@bharper/atv-js 0.2.3

package/LICENSE.md

@@ -0,0 +1,21 @@
+The MIT License (MIT)
+
+Copyright (c) 2020 Pierre Ståhl
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,80 @@
+# atv-js
+
+Apple TV control library in TypeScript: mDNS discovery, AirPlay/Companion pairing, remote control, and keyboard input.
+
+**Important:** This repository is a partial conversion of the Python project `pyatv`. It is **not** a new, independent library. Only a required subset of `pyatv` functionality was converted, and that conversion was performed with LLM assistance.
+
+## Status
+
+- Partial port intended for specific internal use cases.
+- APIs and behavior follow `pyatv` as closely as practical, but coverage is incomplete.
+- Expect gaps versus `pyatv` and treat this as experimental.
+
+## Scope (current)
+
+- mDNS discovery of Apple TV devices
+- AirPlay pairing
+- Companion protocol pairing and pair-verify
+- Remote control key events
+- Keyboard input (text get/set, focus state)
+
+## Install
+
+```bash
+npm install
+```
+
+## Build
+
+```bash
+npm run build
+```
+
+## Examples
+
+Pairing:
+
+```bash
+npm run pair
+```
+
+Remote control:
+
+```bash
+npm run remote
+```
+
+Example sources:
+
+- `examples/pair.ts`
+- `examples/remote.ts`
+
+## Public API (summary)
+
+Exported from `src/index.ts`:
+
+- `scan(timeout?: number)`
+- `startAirPlayPairing(...)`, `finishAirPlayPairing(...)`
+- `startCompanionPairing(...)`, `finishCompanionPairing(...)`
+- `connect(...)`, `disconnect(...)`, `isConnected(...)`
+- `sendKey(...)`, `sendKeyDown(...)`, `sendKeyUp(...)`
+- `getKeyboardFocusState(...)`, `getText(...)`, `setText(...)`
+- `parseCredentials(...)`, `serializeCredentials(...)`
+
+For details, see `src/index.ts`.
+
+## Origin
+
+This codebase is derived from `pyatv` and intended to mirror a subset of its behavior in TypeScript. It should be treated as a **partial port** of `pyatv`, not a separate or competing implementation.
+
+## Attribution
+
+This project is not affiliated with or endorsed by the `pyatv` maintainers. If you need full Apple TV control functionality, stability, or upstream updates, use `pyatv` directly.
+
+Upstream project:
+
+- `pyatv` (https://pyatv.dev)
+
+## License
+
+This repository includes the MIT license from `pyatv` in `LICENSE.md`.

package/dist/airplay/auth.d.ts

@@ -0,0 +1,24 @@
+/**
+ * AirPlay HTTP-based HAP pair-setup and pair-verify.
+ * Port of pyatv/protocols/airplay/auth/hap.py.
+ */
+import { SRPAuthHandler } from '../pairing/srp';
+import { HapCredentials } from '../pairing/credentials';
+export interface AirPlayPairingSession {
+    srp: SRPAuthHandler;
+    host: string;
+    port: number;
+    atvSalt: Buffer;
+    atvPubKey: Buffer;
+}
+/**
+ * Start AirPlay pairing: triggers PIN display on the Apple TV.
+ * Returns a session object to pass to finishAirPlayPairing.
+ */
+export declare function startAirPlayPairing(host: string, port: number): Promise<AirPlayPairingSession>;
+/**
+ * Finish AirPlay pairing with the PIN shown on screen.
+ * Returns credentials for later connection.
+ */
+export declare function finishAirPlayPairing(session: AirPlayPairingSession, pin: string, displayName?: string): Promise<HapCredentials>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/airplay/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/airplay/auth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAkCxD,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,cAAc,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AA2DD;;;GAGG;AACH,wBAAsB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAyBpG;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,qBAAqB,EAC9B,GAAG,EAAE,MAAM,EACX,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,cAAc,CAAC,CA6DzB"}

