@calimero-network/mero-js 15.0.0 → 15.1.0

package/dist/index.d.ts

@@ -16,6 +16,8 @@ export { EphemeralClient, jsonCodec } from './ephemeral/index.js';
 export type { Codec, EphemeralEntry } from './ephemeral/index.js';
 export * from './cloud/index.js';
 export { signWarrant, intentHash } from './warrant/index.js';
+export { signDeviceCert, mintDeviceId, deviceCertPayload, accountForRoot, } from './device-cert/index.js';
+export type { DeviceCertInput } from './device-cert/index.js';
 export type { WarrantInput } from './warrant/index.js';
 export * from './capabilities.js';
 export { DEFAULT_LOCAL_NODE_PORTS, localNodeUrl, nodeEndpoint, probeNodeHealth, discoverLocalNodes, } from './nodeDiscovery.js';

package/dist/index.js

@@ -22,6 +22,7 @@ export { EphemeralClient, jsonCodec } from './ephemeral/index.js';
 export * from './cloud/index.js';
 // Warrant signing — mint the author's consent for a relay to run one intent
 export { signWarrant, intentHash } from './warrant/index.js';
+export { signDeviceCert, mintDeviceId, deviceCertPayload, accountForRoot, } from './device-cert/index.js';
 // Member capability bitmask constants & helpers
 export * from './capabilities.js';
 // Utilities

package/dist/index.mjs

@@ -2522,9 +2522,7 @@ var CloudClient = class {
   }
 };
 
