@farazirfan/costar-server-executor 1.0.0

package/dist/infra/channels-status-issues.d.ts

@@ -0,0 +1,3 @@
+import type { ChannelStatusIssue } from "../channels/plugins/types.js";
+export declare function collectChannelStatusIssues(payload: Record<string, unknown>): ChannelStatusIssue[];
+//# sourceMappingURL=channels-status-issues.d.ts.map

package/dist/infra/channels-status-issues.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"channels-status-issues.d.ts","sourceRoot":"","sources":["../../src/infra/channels-status-issues.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAA0B,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAE/F,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,kBAAkB,EAAE,CAYjG"}

package/dist/infra/channels-status-issues.js

@@ -0,0 +1,16 @@
+import { listChannelPlugins } from "../channels/plugins/index.js";
+export function collectChannelStatusIssues(payload) {
+    const issues = [];
+    const accountsByChannel = payload.channelAccounts;
+    for (const plugin of listChannelPlugins()) {
+        const collect = plugin.status?.collectStatusIssues;
+        if (!collect)
+            continue;
+        const raw = accountsByChannel?.[plugin.id];
+        if (!Array.isArray(raw))
+            continue;
+        issues.push(...collect(raw));
+    }
+    return issues;
+}
+//# sourceMappingURL=channels-status-issues.js.map

package/dist/infra/channels-status-issues.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"channels-status-issues.js","sourceRoot":"","sources":["../../src/infra/channels-status-issues.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAGlE,MAAM,UAAU,0BAA0B,CAAC,OAAgC;IACzE,MAAM,MAAM,GAAyB,EAAE,CAAC;IACxC,MAAM,iBAAiB,GAAG,OAAO,CAAC,eAAsD,CAAC;IACzF,KAAK,MAAM,MAAM,IAAI,kBAAkB,EAAE,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC;QACnD,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,MAAM,GAAG,GAAG,iBAAiB,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;YAAE,SAAS;QAElC,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,GAA+B,CAAC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/infra/clipboard.d.ts

@@ -0,0 +1,2 @@
+export declare function copyToClipboard(value: string): Promise<boolean>;
+//# sourceMappingURL=clipboard.d.ts.map

package/dist/infra/clipboard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clipboard.d.ts","sourceRoot":"","sources":["../../src/infra/clipboard.ts"],"names":[],"mappings":"AAEA,wBAAsB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAoBrE"}

package/dist/infra/clipboard.js

@@ -0,0 +1,25 @@
+import { runCommandWithTimeout } from "../process/exec.js";
+export async function copyToClipboard(value) {
+    const attempts = [
+        { argv: ["pbcopy"] },
+        { argv: ["xclip", "-selection", "clipboard"] },
+        { argv: ["wl-copy"] },
+        { argv: ["clip.exe"] }, // WSL / Windows
+        { argv: ["powershell", "-NoProfile", "-Command", "Set-Clipboard"] },
+    ];
+    for (const attempt of attempts) {
+        try {
+            const result = await runCommandWithTimeout(attempt.argv, {
+                timeoutMs: 3_000,
+                input: value,
+            });
+            if (result.code === 0 && !result.killed)
+                return true;
+        }
+        catch {
+            // keep trying the next fallback
+        }
+    }
+    return false;
+}
+//# sourceMappingURL=clipboard.js.map

package/dist/infra/clipboard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clipboard.js","sourceRoot":"","sources":["../../src/infra/clipboard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAE3D,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,KAAa;IACjD,MAAM,QAAQ,GAA8B;QAC1C,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,EAAE;QACpB,EAAE,IAAI,EAAE,CAAC,OAAO,EAAE,YAAY,EAAE,WAAW,CAAC,EAAE;QAC9C,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE;QACrB,EAAE,IAAI,EAAE,CAAC,UAAU,CAAC,EAAE,EAAE,gBAAgB;QACxC,EAAE,IAAI,EAAE,CAAC,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,eAAe,CAAC,EAAE;KACpE,CAAC;IACF,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,OAAO,CAAC,IAAI,EAAE;gBACvD,SAAS,EAAE,KAAK;gBAChB,KAAK,EAAE,KAAK;aACb,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,gCAAgC;QAClC,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/infra/control-ui-assets.d.ts

