@bitspark/archon-sdk 0.14.0 → 0.15.0

package/dist/src/index.d.ts

@@ -4,6 +4,7 @@ export * from "./envelope.js";
 export * from "./login.js";
 export * from "./login-audience.js";
 export * from "./login-display.js";
+export * from "./login-fingerprint.js";
 export * from "./enroll.js";
 export * from "./enroll-token.js";
 export * from "./request.js";

package/dist/src/index.js

@@ -22,6 +22,7 @@ export * from "./envelope.js";
 export * from "./login.js";
 export * from "./login-audience.js";
 export * from "./login-display.js";
+export * from "./login-fingerprint.js";
 export * from "./enroll.js";
 export * from "./enroll-token.js";
 export * from "./request.js";

package/dist/src/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,EAAE;AACF,uFAAuF;AACvF,wEAAwE;AACxE,EAAE;AACF,qFAAqF;AACrF,kEAAkE;AAClE,gFAAgF;AAChF,EAAE;AACF,6FAA6F;AAC7F,8FAA8F;AAC9F,wBAAwB;AACxB,EAAE;AACF,+EAA+E;AAC/E,yFAAyF;AACzF,sFAAsF;AACtF,uFAAuF;AACvF,+CAA+C;AAC/C,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,mDAAmD;AACnD,EAAE;AACF,uFAAuF;AACvF,wEAAwE;AACxE,EAAE;AACF,qFAAqF;AACrF,kEAAkE;AAClE,gFAAgF;AAChF,EAAE;AACF,6FAA6F;AAC7F,8FAA8F;AAC9F,wBAAwB;AACxB,EAAE;AACF,+EAA+E;AAC/E,yFAAyF;AACzF,sFAAsF;AACtF,uFAAuF;AACvF,+CAA+C;AAC/C,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC;AACpC,cAAc,oBAAoB,CAAC;AACnC,cAAc,wBAAwB,CAAC;AACvC,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,cAAc,CAAC"}

package/dist/src/login-fingerprint.d.ts

@@ -0,0 +1,29 @@
+import { type LoginRequest } from "./login.js";
+/**
+ * The label the transaction fingerprint's digest is computed under (docs/login.md §5.3). It is
+ * not an RFC 8032 context: nothing is signed with it, and no login proof's bytes are ever a
+ * fingerprint's input or the other way round.
+ */
+export declare const FINGERPRINT_DOMAIN = "archon-login-fingerprint/1";
+/**
+ * The login's transaction fingerprint (docs/login.md §5.3), what a person compares before
+ * approving: the page that began the login computes it from its own K and the begin response,
+ * the CLI from the exact request it is about to sign, and the two agree only if every field the
+ * login proof binds — audience, K, id, scope, validity — and the nonce are the same on both
+ * sides. It is the first 16 bytes (128 bits) of
+ *
+ *   SHA-256( u16be(len domain) ‖ domain ‖ u16be(len nonce) ‖ nonce ‖ loginBinding(LOGIN_ROLE_LOGIN, audience, req) )
+ *
+ * with domain `FINGERPRINT_DOMAIN` — an encoding of its own beside the proof's, pinned by
+ * vectors/login.json's login_fingerprint family. Throws for everything
+ * `loginBinding(LOGIN_ROLE_LOGIN, …)` throws for, and for a nonce shorter than `MIN_NONCE_SIZE`
+ * or longer than the u16 prefix allows.
+ */
+export declare function fingerprint(audience: string, req: LoginRequest): Uint8Array;
+/**
+ * `fp` as a person reads and compares it (docs/login.md §5.3): its 32 lowercase hex digits in
+ * eight groups of four, separated by single ASCII spaces — `7a91 b2c3 d4e5 f607 1829 3a4b 5c6d
+ * 7e8f`. The three lanes spell it identically, so the page's rendering and the CLI's can be
+ * compared character by character. Throws unless `fp` is exactly 16 bytes.
+ */
+export declare function formatFingerprint(fp: Uint8Array): string;

