@ibgib/web-gib 0.0.59 → 0.0.61

package/src/ui/component/identity/remove-device/remove-device.html

@@ -11,8 +11,8 @@
         </div>
 
         <div class="input-group">
-            <label for="input-passphrase">Master Passphrase</label>
-            <input type="password" id="input-passphrase" placeholder="Enter your master passphrase..." class="secret-input">
+            <label for="input-password">Primary Password</label>
+            <input type="password" id="input-password" placeholder="Enter your master password..." class="secret-input">
         </div>
 
         <div class="action-row">
@@ -28,4 +28,4 @@
             <p class="warning">🔒 The selected device delegate has been unlinked from your primary identity.</p>
         </div>
     </div>
-</div>
+</div>

package/src/ui/component/identity/remove-device/remove-device.mts

@@ -58,7 +58,7 @@ interface RemoveDeviceElements extends ElementsBase {
     containerEl: HTMLDivElement;
     titleEl: HTMLHeadingElement;
     selectDelegateEl: HTMLSelectElement;
-    inputPassphrase: HTMLInputElement;
+    inputPassword: HTMLInputElement;
     btnRemoveDeviceEl: HTMLButtonElement;
     statusArea: HTMLDivElement;
     statusText: HTMLParagraphElement;
@@ -89,7 +89,7 @@ export class RemoveDeviceComponentInstance
         this.elements.containerEl = this.shadowRoot!.getElementById('container') as HTMLDivElement;
         this.elements.titleEl = this.shadowRoot!.getElementById('title') as HTMLHeadingElement;
         this.elements.selectDelegateEl = this.shadowRoot!.getElementById('select-delegate') as HTMLSelectElement;
-        this.elements.inputPassphrase = this.shadowRoot!.getElementById('input-passphrase') as HTMLInputElement;
+        this.elements.inputPassword = this.shadowRoot!.getElementById('input-password') as HTMLInputElement;
         this.elements.btnRemoveDeviceEl = this.shadowRoot!.getElementById('btn-remove-device') as HTMLButtonElement;
         this.elements.statusArea = this.shadowRoot!.getElementById('status-area') as HTMLDivElement;
         this.elements.statusText = this.shadowRoot!.getElementById('status-text') as HTMLParagraphElement;
@@ -108,8 +108,8 @@ export class RemoveDeviceComponentInstance
 
     private initHandlers() {
         this.elements!.btnRemoveDeviceEl.addEventListener('click', () => this.handleRemoveDevice());
-        this.elements!.inputPassphrase.addEventListener('input', () => {
-            this.elements!.inputPassphrase.classList.remove('invalid');
+        this.elements!.inputPassword.addEventListener('input', () => {
+            this.elements!.inputPassword.classList.remove('invalid');
         });
     }
 
@@ -187,11 +187,11 @@ export class RemoveDeviceComponentInstance
                 return;
             }
 
-            const masterSecret = this.elements!.inputPassphrase.value.trim();
-            this.elements!.inputPassphrase.value = masterSecret;
+            const masterSecret = this.elements!.inputPassword.value.trim();
+            this.elements!.inputPassword.value = masterSecret;
             if (!masterSecret) {
-                this.elements!.inputPassphrase.classList.add('invalid');
-                this.setStatus("Please enter your master passphrase.", "error");
+                this.elements!.inputPassword.classList.add('invalid');
+                this.setStatus("Please enter your master password.", "error");
                 return;
             }
 

package/src/ui/ui-constants.mts

@@ -107,6 +107,7 @@ export const EVENT_IBGIB_UI_MESSAGE = 'ibgib-ui-message';
 export const EVENT_IBGIB_IDENTITY_REQUEST_CHANGE = 'ibgib-identity-request-change';
 export const EVENT_IBGIB_IDENTITY_CHANGED = 'ibgib-identity-changed';
 export const EVENT_IBGIB_IDENTITY_UPDATE_AVAILABLE = 'ibgib-identity-update-available';
+export const EVENT_IBGIB_IDENTITY_RENEWAL_REQUIRED = 'ibgib-identity-renewal-required';
 // #endregion Custom Events
 