package/dist/airplay/auth.js

@@ -0,0 +1,195 @@
+"use strict";
+/**
+ * AirPlay HTTP-based HAP pair-setup and pair-verify.
+ * Port of pyatv/protocols/airplay/auth/hap.py.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.startAirPlayPairing = startAirPlayPairing;
+exports.finishAirPlayPairing = finishAirPlayPairing;
+const http = __importStar(require("http"));
+const srp_1 = require("../pairing/srp");
+const tlv_1 = require("../pairing/tlv");
+const AIRPLAY_HEADERS = {
+    'User-Agent': 'AirPlay/320.20',
+    'Connection': 'keep-alive',
+    'X-Apple-HKP': '3',
+    'Content-Type': 'application/octet-stream',
+};
+async function httpPost(host, port, path, body, agent) {
+    return new Promise((resolve, reject) => {
+        const headers = { ...AIRPLAY_HEADERS };
+        if (body) {
+            headers['Content-Length'] = body.length;
+        }
+        const req = http.request({ hostname: host, port, path, method: 'POST', headers, agent }, (res) => {
+            const chunks = [];
+            res.on('data', (chunk) => chunks.push(chunk));
+            res.on('end', () => resolve(Buffer.concat(chunks)));
+        });
+        req.on('error', reject);
+        if (body)
+            req.write(body);
+        req.end();
+    });
+}
+const AIRPLAY_AGENT_IDLE_MS = 2 * 60 * 1000;
+const agentCache = new Map();
+function agentKey(host, port) {
+    return `${host}:${port}`;
+}
+function touchAgent(entry) {
+    entry.lastUsed = Date.now();
+    if (entry.timer)
+        clearTimeout(entry.timer);
+    entry.timer = setTimeout(() => {
+        if (Date.now() - entry.lastUsed >= AIRPLAY_AGENT_IDLE_MS) {
+            entry.agent.destroy();
+            // Find and remove by identity
+            for (const [key, value] of agentCache) {
+                if (value === entry) {
+                    agentCache.delete(key);
+                    break;
+                }
+            }
+        }
+    }, AIRPLAY_AGENT_IDLE_MS);
+    entry.timer.unref();
+}
+function getPairingAgent(host, port) {
+    const key = agentKey(host, port);
+    const existing = agentCache.get(key);
+    if (existing) {
+        touchAgent(existing);
+        return existing.agent;
+    }
+    const agent = new http.Agent({ keepAlive: true, maxSockets: 1, maxFreeSockets: 1 });
+    agent.on('free', (socket) => {
+        socket.unref();
+    });
+    const entry = {
+        agent,
+        lastUsed: Date.now(),
+        timer: setTimeout(() => {
+            agent.destroy();
+            agentCache.delete(key);
+        }, AIRPLAY_AGENT_IDLE_MS),
+    };
+    entry.timer.unref();
+    agentCache.set(key, entry);
+    return agent;
+}
+/**
+ * Start AirPlay pairing: triggers PIN display on the Apple TV.
+ * Returns a session object to pass to finishAirPlayPairing.
+ */
+async function startAirPlayPairing(host, port) {
+    const srp = new srp_1.SRPAuthHandler();
+    srp.initialize();
+    const agent = getPairingAgent(host, port);
+    // Trigger PIN display
+    await httpPost(host, port, '/pair-pin-start', undefined, agent);
+    // Send pair-setup SeqNo 1
+    const tlvData = (0, tlv_1.writeTlv)(new Map([
+        [tlv_1.TlvValue.Method, Buffer.from([0x00])],