package/dist/src/login-fingerprint.js

@@ -0,0 +1,63 @@
+// The transaction fingerprint a person compares before approving a login (docs/login.md §5.3).
+//
+// The page that began the login computes it from its own K and the begin response, in the
+// browser; the CLI computes it from the exact request it is about to sign. So this module runs
+// anywhere the package does: SHA-256 is @noble/hashes (as in request.ts), never node:crypto.
+import { sha256 } from "@noble/hashes/sha2.js";
+import { LOGIN_MAX_FIELD_SIZE, LOGIN_ROLE_LOGIN, loginBinding } from "./login.js";
+import { MIN_NONCE_SIZE } from "./possession.js";
+/**
+ * The label the transaction fingerprint's digest is computed under (docs/login.md §5.3). It is
+ * not an RFC 8032 context: nothing is signed with it, and no login proof's bytes are ever a
+ * fingerprint's input or the other way round.
+ */
+export const FINGERPRINT_DOMAIN = "archon-login-fingerprint/1";
+const DOMAIN_BYTES = new TextEncoder().encode(FINGERPRINT_DOMAIN);
+/**
+ * The login's transaction fingerprint (docs/login.md §5.3), what a person compares before
+ * approving: the page that began the login computes it from its own K and the begin response,
+ * the CLI from the exact request it is about to sign, and the two agree only if every field the
+ * login proof binds — audience, K, id, scope, validity — and the nonce are the same on both
+ * sides. It is the first 16 bytes (128 bits) of
+ *
+ *   SHA-256( u16be(len domain) ‖ domain ‖ u16be(len nonce) ‖ nonce ‖ loginBinding(LOGIN_ROLE_LOGIN, audience, req) )
+ *
+ * with domain `FINGERPRINT_DOMAIN` — an encoding of its own beside the proof's, pinned by
+ * vectors/login.json's login_fingerprint family. Throws for everything
+ * `loginBinding(LOGIN_ROLE_LOGIN, …)` throws for, and for a nonce shorter than `MIN_NONCE_SIZE`
+ * or longer than the u16 prefix allows.
+ */
+export function fingerprint(audience, req) {
+    const binding = loginBinding(LOGIN_ROLE_LOGIN, audience, req);
+    if (req.nonce.length < MIN_NONCE_SIZE || req.nonce.length > LOGIN_MAX_FIELD_SIZE) {
+        throw new Error(`login: nonce is ${req.nonce.length} bytes, want ${MIN_NONCE_SIZE}..=${LOGIN_MAX_FIELD_SIZE}`);
+    }
+    const input = new Uint8Array(2 + DOMAIN_BYTES.length + 2 + req.nonce.length + binding.length);
+    let at = putField(input, 0, DOMAIN_BYTES);
+    at = putField(input, at, req.nonce);
+    input.set(binding, at);
+    return sha256(input).slice(0, 16);
+}
+/**
+ * `fp` as a person reads and compares it (docs/login.md §5.3): its 32 lowercase hex digits in
+ * eight groups of four, separated by single ASCII spaces — `7a91 b2c3 d4e5 f607 1829 3a4b 5c6d
+ * 7e8f`. The three lanes spell it identically, so the page's rendering and the CLI's can be
+ * compared character by character. Throws unless `fp` is exactly 16 bytes.
+ */
+export function formatFingerprint(fp) {
+    if (fp.length !== 16)
+        throw new Error(`login: fingerprint is ${fp.length} bytes, want 16`);
+    const groups = [];
+    for (let i = 0; i < 16; i += 2) {
+        groups.push(fp[i].toString(16).padStart(2, "0") + fp[i + 1].toString(16).padStart(2, "0"));
+    }
+    return groups.join(" ");
+}
+/** Writes u16be(len field) ‖ field at `at`; returns the new offset. */
+function putField(out, at, field) {
+    out[at++] = (field.length >> 8) & 0xff;
+    out[at++] = field.length & 0xff;
+    out.set(field, at);
+    return at + field.length;
+}
+//# sourceMappingURL=login-fingerprint.js.map

package/dist/src/login-fingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-fingerprint.js","sourceRoot":"","sources":["../../src/login-fingerprint.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,EAAE;AACF,0FAA0F;AAC1F,+FAA+F;AAC/F,6FAA6F;AAC7F,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAE/C,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,YAAY,EAAqB,MAAM,YAAY,CAAC;AACrG,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAEjD;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,4BAA4B,CAAC;AAE/D,MAAM,YAAY,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;AAElE;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,WAAW,CAAC,QAAgB,EAAE,GAAiB;IAC7D,MAAM,OAAO,GAAG,YAAY,CAAC,gBAAgB,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC9D,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,cAAc,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,oBAAoB,EAAE,CAAC;QACjF,MAAM,IAAI,KAAK,CAAC,mBAAmB,GAAG,CAAC,KAAK,CAAC,MAAM,gBAAgB,cAAc,MAAM,oBAAoB,EAAE,CAAC,CAAC;IACjH,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9F,IAAI,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,EAAE,YAAY,CAAC,CAAC;IAC1C,EAAE,GAAG,QAAQ,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACvB,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACpC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,EAAc;IAC9C,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,EAAE,CAAC,MAAM,iBAAiB,CAAC,CAAC;IAC3F,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,uEAAuE;AACvE,SAAS,QAAQ,CAAC,GAAe,EAAE,EAAU,EAAE,KAAiB;IAC9D,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;IACvC,GAAG,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;IAChC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACnB,OAAO,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC;AAC3B,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bitspark/archon-sdk",
-  "version": "0.14.0",
+  "version": "0.15.0",
   "description": "archon-sdk: proof of possession and the signed envelope, one layer above the identity floor. Deterministic given its inputs; no RNG, no clock, no socket.",
   "license": "Apache-2.0",
   "repository": {
@@ -22,7 +22,7 @@
     "test": "tsc -p tsconfig.json && node --test dist/test/*.test.js"
   },
   "dependencies": {
-    "@bitspark/archon": "^0.14.0",
+    "@bitspark/archon": "^0.15.0",
     "@noble/hashes": "^2.2.0"
   },
   "devDependencies": {