@bitgo/passkey-crypto 0.0.1 → 0.3.0

package/dist/test/unit/derivePasskeyPrfKey.test.js

@@ -0,0 +1,152 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const assert = __importStar(require("assert"));
+const sinon = __importStar(require("sinon"));
+const derivePasskeyPrfKey_1 = require("../../src/derivePasskeyPrfKey");
+describe('derivePasskeyPrfKey', function () {
+    const mockDevices = [
+        {
+            otpDeviceId: 'device-1',
+            authenticatorInfo: { credID: 'cred-aaa', fmt: 'none', publicKey: 'pk-1' },
+            prfSalt: 'salt-aaa',
+            encryptedPrv: 'enc-prv-1',
+        },
+        {
+            otpDeviceId: 'device-2',
+            authenticatorInfo: { credID: 'cred-bbb', fmt: 'none', publicKey: 'pk-2' },
+            prfSalt: 'salt-bbb',
+            encryptedPrv: 'enc-prv-2',
+        },
+    ];
+    function makeWallet(devices) {
+        return {
+            getEncryptedUserKeychain: sinon.stub().resolves({
+                id: 'keychain-id',
+                pub: 'xpub123',
+                encryptedPrv: 'encrypted-prv',
+                type: 'independent',
+                webauthnDevices: devices,
+            }),
+        };
+    }
+    function makeBitGo(challenge = 'dGVzdC1jaGFsbGVuZ2U=') {
+        return {
+            url: sinon.stub().callsFake((path) => `https://app.bitgo.com/api/v2${path}`),
+            get: sinon.stub().returns({
+                result: sinon.stub().resolves({ challenge }),
+            }),
+        };
+    }
+    afterEach(function () {
+        sinon.restore();
+    });
+    it('should return a hex string on happy path', async function () {
+        const prfResult = new Uint8Array([0xde, 0xad, 0xbe, 0xef]).buffer;
+        const mockProvider = {
+            create: sinon.stub(),
+            get: sinon.stub().resolves({
+                prfResult,
+                credentialId: 'cred-aaa',
+                otpCode: 'otp-123',
+            }),
+        };
+        const wallet = makeWallet(mockDevices);
+        const mockBitGo = makeBitGo();
+        const result = await (0, derivePasskeyPrfKey_1.derivePasskeyPrfKey)({
+            bitgo: mockBitGo,
+            wallet: wallet,
+            provider: mockProvider,
+        });
+        // derivePassword converts ArrayBuffer to hex
+        assert.strictEqual(result, 'deadbeef');
+        assert.ok(mockProvider.get.calledOnce);
+        // Verify evalByCredential was passed
+        const getCallArgs = mockProvider.get.firstCall.args[0];
+        assert.strictEqual(getCallArgs.evalByCredential['cred-aaa'], 'salt-aaa');
+        assert.strictEqual(getCallArgs.evalByCredential['cred-bbb'], 'salt-bbb');
+        // Verify bitgo was used to fetch the assertion challenge
+        assert.ok(mockBitGo.get.calledOnce);
+        assert.ok(mockBitGo.url.calledWith('/user/otp/webauthn/auth', 2));
+    });
+    it("should throw 'No passkey devices available' when no devices", async function () {
+        const wallet = makeWallet(undefined);
+        const mockProvider = { create: sinon.stub(), get: sinon.stub() };
+        await assert.rejects(() => (0, derivePasskeyPrfKey_1.derivePasskeyPrfKey)({ bitgo: makeBitGo(), wallet: wallet, provider: mockProvider }), (err) => {
+            assert.strictEqual(err.message, 'No passkey devices available');
+            return true;
+        });
+    });
+    it("should throw 'No passkey devices available' when devices array is empty", async function () {
+        const wallet = makeWallet([]);
+        const mockProvider = { create: sinon.stub(), get: sinon.stub() };
+        await assert.rejects(() => (0, derivePasskeyPrfKey_1.derivePasskeyPrfKey)({ bitgo: makeBitGo(), wallet: wallet, provider: mockProvider }), (err) => {
+            assert.strictEqual(err.message, 'No passkey devices available');
+            return true;
+        });
+    });
+    it("should throw 'No passkey devices available with a valid PRF salt' when no device has prfSalt", async function () {
+        const devicesWithoutSalt = [
+            {
+                otpDeviceId: 'device-1',
+                authenticatorInfo: { credID: 'cred-aaa', fmt: 'none', publicKey: 'pk-1' },
+                prfSalt: '', // empty — buildEvalByCredential skips falsy prfSalt
+                encryptedPrv: 'enc-prv-1',
+            },
+        ];
+        const wallet = makeWallet(devicesWithoutSalt);
+        const mockProvider = { create: sinon.stub(), get: sinon.stub() };
