@bitboxswiss/bitbox-api 0.1.0 → 0.1.1

package/dist/internal/noise.js

@@ -0,0 +1,270 @@
+// SPDX-License-Identifier: Apache-2.0
+import { x25519 } from '@noble/curves/ed25519';
+import { chacha20poly1305 } from '@noble/ciphers/chacha';
+import { sha256 } from '@noble/hashes/sha256';
+import { hkdf } from '@noble/hashes/hkdf';
+import { concatBytes, utf8ToBytes } from './utils.js';
+const PROTOCOL_NAME = 'Noise_XX_25519_ChaChaPoly_SHA256';
+const PROTOCOL_NAME_BYTES = utf8ToBytes(PROTOCOL_NAME);
+const DHLEN = 32;
+const HASHLEN = 32;
+const TAGLEN = 16;
+const EMPTY = new Uint8Array(0);
+const XX_PATTERNS = [
+    ['e'],
+    ['e', 'ee', 's', 'es'],
+    ['s', 'se'],
+];
+/** @internal */
+export class NoiseProtocolError extends Error {
+    code = 'noise';
+    constructor(message) {
+        super(message);
+    }
+}
+function noiseError(message) {
+    return new NoiseProtocolError(message);
+}
+function keyPairFromPrivateKey(privateKey) {
+    try {
+        return { privateKey, publicKey: x25519.getPublicKey(privateKey) };
+    }
+    catch {
+        throw noiseError('invalid Noise private key');
+    }
+}
+function dh(local, remotePub) {
+    try {
+        return x25519.getSharedSecret(local.privateKey, remotePub);
+    }
+    catch {
+        throw noiseError('Noise DH failed');
+    }
+}
+function nonce96(n) {
+    const buf = new Uint8Array(12);
+    new DataView(buf.buffer).setBigUint64(4, n, true);
+    return buf;
+}
+function noiseHkdf2(ck, ikm) {
+    const out = hkdf(sha256, ikm, ck, EMPTY, HASHLEN * 2);
+    return [out.slice(0, HASHLEN), out.slice(HASHLEN, HASHLEN * 2)];
+}
+/**
+ * Post-handshake AEAD state. Tracks a 64-bit nonce counter per direction;
+ * empty `k` means the cipher is uninitialized (early-handshake state, before
+ * the first `MixKey`).
+ * @internal
+ */
+export class CipherState {
+    k;
+    n = 0n;
+    constructor(k) {
+        if (k !== undefined) {
+            this.k = k;
+        }
+    }
+    hasKey() {
+        return this.k !== undefined;
+    }
+    encryptWithAd(ad, plaintext) {
+        if (this.k === undefined) {
+            return plaintext;
+        }
+        let ct;
+        try {
+            ct = chacha20poly1305(this.k, nonce96(this.n), ad).encrypt(plaintext);
+        }
+        catch {
+            throw noiseError('noise encryption failed');
+        }
+        this.n += 1n;
+        return ct;
+    }
+    decryptWithAd(ad, ciphertext) {
+        if (this.k === undefined) {
+            return ciphertext;
+        }
+        let pt;
+        try {
+            pt = chacha20poly1305(this.k, nonce96(this.n), ad).decrypt(ciphertext);
+        }
+        catch {
+            throw noiseError('noise decryption failed');
+        }
+        this.n += 1n;
+        return pt;
+    }
+}
+class SymmetricState {
+    ck;
+    h;
+    cipher;
+    constructor() {
+        this.h = new Uint8Array(HASHLEN);
+        this.h.set(PROTOCOL_NAME_BYTES);
+        this.ck = new Uint8Array(this.h);
+        this.cipher = new CipherState();
+    }
+    hasCipherKey() {
+        return this.cipher.hasKey();
+    }
+    mixHash(data) {
+        this.h = sha256(concatBytes(this.h, data));
+    }
+    mixKey(ikm) {
+        const [newCk, newK] = noiseHkdf2(this.ck, ikm);
+        this.ck = newCk;
+        this.cipher = new CipherState(newK);
+    }
+    encryptAndHash(plaintext) {
+        const ct = this.cipher.encryptWithAd(this.h, plaintext);
+        this.mixHash(ct);
+        return ct;
+    }
+    decryptAndHash(ct) {
+        const pt = this.cipher.decryptWithAd(this.h, ct);
+        this.mixHash(ct);
+        return pt;
+    }
+    split() {
+        const [k1, k2] = noiseHkdf2(this.ck, EMPTY);
+        return [new CipherState(k1), new CipherState(k2)];
+    }
+}
+/**
+ * `Noise_XX_25519_ChaChaPoly_SHA256` handshake state. The class supports both
+ * initiator and responder roles so the same code can drive production
+ * handshakes (initiator) and unit-test peer simulation (responder).
+ * @internal
+ */
+export class NoiseXX {
+    initiator;
+    s;
+    e;
+    re;
+    rs;
+    symmetric = new SymmetricState();
+    patternIndex = 0;
+    fixedEphemeralPrivateKey;
+    constructor(initiator, staticPrivateKey, options) {
+        this.initiator = initiator;
+        this.s = keyPairFromPrivateKey(staticPrivateKey);
+        this.symmetric.mixHash(PROTOCOL_NAME_BYTES);
+        if (options?.fixedEphemeralPrivateKey !== undefined) {