@@ -0,0 +1,12 @@
+import { type RuntimeEnv } from "../runtime.js";
+export declare function resolveControlUiRepoRoot(argv1?: string | undefined): string | null;
+export declare function resolveControlUiDistIndexPath(argv1?: string | undefined): string | null;
+export type EnsureControlUiAssetsResult = {
+    ok: boolean;
+    built: boolean;
+    message?: string;
+};
+export declare function ensureControlUiAssetsBuilt(runtime?: RuntimeEnv, opts?: {
+    timeoutMs?: number;
+}): Promise<EnsureControlUiAssetsResult>;
+//# sourceMappingURL=control-ui-assets.d.ts.map

package/dist/infra/control-ui-assets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-ui-assets.d.ts","sourceRoot":"","sources":["../../src/infra/control-ui-assets.ts"],"names":[],"mappings":"AAIA,OAAO,EAAkB,KAAK,UAAU,EAAE,MAAM,eAAe,CAAC;AAEhE,wBAAgB,wBAAwB,CACtC,KAAK,GAAE,MAAM,GAAG,SAA2B,GAC1C,MAAM,GAAG,IAAI,CAwBf;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,GAAE,MAAM,GAAG,SAA2B,GAC1C,MAAM,GAAG,IAAI,CAMf;AAED,MAAM,MAAM,2BAA2B,GAAG;IACxC,EAAE,EAAE,OAAO,CAAC;IACZ,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,CAAC;AAaF,wBAAsB,0BAA0B,CAC9C,OAAO,GAAE,UAA2B,EACpC,IAAI,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5B,OAAO,CAAC,2BAA2B,CAAC,CAuDtC"}

package/dist/infra/control-ui-assets.js

@@ -0,0 +1,99 @@
+import fs from "node:fs";
+import path from "node:path";
+import { runCommandWithTimeout } from "../process/exec.js";
+import { defaultRuntime } from "../runtime.js";
+export function resolveControlUiRepoRoot(argv1 = process.argv[1]) {
+    if (!argv1)
+        return null;
+    const normalized = path.resolve(argv1);
+    const parts = normalized.split(path.sep);
+    const srcIndex = parts.lastIndexOf("src");
+    if (srcIndex !== -1) {
+        const root = parts.slice(0, srcIndex).join(path.sep);
+        if (fs.existsSync(path.join(root, "ui", "vite.config.ts")))
+            return root;
+    }
+    let dir = path.dirname(normalized);
+    for (let i = 0; i < 8; i++) {
+        if (fs.existsSync(path.join(dir, "package.json")) &&
+            fs.existsSync(path.join(dir, "ui", "vite.config.ts"))) {
+            return dir;
+        }
+        const parent = path.dirname(dir);
+        if (parent === dir)
+            break;
+        dir = parent;
+    }
+    return null;
+}
+export function resolveControlUiDistIndexPath(argv1 = process.argv[1]) {
+    if (!argv1)
+        return null;
+    const normalized = path.resolve(argv1);
+    const distDir = path.dirname(normalized);
+    if (path.basename(distDir) !== "dist")
+        return null;
+    return path.join(distDir, "control-ui", "index.html");
+}
+function summarizeCommandOutput(text) {
+    const lines = text
+        .split(/\r?\n/g)
+        .map((l) => l.trim())
+        .filter(Boolean);
+    if (!lines.length)
+        return undefined;
+    const last = lines.at(-1);
+    if (!last)
+        return undefined;
+    return last.length > 240 ? `${last.slice(0, 239)}…` : last;
+}
+export async function ensureControlUiAssetsBuilt(runtime = defaultRuntime, opts) {
+    const indexFromDist = resolveControlUiDistIndexPath(process.argv[1]);
+    if (indexFromDist && fs.existsSync(indexFromDist)) {
+        return { ok: true, built: false };
+    }
+    const repoRoot = resolveControlUiRepoRoot(process.argv[1]);
+    if (!repoRoot) {
+        const hint = indexFromDist
+            ? `Missing Control UI assets at ${indexFromDist}`
+            : "Missing Control UI assets";
+        return {
+            ok: false,
+            built: false,
+            message: `${hint}. Build them with \`pnpm ui:build\` (auto-installs UI deps).`,
+        };
+    }
+    const indexPath = path.join(repoRoot, "dist", "control-ui", "index.html");
+    if (fs.existsSync(indexPath)) {
+        return { ok: true, built: false };
+    }
+    const uiScript = path.join(repoRoot, "scripts", "ui.js");
+    if (!fs.existsSync(uiScript)) {
+        return {
+            ok: false,
+            built: false,
+            message: `Control UI assets missing but ${uiScript} is unavailable.`,
+        };
+    }
+    runtime.log("Control UI assets missing; building (ui:build, auto-installs UI deps)…");
+    const build = await runCommandWithTimeout([process.execPath, uiScript, "build"], {
+        cwd: repoRoot,
+        timeoutMs: opts?.timeoutMs ?? 10 * 60_000,
+    });
+    if (build.code !== 0) {
+        return {
+            ok: false,
+            built: false,
+            message: `Control UI build failed: ${summarizeCommandOutput(build.stderr) ?? `exit ${build.code}`}`,
+        };
+    }
+    if (!fs.existsSync(indexPath)) {
+        return {
+            ok: false,
+            built: true,
+            message: `Control UI build completed but ${indexPath} is still missing.`,
+        };
+    }
+    return { ok: true, built: true };
+}
+//# sourceMappingURL=control-ui-assets.js.map