+        await assert.rejects(() => (0, derivePasskeyPrfKey_1.derivePasskeyPrfKey)({ bitgo: makeBitGo(), wallet: wallet, provider: mockProvider }), (err) => {
+            assert.strictEqual(err.message, 'No passkey devices available with a valid PRF salt');
+            return true;
+        });
+    });
+    it("should throw 'Could not identify which passkey device was used' when credentialId not found", async function () {
+        const mockProvider = {
+            create: sinon.stub(),
+            get: sinon.stub().resolves({
+                prfResult: new ArrayBuffer(32),
+                credentialId: 'unknown-cred-id',
+                otpCode: 'otp-123',
+            }),
+        };
+        const wallet = makeWallet(mockDevices);
+        await assert.rejects(() => (0, derivePasskeyPrfKey_1.derivePasskeyPrfKey)({ bitgo: makeBitGo(), wallet: wallet, provider: mockProvider }), (err) => {
+            assert.strictEqual(err.message, 'Could not identify which passkey device was used');
+            return true;
+        });
+    });
+});
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZGVyaXZlUGFzc2tleVByZktleS50ZXN0LmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vdGVzdC91bml0L2Rlcml2ZVBhc3NrZXlQcmZLZXkudGVzdC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7OztBQUFBLCtDQUFpQztBQUNqQyw2Q0FBK0I7QUFDL0IsdUVBQW9FO0FBRXBFLFFBQVEsQ0FBQyxxQkFBcUIsRUFBRTtJQUM5QixNQUFNLFdBQVcsR0FBRztRQUNsQjtZQUNFLFdBQVcsRUFBRSxVQUFVO1lBQ3ZCLGlCQUFpQixFQUFFLEVBQUUsTUFBTSxFQUFFLFVBQVUsRUFBRSxHQUFHLEVBQUUsTUFBZSxFQUFFLFNBQVMsRUFBRSxNQUFNLEVBQUU7WUFDbEYsT0FBTyxFQUFFLFVBQVU7WUFDbkIsWUFBWSxFQUFFLFdBQVc7U0FDMUI7UUFDRDtZQUNFLFdBQVcsRUFBRSxVQUFVO1lBQ3ZCLGlCQUFpQixFQUFFLEVBQUUsTUFBTSxFQUFFLFVBQVUsRUFBRSxHQUFHLEVBQUUsTUFBZSxFQUFFLFNBQVMsRUFBRSxNQUFNLEVBQUU7WUFDbEYsT0FBTyxFQUFFLFVBQVU7WUFDbkIsWUFBWSxFQUFFLFdBQVc7U0FDMUI7S0FDRixDQUFDO0lBRUYsU0FBUyxVQUFVLENBQUMsT0FBdUM7UUFDekQsT0FBTztZQUNMLHdCQUF3QixFQUFFLEtBQUssQ0FBQyxJQUFJLEVBQUUsQ0FBQyxRQUFRLENBQUM7Z0JBQzlDLEVBQUUsRUFBRSxhQUFhO2dCQUNqQixHQUFHLEVBQUUsU0FBUztnQkFDZCxZQUFZLEVBQUUsZUFBZTtnQkFDN0IsSUFBSSxFQUFFLGFBQWE7Z0JBQ25CLGVBQWUsRUFBRSxPQUFPO2FBQ3pCLENBQUM7U0FDSCxDQUFDO0lBQ0osQ0FBQztJQUVELFNBQVMsU0FBUyxDQUFDLFNBQVMsR0FBRyxzQkFBc0I7UUFDbkQsT0FBTztZQUNMLEdBQUcsRUFBRSxLQUFLLENBQUMsSUFBSSxFQUFFLENBQUMsU0FBUyxDQUFDLENBQUMsSUFBWSxFQUFFLEVBQUUsQ0FBQywrQkFBK0IsSUFBSSxFQUFFLENBQUM7WUFDcEYsR0FBRyxFQUFFLEtBQUssQ0FBQyxJQUFJLEVBQUUsQ0FBQyxPQUFPLENBQUM7Z0JBQ3hCLE1BQU0sRUFBRSxLQUFLLENBQUMsSUFBSSxFQUFFLENBQUMsUUFBUSxDQUFDLEVBQUUsU0FBUyxFQUFFLENBQUM7YUFDN0MsQ0FBQztTQUNILENBQUM7SUFDSixDQUFDO0lBRUQsU0FBUyxDQUFDO1FBQ1IsS0FBSyxDQUFDLE9BQU8sRUFBRSxDQUFDO0lBQ2xCLENBQUMsQ0FBQyxDQUFDO0lBRUgsRUFBRSxDQUFDLDBDQUEwQyxFQUFFLEtBQUs7UUFDbEQsTUFBTSxTQUFTLEdBQUcsSUFBSSxVQUFVLENBQUMsQ0FBQyxJQUFJLEVBQUUsSUFBSSxFQUFFLElBQUksRUFBRSxJQUFJLENBQUMsQ0FBQyxDQUFDLE1BQU0sQ0FBQztRQUVsRSxNQUFNLFlBQVksR0FBRztZQUNuQixNQUFNLEVBQUUsS0FBSyxDQUFDLElBQUksRUFBRTtZQUNwQixHQUFHLEVBQUUsS0FBSyxDQUFDLElBQUksRUFBRSxDQUFDLFFBQVEsQ0FBQztnQkFDekIsU0FBUztnQkFDVCxZQUFZLEVBQUUsVUFBVTtnQkFDeEIsT0FBTyxFQUFFLFNBQVM7YUFDbkIsQ0FBQztTQUNILENBQUM7UUFFRixNQUFNLE1BQU0sR0FBRyxVQUFVLENBQUMsV0FBVyxDQUFDLENBQUM7UUFDdkMsTUFBTSxTQUFTLEdBQUcsU0FBUyxFQUFFLENBQUM7UUFFOUIsTUFBTSxNQUFNLEdBQUcsTUFBTSxJQUFBLHlDQUFtQixFQUFDO1lBQ3ZDLEtBQUssRUFBRSxTQUFnQjtZQUN2QixNQUFNLEVBQUUsTUFBYTtZQUNyQixRQUFRLEVBQUUsWUFBWTtTQUN2QixDQUFDLENBQUM7UUFFSCw2Q0FBNkM7UUFDN0MsTUFBTSxDQUFDLFdBQVcsQ0FBQyxNQUFNLEVBQUUsVUFBVSxDQUFDLENBQUM7UUFDdkMsTUFBTSxDQUFDLEVBQUUsQ0FBQyxZQUFZLENBQUMsR0FBRyxDQUFDLFVBQVUsQ0FBQyxDQUFDO1FBQ3ZDLHFDQUFxQztRQUNyQyxNQUFNLFdBQVcsR0FBRyxZQUFZLENBQUMsR0FBRyxDQUFDLFNBQVMsQ0FBQyxJQUFJLENBQUMsQ0FBQyxDQUFDLENBQUM7UUFDdkQsTUFBTSxDQUFDLFdBQVcsQ0FBQyxXQUFXLENBQUMsZ0JBQWdCLENBQUMsVUFBVSxDQUFDLEVBQUUsVUFBVSxDQUFDLENBQUM7UUFDekUsTUFBTSxDQUFDLFdBQVcsQ0FBQyxXQUFXLENBQUMsZ0JBQWdCLENBQUMsVUFBVSxDQUFDLEVBQUUsVUFBVSxDQUFDLENBQUM7UUFDekUseURBQXlEO1FBQ3pELE1BQU0sQ0FBQyxFQUFFLENBQUMsU0FBUyxDQUFDLEdBQUcsQ0FBQyxVQUFVLENBQUMsQ0FBQztRQUNwQyxNQUFNLENBQUMsRUFBRSxDQUFDLFNBQVMsQ0FBQyxHQUFHLENBQUMsVUFBVSxDQUFDLHlCQUF5QixFQUFFLENBQUMsQ0FBQyxDQUFDLENBQUM7SUFDcEUsQ0FBQyxDQUFDLENBQUM7SUFFSCxFQUFFLENBQUMsNkRBQTZELEVBQUUsS0FBSztRQUNyRSxNQUFNLE1BQU0sR0FBRyxVQUFVLENBQUMsU0FBUyxDQUFDLENBQUM7UUFDckMsTUFBTSxZQUFZLEdBQUcsRUFBRSxNQUFNLEVBQUUsS0FBSyxDQUFDLElBQUksRUFBRSxFQUFFLEdBQUcsRUFBRSxLQUFLLENBQUMsSUFBSSxFQUFFLEVBQUUsQ0FBQztRQUVqRSxNQUFNLE1BQU0sQ0FBQyxPQUFPLENBQ2xCLEdBQUcsRUFBRSxDQUFDLElBQUEseUNBQW1CLEVBQUMsRUFBRSxLQUFLLEVBQUUsU0FBUyxFQUFTLEVBQUUsTUFBTSxFQUFFLE1BQWEsRUFBRSxRQUFRLEVBQUUsWUFBWSxFQUFFLENBQUMsRUFDdkcsQ0FBQyxHQUFVLEVBQUUsRUFBRTtZQUNiLE1BQU0sQ0FBQyxXQUFXLENBQUMsR0FBRyxDQUFDLE9BQU8sRUFBRSw4QkFBOEIsQ0FBQyxDQUFDO1lBQ2hFLE9BQU8sSUFBSSxDQUFDO1FBQ2QsQ0FBQyxDQUNGLENBQUM7SUFDSixDQUFDLENBQUMsQ0FBQztJQUVILEVBQUUsQ0FBQyx5RUFBeUUsRUFBRSxLQUFLO1FBQ2pGLE1BQU0sTUFBTSxHQUFHLFVBQVUsQ0FBQyxFQUFTLENBQUMsQ0FBQztRQUNyQyxNQUFNLFlBQVksR0FBRyxFQUFFLE1BQU0sRUFBRSxLQUFLLENBQUMsSUFBSSxFQUFFLEVBQUUsR0FBRyxFQUFFLEtBQUssQ0FBQyxJQUFJLEVBQUUsRUFBRSxDQUFDO1FBRWpFLE1BQU0sTUFBTSxDQUFDLE9BQU8sQ0FDbEIsR0FBRyxFQUFFLENBQUMsSUFBQSx5Q0FBbUIsRUFBQyxFQUFFLEtBQUssRUFBRSxTQUFTLEVBQVMsRUFBRSxNQUFNLEVBQUUsTUFBYSxFQUFFLFFBQVEsRUFBRSxZQUFZLEVBQUUsQ0FBQyxFQUN2RyxDQUFDLEdBQVUsRUFBRSxFQUFFO1lBQ2IsTUFBTSxDQUFDLFdBQVcsQ0FBQyxHQUFHLENBQUMsT0FBTyxFQUFFLDhCQUE4QixDQUFDLENBQUM7WUFDaEUsT0FBTyxJQUFJLENBQUM7UUFDZCxDQUFDLENBQ0YsQ0FBQztJQUNKLENBQUMsQ0FBQyxDQUFDO0lBRUgsRUFBRSxDQUFDLDhGQUE4RixFQUFFLEtBQUs7UUFDdEcsTUFBTSxrQkFBa0IsR0FBRztZQUN6QjtnQkFDRSxXQUFXLEVBQUUsVUFBVTtnQkFDdkIsaUJBQWlCLEVBQUUsRUFBRSxNQUFNLEVBQUUsVUFBVSxFQUFFLEdBQUcsRUFBRSxNQUFlLEVBQUUsU0FBUyxFQUFFLE1BQU0sRUFBRTtnQkFDbEYsT0FBTyxFQUFFLEVBQUUsRUFBRSxvREFBb0Q7Z0JBQ2pFLFlBQVksRUFBRSxXQUFXO2FBQzFCO1NBQ0YsQ0FBQztRQUVGLE1BQU0sTUFBTSxHQUFHLFVBQVUsQ0FBQyxrQkFBeUIsQ0FBQyxDQUFDO1FBQ3JELE1BQU0sWUFBWSxHQUFHLEVBQUUsTUFBTSxFQUFFLEtBQUssQ0FBQyxJQUFJLEVBQUUsRUFBRSxHQUFHLEVBQUUsS0FBSyxDQUFDLElBQUksRUFBRSxFQUFFLENBQUM7UUFFakUsTUFBTSxNQUFNLENBQUMsT0FBTyxDQUNsQixHQUFHLEVBQUUsQ0FBQyxJQUFBLHlDQUFtQixFQUFDLEVBQUUsS0FBSyxFQUFFLFNBQVMsRUFBUyxFQUFFLE1BQU0sRUFBRSxNQUFhLEVBQUUsUUFBUSxFQUFFLFlBQVksRUFBRSxDQUFDLEVBQ3ZHLENBQUMsR0FBVSxFQUFFLEVBQUU7WUFDYixNQUFNLENBQUMsV0FBVyxDQUFDLEdBQUcsQ0FBQyxPQUFPLEVBQUUsb0RBQW9ELENBQUMsQ0FBQztZQUN0RixPQUFPLElBQUksQ0FBQztRQUNkLENBQUMsQ0FDRixDQUFDO0lBQ0osQ0FBQyxDQUFDLENBQUM7SUFFSCxFQUFFLENBQUMsNkZBQTZGLEVBQUUsS0FBSztRQUNyRyxNQUFNLFlBQVksR0FBRztZQUNuQixNQUFNLEVBQUUsS0FBSyxDQUFDLElBQUksRUFBRTtZQUNwQixHQUFHLEVBQUUsS0FBSyxDQUFDLElBQUksRUFBRSxDQUFDLFFBQVEsQ0FBQztnQkFDekIsU0FBUyxFQUFFLElBQUksV0FBVyxDQUFDLEVBQUUsQ0FBQztnQkFDOUIsWUFBWSxFQUFFLGlCQUFpQjtnQkFDL0IsT0FBTyxFQUFFLFNBQVM7YUFDbkIsQ0FBQztTQUNILENBQUM7UUFFRixNQUFNLE1BQU0sR0FBRyxVQUFVLENBQUMsV0FBVyxDQUFDLENBQUM7UUFFdkMsTUFBTSxNQUFNLENBQUMsT0FBTyxDQUNsQixHQUFHLEVBQUUsQ0FBQyxJQUFBLHlDQUFtQixFQUFDLEVBQUUsS0FBSyxFQUFFLFNBQVMsRUFBUyxFQUFFLE1BQU0sRUFBRSxNQUFhLEVBQUUsUUFBUSxFQUFFLFlBQVksRUFBRSxDQUFDLEVBQ3ZHLENBQUMsR0FBVSxFQUFFLEVBQUU7WUFDYixNQUFNLENBQUMsV0FBVyxDQUFDLEdBQUcsQ0FBQyxPQUFPLEVBQUUsa0RBQWtELENBQUMsQ0FBQztZQUNwRixPQUFPLElBQUksQ0FBQztRQUNkLENBQUMsQ0FDRixDQUFDO0lBQ0osQ0FBQyxDQUFDLENBQUM7QUFDTCxDQUFDLENBQUMsQ0FBQyIsInNvdXJjZXNDb250ZW50IjpbImltcG9ydCAqIGFzIGFzc2VydCBmcm9tICdhc3NlcnQnO1xuaW1wb3J0ICogYXMgc2lub24gZnJvbSAnc2lub24nO1xuaW1wb3J0IHsgZGVyaXZlUGFzc2tleVByZktleSB9IGZyb20gJy4uLy4uL3NyYy9kZXJpdmVQYXNza2V5UHJmS2V5JztcblxuZGVzY3JpYmUoJ2Rlcml2ZVBhc3NrZXlQcmZLZXknLCBmdW5jdGlvbiAoKSB7XG4gIGNvbnN0IG1vY2tEZXZpY2VzID0gW1xuICAgIHtcbiAgICAgIG90cERldmljZUlkOiAnZGV2aWNlLTEnLFxuICAgICAgYXV0aGVudGljYXRvckluZm86IHsgY3JlZElEOiAnY3JlZC1hYWEnLCBmbXQ6ICdub25lJyBhcyBjb25zdCwgcHVibGljS2V5OiAncGstMScgfSxcbiAgICAgIHByZlNhbHQ6ICdzYWx0LWFhYScsXG4gICAgICBlbmNyeXB0ZWRQcnY6ICdlbmMtcHJ2LTEnLFxuICAgIH0sXG4gICAge1xuICAgICAgb3RwRGV2aWNlSWQ6ICdkZXZpY2UtMicsXG4gICAgICBhdXRoZW50aWNhdG9ySW5mbzogeyBjcmVkSUQ6ICdjcmVkLWJiYicsIGZtdDogJ25vbmUnIGFzIGNvbnN0LCBwdWJsaWNLZXk6ICdway0yJyB9LFxuICAgICAgcHJmU2FsdDogJ3NhbHQtYmJiJyxcbiAgICAgIGVuY3J5cHRlZFBydjogJ2VuYy1wcnYtMicsXG4gICAgfSxcbiAgXTtcblxuICBmdW5jdGlvbiBtYWtlV2FsbGV0KGRldmljZXM6IHR5cGVvZiBtb2NrRGV2aWNlcyB8IHVuZGVmaW5lZCkge1xuICAgIHJldHVybiB7XG4gICAgICBnZXRFbmNyeXB0ZWRVc2VyS2V5Y2hhaW46IHNpbm9uLnN0dWIoKS5yZXNvbHZlcyh7XG4gICAgICAgIGlkOiAna2V5Y2hhaW4taWQnLFxuICAgICAgICBwdWI6ICd4cHViMTIzJyxcbiAgICAgICAgZW5jcnlwdGVkUHJ2OiAnZW5jcnlwdGVkLXBydicsXG4gICAgICAgIHR5cGU6ICdpbmRlcGVuZGVudCcsXG4gICAgICAgIHdlYmF1dGhuRGV2aWNlczogZGV2aWNlcyxcbiAgICAgIH0pLFxuICAgIH07XG4gIH1cblxuICBmdW5jdGlvbiBtYWtlQml0R28oY2hhbGxlbmdlID0gJ2RHVnpkQzFqYUdGc2JHVnVaMlU9Jykge1xuICAgIHJldHVybiB7XG4gICAgICB1cmw6IHNpbm9uLnN0dWIoKS5jYWxsc0Zha2UoKHBhdGg6IHN0cmluZykgPT4gYGh0dHBzOi8vYXBwLmJpdGdvLmNvbS9hcGkvdjIke3BhdGh9YCksXG4gICAgICBnZXQ6IHNpbm9uLnN0dWIoKS5yZXR1cm5zKHtcbiAgICAgICAgcmVzdWx0OiBzaW5vbi5zdHViKCkucmVzb2x2ZXMoeyBjaGFsbGVuZ2UgfSksXG4gICAgICB9KSxcbiAgICB9O1xuICB9XG5cbiAgYWZ0ZXJFYWNoKGZ1bmN0aW9uICgpIHtcbiAgICBzaW5vbi5yZXN0b3JlKCk7XG4gIH0pO1xuXG4gIGl0KCdzaG91bGQgcmV0dXJuIGEgaGV4IHN0cmluZyBvbiBoYXBweSBwYXRoJywgYXN5bmMgZnVuY3Rpb24gKCkge1xuICAgIGNvbnN0IHByZlJlc3VsdCA9IG5ldyBVaW50OEFycmF5KFsweGRlLCAweGFkLCAweGJlLCAweGVmXSkuYnVmZmVyO1xuXG4gICAgY29uc3QgbW9ja1Byb3ZpZGVyID0ge1xuICAgICAgY3JlYXRlOiBzaW5vbi5zdHViKCksXG4gICAgICBnZXQ6IHNpbm9uLnN0dWIoKS5yZXNvbHZlcyh7XG4gICAgICAgIHByZlJlc3VsdCxcbiAgICAgICAgY3JlZGVudGlhbElkOiAnY3JlZC1hYWEnLFxuICAgICAgICBvdHBDb2RlOiAnb3RwLTEyMycsXG4gICAgICB9KSxcbiAgICB9O1xuXG4gICAgY29uc3Qgd2FsbGV0ID0gbWFrZVdhbGxldChtb2NrRGV2aWNlcyk7XG4gICAgY29uc3QgbW9ja0JpdEdvID0gbWFrZUJpdEdvKCk7XG5cbiAgICBjb25zdCByZXN1bHQgPSBhd2FpdCBkZXJpdmVQYXNza2V5UHJmS2V5KHtcbiAgICAgIGJpdGdvOiBtb2NrQml0R28gYXMgYW55LFxuICAgICAgd2FsbGV0OiB3YWxsZXQgYXMgYW55LFxuICAgICAgcHJvdmlkZXI6IG1vY2tQcm92aWRlcixcbiAgICB9KTtcblxuICAgIC8vIGRlcml2ZVBhc3N3b3JkIGNvbnZlcnRzIEFycmF5QnVmZmVyIHRvIGhleFxuICAgIGFzc2VydC5zdHJpY3RFcXVhbChyZXN1bHQsICdkZWFkYmVlZicpO1xuICAgIGFzc2VydC5vayhtb2NrUHJvdmlkZXIuZ2V0LmNhbGxlZE9uY2UpO1xuICAgIC8vIFZlcmlmeSBldmFsQnlDcmVkZW50aWFsIHdhcyBwYXNzZWRcbiAgICBjb25zdCBnZXRDYWxsQXJncyA9IG1vY2tQcm92aWRlci5nZXQuZmlyc3RDYWxsLmFyZ3NbMF07XG4gICAgYXNzZXJ0LnN0cmljdEVxdWFsKGdldENhbGxBcmdzLmV2YWxCeUNyZWRlbnRpYWxbJ2NyZWQtYWFhJ10sICdzYWx0LWFhYScpO1xuICAgIGFzc2VydC5zdHJpY3RFcXVhbChnZXRDYWxsQXJncy5ldmFsQnlDcmVkZW50aWFsWydjcmVkLWJiYiddLCAnc2FsdC1iYmInKTtcbiAgICAvLyBWZXJpZnkgYml0Z28gd2FzIHVzZWQgdG8gZmV0Y2ggdGhlIGFzc2VydGlvbiBjaGFsbGVuZ2VcbiAgICBhc3NlcnQub2sobW9ja0JpdEdvLmdldC5jYWxsZWRPbmNlKTtcbiAgICBhc3NlcnQub2sobW9ja0JpdEdvLnVybC5jYWxsZWRXaXRoKCcvdXNlci9vdHAvd2ViYXV0aG4vYXV0aCcsIDIpKTtcbiAgfSk7XG5cbiAgaXQoXCJzaG91bGQgdGhyb3cgJ05vIHBhc3NrZXkgZGV2aWNlcyBhdmFpbGFibGUnIHdoZW4gbm8gZGV2aWNlc1wiLCBhc3luYyBmdW5jdGlvbiAoKSB7XG4gICAgY29uc3Qgd2FsbGV0ID0gbWFrZVdhbGxldCh1bmRlZmluZWQpO1xuICAgIGNvbnN0IG1vY2tQcm92aWRlciA9IHsgY3JlYXRlOiBzaW5vbi5zdHViKCksIGdldDogc2lub24uc3R1YigpIH07XG5cbiAgICBhd2FpdCBhc3NlcnQucmVqZWN0cyhcbiAgICAgICgpID0+IGRlcml2ZVBhc3NrZXlQcmZLZXkoeyBiaXRnbzogbWFrZUJpdEdvKCkgYXMgYW55LCB3YWxsZXQ6IHdhbGxldCBhcyBhbnksIHByb3ZpZGVyOiBtb2NrUHJvdmlkZXIgfSksXG4gICAgICAoZXJyOiBFcnJvcikgPT4ge1xuICAgICAgICBhc3NlcnQuc3RyaWN0RXF1YWwoZXJyLm1lc3NhZ2UsICdObyBwYXNza2V5IGRldmljZXMgYXZhaWxhYmxlJyk7XG4gICAgICAgIHJldHVybiB0cnVlO1xuICAgICAgfVxuICAgICk7XG4gIH0pO1xuXG4gIGl0KFwic2hvdWxkIHRocm93ICdObyBwYXNza2V5IGRldmljZXMgYXZhaWxhYmxlJyB3aGVuIGRldmljZXMgYXJyYXkgaXMgZW1wdHlcIiwgYXN5bmMgZnVuY3Rpb24gKCkge1xuICAgIGNvbnN0IHdhbGxldCA9IG1ha2VXYWxsZXQoW10gYXMgYW55KTtcbiAgICBjb25zdCBtb2NrUHJvdmlkZXIgPSB7IGNyZWF0ZTogc2lub24uc3R1YigpLCBnZXQ6IHNpbm9uLnN0dWIoKSB9O1xuXG4gICAgYXdhaXQgYXNzZXJ0LnJlamVjdHMoXG4gICAgICAoKSA9PiBkZXJpdmVQYXNza2V5UHJmS2V5KHsgYml0Z286IG1ha2VCaXRHbygpIGFzIGFueSwgd2FsbGV0OiB3YWxsZXQgYXMgYW55LCBwcm92aWRlcjogbW9ja1Byb3ZpZGVyIH0pLFxuICAgICAgKGVycjogRXJyb3IpID0+IHtcbiAgICAgICAgYXNzZXJ0LnN0cmljdEVxdWFsKGVyci5tZXNzYWdlLCAnTm8gcGFzc2tleSBkZXZpY2VzIGF2YWlsYWJsZScpO1xuICAgICAgICByZXR1cm4gdHJ1ZTtcbiAgICAgIH1cbiAgICApO1xuICB9KTtcblxuICBpdChcInNob3VsZCB0aHJvdyAnTm8gcGFzc2tleSBkZXZpY2VzIGF2YWlsYWJsZSB3aXRoIGEgdmFsaWQgUFJGIHNhbHQnIHdoZW4gbm8gZGV2aWNlIGhhcyBwcmZTYWx0XCIsIGFzeW5jIGZ1bmN0aW9uICgpIHtcbiAgICBjb25zdCBkZXZpY2VzV2l0aG91dFNhbHQgPSBbXG4gICAgICB7XG4gICAgICAgIG90cERldmljZUlkOiAnZGV2aWNlLTEnLFxuICAgICAgICBhdXRoZW50aWNhdG9ySW5mbzogeyBjcmVkSUQ6ICdjcmVkLWFhYScsIGZtdDogJ25vbmUnIGFzIGNvbnN0LCBwdWJsaWNLZXk6ICdway0xJyB9LFxuICAgICAgICBwcmZTYWx0OiAnJywgLy8gZW1wdHkg4oCUIGJ1aWxkRXZhbEJ5Q3JlZGVudGlhbCBza2lwcyBmYWxzeSBwcmZTYWx0XG4gICAgICAgIGVuY3J5cHRlZFBydjogJ2VuYy1wcnYtMScsXG4gICAgICB9LFxuICAgIF07XG5cbiAgICBjb25zdCB3YWxsZXQgPSBtYWtlV2FsbGV0KGRldmljZXNXaXRob3V0U2FsdCBhcyBhbnkpO1xuICAgIGNvbnN0IG1vY2tQcm92aWRlciA9IHsgY3JlYXRlOiBzaW5vbi5zdHViKCksIGdldDogc2lub24uc3R1YigpIH07XG5cbiAgICBhd2FpdCBhc3NlcnQucmVqZWN0cyhcbiAgICAgICgpID0+IGRlcml2ZVBhc3NrZXlQcmZLZXkoeyBiaXRnbzogbWFrZUJpdEdvKCkgYXMgYW55LCB3YWxsZXQ6IHdhbGxldCBhcyBhbnksIHByb3ZpZGVyOiBtb2NrUHJvdmlkZXIgfSksXG4gICAgICAoZXJyOiBFcnJvcikgPT4ge1xuICAgICAgICBhc3NlcnQuc3RyaWN0RXF1YWwoZXJyLm1lc3NhZ2UsICdObyBwYXNza2V5IGRldmljZXMgYXZhaWxhYmxlIHdpdGggYSB2YWxpZCBQUkYgc2FsdCcpO1xuICAgICAgICByZXR1cm4gdHJ1ZTtcbiAgICAgIH1cbiAgICApO1xuICB9KTtcblxuICBpdChcInNob3VsZCB0aHJvdyAnQ291bGQgbm90IGlkZW50aWZ5IHdoaWNoIHBhc3NrZXkgZGV2aWNlIHdhcyB1c2VkJyB3aGVuIGNyZWRlbnRpYWxJZCBub3QgZm91bmRcIiwgYXN5bmMgZnVuY3Rpb24gKCkge1xuICAgIGNvbnN0IG1vY2tQcm92aWRlciA9IHtcbiAgICAgIGNyZWF0ZTogc2lub24uc3R1YigpLFxuICAgICAgZ2V0OiBzaW5vbi5zdHViKCkucmVzb2x2ZXMoe1xuICAgICAgICBwcmZSZXN1bHQ6IG5ldyBBcnJheUJ1ZmZlcigzMiksXG4gICAgICAgIGNyZWRlbnRpYWxJZDogJ3Vua25vd24tY3JlZC1pZCcsXG4gICAgICAgIG90cENvZGU6ICdvdHAtMTIzJyxcbiAgICAgIH0pLFxuICAgIH07XG5cbiAgICBjb25zdCB3YWxsZXQgPSBtYWtlV2FsbGV0KG1vY2tEZXZpY2VzKTtcblxuICAgIGF3YWl0IGFzc2VydC5yZWplY3RzKFxuICAgICAgKCkgPT4gZGVyaXZlUGFzc2tleVByZktleSh7IGJpdGdvOiBtYWtlQml0R28oKSBhcyBhbnksIHdhbGxldDogd2FsbGV0IGFzIGFueSwgcHJvdmlkZXI6IG1vY2tQcm92aWRlciB9KSxcbiAgICAgIChlcnI6IEVycm9yKSA9PiB7XG4gICAgICAgIGFzc2VydC5zdHJpY3RFcXVhbChlcnIubWVzc2FnZSwgJ0NvdWxkIG5vdCBpZGVudGlmeSB3aGljaCBwYXNza2V5IGRldmljZSB3YXMgdXNlZCcpO1xuICAgICAgICByZXR1cm4gdHJ1ZTtcbiAgICAgIH1cbiAgICApO1xuICB9KTtcbn0pO1xuIl19

