@forgezero/runtime 0.1.7 → 0.1.8

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. package/README.md +357 -118
  2. package/dist/custody-share.js +12 -0
  3. package/dist/phrase.d.ts +1 -1
  4. package/package.json +260 -261
package/dist/custody-share.js CHANGED
@@ -191,6 +191,15 @@ var fromBase642 = (value) => {
191
191
  bytes[index] = binary.charCodeAt(index);
192
192
  return bytes;
193
193
  };
194
+ var equalVerifier = (left, right) => {
195
+ if (left.length !== right.length)
196
+ return false;
197
+ let difference = 0;
198
+ for (let index = 0;index < left.length; index += 1) {
199
+ difference |= left.charCodeAt(index) ^ right.charCodeAt(index);
200
+ }
201
+ return difference === 0;
202
+ };
194
203
  function passkeyKey(custodianKey, prfOutput) {
195
204
  if (!(prfOutput instanceof Uint8Array) || prfOutput.length < MIN_PRF_BYTES) {
196
205
  throw new Error(`custody-share: PRF output must be at least ${MIN_PRF_BYTES} bytes`);
@@ -250,6 +259,9 @@ function openShareWithPhrase(sealed, custodianKey, phraseWords) {
250
259
  if (!validatePhrase(phraseWords))
251
260
  throw new Error("INVALID_PHRASE");
252
261
  const salt = fromBase642(sealed.phraseSalt);
262
+ const offered = phraseVerifier(phraseWords, salt);
263
+ if (!equalVerifier(offered, sealed.phraseVerifier))
264
+ throw new Error("PHRASE_MISMATCH");
253
265
  const key = phraseToKey(phraseWords, salt);
254
266
  try {
255
267
  return openWithKey(key, sealed.phraseEnvelope, shareAad(custodianKey, "phrase", sealed.shareIndex));
package/dist/phrase.d.ts CHANGED
@@ -3,7 +3,7 @@
3
3
  *
4
4
  * Every custodian gets a passkey AND a 24-word phrase. The passkey is the day
5
5
  * to day factor; the phrase is what still works when the laptop holding the
6
- * passkey is lost, wiped or dead. See share-envelopes.ts for how the two are
6
+ * passkey is lost, wiped or dead. See custody-share.ts for how the two are
7
7
  * combined (they are alternatives, not a chain).
8
8
  *
9
9
  * ── Why BIP-39, and why 24 words ─────────────────────────────────────────────
package/package.json CHANGED
@@ -1,265 +1,264 @@
1
1
  {
2
- "name": "@forgezero/runtime",
3
- "version": "0.1.7",
4
- "type": "module",
2
+ "name": "@forgezero/runtime",
3
+ "version": "0.1.8",
4
+ "type": "module",
5
5
  "publishConfig": {
6
6
  "access": "public",
7
- "provenance": true
8
- },
9
- "exports": {
10
- "./jobs": {
11
- "types": "./dist/jobs.d.ts",
12
- "default": "./dist/jobs.js"
13
- },
14
- "./queue": {
15
- "types": "./dist/queue.d.ts",
16
- "default": "./dist/queue.js"
17
- },
18
- "./outbox": {
19
- "types": "./dist/outbox.d.ts",
20
- "default": "./dist/outbox.js"
21
- },
22
- "./audit": {
23
- "types": "./dist/audit.d.ts",
24
- "default": "./dist/audit.js"
25
- },
26
- "./backup": {
27
- "types": "./dist/backup.d.ts",
28
- "default": "./dist/backup.js"
29
- },
30
- "./notify": {
31
- "types": "./dist/notify.d.ts",
32
- "default": "./dist/notify.js"
33
- },
34
- "./notify/templates": {
35
- "types": "./dist/notify-templates.d.ts",
36
- "default": "./dist/notify-templates.js"
37
- },
38
- "./schema": {
39
- "types": "./dist/schema.d.ts",
40
- "default": "./dist/schema.js"
41
- },
42
- "./schema/typebox": {
43
- "types": "./dist/schema-typebox.d.ts",
44
- "default": "./dist/schema-typebox.js"
45
- },
46
- "./query": {
47
- "types": "./dist/query.d.ts",
48
- "default": "./dist/query.js"
49
- },
50
- "./realtime": {
51
- "types": "./dist/realtime.d.ts",
52
- "default": "./dist/realtime.js"
53
- },
54
- "./calendar": {
55
- "types": "./dist/calendar.d.ts",
56