package/dist/infra/control-ui-assets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"control-ui-assets.js","sourceRoot":"","sources":["../../src/infra/control-ui-assets.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAmB,MAAM,eAAe,CAAC;AAEhE,MAAM,UAAU,wBAAwB,CACtC,QAA4B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAE3C,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,QAAQ,KAAK,CAAC,CAAC,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrD,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IAC1E,CAAC;IAED,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,IACE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;YAC7C,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,gBAAgB,CAAC,CAAC,EACrD,CAAC;YACD,OAAO,GAAG,CAAC;QACb,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM;QAC1B,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,QAA4B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAE3C,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACnD,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;AACxD,CAAC;AAQD,SAAS,sBAAsB,CAAC,IAAY;IAC1C,MAAM,KAAK,GAAG,IAAI;SACf,KAAK,CAAC,QAAQ,CAAC;SACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IACnB,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IACpC,MAAM,IAAI,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1B,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,OAAO,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,UAAsB,cAAc,EACpC,IAA6B;IAE7B,MAAM,aAAa,GAAG,6BAA6B,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,IAAI,aAAa,IAAI,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACpC,CAAC;IAED,MAAM,QAAQ,GAAG,wBAAwB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,GAAG,aAAa;YACxB,CAAC,CAAC,gCAAgC,aAAa,EAAE;YACjD,CAAC,CAAC,2BAA2B,CAAC;QAChC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,KAAK;YACZ,OAAO,EAAE,GAAG,IAAI,8DAA8D;SAC/E,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;IAC1E,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACpC,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACzD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,KAAK;YACZ,OAAO,EAAE,iCAAiC,QAAQ,kBAAkB;SACrE,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,wEAAwE,CAAC,CAAC;IAEtF,MAAM,KAAK,GAAG,MAAM,qBAAqB,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE;QAC/E,GAAG,EAAE,QAAQ;QACb,SAAS,EAAE,IAAI,EAAE,SAAS,IAAI,EAAE,GAAG,MAAM;KAC1C,CAAC,CAAC;IACH,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,KAAK;YACZ,OAAO,EAAE,4BAA4B,sBAAsB,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,QAAQ,KAAK,CAAC,IAAI,EAAE,EAAE;SACpG,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,IAAI;YACX,OAAO,EAAE,kCAAkC,SAAS,oBAAoB;SACzE,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AACnC,CAAC"}

package/dist/infra/dedupe.d.ts

@@ -0,0 +1,12 @@
+export type DedupeCache = {
+    check: (key: string | undefined | null, now?: number) => boolean;
+    clear: () => void;
+    size: () => number;
+};
+type DedupeCacheOptions = {
+    ttlMs: number;
+    maxSize: number;
+};
+export declare function createDedupeCache(options: DedupeCacheOptions): DedupeCache;
+export {};
+//# sourceMappingURL=dedupe.d.ts.map