+        [tlv_1.TlvValue.SeqNo, Buffer.from([0x01])],
+    ]));
+    const resp = await httpPost(host, port, '/pair-setup', tlvData, agent);
+    const pairingData = (0, tlv_1.readTlv)(resp);
+    const atvSalt = pairingData.get(tlv_1.TlvValue.Salt);
+    const atvPubKey = pairingData.get(tlv_1.TlvValue.PublicKey);
+    if (!atvSalt || !atvPubKey) {
+        throw new Error('Missing salt or public key in pair-setup response');
+    }
+    return { srp, host, port, atvSalt, atvPubKey };
+}
+/**
+ * Finish AirPlay pairing with the PIN shown on screen.
+ * Returns credentials for later connection.
+ */
+async function finishAirPlayPairing(session, pin, displayName) {
+    const { srp, host, port, atvSalt, atvPubKey } = session;
+    const agent = getPairingAgent(host, port);
+    console.log('[DEBUG] ATV Salt:', atvSalt.toString('hex'));
+    console.log('[DEBUG] ATV PubKey length:', atvPubKey.length);
+    console.log('[DEBUG] PIN:', pin);
+    // SRP step 1: set PIN
+    srp.step1(pin.trim());
+    // SRP step 2: compute proof
+    const [pubKey, proof] = srp.step2(atvPubKey, atvSalt);
+    console.log('[DEBUG] Client PubKey length:', pubKey.length);
+    console.log('[DEBUG] Client Proof length:', proof.length);
+    // Send pair-setup SeqNo 3
+    const seq3Data = (0, tlv_1.writeTlv)(new Map([
+        [tlv_1.TlvValue.SeqNo, Buffer.from([0x03])],
+        [tlv_1.TlvValue.PublicKey, pubKey],
+        [tlv_1.TlvValue.Proof, proof],
+    ]));
+    const seq3Resp = await httpPost(host, port, '/pair-setup', seq3Data, agent);
+    // Check for errors in SeqNo 3 response (wrong PIN, etc.)
+    const seq3Tlv = (0, tlv_1.readTlv)(seq3Resp);
+    console.log('[DEBUG] SeqNo 3 response TLV keys:', Array.from(seq3Tlv.keys()));
+    const errorCode = seq3Tlv.get(tlv_1.TlvValue.Error);
+    if (errorCode) {
+        const code = errorCode[0];
+        const errorMessages = {
+            1: 'Unknown error',
+            2: 'Authentication failed (wrong PIN?)',
+            3: 'Too many attempts, backoff required',
+            4: 'Unknown peer',
+            5: 'Max peers reached',
+            6: 'Max authentication attempts reached',
+        };
+        console.log('[DEBUG] Error code:', code);
+        console.log('[DEBUG] Full response hex:', seq3Resp.toString('hex'));
+        throw new Error(`Pairing failed: ${errorMessages[code] || `error code ${code}`}`);
+    }
+    // SRP step 3: sign and encrypt identity
+    const encrypted = srp.step3(displayName || undefined);
+    // Send pair-setup SeqNo 5
+    const seq5Data = (0, tlv_1.writeTlv)(new Map([
+        [tlv_1.TlvValue.SeqNo, Buffer.from([0x05])],
+        [tlv_1.TlvValue.EncryptedData, encrypted],
+    ]));
+    const resp = await httpPost(host, port, '/pair-setup', seq5Data, agent);
+    const pairingData = (0, tlv_1.readTlv)(resp);
+    const encryptedResponse = pairingData.get(tlv_1.TlvValue.EncryptedData);
+    if (!encryptedResponse) {
+        throw new Error('Missing encrypted data in pair-setup step 4 response');
+    }
+    // SRP step 4: decrypt and extract credentials
+    return srp.step4(encryptedResponse);
+}
+//# sourceMappingURL=auth.js.map

