@bitgo-beta/passkey-crypto 0.0.1-alpha.0

package/dist/src/registerPasskey.js

@@ -0,0 +1,96 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerPasskey = registerPasskey;
+/** Encodes an ArrayBuffer as a base64url string (no padding). */
+function encodeBase64Url(buffer) {
+    return Buffer.from(buffer).toString('base64').replace(/=/g, '').replace(/\+/g, '-').replace(/\//g, '_');
+}
+/**
+ * Recursively converts a PublicKeyCredential (or any value it contains) to a
+ * JSON-serialisable representation, encoding ArrayBuffers as base64url strings.
+ */
+function publicKeyCredentialToJSON(value) {
+    if (Array.isArray(value)) {
+        return value.map(publicKeyCredentialToJSON);
+    }
+    if (value instanceof ArrayBuffer) {
+        return encodeBase64Url(value);
+    }
+    if (ArrayBuffer.isView(value)) {
+        return encodeBase64Url(value.buffer);
+    }
+    if (value instanceof Object) {
+        const result = {};
+        // Use for...in to enumerate DOM object properties (non-enumerable own + inherited)
+        for (const key in value) {
+            result[key] = publicKeyCredentialToJSON(value[key]);
+        }
+        return result;
+    }
+    return value;
+}
+/**
+ * Decodes excluded credential IDs from base64 strings to ArrayBuffers.
+ * The WebAuthn API requires BufferSource values, not base64 strings.
+ */
+function preformatExcludedCredentials(excludeCredentials) {
+    if (!excludeCredentials)
+        return [];
+    return excludeCredentials.map((cred) => ({
+        ...cred,
+        id: Buffer.from(cred.id, 'base64'),
+    }));
+}
+async function registerPasskey(params) {
+    const { bitgo, provider, label } = params;
+    // Step 1: Fetch server challenge (contains baseSalt)
+    const challenge = (await bitgo
+        .get(bitgo.url('/user/otp/webauthn/register', 2))
+        .result());
+    // Step 2: Pass formatted challenge to provider.create() — browser returns attestation
+    const attestation = await provider.create({
+        challenge: Buffer.from(challenge.challenge, 'base64'),
+        rp: challenge.rp,
+        user: challenge.user,
+        pubKeyCredParams: challenge.pubKeyCredParams,
+        timeout: challenge.timeout,
+        excludeCredentials: preformatExcludedCredentials(challenge.excludeCredentials),
+        authenticatorSelection: challenge.authenticatorSelection,
+        attestation: challenge.attestation,
+        extensions: challenge.extensions,
+    });
+    // Step 3: Check if PRF is supported — `prf.enabled` is set during registration
+    // (not `prf.results.first`, which is only present during authentication assertions)
+    const clientExtensionResults = attestation.getClientExtensionResults();
+    const prfEnabled = clientExtensionResults.prf;
+    const prfSupported = typeof prfEnabled === 'object' && prfEnabled !== null && prfEnabled.enabled === true;
+    // Step 4: Serialize the full credential using recursive base64url encoding
+    const otp = JSON.stringify(publicKeyCredentialToJSON(attestation));
+    const putBody = {
+        otp,
+        type: 'webauthn',
+        label,
+    };
+    if (prfSupported) {
+        putBody.extensions = ['prf'];
+        putBody.scopes = ['wallet_hot'];
+    }
+    // Step 5: PUT /api/v2/user/otp
+    const response = (await bitgo.put(bitgo.url('/user/otp', 2)).send(putBody).result());
+    // Step 6: Find the newly registered device by matching credentialId
+    const device = response.user.otpDevices.find((d) => d.credentialId === attestation.id);
+    if (!device) {
+        const available = response.user.otpDevices.map((d) => d.credentialId).join(', ');
+        throw new Error(`Registered device not found in response (credentialId: ${attestation.id}). Available: [${available}]`);
+    }
+    // Step 7: Return WebAuthnOtpDevice + prfSupported
+    return {
+        id: device.id,
+        credentialId: device.credentialId,
+        prfSalt: device.prfSalt,
+        isPasskey: device.isPasskey,
+        extensions: device.extensions,
+        prfSupported,
+    };
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/src/removePasskeyFromAccount.d.ts