+            this.fixedEphemeralPrivateKey = options.fixedEphemeralPrivateKey;
+        }
+    }
+    /** Compose the next outgoing handshake message; payload is empty. */
+    writeMessage() {
+        const tokens = XX_PATTERNS[this.patternIndex];
+        if (tokens === undefined) {
+            throw new Error('handshake already complete');
+        }
+        const isOurTurn = (this.patternIndex % 2 === 0) === this.initiator;
+        if (!isOurTurn) {
+            throw new Error('not the local peer turn to write');
+        }
+        let buf = EMPTY;
+        for (const tok of tokens) {
+            if (tok === 'e') {
+                const sk = this.fixedEphemeralPrivateKey ?? x25519.utils.randomPrivateKey();
+                this.e = keyPairFromPrivateKey(sk);
+                buf = concatBytes(buf, this.e.publicKey);
+                this.symmetric.mixHash(this.e.publicKey);
+            }
+            else if (tok === 's') {
+                buf = concatBytes(buf, this.symmetric.encryptAndHash(this.s.publicKey));
+            }
+            else {
+                this.symmetric.mixKey(this.tokenDh(tok));
+            }
+        }
+        buf = concatBytes(buf, this.symmetric.encryptAndHash(EMPTY));
+        this.patternIndex += 1;
+        return buf;
+    }
+    /** Process an incoming handshake message; payload is expected empty. */
+    readMessage(message) {
+        const tokens = XX_PATTERNS[this.patternIndex];
+        if (tokens === undefined) {
+            throw new Error('handshake already complete');
+        }
+        const isOurTurn = (this.patternIndex % 2 === 0) === this.initiator;
+        if (isOurTurn) {
+            throw new Error('not the local peer turn to read');
+        }
+        let cursor = 0;
+        for (const tok of tokens) {
+            if (tok === 'e') {
+                if (message.length - cursor < DHLEN) {
+                    throw noiseError('handshake message truncated at remote ephemeral key');
+                }
+                this.re = message.slice(cursor, cursor + DHLEN);
+                cursor += DHLEN;
+                this.symmetric.mixHash(this.re);
+            }
+            else if (tok === 's') {
+                const len = this.symmetric.hasCipherKey() ? DHLEN + TAGLEN : DHLEN;
+                if (message.length - cursor < len) {
+                    throw noiseError('handshake message truncated at remote static key');
+                }
+                const slice = message.slice(cursor, cursor + len);
+                cursor += len;
+                this.rs = this.symmetric.decryptAndHash(slice);
+            }
+            else {
+                this.symmetric.mixKey(this.tokenDh(tok));
+            }
+        }
+        this.symmetric.decryptAndHash(message.slice(cursor));
+        this.patternIndex += 1;
+    }
+    isComplete() {
+        return this.patternIndex >= XX_PATTERNS.length;
+    }
+    finalize() {
+        if (!this.isComplete()) {
+            throw new Error('handshake not complete');
+        }
+        if (this.rs === undefined) {
+            throw new Error('remote static key was not received');
+        }
+        const [c1, c2] = this.symmetric.split();
+        return {
+            hash: this.symmetric.h,
+            remoteStaticPubkey: this.rs,
+            send: this.initiator ? c1 : c2,
+            recv: this.initiator ? c2 : c1,
+        };
+    }
+    tokenDh(token) {
+        if (token === 'ee') {
+            return dh(this.e, this.re);
+        }
+        if (token === 'ss') {
+            return dh(this.s, this.rs);
+        }
+        if (token === 'es') {
+            return this.initiator ? dh(this.e, this.rs) : dh(this.s, this.re);
+        }
+        if (token === 'se') {
+            return this.initiator ? dh(this.s, this.re) : dh(this.e, this.rs);
+        }
+        throw new Error(`unsupported handshake token: ${token}`);
+    }
+}
+/** Generate a new x25519 static keypair private key (32 bytes). @internal */
+export function generateStaticPrivateKey() {
+    return x25519.utils.randomPrivateKey();
+}
+/** Derive the public key for an x25519 private key. @internal */
+export function publicKeyFromPrivateKey(privateKey) {
+    try {
+        return x25519.getPublicKey(privateKey);
+    }
+    catch {
+        throw noiseError('invalid Noise private key');
+    }
+}
+//# sourceMappingURL=noise.js.map