 

package/src/ui/ui-types.mts

@@ -17,3 +17,9 @@ export interface EventIbGibIdentityUpdateAvailableDetail {
     localN: number;
     serverLatestAddr: string;
 }
+
+export interface EventIbGibIdentityRenewalRequiredDetail {
+    activePrimaryAddr: string;
+    primaryTjpAddr: string;
+    reason: 'expired' | 'missing_secret';
+}

package/src/util/device-helper.mts

@@ -0,0 +1,104 @@
+/**
+ * @module util/device-helper
+ *
+ * Pure utility functions for generating clean, friendly, auto-generated device names/tags.
+ */
+
+export interface DeviceTagOptions {
+    userAgent?: string;
+    userAgentData?: {
+        mobile?: boolean;
+        platform?: string;
+        brands?: Array<{ brand: string; version: string }>;
+    };
+    maxTouchPoints?: number;
+    screenWidth?: number;
+    randomSuffix?: string;
+}
+
+/**
+ * Generates a friendly, URL-safe, kebab-cased default device tag.
+ * (e.g., `chrome-win-a1b2`, `mobile-safari-ios-3c4d`, `tablet-android-e5f6`).
+ *
+ * Pure function: Uses global browser objects (`navigator`, `window`) only as fallbacks
+ * when explicit options are omitted, enabling deterministic unit testing.
+ *
+ * @param opts Optional mock options for deterministic unit testing.
+ */
+export function generateDefaultDeviceTag(opts?: DeviceTagOptions): string {
+    const ua = (opts?.userAgent ?? (typeof navigator !== 'undefined' ? navigator.userAgent : '') ?? '').toLowerCase();
+    const uaData = opts?.userAgentData ?? (typeof navigator !== 'undefined' ? (navigator as any).userAgentData : undefined);
+    const touchPoints = opts?.maxTouchPoints ?? (typeof navigator !== 'undefined' ? navigator.maxTouchPoints : 0) ?? 0;
+    const width = opts?.screenWidth ?? (typeof window !== 'undefined' ? window.innerWidth : 1024) ?? 1024;
+
+    // 1. Detect Form Factor (Mobile, Tablet, Desktop)
+    let formFactor = '';
+    const isMobileUaData = uaData?.mobile;
+    const isMobileUa = /mobile|iphone|ipod|android.*mobile|windows phone/i.test(ua);
+    const isTabletUa = /ipad|tablet|(android(?!.*mobile))/i.test(ua) || (touchPoints > 1 && /macintosh/i.test(ua) && width <= 1366);
+
+    if (isTabletUa) {
+        formFactor = 'tablet';
+    } else if (isMobileUaData || isMobileUa) {
+        formFactor = 'mobile';
+    }
+
+    // 2. Detect OS / Platform
+    let platform = '';
+    const uaPlatform = (uaData?.platform || '').toLowerCase();
+
+    if (uaPlatform.includes('win') || ua.includes('windows')) {
+        platform = 'win';
+    } else if (uaPlatform.includes('ios') || ua.includes('iphone') || ua.includes('ipad') || ua.includes('ipod')) {
+        platform = 'ios';
+    } else if (uaPlatform.includes('mac') || ua.includes('macintosh') || ua.includes('mac os')) {
+        platform = 'mac';
+    } else if (uaPlatform.includes('android') || ua.includes('android')) {
+        platform = 'android';
+    } else if (uaPlatform.includes('linux') || ua.includes('linux')) {
+        platform = 'linux';
+    }
+
+    // 3. Detect Browser
+    let browser = '';
+    if (ua.includes('edg/') || ua.includes('edge/')) {
+        browser = 'edge';
+    } else if (ua.includes('chrome/') || ua.includes('crios/')) {
+        browser = 'chrome';
+    } else if (ua.includes('firefox/') || ua.includes('fxios/')) {
+        browser = 'firefox';
+    } else if (ua.includes('safari/') && !ua.includes('chrome/') && !ua.includes('crios/')) {
+        browser = 'safari';
+    }
+
+    // 4. Generate or use provided 4-character random suffix
+    let suffix = opts?.randomSuffix;
+    if (!suffix) {
+        const chars = '0123456789abcdef';
+        suffix = '';
+        for (let i = 0; i < 4; i++) {
+            suffix += chars.charAt(Math.floor(Math.random() * chars.length));
+        }
+    }
+    suffix = suffix.toLowerCase().replace(/[^a-z0-9]/g, '').slice(0, 8);
+
+    // 5. Assemble Tokens
+    const tokens: string[] = [];
+    if (formFactor) {
+        tokens.push(formFactor);
+    }
+    if (browser) {
+        tokens.push(browser);
+    }
+    if (platform) {
+        tokens.push(platform);
+    }
+
+    if (tokens.length === 0) {
+        tokens.push('device');
+    }
+
+    tokens.push(suffix);
+
+    return tokens.join('-');
+}