@@ -0,0 +1,11 @@
+import { BitGoBase } from '@bitgo-beta/sdk-core';
+import type { WebAuthnOtpDevice } from '@bitgo/public-types';
+/**
+ * Permanently removes a passkey credential from the user's account.
+ * Call removePasskeyFromWallet() for all affected wallets before calling this.
+ */
+export declare function removePasskeyFromAccount(params: {
+    bitgo: BitGoBase;
+    device: WebAuthnOtpDevice;
+}): Promise<void>;
+//# sourceMappingURL=removePasskeyFromAccount.d.ts.map

package/dist/src/removePasskeyFromAccount.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"removePasskeyFromAccount.d.ts","sourceRoot":"","sources":["../../src/removePasskeyFromAccount.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAE7D;;;GAGG;AACH,wBAAsB,wBAAwB,CAAC,MAAM,EAAE;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAMrH"}

package/dist/src/removePasskeyFromAccount.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.removePasskeyFromAccount = removePasskeyFromAccount;
+/**
+ * Permanently removes a passkey credential from the user's account.
+ * Call removePasskeyFromWallet() for all affected wallets before calling this.
+ */
+async function removePasskeyFromAccount(params) {
+    const { bitgo, device } = params;
+    if (!device.id) {
+        throw new Error('device.id is required to remove a passkey from the account');
+    }
+    await bitgo.del(bitgo.url(`/user/otp/${device.id}`)).result();
+}
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicmVtb3ZlUGFzc2tleUZyb21BY2NvdW50LmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vc3JjL3JlbW92ZVBhc3NrZXlGcm9tQWNjb3VudC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOztBQU9BLDREQU1DO0FBVkQ7OztHQUdHO0FBQ0ksS0FBSyxVQUFVLHdCQUF3QixDQUFDLE1BQXVEO0lBQ3BHLE1BQU0sRUFBRSxLQUFLLEVBQUUsTUFBTSxFQUFFLEdBQUcsTUFBTSxDQUFDO0lBQ2pDLElBQUksQ0FBQyxNQUFNLENBQUMsRUFBRSxFQUFFLENBQUM7UUFDZixNQUFNLElBQUksS0FBSyxDQUFDLDREQUE0RCxDQUFDLENBQUM7SUFDaEYsQ0FBQztJQUNELE1BQU0sS0FBSyxDQUFDLEdBQUcsQ0FBQyxLQUFLLENBQUMsR0FBRyxDQUFDLGFBQWEsTUFBTSxDQUFDLEVBQUUsRUFBRSxDQUFDLENBQUMsQ0FBQyxNQUFNLEVBQUUsQ0FBQztBQUNoRSxDQUFDIiwic291cmNlc0NvbnRlbnQiOlsiaW1wb3J0IHsgQml0R29CYXNlIH0gZnJvbSAnQGJpdGdvLWJldGEvc2RrLWNvcmUnO1xuaW1wb3J0IHR5cGUgeyBXZWJBdXRobk90cERldmljZSB9IGZyb20gJ0BiaXRnby9wdWJsaWMtdHlwZXMnO1xuXG4vKipcbiAqIFBlcm1hbmVudGx5IHJlbW92ZXMgYSBwYXNza2V5IGNyZWRlbnRpYWwgZnJvbSB0aGUgdXNlcidzIGFjY291bnQuXG4gKiBDYWxsIHJlbW92ZVBhc3NrZXlGcm9tV2FsbGV0KCkgZm9yIGFsbCBhZmZlY3RlZCB3YWxsZXRzIGJlZm9yZSBjYWxsaW5nIHRoaXMuXG4gKi9cbmV4cG9ydCBhc3luYyBmdW5jdGlvbiByZW1vdmVQYXNza2V5RnJvbUFjY291bnQocGFyYW1zOiB7IGJpdGdvOiBCaXRHb0Jhc2U7IGRldmljZTogV2ViQXV0aG5PdHBEZXZpY2UgfSk6IFByb21pc2U8dm9pZD4ge1xuICBjb25zdCB7IGJpdGdvLCBkZXZpY2UgfSA9IHBhcmFtcztcbiAgaWYgKCFkZXZpY2UuaWQpIHtcbiAgICB0aHJvdyBuZXcgRXJyb3IoJ2RldmljZS5pZCBpcyByZXF1aXJlZCB0byByZW1vdmUgYSBwYXNza2V5IGZyb20gdGhlIGFjY291bnQnKTtcbiAgfVxuICBhd2FpdCBiaXRnby5kZWwoYml0Z28udXJsKGAvdXNlci9vdHAvJHtkZXZpY2UuaWR9YCkpLnJlc3VsdCgpO1xufVxuIl19

