@dxos/credentials 0.6.13 → 0.6.14-main.1366248

package/dist/lib/browser/index.mjs

@@ -1,16 +1,29 @@
 import "@dxos/node-std/globals";
 
-// inject-globals:@inject-globals
-import {
-  global,
-  Buffer,
-  process
-} from "@dxos/node-std/inject-globals";
-
 // packages/core/halo/credentials/src/invitations.ts
 var defaultSecretProvider = async () => Buffer.from("0000");
 var defaultSecretValidator = async (invitation, secret) => true;
 
+// packages/core/halo/credentials/src/seedphrase.ts
+import { generateMnemonic, mnemonicToSeedSync } from "bip39";
+import { createKeyPair } from "@dxos/crypto";
+import { invariant } from "@dxos/invariant";
+var __dxlog_file = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/seedphrase.ts";
+var generateSeedPhrase = () => generateMnemonic();
+var keyPairFromSeedPhrase = (seedPhrase) => {
+  invariant(seedPhrase, void 0, {
+    F: __dxlog_file,
+    L: 20,
+    S: void 0,
+    A: [
+      "seedPhrase",
+      ""
+    ]
+  });
+  const seed = mnemonicToSeedSync(seedPhrase);
+  return createKeyPair(seed);
+};
+
 // packages/core/halo/credentials/src/passcode.ts
 var generatePasscode = (length = 4) => {
   let passcode = "";
@@ -123,7 +136,7 @@ var credentialTypeFilter = (type) => (credential) => checkCredentialType(credent
 
 // packages/core/halo/credentials/src/credentials/credential-factory.ts
 import { subtleCrypto } from "@dxos/crypto";
-import { invariant } from "@dxos/invariant";
+import { invariant as invariant2 } from "@dxos/invariant";
 import { PublicKey as PublicKey2 } from "@dxos/keys";
 
 // packages/core/halo/credentials/src/credentials/verifier.ts
@@ -196,10 +209,10 @@ var verifyChain = async (chain, authority, subject) => {
 };
 
 // packages/core/halo/credentials/src/credentials/credential-factory.ts
-var __dxlog_file = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/credentials/credential-factory.ts";
+var __dxlog_file2 = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/credentials/credential-factory.ts";
 var createCredential = async ({ signer, issuer, subject, assertion, signingKey, chain, nonce, parentCredentialIds }) => {
-  invariant(assertion["@type"], "Invalid assertion.", {
-    F: __dxlog_file,
+  invariant2(assertion["@type"], "Invalid assertion.", {
+    F: __dxlog_file2,
     L: 48,
     S: void 0,
     A: [
@@ -207,8 +220,8 @@ var createCredential = async ({ signer, issuer, subject, assertion, signingKey,
       "'Invalid assertion.'"
     ]
   });
-  invariant(!!signingKey === !!chain, "Chain must be provided if and only if the signing key differs from the issuer.", {
-    F: __dxlog_file,
+  invariant2(!!signingKey === !!chain, "Chain must be provided if and only if the signing key differs from the issuer.", {
+    F: __dxlog_file2,
     L: 49,
     S: void 0,
     A: [
@@ -218,8 +231,8 @@ var createCredential = async ({ signer, issuer, subject, assertion, signingKey,
   });
   if (chain) {
     const result = await verifyChain(chain, issuer, signingKey);
-    invariant(result.kind === "pass", "Invalid chain.", {
-      F: __dxlog_file,
+    invariant2(result.kind === "pass", "Invalid chain.", {
+      F: __dxlog_file2,
       L: 52,
       S: void 0,
       A: [
@@ -602,10 +615,10 @@ import { SpaceMember as SpaceMember3 } from "@dxos/protocols/proto/dxos/halo/cre
 import { Callback as Callback4, ComplexMap as ComplexMap5, ComplexSet as ComplexSet3 } from "@dxos/util";
 