package/dist/airplay/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/airplay/auth.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2GH,kDAyBC;AAMD,oDAiEC;AAzMD,2CAA6B;AAC7B,wCAAgD;AAEhD,wCAA6D;AAE7D,MAAM,eAAe,GAA2B;IAC9C,YAAY,EAAE,gBAAgB;IAC9B,YAAY,EAAE,YAAY;IAC1B,aAAa,EAAE,GAAG;IAClB,cAAc,EAAE,0BAA0B;CAC3C,CAAC;AAEF,KAAK,UAAU,QAAQ,CACrB,IAAY,EACZ,IAAY,EACZ,IAAY,EACZ,IAAa,EACb,KAAkB;IAElB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,OAAO,GAAoC,EAAE,GAAG,eAAe,EAAE,CAAC;QACxE,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;QAC1C,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE,EAAE;YAC/F,MAAM,MAAM,GAAa,EAAE,CAAC;YAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YACtD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QACxB,IAAI,IAAI;YAAE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1B,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAUD,MAAM,qBAAqB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAQ5C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAsB,CAAC;AAEjD,SAAS,QAAQ,CAAC,IAAY,EAAE,IAAY;IAC1C,OAAO,GAAG,IAAI,IAAI,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,UAAU,CAAC,KAAiB;IACnC,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC5B,IAAI,KAAK,CAAC,KAAK;QAAE,YAAY,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3C,KAAK,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;QAC5B,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,QAAQ,IAAI,qBAAqB,EAAE,CAAC;YACzD,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;YACtB,8BAA8B;YAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,UAAU,EAAE,CAAC;gBACtC,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;oBACpB,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oBACvB,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC,EAAE,qBAAqB,CAAC,CAAC;IAC1B,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,IAAY;IACjD,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACjC,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,QAAQ,EAAE,CAAC;QACb,UAAU,CAAC,QAAQ,CAAC,CAAC;QACrB,OAAO,QAAQ,CAAC,KAAK,CAAC;IACxB,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC,CAAC;IACpF,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;QAC1B,MAAM,CAAC,KAAK,EAAE,CAAC;IACjB,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAe;QACxB,KAAK;QACL,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE;QACpB,KAAK,EAAE,UAAU,CAAC,GAAG,EAAE;YACrB,KAAK,CAAC,OAAO,EAAE,CAAC;YAChB,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC,EAAE,qBAAqB,CAAC;KAC1B,CAAC;IACF,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACpB,UAAU,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAC3B,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,mBAAmB,CAAC,IAAY,EAAE,IAAY;IAClE,MAAM,GAAG,GAAG,IAAI,oBAAc,EAAE,CAAC;IACjC,GAAG,CAAC,UAAU,EAAE,CAAC;IACjB,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAE1C,sBAAsB;IACtB,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAEhE,0BAA0B;IAC1B,MAAM,OAAO,GAAG,IAAA,cAAQ,EAAC,IAAI,GAAG,CAAiB;QAC/C,CAAC,cAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACtC,CAAC,cAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;KACtC,CAAC,CAAC,CAAC;IAEJ,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IACvE,MAAM,WAAW,GAAG,IAAA,aAAO,EAAC,IAAI,CAAC,CAAC;IAElC,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,cAAQ,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,cAAQ,CAAC,SAAS,CAAC,CAAC;IAEtD,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;AACjD,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,oBAAoB,CACxC,OAA8B,EAC9B,GAAW,EACX,WAAoB;IAEpB,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IACxD,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAE1C,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IAC5D,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC;IAEjC,sBAAsB;IACtB,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAEtB,4BAA4B;IAC5B,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5D,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAE1D,0BAA0B;IAC1B,MAAM,QAAQ,GAAG,IAAA,cAAQ,EAAC,IAAI,GAAG,CAAiB;QAChD,CAAC,cAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACrC,CAAC,cAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC5B,CAAC,cAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;KACxB,CAAC,CAAC,CAAC;IACJ,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAE5E,yDAAyD;IACzD,MAAM,OAAO,GAAG,IAAA,aAAO,EAAC,QAAQ,CAAC,CAAC;IAClC,OAAO,CAAC,GAAG,CAAC,oCAAoC,EAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC9E,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,cAAQ,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,aAAa,GAA2B;YAC5C,CAAC,EAAE,eAAe;YAClB,CAAC,EAAE,oCAAoC;YACvC,CAAC,EAAE,qCAAqC;YACxC,CAAC,EAAE,cAAc;YACjB,CAAC,EAAE,mBAAmB;YACtB,CAAC,EAAE,qCAAqC;SACzC,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,CAAC,CAAC;QACzC,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;QACpE,MAAM,IAAI,KAAK,CAAC,mBAAmB,aAAa,CAAC,IAAI,CAAC,IAAI,cAAc,IAAI,EAAE,EAAE,CAAC,CAAC;IACpF,CAAC;IAED,wCAAwC;IACxC,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,SAAS,CAAC,CAAC;IAEtD,0BAA0B;IAC1B,MAAM,QAAQ,GAAG,IAAA,cAAQ,EAAC,IAAI,GAAG,CAAiB;QAChD,CAAC,cAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACrC,CAAC,cAAQ,CAAC,aAAa,EAAE,SAAS,CAAC;KACpC,CAAC,CAAC,CAAC;IACJ,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACxE,MAAM,WAAW,GAAG,IAAA,aAAO,EAAC,IAAI,CAAC,CAAC;IAElC,MAAM,iBAAiB,GAAG,WAAW,CAAC,GAAG,CAAC,cAAQ,CAAC,aAAa,CAAC,CAAC;IAClE,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IAED,8CAA8C;IAC9C,OAAO,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;AACtC,CAAC"}