- "default": "./dist/calendar.js"
57
- },
58
- "./identity": {
59
- "types": "./dist/identity.d.ts",
60
- "default": "./dist/identity.js"
61
- },
62
- "./passkey-hybrid": {
63
- "types": "./dist/passkey-hybrid.d.ts",
64
- "default": "./dist/passkey-hybrid.js"
65
- },
66
- "./totp": {
67
- "types": "./dist/totp.d.ts",
68
- "default": "./dist/totp.js"
69
- },
70
- "./otpauth": {
71
- "types": "./dist/otpauth.d.ts",
72
- "default": "./dist/otpauth.js"
73
- },
74
- "./pipeline": {
75
- "types": "./dist/pipeline.d.ts",
76
- "default": "./dist/pipeline.js"
77
- },
78
- "./compliance": {
79
- "types": "./dist/compliance.d.ts",
80
- "default": "./dist/compliance.js"
81
- },
82
- "./finance/discounts": {
83
- "types": "./dist/finance/discounts.d.ts",
84
- "default": "./dist/finance/discounts.js"
85
- },
86
- "./finance/money": {
87
- "types": "./dist/finance/money.d.ts",
88
- "default": "./dist/finance/money.js"
89
- },
90
- "./finance/storage": {
91
- "types": "./dist/finance/storage.d.ts",
92
- "default": "./dist/finance/storage.js"
93
- },
94
- "./finance/custody": {
95
- "types": "./dist/finance/custody.d.ts",
96
- "default": "./dist/finance/custody.js"
97
- },
98
- "./finance/tax": {
99
- "types": "./dist/finance/tax.d.ts",
100
- "default": "./dist/finance/tax.js"
101
- },
102
- "./finance/derive": {
103
- "types": "./dist/finance/derive.d.ts",
104
- "default": "./dist/finance/derive.js"
105
- },
106
- "./finance/venues": {
107
- "types": "./dist/finance/venues.d.ts",
108
- "default": "./dist/finance/venues.js"
109
- },
110
- "./finance/ledger": {
111
- "types": "./dist/finance/ledger.d.ts",
112
- "default": "./dist/finance/ledger.js"
113
- },
114
- "./finance/rates": {
115
- "types": "./dist/finance/rates.d.ts",
116
- "default": "./dist/finance/rates.js"
117
- },
118
- "./finance/transfers": {
119
- "types": "./dist/finance/transfers.d.ts",
120
- "default": "./dist/finance/transfers.js"
121
- },
122
- "./finance/chain": {
123
- "types": "./dist/finance/chain.d.ts",
124
- "default": "./dist/finance/chain.js"
125
- },
126
- "./finance/chain-addresses": {
127
- "types": "./dist/finance/chain-addresses.d.ts",
128
- "default": "./dist/finance/chain-addresses.js"
129
- },
130
- "./finance/chain-deposits": {
131
- "types": "./dist/finance/chain-deposits.d.ts",
132
- "default": "./dist/finance/chain-deposits.js"
133
- },
134
- "./finance/chain-withdrawals": {
135
- "types": "./dist/finance/chain-withdrawals.d.ts",
136
- "default": "./dist/finance/chain-withdrawals.js"
137
- },
138
- "./finance/chain-reconcile": {
139
- "types": "./dist/finance/chain-reconcile.d.ts",
140
- "default": "./dist/finance/chain-reconcile.js"
141
- },
142
- "./finance/market": {
143
- "types": "./dist/finance/market.d.ts",
144
- "default": "./dist/finance/market.js"
145
- },
146
- "./finance/commission": {
147
- "types": "./dist/finance/commission.d.ts",
148
- "default": "./dist/finance/commission.js"
149
- },
150
- "./passkey": {
151
- "types": "./dist/passkey.d.ts",
152
- "default": "./dist/passkey.js"
153
- },
154
- "./custody-share": {
155
- "types": "./dist/custody-share.d.ts",
156
- "default": "./dist/custody-share.js"
157
- },
158
- "./custody-crypto": {
159
- "types": "./dist/custody-crypto.d.ts",
160
- "default": "./dist/custody-crypto.js"
161
- },
162
- "./phrase": {
163
- "types": "./dist/phrase.d.ts",
164
- "default": "./dist/phrase.js"
165
- },
166
- "./slip10": {
167
- "types": "./dist/slip10.d.ts",
168
- "default": "./dist/slip10.js"
169
- },
170
- "./ssh-cert": {
171
- "types": "./dist/ssh-cert.d.ts",
172