 // packages/core/halo/credentials/src/state-machine/feed-state-machine.ts
-import { invariant as invariant2 } from "@dxos/invariant";
+import { invariant as invariant3 } from "@dxos/invariant";
 import { PublicKey as PublicKey3 } from "@dxos/keys";
 import { Callback, ComplexMap } from "@dxos/util";
-var __dxlog_file2 = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/state-machine/feed-state-machine.ts";
+var __dxlog_file3 = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/state-machine/feed-state-machine.ts";
 var FeedStateMachine = class {
   constructor(_spaceKey) {
     this._spaceKey = _spaceKey;
@@ -623,8 +636,8 @@ var FeedStateMachine = class {
   */
   async process(credential, fromFeed) {
     const assertion = getCredentialAssertion(credential);
-    invariant2(assertion["@type"] === "dxos.halo.credentials.AdmittedFeed", void 0, {
-      F: __dxlog_file2,
+    invariant3(assertion["@type"] === "dxos.halo.credentials.AdmittedFeed", void 0, {
+      F: __dxlog_file3,
       L: 47,
       S: this,
       A: [
@@ -632,8 +645,8 @@ var FeedStateMachine = class {
         ""
       ]
     });
-    invariant2(assertion.spaceKey.equals(this._spaceKey), void 0, {
-      F: __dxlog_file2,
+    invariant3(assertion.spaceKey.equals(this._spaceKey), void 0, {
+      F: __dxlog_file3,
       L: 48,
       S: this,
       A: [
@@ -723,18 +736,18 @@ var InvitationStateMachine = class {
 };
 
 // packages/core/halo/credentials/src/state-machine/member-state-machine.ts
-import { invariant as invariant4 } from "@dxos/invariant";
+import { invariant as invariant5 } from "@dxos/invariant";
 import { PublicKey as PublicKey6 } from "@dxos/keys";
 import { log as log2 } from "@dxos/log";
 import { SpaceMember as SpaceMember2 } from "@dxos/protocols/proto/dxos/halo/credentials";
 import { ComplexMap as ComplexMap4 } from "@dxos/util";
 
