@dxos/credentials 0.6.13 → 0.6.14-main.1366248

package/dist/lib/node/index.cjs

@@ -50,10 +50,12 @@ __export(node_exports, {
   defaultSecretProvider: () => defaultSecretProvider,
   defaultSecretValidator: () => defaultSecretValidator,
   generatePasscode: () => generatePasscode,
+  generateSeedPhrase: () => generateSeedPhrase,
   getCredentialAssertion: () => getCredentialAssertion,
   getCredentialProofPayload: () => getCredentialProofPayload,
   getPresentationProofPayload: () => getPresentationProofPayload,
   isValidAuthorizedDeviceCredential: () => isValidAuthorizedDeviceCredential,
+  keyPairFromSeedPhrase: () => keyPairFromSeedPhrase,
   signPresentation: () => signPresentation,
   verifyChain: () => verifyChain,
   verifyCredential: () => verifyCredential,
@@ -63,45 +65,63 @@ __export(node_exports, {
   verifyPresentationSignature: () => verifyPresentationSignature
 });
 module.exports = __toCommonJS(node_exports);
+var import_bip39 = require("bip39");
+var import_crypto = require("@dxos/crypto");
+var import_invariant = require("@dxos/invariant");
 var import_json_stable_stringify = __toESM(require("json-stable-stringify"));
 var import_keys = require("@dxos/keys");
 var import_timeframe = require("@dxos/timeframe");
 var import_util = require("@dxos/util");
-var import_crypto = require("@dxos/crypto");
-var import_invariant = require("@dxos/invariant");
-var import_keys2 = require("@dxos/keys");
 var import_crypto2 = require("@dxos/crypto");
+var import_invariant2 = require("@dxos/invariant");
+var import_keys2 = require("@dxos/keys");
+var import_crypto3 = require("@dxos/crypto");
 var import_credentials = require("@dxos/protocols/proto/dxos/halo/credentials");
 var import_timeframe2 = require("@dxos/timeframe");
-var import_crypto3 = require("@dxos/crypto");
+var import_crypto4 = require("@dxos/crypto");
 var import_async = require("@dxos/async");
 var import_context = require("@dxos/context");
 var import_keys3 = require("@dxos/keys");
 var import_log = require("@dxos/log");
 var import_credentials2 = require("@dxos/protocols/proto/dxos/halo/credentials");
 var import_util2 = require("@dxos/util");
-var import_invariant2 = require("@dxos/invariant");
+var import_invariant3 = require("@dxos/invariant");
 var import_keys4 = require("@dxos/keys");
 var import_util3 = require("@dxos/util");
 var import_keys5 = require("@dxos/keys");
 var import_util4 = require("@dxos/util");
-var import_invariant3 = require("@dxos/invariant");
+var import_invariant4 = require("@dxos/invariant");
 var import_keys6 = require("@dxos/keys");
 var import_log2 = require("@dxos/log");
 var import_credentials3 = require("@dxos/protocols/proto/dxos/halo/credentials");
 var import_util5 = require("@dxos/util");
-var import_invariant4 = require("@dxos/invariant");
+var import_invariant5 = require("@dxos/invariant");
 var import_keys7 = require("@dxos/keys");
 var import_log3 = require("@dxos/log");
 var import_util6 = require("@dxos/util");
 var import_async2 = require("@dxos/async");
-var import_invariant5 = require("@dxos/invariant");
+var import_invariant6 = require("@dxos/invariant");
 var import_keys8 = require("@dxos/keys");
 var import_log4 = require("@dxos/log");
 var import_util7 = require("@dxos/util");
 var import_log5 = require("@dxos/log");
 var defaultSecretProvider = async () => Buffer.from("0000");
 var defaultSecretValidator = async (invitation, secret) => true;
+var __dxlog_file = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/seedphrase.ts";
+var generateSeedPhrase = () => (0, import_bip39.generateMnemonic)();
+var keyPairFromSeedPhrase = (seedPhrase) => {
+  (0, import_invariant.invariant)(seedPhrase, void 0, {
+    F: __dxlog_file,
+    L: 20,
+    S: void 0,
+    A: [
+      "seedPhrase",
+      ""
+    ]
+  });
+  const seed = (0, import_bip39.mnemonicToSeedSync)(seedPhrase);
+  return (0, import_crypto.createKeyPair)(seed);
+};
 var generatePasscode = (length = 4) => {
   let passcode = "";
   for (let i = 0; i < length; i++) {
@@ -237,7 +257,7 @@ var verifyCredentialSignature = async (credential) => {
     };
   }
   const signData = getCredentialProofPayload(credential);
-  if (!await (0, import_crypto2.verifySignature)(credential.proof.signer, signData, credential.proof.value)) {
+  if (!await (0, import_crypto3.verifySignature)(credential.proof.signer, signData, credential.proof.value)) {
     return {
       kind: "fail",
       errors: [
@@ -266,10 +286,10 @@ var verifyChain = async (chain, authority, subject) => {
     kind: "pass"
   };
 };
-var __dxlog_file = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/credentials/credential-factory.ts";
+var __dxlog_file2 = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/credentials/credential-factory.ts";
 var createCredential = async ({ signer, issuer, subject, assertion, signingKey, chain, nonce, parentCredentialIds }) => {
-  (0, import_invariant.invariant)(assertion["@type"], "Invalid assertion.", {
-    F: __dxlog_file,
+  (0, import_invariant2.invariant)(assertion["@type"], "Invalid assertion.", {
+    F: __dxlog_file2,
     L: 48,
     S: void 0,
     A: [
@@ -277,8 +297,8 @@ var createCredential = async ({ signer, issuer, subject, assertion, signingKey,
       "'Invalid assertion.'"