package/src/util/device-helper.respec.mts

@@ -0,0 +1,90 @@
+import {
+    respecfully, iReckon, ifWeMight, ifWe // DO NOT REMOVE ifWeMight or ifWe even if no longer used. We constantly change these when focusing tests
+} from '@ibgib/helper-gib/dist/respec-gib/respec-gib.mjs';
+const maam = `[${import.meta.url}]`, sir = maam;
+import { extractErrorMsg } from '@ibgib/helper-gib/dist/helpers/utils-helper.mjs';
+import { generateDefaultDeviceTag } from './device-helper.mjs';
+
+await respecfully(sir, 'device-helper', async () => {
+
+    await ifWe(sir, 'generate clean tag for Desktop Windows Chrome', async () => {
+        const lc = `[generate clean tag for Desktop Windows Chrome]`;
+        try {
+            const tag = generateDefaultDeviceTag({
+                userAgent: 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36',
+                userAgentData: { platform: 'Windows', mobile: false },
+                randomSuffix: 'a1b2'
+            });
+
+            iReckon(sir, tag).asTo('tag value').isGonnaBe('chrome-win-a1b2');
+        } catch (error) {
+            console.error(`${lc} ${extractErrorMsg(error)}`);
+            throw error;
+        }
+    });
+
+    await ifWe(sir, 'generate clean tag for Mobile iOS Safari (iPhone)', async () => {
+        const lc = `[generate clean tag for Mobile iOS Safari (iPhone)]`;
+        try {
+            const tag = generateDefaultDeviceTag({
+                userAgent: 'Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1',
+                userAgentData: { platform: 'iOS', mobile: true },
+                randomSuffix: '3c4d'
+            });
+
+            iReckon(sir, tag).asTo('tag value').isGonnaBe('mobile-safari-ios-3c4d');
+        } catch (error) {
+            console.error(`${lc} ${extractErrorMsg(error)}`);
+            throw error;
+        }
+    });
+
+    await ifWe(sir, 'generate clean tag for Android Chrome Phone', async () => {
+        const lc = `[generate clean tag for Android Chrome Phone]`;
+        try {
+            const tag = generateDefaultDeviceTag({
+                userAgent: 'Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.36',
+                userAgentData: { platform: 'Android', mobile: true },
+                randomSuffix: '9e8f'
+            });
+
+            iReckon(sir, tag).asTo('tag value').isGonnaBe('mobile-chrome-android-9e8f');
+        } catch (error) {
+            console.error(`${lc} ${extractErrorMsg(error)}`);
+            throw error;
+        }
+    });
+
+    await ifWe(sir, 'generate clean tag for iPad / Tablet', async () => {
+        const lc = `[generate clean tag for iPad / Tablet]`;
+        try {
+            const tag = generateDefaultDeviceTag({
+                userAgent: 'Mozilla/5.0 (iPad; CPU OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1',
+                maxTouchPoints: 5,
+                screenWidth: 1024,
+                randomSuffix: '7a8b'
+            });
+
+            iReckon(sir, tag).asTo('tag value').isGonnaBe('tablet-safari-ios-7a8b');
+        } catch (error) {
+            console.error(`${lc} ${extractErrorMsg(error)}`);
+            throw error;
+        }
+    });
+
+    await ifWe(sir, 'generate fallback tag with random 4-char suffix when no hints are present', async () => {
+        const lc = `[generate fallback tag with random 4-char suffix]`;
+        try {
+            const tag = generateDefaultDeviceTag({
+                userAgent: '',
+                randomSuffix: '1234'
+            });
+
+            iReckon(sir, tag).asTo('tag value').isGonnaBe('device-1234');
+        } catch (error) {
+            console.error(`${lc} ${extractErrorMsg(error)}`);
+            throw error;
+        }
+    });
+
+});