package/dist/infra/dedupe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dedupe.d.ts","sourceRoot":"","sources":["../../src/infra/dedupe.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,WAAW,GAAG;IACxB,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,EAAE,GAAG,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC;IACjE,KAAK,EAAE,MAAM,IAAI,CAAC;IAClB,IAAI,EAAE,MAAM,MAAM,CAAC;CACpB,CAAC;AAEF,KAAK,kBAAkB,GAAG;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,GAAG,WAAW,CA+C1E"}

package/dist/infra/dedupe.js

@@ -0,0 +1,48 @@
+export function createDedupeCache(options) {
+    const ttlMs = Math.max(0, options.ttlMs);
+    const maxSize = Math.max(0, Math.floor(options.maxSize));
+    const cache = new Map();
+    const touch = (key, now) => {
+        cache.delete(key);
+        cache.set(key, now);
+    };
+    const prune = (now) => {
+        const cutoff = ttlMs > 0 ? now - ttlMs : undefined;
+        if (cutoff !== undefined) {
+            for (const [entryKey, entryTs] of cache) {
+                if (entryTs < cutoff) {
+                    cache.delete(entryKey);
+                }
+            }
+        }
+        if (maxSize <= 0) {
+            cache.clear();
+            return;
+        }
+        while (cache.size > maxSize) {
+            const oldestKey = cache.keys().next().value;
+            if (!oldestKey)
+                break;
+            cache.delete(oldestKey);
+        }
+    };
+    return {
+        check: (key, now = Date.now()) => {
+            if (!key)
+                return false;
+            const existing = cache.get(key);
+            if (existing !== undefined && (ttlMs <= 0 || now - existing < ttlMs)) {
+                touch(key, now);
+                return true;
+            }
+            touch(key, now);
+            prune(now);
+            return false;
+        },
+        clear: () => {
+            cache.clear();
+        },
+        size: () => cache.size,
+    };
+}
+//# sourceMappingURL=dedupe.js.map

package/dist/infra/dedupe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dedupe.js","sourceRoot":"","sources":["../../src/infra/dedupe.ts"],"names":[],"mappings":"AAWA,MAAM,UAAU,iBAAiB,CAAC,OAA2B;IAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IAExC,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,GAAW,EAAE,EAAE;QACzC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClB,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACtB,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,EAAE;QAC5B,MAAM,MAAM,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;QACnD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,KAAK,EAAE,CAAC;gBACxC,IAAI,OAAO,GAAG,MAAM,EAAE,CAAC;oBACrB,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,OAAO,IAAI,CAAC,EAAE,CAAC;YACjB,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,GAAG,OAAO,EAAE,CAAC;YAC5B,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAA2B,CAAC;YAClE,IAAI,CAAC,SAAS;gBAAE,MAAM;YACtB,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,KAAK,EAAE,CAAC,GAAG,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,EAAE;YAC/B,IAAI,CAAC,GAAG;gBAAE,OAAO,KAAK,CAAC;YACvB,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAChC,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,GAAG,GAAG,QAAQ,GAAG,KAAK,CAAC,EAAE,CAAC;gBACrE,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;gBAChB,OAAO,IAAI,CAAC;YACd,CAAC;YACD,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAChB,KAAK,CAAC,GAAG,CAAC,CAAC;YACX,OAAO,KAAK,CAAC;QACf,CAAC;QACD,KAAK,EAAE,GAAG,EAAE;YACV,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,CAAC;QACD,IAAI,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI;KACvB,CAAC;AACJ,CAAC"}

package/dist/infra/device-auth-store.d.ts

@@ -0,0 +1,24 @@
+export type DeviceAuthEntry = {
+    token: string;
+    role: string;
+    scopes: string[];
+    updatedAtMs: number;
+};
+export declare function loadDeviceAuthToken(params: {
+    deviceId: string;
+    role: string;
+    env?: NodeJS.ProcessEnv;
+}): DeviceAuthEntry | null;
+export declare function storeDeviceAuthToken(params: {
+    deviceId: string;
+    role: string;
+    token: string;
+    scopes?: string[];
+    env?: NodeJS.ProcessEnv;
+}): DeviceAuthEntry;
+export declare function clearDeviceAuthToken(params: {
+    deviceId: string;
+    role: string;
+    env?: NodeJS.ProcessEnv;
+}): void;
+//# sourceMappingURL=device-auth-store.d.ts.map

