyAuthenticationResponse,\n  verifyRegistrationResponse,\n} from '@simplewebauthn/server';\n\nimport {\n  CEREMONY_TTL_MS,\n  STEP_UP_CHALLENGE_TTL_MS,\n  type StepUpAction,\n  type StoredCredential,\n  challengeIsFresh,\n  counterVerdict,\n  relyingPartyId,\n} from '../webauthnPolicy';\n\nconst ID_BYTES = 8;\nconst CEREMONY_ID_BYTES = 16;\nconst USER_ID_BYTES = 16;\nconst MAX_PENDING_CEREMONIES = 256;\nconst RP_NAME = 'DoomPi cockpit';\n/** One synthetic owner: there is exactly one person here, and passkeys need a subject. */\nconst OWNER_NAME = 'this machine';\nexport interface WebAuthnOptions {\n  /** The tunnel origin, or undefined while remote access is off. */\n  publicOrigin: () => string | undefined;\n  credentials: () => readonly StoredCredential[];\n  saveCredential: (credential: StoredCredential) => void;\n  removeCredential: (id: string) => boolean;\n  now?: () => number;\n  onNotice?: (message: string) => void;\n}\n\nexport type PasskeySupport = { supported: true; rpId: string } | { supported: false; reason: string };\n\nexport interface BegunCeremony {\n  ceremonyId: string;\n  options: Record<string, unknown>;\n}\n\nexport interface WebAuthn {\n  /** Whether the current tunnel can carry passkeys at all. */\n  support(): PasskeySupport;\n  beginRegistration(caller: string, label: string): Promise<BegunCeremony | undefined>;\n  finishRegistration(\n    ceremonyId: string,\n    caller: string,\n    response: unknown,\n    label: string,\n  ): Promise<{ ok: true; id: string } | { ok: false; error: string }>;\n  beginAuthentication(caller: string): Promise<BegunCeremony | undefined>;\n  finishAuthentication(\n    ceremonyId: string,\n    caller: string,\n    response: unknown,\n  ): Promise<{ ok: true; credential: StoredCredential } | { ok: false; error: string }>;\n  /** Mints a challenge bound to one caller and action, good once and briefly. */\n  beginStepUp(caller: string, action: StepUpAction): Promise<BegunCeremony | undefined>;\n  finishStepUp(ceremonyId: string, caller: string, action: StepUpAction, response: unknown): Promise<boolean>;\n  clearChallenges(): void;\n}\n\ntype CeremonyType = 'registration' | 'authentication' | 'step-up';\n\ninterface PendingChallenge {\n  challenge: string;\n  issuedAt: number;\n  caller: string;\n  type: CeremonyType;\n  /** Present for a step-up, so a challenge minted for one action cannot authorise another. */\n  action?: StepUpAction;\n}\n\nfunction describe(error: unknown): string {\n  return error instanceof Error ? error.message : String(error);\n}\n\n/**\n * Passkeys over the tunnel, and the step-up gate in front of the two actions a\n * live session should not be enough for.\n *\n * `rpID` and `expectedOrigin` come from the configured tunnel hostname, never\n * from the request. That is the entire scope of a credential, so a caller that\n * could influence it could mint credentials against somebody else's origin.\n */\nexport function createWebAuthn(options: WebAuthnOptions): WebAuthn {\n  const now = options.now ?? ((): number => Date.now());\n  const notice = options.onNotice ?? ((): void => {});\n  /** One synthetic subject, stable for the life of the process. */\n  const userId = randomBytes(USER_ID_BYTES);\n  const pending = new Map<string, PendingChallenge>();\n\n  const support = (): PasskeySupport => {\n    const origin = options.publicOrigin();\n    const rpId = relyingPartyId(origin);\n    if (origin === undefined) return { supported: false, reason: 'Remote access is not on.' };\n    if (rpId === undefined) {\n      return {\n        supported: false,\n        reason:\n          'A quick tunnel gets a new hostname every start, so a passkey registered now would not work again. Configure a named tunnel to use passkeys.',\n      };\n    }\n    return { supported: true, rpId };\n  };\n\n  const ceremonyKey = (id: string, caller: string, type: CeremonyType): string => `${type}\\u0000${caller}\\u0000${id}`;\n  const ttlFor = (held: PendingChallenge): number =>\n    held.type === 'step-up' ? STEP_UP_CHALLENGE_TTL_MS : CEREMONY_TTL_MS;\n\n  const sweepPending = (): void => {\n    const at = now();\n    for (const [id, held] of pending) {\n      if (!challengeIsFresh(held.issuedAt, at, ttlFor(held))) pending.delete(id);\n    }\n  };\n\n  const remember = (type: CeremonyType, caller: string, challenge: string, action?: StepUpAction): string => {\n    sweepPending();\n    while (pending.size >= MAX_PENDING_CEREMONIES) {\n      const oldest = pending.keys().next().value as string | undefined;\n      if (oldest === undefined) break;\n      pending.delete(oldest);\n    }\n    let id: string;\n    do {\n      id = randomBytes(CEREMONY_ID_BYTES).toString('base64url');\n    } while (pending.has(ceremonyKey(id, caller, type)));\n    pending.set(ceremonyKey(id, caller, type), {\n      challenge,\n      issuedAt: now(),\n      caller,\n      type,\n      ...(action === undefined ? {} : { action }),\n    });\n    return id;\n  };\n\n  const take = (id: string, caller: string, type: CeremonyType, action?: StepUpAction): string | undefined => {\n    const key = ceremonyKey(id, caller, type);\n    const held = pending.get(key);\n    if (held === undefined) return undefined;\n    if (!challengeIsFresh(held.issuedAt, now(), ttlFor(held))) {\n      pending.delete(key);\n      return undefined;\n    }\n    if (held.caller !