package/dist/identity/custodian-delegate-helper.d.mts

@@ -1,22 +0,0 @@
-/**
- * @module identity/custodian-delegate-helper
- *
- * Client-side helper functions for deriving and storing local cryptographic delegate secrets
- * for full-custodian / passwordless identities.
- */
-/**
- * Retrieves or generates a high-entropy local delegate secret for a passwordless custodian identity.
- * Stored locally in `localStorage` keyed by `primaryTjpAddr`.
- *
- * @param primaryTjpAddr The primary identity keystone TJP address (`ib^gib`).
- */
-export declare function deriveLocalCustodianDelegateSecret({ primaryTjpAddr, }: {
-    primaryTjpAddr: string;
-}): Promise<string>;
-/**
- * Removes the stored local delegate secret for a custodian identity.
- */
-export declare function clearLocalCustodianDelegateSecret({ primaryTjpAddr, }: {
-    primaryTjpAddr: string;
-}): void;
-//# sourceMappingURL=custodian-delegate-helper.d.mts.map

package/dist/identity/custodian-delegate-helper.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"custodian-delegate-helper.d.mts","sourceRoot":"","sources":["../../src/identity/custodian-delegate-helper.mts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAMH;;;;;GAKG;AACH,wBAAsB,kCAAkC,CAAC,EACrD,cAAc,GACjB,EAAE;IACC,cAAc,EAAE,MAAM,CAAC;CAC1B,GAAG,OAAO,CAAC,MAAM,CAAC,CA0BlB;AAED;;GAEG;AACH,wBAAgB,iCAAiC,CAAC,EAC9C,cAAc,GACjB,EAAE;IACC,cAAc,EAAE,MAAM,CAAC;CAC1B,GAAG,IAAI,CAIP"}

package/dist/identity/custodian-delegate-helper.mjs

@@ -1,50 +0,0 @@
-/**
- * @module identity/custodian-delegate-helper
- *
- * Client-side helper functions for deriving and storing local cryptographic delegate secrets
- * for full-custodian / passwordless identities.
- */
-import { getUUID, hash, HashAlgorithm, extractErrorMsg } from "@ibgib/helper-gib/dist/helpers/utils-helper.mjs";
-const LOCAL_STORAGE_PREFIX = 'ibgib_custodian_delegate_secret_';
-/**
- * Retrieves or generates a high-entropy local delegate secret for a passwordless custodian identity.
- * Stored locally in `localStorage` keyed by `primaryTjpAddr`.
- *
- * @param primaryTjpAddr The primary identity keystone TJP address (`ib^gib`).
- */
-export async function deriveLocalCustodianDelegateSecret({ primaryTjpAddr, }) {
-    const lc = `[${deriveLocalCustodianDelegateSecret.name}]`;
-    try {
-        if (!primaryTjpAddr) {
-            throw new Error('primaryTjpAddr is required to derive local custodian delegate secret (E: a1b2c3d4e5f67890123456789a000101)');
-        }
-        const key = `${LOCAL_STORAGE_PREFIX}${primaryTjpAddr}`;
-        const existingSecret = localStorage.getItem(key);
-        if (existingSecret) {
-            return existingSecret;
-        }
-        // Generate high-entropy 512-bit SHA hash secret from fresh UUIDs
-        const rawEntropy = `${await getUUID()}-${await getUUID()}-${await getUUID()}-${Date.now()}`;
-        const newSecret = await hash({
-            s: rawEntropy,
-            algorithm: HashAlgorithm.sha_512
-        });
-        localStorage.setItem(key, newSecret);
-        return newSecret;
-    }
-    catch (error) {
-        console.error(`${lc} ${extractErrorMsg(error)}`);
-        throw error;
-    }
-}
-/**
- * Removes the stored local delegate secret for a custodian identity.
- */
-export function clearLocalCustodianDelegateSecret({ primaryTjpAddr, }) {
-    if (!primaryTjpAddr) {
-        return;
-    }
-    const key = `${LOCAL_STORAGE_PREFIX}${primaryTjpAddr}`;
-    localStorage.removeItem(key);
-}
-//# sourceMappingURL=custodian-delegate-helper.mjs.map