package/dist/internal/noise.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"noise.js","sourceRoot":"","sources":["../../src/internal/noise.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEtD,MAAM,aAAa,GAAG,kCAAkC,CAAC;AACzD,MAAM,mBAAmB,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;AAEvD,MAAM,KAAK,GAAG,EAAE,CAAC;AACjB,MAAM,OAAO,GAAG,EAAE,CAAC;AACnB,MAAM,MAAM,GAAG,EAAE,CAAC;AAClB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;AAEhC,MAAM,WAAW,GAAyC;IACxD,CAAC,GAAG,CAAC;IACL,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC;IACtB,CAAC,GAAG,EAAE,IAAI,CAAC;CACZ,CAAC;AAOF,gBAAgB;AAChB,MAAM,OAAO,kBAAmB,SAAQ,KAAK;IAClC,IAAI,GAAG,OAAO,CAAC;IACxB,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;IACjB,CAAC;CACF;AAED,SAAS,UAAU,CAAC,OAAe;IACjC,OAAO,IAAI,kBAAkB,CAAC,OAAO,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,qBAAqB,CAAC,UAAsB;IACnD,IAAI,CAAC;QACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,UAAU,CAAC,2BAA2B,CAAC,CAAC;IAChD,CAAC;AACH,CAAC;AAED,SAAS,EAAE,CAAC,KAAc,EAAE,SAAqB;IAC/C,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,UAAU,CAAC,iBAAiB,CAAC,CAAC;IACtC,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,CAAS;IACxB,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAC/B,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IAClD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,UAAU,CAAC,EAAc,EAAE,GAAe;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,WAAW;IACd,CAAC,CAAyB;IAC1B,CAAC,GAAW,EAAE,CAAC;IAEvB,YAAY,CAAc;QACxB,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACpB,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACb,CAAC;IACH,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,CAAC,KAAK,SAAS,CAAC;IAC9B,CAAC;IAED,aAAa,CAAC,EAAc,EAAE,SAAqB;QACjD,IAAI,IAAI,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,EAAc,CAAC;QACnB,IAAI,CAAC;YACH,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,UAAU,CAAC,yBAAyB,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACb,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,aAAa,CAAC,EAAc,EAAE,UAAsB;QAClD,IAAI,IAAI,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,IAAI,EAAc,CAAC;QACnB,IAAI,CAAC;YACH,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACzE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,UAAU,CAAC,yBAAyB,CAAC,CAAC;QAC9C,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACb,OAAO,EAAE,CAAC;IACZ,CAAC;CACF;AAED,MAAM,cAAc;IAClB,EAAE,CAAa;IACf,CAAC,CAAa;IACd,MAAM,CAAc;IAEpB;QACE,IAAI,CAAC,CAAC,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC;QACjC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;QAChC,IAAI,CAAC,EAAE,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;IAC9B,CAAC;IAED,OAAO,CAAC,IAAgB;QACtB,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,CAAC,GAAe;QACpB,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAC,EAAE,GAAG,KAAK,CAAC;QAChB,IAAI,CAAC,MAAM,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,cAAc,CAAC,SAAqB;QAClC,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACxD,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,cAAc,CAAC,EAAc;QAC3B,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,KAAK;QACH,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC5C,OAAO,CAAC,IAAI,WAAW,CAAC,EAAE,CAAC,EAAE,IAAI,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC;IACpD,CAAC;CACF;AAgBD;;;;;GAKG;AACH,MAAM,OAAO,OAAO;IACD,SAAS,CAAU;IACnB,CAAC,CAAU;IACpB,CAAC,CAAsB;IACvB,EAAE,CAAyB;IAC3B,EAAE,CAAyB;IAClB,SAAS,GAAG,IAAI,cAAc,EAAE,CAAC;IAC1C,YAAY,GAAG,CAAC,CAAC;IACR,wBAAwB,CAAc;IAEvD,YAAY,SAAkB,EAAE,gBAA4B,EAAE,OAAwB;QACpF,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,CAAC,GAAG,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;QACjD,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QAC5C,IAAI,OAAO,EAAE,wBAAwB,KAAK,SAAS,EAAE,CAAC;YACpD,IAAI,CAAC,wBAAwB,GAAG,OAAO,CAAC,wBAAwB,CAAC;QACnE,CAAC;IACH,CAAC;IAED,qEAAqE;IACrE,YAAY;QACV,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC9C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC;QACnE,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QAED,IAAI,GAAG,GAAe,KAAK,CAAC;QAC5B,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YACzB,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;gBAChB,MAAM,EAAE,GAAG,IAAI,CAAC,wBAAwB,IAAI,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;gBAC5E,IAAI,CAAC,CAAC,GAAG,qBAAqB,CAAC,EAAE,CAAC,CAAC;gBACnC,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;gBACzC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;YAC3C,CAAC;iBAAM,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;gBACvB,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;YAC1E,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QACD,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC;QACvB,OAAO,GAAG,CAAC;IACb,CAAC;IAED,wEAAwE;IACxE,WAAW,CAAC,OAAmB;QAC7B,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC9C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAChD,CAAC;QACD,MAAM,SAAS,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,KAAK,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC;QACnE,IAAI,SAAS,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QAED,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;YACzB,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;gBAChB,IAAI,OAAO,CAAC,MAAM,GAAG,MAAM,GAAG,KAAK,EAAE,CAAC;oBACpC,MAAM,UAAU,CAAC,qDAAqD,CAAC,CAAC;gBAC1E,CAAC;gBACD,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,CAAC;gBAChD,MAAM,IAAI,KAAK,CAAC;gBAChB,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAClC,CAAC;iBAAM,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;gBACvB,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;gBACnE,IAAI,OAAO,CAAC,MAAM,GAAG,MAAM,GAAG,GAAG,EAAE,CAAC;oBAClC,MAAM,UAAU,CAAC,kDAAkD,CAAC,CAAC;gBACvE,CAAC;gBACD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,GAAG,CAAC,CAAC;gBAClD,MAAM,IAAI,GAAG,CAAC;gBACd,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;YACjD,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QACD,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC;IACzB,CAAC;IAED,UAAU;QACR,OAAO,IAAI,CAAC,YAAY,IAAI,WAAW,CAAC,MAAM,CAAC;IACjD,CAAC;IAED,QAAQ;QACN,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,IAAI,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACxC,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,kBAAkB,EAAE,IAAI,CAAC,EAAE;YAC3B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;YAC9B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE;SAC/B,CAAC;IACJ,CAAC;IAEO,OAAO,CAAC,KAAa;QAC3B,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,OAAO,EAAE,CAAC,IAAI,CAAC,CAAE,EAAE,IAAI,CAAC,EAAG,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,OAAO,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,EAAG,CAAC,CAAC;QAC9B,CAAC;QACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAE,EAAE,IAAI,CAAC,EAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,EAAG,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,EAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAE,EAAE,IAAI,CAAC,EAAG,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,gCAAgC,KAAK,EAAE,CAAC,CAAC;IAC3D,CAAC;CACF;AAED,6EAA6E;AAC7E,MAAM,UAAU,wBAAwB;IACtC,OAAO,MAAM,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC;AACzC,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,uBAAuB,CAAC,UAAsB;IAC5D,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,UAAU,CAAC,2BAA2B,CAAC,CAAC;IAChD,CAAC;AACH,CAAC"}

