@calimero-network/mero-js 14.0.0 → 15.1.0

package/dist/index.cjs

@@ -35,6 +35,7 @@ __export(index_exports, {
   SseClient: () => SseClient,
   WebHttpClient: () => WebHttpClient,
   WsClient: () => WsClient,
+  accountForRoot: () => accountForRoot,
   buildAuthLoginUrl: () => buildAuthLoginUrl,
   combineSignals: () => combineSignals,
   compareSemver: () => compareSemver,
@@ -53,18 +54,18 @@ __export(index_exports, {
   createRetryableMethod: () => createRetryableMethod,
   createTimeoutSignal: () => createTimeoutSignal,
   createUniversalHttpClient: () => createUniversalHttpClient,
+  deviceCertPayload: () => deviceCertPayload,
   discoverLocalNodes: () => discoverLocalNodes,
   hasCap: () => hasCap,
   intentHash: () => intentHash,
   jsonCodec: () => jsonCodec,
   localNodeUrl: () => localNodeUrl,
+  mintDeviceId: () => mintDeviceId,
   nodeEndpoint: () => nodeEndpoint,
   parseAuthCallback: () => parseAuthCallback,
   probeNodeHealth: () => probeNodeHealth,
-  sameAccount: () => sameAccount,
+  signDeviceCert: () => signDeviceCert,
   signWarrant: () => signWarrant,
-  toAccountBase58: () => toAccountBase58,
-  toAccountHex: () => toAccountHex,
   withCap: () => withCap,
   withRetry: () => withRetry,
   withoutCap: () => withoutCap
@@ -2514,93 +2515,6 @@ function createMeroJs(config) {
   return new MeroJs(config);
 }
 
-// src/account/index.ts
-var BASE58_ALPHABET = "123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz";
-var HEX_ACCOUNT = /^[0-9a-f]{64}$/i;
-function encodeBase58(bytes) {
-  if (bytes.length === 0) return "";
-  const digits = [0];
-  for (const byte of bytes) {
-    let carry = byte;
-    for (let i = 0; i < digits.length; i++) {
-      carry += digits[i] << 8;
-      digits[i] = carry % 58;
-      carry = carry / 58 | 0;
-    }
-    while (carry > 0) {
-      digits.push(carry % 58);
-      carry = carry / 58 | 0;
-    }
-  }
-  let out = "";
-  for (const byte of bytes) {
-    if (byte !== 0) break;
-    out += BASE58_ALPHABET[0];
-  }
-  for (let i = digits.length - 1; i >= 0; i--) {
-    out += BASE58_ALPHABET[digits[i]];
-  }
-  return out;
-}
-function decodeBase58(value) {
-  if (value.length === 0) return null;
-  const bytes = [0];
-  for (const char of value) {
-    const index = BASE58_ALPHABET.indexOf(char);
-    if (index < 0) return null;
-    let carry = index;
-    for (let i = 0; i < bytes.length; i++) {
-      carry += bytes[i] * 58;
-      bytes[i] = carry & 255;
-      carry >>= 8;
-    }
-    while (carry > 0) {
-      bytes.push(carry & 255);
-      carry >>= 8;
-    }
-  }
-  let leadingZeros = 0;
-  for (const char of value) {
-    if (char !== BASE58_ALPHABET[0]) break;
-    leadingZeros++;
-  }
-  return Uint8Array.from([
-    ...new Array(leadingZeros).fill(0),
-    ...bytes.reverse()
-  ]);
-}
-function toHex(bytes) {
-  let out = "";
-  for (const byte of bytes) out += byte.toString(16).padStart(2, "0");
-  return out;
-}
-function fromHex(hex2) {
-  const bytes = new Uint8Array(hex2.length / 2);
-  for (let i = 0; i < bytes.length; i++) {
-    bytes[i] = parseInt(hex2.slice(i * 2, i * 2 + 2), 16);
-  }
-  return bytes;
-}
-function toAccountHex(id) {
-  const trimmed = (id ?? "").trim();
-  if (!trimmed) return "";