package/dist/bplist.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Minimal binary plist support for RTI (Remote Text Input) NSKeyedArchiver payloads.
+ * Uses bplist-creator for encoding and bplist-parser for decoding.
+ */
+/**
+ * Create an RTI "clear text" payload (NSKeyedArchiver encoded).
+ * Matches pyatv/protocols/companion/plist_payloads/rti_text_operations.py
+ */
+export declare function createRtiClearTextPayload(sessionUuid: Buffer): Buffer;
+/**
+ * Create an RTI "input text" payload (NSKeyedArchiver encoded).
+ */
+export declare function createRtiInputTextPayload(sessionUuid: Buffer, text: string): Buffer;
+/**
+ * Parse a binary plist buffer and extract properties by path.
+ * Matches pyatv/protocols/companion/keyed_archiver.py read_archive_properties().
+ */
+export declare function readArchiveProperties(archive: Buffer, ...paths: string[][]): (unknown | null)[];
+//# sourceMappingURL=bplist.d.ts.map

package/dist/bplist.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bplist.d.ts","sourceRoot":"","sources":["../src/bplist.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAeH;;;GAGG;AACH,wBAAgB,yBAAyB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAqCrE;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAqCnF;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,EAAE,CA4B/F"}

package/dist/bplist.js

@@ -0,0 +1,141 @@
+"use strict";
+/**
+ * Minimal binary plist support for RTI (Remote Text Input) NSKeyedArchiver payloads.
+ * Uses bplist-creator for encoding and bplist-parser for decoding.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createRtiClearTextPayload = createRtiClearTextPayload;
+exports.createRtiInputTextPayload = createRtiInputTextPayload;
+exports.readArchiveProperties = readArchiveProperties;
+// @ts-ignore - no type definitions
+const bplist_creator_1 = __importDefault(require("bplist-creator"));
+// @ts-ignore - no type definitions
+const bplist_parser_1 = __importDefault(require("bplist-parser"));
+/** UID reference type for NSKeyedArchiver plists. */
+class UID {
+    UID;
+    constructor(value) {
+        this.UID = value;
+    }
+}
+/**
+ * Create an RTI "clear text" payload (NSKeyedArchiver encoded).
+ * Matches pyatv/protocols/companion/plist_payloads/rti_text_operations.py
+ */
+function createRtiClearTextPayload(sessionUuid) {
+    return (0, bplist_creator_1.default)({
+        '$version': 100000,
+        '$archiver': 'RTIKeyedArchiver',
+        '$top': {
+            textOperations: new UID(1),
+        },
+        '$objects': [
+            '$null',
+            {
+                '$class': new UID(7),
+                targetSessionUUID: new UID(5),
+                keyboardOutput: new UID(2),
+                textToAssert: new UID(4),
+            },
+            {
+                '$class': new UID(3),
+            },
+            {
+                '$classname': 'TIKeyboardOutput',
+                '$classes': ['TIKeyboardOutput', 'NSObject'],
+            },
+            '', // empty text assertion = clear
+            {
+                'NS.uuidbytes': sessionUuid,
+                '$class': new UID(6),
+            },
+            {
+                '$classname': 'NSUUID',
+                '$classes': ['NSUUID', 'NSObject'],
+            },
+            {
+                '$classname': 'RTITextOperations',
+                '$classes': ['RTITextOperations', 'NSObject'],
+            },
+        ],
+    });
+}
+/**
+ * Create an RTI "input text" payload (NSKeyedArchiver encoded).
+ */
+function createRtiInputTextPayload(sessionUuid, text) {
+    return (0, bplist_creator_1.default)({
+        '$version': 100000,
+        '$archiver': 'RTIKeyedArchiver',
+        '$top': {
+            textOperations: new UID(1),
+        },
+        '$objects': [
+            '$null',
+            {
+                keyboardOutput: new UID(2),
+                '$class': new UID(7),
+                targetSessionUUID: new UID(5),
+            },
+            {
+                insertionText: new UID(3),
+                '$class': new UID(4),
+            },
+            text,
+            {
+                '$classname': 'TIKeyboardOutput',
+                '$classes': ['TIKeyboardOutput', 'NSObject'],
+            },
+            {
+                'NS.uuidbytes': sessionUuid,
+                '$class': new UID(6),
+            },
+            {
+                '$classname': 'NSUUID',
+                '$classes': ['NSUUID', 'NSObject'],
+            },
+            {
+                '$classname': 'RTITextOperations',
+                '$classes': ['RTITextOperations', 'NSObject'],
+            },
+        ],
+    });
+}
+/**
+ * Parse a binary plist buffer and extract properties by path.
+ * Matches pyatv/protocols/companion/keyed_archiver.py read_archive_properties().
+ */
+function readArchiveProperties(archive, ...paths) {
+    let parsed;
+    try {
+        parsed = bplist_parser_1.default.parseBuffer(archive);
+    }
+    catch {
+        return paths.map(() => null);
+    }
+    if (!parsed || !Array.isArray(parsed) || parsed.length < 1)
+        return paths.map(() => null);
+    const data = parsed[0];
+    const objects = data['$objects'];
+    const top = data['$top'];
+    return paths.map((path) => {
+        let element = top;
+        try {
+            for (const key of path) {
+                element = element[key];
+                // Resolve UID references
+                if (element && typeof element === 'object' && 'UID' in element) {
+                    element = objects[element.UID];
+                }
+            }
+            return element ?? null;
+        }
+        catch {
+            return null;
+        }
+    });
+}
+//# sourceMappingURL=bplist.js.map