package/dist/internal/pairing.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=pairing.d.ts.map

package/dist/internal/pairing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairing.d.ts","sourceRoot":"","sources":["../../src/internal/pairing.ts"],"names":[],"mappings":""}

package/dist/internal/pairing.js

@@ -0,0 +1,130 @@
+// SPDX-License-Identifier: Apache-2.0
+import { NoiseXX, generateStaticPrivateKey, } from './noise.js';
+import { addDeviceStaticPubkey, containsDeviceStaticPubkey, } from './noise-config.js';
+import { CODE_UNEXPECTED_RESPONSE, makeError } from './errors.js';
+const OP_UNLOCK = 0x75; // 'u'
+const OP_I_CAN_HAS_HANDSHAEK = 0x68; // 'h'
+const OP_HER_COMEZ_TEH_HANDSHAEK = 0x48; // 'H'
+const OP_I_CAN_HAS_PAIRIN_VERIFICASHUN = 0x76; // 'v'
+const OP_NOISE_MSG = 0x6e; // 'n'
+const RESPONSE_SUCCESS = 0x00;
+const DEVICE_PAIRING_REQUIRED = 0x01;
+const EMPTY = new Uint8Array(0);
+/** @internal */
+export class NoiseError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+    }
+}
+const RFC4648_ALPHABET = 'ABCDEFGHIJKLMNOPQRSTUVWXYZ234567';
+function base32Encode(bytes) {
+    let bits = 0;
+    let value = 0;
+    let out = '';
+    for (const b of bytes) {
+        value = (value << 8) | b;
+        bits += 8;
+        while (bits >= 5) {
+            bits -= 5;
+            out += RFC4648_ALPHABET[(value >> bits) & 0x1f];
+        }
+    }
+    if (bits > 0) {
+        out += RFC4648_ALPHABET[(value << (5 - bits)) & 0x1f];
+    }
+    return out;
+}
+/** @internal */
+export function formatPairingCode(handshakeHash) {
+    const encoded = base32Encode(handshakeHash);
+    return `${encoded.slice(0, 5)} ${encoded.slice(5, 10)}\n${encoded.slice(10, 15)} ${encoded.slice(15, 20)}`;
+}
+async function handshakeQuery(hww, message) {
+    const framed = new Uint8Array(message.length + 1);
+    framed[0] = OP_HER_COMEZ_TEH_HANDSHAEK;
+    framed.set(message, 1);
+    const response = await hww.query(framed);
+    if (response.length < 1 || response[0] !== RESPONSE_SUCCESS) {
+        throw new NoiseError('noise', 'handshake response was not RESPONSE_SUCCESS');
+    }
+    return response.slice(1);
+}
+/**
+ * Drives `OP_UNLOCK`, `OP_I_CAN_HAS_HANDSHAEK`, and the three Noise XX message
+ * exchanges. Returns the in-flight pairing state — caller decides whether to
+ * surface a pairing code to the user before completing pairing.
+ * @internal
+ */
+export async function performHandshake(hww, config) {
+    await hww.query(new Uint8Array([OP_UNLOCK]));
+    let configData = config.read();
+    let appStaticPrivkey;
+    if (configData.appStaticPrivkey !== undefined) {
+        appStaticPrivkey = configData.appStaticPrivkey;
+    }
+    else {
+        appStaticPrivkey = generateStaticPrivateKey();
+        configData = {
+            appStaticPrivkey,
+            deviceStaticPubkeys: configData.deviceStaticPubkeys,
+        };
+        config.store(configData);
+    }
+    const handshakeStart = await hww.query(new Uint8Array([OP_I_CAN_HAS_HANDSHAEK]));
+    if (handshakeStart.length !== 1 || handshakeStart[0] !== RESPONSE_SUCCESS) {
+        throw new NoiseError('noise', 'device did not accept handshake start');
+    }
+    const xx = new NoiseXX(true, appStaticPrivkey);
+    const m1 = xx.writeMessage();
+    const m2 = await handshakeQuery(hww, m1);
+    xx.readMessage(m2);
+    const m3 = xx.writeMessage();
+    const finishResponse = await handshakeQuery(hww, m3);
+    const finalState = xx.finalize();
+    const cached = config.read();
+    const appWantsVerification = !containsDeviceStaticPubkey(cached, finalState.remoteStaticPubkey);
+    const deviceWantsVerification = finishResponse.length === 1 && finishResponse[0] === DEVICE_PAIRING_REQUIRED;
+    const pairingCode = appWantsVerification || deviceWantsVerification
+        ? formatPairingCode(finalState.hash)
+        : undefined;
+    return { hww, config, finalState, pairingCode };
+}
+/**
+ * Completes pairing: if a pairing code was shown the host issues
+ * `OP_I_CAN_HAS_PAIRIN_VERIFICASHUN` and persists the device's static pubkey on
+ * confirmation. Returns an encrypted-channel adapter for subsequent queries.
+ * @internal
+ */
+export async function completePairing(state) {
+    if (state.pairingCode !== undefined) {
+        const verify = await state.hww.query(new Uint8Array([OP_I_CAN_HAS_PAIRIN_VERIFICASHUN]));
+        if (verify.length !== 1 || verify[0] !== RESPONSE_SUCCESS) {
+            throw new NoiseError('pairing-rejected', 'pairing code rejected by user');
+        }
+        const cached = state.config.read();
+        const updated = addDeviceStaticPubkey(cached, state.finalState.remoteStaticPubkey);
+        if (updated !== cached) {
+            state.config.store(updated);
+        }
+    }
+    return makeEncryptedChannel(state.hww, state.finalState.send, state.finalState.recv);
+}
+/** @internal */
+export function makeEncryptedChannel(hww, send, recv) {
+    return {
+        async query(plaintext) {
+            const ciphertext = send.encryptWithAd(EMPTY, plaintext);
+            const framed = new Uint8Array(ciphertext.length + 1);
+            framed[0] = OP_NOISE_MSG;
+            framed.set(ciphertext, 1);
+            const response = await hww.query(framed);
+            if (response.length < 1 || response[0] !== RESPONSE_SUCCESS) {
+                throw makeError(CODE_UNEXPECTED_RESPONSE, 'BitBox returned an unexpected response');
+            }
+            return recv.decryptWithAd(EMPTY, response.slice(1));
+        },
+    };
+}
+//# sourceMappingURL=pairing.js.map