package/dist/test/unit/derivePassword.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=derivePassword.test.d.ts.map

package/dist/test/unit/derivePassword.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"derivePassword.test.d.ts","sourceRoot":"","sources":["../../../test/unit/derivePassword.test.ts"],"names":[],"mappings":""}

package/dist/test/unit/derivePassword.test.js

@@ -0,0 +1,66 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const assert = __importStar(require("assert"));
+const src_1 = require("../../src");
+// Real fixture values captured from a live environment (browser devtools)
+const REAL_FIXTURE = {
+    prfOutputBase64: 'Hly0eFbg+8ZX9B2GWuDlNTRkvSLF0nHRTTOvw+ljAzs=',
+    expectedPasswordHex: '1e5cb47856e0fbc657f41d865ae0e5353464bd22c5d271d14d33afc3e963033b',
+};
+describe('derivePassword', function () {
+    it('produces the correct hex password for real PRF output fixture', function () {
+        // Verifies SDK output matches what the retail UI produces for the same PRF result,
+        // ensuring clients can move between SDK and retail app seamlessly.
+        const prfBuffer = Buffer.from(REAL_FIXTURE.prfOutputBase64, 'base64');
+        assert.strictEqual((0, src_1.derivePassword)(new Uint8Array(prfBuffer).buffer), REAL_FIXTURE.expectedPasswordHex);
+    });
+    it('converts an ArrayBuffer of zeros to a hex string of zeros', function () {
+        assert.strictEqual((0, src_1.derivePassword)(new ArrayBuffer(4)), '00000000');
+    });
+    it('returns a lowercase hex string', function () {
+        const input = new Uint8Array([0xab, 0xcd]).buffer;
+        const result = (0, src_1.derivePassword)(input);
+        assert.strictEqual(result, result.toLowerCase());
+    });
+    it('returns a string of length 2x the input byte length', function () {
+        assert.strictEqual((0, src_1.derivePassword)(new ArrayBuffer(32)).length, 64);
+    });
+    it('is deterministic — same inputs produce same output', function () {
+        const input = new Uint8Array([1, 2, 3, 4, 5]).buffer;
+        assert.strictEqual((0, src_1.derivePassword)(input), (0, src_1.derivePassword)(input));
+    });
+});
+//# sourceMappingURL=data:application/json;base64,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

package/dist/test/unit/prfHelpers.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=prfHelpers.test.d.ts.map

package/dist/test/unit/prfHelpers.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prfHelpers.test.d.ts","sourceRoot":"","sources":["../../../test/unit/prfHelpers.test.ts"],"names":[],"mappings":""}