 // packages/core/halo/credentials/src/graph/credential-graph.ts
-import { invariant as invariant3 } from "@dxos/invariant";
+import { invariant as invariant4 } from "@dxos/invariant";
 import { PublicKey as PublicKey5 } from "@dxos/keys";
 import { log } from "@dxos/log";
 import { Callback as Callback3, ComplexMap as ComplexMap3, ComplexSet as ComplexSet2 } from "@dxos/util";
-var __dxlog_file3 = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/graph/credential-graph.ts";
+var __dxlog_file4 = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/graph/credential-graph.ts";
 var CredentialGraph = class {
   constructor(_stateHandler) {
     this._stateHandler = _stateHandler;
@@ -789,7 +802,7 @@ var CredentialGraph = class {
             credential,
             parentId
           }, {
-            F: __dxlog_file3,
+            F: __dxlog_file4,
             L: 72,
             S: this,
             C: (f, a) => f(...a)
@@ -810,8 +823,8 @@ var CredentialGraph = class {
     if (sentinelIdx >= 0) {
       vertex.children.splice(sentinelIdx, 1);
       const vertexInSentinelIdx = this._sentinel.parents.indexOf(vertex);
-      invariant3(vertexInSentinelIdx >= 0, void 0, {
-        F: __dxlog_file3,
+      invariant4(vertexInSentinelIdx >= 0, void 0, {
+        F: __dxlog_file4,
         L: 90,
         S: this,
         A: [
@@ -824,8 +837,8 @@ var CredentialGraph = class {
   }
   async _onVertexInserted(newVertex) {
     const { credential, assertion } = newVertex;
-    invariant3(credential, void 0, {
-      F: __dxlog_file3,
+    invariant4(credential, void 0, {
+      F: __dxlog_file4,
       L: 97,
       S: this,
       A: [
@@ -870,7 +883,7 @@ var CredentialGraph = class {
       log("visit vertex", {
         id: path.head.id
       }, {
-        F: __dxlog_file3,
+        F: __dxlog_file4,
         L: 132,
         S: this,
         C: (f, a) => f(...a)
@@ -879,7 +892,7 @@ var CredentialGraph = class {
       const convergedPaths = this._handleMergePoint(paths, pendingPaths, path);
       if (convergedPaths == null) {
         log("waiting for other paths", void 0, {
-          F: __dxlog_file3,
+          F: __dxlog_file4,
           L: 136,
           S: this,
           C: (f, a) => f(...a)
@@ -908,7 +921,7 @@ var CredentialGraph = class {
           head: p.head.id
         }))
       }, {
-        F: __dxlog_file3,
+        F: __dxlog_file4,
         L: 155,
         S: this,
         C: (f, a) => f(...a)
@@ -934,7 +947,7 @@ var CredentialGraph = class {
         overrides: path?.stateOverrides?.mapValues((v) => this._stateHandler.toLogString(v.assertion))
       }))
     }), {
-      F: __dxlog_file3,
+      F: __dxlog_file4,
       L: 175,
       S: this,
       C: (f, a) => f(...a)
@@ -951,7 +964,7 @@ var CredentialGraph = class {
     }
     if (path.head.id === this._sentinel.id && paths.length > 0) {
       log("waiting for all the active paths to converge on the sentinel", void 0, {
-        F: __dxlog_file3,
+        F: __dxlog_file4,
         L: 199,
         S: this,
         C: (f, a) => f(...a)
@@ -981,7 +994,7 @@ var CredentialGraph = class {
         subject: updatedSubject,
         newState: this._stateHandler.toLogString(path.head.assertion)
       }), {
-        F: __dxlog_file3,
+        F: __dxlog_file4,
         L: 223,
         S: this,
         C: (f, a) => f(...a)
@@ -996,7 +1009,7 @@ var CredentialGraph = class {
         from: path.head.id,
         to: choice.id
       }, {
-        F: __dxlog_file3,
+        F: __dxlog_file4,
         L: 234,
         S: this,
         C: (f, a) => f(...a)
@@ -1093,8 +1106,8 @@ var CredentialGraph = class {
     return path;
   }
   _mergePaths(convergedPaths) {
-    invariant3(convergedPaths.length >= 1, void 0, {
-      F: __dxlog_file3,
+    invariant4(convergedPaths.length >= 1, void 0, {
+      F: __dxlog_file4,
       L: 324,
       S: this,
       A: [
@@ -1114,14 +1127,14 @@ var CredentialGraph = class {
       pathCount: convergedPaths.length,
       forkPoints: convergedPaths.map((fp) => fp.forkPoint?.head.id)
     }), {
-      F: __dxlog_file3,
+      F: __dxlog_file4,
       L: 329,
       S: this,
       C: (f, a) => f(...a)
     });
     const paths = convergedPaths.map((p) => this._moveUpToForkPoint(forkPoint, p));
-    invariant3(forkPoint, void 0, {
-      F: __dxlog_file3,
+    invariant4(forkPoint, void 0, {
+      F: __dxlog_file4,
       L: 335,
       S: this,
       A: [
@@ -1150,7 +1163,7 @@ var CredentialGraph = class {
         forkIssuers: path.forkIssuers,
         state: path.state.mapValues((v) => this._stateHandler.toLogString(v.assertion))
       }), {
-        F: __dxlog_file3,
+        F: __dxlog_file4,
         L: 348,
         S: this,
         C: (f, a) => f(...a)
@@ -1175,7 +1188,7 @@ var CredentialGraph = class {
         subject,
         state: this._stateHandler.toLogString(vertex.assertion)
       }), {
-        F: __dxlog_file3,
+        F: __dxlog_file4,
         L: 370,
         S: this,
         C: (f, a) => f(...a)
@@ -1219,7 +1232,7 @@ var CredentialGraph = class {
       log("merge point chosen to break the tie", {
         mergePointId: existing.head.id
       }, {
-        F: __dxlog_file3,
+        F: __dxlog_file4,
         L: 408,
         S: this,
         C: (f, a) => f(...a)
@@ -1233,7 +1246,7 @@ var CredentialGraph = class {
         current: currentVertex.id,
         candidate: candidateVertex.id
       }, {
-        F: __dxlog_file3,
+        F: __dxlog_file4,
         L: 415,
         S: this,
         C: (f, a) => f(...a)
@@ -1251,7 +1264,7 @@ var CredentialGraph = class {
           candidate.forkIssuers.size
         ]
       }, {
-        F: __dxlog_file3,
+        F: __dxlog_file4,
         L: 432,
         S: this,
         C: (f, a) => f(...a)
@@ -1259,7 +1272,7 @@ var CredentialGraph = class {
       return candidate.forkIssuers.size > existing.forkIssuers.size;
     }
     log("issuance date used to break the tie", void 0, {
-      F: __dxlog_file3,
+      F: __dxlog_file4,
       L: 437,
       S: this,
       C: (f, a) => f(...a)
@@ -1285,7 +1298,7 @@ var toChosenPath = (path) => {
 };
 