package/dist/internal/pairing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairing.js","sourceRoot":"","sources":["../../src/internal/pairing.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAGtC,OAAO,EAEL,OAAO,EACP,wBAAwB,GAEzB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,qBAAqB,EACrB,0BAA0B,GAE3B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,wBAAwB,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAalE,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,MAAM;AAC9B,MAAM,sBAAsB,GAAG,IAAI,CAAC,CAAC,MAAM;AAC3C,MAAM,0BAA0B,GAAG,IAAI,CAAC,CAAC,MAAM;AAC/C,MAAM,gCAAgC,GAAG,IAAI,CAAC,CAAC,MAAM;AACrD,MAAM,YAAY,GAAG,IAAI,CAAC,CAAC,MAAM;AAEjC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,uBAAuB,GAAG,IAAI,CAAC;AAErC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC;AAEhC,gBAAgB;AAChB,MAAM,OAAO,UAAW,SAAQ,KAAK;IAC1B,IAAI,CAA+B;IAC5C,YAAY,IAAkC,EAAE,OAAe;QAC7D,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAgBD,MAAM,gBAAgB,GAAG,kCAAkC,CAAC;AAE5D,SAAS,YAAY,CAAC,KAAiB;IACrC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,IAAI,CAAC,CAAC;QACV,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC;YACjB,IAAI,IAAI,CAAC,CAAC;YACV,GAAG,IAAI,gBAAgB,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IACD,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACb,GAAG,IAAI,gBAAgB,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,gBAAgB;AAChB,MAAM,UAAU,iBAAiB,CAAC,aAAyB;IACzD,MAAM,OAAO,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;IAC5C,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;AAC7G,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,GAAqB,EAAE,OAAmB;IACtE,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAClD,MAAM,CAAC,CAAC,CAAC,GAAG,0BAA0B,CAAC;IACvC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;IACvB,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,gBAAgB,EAAE,CAAC;QAC5D,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,6CAA6C,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAqB,EACrB,MAAmB;IAEnB,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAE7C,IAAI,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC/B,IAAI,gBAA4B,CAAC;IACjC,IAAI,UAAU,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;QAC9C,gBAAgB,GAAG,UAAU,CAAC,gBAAgB,CAAC;IACjD,CAAC;SAAM,CAAC;QACN,gBAAgB,GAAG,wBAAwB,EAAE,CAAC;QAC9C,UAAU,GAAG;YACX,gBAAgB;YAChB,mBAAmB,EAAE,UAAU,CAAC,mBAAmB;SACpD,CAAC;QACF,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;IACjF,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,KAAK,gBAAgB,EAAE,CAAC;QAC1E,MAAM,IAAI,UAAU,CAAC,OAAO,EAAE,uCAAuC,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,EAAE,GAAG,IAAI,OAAO,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;IAC/C,MAAM,EAAE,GAAG,EAAE,CAAC,YAAY,EAAE,CAAC;IAC7B,MAAM,EAAE,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACzC,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IACnB,MAAM,EAAE,GAAG,EAAE,CAAC,YAAY,EAAE,CAAC;IAC7B,MAAM,cAAc,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC;IAEjC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAC7B,MAAM,oBAAoB,GAAG,CAAC,0BAA0B,CAAC,MAAM,EAAE,UAAU,CAAC,kBAAkB,CAAC,CAAC;IAChG,MAAM,uBAAuB,GAC3B,cAAc,CAAC,MAAM,KAAK,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,KAAK,uBAAuB,CAAC;IAE/E,MAAM,WAAW,GACf,oBAAoB,IAAI,uBAAuB;QAC7C,CAAC,CAAC,iBAAiB,CAAC,UAAU,CAAC,IAAI,CAAC;QACpC,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;AAClD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAmB;IACvD,IAAI,KAAK,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC,CAAC;QACzF,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,gBAAgB,EAAE,CAAC;YAC1D,MAAM,IAAI,UAAU,CAAC,kBAAkB,EAAE,+BAA+B,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,qBAAqB,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC;QACnF,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACvB,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,OAAO,oBAAoB,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AACvF,CAAC;AAED,gBAAgB;AAChB,MAAM,UAAU,oBAAoB,CAClC,GAAqB,EACrB,IAAiB,EACjB,IAAiB;IAEjB,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,SAAqB;YAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YACxD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACrD,MAAM,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC;YACzB,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;YAC1B,MAAM,QAAQ,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACzC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,gBAAgB,EAAE,CAAC;gBAC5D,MAAM,SAAS,CAAC,wBAAwB,EAAE,wCAAwC,CAAC,CAAC;YACtF,CAAC;YACD,OAAO,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/internal/read-write.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=read-write.d.ts.map