-  if (HEX_ACCOUNT.test(trimmed)) return trimmed.toLowerCase();
-  const decoded = decodeBase58(trimmed);
-  if (!decoded || decoded.length !== 32) return trimmed;
-  return toHex(decoded);
-}
-function toAccountBase58(id) {
-  const trimmed = (id ?? "").trim();
-  if (!trimmed) return "";
-  if (!HEX_ACCOUNT.test(trimmed)) return trimmed;
-  return encodeBase58(fromHex(trimmed));
-}
-function sameAccount(a, b) {
-  const left = toAccountHex(a);
-  const right = toAccountHex(b);
-  return HEX_ACCOUNT.test(left) && left === right;
-}
-
 // src/token-store/index.ts
 var MemoryTokenStore = class {
   constructor() {
@@ -2682,9 +2596,7 @@ var CloudClient = class {
   }
 };
 
-// src/warrant/warrant.ts
-var SIGN_DOMAIN = new TextEncoder().encode("calimero.warrant.v1");
-var INTENT_DOMAIN = new TextEncoder().encode("calimero.warrant.intent.v1");
+// src/crypto/internal.ts
 var PKCS8_ED25519_PREFIX = new Uint8Array([
   48,
   46,
@@ -2703,10 +2615,15 @@ var PKCS8_ED25519_PREFIX = new Uint8Array([
   4,
   32
 ]);
+function u32le(value) {
+  const out = new Uint8Array(4);
+  new DataView(out.buffer).setUint32(0, value, true);
+  return out;
+}
 function hex(bytes) {
   return Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
 }
-function fromHex2(value, label, expectedBytes) {
+function fromHex(value, label, expectedBytes) {
   const clean = value.trim();
   if (!/^[0-9a-fA-F]*$/.test(clean) || clean.length !== expectedBytes * 2) {
     throw new Error(
@@ -2742,12 +2659,8 @@ async function domainHash(domain, parts) {
     await crypto.subtle.digest("SHA-256", concat(...chunks))
   );
 }
-async function intentHash(method, argsJson) {
-  const args = new TextEncoder().encode(JSON.stringify(argsJson));
-  return domainHash(INTENT_DOMAIN, [new TextEncoder().encode(method), args]);
-}
 async function importSigningKey(secretHex) {
-  const seed = fromHex2(secretHex, "deviceSecret", 32);
+  const seed = fromHex(secretHex, "deviceSecret", 32);
   const pkcs8 = concat(PKCS8_ED25519_PREFIX, seed);
   try {
     return await crypto.subtle.importKey(
@@ -2764,10 +2677,35 @@ async function importSigningKey(secretHex) {
     );
   }
 }
+async function derivePublicKey(secretHex) {
+  const seed = fromHex(secretHex, "deviceSecret", 32);
+  const pkcs8 = concat(PKCS8_ED25519_PREFIX, seed);
+  const key = await crypto.subtle.importKey(
+    "pkcs8",
+    pkcs8,
+    { name: "Ed25519" },
+    true,
+    ["sign"]
+  );
+  const jwk = await crypto.subtle.exportKey("jwk", key);
+  const raw = jwk.x;
+  return Uint8Array.from(
+    atob(raw.replace(/-/g, "+").replace(/_/g, "/")),
+    (c) => c.charCodeAt(0)
+  );
+}
+
+// src/warrant/warrant.ts
+var SIGN_DOMAIN = new TextEncoder().encode("calimero.warrant.v1");
+var INTENT_DOMAIN = new TextEncoder().encode("calimero.warrant.intent.v1");
+async function intentHash(method, argsJson) {
+  const args = new TextEncoder().encode(JSON.stringify(argsJson));
+  return domainHash(INTENT_DOMAIN, [new TextEncoder().encode(method), args]);
+}
 async function signWarrant(input) {
-  const context = fromHex2(input.context, "context", 32);
-  const authorAccount = fromHex2(input.authorAccount, "authorAccount", 32);
-  const executor = fromHex2(input.executor, "executor", 32);