== caller || held.type !== type || held.action !== action) return undefined;\n    pending.delete(key);\n    return held.challenge;\n  };\n\n  return {\n    support,\n\n    async beginRegistration(caller, label) {\n      const ready = support();\n      if (!ready.supported) return undefined;\n      const options_ = await generateRegistrationOptions({\n        rpName: RP_NAME,\n        rpID: ready.rpId,\n        userID: userId,\n        userName: OWNER_NAME,\n        userDisplayName: label,\n        attestationType: 'none',\n        // Discoverable so a return visit is one gesture with nothing typed,\n        // and platform so the key lands in the phone's secure enclave rather\n        // than on a roaming key the user has to carry.\n        authenticatorSelection: {\n          residentKey: 'required',\n          userVerification: 'required',\n          authenticatorAttachment: 'platform',\n        },\n        excludeCredentials: options.credentials().map((credential) => ({ id: credential.credentialId })),\n      });\n      const ceremonyId = remember('registration', caller, options_.challenge);\n      return { ceremonyId, options: options_ as unknown as Record<string, unknown> };\n    },\n\n    async finishRegistration(ceremonyId, caller, response, label) {\n      const ready = support();\n      if (!ready.supported) return { ok: false, error: ready.reason };\n      const challenge = take(ceremonyId, caller, 'registration');\n      if (challenge === undefined) return { ok: false, error: 'That registration expired. Try again.' };\n      try {\n        const verification = await verifyRegistrationResponse({\n          response: response as Parameters<typeof verifyRegistrationResponse>[0]['response'],\n          expectedChallenge: challenge,\n          expectedOrigin: `https://${ready.rpId}`,\n          expectedRPID: ready.rpId,\n          requireUserVerification: true,\n        });\n        if (!verification.verified || verification.registrationInfo === undefined) {\n          return { ok: false, error: 'That passkey could not be verified.' };\n        }\n        const info = verification.registrationInfo;\n        const at = now();\n        const credential: StoredCredential = {\n          id: randomBytes(ID_BYTES).toString('hex'),\n          credentialId: info.credential.id,\n          publicKey: Buffer.from(info.credential.publicKey).toString('base64url'),\n          counter: info.credential.counter,\n          transports: info.credential.transports ?? [],\n          label,\n          createdAt: at,\n          lastUsedAt: at,\n        };\n        options.saveCredential(credential);\n        notice(`registered a passkey for ${label}`);\n        return { ok: true, id: credential.id };\n      } catch (error) {\n        return { ok: false, error: describe(error) };\n      }\n    },\n\n    async beginAuthentication(caller) {\n      const ready = support();\n      if (!ready.supported) return undefined;\n      const options_ = await generateAuthenticationOptions({\n        rpID: ready.rpId,\n        userVerification: 'required',\n      });\n      const ceremonyId = remember('authentication', caller, options_.challenge);\n      return { ceremonyId, options: options_ as unknown as Record<string, unknown> };\n    },\n\n    async finishAuthentication(ceremonyId, caller, response) {\n      const ready = support();\n      if (!ready.supported) return { ok: false, error: ready.reason };\n      const challenge = take(ceremonyId, caller, 'authentication');\n      if (challenge === undefined) return { ok: false, error: 'That sign-in expired. Try again.' };\n      return await verifyAgainst(challenge, ready.rpId, response);\n    },\n\n    async beginStepUp(caller, action) {\n      const ready = support();\n      if (!ready.supported) return undefined;\n      const options_ = await generateAuthenticationOptions({\n        rpID: ready.rpId,\n        userVerification: 'required',\n      });\n      const ceremonyId = remember('step-up', caller, options_.challenge, action);\n      return { ceremonyId, options: options_ as unknown as Record<string, unknown> };\n    },\n\n    async finishStepUp(ceremonyId, caller, action, response) {\n      const ready = support();\n      if (!ready.supported) return false;\n      const challenge = take(ceremonyId, caller, 'step-up', action);\n      if (challenge === undefined) return false;\n      return (await verifyAgainst(challenge, ready.rpId, response)).ok;\n    },\n\n    clearChallenges() {\n      pending.clear();\n    },\n  };\n\n  async function verifyAgainst(\n    challenge: string,\n    rpId: string,\n    response: unknown,\n  ): Promise<{ ok: true; credential: StoredCredential } | { ok: false; error: string }> {\n    const presented = (response as { id?: unknown }).id;\n    if (typeof presented !