@ibgib/web-gib 0.0.60 → 0.0.62

package/dist/identity/passkey-helper.mjs

@@ -0,0 +1,237 @@
+/**
+ * @module identity/passkey-helper
+ *
+ * WebAuthn Level 3 PRF (Pseudo-Random Function) Passkey helper service.
+ * Derives deterministic 256-bit symmetric secrets from hardware biometrics
+ * (Touch ID, Windows Hello, Android Biometrics, YubiKey 5Ci) and creates
+ * passkey device sync delegates.
+ */
+import { extractErrorMsg, getSaferSubstring } from '@ibgib/helper-gib/dist/helpers/utils-helper.mjs';
+import { deriveDelegateSecret, createSyncDelegateKeystone } from '@ibgib/core-gib/dist/keystone/delegate/delegate-helpers.mjs';
+import { generateDefaultDeviceTag, setDeviceDelegateSecret } from './device-delegate-helper.mjs';
+/**
+ * Checks if the browser and underlying platform authenticator support WebAuthn PRF.
+ */
+export async function isPasskeyPrfSupported() {
+    try {
+        if (typeof window === 'undefined' || !window.PublicKeyCredential) {
+            return false;
+        }
+        if (typeof window.PublicKeyCredential.getClientCapabilities === 'function') {
+            const caps = await window.PublicKeyCredential.getClientCapabilities();
+            if (caps && caps['prf']) {
+                return true;
+            }
+        }
+        // Fallback: check if PublicKeyCredential exists and platform authenticator is available
+        if (typeof PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable === 'function') {
+            const isPlatformAvailable = await PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable();
+            return isPlatformAvailable;
+        }
+        return false;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Helper to convert an ArrayBuffer to a lowercase hex string.
+ */
+export function bufferToHex(buffer) {
+    return Array.from(new Uint8Array(buffer))
+        .map(b => b.toString(16).padStart(2, '0'))
+        .join('');
+}
+/**
+ * Helper to convert a hex string to a Uint8Array.
+ */
+export function hexToUint8Array(hex) {
+    const cleanHex = hex.replace(/[^0-9a-fA-F]/g, '');
+    const bytes = new Uint8Array(Math.floor(cleanHex.length / 2));
+    for (let i = 0; i < bytes.length; i++) {
+        bytes[i] = parseInt(cleanHex.substr(i * 2, 2), 16);
+    }
+    return bytes;
+}
+/**
+ * Helper to normalize a salt string or buffer into a 32-byte Uint8Array for PRF evaluation.
+ */
+export function normalizeSaltTo32Bytes(salt) {
+    if (salt instanceof Uint8Array) {
+        if (salt.length === 32)
+            return salt;
+        const result = new Uint8Array(32);
+        result.set(salt.subarray(0, 32));
+        return result;
+    }
+    // If hex string of length 64 (32 bytes)
+    if (/^[0-9a-fA-F]{64}$/.test(salt)) {
+        return hexToUint8Array(salt);
+    }
+    // Text string: encode and pad/slice to 32 bytes
+    const encoded = new TextEncoder().encode(salt);
+    const result = new Uint8Array(32);
+    result.set(encoded.subarray(0, 32));
+    return result;
+}
+/**
+ * Creates and registers a new WebAuthn resident passkey credential with PRF enabled.
+ */
+/**
+ * Creates and registers a new WebAuthn resident passkey credential with PRF enabled.
+ */
+export async function registerPasskeyCredential({ username, displayName = username, rpName = 'ibgib', rpId, salt, }) {
+    const lc = `[registerPasskeyCredential]`;
+    try {
+        if (typeof window === 'undefined' || !navigator.credentials?.create) {
+            throw new Error('WebAuthn is not supported in this browser environment.');
+        }
+        const effectiveRpId = rpId || (typeof window !== 'undefined' ? window.location.hostname : undefined);
+        const challenge = crypto.getRandomValues(new Uint8Array(32));
+        const userId = new TextEncoder().encode(username.slice(0, 64));
+        const saltBuffer = salt ? normalizeSaltTo32Bytes(salt) : undefined;
+        const prfExtension = saltBuffer
+            ? { eval: { first: saltBuffer } }
+            : {};
+        const credential = await navigator.credentials.create({
+            publicKey: {
+                challenge,
+                rp: {
+                    name: rpName,
+                    ...(effectiveRpId ? { id: effectiveRpId } : {})
+                },
+                user: {
+                    id: userId,
+                    name: username,
+                    displayName
+                },
+                pubKeyCredParams: [
+                    { alg: -7, type: 'public-key' }, // ES256 (ECDSA P-256)
+                    { alg: -257, type: 'public-key' }, // RS256 (RSA)
+                    { alg: -8, type: 'public-key' }, // Ed25519
+                ],
+                authenticatorSelection: {
+                    residentKey: 'required',
+                    userVerification: 'required'
+                },
+                extensions: {
+                    prf: prfExtension
+                }
+            }
+        });
+        if (!credential) {
+            throw new Error('Passkey creation was cancelled or failed.');
+        }
+        const credentialId = bufferToHex(credential.rawId);
+        const response = credential.response;
+        const transports = (typeof response.getTransports === 'function')
+            ? response.getTransports()
+            : [];
+        const extResults = credential.getClientExtensionResults?.() || {};