package/dist/infra/device-auth-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-auth-store.d.ts","sourceRoot":"","sources":["../../src/infra/device-auth-store.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,eAAe,GAAG;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAmDF,wBAAgB,mBAAmB,CAAC,MAAM,EAAE;IAC1C,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,GAAG,eAAe,GAAG,IAAI,CASzB;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,GAAG,eAAe,CAqBlB;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE;IAC3C,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,GAAG,IAAI,CAaP"}

package/dist/infra/device-auth-store.js

@@ -0,0 +1,98 @@
+import fs from "node:fs";
+import path from "node:path";
+import { resolveStateDir } from "../config/paths.js";
+const DEVICE_AUTH_FILE = "device-auth.json";
+function resolveDeviceAuthPath(env = process.env) {
+    return path.join(resolveStateDir(env), "identity", DEVICE_AUTH_FILE);
+}
+function normalizeRole(role) {
+    return role.trim();
+}
+function normalizeScopes(scopes) {
+    if (!Array.isArray(scopes))
+        return [];
+    const out = new Set();
+    for (const scope of scopes) {
+        const trimmed = scope.trim();
+        if (trimmed)
+            out.add(trimmed);
+    }
+    return [...out].sort();
+}
+function readStore(filePath) {
+    try {
+        if (!fs.existsSync(filePath))
+            return null;
+        const raw = fs.readFileSync(filePath, "utf8");
+        const parsed = JSON.parse(raw);
+        if (parsed?.version !== 1 || typeof parsed.deviceId !== "string")
+            return null;
+        if (!parsed.tokens || typeof parsed.tokens !== "object")
+            return null;
+        return parsed;
+    }
+    catch {
+        return null;
+    }
+}
+function writeStore(filePath, store) {
+    fs.mkdirSync(path.dirname(filePath), { recursive: true });
+    fs.writeFileSync(filePath, `${JSON.stringify(store, null, 2)}\n`, { mode: 0o600 });
+    try {
+        fs.chmodSync(filePath, 0o600);
+    }
+    catch {
+        // best-effort
+    }
+}
+export function loadDeviceAuthToken(params) {
+    const filePath = resolveDeviceAuthPath(params.env);
+    const store = readStore(filePath);
+    if (!store)
+        return null;
+    if (store.deviceId !== params.deviceId)
+        return null;
+    const role = normalizeRole(params.role);
+    const entry = store.tokens[role];
+    if (!entry || typeof entry.token !== "string")
+        return null;
+    return entry;
+}
+export function storeDeviceAuthToken(params) {
+    const filePath = resolveDeviceAuthPath(params.env);
+    const existing = readStore(filePath);
+    const role = normalizeRole(params.role);
+    const next = {
+        version: 1,
+        deviceId: params.deviceId,
+        tokens: existing && existing.deviceId === params.deviceId && existing.tokens
+            ? { ...existing.tokens }
+            : {},
+    };
+    const entry = {
+        token: params.token,
+        role,
+        scopes: normalizeScopes(params.scopes),
+        updatedAtMs: Date.now(),
+    };
+    next.tokens[role] = entry;
+    writeStore(filePath, next);
+    return entry;
+}
+export function clearDeviceAuthToken(params) {
+    const filePath = resolveDeviceAuthPath(params.env);
+    const store = readStore(filePath);
+    if (!store || store.deviceId !== params.deviceId)
+        return;
+    const role = normalizeRole(params.role);
+    if (!store.tokens[role])
+        return;
+    const next = {
+        version: 1,
+        deviceId: store.deviceId,
+        tokens: { ...store.tokens },
+    };
+    delete next.tokens[role];
+    writeStore(filePath, next);
+}
+//# sourceMappingURL=device-auth-store.js.map