package/dist/internal/read-write.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-write.d.ts","sourceRoot":"","sources":["../../src/internal/read-write.ts"],"names":[],"mappings":""}

package/dist/internal/read-write.js

@@ -0,0 +1,40 @@
+// SPDX-License-Identifier: Apache-2.0
+/**
+ * Transport-layer errors. The shape `{ code, message }` is compatible with the
+ * public `Error` type in `src/index.ts`, so `ensureError` returns these as-is.
+ * @internal
+ */
+export class TransportError extends Error {
+    code;
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = 'TransportError';
+    }
+}
+/** @internal */
+export async function query(rw, msg) {
+    rw.write(msg);
+    return rw.read();
+}
+/**
+ * Wraps a close callback so it fires exactly once. Clearing the reference
+ * after invocation prevents retained callbacks after teardown.
+ * @internal
+ */
+export function makeCloseGuard(cb) {
+    let fired = false;
+    let stored = cb;
+    return () => {
+        if (fired) {
+            return;
+        }
+        fired = true;
+        const f = stored;
+        stored = undefined;
+        if (f !== undefined) {
+            f();
+        }
+    };
+}
+//# sourceMappingURL=read-write.js.map

package/dist/internal/read-write.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-write.js","sourceRoot":"","sources":["../../src/internal/read-write.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAyBtC;;;;GAIG;AACH,MAAM,OAAO,cAAe,SAAQ,KAAK;IACvC,IAAI,CAAqB;IAEzB,YAAY,IAAwB,EAAE,OAAe;QACnD,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AAED,gBAAgB;AAChB,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,EAAa,EAAE,GAAe;IACxD,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACd,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,EAAe;IAC5C,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,OAAO,GAAG,EAAE;QACV,IAAI,KAAK,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QACD,KAAK,GAAG,IAAI,CAAC;QACb,MAAM,CAAC,GAAG,MAAM,CAAC;QACjB,MAAM,GAAG,SAAS,CAAC;QACnB,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;YACpB,CAAC,EAAE,CAAC;QACN,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/internal/restore.d.ts