 // packages/core/halo/credentials/src/state-machine/member-state-machine.ts
-var __dxlog_file4 = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/state-machine/member-state-machine.ts";
+var __dxlog_file5 = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/state-machine/member-state-machine.ts";
 var MemberStateMachine = class {
   constructor(_spaceKey) {
     this._spaceKey = _spaceKey;
@@ -1313,8 +1326,8 @@ var MemberStateMachine = class {
     const assertion = getCredentialAssertion(credential);
     switch (assertion["@type"]) {
       case "dxos.halo.credentials.SpaceMember": {
-        invariant4(assertion.spaceKey.equals(this._spaceKey), void 0, {
-          F: __dxlog_file4,
+        invariant5(assertion.spaceKey.equals(this._spaceKey), void 0, {
+          F: __dxlog_file5,
           L: 66,
           S: this,
           A: [
@@ -1339,7 +1352,7 @@ var MemberStateMachine = class {
           log2.warn("Member not found", {
             id: credential.subject.id
           }, {
-            F: __dxlog_file4,
+            F: __dxlog_file5,
             L: 81,
             S: this,
             C: (f, a) => f(...a)
@@ -1389,7 +1402,7 @@ var MemberStateMachine = class {
     const path2IssuerRole = this._getRole(scope2, update2.issuer);
     if (path2IssuerRole === SpaceMember2.Role.OWNER !== (path1IssuerRole === SpaceMember2.Role.OWNER)) {
       log2("owner decision used to break the tie", void 0, {
-        F: __dxlog_file4,
+        F: __dxlog_file5,
         L: 139,
         S: this,
         C: (f, a) => f(...a)
@@ -1418,7 +1431,7 @@ var MemberStateMachine = class {
           roleOverride: this.toLogString(override.assertion),
           realRole: this.toLogString(scope.state.get(memberId)?.assertion)
         }), {
-          F: __dxlog_file4,
+          F: __dxlog_file5,
           L: 162,
           S: this,
           C: (f, a) => f(...a)
@@ -1431,7 +1444,7 @@ var MemberStateMachine = class {
 };
 