package/dist/test/unit/prfHelpers.test.js

@@ -0,0 +1,99 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const assert = __importStar(require("assert"));
+const src_1 = require("../../src");
+const device1 = {
+    otpDeviceId: 'oid-1',
+    authenticatorInfo: { credID: 'cred-aaa', fmt: 'none', publicKey: 'pk-1' },
+    prfSalt: 'salt-aaa',
+    encryptedPrv: 'enc-prv-1',
+};
+const device2 = {
+    otpDeviceId: 'oid-2',
+    authenticatorInfo: { credID: 'cred-bbb', fmt: 'none', publicKey: 'pk-2' },
+    prfSalt: 'salt-bbb',
+    encryptedPrv: 'enc-prv-2',
+};
+describe('buildEvalByCredential', function () {
+    it('maps each device credID to its prfSalt in evalByCredential', function () {
+        const { evalByCredential } = (0, src_1.buildEvalByCredential)([device1, device2]);
+        assert.deepStrictEqual(evalByCredential, { 'cred-aaa': 'salt-aaa', 'cred-bbb': 'salt-bbb' });
+    });
+    it('populates credIdToDevice with both devices', function () {
+        const { credIdToDevice } = (0, src_1.buildEvalByCredential)([device1, device2]);
+        assert.strictEqual(credIdToDevice.get('cred-aaa'), device1);
+        assert.strictEqual(credIdToDevice.get('cred-bbb'), device2);
+    });
+    it('returns empty maps for an empty device list', function () {
+        const { evalByCredential, credIdToDevice } = (0, src_1.buildEvalByCredential)([]);
+        assert.deepStrictEqual(evalByCredential, {});
+        assert.strictEqual(credIdToDevice.size, 0);
+    });
+    it('skips devices with empty prfSalt', function () {
+        const deviceNoPrf = { ...device1, prfSalt: '' };
+        const { evalByCredential, credIdToDevice } = (0, src_1.buildEvalByCredential)([deviceNoPrf, device2]);
+        assert.deepStrictEqual(evalByCredential, { 'cred-bbb': 'salt-bbb' });
+        assert.strictEqual(credIdToDevice.has('cred-aaa'), false);
+    });
+    it('skips devices with undefined prfSalt', function () {
+        const deviceNoPrf = { ...device1, prfSalt: undefined };
+        const { evalByCredential, credIdToDevice } = (0, src_1.buildEvalByCredential)([deviceNoPrf, device2]);
+        assert.deepStrictEqual(evalByCredential, { 'cred-bbb': 'salt-bbb' });
+        assert.strictEqual(credIdToDevice.has('cred-aaa'), false);
+    });
+});
+describe('matchDeviceByCredentialId', function () {
+    it('returns the matching device', function () {
+        assert.strictEqual((0, src_1.matchDeviceByCredentialId)([device1, device2], 'cred-bbb'), device2);
+    });
+    it('returns the first device when it matches', function () {
+        assert.strictEqual((0, src_1.matchDeviceByCredentialId)([device1, device2], 'cred-aaa'), device1);
+    });
+    it('returns a device even when it has no prfSalt', function () {
+        const deviceNoPrf = { ...device1, prfSalt: '' };
+        assert.strictEqual((0, src_1.matchDeviceByCredentialId)([deviceNoPrf, device2], 'cred-aaa'), deviceNoPrf);
+    });
+    it('throws the expected error message when no device matches', function () {
+        assert.throws(() => (0, src_1.matchDeviceByCredentialId)([device1, device2], 'cred-unknown'), (err) => {
+            assert.strictEqual(err.message, 'Could not identify which passkey device was used');
+            return true;
+        });
+    });
+    it('throws when the device list is empty', function () {
+        assert.throws(() => (0, src_1.matchDeviceByCredentialId)([], 'cred-aaa'), Error);
+    });
+});
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoicHJmSGVscGVycy50ZXN0LmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vLi4vLi4vdGVzdC91bml0L3ByZkhlbHBlcnMudGVzdC50cyJdLCJuYW1lcyI6W10sIm1hcHBpbmdzIjoiOzs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7OztBQUFBLCtDQUFpQztBQUNqQyxtQ0FBNkU7QUFHN0UsTUFBTSxPQUFPLEdBQW1CO0lBQzlCLFdBQVcsRUFBRSxPQUFPO0lBQ3BCLGlCQUFpQixFQUFFLEVBQUUsTUFBTSxFQUFFLFVBQVUsRUFBRSxHQUFHLEVBQUUsTUFBTSxFQUFFLFNBQVMsRUFBRSxNQUFNLEVBQUU7SUFDekUsT0FBTyxFQUFFLFVBQVU7SUFDbkIsWUFBWSxFQUFFLFdBQVc7Q0FDMUIsQ0FBQztBQUVGLE1BQU0sT0FBTyxHQUFtQjtJQUM5QixXQUFXLEVBQUUsT0FBTztJQUNwQixpQkFBaUIsRUFBRSxFQUFFLE1BQU0sRUFBRSxVQUFVLEVBQUUsR0FBRyxFQUFFLE1BQU0sRUFBRSxTQUFTLEVBQUUsTUFBTSxFQUFFO0lBQ3pFLE9BQU8sRUFBRSxVQUFVO0lBQ25CLFlBQVksRUFBRSxXQUFXO0NBQzFCLENBQUM7QUFFRixRQUFRLENBQUMsdUJBQXVCLEVBQUU7SUFDaEMsRUFBRSxDQUFDLDREQUE0RCxFQUFFO1FBQy9ELE1BQU0sRUFBRSxnQkFBZ0IsRUFBRSxHQUFHLElBQUEsMkJBQXFCLEVBQUMsQ0FBQyxPQUFPLEVBQUUsT0FBTyxDQUFDLENBQUMsQ0FBQztRQUN2RSxNQUFNLENBQUMsZUFBZSxDQUFDLGdCQUFnQixFQUFFLEVBQUUsVUFBVSxFQUFFLFVBQVUsRUFBRSxVQUFVLEVBQUUsVUFBVSxFQUFFLENBQUMsQ0FBQztJQUMvRixDQUFDLENBQUMsQ0FBQztJQUVILEVBQUUsQ0FBQyw0Q0FBNEMsRUFBRTtRQUMvQyxNQUFNLEVBQUUsY0FBYyxFQUFFLEdBQUcsSUFBQSwyQkFBcUIsRUFBQyxDQUFDLE9BQU8sRUFBRSxPQUFPLENBQUMsQ0FBQyxDQUFDO1FBQ3JFLE1BQU0sQ0FBQyxXQUFXLENBQUMsY0FBYyxDQUFDLEdBQUcsQ0FBQyxVQUFVLENBQUMsRUFBRSxPQUFPLENBQUMsQ0FBQztRQUM1RCxNQUFNLENBQUMsV0FBVyxDQUFDLGNBQWMsQ0FBQyxHQUFHLENBQUMsVUFBVSxDQUFDLEVBQUUsT0FBTyxDQUFDLENBQUM7SUFDOUQsQ0FBQyxDQUFDLENBQUM7SUFFSCxFQUFFLENBQUMsNkNBQTZDLEVBQUU7UUFDaEQsTUFBTSxFQUFFLGdCQUFnQixFQUFFLGNBQWMsRUFBRSxHQUFHLElBQUEsMkJBQXFCLEVBQUMsRUFBRSxDQUFDLENBQUM7UUFDdkUsTUFBTSxDQUFDLGVBQWUsQ0FBQyxnQkFBZ0IsRUFBRSxFQUFFLENBQUMsQ0FBQztRQUM3QyxNQUFNLENBQUMsV0FBVyxDQUFDLGNBQWMsQ0FBQyxJQUFJLEVBQUUsQ0FBQyxDQUFDLENBQUM7SUFDN0MsQ0FBQyxDQUFDLENBQUM7SUFFSCxFQUFFLENBQUMsa0NBQWtDLEVBQUU7UUFDckMsTUFBTSxXQUFXLEdBQUcsRUFBRSxHQUFHLE9BQU8sRUFBRSxPQUFPLEVBQUUsRUFBRSxFQUFFLENBQUM7UUFDaEQsTUFBTSxFQUFFLGdCQUFnQixFQUFFLGNBQWMsRUFBRSxHQUFHLElBQUEsMkJBQXFCLEVBQUMsQ0FBQyxXQUFXLEVBQUUsT0FBTyxDQUFDLENBQUMsQ0FBQztRQUMzRixNQUFNLENBQUMsZUFBZSxDQUFDLGdCQUFnQixFQUFFLEVBQUUsVUFBVSxFQUFFLFVBQVUsRUFBRSxDQUFDLENBQUM7UUFDckUsTUFBTSxDQUFDLFdBQVcsQ0FBQyxjQUFjLENBQUMsR0FBRyxDQUFDLFVBQVUsQ0FBQyxFQUFFLEtBQUssQ0FBQyxDQUFDO0lBQzVELENBQUMsQ0FBQyxDQUFDO0lBRUgsRUFBRSxDQUFDLHNDQUFzQyxFQUFFO1FBQ3pDLE1BQU0sV0FBVyxHQUFHLEVBQUUsR0FBRyxPQUFPLEVBQUUsT0FBTyxFQUFFLFNBQThCLEVBQUUsQ0FBQztRQUM1RSxNQUFNLEVBQUUsZ0JBQWdCLEVBQUUsY0FBYyxFQUFFLEdBQUcsSUFBQSwyQkFBcUIsRUFBQyxDQUFDLFdBQVcsRUFBRSxPQUFPLENBQUMsQ0FBQyxDQUFDO1FBQzNGLE1BQU0sQ0FBQyxlQUFlLENBQUMsZ0JBQWdCLEVBQUUsRUFBRSxVQUFVLEVBQUUsVUFBVSxFQUFFLENBQUMsQ0FBQztRQUNyRSxNQUFNLENBQUMsV0FBVyxDQUFDLGNBQWMsQ0FBQyxHQUFHLENBQUMsVUFBVSxDQUFDLEVBQUUsS0FBSyxDQUFDLENBQUM7SUFDNUQsQ0FBQyxDQUFDLENBQUM7QUFDTCxDQUFDLENBQUMsQ0FBQztBQUVILFFBQVEsQ0FBQywyQkFBMkIsRUFBRTtJQUNwQyxFQUFFLENBQUMsNkJBQTZCLEVBQUU7UUFDaEMsTUFBTSxDQUFDLFdBQVcsQ0FBQyxJQUFBLCtCQUF5QixFQUFDLENBQUMsT0FBTyxFQUFFLE9BQU8sQ0FBQyxFQUFFLFVBQVUsQ0FBQyxFQUFFLE9BQU8sQ0FBQyxDQUFDO0lBQ3pGLENBQUMsQ0FBQyxDQUFDO0lBRUgsRUFBRSxDQUFDLDBDQUEwQyxFQUFFO1FBQzdDLE1BQU0sQ0FBQyxXQUFXLENBQUMsSUFBQSwrQkFBeUIsRUFBQyxDQUFDLE9BQU8sRUFBRSxPQUFPLENBQUMsRUFBRSxVQUFVLENBQUMsRUFBRSxPQUFPLENBQUMsQ0FBQztJQUN6RixDQUFDLENBQUMsQ0FBQztJQUVILEVBQUUsQ0FBQyw4Q0FBOEMsRUFBRTtRQUNqRCxNQUFNLFdBQVcsR0FBRyxFQUFFLEdBQUcsT0FBTyxFQUFFLE9BQU8sRUFBRSxFQUFFLEVBQUUsQ0FBQztRQUNoRCxNQUFNLENBQUMsV0FBVyxDQUFDLElBQUEsK0JBQXlCLEVBQUMsQ0FBQyxXQUFXLEVBQUUsT0FBTyxDQUFDLEVBQUUsVUFBVSxDQUFDLEVBQUUsV0FBVyxDQUFDLENBQUM7SUFDakcsQ0FBQyxDQUFDLENBQUM7SUFFSCxFQUFFLENBQUMsMERBQTBELEVBQUU7UUFDN0QsTUFBTSxDQUFDLE1BQU0sQ0FDWCxHQUFHLEVBQUUsQ0FBQyxJQUFBLCtCQUF5QixFQUFDLENBQUMsT0FBTyxFQUFFLE9BQU8sQ0FBQyxFQUFFLGNBQWMsQ0FBQyxFQUNuRSxDQUFDLEdBQVUsRUFBRSxFQUFFO1lBQ2IsTUFBTSxDQUFDLFdBQVcsQ0FBQyxHQUFHLENBQUMsT0FBTyxFQUFFLGtEQUFrRCxDQUFDLENBQUM7WUFDcEYsT0FBTyxJQUFJLENBQUM7UUFDZCxDQUFDLENBQ0YsQ0FBQztJQUNKLENBQUMsQ0FBQyxDQUFDO0lBRUgsRUFBRSxDQUFDLHNDQUFzQyxFQUFFO1FBQ3pDLE1BQU0sQ0FBQyxNQUFNLENBQUMsR0FBRyxFQUFFLENBQUMsSUFBQSwrQkFBeUIsRUFBQyxFQUFFLEVBQUUsVUFBVSxDQUFDLEVBQUUsS0FBSyxDQUFDLENBQUM7SUFDeEUsQ0FBQyxDQUFDLENBQUM7QUFDTCxDQUFDLENBQUMsQ0FBQyIsInNvdXJjZXNDb250ZW50IjpbImltcG9ydCAqIGFzIGFzc2VydCBmcm9tICdhc3NlcnQnO1xuaW1wb3J0IHsgYnVpbGRFdmFsQnlDcmVkZW50aWFsLCBtYXRjaERldmljZUJ5Q3JlZGVudGlhbElkIH0gZnJvbSAnLi4vLi4vc3JjJztcbmltcG9ydCB7IFdlYmF1dGhuRGV2aWNlIH0gZnJvbSAnQGJpdGdvL3B1YmxpYy10eXBlcyc7XG5cbmNvbnN0IGRldmljZTE6IFdlYmF1dGhuRGV2aWNlID0ge1xuICBvdHBEZXZpY2VJZDogJ29pZC0xJyxcbiAgYXV0aGVudGljYXRvckluZm86IHsgY3JlZElEOiAnY3JlZC1hYWEnLCBmbXQ6ICdub25lJywgcHVibGljS2V5OiAncGstMScgfSxcbiAgcHJmU2FsdDogJ3NhbHQtYWFhJyxcbiAgZW5jcnlwdGVkUHJ2OiAnZW5jLXBydi0xJyxcbn07XG5cbmNvbnN0IGRldmljZTI6IFdlYmF1dGhuRGV2aWNlID0ge1xuICBvdHBEZXZpY2VJZDogJ29pZC0yJyxcbiAgYXV0aGVudGljYXRvckluZm86IHsgY3JlZElEOiAnY3JlZC1iYmInLCBmbXQ6ICdub25lJywgcHVibGljS2V5OiAncGstMicgfSxcbiAgcHJmU2FsdDogJ3NhbHQtYmJiJyxcbiAgZW5jcnlwdGVkUHJ2OiAnZW5jLXBydi0yJyxcbn07XG5cbmRlc2NyaWJlKCdidWlsZEV2YWxCeUNyZWRlbnRpYWwnLCBmdW5jdGlvbiAoKSB7XG4gIGl0KCdtYXBzIGVhY2ggZGV2aWNlIGNyZWRJRCB0byBpdHMgcHJmU2FsdCBpbiBldmFsQnlDcmVkZW50aWFsJywgZnVuY3Rpb24gKCkge1xuICAgIGNvbnN0IHsgZXZhbEJ5Q3JlZGVudGlhbCB9ID0gYnVpbGRFdmFsQnlDcmVkZW50aWFsKFtkZXZpY2UxLCBkZXZpY2UyXSk7XG4gICAgYXNzZXJ0LmRlZXBTdHJpY3RFcXVhbChldmFsQnlDcmVkZW50aWFsLCB7ICdjcmVkLWFhYSc6ICdzYWx0LWFhYScsICdjcmVkLWJiYic6ICdzYWx0LWJiYicgfSk7XG4gIH0pO1xuXG4gIGl0KCdwb3B1bGF0ZXMgY3JlZElkVG9EZXZpY2Ugd2l0aCBib3RoIGRldmljZXMnLCBmdW5jdGlvbiAoKSB7XG4gICAgY29uc3QgeyBjcmVkSWRUb0RldmljZSB9ID0gYnVpbGRFdmFsQnlDcmVkZW50aWFsKFtkZXZpY2UxLCBkZXZpY2UyXSk7XG4gICAgYXNzZXJ0LnN0cmljdEVxdWFsKGNyZWRJZFRvRGV2aWNlLmdldCgnY3JlZC1hYWEnKSwgZGV2aWNlMSk7XG4gICAgYXNzZXJ0LnN0cmljdEVxdWFsKGNyZWRJZFRvRGV2aWNlLmdldCgnY3JlZC1iYmInKSwgZGV2aWNlMik7XG4gIH0pO1xuXG4gIGl0KCdyZXR1cm5zIGVtcHR5IG1hcHMgZm9yIGFuIGVtcHR5IGRldmljZSBsaXN0JywgZnVuY3Rpb24gKCkge1xuICAgIGNvbnN0IHsgZXZhbEJ5Q3JlZGVudGlhbCwgY3JlZElkVG9EZXZpY2UgfSA9IGJ1aWxkRXZhbEJ5Q3JlZGVudGlhbChbXSk7XG4gICAgYXNzZXJ0LmRlZXBTdHJpY3RFcXVhbChldmFsQnlDcmVkZW50aWFsLCB7fSk7XG4gICAgYXNzZXJ0LnN0cmljdEVxdWFsKGNyZWRJZFRvRGV2aWNlLnNpemUsIDApO1xuICB9KTtcblxuICBpdCgnc2tpcHMgZGV2aWNlcyB3aXRoIGVtcHR5IHByZlNhbHQnLCBmdW5jdGlvbiAoKSB7XG4gICAgY29uc3QgZGV2aWNlTm9QcmYgPSB7IC4uLmRldmljZTEsIHByZlNhbHQ6ICcnIH07XG4gICAgY29uc3QgeyBldmFsQnlDcmVkZW50aWFsLCBjcmVkSWRUb0RldmljZSB9ID0gYnVpbGRFdmFsQnlDcmVkZW50aWFsKFtkZXZpY2VOb1ByZiwgZGV2aWNlMl0pO1xuICAgIGFzc2VydC5kZWVwU3RyaWN0RXF1YWwoZXZhbEJ5Q3JlZGVudGlhbCwgeyAnY3JlZC1iYmInOiAnc2FsdC1iYmInIH0pO1xuICAgIGFzc2VydC5zdHJpY3RFcXVhbChjcmVkSWRUb0RldmljZS5oYXMoJ2NyZWQtYWFhJyksIGZhbHNlKTtcbiAgfSk7XG5cbiAgaXQoJ3NraXBzIGRldmljZXMgd2l0aCB1bmRlZmluZWQgcHJmU2FsdCcsIGZ1bmN0aW9uICgpIHtcbiAgICBjb25zdCBkZXZpY2VOb1ByZiA9IHsgLi4uZGV2aWNlMSwgcHJmU2FsdDogdW5kZWZpbmVkIGFzIHVua25vd24gYXMgc3RyaW5nIH07XG4gICAgY29uc3QgeyBldmFsQnlDcmVkZW50aWFsLCBjcmVkSWRUb0RldmljZSB9ID0gYnVpbGRFdmFsQnlDcmVkZW50aWFsKFtkZXZpY2VOb1ByZiwgZGV2aWNlMl0pO1xuICAgIGFzc2VydC5kZWVwU3RyaWN0RXF1YWwoZXZhbEJ5Q3JlZGVudGlhbCwgeyAnY3JlZC1iYmInOiAnc2FsdC1iYmInIH0pO1xuICAgIGFzc2VydC5zdHJpY3RFcXVhbChjcmVkSWRUb0RldmljZS5oYXMoJ2NyZWQtYWFhJyksIGZhbHNlKTtcbiAgfSk7XG59KTtcblxuZGVzY3JpYmUoJ21hdGNoRGV2aWNlQnlDcmVkZW50aWFsSWQnLCBmdW5jdGlvbiAoKSB7XG4gIGl0KCdyZXR1cm5zIHRoZSBtYXRjaGluZyBkZXZpY2UnLCBmdW5jdGlvbiAoKSB7XG4gICAgYXNzZXJ0LnN0cmljdEVxdWFsKG1hdGNoRGV2aWNlQnlDcmVkZW50aWFsSWQoW2RldmljZTEsIGRldmljZTJdLCAnY3JlZC1iYmInKSwgZGV2aWNlMik7XG4gIH0pO1xuXG4gIGl0KCdyZXR1cm5zIHRoZSBmaXJzdCBkZXZpY2Ugd2hlbiBpdCBtYXRjaGVzJywgZnVuY3Rpb24gKCkge1xuICAgIGFzc2VydC5zdHJpY3RFcXVhbChtYXRjaERldmljZUJ5Q3JlZGVudGlhbElkKFtkZXZpY2UxLCBkZXZpY2UyXSwgJ2NyZWQtYWFhJyksIGRldmljZTEpO1xuICB9KTtcblxuICBpdCgncmV0dXJucyBhIGRldmljZSBldmVuIHdoZW4gaXQgaGFzIG5vIHByZlNhbHQnLCBmdW5jdGlvbiAoKSB7XG4gICAgY29uc3QgZGV2aWNlTm9QcmYgPSB7IC4uLmRldmljZTEsIHByZlNhbHQ6ICcnIH07XG4gICAgYXNzZXJ0LnN0cmljdEVxdWFsKG1hdGNoRGV2aWNlQnlDcmVkZW50aWFsSWQoW2RldmljZU5vUHJmLCBkZXZpY2UyXSwgJ2NyZWQtYWFhJyksIGRldmljZU5vUHJmKTtcbiAgfSk7XG5cbiAgaXQoJ3Rocm93cyB0aGUgZXhwZWN0ZWQgZXJyb3IgbWVzc2FnZSB3aGVuIG5vIGRldmljZSBtYXRjaGVzJywgZnVuY3Rpb24gKCkge1xuICAgIGFzc2VydC50aHJvd3MoXG4gICAgICAoKSA9PiBtYXRjaERldmljZUJ5Q3JlZGVudGlhbElkKFtkZXZpY2UxLCBkZXZpY2UyXSwgJ2NyZWQtdW5rbm93bicpLFxuICAgICAgKGVycjogRXJyb3IpID0+IHtcbiAgICAgICAgYXNzZXJ0LnN0cmljdEVxdWFsKGVyci5tZXNzYWdlLCAnQ291bGQgbm90IGlkZW50aWZ5IHdoaWNoIHBhc3NrZXkgZGV2aWNlIHdhcyB1c2VkJyk7XG4gICAgICAgIHJldHVybiB0cnVlO1xuICAgICAgfVxuICAgICk7XG4gIH0pO1xuXG4gIGl0KCd0aHJvd3Mgd2hlbiB0aGUgZGV2aWNlIGxpc3QgaXMgZW1wdHknLCBmdW5jdGlvbiAoKSB7XG4gICAgYXNzZXJ0LnRocm93cygoKSA9PiBtYXRjaERldmljZUJ5Q3JlZGVudGlhbElkKFtdLCAnY3JlZC1hYWEnKSwgRXJyb3IpO1xuICB9KTtcbn0pO1xuIl19