@@ -0,0 +1,3 @@
+import type { EncryptedChannel } from './pairing.js';
+export declare function restoreFromMnemonic(channel: EncryptedChannel): Promise<void>;
+//# sourceMappingURL=restore.d.ts.map

package/dist/internal/restore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"restore.d.ts","sourceRoot":"","sources":["../../src/internal/restore.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAIrD,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAmBlF"}

package/dist/internal/restore.js

@@ -0,0 +1,27 @@
+// SPDX-License-Identifier: Apache-2.0
+import { create } from '@bufbuild/protobuf';
+import { RequestSchema } from '../proto/gen/hww_pb.js';
+import { RestoreFromMnemonicRequestSchema } from '../proto/gen/mnemonic_pb.js';
+import { query } from './eth/query.js';
+import { CODE_UNEXPECTED_RESPONSE, makeError } from './errors.js';
+const UINT32_MAX = 0xffffffff;
+export async function restoreFromMnemonic(channel) {
+    const nowSec = Math.floor(Date.now() / 1000);
+    const timestamp = nowSec >= 0 && nowSec <= UINT32_MAX ? nowSec : 0;
+    // getTimezoneOffset returns minutes WEST of UTC; firmware expects seconds EAST of UTC.
+    const timezoneOffset = -new Date().getTimezoneOffset() * 60;
+    const request = create(RequestSchema, {
+        request: {
+            case: 'restoreFromMnemonic',
+            value: create(RestoreFromMnemonicRequestSchema, {
+                timestamp,
+                timezoneOffset,
+            }),
+        },
+    });
+    const response = await query(channel, request);
+    if (response.response.case !== 'success') {
+        throw makeError(CODE_UNEXPECTED_RESPONSE, 'unexpected response to restoreFromMnemonic');
+    }
+}
+//# sourceMappingURL=restore.js.map

package/dist/internal/restore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"restore.js","sourceRoot":"","sources":["../../src/internal/restore.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAC;AACvD,OAAO,EAAE,gCAAgC,EAAE,MAAM,6BAA6B,CAAC;AAC/E,OAAO,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AACvC,OAAO,EAAE,wBAAwB,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAGlE,MAAM,UAAU,GAAG,UAAU,CAAC;AAE9B,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAAyB;IACjE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC7C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,MAAM,IAAI,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,uFAAuF;IACvF,MAAM,cAAc,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,iBAAiB,EAAE,GAAG,EAAE,CAAC;IAE5D,MAAM,OAAO,GAAG,MAAM,CAAC,aAAa,EAAE;QACpC,OAAO,EAAE;YACP,IAAI,EAAE,qBAAqB;YAC3B,KAAK,EAAE,MAAM,CAAC,gCAAgC,EAAE;gBAC9C,SAAS;gBACT,cAAc;aACf,CAAC;SACH;KACF,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/C,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,SAAS,CAAC,wBAAwB,EAAE,4CAA4C,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC"}

package/dist/internal/transport-bridge.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=transport-bridge.d.ts.map

package/dist/internal/transport-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport-bridge.d.ts","sourceRoot":"","sources":["../../src/internal/transport-bridge.ts"],"names":[],"mappings":""}

package/dist/internal/transport-bridge.js

@@ -0,0 +1,97 @@
+// SPDX-License-Identifier: Apache-2.0
+import { BRIDGE_BASE_URL, BRIDGE_WS_BASE_URL } from './constants.js';
+import { MessageQueue } from './message-queue.js';
+import { TransportError, makeCloseGuard } from './read-write.js';
+import { sleep } from './utils.js';
+const DISCOVERY_ATTEMPTS = 10;
+const DISCOVERY_SLEEP_MS = 100;
+// Values of WebSocket.readyState. Mirror the DOM constants so tests don't
+// need to depend on `globalThis.WebSocket`.
+/** @internal */
+export const WS_OPEN = 1;
+function defaultDeps() {
+    const f = globalThis.fetch;
+    const WS = globalThis.WebSocket;
+    if (f === undefined || WS === undefined) {
+        throw new TransportError('bridge', 'fetch or WebSocket is not available');
+    }
+    // Bind to globalThis: in browsers, `fetch` must be invoked with the realm's
+    // global as the receiver. Calling it as a method on a captured object (e.g.
+    // `deps.fetch(url)`) triggers `TypeError: Illegal invocation` before any
+    // network request is sent.
+    return { fetch: f.bind(globalThis), WebSocket: WS };
+}
+async function discoverDevicePath(deps) {
+    for (let i = 0; i < DISCOVERY_ATTEMPTS; i += 1) {
+        let resp;
+        try {
+            resp = await deps.fetch(`${BRIDGE_BASE_URL}/devices`);
+        }
+        catch {
+            throw new TransportError('bridge', 'BitBoxBridge not found.');
+        }
+        if (resp.status === 403) {
+            throw new TransportError('bridge', 'Origin not whitelisted.');
+        }
+        if (!resp.ok) {
+            throw new TransportError('bridge', 'Unexpected bridge connection error.');
+        }
+        const body = (await resp.json());
+        const devices = body.devices ?? [];
+        if (devices.length === 1) {
+            return devices[0].path;
+        }
+        await sleep(DISCOVERY_SLEEP_MS);
+    }
+    throw new TransportError('bridge', 'Expected exactly one BitBox02. If one is connected, it might already have an open connection another app. If so, please close the other app first.');
+}
+/**
+ * Open a BitBox02 via the BitBoxBridge service. Discovery polls
+ * `http://127.0.0.1:8178/api/v1/devices` for exactly one device, then opens
+ * a WebSocket at `ws://127.0.0.1:8178/api/v1/socket/{path}`. The Rust
+ * reference uses `localhost` for the HTTP probe; we deviate to `127.0.0.1`
+ * because the bridge only binds the IPv4 loopback, and `localhost` resolves
+ * to `::1` first on systems where /etc/hosts maps both, breaking the fetch.
+ * @internal
+ */
+export async function openBridge(onCloseCb, deps = defaultDeps()) {
+    const devicePath = await discoverDevicePath(deps);
+    const socket = new deps.WebSocket(BRIDGE_WS_BASE_URL + devicePath);
+    socket.binaryType = 'arraybuffer';
+    const queue = new MessageQueue();
+    const guard = makeCloseGuard(onCloseCb);
+    let opened = false;
+    socket.onmessage = (ev) => {
+        queue.push(new Uint8Array(ev.data));
+    };
+    await new Promise((resolve, reject) => {
+        socket.onopen = () => {
+            opened = true;
+            resolve();
+        };
+        socket.onclose = () => {
+            guard();
+            if (!opened) {
+                reject(new TransportError('bridge', 'bridge socket closed before opening'));
+            }
+        };
+        socket.onerror = () => {
+            reject(new TransportError('bridge', 'Your BitBox02 is busy.'));
+        };
+    });
+    return {
+        write(bytes) {
+            if (socket.readyState !== WS_OPEN) {
+                throw new TransportError('write', 'bridge socket is not open');
+            }
+            socket.send(bytes);
+        },
+        read() {
+            return queue.next();
+        },
+        close() {
+            socket.close();
+        },
+    };
+}
+//# sourceMappingURL=transport-bridge.js.map