package/dist/infra/device-auth-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-auth-store.js","sourceRoot":"","sources":["../../src/infra/device-auth-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAerD,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAE5C,SAAS,qBAAqB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACjE,OAAO,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;AACrB,CAAC;AAED,SAAS,eAAe,CAAC,MAA4B;IACnD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC;IACtC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,OAAO;YAAE,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AACzB,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB;IACjC,IAAI,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1C,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAoB,CAAC;QAClD,IAAI,MAAM,EAAE,OAAO,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC9E,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACrE,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,QAAgB,EAAE,KAAsB;IAC1D,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1D,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACnF,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,cAAc;IAChB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAInC;IACC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IACpD,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAMpC;IACC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,IAAI,GAAoB;QAC5B,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EACJ,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM;YAClE,CAAC,CAAC,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE;YACxB,CAAC,CAAC,EAAE;KACT,CAAC;IACF,MAAM,KAAK,GAAoB;QAC7B,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,IAAI;QACJ,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC;QACtC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;KACxB,CAAC;IACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IAC1B,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC3B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAIpC;IACC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;QAAE,OAAO;IACzD,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO;IAChC,MAAM,IAAI,GAAoB;QAC5B,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE;KAC5B,CAAC;IACF,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzB,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;AAC7B,CAAC"}

package/dist/infra/device-identity.d.ts

@@ -0,0 +1,12 @@
+export type DeviceIdentity = {
+    deviceId: string;
+    publicKeyPem: string;
+    privateKeyPem: string;
+};
+export declare function loadOrCreateDeviceIdentity(filePath?: string): DeviceIdentity;
+export declare function signDevicePayload(privateKeyPem: string, payload: string): string;
+export declare function normalizeDevicePublicKeyBase64Url(publicKey: string): string | null;
+export declare function deriveDeviceIdFromPublicKey(publicKey: string): string | null;
+export declare function publicKeyRawBase64UrlFromPem(publicKeyPem: string): string;
+export declare function verifyDeviceSignature(publicKey: string, payload: string, signatureBase64Url: string): boolean;
+//# sourceMappingURL=device-identity.d.ts.map

package/dist/infra/device-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-identity.d.ts","sourceRoot":"","sources":["../../src/infra/device-identity.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB,CAAC;AAsDF,wBAAgB,0BAA0B,CAAC,QAAQ,GAAE,MAAqB,GAAG,cAAc,CAwD1F;AAED,wBAAgB,iBAAiB,CAAC,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAIhF;AAED,wBAAgB,iCAAiC,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAUlF;AAED,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAS5E;AAED,wBAAgB,4BAA4B,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAEzE;AAED,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM,EACf,kBAAkB,EAAE,MAAM,GACzB,OAAO,CAoBT"}