== 'string') return { ok: false, error: 'That response named no credential.' };\n    const stored = options.credentials().find((candidate) => candidate.credentialId === presented);\n    if (stored === undefined) return { ok: false, error: 'That passkey is not registered here.' };\n    try {\n      const verification = await verifyAuthenticationResponse({\n        response: response as Parameters<typeof verifyAuthenticationResponse>[0]['response'],\n        expectedChallenge: challenge,\n        expectedOrigin: `https://${rpId}`,\n        expectedRPID: rpId,\n        requireUserVerification: true,\n        credential: {\n          id: stored.credentialId,\n          publicKey: new Uint8Array(Buffer.from(stored.publicKey, 'base64url')),\n          counter: stored.counter,\n          transports: stored.transports as never,\n        },\n      });\n      if (!verification.verified) return { ok: false, error: 'That passkey did not verify.' };\n      const presentedCounter = verification.authenticationInfo.newCounter;\n      if (counterVerdict(stored.counter, presentedCounter) === 'clone-suspected') {\n        // Two things are signing with one key. The credential is burnt.\n        options.removeCredential(stored.id);\n        notice(`revoked passkey ${stored.label}: its signature counter went backwards, which means a clone`);\n        return { ok: false, error: 'That passkey looks cloned and has been revoked.' };\n      }\n      const updated: StoredCredential = { ...stored, counter: presentedCounter, lastUsedAt: now() };\n      options.saveCredential(updated);\n      return { ok: true, credential: updated };\n    } catch (error) {\n      return { ok: false, error: describe(error) };\n    }\n  }\n}\n"],"mappings":";;;;AAmBA,MAAM,WAAW;AACjB,MAAM,oBAAoB;AAC1B,MAAM,gBAAgB;AACtB,MAAM,yBAAyB;AAC/B,MAAM,UAAU;;AAEhB,MAAM,aAAa;AAmDnB,SAAS,SAAS,OAAwB;CACxC,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC9D;;;;;;;;;AAUA,SAAgB,eAAe,SAAoC;CACjE,MAAM,MAAM,QAAQ,cAAsB,KAAK,IAAI;CACnD,MAAM,SAAS,QAAQ,mBAAyB,CAAC;;CAEjD,MAAM,UAAA,GAASA,YAAAA,YAAAA,CAAY,aAAa;CACxC,MAAM,0BAAU,IAAI,IAA8B;CAElD,MAAM,gBAAgC;EACpC,MAAM,SAAS,QAAQ,aAAa;EACpC,MAAM,OAAOC,cAAAA,eAAe,MAAM;EAClC,IAAI,WAAW,KAAA,GAAW,OAAO;GAAE,WAAW;GAAO,QAAQ;EAA2B;EACxF,IAAI,SAAS,KAAA,GACX,OAAO;GACL,WAAW;GACX,QACE;EACJ;EAEF,OAAO;GAAE,WAAW;GAAM;EAAK;CACjC;CAEA,MAAM,eAAe,IAAY,QAAgB,SAA+B,GAAG,KAAK,QAAQ,OAAO,QAAQ;CAC/G,MAAM,UAAU,SACd,KAAK,SAAS,YAAYC,cAAAA,2BAA2BC,cAAAA;CAEvD,MAAM,qBAA2B;EAC/B,MAAM,KAAK,IAAI;EACf,KAAK,MAAM,CAAC,IAAI,SAAS,SACvB,IAAI,CAACC,cAAAA,iBAAiB,KAAK,UAAU,IAAI,OAAO,IAAI,CAAC,GAAG,QAAQ,OAAO,EAAE;CAE7E;CAEA,MAAM,YAAY,MAAoB,QAAgB,WAAmB,WAAkC;EACzG,aAAa;EACb,OAAO,QAAQ,QAAQ,wBAAwB;GAC7C,MAAM,SAAS,QAAQ,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;GACrC,IAAI,WAAW,KAAA,GAAW;GAC1B,QAAQ,OAAO,MAAM;EACvB;EACA,IAAI;EACJ;GACE,MAAA,GAAKJ,YAAAA,YAAAA,CAAY,iBAAiB,CAAC,CAAC,SAAS,WAAW;SACjD,QAAQ,IAAI,YAAY,IAAI,QAAQ,IAAI,CAAC;EAClD,QAAQ,IAAI,YAAY,IAAI,QAAQ,IAAI,GAAG;GACzC;GACA,UAAU,IAAI;GACd;GACA;GACA,GAAI,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO;EAC3C,CAAC;EACD,OAAO;CACT;CAEA,MAAM,QAAQ,IAAY,QAAgB,MAAoB,WAA8C;EAC1G,MAAM,MAAM,YAAY,IAAI,QAAQ,IAAI;EACxC,MAAM,OAAO,QAAQ,IAAI,GAAG;EAC5B,IAAI,SAAS,KAAA,GAAW,OAAO,KAAA;EAC/B,IAAI,CAACI,cAAAA,iBAAiB,KAAK,UAAU,IAAI,GAAG,OAAO,IAAI,CAAC,GAAG;GACzD,QAAQ,OAAO,GAAG;GAClB;EACF;EACA,IAAI,KAAK,WAAW,UAAU,KAAK,SAAS,QAAQ,KAAK,WAAW,QAAQ,OAAO,KAAA;EACnF,QAAQ,OAAO,GAAG;EAClB,OAAO,KAAK;CACd;CAEA,OAAO;EACL;EAEA,MAAM,kBAAkB,QAAQ,OAAO;GACrC,MAAM,QAAQ,QAAQ;GACtB,IAAI,CAAC,MAAM,WAAW,OAAO,KAAA;GAC7B,MAAM,WAAW,OAAA,GAAMC,uBAAAA,4BAAAA,CAA4B;IACjD,QAAQ;IACR,MAAM,MAAM;IACZ,QAAQ;IACR,UAAU;IACV,iBAAiB;IACjB,iBAAiB;IAIjB,wBAAwB;KACtB,aAAa;KACb,kBAAkB;KAClB,yBAAyB;IAC3B;IACA,oBAAoB,QAAQ,YAAY,CAAC,CAAC,KAAK,gBAAgB,EAAE,IAAI,WAAW,aAAa,EAAE;GACjG,CAAC;GAED,OAAO;IAAE,YADU,SAAS,gBAAgB,QAAQ,SAAS,SAC3C;IAAG,SAAS;GAA+C;EAC/E;EAEA,MAAM,mBAAmB,YAAY,QAAQ,UAAU,OAAO;GAC5D,MAAM,QAAQ,QAAQ;GACtB,IAAI,CAAC,MAAM,WAAW,OAAO;IAAE,IAAI;IAAO,OAAO,MAAM;GAAO;GAC9D,MAAM,YAAY,KAAK,YAAY,QAAQ,cAAc;GACzD,IAAI,cAAc,KAAA,GAAW,OAAO;IAAE,IAAI;IAAO,OAAO;GAAwC;GAChG,IAAI;IACF,MAAM,eAAe,OAAA,GAAMC,uBAAAA,2BAAAA,CAA2B;KAC1C;KACV,mBAAmB;KACnB,gBAAgB,WAAW,MAAM;KACjC,cAAc,MAAM;KACpB,yBAAyB;IAC3B,CAAC;IACD,IAAI,CAAC,aAAa,YAAY,aAAa,qBAAqB,KAAA,GAC9D,OAAO;KAAE,IAAI;KAAO,OAAO;IAAsC;IAEnE,MAAM,OAAO,aAAa;IAC1B,MAAM,KAAK,IAAI;IACf,MAAM,aAA+B;KACnC,KAAA,GAAIN,YAAAA,YAAAA,CAAY,QAAQ,CAAC,CAAC,SAAS,KAAK;KACxC,cAAc,KAAK,WAAW;KAC9B,WAAW,OAAO,KAAK,KAAK,WAAW,SAAS,CAAC,CAAC,SAAS,WAAW;KACtE,SAAS,KAAK,WAAW;KACzB,YAAY,KAAK,WAAW,cAAc,CAAC;KAC3C;KACA,WAAW;KACX,YAAY;IACd;IACA,QAAQ,eAAe,UAAU;IACjC,OAAO,4BAA4B,OAAO;IAC1C,OAAO;KAAE,IAAI;KAAM,IAAI,WAAW;IAAG;GACvC,SAAS,OAAO;IACd,OAAO;KAAE,IAAI;KAAO,OAAO,SAAS,KAAK;IAAE;GAC7C;EACF;EAEA,MAAM,oBAAoB,QAAQ;GAChC,MAAM,QAAQ,QAAQ;GACtB,IAAI,CAAC,MAAM,WAAW,OAAO,KAAA;GAC7B,MAAM,WAAW,OAAA,GAAMO,uBAAAA,8BAAAA,CAA8B;IACnD,MAAM,MAAM;IACZ,kBAAkB;GACpB,CAAC;GAED,OAAO;IAAE,YADU,SAAS,kBAAkB,QAAQ,SAAS,SAC7C;IAAG,SAAS;GAA+C;EAC/E;EAEA,MAAM,qBAAqB,YAAY,QAAQ,UAAU;GACvD,MAAM,QAAQ,QAAQ;GACtB,IAAI,CAAC,MAAM,WAAW,OAAO;IAAE,IAAI;IAAO,OAAO,MAAM;GAAO;GAC9D,MAAM,YAAY,KAAK,YAAY,QAAQ,gBAAgB;GAC3D,IAAI,cAAc,KAAA,GAAW,OAAO;IAAE,IAAI;IAAO,OAAO;GAAmC;GAC3F,OAAO,MAAM,cAAc,WAAW,MAAM,MAAM,QAAQ;EAC5D;EAEA,MAAM,YAAY,QAAQ,QAAQ;GAChC,MAAM,QAAQ,QAAQ;GACtB,IAAI,CAAC,MAAM,WAAW,OAAO,KAAA;GAC7B,MAAM,WAAW,OAAA,GAAMA,uBAAAA,8BAAAA,CAA8B;IACnD,MAAM,MAAM;IACZ,kBAAkB;GACpB,CAAC;GAED,OAAO;IAAE,YADU,SAAS,WAAW,QAAQ,SAAS,WAAW,MACjD;IAAG,SAAS;GAA+C;EAC/E;EAEA,MAAM,aAAa,YAAY,QAAQ,QAAQ,UAAU;GACvD,MAAM,QAAQ,QAAQ;GACtB,IAAI,CAAC,MAAM,WAAW,OAAO;GAC7B,MAAM,YAAY,KAAK,YAAY,QAAQ,WAAW,MAAM;GAC5D,IAAI,cAAc,KAAA,GAAW,OAAO;GACpC,QAAQ,MAAM,cAAc,WAAW,MAAM,MAAM,QAAQ,EAAA,CAAG;EAChE;EAEA,kBAAkB;GAChB,QAAQ,MAAM;EAChB;CACF;CAEA,eAAe,cACb,WACA,MACA,UACoF;EACpF,MAAM,YAAa,SAA8B;EACjD,IAAI,OAAO,cAAc,UAAU,OAAO;GAAE,IAAI;GAAO,OAAO;EAAqC;EACnG,MAAM,SAAS,QAAQ,YAAY,CAAC,CAAC,MAAM,cAAc,UAAU,iBAAiB,SAAS;EAC7F,IAAI,WAAW,KAAA,GAAW,OAAO;GAAE,IAAI;GAAO,OAAO;EAAuC;EAC5F,IAAI;GACF,MAAM,eAAe,OAAA,GAAMC,uBAAAA,6BAAAA,CAA6B;IAC5C;IACV,mBAAmB;IACnB,gBAAgB,WAAW;IAC3B,cAAc;IACd,yBAAyB;IACzB,YAAY;KACV,IAAI,OAAO;KACX,WAAW,IAAI,WAAW,OAAO,KAAK,OAAO,WAAW,WAAW,CAAC;KACpE,SAAS,OAAO;KAChB,YAAY,OAAO;IACrB;GACF,CAAC;GACD,IAAI,CAAC,aAAa,UAAU,OAAO;IAAE,IAAI;IAAO,OAAO;GAA+B;GACtF,MAAM,mBAAmB,aAAa,mBAAmB;GACzD,IAAIC,cAAAA,eAAe,OAAO,SAAS,gBAAgB,MAAM,mBAAmB;IAE1E,QAAQ,iBAAiB,OAAO,EAAE;IAClC,OAAO,mBAAmB,OAAO,MAAM,4DAA4D;IACnG,OAAO;KAAE,IAAI;KAAO,OAAO;IAAkD;GAC/E;GACA,MAAM,UAA4B;IAAE,GAAG;IAAQ,SAAS;IAAkB,YAAY,IAAI;GAAE;GAC5F,QAAQ,eAAe,OAAO;GAC9B,OAAO;IAAE,IAAI;IAAM,YAAY;GAAQ;EACzC,SAAS,OAAO;GACd,OAAO;IAAE,IAAI;IAAO,OAAO,SAAS,KAAK;GAAE;EAC7C;CACF;AACF"}

package/dist/src/services/webauthn/index.d.mts

@@ -0,0 +1,39 @@
+import { StepUpAction, StoredCredential } from "../webauthnPolicy/index.mjs";
+//#region src/services/webauthn/index.d.ts
+export type PasskeySupport = {
+  supported: true;
+  rpId: string;
+} | {
+  supported: false;
+  reason: string;
+};
+export interface BegunCeremony {
+  ceremonyId: string;
+  options: Record<string, unknown>;
+}
+export interface WebAuthn {
+  /** Whether the current tunnel can carry passkeys at all. */
+  support(): PasskeySupport;
+  beginRegistration(caller: string, label: string): Promise<BegunCeremony | undefined>;
+  finishRegistration(ceremonyId: string, caller: string, response: unknown, label: string): Promise<{
+    ok: true;
+    id: string;
+  } | {
+    ok: false;
+    error: string;
+  }>;
+  beginAuthentication(caller: string): Promise<BegunCeremony | undefined>;
+  finishAuthentication(ceremonyId: string, caller: string, response: unknown): Promise<{
+    ok: true;
+    credential: StoredCredential;
+  } | {
+    ok: false;
+    error: string;
+  }>;
+  /** Mints a challenge bound to one caller and action, good once and briefly. */
+  beginStepUp(caller: string, action: StepUpAction): Promise<BegunCeremony | undefined>;
+  finishStepUp(ceremonyId: string, caller: string, action: StepUpAction, response: unknown): Promise<boolean>;
+  clearChallenges(): void;
+}
+//#endregion
+//# sourceMappingURL=index.d.mts.map

package/dist/src/services/webauthn/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":[],"sources":["../../../../src/services/webauthn/index.ts"],"mappings":";;YAoCY;EAAmB;EAAiB;;EAAmB;EAAkB;;iBAEpE;EACf;EACA,SAAS;;iBAGM;;EAEf,WAAW;EACX,kBAAkB,gBAAgB,gBAAgB,QAAQ;EAC1D,mBACE,oBACA,gBACA,mBACA,gBACC;IAAU;IAAU;;IAAiB;IAAW;;EACnD,oBAAoB,iBAAiB,QAAQ;EAC7C,qBACE,oBACA,gBACA,oBACC;IAAU;IAAU,YAAY;;IAAuB;IAAW;;;EAErE,YAAY,gBAAgB,QAAQ,eAAe,QAAQ;EAC3D,aAAa,oBAAoB,gBAAgB,QAAQ,cAAc,oBAAoB;EAC3F"}

package/dist/src/services/webauthn/index.mjs

@@ -0,0 +1,262 @@
+import { CEREMONY_TTL_MS, STEP_UP_CHALLENGE_TTL_MS, challengeIsFresh, counterVerdict, relyingPartyId } from "../webauthnPolicy/index.mjs";
+import { randomBytes } from "node:crypto";
+import { generateAuthenticationOptions, generateRegistrationOptions, verifyAuthenticationResponse, verifyRegistrationResponse } from "@simplewebauthn/server";
+//#region src/services/webauthn/index.ts
+const ID_BYTES = 8;
+const CEREMONY_ID_BYTES = 16;
+const USER_ID_BYTES = 16;
+const MAX_PENDING_CEREMONIES = 256;
+const RP_NAME = "DoomPi cockpit";
+/** One synthetic owner: there is exactly one person here, and passkeys need a subject. */
+const OWNER_NAME = "this machine";
+function describe(error) {
+	return error instanceof Error ? error.message : String(error);
+}
+/**
+* Passkeys over the tunnel, and the step-up gate in front of the two actions a
+* live session should not be enough for.
+*
+* `rpID` and `expectedOrigin` come from the configured tunnel hostname, never
+* from the request. That is the entire scope of a credential, so a caller that
+* could influence it could mint credentials against somebody else's origin.
+*/
+function createWebAuthn(options) {
+	const now = options.now ?? (() => Date.now());
+	const notice = options.onNotice ?? (() => {});
+	/** One synthetic subject, stable for the life of the process. */
+	const userId = randomBytes(USER_ID_BYTES);
+	const pending = /* @__PURE__ */ new Map();
+	const support = () => {
+		const origin = options.publicOrigin();
+		const rpId = relyingPartyId(origin);
+		if (origin === void 0) return {
+			supported: false,
+			reason: "Remote access is not on."
+		};
+		if (rpId === void 0) return {
+			supported: false,
+			reason: "A quick tunnel gets a new hostname every start, so a passkey registered now would not work again. Configure a named tunnel to use passkeys."