package/dist/internal/transport-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport-bridge.js","sourceRoot":"","sources":["../../src/internal/transport-bridge.ts"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEnC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAE/B,0EAA0E;AAC1E,4CAA4C;AAC5C,gBAAgB;AAChB,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAC;AAoBzB,SAAS,WAAW;IAClB,MAAM,CAAC,GAAI,UAAuC,CAAC,KAAK,CAAC;IACzD,MAAM,EAAE,GAAI,UAAmE,CAAC,SAAS,CAAC;IAC1F,IAAI,CAAC,KAAK,SAAS,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;QACxC,MAAM,IAAI,cAAc,CAAC,QAAQ,EAAE,qCAAqC,CAAC,CAAC;IAC5E,CAAC;IACD,4EAA4E;IAC5E,4EAA4E;IAC5E,yEAAyE;IACzE,2BAA2B;IAC3B,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AACtD,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,IAAgB;IAChD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,kBAAkB,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/C,IAAI,IAA8C,CAAC;QACnD,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,eAAe,UAAU,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,cAAc,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACxB,MAAM,IAAI,cAAc,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC;QAChE,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,cAAc,CAAC,QAAQ,EAAE,qCAAqC,CAAC,CAAC;QAC5E,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,EAAE,CAA0C,CAAC;QAC1E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;QACnC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO,OAAO,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC;QAC1B,CAAC;QACD,MAAM,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,IAAI,cAAc,CACtB,QAAQ,EACR,oJAAoJ,CACrJ,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,SAAsB,EACtB,OAAmB,WAAW,EAAE;IAEhC,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,SAAS,CAAC,kBAAkB,GAAG,UAAU,CAAC,CAAC;IACnE,MAAM,CAAC,UAAU,GAAG,aAAa,CAAC;IAElC,MAAM,KAAK,GAAG,IAAI,YAAY,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IACxC,IAAI,MAAM,GAAG,KAAK,CAAC;IAEnB,MAAM,CAAC,SAAS,GAAG,CAAC,EAAE,EAAQ,EAAE;QAC9B,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACtC,CAAC,CAAC;IAEF,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,MAAM,GAAG,GAAS,EAAE;YACzB,MAAM,GAAG,IAAI,CAAC;YACd,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QACF,MAAM,CAAC,OAAO,GAAG,GAAS,EAAE;YAC1B,KAAK,EAAE,CAAC;YACR,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,CAAC,IAAI,cAAc,CAAC,QAAQ,EAAE,qCAAqC,CAAC,CAAC,CAAC;YAC9E,CAAC;QACH,CAAC,CAAC;QACF,MAAM,CAAC,OAAO,GAAG,GAAS,EAAE;YAC1B,MAAM,CAAC,IAAI,cAAc,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC,CAAC;QACjE,CAAC,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,OAAO;QACL,KAAK,CAAC,KAAiB;YACrB,IAAI,MAAM,CAAC,UAAU,KAAK,OAAO,EAAE,CAAC;gBAClC,MAAM,IAAI,cAAc,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;YACjE,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC;QACD,IAAI;YACF,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;QACtB,CAAC;QACD,KAAK;YACH,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/internal/transport-simulator.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=transport-simulator.d.ts.map

package/dist/internal/transport-simulator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transport-simulator.d.ts","sourceRoot":"","sources":["../../src/internal/transport-simulator.ts"],"names":[],"mappings":""}