package/dist/infra/device-identity.js

@@ -0,0 +1,150 @@
+import crypto from "node:crypto";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+const DEFAULT_DIR = path.join(os.homedir(), ".openclaw", "identity");
+const DEFAULT_FILE = path.join(DEFAULT_DIR, "device.json");
+function ensureDir(filePath) {
+    fs.mkdirSync(path.dirname(filePath), { recursive: true });
+}
+const ED25519_SPKI_PREFIX = Buffer.from("302a300506032b6570032100", "hex");
+function base64UrlEncode(buf) {
+    return buf.toString("base64").replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/g, "");
+}
+function base64UrlDecode(input) {
+    const normalized = input.replaceAll("-", "+").replaceAll("_", "/");
+    const padded = normalized + "=".repeat((4 - (normalized.length % 4)) % 4);
+    return Buffer.from(padded, "base64");
+}
+function derivePublicKeyRaw(publicKeyPem) {
+    const key = crypto.createPublicKey(publicKeyPem);
+    const spki = key.export({ type: "spki", format: "der" });
+    if (spki.length === ED25519_SPKI_PREFIX.length + 32 &&
+        spki.subarray(0, ED25519_SPKI_PREFIX.length).equals(ED25519_SPKI_PREFIX)) {
+        return spki.subarray(ED25519_SPKI_PREFIX.length);
+    }
+    return spki;
+}
+function fingerprintPublicKey(publicKeyPem) {
+    const raw = derivePublicKeyRaw(publicKeyPem);
+    return crypto.createHash("sha256").update(raw).digest("hex");
+}
+function generateIdentity() {
+    const { publicKey, privateKey } = crypto.generateKeyPairSync("ed25519");
+    const publicKeyPem = publicKey.export({ type: "spki", format: "pem" }).toString();
+    const privateKeyPem = privateKey.export({ type: "pkcs8", format: "pem" }).toString();
+    const deviceId = fingerprintPublicKey(publicKeyPem);
+    return { deviceId, publicKeyPem, privateKeyPem };
+}
+export function loadOrCreateDeviceIdentity(filePath = DEFAULT_FILE) {
+    try {
+        if (fs.existsSync(filePath)) {
+            const raw = fs.readFileSync(filePath, "utf8");
+            const parsed = JSON.parse(raw);
+            if (parsed?.version === 1 &&
+                typeof parsed.deviceId === "string" &&
+                typeof parsed.publicKeyPem === "string" &&
+                typeof parsed.privateKeyPem === "string") {
+                const derivedId = fingerprintPublicKey(parsed.publicKeyPem);
+                if (derivedId && derivedId !== parsed.deviceId) {
+                    const updated = {
+                        ...parsed,
+                        deviceId: derivedId,
+                    };
+                    fs.writeFileSync(filePath, `${JSON.stringify(updated, null, 2)}\n`, { mode: 0o600 });
+                    try {
+                        fs.chmodSync(filePath, 0o600);
+                    }
+                    catch {
+                        // best-effort
+                    }
+                    return {
+                        deviceId: derivedId,
+                        publicKeyPem: parsed.publicKeyPem,
+                        privateKeyPem: parsed.privateKeyPem,
+                    };
+                }
+                return {
+                    deviceId: parsed.deviceId,
+                    publicKeyPem: parsed.publicKeyPem,
+                    privateKeyPem: parsed.privateKeyPem,
+                };
+            }
+        }
+    }
+    catch {
+        // fall through to regenerate
+    }
+    const identity = generateIdentity();
+    ensureDir(filePath);
+    const stored = {
+        version: 1,
+        deviceId: identity.deviceId,
+        publicKeyPem: identity.publicKeyPem,
+        privateKeyPem: identity.privateKeyPem,
+        createdAtMs: Date.now(),
+    };
+    fs.writeFileSync(filePath, `${JSON.stringify(stored, null, 2)}\n`, { mode: 0o600 });
+    try {
+        fs.chmodSync(filePath, 0o600);
+    }
+    catch {
+        // best-effort
+    }
+    return identity;
+}
+export function signDevicePayload(privateKeyPem, payload) {
+    const key = crypto.createPrivateKey(privateKeyPem);
+    const sig = crypto.sign(null, Buffer.from(payload, "utf8"), key);
+    return base64UrlEncode(sig);
+}
+export function normalizeDevicePublicKeyBase64Url(publicKey) {
+    try {
+        if (publicKey.includes("BEGIN")) {
+            return base64UrlEncode(derivePublicKeyRaw(publicKey));
+        }
+        const raw = base64UrlDecode(publicKey);
+        return base64UrlEncode(raw);
+    }
+    catch {
+        return null;
+    }
+}
+export function deriveDeviceIdFromPublicKey(publicKey) {
+    try {
+        const raw = publicKey.includes("BEGIN")
+            ? derivePublicKeyRaw(publicKey)
+            : base64UrlDecode(publicKey);
+        return crypto.createHash("sha256").update(raw).digest("hex");
+    }
+    catch {
+        return null;
+    }
+}
+export function publicKeyRawBase64UrlFromPem(publicKeyPem) {
+    return base64UrlEncode(derivePublicKeyRaw(publicKeyPem));
+}
+export function verifyDeviceSignature(publicKey, payload, signatureBase64Url) {
+    try {
+        const key = publicKey.includes("BEGIN")
+            ? crypto.createPublicKey(publicKey)
+            : crypto.createPublicKey({
+                key: Buffer.concat([ED25519_SPKI_PREFIX, base64UrlDecode(publicKey)]),
+                type: "spki",
+                format: "der",
+            });
+        const sig = (() => {
+            try {
+                return base64UrlDecode(signatureBase64Url);
+            }
+            catch {
+                return Buffer.from(signatureBase64Url, "base64");
+            }
+        })();
+        return crypto.verify(null, Buffer.from(payload, "utf8"), key, sig);
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=device-identity.js.map