     ]
   });
-  (0, import_invariant.invariant)(!!signingKey === !!chain, "Chain must be provided if and only if the signing key differs from the issuer.", {
-    F: __dxlog_file,
+  (0, import_invariant2.invariant)(!!signingKey === !!chain, "Chain must be provided if and only if the signing key differs from the issuer.", {
+    F: __dxlog_file2,
     L: 49,
     S: void 0,
     A: [
@@ -288,8 +308,8 @@ var createCredential = async ({ signer, issuer, subject, assertion, signingKey,
   });
   if (chain) {
     const result = await verifyChain(chain, issuer, signingKey);
-    (0, import_invariant.invariant)(result.kind === "pass", "Invalid chain.", {
-      F: __dxlog_file,
+    (0, import_invariant2.invariant)(result.kind === "pass", "Invalid chain.", {
+      F: __dxlog_file2,
       L: 52,
       S: void 0,
       A: [
@@ -319,7 +339,7 @@ var createCredential = async ({ signer, issuer, subject, assertion, signingKey,
   if (chain) {
     credential.proof.chain = chain;
   }
-  credential.id = import_keys2.PublicKey.from(await import_crypto.subtleCrypto.digest("SHA-256", signedPayload));
+  credential.id = import_keys2.PublicKey.from(await import_crypto2.subtleCrypto.digest("SHA-256", signedPayload));
   return credential;
 };
 var createCredentialMessage = (credential) => {
@@ -641,7 +661,7 @@ var verifyPresentationSignature = async (presentation, proof) => {
     };
   }
   const signData = getPresentationProofPayload(presentation.credentials ?? [], proof);
-  if (!await (0, import_crypto3.verifySignature)(proof.signer, signData, proof.value)) {
+  if (!await (0, import_crypto4.verifySignature)(proof.signer, signData, proof.value)) {
     return {
       kind: "fail",
       errors: [
@@ -653,7 +673,7 @@ var verifyPresentationSignature = async (presentation, proof) => {
     kind: "pass"
   };
 };
-var __dxlog_file2 = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/state-machine/feed-state-machine.ts";
+var __dxlog_file3 = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/state-machine/feed-state-machine.ts";
 var FeedStateMachine = class {
   constructor(_spaceKey) {
     this._spaceKey = _spaceKey;
@@ -671,8 +691,8 @@ var FeedStateMachine = class {
   */
   async process(credential, fromFeed) {
     const assertion = getCredentialAssertion(credential);
-    (0, import_invariant2.invariant)(assertion["@type"] === "dxos.halo.credentials.AdmittedFeed", void 0, {
-      F: __dxlog_file2,
+    (0, import_invariant3.invariant)(assertion["@type"] === "dxos.halo.credentials.AdmittedFeed", void 0, {
+      F: __dxlog_file3,
       L: 47,
       S: this,
       A: [
@@ -680,8 +700,8 @@ var FeedStateMachine = class {
         ""
       ]
     });
-    (0, import_invariant2.invariant)(assertion.spaceKey.equals(this._spaceKey), void 0, {
-      F: __dxlog_file2,
+    (0, import_invariant3.invariant)(assertion.spaceKey.equals(this._spaceKey), void 0, {
+      F: __dxlog_file3,
       L: 48,
       S: this,
       A: [
@@ -765,7 +785,7 @@ var InvitationStateMachine = class {
     }
   }
 };
-var __dxlog_file3 = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/graph/credential-graph.ts";
+var __dxlog_file4 = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/graph/credential-graph.ts";
 var CredentialGraph = class {
   constructor(_stateHandler) {
     this._stateHandler = _stateHandler;
@@ -820,7 +840,7 @@ var CredentialGraph = class {
             credential,
             parentId
           }, {
-            F: __dxlog_file3,
+            F: __dxlog_file4,
             L: 72,
             S: this,
             C: (f, a) => f(...a)
@@ -841,8 +861,8 @@ var CredentialGraph = class {
     if (sentinelIdx >= 0) {
       vertex.children.splice(sentinelIdx, 1);
       const vertexInSentinelIdx = this._sentinel.parents.indexOf(vertex);