+		};
+		return {
+			supported: true,
+			rpId
+		};
+	};
+	const ceremonyKey = (id, caller, type) => `${type}\u0000${caller}\u0000${id}`;
+	const ttlFor = (held) => held.type === "step-up" ? STEP_UP_CHALLENGE_TTL_MS : CEREMONY_TTL_MS;
+	const sweepPending = () => {
+		const at = now();
+		for (const [id, held] of pending) if (!challengeIsFresh(held.issuedAt, at, ttlFor(held))) pending.delete(id);
+	};
+	const remember = (type, caller, challenge, action) => {
+		sweepPending();
+		while (pending.size >= MAX_PENDING_CEREMONIES) {
+			const oldest = pending.keys().next().value;
+			if (oldest === void 0) break;
+			pending.delete(oldest);
+		}
+		let id;
+		do
+			id = randomBytes(CEREMONY_ID_BYTES).toString("base64url");
+		while (pending.has(ceremonyKey(id, caller, type)));
+		pending.set(ceremonyKey(id, caller, type), {
+			challenge,
+			issuedAt: now(),
+			caller,
+			type,
+			...action === void 0 ? {} : { action }
+		});
+		return id;
+	};
+	const take = (id, caller, type, action) => {
+		const key = ceremonyKey(id, caller, type);
+		const held = pending.get(key);
+		if (held === void 0) return void 0;
+		if (!challengeIsFresh(held.issuedAt, now(), ttlFor(held))) {
+			pending.delete(key);
+			return;
+		}
+		if (held.caller !== caller || held.type !== type || held.action !== action) return void 0;
+		pending.delete(key);
+		return held.challenge;
+	};
+	return {
+		support,
+		async beginRegistration(caller, label) {
+			const ready = support();
+			if (!ready.supported) return void 0;
+			const options_ = await generateRegistrationOptions({
+				rpName: RP_NAME,
+				rpID: ready.rpId,
+				userID: userId,
+				userName: OWNER_NAME,
+				userDisplayName: label,
+				attestationType: "none",
+				authenticatorSelection: {
+					residentKey: "required",
+					userVerification: "required",
+					authenticatorAttachment: "platform"
+				},
+				excludeCredentials: options.credentials().map((credential) => ({ id: credential.credentialId }))
+			});
+			return {
+				ceremonyId: remember("registration", caller, options_.challenge),
+				options: options_
+			};
+		},
+		async finishRegistration(ceremonyId, caller, response, label) {
+			const ready = support();
+			if (!ready.supported) return {
+				ok: false,
+				error: ready.reason
+			};
+			const challenge = take(ceremonyId, caller, "registration");
+			if (challenge === void 0) return {
+				ok: false,
+				error: "That registration expired. Try again."
+			};
+			try {
+				const verification = await verifyRegistrationResponse({
+					response,
+					expectedChallenge: challenge,
+					expectedOrigin: `https://${ready.rpId}`,
+					expectedRPID: ready.rpId,
+					requireUserVerification: true
+				});
+				if (!verification.verified || verification.registrationInfo === void 0) return {
+					ok: false,
+					error: "That passkey could not be verified."
+				};
+				const info = verification.registrationInfo;
+				const at = now();
+				const credential = {
+					id: randomBytes(ID_BYTES).toString("hex"),
+					credentialId: info.credential.id,
+					publicKey: Buffer.from(info.credential.publicKey).toString("base64url"),
+					counter: info.credential.counter,
+					transports: info.credential.transports ?? [],
+					label,
+					createdAt: at,
+					lastUsedAt: at
+				};
+				options.saveCredential(credential);
+				notice(`registered a passkey for ${label}`);
+				return {
+					ok: true,
+					id: credential.id
+				};
+			} catch (error) {
+				return {
+					ok: false,
+					error: describe(error)
+				};
+			}
+		},
+		async beginAuthentication(caller) {
+			const ready = support();
+			if (!ready.supported) return void 0;
+			const options_ = await generateAuthenticationOptions({
+				rpID: ready.rpId,
+				userVerification: "required"
+			});
+			return {
+				ceremonyId: remember("authentication", caller, options_.challenge),
+				options: options_
+			};
+		},
+		async finishAuthentication(ceremonyId, caller, response) {
+			const ready = support();
+			if (!ready.supported) return {
+				ok: false,
+				error: ready.reason
+			};
+			const challenge = take(ceremonyId, caller, "authentication");
+			if (challenge === void 0) return {
+				ok: false,
+				error: "That sign-in expired. Try again."
+			};
+			return await verifyAgainst(challenge, ready.rpId, response);
+		},
+		async beginStepUp(caller, action) {
+			const ready = support();
+			if (!ready.supported) return void 0;
+			const options_ = await generateAuthenticationOptions({
+				rpID: ready.rpId,
+				userVerification: "required"
+			});
+			return {
+				ceremonyId: remember("step-up", caller, options_.challenge, action),
+				options: options_
+			};
+		},
+		async finishStepUp(ceremonyId, caller, action, response) {
+			const ready = support();
+			if (!ready.supported) return false;
+			const challenge = take(ceremonyId, caller, "step-up", action);
+			if (challenge === void 0) return false;
+			return (await verifyAgainst(challenge, ready.rpId, response)).ok;
+		},
+		clearChallenges() {
+			pending.clear();
+		}
+	};
+	async function verifyAgainst(challenge, rpId, response) {
+		const presented = response.id;
+		if (typeof presented !== "string") return {
+			ok: false,
+			error: "That response named no credential."
+		};
+		const stored = options.credentials().find((candidate) => candidate.credentialId === presented);
+		if (stored === void 0) return {
+			ok: false,
+			error: "That passkey is not registered here."
+		};
+		try {
+			const verification = await verifyAuthenticationResponse({
+				response,
+				expectedChallenge: challenge,
+				expectedOrigin: `https://${rpId}`,
+				expectedRPID: rpId,
+				requireUserVerification: true,
+				credential: {
+					id: stored.credentialId,
+					publicKey: new Uint8Array(Buffer.from(stored.publicKey, "base64url")),
+					counter: stored.counter,
+					transports: stored.transports
+				}
+			});
+			if (!verification.verified) return {
+				ok: false,
+				error: "That passkey did not verify."
+			};
+			const presentedCounter = verification.authenticationInfo.newCounter;
+			if (counterVerdict(stored.counter, presentedCounter) === "clone-suspected") {
+				options.removeCredential(stored.id);
+				notice(`revoked passkey ${stored.label}: its signature counter went backwards, which means a clone`);
+				return {
+					ok: false,
+					error: "That passkey looks cloned and has been revoked."