package/dist/identity/custodian-delegate-helper.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"custodian-delegate-helper.mjs","sourceRoot":"","sources":["../../src/identity/custodian-delegate-helper.mts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,iDAAiD,CAAC;AAEhH,MAAM,oBAAoB,GAAG,kCAAkC,CAAC;AAEhE;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kCAAkC,CAAC,EACrD,cAAc,GAGjB;IACG,MAAM,EAAE,GAAG,IAAI,kCAAkC,CAAC,IAAI,GAAG,CAAC;IAC1D,IAAI,CAAC;QACD,IAAI,CAAC,cAAc,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,4GAA4G,CAAC,CAAC;QAClI,CAAC;QAED,MAAM,GAAG,GAAG,GAAG,oBAAoB,GAAG,cAAc,EAAE,CAAC;QACvD,MAAM,cAAc,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjD,IAAI,cAAc,EAAE,CAAC;YACjB,OAAO,cAAc,CAAC;QAC1B,CAAC;QAED,iEAAiE;QACjE,MAAM,UAAU,GAAG,GAAG,MAAM,OAAO,EAAE,IAAI,MAAM,OAAO,EAAE,IAAI,MAAM,OAAO,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC5F,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC;YACzB,CAAC,EAAE,UAAU;YACb,SAAS,EAAE,aAAa,CAAC,OAAO;SACnC,CAAC,CAAC;QAEH,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACrC,OAAO,SAAS,CAAC;IACrB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjD,MAAM,KAAK,CAAC;IAChB,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iCAAiC,CAAC,EAC9C,cAAc,GAGjB;IACG,IAAI,CAAC,cAAc,EAAE,CAAC;QAAC,OAAO;IAAC,CAAC;IAChC,MAAM,GAAG,GAAG,GAAG,oBAAoB,GAAG,cAAc,EAAE,CAAC;IACvD,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AACjC,CAAC"}

package/src/identity/custodian-delegate-helper.mts

@@ -1,61 +0,0 @@
-/**
- * @module identity/custodian-delegate-helper
- *
- * Client-side helper functions for deriving and storing local cryptographic delegate secrets
- * for full-custodian / passwordless identities.
- */
-
-import { getUUID, hash, HashAlgorithm, extractErrorMsg } from "@ibgib/helper-gib/dist/helpers/utils-helper.mjs";
-
-const LOCAL_STORAGE_PREFIX = 'ibgib_custodian_delegate_secret_';
-
-/**
- * Retrieves or generates a high-entropy local delegate secret for a passwordless custodian identity.
- * Stored locally in `localStorage` keyed by `primaryTjpAddr`.
- *
- * @param primaryTjpAddr The primary identity keystone TJP address (`ib^gib`).
- */
-export async function deriveLocalCustodianDelegateSecret({
-    primaryTjpAddr,
-}: {
-    primaryTjpAddr: string;
-}): Promise<string> {
-    const lc = `[${deriveLocalCustodianDelegateSecret.name}]`;
-    try {
-        if (!primaryTjpAddr) {
-            throw new Error('primaryTjpAddr is required to derive local custodian delegate secret (E: a1b2c3d4e5f67890123456789a000101)');
-        }
-
-        const key = `${LOCAL_STORAGE_PREFIX}${primaryTjpAddr}`;
-        const existingSecret = localStorage.getItem(key);
-        if (existingSecret) {
-            return existingSecret;
-        }
-
-        // Generate high-entropy 512-bit SHA hash secret from fresh UUIDs
-        const rawEntropy = `${await getUUID()}-${await getUUID()}-${await getUUID()}-${Date.now()}`;
-        const newSecret = await hash({
-            s: rawEntropy,
-            algorithm: HashAlgorithm.sha_512
-        });
-
-        localStorage.setItem(key, newSecret);
-        return newSecret;
-    } catch (error) {
-        console.error(`${lc} ${extractErrorMsg(error)}`);
-        throw error;
-    }
-}
-
-/**
- * Removes the stored local delegate secret for a custodian identity.
- */
-export function clearLocalCustodianDelegateSecret({
-    primaryTjpAddr,
-}: {
-    primaryTjpAddr: string;
-}): void {
-    if (!primaryTjpAddr) { return; }
-    const key = `${LOCAL_STORAGE_PREFIX}${primaryTjpAddr}`;
-    localStorage.removeItem(key);
-}