-      (0, import_invariant4.invariant)(vertexInSentinelIdx >= 0, void 0, {
-        F: __dxlog_file3,
+      (0, import_invariant5.invariant)(vertexInSentinelIdx >= 0, void 0, {
+        F: __dxlog_file4,
         L: 90,
         S: this,
         A: [
@@ -855,8 +875,8 @@ var CredentialGraph = class {
   }
   async _onVertexInserted(newVertex) {
     const { credential, assertion } = newVertex;
-    (0, import_invariant4.invariant)(credential, void 0, {
-      F: __dxlog_file3,
+    (0, import_invariant5.invariant)(credential, void 0, {
+      F: __dxlog_file4,
       L: 97,
       S: this,
       A: [
@@ -901,7 +921,7 @@ var CredentialGraph = class {
       (0, import_log3.log)("visit vertex", {
         id: path.head.id
       }, {
-        F: __dxlog_file3,
+        F: __dxlog_file4,
         L: 132,
         S: this,
         C: (f, a) => f(...a)
@@ -910,7 +930,7 @@ var CredentialGraph = class {
       const convergedPaths = this._handleMergePoint(paths, pendingPaths, path);
       if (convergedPaths == null) {
         (0, import_log3.log)("waiting for other paths", void 0, {
-          F: __dxlog_file3,
+          F: __dxlog_file4,
           L: 136,
           S: this,
           C: (f, a) => f(...a)
@@ -939,7 +959,7 @@ var CredentialGraph = class {
           head: p.head.id
         }))
       }, {
-        F: __dxlog_file3,
+        F: __dxlog_file4,
         L: 155,
         S: this,
         C: (f, a) => f(...a)
@@ -965,7 +985,7 @@ var CredentialGraph = class {
         overrides: path?.stateOverrides?.mapValues((v) => this._stateHandler.toLogString(v.assertion))
       }))
     }), {
-      F: __dxlog_file3,
+      F: __dxlog_file4,
       L: 175,
       S: this,
       C: (f, a) => f(...a)
@@ -982,7 +1002,7 @@ var CredentialGraph = class {
     }
     if (path.head.id === this._sentinel.id && paths.length > 0) {
       (0, import_log3.log)("waiting for all the active paths to converge on the sentinel", void 0, {
-        F: __dxlog_file3,
+        F: __dxlog_file4,
         L: 199,
         S: this,
         C: (f, a) => f(...a)
@@ -1012,7 +1032,7 @@ var CredentialGraph = class {
         subject: updatedSubject,
         newState: this._stateHandler.toLogString(path.head.assertion)
       }), {
-        F: __dxlog_file3,
+        F: __dxlog_file4,
         L: 223,
         S: this,
         C: (f, a) => f(...a)
@@ -1027,7 +1047,7 @@ var CredentialGraph = class {
         from: path.head.id,
         to: choice.id
       }, {
-        F: __dxlog_file3,
+        F: __dxlog_file4,
         L: 234,
         S: this,
         C: (f, a) => f(...a)
@@ -1124,8 +1144,8 @@ var CredentialGraph = class {
     return path;
   }
   _mergePaths(convergedPaths) {
-    (0, import_invariant4.invariant)(convergedPaths.length >= 1, void 0, {
-      F: __dxlog_file3,
+    (0, import_invariant5.invariant)(convergedPaths.length >= 1, void 0, {
+      F: __dxlog_file4,
       L: 324,
       S: this,
       A: [
@@ -1145,14 +1165,14 @@ var CredentialGraph = class {
       pathCount: convergedPaths.length,
       forkPoints: convergedPaths.map((fp) => fp.forkPoint?.head.id)
     }), {
-      F: __dxlog_file3,
+      F: __dxlog_file4,
       L: 329,
       S: this,
       C: (f, a) => f(...a)
     });
     const paths = convergedPaths.map((p) => this._moveUpToForkPoint(forkPoint, p));
-    (0, import_invariant4.invariant)(forkPoint, void 0, {
-      F: __dxlog_file3,
+    (0, import_invariant5.invariant)(forkPoint, void 0, {
+      F: __dxlog_file4,
       L: 335,
       S: this,
       A: [
@@ -1181,7 +1201,7 @@ var CredentialGraph = class {
         forkIssuers: path.forkIssuers,
         state: path.state.mapValues((v) => this._stateHandler.toLogString(v.assertion))
       }), {
-        F: __dxlog_file3,
+        F: __dxlog_file4,
         L: 348,
         S: this,
         C: (f, a) => f(...a)