package/dist/src/removePasskeyFromWallet.d.ts

@@ -0,0 +1,10 @@
+import { BitGoBase } from '@bitgo-beta/sdk-core';
+import { WebAuthnOtpDevice } from './webAuthnTypes';
+export declare function removePasskeyFromWallet(params: {
+    bitgo: BitGoBase;
+    coin: string;
+    walletId: string;
+    device: WebAuthnOtpDevice;
+    walletPassphrase: string;
+}): Promise<void>;
+//# sourceMappingURL=removePasskeyFromWallet.d.ts.map

package/dist/src/removePasskeyFromWallet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"removePasskeyFromWallet.d.ts","sourceRoot":"","sources":["../../src/removePasskeyFromWallet.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAA6B,MAAM,sBAAsB,CAAC;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAEpD,wBAAsB,uBAAuB,CAAC,MAAM,EAAE;IACpD,KAAK,EAAE,SAAS,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;CAC1B,GAAG,OAAO,CAAC,IAAI,CAAC,CAoBhB"}

package/dist/src/removePasskeyFromWallet.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.removePasskeyFromWallet = removePasskeyFromWallet;
+const sdk_core_1 = require("@bitgo-beta/sdk-core");
+async function removePasskeyFromWallet(params) {
+    const { bitgo, coin: coinName, walletId, device, walletPassphrase } = params;
+    if (!device.id) {
+        throw new Error('device.id is required to remove a passkey from the wallet');
+    }
+    const baseCoin = bitgo.coin(coinName);
+    const wallet = await baseCoin.wallets().get({ id: walletId });
+    const keychainId = wallet.keyIds()[0];
+    const keychain = await baseCoin.keychains().get({ id: keychainId });
+    // Verify passphrase before any mutation
+    const decrypted = (0, sdk_core_1.decryptKeychainPrivateKey)(bitgo, keychain, walletPassphrase);
+    if (!decrypted) {
+        throw new Error('Incorrect wallet passphrase. Passkey removal aborted to prevent lockout.');
+    }
+    // No sdk-core abstraction for this endpoint; raw DELETE is required
+    await bitgo.del(bitgo.url(`/key/${keychainId}/webauthndevice/${device.id}`, 2)).result();
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/src/webAuthnTypes.d.ts

@@ -0,0 +1,18 @@
+export type { WebAuthnOtpDevice } from '@bitgo/public-types';
+/** Result of a WebAuthn assertion with the PRF extension. */
+export interface PasskeyAuthResult {
+    prfResult: ArrayBuffer | undefined;
+    credentialId: string;
+    otpCode: string;
+}
+/** Options for WebAuthnProvider.get(). */
+export interface PasskeyGetOptions {
+    publicKey: PublicKeyCredentialRequestOptions;
+    evalByCredential?: Record<string, string>;
+}
+/** Abstraction over the WebAuthn credential API. */
+export interface WebAuthnProvider {
+    create(options: PublicKeyCredentialCreationOptions): Promise<PublicKeyCredential>;
+    get(options: PasskeyGetOptions): Promise<PasskeyAuthResult>;
+}
+//# sourceMappingURL=webAuthnTypes.d.ts.map

package/dist/src/webAuthnTypes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webAuthnTypes.d.ts","sourceRoot":"","sources":["../../src/webAuthnTypes.ts"],"names":[],"mappings":"AAAA,YAAY,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAE7D,6DAA6D;AAC7D,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,WAAW,GAAG,SAAS,CAAC;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,0CAA0C;AAC1C,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,iCAAiC,CAAC;IAC7C,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC3C;AAED,oDAAoD;AACpD,MAAM,WAAW,gBAAgB;IAC/B,MAAM,CAAC,OAAO,EAAE,kCAAkC,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAClF,GAAG,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC7D"}