 // packages/core/halo/credentials/src/state-machine/space-state-machine.ts
-var __dxlog_file5 = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/state-machine/space-state-machine.ts";
+var __dxlog_file6 = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/state-machine/space-state-machine.ts";
 var SpaceStateMachine = class {
   constructor(_spaceKey) {
     this._spaceKey = _spaceKey;
@@ -1509,7 +1522,7 @@ var SpaceStateMachine = class {
       const result = await verifyCredential(credential);
       if (result.kind !== "pass") {
         log3.warn(`Invalid credential: ${result.errors.join(", ")}`, void 0, {
-          F: __dxlog_file5,
+          F: __dxlog_file6,
           L: 155,
           S: this,
           C: (f, a) => f(...a)
@@ -1522,7 +1535,7 @@ var SpaceStateMachine = class {
       case "dxos.halo.credentials.SpaceGenesis": {
         if (this._genesisCredential) {
           log3.warn("Space already has a genesis credential.", void 0, {
-            F: __dxlog_file5,
+            F: __dxlog_file6,
             L: 164,
             S: this,
             C: (f, a) => f(...a)
@@ -1531,7 +1544,7 @@ var SpaceStateMachine = class {
         }
         if (!credential.issuer.equals(this._spaceKey)) {
           log3.warn("Space genesis credential must be issued by space.", void 0, {
-            F: __dxlog_file5,
+            F: __dxlog_file6,
             L: 168,
             S: this,
             C: (f, a) => f(...a)
@@ -1540,7 +1553,7 @@ var SpaceStateMachine = class {
         }
         if (!credential.subject.id.equals(this._spaceKey)) {
           log3.warn("Space genesis credential must be issued to space.", void 0, {
-            F: __dxlog_file5,
+            F: __dxlog_file6,
             L: 172,
             S: this,
             C: (f, a) => f(...a)
@@ -1556,7 +1569,7 @@ var SpaceStateMachine = class {
         }
         if (!this._genesisCredential) {
           log3.warn("Space must have a genesis credential before adding members.", void 0, {
-            F: __dxlog_file5,
+            F: __dxlog_file6,
             L: 185,
             S: this,
             C: (f, a) => f(...a)
@@ -1565,7 +1578,7 @@ var SpaceStateMachine = class {
         }
         if (!this._canInviteNewMembers(credential.issuer)) {
           log3.warn(`Space member is not authorized to invite new members: ${credential.issuer}`, void 0, {
-            F: __dxlog_file5,
+            F: __dxlog_file6,
             L: 189,
             S: this,
             C: (f, a) => f(...a)
@@ -1579,7 +1592,7 @@ var SpaceStateMachine = class {
       case "dxos.halo.credentials.MemberProfile": {
         if (!this._genesisCredential) {
           log3.warn("Space must have a genesis credential before adding members.", void 0, {
-            F: __dxlog_file5,
+            F: __dxlog_file6,
             L: 200,
             S: this,
             C: (f, a) => f(...a)
@@ -1592,7 +1605,7 @@ var SpaceStateMachine = class {
       case "dxos.halo.credentials.AdmittedFeed": {
         if (!this._genesisCredential) {
           log3.warn("Space must have a genesis credential before admitting feeds.", void 0, {
-            F: __dxlog_file5,
+            F: __dxlog_file6,
             L: 210,
             S: this,
             C: (f, a) => f(...a)
@@ -1601,7 +1614,7 @@ var SpaceStateMachine = class {
         }
         if (!this._canAdmitFeeds(credential.issuer)) {
           log3.warn(`Space member is not authorized to admit feeds: ${credential.issuer}`, void 0, {
-            F: __dxlog_file5,
+            F: __dxlog_file6,
             L: 214,
             S: this,
             C: (f, a) => f(...a)
@@ -1615,7 +1628,7 @@ var SpaceStateMachine = class {
       case "dxos.halo.invitations.DelegateSpaceInvitation": {
         if (!this._canInviteNewMembers(credential.issuer)) {
           log3.warn(`Invalid invitation, space member is not authorized to invite new members: ${credential.issuer}`, void 0, {
-            F: __dxlog_file5,
+            F: __dxlog_file6,
             L: 225,
             S: this,
             C: (f, a) => f(...a)
@@ -1663,7 +1676,7 @@ var CredentialConsumer = class {
     this._onOpen = _onOpen;
     this._onClose = _onClose;
     this._ctx = new Context(void 0, {
-      F: __dxlog_file5,
+      F: __dxlog_file6,
       L: 275
     });
     this._isReadyForLiveCredentials = false;
@@ -1690,11 +1703,11 @@ var CredentialConsumer = class {
 