-// src/warrant/warrant.ts
-var SIGN_DOMAIN = new TextEncoder().encode("calimero.warrant.v1");
-var INTENT_DOMAIN = new TextEncoder().encode("calimero.warrant.intent.v1");
+// src/crypto/internal.ts
 var PKCS8_ED25519_PREFIX = new Uint8Array([
   48,
   46,
@@ -2543,6 +2541,11 @@ var PKCS8_ED25519_PREFIX = new Uint8Array([
   4,
   32
 ]);
+function u32le(value) {
+  const out = new Uint8Array(4);
+  new DataView(out.buffer).setUint32(0, value, true);
+  return out;
+}
 function hex(bytes) {
   return Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
 }
@@ -2582,10 +2585,6 @@ async function domainHash(domain, parts) {
     await crypto.subtle.digest("SHA-256", concat(...chunks))
   );
 }
-async function intentHash(method, argsJson) {
-  const args = new TextEncoder().encode(JSON.stringify(argsJson));
-  return domainHash(INTENT_DOMAIN, [new TextEncoder().encode(method), args]);
-}
 async function importSigningKey(secretHex) {
   const seed = fromHex(secretHex, "deviceSecret", 32);
   const pkcs8 = concat(PKCS8_ED25519_PREFIX, seed);
@@ -2604,6 +2603,31 @@ async function importSigningKey(secretHex) {
     );
   }
 }
+async function derivePublicKey(secretHex) {
+  const seed = fromHex(secretHex, "deviceSecret", 32);
+  const pkcs8 = concat(PKCS8_ED25519_PREFIX, seed);
+  const key = await crypto.subtle.importKey(
+    "pkcs8",
+    pkcs8,
+    { name: "Ed25519" },
+    true,
+    ["sign"]
+  );
+  const jwk = await crypto.subtle.exportKey("jwk", key);
+  const raw = jwk.x;
+  return Uint8Array.from(
+    atob(raw.replace(/-/g, "+").replace(/_/g, "/")),
+    (c) => c.charCodeAt(0)
+  );
+}
+
+// src/warrant/warrant.ts
+var SIGN_DOMAIN = new TextEncoder().encode("calimero.warrant.v1");
+var INTENT_DOMAIN = new TextEncoder().encode("calimero.warrant.intent.v1");
+async function intentHash(method, argsJson) {
+  const args = new TextEncoder().encode(JSON.stringify(argsJson));
+  return domainHash(INTENT_DOMAIN, [new TextEncoder().encode(method), args]);
+}
 async function signWarrant(input) {
   const context = fromHex(input.context, "context", 32);
   const authorAccount = fromHex(input.authorAccount, "authorAccount", 32);
@@ -2638,21 +2662,72 @@ async function signWarrant(input) {
     )
   );
 }
-async function derivePublicKey(secretHex) {
-  const seed = fromHex(secretHex, "deviceSecret", 32);
-  const pkcs8 = concat(PKCS8_ED25519_PREFIX, seed);
-  const key = await crypto.subtle.importKey(
-    "pkcs8",
-    pkcs8,
-    { name: "Ed25519" },
-    true,
-    ["sign"]
+
+// src/device-cert/device-cert.ts
+var CERT_DOMAIN = new TextEncoder().encode("calimero.device.cert.v1");
+var ACCOUNT_ID_DOMAIN = new TextEncoder().encode("calimero.account.genesis.v1");
+var DEVICE_ID_DOMAIN = new TextEncoder().encode("calimero.device.id.v1");
+var ACCOUNT_GENESIS_VERSION = 1;
+async function mintDeviceId(account, nonce) {
+  if (nonce.length !== 16) {
+    throw new Error(`nonce must be 16 bytes, got ${nonce.length}`);
+  }
+  const accountBytes = fromHex(account, "account", 32);
+  return hex(await domainHash(DEVICE_ID_DOMAIN, [accountBytes, nonce]));
+}
+async function deviceCertPayload(input) {
+  return domainHash(CERT_DOMAIN, [
+    fromHex(input.account, "account", 32),
+    fromHex(input.device, "device", 32),
+    fromHex(input.signPublicKey, "signPublicKey", 32),
+    fromHex(input.kemPublicKey, "kemPublicKey", 32),
+    u32le(input.keyEpoch),
+    u32le(input.deviceEpoch)
+  ]);
+}
+async function signDeviceCert(input) {
+  const rootPublicKey = await derivePublicKey(input.rootSecret);
+  const account = hex(
+    await domainHash(ACCOUNT_ID_DOMAIN, [
+      concat(new Uint8Array([ACCOUNT_GENESIS_VERSION]), rootPublicKey)
+    ])
   );
-  const jwk = await crypto.subtle.exportKey("jwk", key);
-  const raw = jwk.x;
-  return Uint8Array.from(
-    atob(raw.replace(/-/g, "+").replace(/_/g, "/")),
-    (c) => c.charCodeAt(0)
+  const keyEpoch = 0;
+  const payload = await deviceCertPayload({
+    account,
+    device: input.device,
+    signPublicKey: input.signPublicKey,
+    kemPublicKey: input.kemPublicKey,
+    keyEpoch,
+    deviceEpoch: input.deviceEpoch
+  });
+  const key = await importSigningKey(input.rootSecret);
+  const signature = new Uint8Array(
+    await crypto.subtle.sign("Ed25519", key, payload)
+  );
+  const credential = concat(
+    // AccountGenesis
+    new Uint8Array([ACCOUNT_GENESIS_VERSION]),
+    rootPublicKey,
+    // chain: Vec<RootKeyHandoff>, empty
+    u32le(0),
+    // DeviceCert
+    fromHex(account, "account", 32),
+    fromHex(input.device, "device", 32),
+    fromHex(input.signPublicKey, "signPublicKey", 32),
+    fromHex(input.kemPublicKey, "kemPublicKey", 32),
+    u32le(keyEpoch),
+    u32le(input.deviceEpoch),
+    signature
+  );
+  return hex(credential);
+}
+async function accountForRoot(rootSecret) {
+  const rootPublicKey = await derivePublicKey(rootSecret);
+  return hex(
+    await domainHash(ACCOUNT_ID_DOMAIN, [
+      concat(new Uint8Array([ACCOUNT_GENESIS_VERSION]), rootPublicKey)
+    ])
   );
 }
 
@@ -2748,6 +2823,7 @@ export {
   SseClient,
   WebHttpClient,
   WsClient,
+  accountForRoot,
   buildAuthLoginUrl,
   combineSignals,
   compareSemver,
@@ -2766,14 +2842,17 @@ export {
   createRetryableMethod,
   createTimeoutSignal,
   createUniversalHttpClient,
+  deviceCertPayload,
   discoverLocalNodes,
   hasCap,
   intentHash,
   jsonCodec,
   localNodeUrl,
+  mintDeviceId,
   nodeEndpoint,
   parseAuthCallback,
   probeNodeHealth,
+  signDeviceCert,
   signWarrant,
   withCap,
   withRetry,