package/dist/src/webAuthnTypes.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=data:application/json;base64,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

package/dist/test/integration/helpers/fixtures.d.ts

@@ -0,0 +1,12 @@
+export declare const ENTERPRISE_ID = "enterprise-abc";
+export declare const WALLET_ID = "wallet-hot-123";
+export declare const KEYCHAIN_ID = "key-user-001";
+export declare const COIN = "tbtc";
+export declare const EXISTING_PASSPHRASE = "my-existing-passphrase";
+export declare const PRF_OUTPUT: ArrayBuffer;
+export declare const CREDENTIAL_ID = "Y3JlZC1pZC00NTY";
+export declare const DEVICE_MONGO_ID = "device-mongo-id-1";
+export declare const BASE_SALT = "ZqJ64M2dL65zn2-Jxd58SMN2ILc9QjbCFxUTGHd_LC8";
+export declare const REGISTER_CHALLENGE: string;
+export declare const ASSERTION_CHALLENGE: string;
+//# sourceMappingURL=fixtures.d.ts.map

package/dist/test/integration/helpers/fixtures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixtures.d.ts","sourceRoot":"","sources":["../../../../test/integration/helpers/fixtures.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,aAAa,mBAAmB,CAAC;AAC9C,eAAO,MAAM,SAAS,mBAAmB,CAAC;AAC1C,eAAO,MAAM,WAAW,iBAAiB,CAAC;AAC1C,eAAO,MAAM,IAAI,SAAS,CAAC;AAC3B,eAAO,MAAM,mBAAmB,2BAA2B,CAAC;AAC5D,eAAO,MAAM,UAAU,aAA0E,CAAC;AAClG,eAAO,MAAM,aAAa,oBAAoB,CAAC;AAC/C,eAAO,MAAM,eAAe,sBAAsB,CAAC;AACnD,eAAO,MAAM,SAAS,gDAAgD,CAAC;AACvE,eAAO,MAAM,kBAAkB,QAAqD,CAAC;AACrF,eAAO,MAAM,mBAAmB,QAAwD,CAAC"}

package/dist/test/integration/helpers/fixtures.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ASSERTION_CHALLENGE = exports.REGISTER_CHALLENGE = exports.BASE_SALT = exports.DEVICE_MONGO_ID = exports.CREDENTIAL_ID = exports.PRF_OUTPUT = exports.EXISTING_PASSPHRASE = exports.COIN = exports.KEYCHAIN_ID = exports.WALLET_ID = exports.ENTERPRISE_ID = void 0;
+exports.ENTERPRISE_ID = 'enterprise-abc';
+exports.WALLET_ID = 'wallet-hot-123';
+exports.KEYCHAIN_ID = 'key-user-001';
+exports.COIN = 'tbtc';
+exports.EXISTING_PASSPHRASE = 'my-existing-passphrase';
+exports.PRF_OUTPUT = new Uint8Array([0xde, 0xad, 0xbe, 0xef, 0xca, 0xfe, 0x01, 0x02]).buffer;
+exports.CREDENTIAL_ID = 'Y3JlZC1pZC00NTY';
+exports.DEVICE_MONGO_ID = 'device-mongo-id-1';
+exports.BASE_SALT = 'ZqJ64M2dL65zn2-Jxd58SMN2ILc9QjbCFxUTGHd_LC8';
+exports.REGISTER_CHALLENGE = Buffer.from('random-challenge').toString('base64');
+exports.ASSERTION_CHALLENGE = Buffer.from('assertion-challenge').toString('base64');
+//# sourceMappingURL=data:application/json;base64,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

package/dist/test/integration/helpers/mockBitGo.d.ts

@@ -0,0 +1,27 @@
+export interface KeychainState {
+    id: string;
+    encryptedPrv: string;
+    webauthnDevices?: Array<{
+        authenticatorInfo: {
+            credID: string;
+        };
+        prfSalt: string;
+        id?: string;
+        encryptedPrv?: string;
+    }>;
+}
+export interface MockBitGo {
+    bitgo: any;
+    keychainState: KeychainState;
+    wallet: any;
+    encrypt: (params: {
+        password: string;
+        input: string;
+    }) => string;
+    decrypt: (params: {
+        password: string;
+        input: string;
+    }) => string;
+}
+export declare function makeMockBitGo(initialEncryptedPrv: string): MockBitGo;
+//# sourceMappingURL=mockBitGo.d.ts.map