+  const context = fromHex(input.context, "context", 32);
+  const authorAccount = fromHex(input.authorAccount, "authorAccount", 32);
+  const executor = fromHex(input.executor, "executor", 32);
   const key = await importSigningKey(input.deviceSecret);
   const publicKey = await derivePublicKey(input.deviceSecret);
   const commitment = await intentHash(input.method, input.argsJson);
@@ -2798,21 +2736,72 @@ async function signWarrant(input) {
     )
   );
 }
-async function derivePublicKey(secretHex) {
-  const seed = fromHex2(secretHex, "deviceSecret", 32);
-  const pkcs8 = concat(PKCS8_ED25519_PREFIX, seed);
-  const key = await crypto.subtle.importKey(
-    "pkcs8",
-    pkcs8,
-    { name: "Ed25519" },
-    true,
-    ["sign"]
+
+// src/device-cert/device-cert.ts
+var CERT_DOMAIN = new TextEncoder().encode("calimero.device.cert.v1");
+var ACCOUNT_ID_DOMAIN = new TextEncoder().encode("calimero.account.genesis.v1");
+var DEVICE_ID_DOMAIN = new TextEncoder().encode("calimero.device.id.v1");
+var ACCOUNT_GENESIS_VERSION = 1;
+async function mintDeviceId(account, nonce) {
+  if (nonce.length !== 16) {
+    throw new Error(`nonce must be 16 bytes, got ${nonce.length}`);
+  }
+  const accountBytes = fromHex(account, "account", 32);
+  return hex(await domainHash(DEVICE_ID_DOMAIN, [accountBytes, nonce]));
+}
+async function deviceCertPayload(input) {
+  return domainHash(CERT_DOMAIN, [
+    fromHex(input.account, "account", 32),
+    fromHex(input.device, "device", 32),
+    fromHex(input.signPublicKey, "signPublicKey", 32),
+    fromHex(input.kemPublicKey, "kemPublicKey", 32),
+    u32le(input.keyEpoch),
+    u32le(input.deviceEpoch)
+  ]);
+}
+async function signDeviceCert(input) {
+  const rootPublicKey = await derivePublicKey(input.rootSecret);
+  const account = hex(
+    await domainHash(ACCOUNT_ID_DOMAIN, [
+      concat(new Uint8Array([ACCOUNT_GENESIS_VERSION]), rootPublicKey)
+    ])
   );
-  const jwk = await crypto.subtle.exportKey("jwk", key);
-  const raw = jwk.x;
-  return Uint8Array.from(
-    atob(raw.replace(/-/g, "+").replace(/_/g, "/")),
-    (c) => c.charCodeAt(0)
+  const keyEpoch = 0;
+  const payload = await deviceCertPayload({
+    account,
+    device: input.device,
+    signPublicKey: input.signPublicKey,
+    kemPublicKey: input.kemPublicKey,
+    keyEpoch,
+    deviceEpoch: input.deviceEpoch
+  });
+  const key = await importSigningKey(input.rootSecret);
+  const signature = new Uint8Array(
+    await crypto.subtle.sign("Ed25519", key, payload)
+  );
+  const credential = concat(
+    // AccountGenesis
+    new Uint8Array([ACCOUNT_GENESIS_VERSION]),
+    rootPublicKey,
+    // chain: Vec<RootKeyHandoff>, empty
+    u32le(0),
+    // DeviceCert
+    fromHex(account, "account", 32),
+    fromHex(input.device, "device", 32),
+    fromHex(input.signPublicKey, "signPublicKey", 32),
+    fromHex(input.kemPublicKey, "kemPublicKey", 32),
+    u32le(keyEpoch),
+    u32le(input.deviceEpoch),
+    signature
+  );
+  return hex(credential);
+}
+async function accountForRoot(rootSecret) {
+  const rootPublicKey = await derivePublicKey(rootSecret);
+  return hex(
+    await domainHash(ACCOUNT_ID_DOMAIN, [
+      concat(new Uint8Array([ACCOUNT_GENESIS_VERSION]), rootPublicKey)
+    ])
   );
 }