@attest-it/core 0.6.0 → 0.7.0

package/dist/index.cjs

@@ -57,6 +57,7 @@ __export(crypto_exports, {
   generateKeyPair: () => generateKeyPair,
   getDefaultPrivateKeyPath: () => getDefaultPrivateKeyPath,
   getDefaultPublicKeyPath: () => getDefaultPublicKeyPath,
+  getDefaultYubiKeyEncryptedKeyPath: () => getDefaultYubiKeyEncryptedKeyPath,
   setKeyPermissions: () => setKeyPermissions,
   sign: () => sign,
   verify: () => verify
@@ -118,6 +119,14 @@ function getDefaultPrivateKeyPath() {
 function getDefaultPublicKeyPath() {
   return path2__namespace.join(process.cwd(), "attest-it-public.pem");
 }
+function getDefaultYubiKeyEncryptedKeyPath() {
+  const homeDir = os__namespace.homedir();
+  if (process.platform === "win32") {
+    const appData = process.env.APPDATA ?? path2__namespace.join(homeDir, "AppData", "Roaming");
+    return path2__namespace.join(appData, "attest-it", "yubikey-private.enc");
+  }
+  return path2__namespace.join(homeDir, ".config", "attest-it", "yubikey-private.enc");
+}
 async function ensureDir(dirPath) {
   try {
     await fs8__namespace.mkdir(dirPath, { recursive: true });
@@ -1519,7 +1528,7 @@ var OnePasswordKeyProvider = class _OnePasswordKeyProvider {
   }
   /**
    * List all 1Password accounts.
-   * @returns Array of account information
+   * @returns Array of account information including human-readable names
    */
   static async listAccounts() {
     try {
@@ -1528,7 +1537,27 @@ var OnePasswordKeyProvider = class _OnePasswordKeyProvider {
       if (!Array.isArray(parsed)) {
         return [];
       }
-      return parsed;
+      const basicAccounts = parsed;
+      const accountsWithNames = await Promise.all(
+        basicAccounts.map(async (account) => {
+          try {
+            const detailOutput = await execCommand("op", [
+              "account",
+              "get",
+              "--account",
+              account.email,
+              "--format=json"
+            ]);
+            const details = JSON.parse(detailOutput);
+            if (details !== null && typeof details === "object" && "name" in details && typeof details.name === "string") {
+              return { ...account, name: details.name };
+            }
+          } catch {
+          }
+          return account;
+        })
+      );
+      return accountsWithNames;
     } catch (error) {
       if (process.env.NODE_ENV !== "production") {
         console.error("Failed to list 1Password accounts:", error);
@@ -2093,6 +2122,56 @@ function saveLocalConfigSync(config, configPath) {
 function getActiveIdentity(config) {
   return config.identities[config.activeIdentity];
 }
+function getHomePublicKeysDir() {
+  if (homeDirOverride) {
+    return path2.join(homeDirOverride, "public-keys");
+  }
+  return path2.join(os.homedir(), ".attest-it", "public-keys");
+}
+function getProjectPublicKeysDir(projectRoot = process.cwd()) {
+  return path2.join(projectRoot, ".attest-it", "public-keys");
+}
+function hasProjectConfig(projectRoot = process.cwd()) {
+  const configDir = path2.join(projectRoot, ".attest-it");
+  const candidates = ["config.yaml", "config.yml", "config.json"];
+  return candidates.some((candidate) => fs.existsSync(path2.join(configDir, candidate)));
+}
+async function savePublicKey(slug, publicKey, projectRoot = process.cwd()) {
+  const result = {
+    homePath: ""
+  };
+  const homeDir = getHomePublicKeysDir();
+  await fs8.mkdir(homeDir, { recursive: true });
+  const homePath = path2.join(homeDir, `${slug}.pem`);
+  await fs8.writeFile(homePath, publicKey, "utf8");
+  result.homePath = homePath;
+  if (hasProjectConfig(projectRoot)) {
+    const projectDir = getProjectPublicKeysDir(projectRoot);
+    await fs8.mkdir(projectDir, { recursive: true });
+    const projectPath = path2.join(projectDir, `${slug}.pem`);
+    await fs8.writeFile(projectPath, publicKey, "utf8");
+    result.projectPath = projectPath;
+  }
+  return result;
+}
+function savePublicKeySync(slug, publicKey, projectRoot = process.cwd()) {
+  const result = {
+    homePath: ""
+  };
+  const homeDir = getHomePublicKeysDir();
+  fs.mkdirSync(homeDir, { recursive: true });
+  const homePath = path2.join(homeDir, `${slug}.pem`);
+  fs.writeFileSync(homePath, publicKey, "utf8");
+  result.homePath = homePath;
+  if (hasProjectConfig(projectRoot)) {
+    const projectDir = getProjectPublicKeysDir(projectRoot);
+    fs.mkdirSync(projectDir, { recursive: true });
+    const projectPath = path2.join(projectDir, `${slug}.pem`);
+    fs.writeFileSync(projectPath, publicKey, "utf8");
+    result.projectPath = projectPath;
+  }
+  return result;
+}
 
 // src/key-provider/yubikey-provider.ts
 var EncryptedKeyFileSchema = zod.z.object({
@@ -3048,11 +3127,15 @@ exports.getAttestItHomeDir = getAttestItHomeDir;
 exports.getAuthorizedSignersForGate = getAuthorizedSignersForGate;
 exports.getDefaultPrivateKeyPath = getDefaultPrivateKeyPath;
 exports.getDefaultPublicKeyPath = getDefaultPublicKeyPath;
+exports.getDefaultYubiKeyEncryptedKeyPath = getDefaultYubiKeyEncryptedKeyPath;
 exports.getGate = getGate;
+exports.getHomePublicKeysDir = getHomePublicKeysDir;
 exports.getLocalConfigPath = getLocalConfigPath;
 exports.getPreference = getPreference;
 exports.getPreferencesPath = getPreferencesPath;
+exports.getProjectPublicKeysDir = getProjectPublicKeysDir;
 exports.getPublicKeyFromPrivate = getPublicKeyFromPrivate;
+exports.hasProjectConfig = hasProjectConfig;
 exports.isAuthorizedSigner = isAuthorizedSigner;
 exports.listPackageFiles = listPackageFiles;
 exports.loadConfig = loadConfig;
@@ -3076,6 +3159,8 @@ exports.resolveConfigPaths = resolveConfigPaths;
 exports.saveLocalConfig = saveLocalConfig;
 exports.saveLocalConfigSync = saveLocalConfigSync;
 exports.savePreferences = savePreferences;
+exports.savePublicKey = savePublicKey;
+exports.savePublicKeySync = savePublicKeySync;
 exports.setAttestItHomeDir = setAttestItHomeDir;
 exports.setKeyPermissions = setKeyPermissions;
 exports.setPreference = setPreference;