package/dist/test/integration/helpers/mockBitGo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mockBitGo.d.ts","sourceRoot":"","sources":["../../../../test/integration/helpers/mockBitGo.ts"],"names":[],"mappings":"AAsBA,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,KAAK,CAAC;QACtB,iBAAiB,EAAE;YAAE,MAAM,EAAE,MAAM,CAAA;SAAE,CAAC;QACtC,OAAO,EAAE,MAAM,CAAC;QAChB,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,YAAY,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,GAAG,CAAC;IACX,aAAa,EAAE,aAAa,CAAC;IAC7B,MAAM,EAAE,GAAG,CAAC;IACZ,OAAO,EAAE,CAAC,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,KAAK,MAAM,CAAC;IACjE,OAAO,EAAE,CAAC,MAAM,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,KAAK,MAAM,CAAC;CAClE;AAED,wBAAgB,aAAa,CAAC,mBAAmB,EAAE,MAAM,GAAG,SAAS,CA8GpE"}

package/dist/test/integration/helpers/mockBitGo.js

@@ -0,0 +1,148 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.makeMockBitGo = makeMockBitGo;
+const sinon = __importStar(require("sinon"));
+const fixtures_1 = require("./fixtures");
+// Use sjcl directly — same underlying library as bitgo.encrypt/decrypt
+const sjcl = require('sjcl');
+function realEncrypt({ password, input }) {
+    return JSON.stringify(sjcl.encrypt(password, input));
+}
+function realDecrypt({ password, input }) {
+    return sjcl.decrypt(password, typeof input === 'string' ? JSON.parse(input) : input);
+}
+function makeMockBitGo(initialEncryptedPrv) {
+    const keychainState = {
+        id: fixtures_1.KEYCHAIN_ID,
+        encryptedPrv: initialEncryptedPrv,
+        webauthnDevices: undefined,
+    };
+    // Build the mock request chain: bitgo.get(url).result() etc.
+    function makeRequest(result) {
+        const req = {
+            send: sinon.stub().returnsThis(),
+            result: sinon.stub().resolves(result),
+        };
+        return req;
+    }
+    // Stub the wallet
+    const mockWallet = {
+        type: sinon.stub().returns('hot'),
+        toJSON: sinon.stub().returns({ enterprise: fixtures_1.ENTERPRISE_ID }),
+        keyIds: sinon.stub().returns([fixtures_1.KEYCHAIN_ID]),
+        getEncryptedUserKeychain: sinon.stub().callsFake(async () => ({ ...keychainState })),
+    };
+    // Stub baseCoin
+    const mockBaseCoin = {
+        wallets: sinon.stub().returns({
+            get: sinon.stub().resolves(mockWallet),
+        }),
+        keychains: sinon.stub().returns({
+            get: sinon.stub().callsFake(async () => ({ ...keychainState })),
+        }),
+    };
+    // Build the bitgo stub
+    const bitgo = {
+        coin: sinon.stub().returns(mockBaseCoin),
+        url: (path, version) => `https://app.bitgo-test.com/api/v${version ?? 2}${path}`,
+        encrypt: (params) => realEncrypt(params),
+        decrypt: (params) => realDecrypt(params),
+        get: sinon.stub().callsFake((url) => {
+            if (url.includes('/user/otp/webauthn/register')) {
+                return makeRequest({
+                    challenge: fixtures_1.REGISTER_CHALLENGE,
+                    baseSalt: fixtures_1.BASE_SALT,
+                    rp: { name: 'BitGo', id: 'bitgo.com' },
+                    user: { id: Buffer.from('user-id'), name: 'test@bitgo.com', displayName: 'Test User' },
+                    pubKeyCredParams: [{ type: 'public-key', alg: -7 }],
+                });
+            }
+            if (url.includes('/user/otp/webauthn/assertion')) {
+                return makeRequest({ challenge: fixtures_1.ASSERTION_CHALLENGE });
+            }
+            return makeRequest({});
+        }),
+        put: sinon.stub().callsFake((url) => {
+            // PUT /user/otp — register device
+            if (url.includes('/user/otp') && !url.includes('/key/')) {
+                return {
+                    send: sinon.stub().returnsThis(),
+                    result: sinon.stub().resolves({
+                        user: {
+                            otpDevices: [
+                                {
+                                    id: fixtures_1.DEVICE_MONGO_ID,
+                                    credentialId: fixtures_1.CREDENTIAL_ID,
+                                    prfSalt: fixtures_1.BASE_SALT,
+                                    isPasskey: true,
+                                    extensions: { prf: true },
+                                },
+                            ],
+                        },
+                    }),
+                };
+            }
+            // PUT /{coin}/key/{keychainId} — attach webauthnInfo
+            if (url.includes('/key/')) {
+                return {
+                    send: sinon.stub().callsFake((body) => ({
+                        result: sinon.stub().callsFake(async () => {
+                            // Update keychainState with webauthnInfo — simulates server persisting it
+                            if (body?.webauthnInfo) {
+                                keychainState.webauthnDevices = [
+                                    {
+                                        authenticatorInfo: { credID: fixtures_1.CREDENTIAL_ID },
+                                        prfSalt: body.webauthnInfo.prfSalt,
+                                        id: fixtures_1.DEVICE_MONGO_ID,
+                                        encryptedPrv: body.webauthnInfo.encryptedPrv,
+                                    },
+                                ];
+                                keychainState.encryptedPrv = body.webauthnInfo.encryptedPrv;
+                            }
+                            return { ...keychainState };
+                        }),
+                    })),
+                };
+            }
+            return { send: sinon.stub().returnsThis(), result: sinon.stub().resolves({}) };
+        }),
+        del: sinon.stub().callsFake((_url) => {
+            return { result: sinon.stub().resolves({}) };
+        }),
+    };
+    return { bitgo, keychainState, wallet: mockWallet, encrypt: realEncrypt, decrypt: realDecrypt };
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/test/integration/helpers/mockProvider.d.ts