+				};
+			}
+			const updated = {
+				...stored,
+				counter: presentedCounter,
+				lastUsedAt: now()
+			};
+			options.saveCredential(updated);
+			return {
+				ok: true,
+				credential: updated
+			};
+		} catch (error) {
+			return {
+				ok: false,
+				error: describe(error)
+			};
+		}
+	}
+}
+//#endregion
+export { createWebAuthn };
+
+//# sourceMappingURL=index.mjs.map

package/dist/src/services/webauthn/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","names":[],"sources":["../../../../src/services/webauthn/index.ts"],"sourcesContent":["import { randomBytes } from 'node:crypto';\n\nimport {\n  generateAuthenticationOptions,\n  generateRegistrationOptions,\n  verifyAuthenticationResponse,\n  verifyRegistrationResponse,\n} from '@simplewebauthn/server';\n\nimport {\n  CEREMONY_TTL_MS,\n  STEP_UP_CHALLENGE_TTL_MS,\n  type StepUpAction,\n  type StoredCredential,\n  challengeIsFresh,\n  counterVerdict,\n  relyingPartyId,\n} from '../webauthnPolicy';\n\nconst ID_BYTES = 8;\nconst CEREMONY_ID_BYTES = 16;\nconst USER_ID_BYTES = 16;\nconst MAX_PENDING_CEREMONIES = 256;\nconst RP_NAME = 'DoomPi cockpit';\n/** One synthetic owner: there is exactly one person here, and passkeys need a subject. */\nconst OWNER_NAME = 'this machine';\nexport interface WebAuthnOptions {\n  /** The tunnel origin, or undefined while remote access is off. */\n  publicOrigin: () => string | undefined;\n  credentials: () => readonly StoredCredential[];\n  saveCredential: (credential: StoredCredential) => void;\n  removeCredential: (id: string) => boolean;\n  now?: () => number;\n  onNotice?: (message: string) => void;\n}\n\nexport type PasskeySupport = { supported: true; rpId: string } | { supported: false; reason: string };\n\nexport interface BegunCeremony {\n  ceremonyId: string;\n  options: Record<string, unknown>;\n}\n\nexport interface WebAuthn {\n  /** Whether the current tunnel can carry passkeys at all. */\n  support(): PasskeySupport;\n  beginRegistration(caller: string, label: string): Promise<BegunCeremony | undefined>;\n  finishRegistration(\n    ceremonyId: string,\n    caller: string,\n    response: unknown,\n    label: string,\n  ): Promise<{ ok: true; id: string } | { ok: false; error: string }>;\n  beginAuthentication(caller: string): Promise<BegunCeremony | undefined>;\n  finishAuthentication(\n    ceremonyId: string,\n    caller: string,\n    response: unknown,\n  ): Promise<{ ok: true; credential: StoredCredential } | { ok: false; error: string }>;\n  /** Mints a challenge bound to one caller and action, good once and briefly. */\n  beginStepUp(caller: string, action: StepUpAction): Promise<BegunCeremony | undefined>;\n  finishStepUp(ceremonyId: string, caller: string, action: StepUpAction, response: unknown): Promise<boolean>;\n  clearChallenges(): void;\n}\n\ntype CeremonyType = 'registration' | 'authentication' | 'step-up';\n\ninterface PendingChallenge {\n  challenge: string;\n  issuedAt: number;\n  caller: string;\n  type: CeremonyType;\n  /** Present for a step-up, so a challenge minted for one action cannot authorise another. */\n  action?: StepUpAction;\n}\n\nfunction describe(error: unknown): string {\n  return error instanceof Error ? error.message : String(error);\n}\n\n/**\n * Passkeys over the tunnel, and the step-up gate in front of the two actions a\n * live session should not be enough for.\n *\n * `rpID` and `expectedOrigin` come from the configured tunnel hostname, never\n * from the request. That is the entire scope of a credential, so a caller that\n * could influence it could mint credentials against somebody else's origin.\n */\nexport function createWebAuthn(options: WebAuthnOptions): WebAuthn {\n  const now = options.now ?? ((): number => Date.now());\n  const notice = options.onNotice ?? ((): void => {});\n  /** One synthetic subject, stable for the life of the process. */\n  const userId = randomBytes(USER_ID_BYTES);\n  const pending = new Map<string, PendingChallenge>();\n\n  const support = (): PasskeySupport => {\n    const origin = options.publicOrigin();\n    const rpId = relyingPartyId(origin);\n    if (origin === undefined) return { supported: false, reason: 'Remote access is not on.' };\n    if (rpId === undefined) {\n      return {\n        supported: false,\n        reason:\n          'A quick tunnel gets a new hostname every start, so a passkey registered now would not work again. Configure a named tunnel to use passkeys.',\n      };\n    }\n    return { supported: true, rpId };\n  };\n\n  const ceremonyKey = (id: string, caller: string, type: CeremonyType): string => `${type}\\u0000${caller}\\u0000${id}`;\n  const ttlFor = (held: PendingChallenge): number =>\n    held.type === 'step-up' ? STEP_UP_CHALLENGE_TTL_MS : CEREMONY_TTL_MS;\n\n  const sweepPending = (): void => {\n    const at = now();\n    for (const [id, held] of pending) {\n      if (!challengeIsFresh(held.issuedAt, at, ttlFor(held))) pending.delete(id);\n    }\n  };\n\n  const remember = (type: CeremonyType, caller: string, challenge: string, action?: StepUpAction): string => {\n    sweepPending();\n    while (pending.size >= MAX_PENDING_CEREMONIES) {\n      const oldest = pending.keys().next().value as string | undefined;\n      if (oldest === undefined) break;\n      pending.delete(oldest);\n    }\n    let id: string;\n    do {\n      id = randomBytes(CEREMONY_ID_BYTES).toString('base64url');\n    } while (pending.has(ceremonyKey(id, caller, type)));\n    pending.set(ceremonyKey(id, caller, type), {\n      challenge,\n      issuedAt: now(),\n      caller,\n      type,\n      ...