package/dist/test/unit/registerPasskey.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=registerPasskey.test.d.ts.map

package/dist/test/unit/registerPasskey.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registerPasskey.test.d.ts","sourceRoot":"","sources":["../../../test/unit/registerPasskey.test.ts"],"names":[],"mappings":""}

package/dist/test/unit/registerPasskey.test.js

@@ -0,0 +1,155 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const assert = __importStar(require("assert"));
+const sinon = __importStar(require("sinon"));
+const registerPasskey_1 = require("../../src/registerPasskey");
+describe('registerPasskey', function () {
+    let mockBitGo;
+    const mockChallenge = {
+        challenge: btoa('server-challenge-bytes'),
+        baseSalt: 'server-base-salt-abc123',
+        rp: { id: 'bitgo.com', name: 'BitGo' },
+        user: { id: new Uint8Array([1, 2, 3]), name: 'test@bitgo.com', displayName: 'Test User' },
+        pubKeyCredParams: [{ type: 'public-key', alg: -7 }],
+        timeout: 60000,
+    };
+    const mockOtpResponse = {
+        user: {
+            otpDevices: [
+                {
+                    id: 'mongo-device-id-123',
+                    credentialId: 'cred-id-base64',
+                    prfSalt: 'server-assigned-prf-salt',
+                    isPasskey: true,
+                    extensions: { prf: true },
+                },
+            ],
+        },
+    };
+    const clientDataJSON = new TextEncoder().encode(JSON.stringify({ type: 'webauthn.create' }));
+    const attestationObject = new Uint8Array([0xde, 0xad, 0xbe, 0xef]);
+    function makeAttestation(prfEnabled = false) {
+        return {
+            id: 'cred-id-base64',
+            rawId: new ArrayBuffer(8),
+            type: 'public-key',
+            response: {
+                clientDataJSON: clientDataJSON.buffer,
+                attestationObject: attestationObject.buffer,
+                getTransports: () => [],
+            },
+            authenticatorAttachment: null,
+            getClientExtensionResults: () => prfEnabled
+                ? { prf: { enabled: true } }
+                : {},
+        };
+    }
+    beforeEach(function () {
+        mockBitGo = {
+            get: sinon.stub(),
+            put: sinon.stub(),
+            url: sinon.stub().callsFake((path, _version) => `/api/v2${path}`),
+        };
+    });
+    afterEach(function () {
+        sinon.restore();
+    });
+    describe('with PRF supported', function () {
+        it('should include scopes in PUT payload and return prfSupported: true', async function () {
+            const attestation = makeAttestation(true);
+            const mockProvider = { create: sinon.stub().resolves(attestation), get: sinon.stub() };
+            mockBitGo.get.returns({ result: sinon.stub().resolves(mockChallenge) });
+            const sendStub = sinon.stub().returns({ result: sinon.stub().resolves(mockOtpResponse) });
+            mockBitGo.put.returns({ send: sendStub });
+            const result = await (0, registerPasskey_1.registerPasskey)({
+                bitgo: mockBitGo,
+                provider: mockProvider,
+                label: 'My Passkey',
+            });
+            assert.ok(mockBitGo.get.calledWith('/api/v2/user/otp/webauthn/register'), 'GET should call correct URL');
+            assert.ok(mockBitGo.put.calledWith('/api/v2/user/otp'), 'PUT should call correct URL');
+            const putBody = sendStub.firstCall.args[0];
+            assert.deepStrictEqual(putBody.extensions, ['prf']);
+            assert.deepStrictEqual(putBody.scopes, ['wallet_hot']);
+            assert.strictEqual(putBody.type, 'webauthn');
+            assert.strictEqual(putBody.label, 'My Passkey');
+            const device = mockOtpResponse.user.otpDevices[0];
+            assert.strictEqual(result.id, device.id);
+            assert.strictEqual(result.credentialId, device.credentialId);
+            assert.strictEqual(result.prfSalt, device.prfSalt);
+            assert.strictEqual(result.prfSupported, true);
+        });
+    });
+    describe('without PRF support', function () {
+        it('should omit scopes from PUT payload and return prfSupported: false', async function () {
+            const mockProvider = { create: sinon.stub().resolves(makeAttestation(false)), get: sinon.stub() };
+            mockBitGo.get.returns({ result: sinon.stub().resolves(mockChallenge) });
+            const sendStub = sinon.stub().returns({ result: sinon.stub().resolves(mockOtpResponse) });
+            mockBitGo.put.returns({ send: sendStub });
+            const result = await (0, registerPasskey_1.registerPasskey)({
+                bitgo: mockBitGo,
+                provider: mockProvider,
+                label: 'My Passkey No PRF',
+            });
+            const putBody = sendStub.firstCall.args[0];
+            assert.ok(putBody.extensions === undefined, 'extensions should be omitted when PRF is not supported');
+            assert.ok(putBody.scopes === undefined, 'scopes should be omitted when PRF is not supported');
+            assert.strictEqual(result.prfSupported, false);
+        });
+    });
+    describe('baseSalt sourcing', function () {
+        it('should call GET challenge before provider.create()', async function () {
+            const callOrder = [];
+            const mockProvider = {
+                create: sinon.stub().callsFake(() => {
+                    callOrder.push('provider.create');
+                    return Promise.resolve(makeAttestation());
+                }),
+                get: sinon.stub(),
+            };
+            mockBitGo.get.returns({
+                result: sinon.stub().callsFake(() => {
+                    callOrder.push('GET challenge');
+                    return Promise.resolve(mockChallenge);
+                }),
+            });
+            mockBitGo.put.returns({ send: sinon.stub().returns({ result: sinon.stub().resolves(mockOtpResponse) }) });
+            await (0, registerPasskey_1.registerPasskey)({ bitgo: mockBitGo, provider: mockProvider, label: 'Test' });
+            assert.deepStrictEqual(callOrder, ['GET challenge', 'provider.create']);
+        });
+    });
+});
+//# sourceMappingURL=data:application/json;base64,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

package/dist/test/unit/removePasskeyFromAccount.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=removePasskeyFromAccount.test.d.ts.map

package/dist/test/unit/removePasskeyFromAccount.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"removePasskeyFromAccount.test.d.ts","sourceRoot":"","sources":["../../../test/unit/removePasskeyFromAccount.test.ts"],"names":[],"mappings":""}