@commit451/salamander 1.1.0 → 1.2.0

package/dist/services/multi-device-key-manager.js

@@ -1,159 +0,0 @@
-import { CryptoService } from './crypto.js';
-import { StorageService } from '../utils/storage.js';
-export class MultiDeviceKeyManagerService {
-    static KEYS_STORAGE_KEY = 'salamander_multi_device_keys';
-    static KEY_EXPIRY_DAYS = 30;
-    /**
-     * Initialize keys for a new runner (CLI side)
-     */
-    static async initializeRunnerKeys(runnerId) {
-        const ecdhKeyPair = CryptoService.generateECDHKeyPair();
-        const keyData = {
-            ecdhKeyPair,
-            sharedSecrets: {},
-            keyHashes: {},
-            createdAt: Date.now()
-        };
-        await this.storeRunnerKeys(runnerId, keyData);
-        return ecdhKeyPair;
-    }
-    /**
-     * Register a new device and derive shared secret
-     */
-    static async registerDevice(runnerId, deviceKey) {
-        const keyData = await this.getRunnerKeys(runnerId);
-        if (!keyData) {
-            throw new Error(`No keys found for runner ${runnerId}`);
-        }
-        // Derive shared secret with this device
-        const sharedSecret = CryptoService.deriveSharedSecret(keyData.ecdhKeyPair.privateKey, deviceKey.publicKey);
-        const keyHash = CryptoService.createKeyHash(sharedSecret);
-        // Verify the key hash matches what the device expects
-        if (keyHash !== deviceKey.keyHash) {
-            throw new Error('Key hash mismatch during device registration');
-        }
-        // Store the shared secret for this device
-        keyData.sharedSecrets[deviceKey.deviceId] = sharedSecret;
-        keyData.keyHashes[deviceKey.deviceId] = keyHash;
-        await this.storeRunnerKeys(runnerId, keyData);
-        console.log(`✓ Device ${deviceKey.deviceId} registered for runner ${runnerId}`);
-        return sharedSecret;
-    }
-    /**
-     * Remove a device from the runner
-     */
-    static async removeDevice(runnerId, deviceId) {
-        const keyData = await this.getRunnerKeys(runnerId);
-        if (!keyData) {
-            return; // No keys to clean up
-        }
-        delete keyData.sharedSecrets[deviceId];
-        delete keyData.keyHashes[deviceId];
-        await this.storeRunnerKeys(runnerId, keyData);
-        console.log(`Device ${deviceId} removed from runner ${runnerId}`);
-    }
-    /**
-     * Get shared secret for specific device
-     */
-    static async getSharedSecret(runnerId, deviceId) {
-        const keyData = await this.getRunnerKeys(runnerId);
-        if (!keyData) {
-            return null;
-        }
-        // Check if keys are expired
-        const daysSinceCreation = (Date.now() - keyData.createdAt) / (1000 * 60 * 60 * 24);
-        if (daysSinceCreation > this.KEY_EXPIRY_DAYS) {
-            console.warn(`Keys for runner ${runnerId} have expired. Consider key rotation.`);
-        }
-        return keyData.sharedSecrets[deviceId] || null;
-    }
-    /**
-     * Get all registered device IDs for a runner
-     */
-    static async getRegisteredDevices(runnerId) {
-        const keyData = await this.getRunnerKeys(runnerId);
-        if (!keyData) {
-            return [];
-        }
-        return Object.keys(keyData.sharedSecrets);
-    }
-    /**
-     * Encrypt command for specific device
-     */
-    static async encryptForDevice(runnerId, deviceId, command) {
-        const sharedSecret = await this.getSharedSecret(runnerId, deviceId);
-        if (!sharedSecret) {
-            throw new Error(`No shared secret found for device ${deviceId} on runner ${runnerId}`);
-        }
-        return CryptoService.safeEncrypt(command, sharedSecret);
-    }
-    /**
-     * Encrypt command for all registered devices
-     */
-    static async encryptForAllDevices(runnerId, command) {
-        const keyData = await this.getRunnerKeys(runnerId);
-        if (!keyData) {
-            throw new Error(`No keys found for runner ${runnerId}`);
-        }
-        const encryptedCommands = {};
-        for (const [deviceId, sharedSecret] of Object.entries(keyData.sharedSecrets)) {
-            try {
-                encryptedCommands[deviceId] = CryptoService.safeEncrypt(command, sharedSecret);
-            }
-            catch (error) {
-                console.warn(`Failed to encrypt command for device ${deviceId}: ${error}`);
-            }
-        }
-        if (Object.keys(encryptedCommands).length === 0) {
-            throw new Error(`No devices registered for runner ${runnerId}`);
-        }
-        return encryptedCommands;
-    }
-    /**
-     * Decrypt command from specific device
-     */
-    static async decryptFromDevice(runnerId, deviceId, encryptedCommand) {
-        const sharedSecret = await this.getSharedSecret(runnerId, deviceId);
-        if (!sharedSecret) {
-            throw new Error(`No shared secret found for device ${deviceId} on runner ${runnerId}`);
-        }
-        return CryptoService.safeDecrypt(encryptedCommand, sharedSecret);
-    }
-    /**
-     * Check if runner has any registered devices
-     */
-    static async hasRegisteredDevices(runnerId) {
-        const devices = await this.getRegisteredDevices(runnerId);
-        return devices.length > 0;
-    }
-    /**
-     * Clean up all keys for a runner
-     */
-    static async removeRunnerKeys(runnerId) {
-        const allKeys = await this.getAllStoredKeys();
-        delete allKeys[runnerId];
-        await StorageService.set(this.KEYS_STORAGE_KEY, allKeys);
-        console.log(`Cleaned up all keys for runner ${runnerId}`);
-    }
-    /**
-     * Get CLI's public key for a runner
-     */
-    static async getCliPublicKey(runnerId) {
-        const keyData = await this.getRunnerKeys(runnerId);
-        return keyData?.ecdhKeyPair.publicKey || null;
-    }
-    // Private helper methods
-    static async getRunnerKeys(runnerId) {
-        const allKeys = await this.getAllStoredKeys();
-        return allKeys[runnerId] || null;
-    }
-    static async storeRunnerKeys(runnerId, keys) {
-        const allKeys = await this.getAllStoredKeys();
-        allKeys[runnerId] = keys;
-        await StorageService.set(this.KEYS_STORAGE_KEY, allKeys);
-    }
-    static async getAllStoredKeys() {
-        return (await StorageService.get(this.KEYS_STORAGE_KEY)) ?? {};
-    }
-}
-//# sourceMappingURL=multi-device-key-manager.js.map