- "default": "./dist/ssh-cert.js"
173
- },
174
- "./openssh": {
175
- "types": "./dist/openssh.d.ts",
176
- "default": "./dist/openssh.js"
177
- },
178
- "./importers": {
179
- "types": "./dist/importers.d.ts",
180
- "default": "./dist/importers.js"
181
- },
182
- "./snp": {
183
- "types": "./dist/snp.d.ts",
184
- "default": "./dist/snp.js"
185
- }
186
- },
187
- "scripts": {
188
- "check": "tsc --noEmit",
189
- "prebuild": "rm -rf dist",
190
- "build": "bun build src/query.ts src/realtime.ts src/jobs.ts src/queue.ts src/outbox.ts src/audit.ts src/backup.ts src/notify.ts src/notify-templates.ts src/calendar.ts src/compliance.ts src/pipeline.ts src/totp.ts src/otpauth.ts src/identity.ts src/slip10.ts src/openssh.ts src/ssh-cert.ts src/importers.ts src/snp.ts src/passkey.ts src/passkey-hybrid.ts src/custody-crypto.ts src/custody-share.ts src/phrase.ts src/schema.ts src/schema-typebox.ts src/finance/discounts.ts src/finance/money.ts src/finance/storage.ts src/finance/custody.ts src/finance/tax.ts src/finance/derive.ts src/finance/venues.ts src/finance/ledger.ts src/finance/rates.ts src/finance/transfers.ts src/finance/chain.ts src/finance/chain-addresses.ts src/finance/chain-deposits.ts src/finance/chain-withdrawals.ts src/finance/chain-reconcile.ts src/finance/market.ts src/finance/commission.ts --root src --outdir dist --target browser --format esm --packages external && tsc --emitDeclarationOnly --declaration --noEmit false --outDir dist",
191
- "prepublishOnly": "bun run check && bun run build"
192
- },
193
- "dependencies": {
194
- "@forgezero/access": "^0.1.3"
195
- },
196
- "peerDependencies": {
197
- "@noble/ciphers": "^2.2.0",
198
- "@noble/curves": "^2.2.0",
199
- "@noble/post-quantum": "^0.6.1",
200
- "@noble/hashes": "^2.2.0",
201
- "@sinclair/typebox": "^0.34.0",
202
- "@scure/bip39": "^2.2.0"
203
- },
204
- "peerDependenciesMeta": {
205
- "@noble/ciphers": {
206
- "optional": true
207
- },
208
- "@noble/curves": {
209
- "optional": true
210
- },
211
- "@noble/post-quantum": {
212
- "optional": true
213
- },
214
- "@noble/hashes": {
215
- "optional": true
216
- },
217
- "@sinclair/typebox": {
218
- "optional": true
219
- },
220
- "@scure/bip39": {
221
- "optional": true
222
- }
223
- },
224
- "devDependencies": {
225
- "typescript": "^5.6.0",
226
- "@types/bun": "latest",
227
- "@sinclair/typebox": "^0.34.0",
228
- "@noble/curves": "^2.2.0",
229
- "@noble/post-quantum": "^0.6.1",
230
- "@scure/bip39": "^2.2.0"
231
- },
232
- "description": "The machinery a service needs behind its request handlers: jobs, keyed queues, a transactional outbox, a hash-chained audit trail, templated mail, encrypted backups and schema validation.",
233
- "keywords": [
234
- "jobs",
235
- "scheduler",
236
- "queue",
237
- "outbox",
238
- "audit",
239
- "hash-chain",
240
- "backup",
241
- "notifications",
242
- "json-schema",
243
- "validation",
244
- "calendar",
245
- "billing-period",
246
- "working-days"
247
- ],
248
- "license": "MIT",
249
- "homepage": "https://www.forgezero.net/docs/runtime",
250
- "repository": {
251
- "type": "git",
252
- "url": "git+https://github.com/forgezero-net/packages.git",
253
- "directory": "runtime"
254
- },
255
- "bugs": "https://github.com/forgezero-net/packages/issues",
256
- "sideEffects": false,
257
- "files": [
258
- "dist",
259
- "README.md",
260
- "LICENSE",
261
- "contracts/src",
262
- "contracts/test",
263
- "contracts/foundry.toml"
264
- ]
7
+ "provenance": false
8
+ },
9
+ "exports": {
10
+ "./jobs": {
11
+ "types": "./dist/jobs.d.ts",
12
+ "default": "./dist/jobs.js"
13