package/dist/bplist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bplist.js","sourceRoot":"","sources":["../src/bplist.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;AAmBH,8DAqCC;AAKD,8DAqCC;AAMD,sDA4BC;AAlID,mCAAmC;AACnC,oEAA2C;AAC3C,mCAAmC;AACnC,kEAAyC;AAEzC,qDAAqD;AACrD,MAAM,GAAG;IACP,GAAG,CAAS;IACZ,YAAY,KAAa;QACvB,IAAI,CAAC,GAAG,GAAG,KAAK,CAAC;IACnB,CAAC;CACF;AAED;;;GAGG;AACH,SAAgB,yBAAyB,CAAC,WAAmB;IAC3D,OAAO,IAAA,wBAAa,EAAC;QACnB,UAAU,EAAE,MAAM;QAClB,WAAW,EAAE,kBAAkB;QAC/B,MAAM,EAAE;YACN,cAAc,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;SAC3B;QACD,UAAU,EAAE;YACV,OAAO;YACP;gBACE,QAAQ,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;gBACpB,iBAAiB,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;gBAC7B,cAAc,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;gBAC1B,YAAY,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;aACzB;YACD;gBACE,QAAQ,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;aACrB;YACD;gBACE,YAAY,EAAE,kBAAkB;gBAChC,UAAU,EAAE,CAAC,kBAAkB,EAAE,UAAU,CAAC;aAC7C;YACD,EAAE,EAAG,+BAA+B;YACpC;gBACE,cAAc,EAAE,WAAW;gBAC3B,QAAQ,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;aACrB;YACD;gBACE,YAAY,EAAE,QAAQ;gBACtB,UAAU,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC;aACnC;YACD;gBACE,YAAY,EAAE,mBAAmB;gBACjC,UAAU,EAAE,CAAC,mBAAmB,EAAE,UAAU,CAAC;aAC9C;SACF;KACF,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAgB,yBAAyB,CAAC,WAAmB,EAAE,IAAY;IACzE,OAAO,IAAA,wBAAa,EAAC;QACnB,UAAU,EAAE,MAAM;QAClB,WAAW,EAAE,kBAAkB;QAC/B,MAAM,EAAE;YACN,cAAc,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;SAC3B;QACD,UAAU,EAAE;YACV,OAAO;YACP;gBACE,cAAc,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;gBAC1B,QAAQ,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;gBACpB,iBAAiB,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;aAC9B;YACD;gBACE,aAAa,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;gBACzB,QAAQ,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;aACrB;YACD,IAAI;YACJ;gBACE,YAAY,EAAE,kBAAkB;gBAChC,UAAU,EAAE,CAAC,kBAAkB,EAAE,UAAU,CAAC;aAC7C;YACD;gBACE,cAAc,EAAE,WAAW;gBAC3B,QAAQ,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;aACrB;YACD;gBACE,YAAY,EAAE,QAAQ;gBACtB,UAAU,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC;aACnC;YACD;gBACE,YAAY,EAAE,mBAAmB;gBACjC,UAAU,EAAE,CAAC,mBAAmB,EAAE,UAAU,CAAC;aAC9C;SACF;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAgB,qBAAqB,CAAC,OAAe,EAAE,GAAG,KAAiB;IACzE,IAAI,MAAa,CAAC;IAClB,IAAI,CAAC;QACH,MAAM,GAAG,uBAAY,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAC/B,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IAEzF,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACvB,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAEzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACxB,IAAI,OAAO,GAAQ,GAAG,CAAC;QACvB,IAAI,CAAC;YACH,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACvB,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;gBACvB,yBAAyB;gBACzB,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,IAAI,OAAO,EAAE,CAAC;oBAC/D,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBACjC,CAAC;YACH,CAAC;YACD,OAAO,OAAO,IAAI,IAAI,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/companion/auth.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Companion protocol pair-setup and pair-verify procedures.
+ * Port of pyatv/protocols/companion/auth.py.
+ */
+import { SRPAuthHandler } from '../pairing/srp';
+import { HapCredentials } from '../pairing/credentials';
+import { CompanionProtocol } from './protocol';
+export declare const SRP_SALT = "";
+export declare const SRP_OUTPUT_INFO = "ClientEncrypt-main";
+export declare const SRP_INPUT_INFO = "ServerEncrypt-main";
+/**
+ * Perform Companion pair-setup (initial pairing that requires PIN).
+ */
+export declare class CompanionPairSetupProcedure {
+    private protocol;
+    private srp;
+    private atvSalt;
+    private atvPubKey;
+    constructor(protocol: CompanionProtocol, srp: SRPAuthHandler);
+    startPairing(): Promise<void>;
+    finishPairing(pin: string, displayName?: string): Promise<HapCredentials>;
+}
+/**
+ * Verify Companion credentials and derive encryption keys.
+ */
+export declare class CompanionPairVerifyProcedure {
+    private protocol;
+    private srp;
+    private credentials;
+    constructor(protocol: CompanionProtocol, srp: SRPAuthHandler, credentials: HapCredentials);
+    verifyCredentials(): Promise<boolean>;
+    encryptionKeys(): [Buffer, Buffer];
+}
+//# sourceMappingURL=auth.d.ts.map