(action === undefined ? {} : { action }),\n    });\n    return id;\n  };\n\n  const take = (id: string, caller: string, type: CeremonyType, action?: StepUpAction): string | undefined => {\n    const key = ceremonyKey(id, caller, type);\n    const held = pending.get(key);\n    if (held === undefined) return undefined;\n    if (!challengeIsFresh(held.issuedAt, now(), ttlFor(held))) {\n      pending.delete(key);\n      return undefined;\n    }\n    if (held.caller !== caller || held.type !== type || held.action !== action) return undefined;\n    pending.delete(key);\n    return held.challenge;\n  };\n\n  return {\n    support,\n\n    async beginRegistration(caller, label) {\n      const ready = support();\n      if (!ready.supported) return undefined;\n      const options_ = await generateRegistrationOptions({\n        rpName: RP_NAME,\n        rpID: ready.rpId,\n        userID: userId,\n        userName: OWNER_NAME,\n        userDisplayName: label,\n        attestationType: 'none',\n        // Discoverable so a return visit is one gesture with nothing typed,\n        // and platform so the key lands in the phone's secure enclave rather\n        // than on a roaming key the user has to carry.\n        authenticatorSelection: {\n          residentKey: 'required',\n          userVerification: 'required',\n          authenticatorAttachment: 'platform',\n        },\n        excludeCredentials: options.credentials().map((credential) => ({ id: credential.credentialId })),\n      });\n      const ceremonyId = remember('registration', caller, options_.challenge);\n      return { ceremonyId, options: options_ as unknown as Record<string, unknown> };\n    },\n\n    async finishRegistration(ceremonyId, caller, response, label) {\n      const ready = support();\n      if (!ready.supported) return { ok: false, error: ready.reason };\n      const challenge = take(ceremonyId, caller, 'registration');\n      if (challenge === undefined) return { ok: false, error: 'That registration expired. Try again.' };\n      try {\n        const verification = await verifyRegistrationResponse({\n          response: response as Parameters<typeof verifyRegistrationResponse>[0]['response'],\n          expectedChallenge: challenge,\n          expectedOrigin: `https://${ready.rpId}`,\n          expectedRPID: ready.rpId,\n          requireUserVerification: true,\n        });\n        if (!verification.verified || verification.registrationInfo === undefined) {\n          return { ok: false, error: 'That passkey could not be verified.' };\n        }\n        const info = verification.registrationInfo;\n        const at = now();\n        const credential: StoredCredential = {\n          id: randomBytes(ID_BYTES).toString('hex'),\n          credentialId: info.credential.id,\n          publicKey: Buffer.from(info.credential.publicKey).toString('base64url'),\n          counter: info.credential.counter,\n          transports: info.credential.transports ?? [],\n          label,\n          createdAt: at,\n          lastUsedAt: at,\n        };\n        options.saveCredential(credential);\n        notice(`registered a passkey for ${label}`);\n        return { ok: true, id: credential.id };\n      } catch (error) {\n        return { ok: false, error: describe(error) };\n      }\n    },\n\n    async beginAuthentication(caller) {\n      const ready = support();\n      if (!ready.supported) return undefined;\n      const options_ = await generateAuthenticationOptions({\n        rpID: ready.rpId,\n        userVerification: 'required',\n      });\n      const ceremonyId = remember('authentication', caller, options_.challenge);\n      return { ceremonyId, options: options_ as unknown as Record<string, unknown> };\n    },\n\n    async finishAuthentication(ceremonyId, caller, response) {\n      const ready = support();\n      if (!ready.supported) return { ok: false, error: ready.reason };\n      const challenge = take(ceremonyId, caller, 'authentication');\n      if (challenge === undefined) return { ok: false, error: 'That sign-in expired. Try again.' };\n      return await verifyAgainst(challenge, ready.rpId, response);\n    },\n\n    async beginStepUp(caller, action) {\n      const ready = support();\n      if (!ready.supported) return undefined;\n      const options_ = await generateAuthenticationOptions({\n        rpID: ready.rpId,\n        userVerification: 'required',\n      });\n      const ceremonyId = remember('step-up', caller, options_.challenge, action);\n      return { ceremonyId, options: options_ as unknown as Record<string, unknown> };\n    },\n\n    async finishStepUp(ceremonyId, caller, action, response) {\n      const ready = support();\n      if (!ready.supported) return false;\n      const challenge = take(ceremonyId, caller, 'step-up', action);\n      if (challenge === undefined) return false;\n      return (await verifyAgainst(challenge, ready.rpId, response)).ok;\n    },\n\n    clearChallenges() {\n      pending.clear();\n    },\n  };\n\n  async function verifyAgainst(\n    challenge: string,\n    rpId: string,\n    response: unknown,\n  ): Promise<{ ok: true; credential: StoredCredential } | { ok: false; error: string }> {\n    const presented = (response as { id?: unknown }).id;\n    if (typeof presented !== 'string') return { ok: false, error: 'That response named no credential.' };\n    const stored = options.credentials().find((candidate) => candidate.credentialId === presented);\n    if (stored === undefined) return { ok: false, error: 'That passkey is not registered here.' };\n    try {\n      const verification = await verifyAuthenticationResponse({\n        response: response as Parameters<typeof verifyAuthenticationResponse>[0]['response'],\n        expectedChallenge: challenge,\n        expectedOrigin: `https://${rpId}`,\n        expectedRPID: rpId,\n        requireUserVerification: true,\n        credential: {\n          id: stored.credentialId,\n          publicKey: new Uint8Array(Buffer.from(stored.publicKey, 'base64url')),\n          counter: stored.counter,\n          transports: stored.transports as never,\n        },\n      });\n      if (!verification.verified) return { ok: false, error: 'That passkey did not verify.' };\n      const presentedCounter = verification.authenticationInfo.newCounter;\n      if (counterVerdict(stored.counter, presentedCounter) === 'clone-suspected') {\n        // Two things are signing with one key. The credential is burnt.