@@ -1206,7 +1226,7 @@ var CredentialGraph = class {
         subject,
         state: this._stateHandler.toLogString(vertex.assertion)
       }), {
-        F: __dxlog_file3,
+        F: __dxlog_file4,
         L: 370,
         S: this,
         C: (f, a) => f(...a)
@@ -1250,7 +1270,7 @@ var CredentialGraph = class {
       (0, import_log3.log)("merge point chosen to break the tie", {
         mergePointId: existing.head.id
       }, {
-        F: __dxlog_file3,
+        F: __dxlog_file4,
         L: 408,
         S: this,
         C: (f, a) => f(...a)
@@ -1264,7 +1284,7 @@ var CredentialGraph = class {
         current: currentVertex.id,
         candidate: candidateVertex.id
       }, {
-        F: __dxlog_file3,
+        F: __dxlog_file4,
         L: 415,
         S: this,
         C: (f, a) => f(...a)
@@ -1282,7 +1302,7 @@ var CredentialGraph = class {
           candidate.forkIssuers.size
         ]
       }, {
-        F: __dxlog_file3,
+        F: __dxlog_file4,
         L: 432,
         S: this,
         C: (f, a) => f(...a)
@@ -1290,7 +1310,7 @@ var CredentialGraph = class {
       return candidate.forkIssuers.size > existing.forkIssuers.size;
     }
     (0, import_log3.log)("issuance date used to break the tie", void 0, {
-      F: __dxlog_file3,
+      F: __dxlog_file4,
       L: 437,
       S: this,
       C: (f, a) => f(...a)
@@ -1314,7 +1334,7 @@ var toChosenPath = (path) => {
     vs.map((v) => v.id)
   ]));
 };
-var __dxlog_file4 = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/state-machine/member-state-machine.ts";
+var __dxlog_file5 = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/state-machine/member-state-machine.ts";
 var MemberStateMachine = class {
   constructor(_spaceKey) {
     this._spaceKey = _spaceKey;
@@ -1342,8 +1362,8 @@ var MemberStateMachine = class {
     const assertion = getCredentialAssertion(credential);
     switch (assertion["@type"]) {
       case "dxos.halo.credentials.SpaceMember": {
-        (0, import_invariant3.invariant)(assertion.spaceKey.equals(this._spaceKey), void 0, {
-          F: __dxlog_file4,
+        (0, import_invariant4.invariant)(assertion.spaceKey.equals(this._spaceKey), void 0, {
+          F: __dxlog_file5,
           L: 66,
           S: this,
           A: [
@@ -1368,7 +1388,7 @@ var MemberStateMachine = class {
           import_log2.log.warn("Member not found", {
             id: credential.subject.id
           }, {
-            F: __dxlog_file4,
+            F: __dxlog_file5,
             L: 81,
             S: this,
             C: (f, a) => f(...a)
@@ -1418,7 +1438,7 @@ var MemberStateMachine = class {
     const path2IssuerRole = this._getRole(scope2, update2.issuer);
     if (path2IssuerRole === import_credentials3.SpaceMember.Role.OWNER !== (path1IssuerRole === import_credentials3.SpaceMember.Role.OWNER)) {
       (0, import_log2.log)("owner decision used to break the tie", void 0, {
-        F: __dxlog_file4,
+        F: __dxlog_file5,
         L: 139,
         S: this,
         C: (f, a) => f(...a)
@@ -1447,7 +1467,7 @@ var MemberStateMachine = class {
           roleOverride: this.toLogString(override.assertion),
           realRole: this.toLogString(scope.state.get(memberId)?.assertion)
         }), {
-          F: __dxlog_file4,
+          F: __dxlog_file5,
           L: 162,
           S: this,
           C: (f, a) => f(...a)
@@ -1458,7 +1478,7 @@ var MemberStateMachine = class {
     return realRole;
   }
 };
-var __dxlog_file5 = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/state-machine/space-state-machine.ts";
+var __dxlog_file6 = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/state-machine/space-state-machine.ts";
 var SpaceStateMachine = class {
   constructor(_spaceKey) {
     this._spaceKey = _spaceKey;
@@ -1536,7 +1556,7 @@ var SpaceStateMachine = class {