package/dist/infra/device-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-identity.js","sourceRoot":"","sources":["../../src/infra/device-identity.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAgB7B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;AACrE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;AAE3D,SAAS,SAAS,CAAC,QAAgB;IACjC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,mBAAmB,GAAG,MAAM,CAAC,IAAI,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAC;AAE3E,SAAS,eAAe,CAAC,GAAW;IAClC,OAAO,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC9F,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACnE,MAAM,MAAM,GAAG,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1E,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,kBAAkB,CAAC,YAAoB;IAC9C,MAAM,GAAG,GAAG,MAAM,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAW,CAAC;IACnE,IACE,IAAI,CAAC,MAAM,KAAK,mBAAmB,CAAC,MAAM,GAAG,EAAE;QAC/C,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,EACxE,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,MAAM,CAAC,CAAC;IACnD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,oBAAoB,CAAC,YAAoB;IAChD,MAAM,GAAG,GAAG,kBAAkB,CAAC,YAAY,CAAC,CAAC;IAC7C,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC/D,CAAC;AAED,SAAS,gBAAgB;IACvB,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC;IACxE,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IAClF,MAAM,aAAa,GAAG,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACrF,MAAM,QAAQ,GAAG,oBAAoB,CAAC,YAAY,CAAC,CAAC;IACpD,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC;AACnD,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,WAAmB,YAAY;IACxE,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YAC9C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAmB,CAAC;YACjD,IACE,MAAM,EAAE,OAAO,KAAK,CAAC;gBACrB,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;gBACnC,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ;gBACvC,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,EACxC,CAAC;gBACD,MAAM,SAAS,GAAG,oBAAoB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;gBAC5D,IAAI,SAAS,IAAI,SAAS,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC;oBAC/C,MAAM,OAAO,GAAmB;wBAC9B,GAAG,MAAM;wBACT,QAAQ,EAAE,SAAS;qBACpB,CAAC;oBACF,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;oBACrF,IAAI,CAAC;wBACH,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;oBAChC,CAAC;oBAAC,MAAM,CAAC;wBACP,cAAc;oBAChB,CAAC;oBACD,OAAO;wBACL,QAAQ,EAAE,SAAS;wBACnB,YAAY,EAAE,MAAM,CAAC,YAAY;wBACjC,aAAa,EAAE,MAAM,CAAC,aAAa;qBACpC,CAAC;gBACJ,CAAC;gBACD,OAAO;oBACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;oBACzB,YAAY,EAAE,MAAM,CAAC,YAAY;oBACjC,aAAa,EAAE,MAAM,CAAC,aAAa;iBACpC,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,6BAA6B;IAC/B,CAAC;IAED,MAAM,QAAQ,GAAG,gBAAgB,EAAE,CAAC;IACpC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACpB,MAAM,MAAM,GAAmB;QAC7B,OAAO,EAAE,CAAC;QACV,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,YAAY,EAAE,QAAQ,CAAC,YAAY;QACnC,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;KACxB,CAAC;IACF,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpF,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,cAAc;IAChB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,aAAqB,EAAE,OAAe;IACtE,MAAM,GAAG,GAAG,MAAM,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC;IACjE,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,SAAiB;IACjE,IAAI,CAAC;QACH,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YAChC,OAAO,eAAe,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAC,CAAC;QACxD,CAAC;QACD,MAAM,GAAG,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;QACvC,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,SAAiB;IAC3D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC;YACrC,CAAC,CAAC,kBAAkB,CAAC,SAAS,CAAC;YAC/B,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAC/B,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,YAAoB;IAC/D,OAAO,eAAe,CAAC,kBAAkB,CAAC,YAAY,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,SAAiB,EACjB,OAAe,EACf,kBAA0B;IAE1B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC;YACrC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC;YACnC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC;gBACrB,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,mBAAmB,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC;gBACrE,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,KAAK;aACd,CAAC,CAAC;QACP,MAAM,GAAG,GAAG,CAAC,GAAG,EAAE;YAChB,IAAI,CAAC;gBACH,OAAO,eAAe,CAAC,kBAAkB,CAAC,CAAC;YAC7C,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;YACnD,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}