+ },
14
+ "./queue": {
15
+ "types": "./dist/queue.d.ts",
16
+ "default": "./dist/queue.js"
17
+ },
18
+ "./outbox": {
19
+ "types": "./dist/outbox.d.ts",
20
+ "default": "./dist/outbox.js"
21
+ },
22
+ "./audit": {
23
+ "types": "./dist/audit.d.ts",
24
+ "default": "./dist/audit.js"
25
+ },
26
+ "./backup": {
27
+ "types": "./dist/backup.d.ts",
28
+ "default": "./dist/backup.js"
29
+ },
30
+ "./notify": {
31
+ "types": "./dist/notify.d.ts",
32
+ "default": "./dist/notify.js"
33
+ },
34
+ "./notify/templates": {
35
+ "types": "./dist/notify-templates.d.ts",
36
+ "default": "./dist/notify-templates.js"
37
+ },
38
+ "./schema": {
39
+ "types": "./dist/schema.d.ts",
40
+ "default": "./dist/schema.js"
41
+ },
42
+ "./schema/typebox": {
43
+ "types": "./dist/schema-typebox.d.ts",
44
+ "default": "./dist/schema-typebox.js"
45
+ },
46
+ "./query": {
47
+ "types": "./dist/query.d.ts",
48
+ "default": "./dist/query.js"
49
+ },
50
+ "./realtime": {
51
+ "types": "./dist/realtime.d.ts",
52
+ "default": "./dist/realtime.js"
53
+ },
54
+ "./calendar": {
55
+ "types": "./dist/calendar.d.ts",
56
+ "default": "./dist/calendar.js"
57
+ },
58
+ "./identity": {
59
+ "types": "./dist/identity.d.ts",
60
+ "default": "./dist/identity.js"
61
+ },
62
+ "./passkey-hybrid": {
63
+ "types": "./dist/passkey-hybrid.d.ts",
64
+ "default": "./dist/passkey-hybrid.js"
65
+ },
66
+ "./totp": {
67
+ "types": "./dist/totp.d.ts",
68
+ "default": "./dist/totp.js"
69
+ },
70
+ "./otpauth": {
71
+ "types": "./dist/otpauth.d.ts",
72
+ "default": "./dist/otpauth.js"
73
+ },
74
+ "./pipeline": {
75
+ "types": "./dist/pipeline.d.ts",
76
+ "default": "./dist/pipeline.js"
77
+ },
78
+ "./compliance": {
79
+ "types": "./dist/compliance.d.ts",
80
+ "default": "./dist/compliance.js"
81
+ },
82
+ "./finance/discounts": {
83
+ "types": "./dist/finance/discounts.d.ts",
84
+ "default": "./dist/finance/discounts.js"
85
+ },
86
+ "./finance/money": {
87
+ "types": "./dist/finance/money.d.ts",
88
+ "default": "./dist/finance/money.js"
89
+ },
90
+ "./finance/storage": {
91
+ "types": "./dist/finance/storage.d.ts",
92
+ "default": "./dist/finance/storage.js"
93
+ },
94
+ "./finance/custody": {
95
+ "types": "./dist/finance/custody.d.ts",
96
+ "default": "./dist/finance/custody.js"
97
+ },
98
+ "./finance/tax": {
99
+ "types": "./dist/finance/tax.d.ts",
100
+ "default": "./dist/finance/tax.js"
101
+ },
102
+ "./finance/derive": {
103
+ "types": "./dist/finance/derive.d.ts",
104
+ "default": "./dist/finance/derive.js"
105
+ },
106
+ "./finance/venues": {
107
+ "types": "./dist/finance/venues.d.ts",
108
+ "default": "./dist/finance/venues.js"
109
+ },
110
+ "./finance/ledger": {
111
+ "types": "./dist/finance/ledger.d.ts",
112
+ "default": "./dist/finance/ledger.js"
113
+ },
114
+ "./finance/rates": {
115
+ "types": "./dist/finance/rates.d.ts",
116
+ "default": "./dist/finance/rates.js"
117
+ },
118
+ "./finance/transfers": {
119
+ "types": "./dist/finance/transfers.d.ts",
120
+ "default": "./dist/finance/transfers.js"
121
+ },
122
+ "./finance/chain": {
123
+ "types": "./dist/finance/chain.d.ts",
124
+ "default": "./dist/finance/chain.js"
125
+ },
126
+ "./finance/chain-addresses": {
127
+ "types": "./dist/finance/chain-addresses.d.ts",
128
+ "default": "./dist/finance/chain-addresses.js"
129
+ },
130
+ "./finance/chain-deposits": {
131
+ "types": "./dist/finance/chain-deposits.d.ts",
132
+ "default": "./dist/finance/chain-deposits.js"
133
+ },
134
+ "./finance/chain-withdrawals": {
135
+ "types": "./dist/finance/chain-withdrawals.d.ts",
136