       const result = await verifyCredential(credential);
       if (result.kind !== "pass") {
         import_log.log.warn(`Invalid credential: ${result.errors.join(", ")}`, void 0, {
-          F: __dxlog_file5,
+          F: __dxlog_file6,
           L: 155,
           S: this,
           C: (f, a) => f(...a)
@@ -1549,7 +1569,7 @@ var SpaceStateMachine = class {
       case "dxos.halo.credentials.SpaceGenesis": {
         if (this._genesisCredential) {
           import_log.log.warn("Space already has a genesis credential.", void 0, {
-            F: __dxlog_file5,
+            F: __dxlog_file6,
             L: 164,
             S: this,
             C: (f, a) => f(...a)
@@ -1558,7 +1578,7 @@ var SpaceStateMachine = class {
         }
         if (!credential.issuer.equals(this._spaceKey)) {
           import_log.log.warn("Space genesis credential must be issued by space.", void 0, {
-            F: __dxlog_file5,
+            F: __dxlog_file6,
             L: 168,
             S: this,
             C: (f, a) => f(...a)
@@ -1567,7 +1587,7 @@ var SpaceStateMachine = class {
         }
         if (!credential.subject.id.equals(this._spaceKey)) {
           import_log.log.warn("Space genesis credential must be issued to space.", void 0, {
-            F: __dxlog_file5,
+            F: __dxlog_file6,
             L: 172,
             S: this,
             C: (f, a) => f(...a)
@@ -1583,7 +1603,7 @@ var SpaceStateMachine = class {
         }
         if (!this._genesisCredential) {
           import_log.log.warn("Space must have a genesis credential before adding members.", void 0, {
-            F: __dxlog_file5,
+            F: __dxlog_file6,
             L: 185,
             S: this,
             C: (f, a) => f(...a)
@@ -1592,7 +1612,7 @@ var SpaceStateMachine = class {
         }
         if (!this._canInviteNewMembers(credential.issuer)) {
           import_log.log.warn(`Space member is not authorized to invite new members: ${credential.issuer}`, void 0, {
-            F: __dxlog_file5,
+            F: __dxlog_file6,
             L: 189,
             S: this,
             C: (f, a) => f(...a)
@@ -1606,7 +1626,7 @@ var SpaceStateMachine = class {
       case "dxos.halo.credentials.MemberProfile": {
         if (!this._genesisCredential) {
           import_log.log.warn("Space must have a genesis credential before adding members.", void 0, {
-            F: __dxlog_file5,
+            F: __dxlog_file6,
             L: 200,
             S: this,
             C: (f, a) => f(...a)
@@ -1619,7 +1639,7 @@ var SpaceStateMachine = class {
       case "dxos.halo.credentials.AdmittedFeed": {
         if (!this._genesisCredential) {
           import_log.log.warn("Space must have a genesis credential before admitting feeds.", void 0, {
-            F: __dxlog_file5,
+            F: __dxlog_file6,
             L: 210,
             S: this,
             C: (f, a) => f(...a)
@@ -1628,7 +1648,7 @@ var SpaceStateMachine = class {
         }
         if (!this._canAdmitFeeds(credential.issuer)) {
           import_log.log.warn(`Space member is not authorized to admit feeds: ${credential.issuer}`, void 0, {
-            F: __dxlog_file5,
+            F: __dxlog_file6,
             L: 214,
             S: this,
             C: (f, a) => f(...a)
@@ -1642,7 +1662,7 @@ var SpaceStateMachine = class {
       case "dxos.halo.invitations.DelegateSpaceInvitation": {
         if (!this._canInviteNewMembers(credential.issuer)) {
           import_log.log.warn(`Invalid invitation, space member is not authorized to invite new members: ${credential.issuer}`, void 0, {
-            F: __dxlog_file5,
+            F: __dxlog_file6,
             L: 225,
             S: this,
             C: (f, a) => f(...a)
@@ -1690,7 +1710,7 @@ var CredentialConsumer = class {