 // packages/core/halo/credentials/src/processor/device-state-machine.ts
 import { Trigger } from "@dxos/async";
-import { invariant as invariant5 } from "@dxos/invariant";
+import { invariant as invariant6 } from "@dxos/invariant";
 import { PublicKey as PublicKey8 } from "@dxos/keys";
 import { log as log4 } from "@dxos/log";
 import { ComplexMap as ComplexMap6 } from "@dxos/util";
-var __dxlog_file6 = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/processor/device-state-machine.ts";
+var __dxlog_file7 = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/processor/device-state-machine.ts";
 var DeviceStateMachine = class {
   constructor(_params) {
     this._params = _params;
@@ -1707,7 +1720,7 @@ var DeviceStateMachine = class {
       deviceKey: this._params.deviceKey,
       credential
     }, {
-      F: __dxlog_file6,
+      F: __dxlog_file7,
       L: 35,
       S: this,
       C: (f, a) => f(...a)
@@ -1721,8 +1734,8 @@ var DeviceStateMachine = class {
     const assertion = getCredentialAssertion(credential);
     switch (assertion["@type"]) {
       case "dxos.halo.credentials.AuthorizedDevice": {
-        invariant5(!this.authorizedDeviceKeys.has(assertion.deviceKey), "Device already added.", {
-          F: __dxlog_file6,
+        invariant6(!this.authorizedDeviceKeys.has(assertion.deviceKey), "Device already added.", {
+          F: __dxlog_file7,
           L: 51,
           S: this,
           A: [
@@ -1736,7 +1749,7 @@ var DeviceStateMachine = class {
           deviceKey: assertion.deviceKey,
           size: this.authorizedDeviceKeys.size
         }, {
-          F: __dxlog_file6,
+          F: __dxlog_file7,
           L: 54,
           S: this,
           C: (f, a) => f(...a)
@@ -1745,8 +1758,8 @@ var DeviceStateMachine = class {
         break;
       }
       case "dxos.halo.credentials.DeviceProfile": {
-        invariant5(this.authorizedDeviceKeys.has(credential.subject.id), "Device not found.", {
-          F: __dxlog_file6,
+        invariant6(this.authorizedDeviceKeys.has(credential.subject.id), "Device not found.", {
+          F: __dxlog_file7,
           L: 64,
           S: this,
           A: [
@@ -1759,7 +1772,7 @@ var DeviceStateMachine = class {
             deviceKey: credential.subject.id,
             profile: assertion.profile
           }, {
-            F: __dxlog_file6,
+            F: __dxlog_file7,
             L: 67,
             S: this,
             C: (f, a) => f(...a)
@@ -1775,7 +1788,7 @@ var DeviceStateMachine = class {
 
 // packages/core/halo/credentials/src/processor/profile-state-machine.ts
 import { log as log5 } from "@dxos/log";
-var __dxlog_file7 = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/processor/profile-state-machine.ts";
+var __dxlog_file8 = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/processor/profile-state-machine.ts";
 var ProfileStateMachine = class {
   constructor(_params) {
     this._params = _params;
@@ -1789,7 +1802,7 @@ var ProfileStateMachine = class {
             expectedIdentity: this._params.identityKey,
             credential
           }, {
-            F: __dxlog_file7,
+            F: __dxlog_file8,
             L: 34,
             S: this,
             C: (f, a) => f(...a)
@@ -1801,7 +1814,7 @@ var ProfileStateMachine = class {
           identityKey: this._params.identityKey,
           profile: this.profile
         }, {
-          F: __dxlog_file7,
+          F: __dxlog_file8,
           L: 40,
           S: this,
           C: (f, a) => f(...a)
@@ -1835,10 +1848,12 @@ export {
   defaultSecretProvider,
   defaultSecretValidator,
   generatePasscode,
+  generateSeedPhrase,
   getCredentialAssertion,
   getCredentialProofPayload,
   getPresentationProofPayload,
   isValidAuthorizedDeviceCredential,
+  keyPairFromSeedPhrase,
   signPresentation,
   verifyChain,
   verifyCredential,