+ "default": "./dist/finance/chain-withdrawals.js"
137
+ },
138
+ "./finance/chain-reconcile": {
139
+ "types": "./dist/finance/chain-reconcile.d.ts",
140
+ "default": "./dist/finance/chain-reconcile.js"
141
+ },
142
+ "./finance/market": {
143
+ "types": "./dist/finance/market.d.ts",
144
+ "default": "./dist/finance/market.js"
145
+ },
146
+ "./finance/commission": {
147
+ "types": "./dist/finance/commission.d.ts",
148
+ "default": "./dist/finance/commission.js"
149
+ },
150
+ "./passkey": {
151
+ "types": "./dist/passkey.d.ts",
152
+ "default": "./dist/passkey.js"
153
+ },
154
+ "./custody-share": {
155
+ "types": "./dist/custody-share.d.ts",
156
+ "default": "./dist/custody-share.js"
157
+ },
158
+ "./custody-crypto": {
159
+ "types": "./dist/custody-crypto.d.ts",
160
+ "default": "./dist/custody-crypto.js"
161
+ },
162
+ "./phrase": {
163
+ "types": "./dist/phrase.d.ts",
164
+ "default": "./dist/phrase.js"
165
+ },
166
+ "./slip10": {
167
+ "types": "./dist/slip10.d.ts",
168
+ "default": "./dist/slip10.js"
169
+ },
170
+ "./ssh-cert": {
171
+ "types": "./dist/ssh-cert.d.ts",
172
+ "default": "./dist/ssh-cert.js"
173
+ },
174
+ "./openssh": {
175
+ "types": "./dist/openssh.d.ts",
176
+ "default": "./dist/openssh.js"
177
+ },
178
+ "./importers": {
179
+ "types": "./dist/importers.d.ts",
180
+ "default": "./dist/importers.js"
181
+ },
182
+ "./snp": {
183
+ "types": "./dist/snp.d.ts",
184
+ "default": "./dist/snp.js"
185
+ }
186
+ },
187
+ "scripts": {
188
+ "check": "tsc --noEmit",
189
+ "build": "bun ../tools/package-task.ts build runtime",
190
+ "prepublishOnly": "bun ../tools/package-task.ts prepublish runtime"
191
+ },
192
+ "dependencies": {
193
+ "@forgezero/access": "^0.1.4"
194
+ },
195
+ "peerDependencies": {
196
+ "@noble/ciphers": "^2.2.0",
197
+ "@noble/curves": "^2.2.0",
198
+ "@noble/post-quantum": "^0.6.1",
199
+ "@noble/hashes": "^2.2.0",
200
+ "@sinclair/typebox": "^0.34.0",
201
+ "@scure/bip39": "^2.2.0"
202
+ },
203
+ "peerDependenciesMeta": {
204
+ "@noble/ciphers": {
205
+ "optional": true
206
+ },
207
+ "@noble/curves": {
208
+ "optional": true
209
+ },
210
+ "@noble/post-quantum": {
211
+ "optional": true
212
+ },
213
+ "@noble/hashes": {
214
+ "optional": true
215
+ },
216
+ "@sinclair/typebox": {
217
+ "optional": true
218
+ },
219
+ "@scure/bip39": {
220
+ "optional": true
221
+ }
222
+ },
223
+ "devDependencies": {
224
+ "typescript": "^5.6.0",
225
+ "@types/bun": "latest",
226
+ "@sinclair/typebox": "^0.34.0",
227
+ "@noble/curves": "^2.2.0",
228
+ "@noble/post-quantum": "^0.6.1",
229
+ "@scure/bip39": "^2.2.0"
230
+ },
231
+ "description": "The machinery a service needs behind its request handlers: jobs, keyed queues, a transactional outbox, a hash-chained audit trail, templated mail, encrypted backups and schema validation.",
232
+ "keywords": [
233
+ "jobs",
234
+ "scheduler",
235
+ "queue",
236
+ "outbox",
237
+ "audit",
238
+ "hash-chain",
239
+ "backup",
240
+ "notifications",
241
+ "json-schema",
242
+ "validation",
243
+ "calendar",
244
+ "billing-period",
245
+ "working-days"
246
+ ],
247
+ "license": "MIT",
248
+ "homepage": "https://www.forgezero.net/docs/runtime",
249
+ "repository": {
250
+ "type": "git",
251
+ "url": "git+https://github.com/forgezero-net/packages.git",
252
+ "directory": "runtime"
253
+ },
254
+ "bugs": "https://github.com/forgezero-net/packages/issues",
255
+ "sideEffects": false,
256
+ "files": [
257
+ "dist",
258
+ "README.md",
259
+ "LICENSE",
260
+ "contracts/src",
261
+ "contracts/test",
262
+ "contracts/foundry.toml"
263
+ ]
265
264
  }