     this._onOpen = _onOpen;
     this._onClose = _onClose;
     this._ctx = new import_context.Context(void 0, {
-      F: __dxlog_file5,
+      F: __dxlog_file6,
       L: 275
     });
     this._isReadyForLiveCredentials = false;
@@ -1714,7 +1734,7 @@ var CredentialConsumer = class {
     await this._onClose();
   }
 };
-var __dxlog_file6 = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/processor/device-state-machine.ts";
+var __dxlog_file7 = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/processor/device-state-machine.ts";
 var DeviceStateMachine = class {
   constructor(_params) {
     this._params = _params;
@@ -1727,7 +1747,7 @@ var DeviceStateMachine = class {
       deviceKey: this._params.deviceKey,
       credential
     }, {
-      F: __dxlog_file6,
+      F: __dxlog_file7,
       L: 35,
       S: this,
       C: (f, a) => f(...a)
@@ -1741,8 +1761,8 @@ var DeviceStateMachine = class {
     const assertion = getCredentialAssertion(credential);
     switch (assertion["@type"]) {
       case "dxos.halo.credentials.AuthorizedDevice": {
-        (0, import_invariant5.invariant)(!this.authorizedDeviceKeys.has(assertion.deviceKey), "Device already added.", {
-          F: __dxlog_file6,
+        (0, import_invariant6.invariant)(!this.authorizedDeviceKeys.has(assertion.deviceKey), "Device already added.", {
+          F: __dxlog_file7,
           L: 51,
           S: this,
           A: [
@@ -1756,7 +1776,7 @@ var DeviceStateMachine = class {
           deviceKey: assertion.deviceKey,
           size: this.authorizedDeviceKeys.size
         }, {
-          F: __dxlog_file6,
+          F: __dxlog_file7,
           L: 54,
           S: this,
           C: (f, a) => f(...a)
@@ -1765,8 +1785,8 @@ var DeviceStateMachine = class {
         break;
       }
       case "dxos.halo.credentials.DeviceProfile": {
-        (0, import_invariant5.invariant)(this.authorizedDeviceKeys.has(credential.subject.id), "Device not found.", {
-          F: __dxlog_file6,
+        (0, import_invariant6.invariant)(this.authorizedDeviceKeys.has(credential.subject.id), "Device not found.", {
+          F: __dxlog_file7,
           L: 64,
           S: this,
           A: [
@@ -1779,7 +1799,7 @@ var DeviceStateMachine = class {
             deviceKey: credential.subject.id,
             profile: assertion.profile
           }, {
-            F: __dxlog_file6,
+            F: __dxlog_file7,
             L: 67,
             S: this,
             C: (f, a) => f(...a)
@@ -1792,7 +1812,7 @@ var DeviceStateMachine = class {
     }
   }
 };
-var __dxlog_file7 = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/processor/profile-state-machine.ts";
+var __dxlog_file8 = "/home/runner/work/dxos/dxos/packages/core/halo/credentials/src/processor/profile-state-machine.ts";
 var ProfileStateMachine = class {
   constructor(_params) {
     this._params = _params;
@@ -1806,7 +1826,7 @@ var ProfileStateMachine = class {
             expectedIdentity: this._params.identityKey,
             credential
           }, {
-            F: __dxlog_file7,
+            F: __dxlog_file8,
             L: 34,
             S: this,
             C: (f, a) => f(...a)
@@ -1818,7 +1838,7 @@ var ProfileStateMachine = class {
           identityKey: this._params.identityKey,
           profile: this.profile
         }, {
-          F: __dxlog_file7,
+          F: __dxlog_file8,
           L: 40,
           S: this,
           C: (f, a) => f(...a)
@@ -1853,10 +1873,12 @@ var ProfileStateMachine = class {
   defaultSecretProvider,
   defaultSecretValidator,
   generatePasscode,
+  generateSeedPhrase,
   getCredentialAssertion,
   getCredentialProofPayload,
   getPresentationProofPayload,
   isValidAuthorizedDeviceCredential,
+  keyPairFromSeedPhrase,
   signPresentation,
   verifyChain,
   verifyCredential,