package/dist/companion/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/companion/auth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAM/C,eAAO,MAAM,QAAQ,KAAK,CAAC;AAC3B,eAAO,MAAM,eAAe,uBAAuB,CAAC;AACpD,eAAO,MAAM,cAAc,uBAAuB,CAAC;AAcnD;;GAEG;AACH,qBAAa,2BAA2B;IACtC,OAAO,CAAC,QAAQ,CAAoB;IACpC,OAAO,CAAC,GAAG,CAAiB;IAC5B,OAAO,CAAC,OAAO,CAAuB;IACtC,OAAO,CAAC,SAAS,CAAuB;gBAE5B,QAAQ,EAAE,iBAAiB,EAAE,GAAG,EAAE,cAAc;IAKtD,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAiB7B,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;CAiChF;AAED;;GAEG;AACH,qBAAa,4BAA4B;IACvC,OAAO,CAAC,QAAQ,CAAoB;IACpC,OAAO,CAAC,GAAG,CAAiB;IAC5B,OAAO,CAAC,WAAW,CAAiB;gBAExB,QAAQ,EAAE,iBAAiB,EAAE,GAAG,EAAE,cAAc,EAAE,WAAW,EAAE,cAAc;IAMnF,iBAAiB,IAAI,OAAO,CAAC,OAAO,CAAC;IA2B3C,cAAc,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC;CAGnC"}