\n        options.removeCredential(stored.id);\n        notice(`revoked passkey ${stored.label}: its signature counter went backwards, which means a clone`);\n        return { ok: false, error: 'That passkey looks cloned and has been revoked.' };\n      }\n      const updated: StoredCredential = { ...stored, counter: presentedCounter, lastUsedAt: now() };\n      options.saveCredential(updated);\n      return { ok: true, credential: updated };\n    } catch (error) {\n      return { ok: false, error: describe(error) };\n    }\n  }\n}\n"],"mappings":";;;;AAmBA,MAAM,WAAW;AACjB,MAAM,oBAAoB;AAC1B,MAAM,gBAAgB;AACtB,MAAM,yBAAyB;AAC/B,MAAM,UAAU;;AAEhB,MAAM,aAAa;AAmDnB,SAAS,SAAS,OAAwB;CACxC,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AAC9D;;;;;;;;;AAUA,SAAgB,eAAe,SAAoC;CACjE,MAAM,MAAM,QAAQ,cAAsB,KAAK,IAAI;CACnD,MAAM,SAAS,QAAQ,mBAAyB,CAAC;;CAEjD,MAAM,SAAS,YAAY,aAAa;CACxC,MAAM,0BAAU,IAAI,IAA8B;CAElD,MAAM,gBAAgC;EACpC,MAAM,SAAS,QAAQ,aAAa;EACpC,MAAM,OAAO,eAAe,MAAM;EAClC,IAAI,WAAW,KAAA,GAAW,OAAO;GAAE,WAAW;GAAO,QAAQ;EAA2B;EACxF,IAAI,SAAS,KAAA,GACX,OAAO;GACL,WAAW;GACX,QACE;EACJ;EAEF,OAAO;GAAE,WAAW;GAAM;EAAK;CACjC;CAEA,MAAM,eAAe,IAAY,QAAgB,SAA+B,GAAG,KAAK,QAAQ,OAAO,QAAQ;CAC/G,MAAM,UAAU,SACd,KAAK,SAAS,YAAY,2BAA2B;CAEvD,MAAM,qBAA2B;EAC/B,MAAM,KAAK,IAAI;EACf,KAAK,MAAM,CAAC,IAAI,SAAS,SACvB,IAAI,CAAC,iBAAiB,KAAK,UAAU,IAAI,OAAO,IAAI,CAAC,GAAG,QAAQ,OAAO,EAAE;CAE7E;CAEA,MAAM,YAAY,MAAoB,QAAgB,WAAmB,WAAkC;EACzG,aAAa;EACb,OAAO,QAAQ,QAAQ,wBAAwB;GAC7C,MAAM,SAAS,QAAQ,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC;GACrC,IAAI,WAAW,KAAA,GAAW;GAC1B,QAAQ,OAAO,MAAM;EACvB;EACA,IAAI;EACJ;GACE,KAAK,YAAY,iBAAiB,CAAC,CAAC,SAAS,WAAW;SACjD,QAAQ,IAAI,YAAY,IAAI,QAAQ,IAAI,CAAC;EAClD,QAAQ,IAAI,YAAY,IAAI,QAAQ,IAAI,GAAG;GACzC;GACA,UAAU,IAAI;GACd;GACA;GACA,GAAI,WAAW,KAAA,IAAY,CAAC,IAAI,EAAE,OAAO;EAC3C,CAAC;EACD,OAAO;CACT;CAEA,MAAM,QAAQ,IAAY,QAAgB,MAAoB,WAA8C;EAC1G,MAAM,MAAM,YAAY,IAAI,QAAQ,IAAI;EACxC,MAAM,OAAO,QAAQ,IAAI,GAAG;EAC5B,IAAI,SAAS,KAAA,GAAW,OAAO,KAAA;EAC/B,IAAI,CAAC,iBAAiB,KAAK,UAAU,IAAI,GAAG,OAAO,IAAI,CAAC,GAAG;GACzD,QAAQ,OAAO,GAAG;GAClB;EACF;EACA,IAAI,KAAK,WAAW,UAAU,KAAK,SAAS,QAAQ,KAAK,WAAW,QAAQ,OAAO,KAAA;EACnF,QAAQ,OAAO,GAAG;EAClB,OAAO,KAAK;CACd;CAEA,OAAO;EACL;EAEA,MAAM,kBAAkB,QAAQ,OAAO;GACrC,MAAM,QAAQ,QAAQ;GACtB,IAAI,CAAC,MAAM,WAAW,OAAO,KAAA;GAC7B,MAAM,WAAW,MAAM,4BAA4B;IACjD,QAAQ;IACR,MAAM,MAAM;IACZ,QAAQ;IACR,UAAU;IACV,iBAAiB;IACjB,iBAAiB;IAIjB,wBAAwB;KACtB,aAAa;KACb,kBAAkB;KAClB,yBAAyB;IAC3B;IACA,oBAAoB,QAAQ,YAAY,CAAC,CAAC,KAAK,gBAAgB,EAAE,IAAI,WAAW,aAAa,EAAE;GACjG,CAAC;GAED,OAAO;IAAE,YADU,SAAS,gBAAgB,QAAQ,SAAS,SAC3C;IAAG,SAAS;GAA+C;EAC/E;EAEA,MAAM,mBAAmB,YAAY,QAAQ,UAAU,OAAO;GAC5D,MAAM,QAAQ,QAAQ;GACtB,IAAI,CAAC,MAAM,WAAW,OAAO;IAAE,IAAI;IAAO,OAAO,MAAM;GAAO;GAC9D,MAAM,YAAY,KAAK,YAAY,QAAQ,cAAc;GACzD,IAAI,cAAc,KAAA,GAAW,OAAO;IAAE,IAAI;IAAO,OAAO;GAAwC;GAChG,IAAI;IACF,MAAM,eAAe,MAAM,2BAA2B;KAC1C;KACV,mBAAmB;KACnB,gBAAgB,WAAW,MAAM;KACjC,cAAc,MAAM;KACpB,yBAAyB;IAC3B,CAAC;IACD,IAAI,CAAC,aAAa,YAAY,aAAa,qBAAqB,KAAA,GAC9D,OAAO;KAAE,IAAI;KAAO,OAAO;IAAsC;IAEnE,MAAM,OAAO,aAAa;IAC1B,MAAM,KAAK,IAAI;IACf,MAAM,aAA+B;KACnC,IAAI,YAAY,QAAQ,CAAC,CAAC,SAAS,KAAK;KACxC,cAAc,KAAK,WAAW;KAC9B,WAAW,OAAO,KAAK,KAAK,WAAW,SAAS,CAAC,CAAC,SAAS,WAAW;KACtE,SAAS,KAAK,WAAW;KACzB,YAAY,KAAK,WAAW,cAAc,CAAC;KAC3C;KACA,WAAW;KACX,YAAY;IACd;IACA,QAAQ,eAAe,UAAU;IACjC,OAAO,4BAA4B,OAAO;IAC1C,OAAO;KAAE,IAAI;KAAM,IAAI,WAAW;IAAG;GACvC,SAAS,OAAO;IACd,OAAO;KAAE,IAAI;KAAO,OAAO,SAAS,KAAK;IAAE;GAC7C;EACF;EAEA,MAAM,oBAAoB,QAAQ;GAChC,MAAM,QAAQ,QAAQ;GACtB,IAAI,CAAC,MAAM,WAAW,OAAO,KAAA;GAC7B,MAAM,WAAW,MAAM,8BAA8B;IACnD,MAAM,MAAM;IACZ,kBAAkB;GACpB,CAAC;GAED,OAAO;IAAE,YADU,SAAS,kBAAkB,QAAQ,SAAS,SAC7C;IAAG,SAAS;GAA+C;EAC/E;EAEA,MAAM,qBAAqB,YAAY,QAAQ,UAAU;GACvD,MAAM,QAAQ,QAAQ;GACtB,IAAI,CAAC,MAAM,WAAW,OAAO;IAAE,IAAI;IAAO,OAAO,MAAM;GAAO;GAC9D,MAAM,YAAY,KAAK,YAAY,QAAQ,gBAAgB;GAC3D,IAAI,cAAc,KAAA,GAAW,OAAO;IAAE,IAAI;IAAO,OAAO;GAAmC;GAC3F,OAAO,MAAM,cAAc,WAAW,MAAM,MAAM,QAAQ;EAC5D;EAEA,MAAM,YAAY,QAAQ,QAAQ;GAChC,MAAM,QAAQ,QAAQ;GACtB,IAAI,CAAC,MAAM,WAAW,OAAO,KAAA;GAC7B,MAAM,WAAW,MAAM,8BAA8B;IACnD,MAAM,MAAM;IACZ,kBAAkB;GACpB,CAAC;GAED,OAAO;IAAE,YADU,SAAS,WAAW,QAAQ,SAAS,WAAW,MACjD;IAAG,SAAS;GAA+C;EAC/E;EAEA,MAAM,aAAa,YAAY,QAAQ,QAAQ,UAAU;GACvD,MAAM,QAAQ,QAAQ;GACtB,IAAI,CAAC,MAAM,WAAW,OAAO;GAC7B,MAAM,YAAY,KAAK,YAAY,QAAQ,WAAW,MAAM;GAC5D,IAAI,cAAc,KAAA,GAAW,OAAO;GACpC,QAAQ,MAAM,cAAc,WAAW,MAAM,MAAM,QAAQ,EAAA,CAAG;EAChE;EAEA,kBAAkB;GAChB,QAAQ,MAAM;EAChB;CACF;CAEA,eAAe,cACb,WACA,MACA,UACoF;EACpF,MAAM,YAAa,SAA8B;EACjD,IAAI,OAAO,cAAc,UAAU,OAAO;GAAE,IAAI;GAAO,OAAO;EAAqC;EACnG,MAAM,SAAS,QAAQ,YAAY,CAAC,CAAC,MAAM,cAAc,UAAU,iBAAiB,SAAS;EAC7F,IAAI,WAAW,KAAA,GAAW,OAAO;GAAE,IAAI;GAAO,OAAO;EAAuC;EAC5F,IAAI;GACF,MAAM,eAAe,MAAM,6BAA6B;IAC5C;IACV,mBAAmB;IACnB,gBAAgB,WAAW;IAC3B,cAAc;IACd,yBAAyB;IACzB,YAAY;KACV,IAAI,OAAO;KACX,WAAW,IAAI,WAAW,OAAO,KAAK,OAAO,WAAW,WAAW,CAAC;KACpE,SAAS,OAAO;KAChB,YAAY,OAAO;IACrB;GACF,CAAC;GACD,IAAI,CAAC,aAAa,UAAU,OAAO;IAAE,IAAI;IAAO,OAAO;GAA+B;GACtF,MAAM,mBAAmB,aAAa,mBAAmB;GACzD,IAAI,eAAe,OAAO,SAAS,gBAAgB,MAAM,mBAAmB;IAE1E,QAAQ,iBAAiB,OAAO,EAAE;IAClC,OAAO,mBAAmB,OAAO,MAAM,4DAA4D;IACnG,OAAO;KAAE,IAAI;KAAO,OAAO;IAAkD;GAC/E;GACA,MAAM,UAA4B;IAAE,GAAG;IAAQ,SAAS;IAAkB,YAAY,IAAI;GAAE;GAC5F,QAAQ,eAAe,OAAO;GAC9B,OAAO;IAAE,IAAI;IAAM,YAAY;GAAQ;EACzC,SAAS,OAAO;GACd,OAAO;IAAE,IAAI;IAAO,OAAO,SAAS,KAAK;GAAE;EAC7C;CACF;AACF"}