@@ -0,0 +1,5 @@
+import { WebAuthnProvider } from '../../../src/webAuthnTypes';
+export declare function makeMockProvider(): WebAuthnProvider & {
+    lastEvalByCredential: Record<string, string> | undefined;
+};
+//# sourceMappingURL=mockProvider.d.ts.map

package/dist/test/integration/helpers/mockProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mockProvider.d.ts","sourceRoot":"","sources":["../../../../test/integration/helpers/mockProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwC,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAGpG,wBAAgB,gBAAgB,IAAI,gBAAgB,GAAG;IAAE,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAA;CAAE,CAmClH"}

package/dist/test/integration/helpers/mockProvider.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.makeMockProvider = makeMockProvider;
+const fixtures_1 = require("./fixtures");
+function makeMockProvider() {
+    let lastEvalByCredential;
+    const provider = {
+        get lastEvalByCredential() {
+            return lastEvalByCredential;
+        },
+        async create(options) {
+            return {
+                id: fixtures_1.CREDENTIAL_ID,
+                rawId: Buffer.from(fixtures_1.CREDENTIAL_ID, 'base64'),
+                type: 'public-key',
+                response: {
+                    attestationObject: new ArrayBuffer(0),
+                    clientDataJSON: new ArrayBuffer(0),
+                    getTransports: () => [],
+                },
+                authenticatorAttachment: 'platform',
+                getClientExtensionResults: () => ({ prf: { enabled: true } }),
+                toJSON: () => ({}),
+            };
+        },
+        async get(options) {
+            lastEvalByCredential = options.evalByCredential;
+            return {
+                prfResult: fixtures_1.PRF_OUTPUT,
+                credentialId: fixtures_1.CREDENTIAL_ID,
+                otpCode: '123456',
+            };
+        },
+    };
+    return provider;
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/test/integration/passkeyLifecycle.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=passkeyLifecycle.test.d.ts.map

package/dist/test/integration/passkeyLifecycle.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkeyLifecycle.test.d.ts","sourceRoot":"","sources":["../../../test/integration/passkeyLifecycle.test.ts"],"names":[],"mappings":""}