package/dist/companion/auth.js

@@ -0,0 +1,119 @@
+"use strict";
+/**
+ * Companion protocol pair-setup and pair-verify procedures.
+ * Port of pyatv/protocols/companion/auth.py.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CompanionPairVerifyProcedure = exports.CompanionPairSetupProcedure = exports.SRP_INPUT_INFO = exports.SRP_OUTPUT_INFO = exports.SRP_SALT = void 0;
+const tlv_1 = require("../pairing/tlv");
+const connection_1 = require("./connection");
+const PAIRING_DATA_KEY = '_pd';
+// Companion encryption key derivation constants
+exports.SRP_SALT = '';
+exports.SRP_OUTPUT_INFO = 'ClientEncrypt-main';
+exports.SRP_INPUT_INFO = 'ServerEncrypt-main';
+function getPairingData(message) {
+    const pd = message[PAIRING_DATA_KEY];
+    if (!pd || !Buffer.isBuffer(pd)) {
+        throw new Error('No pairing data in message or unexpected type');
+    }
+    const tlv = (0, tlv_1.readTlv)(pd);
+    if (tlv.has(tlv_1.TlvValue.Error)) {
+        throw new Error(`Pairing error: ${tlv.get(tlv_1.TlvValue.Error).toString('hex')}`);
+    }
+    return tlv;
+}
+/**
+ * Perform Companion pair-setup (initial pairing that requires PIN).
+ */
+class CompanionPairSetupProcedure {
+    protocol;
+    srp;
+    atvSalt = null;
+    atvPubKey = null;
+    constructor(protocol, srp) {
+        this.protocol = protocol;
+        this.srp = srp;
+    }
+    async startPairing() {
+        this.srp.initialize();
+        await this.protocol.start();
+        const resp = await this.protocol.exchangeAuth(connection_1.FrameType.PS_Start, {
+            [PAIRING_DATA_KEY]: (0, tlv_1.writeTlv)(new Map([
+                [tlv_1.TlvValue.Method, Buffer.from([0x00])],
+                [tlv_1.TlvValue.SeqNo, Buffer.from([0x01])],
+            ])),
+            _pwTy: 1,
+        });
+        const pairingData = getPairingData(resp);
+        this.atvSalt = pairingData.get(tlv_1.TlvValue.Salt);
+        this.atvPubKey = pairingData.get(tlv_1.TlvValue.PublicKey);
+    }
+    async finishPairing(pin, displayName) {
+        this.srp.step1(pin);
+        const [pubKey, proof] = this.srp.step2(this.atvPubKey, this.atvSalt);
+        // SeqNo 3: send proof
+        const resp3 = await this.protocol.exchangeAuth(connection_1.FrameType.PS_Next, {
+            [PAIRING_DATA_KEY]: (0, tlv_1.writeTlv)(new Map([
+                [tlv_1.TlvValue.SeqNo, Buffer.from([0x03])],
+                [tlv_1.TlvValue.PublicKey, pubKey],
+                [tlv_1.TlvValue.Proof, proof],
+            ])),
+            _pwTy: 1,
+        });
+        // Verify server proof is present
+        getPairingData(resp3);
+        // SeqNo 5: send encrypted identity
+        const encrypted = this.srp.step3(displayName);
+        const resp5 = await this.protocol.exchangeAuth(connection_1.FrameType.PS_Next, {
+            [PAIRING_DATA_KEY]: (0, tlv_1.writeTlv)(new Map([
+                [tlv_1.TlvValue.SeqNo, Buffer.from([0x05])],
+                [tlv_1.TlvValue.EncryptedData, encrypted],
+            ])),
+            _pwTy: 1,
+        });
+        const pairingData5 = getPairingData(resp5);
+        const encryptedData = pairingData5.get(tlv_1.TlvValue.EncryptedData);
+        return this.srp.step4(encryptedData);
+    }
+}
+exports.CompanionPairSetupProcedure = CompanionPairSetupProcedure;
+/**
+ * Verify Companion credentials and derive encryption keys.
+ */
+class CompanionPairVerifyProcedure {
+    protocol;
+    srp;
+    credentials;
+    constructor(protocol, srp, credentials) {
+        this.protocol = protocol;
+        this.srp = srp;
+        this.credentials = credentials;
+    }
+    async verifyCredentials() {
+        const [, publicKey] = this.srp.initialize();
+        const resp = await this.protocol.exchangeAuth(connection_1.FrameType.PV_Start, {
+            [PAIRING_DATA_KEY]: (0, tlv_1.writeTlv)(new Map([
+                [tlv_1.TlvValue.SeqNo, Buffer.from([0x01])],
+                [tlv_1.TlvValue.PublicKey, publicKey],
+            ])),
+            _auTy: 4,
+        });
+        const pairingData = getPairingData(resp);
+        const serverPubKey = pairingData.get(tlv_1.TlvValue.PublicKey);
+        const encrypted = pairingData.get(tlv_1.TlvValue.EncryptedData);
+        const encryptedData = this.srp.verify1(this.credentials, serverPubKey, encrypted);
+        await this.protocol.exchangeAuth(connection_1.FrameType.PV_Next, {
+            [PAIRING_DATA_KEY]: (0, tlv_1.writeTlv)(new Map([
+                [tlv_1.TlvValue.SeqNo, Buffer.from([0x03])],
+                [tlv_1.TlvValue.EncryptedData, encryptedData],
+            ])),
+        });
+        return true;
+    }
+    encryptionKeys() {
+        return this.srp.verify2(exports.SRP_SALT, exports.SRP_OUTPUT_INFO, exports.SRP_INPUT_INFO);
+    }
+}
+exports.CompanionPairVerifyProcedure = CompanionPairVerifyProcedure;
+//# sourceMappingURL=auth.js.map