package/dist/services/multi-device-key-manager.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"multi-device-key-manager.js","sourceRoot":"","sources":["../../src/services/multi-device-key-manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,aAAa,EAAC,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAC,cAAc,EAAC,MAAM,qBAAqB,CAAC;AAUnD,MAAM,OAAO,4BAA4B;IAC7B,MAAM,CAAU,gBAAgB,GAAG,8BAA8B,CAAC;IAClE,MAAM,CAAU,eAAe,GAAG,EAAE,CAAC;IAE7C;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,QAAgB;QAC9C,MAAM,WAAW,GAAG,aAAa,CAAC,mBAAmB,EAAE,CAAC;QAExD,MAAM,OAAO,GAAkB;YAC3B,WAAW;YACX,aAAa,EAAE,EAAE;YACjB,SAAS,EAAE,EAAE;YACb,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACxB,CAAC;QAEF,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC9C,OAAO,WAAW,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,QAAgB,EAAE,SAAoB;QAC9D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,wCAAwC;QACxC,MAAM,YAAY,GAAG,aAAa,CAAC,kBAAkB,CACjD,OAAO,CAAC,WAAW,CAAC,UAAU,EAC9B,SAAS,CAAC,SAAS,CACtB,CAAC;QAEF,MAAM,OAAO,GAAG,aAAa,CAAC,aAAa,CAAC,YAAY,CAAC,CAAC;QAE1D,sDAAsD;QACtD,IAAI,OAAO,KAAK,SAAS,CAAC,OAAO,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QACpE,CAAC;QAED,0CAA0C;QAC1C,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,YAAY,CAAC;QACzD,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC;QAEhD,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAE9C,OAAO,CAAC,GAAG,CAAC,YAAY,SAAS,CAAC,QAAQ,0BAA0B,QAAQ,EAAE,CAAC,CAAC;QAChF,OAAO,YAAY,CAAC;IACxB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,QAAgB,EAAE,QAAgB;QACxD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO,CAAC,sBAAsB;QAClC,CAAC;QAED,OAAO,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACvC,OAAO,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QAEnC,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,CAAC,UAAU,QAAQ,wBAAwB,QAAQ,EAAE,CAAC,CAAC;IACtE,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,QAAgB,EAAE,QAAgB;QAC3D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO,IAAI,CAAC;QAChB,CAAC;QAED,4BAA4B;QAC5B,MAAM,iBAAiB,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QACnF,IAAI,iBAAiB,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;YAC3C,OAAO,CAAC,IAAI,CAAC,mBAAmB,QAAQ,uCAAuC,CAAC,CAAC;QACrF,CAAC;QAED,OAAO,OAAO,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,QAAgB;QAC9C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,OAAO,EAAE,CAAC;QACd,CAAC;QAED,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAgB,EAAE,QAAgB,EAAE,OAAe;QAC7E,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACpE,IAAI,CAAC,YAAY,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,qCAAqC,QAAQ,cAAc,QAAQ,EAAE,CAAC,CAAC;QAC3F,CAAC;QAED,OAAO,aAAa,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAC5D,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,QAAgB,EAAE,OAAe;QAC/D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACnD,IAAI,CAAC,OAAO,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,MAAM,iBAAiB,GAA2B,EAAE,CAAC;QAErD,KAAK,MAAM,CAAC,QAAQ,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;YAC3E,IAAI,CAAC;gBACD,iBAAiB,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,WAAW,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YACnF,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,wCAAwC,QAAQ,KAAK,KAAK,EAAE,CAAC,CAAC;YAC/E,CAAC;QACL,CAAC;QAED,IAAI,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,OAAO,iBAAiB,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,QAAgB,EAAE,QAAgB,EAAE,gBAAwB;QACvF,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACpE,IAAI,CAAC,YAAY,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,qCAAqC,QAAQ,cAAc,QAAQ,EAAE,CAAC,CAAC;QAC3F,CAAC;QAED,OAAO,aAAa,CAAC,WAAW,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAC;IACrE,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,QAAgB;QAC9C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC;QAC1D,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9B,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,QAAgB;QAC1C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9C,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzB,MAAM,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,kCAAkC,QAAQ,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,QAAgB;QACzC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;QACnD,OAAO,OAAO,EAAE,WAAW,CAAC,SAAS,IAAI,IAAI,CAAC;IAClD,CAAC;IAED,yBAAyB;IAEjB,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,QAAgB;QAC/C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9C,OAAO,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;IACrC,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,QAAgB,EAAE,IAAmB;QACtE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC;QAC9C,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;QACzB,MAAM,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IAEO,MAAM,CAAC,KAAK,CAAC,gBAAgB;QACjC,OAAO,CAAC,MAAM,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAC;IACnE,CAAC"}