+        console.log(`${lc} WebAuthn registration clientExtensionResults:`, extResults);
+        let passkeySecret;
+        if (extResults.prf?.results?.first) {
+            passkeySecret = bufferToHex(extResults.prf.results.first);
+            console.log(`${lc} Evaluated PRF directly during create!`);
+        }
+        return {
+            credentialId,
+            rawId: credential.rawId,
+            transports,
+            passkeySecret
+        };
+    }
+    catch (error) {
+        console.error(`${lc} ${extractErrorMsg(error)}`);
+        throw error;
+    }
+}
+/**
+ * Evaluates the PRF extension on a passkey assertion to derive a deterministic 256-bit symmetric secret.
+ */
+export async function evaluatePasskeyPrf({ salt, credentialId, transports, rpId, }) {
+    const lc = `[evaluatePasskeyPrf]`;
+    try {
+        if (typeof window === 'undefined' || !navigator.credentials?.get) {
+            throw new Error('WebAuthn is not supported in this browser environment.');
+        }
+        const effectiveRpId = rpId || (typeof window !== 'undefined' ? window.location.hostname : undefined);
+        const challenge = crypto.getRandomValues(new Uint8Array(32));
+        const saltBuffer = normalizeSaltTo32Bytes(salt);
+        let allowCredentials = undefined;
+        if (credentialId) {
+            const rawBytes = hexToUint8Array(credentialId);
+            allowCredentials = [{
+                    id: rawBytes.buffer,
+                    type: 'public-key',
+                    ...(transports && transports.length > 0 ? { transports } : {})
+                }];
+        }
+        const assertion = await navigator.credentials.get({
+            publicKey: {
+                challenge,
+                ...(effectiveRpId ? { rpId: effectiveRpId } : {}),
+                allowCredentials,
+                userVerification: 'required',
+                extensions: {
+                    prf: {
+                        eval: {
+                            first: saltBuffer
+                        }
+                    }
+                }
+            }
+        });
+        if (!assertion) {
+            throw new Error('Passkey authentication was cancelled or failed.');
+        }
+        const resolvedCredentialId = bufferToHex(assertion.rawId);
+        const extResults = assertion.getClientExtensionResults?.() || {};
+        console.log(`${lc} WebAuthn assertion clientExtensionResults:`, extResults);
+        const prfResult = extResults.prf?.results?.first;
+        if (!prfResult) {
+            console.error(`${lc} Extension results did not contain PRF evaluation:`, extResults);
+            throw new Error('Authenticator did not return a PRF evaluation. PRF extension may not be supported on this authenticator.');
+        }
+        const passkeySecret = bufferToHex(prfResult);
+        return {
+            passkeySecret,
+            credentialId: resolvedCredentialId
+        };
+    }
+    catch (error) {
+        console.error(`${lc} ${extractErrorMsg(error)}`);
+        throw error;
+    }
+}
+/**
+ * Creates a Passkey sovereign sync delegate for this device.
+ * Standardized format: `passkey-${safeUsername}-${defaultDeviceTag}`
+ */
+export async function createPasskeyDeviceSyncDelegate({ username, primaryTjpAddr, passkeySecret, transports, metaspace, space, }) {
+    const delegateSecret = await deriveDelegateSecret({ masterSecret: passkeySecret });
+    await setDeviceDelegateSecret({ primaryTjpAddr, delegateSecret });
+    const safeUser = getSaferSubstring({ text: username, length: 8, keepLiterals: ['-'] }) || 'user';
+    const defaultDeviceTag = generateDefaultDeviceTag();
+    const deviceTag = `passkey-${safeUser}-${defaultDeviceTag}`;
+    const sovereignSyncProfileName = process.env.KEYSTONE_PROFILE_SOVEREIGN_SYNC;
+    if (!sovereignSyncProfileName || !sovereignSyncProfileName.trim()) {
+        throw new Error('KEYSTONE_PROFILE_SOVEREIGN_SYNC environment variable is missing.');
+    }
+    const delegateKeystone = await createSyncDelegateKeystone({
+        profileName: sovereignSyncProfileName.trim(),
+        username,
+        deviceTag,
+        primaryTjpAddr,
+        delegateSecret,
+        additionalFrameDetails: {
+            client: 'space-gib-web',
+            role: 'passkey-sync',
+            ...(transports && transports.length > 0 ? { transports } : {})
+        },
+        metaspace,
+        space,
+    });
+    return { delegateKeystone, deviceTag, delegateSecret };
+}
+//# sourceMappingURL=passkey-helper.mjs.map

package/dist/identity/passkey-helper.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkey-helper.mjs","sourceRoot":"","sources":["../../src/identity/passkey-helper.mts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,iDAAiD,CAAC;AACrG,OAAO,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,MAAM,6DAA6D,CAAC;AAE/H,OAAO,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAEjG;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB;IACvC,IAAI,CAAC;QACD,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAC/D,OAAO,KAAK,CAAC;QACjB,CAAC;QACD,IAAI,OAAQ,MAAM,CAAC,mBAA2B,CAAC,qBAAqB,KAAK,UAAU,EAAE,CAAC;YAClF,MAAM,IAAI,GAAG,MAAO,MAAM,CAAC,mBAA2B,CAAC,qBAAqB,EAAE,CAAC;YAC/E,IAAI,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtB,OAAO,IAAI,CAAC;YAChB,CAAC;QACL,CAAC;QACD,wFAAwF;QACxF,IAAI,OAAO,mBAAmB,CAAC,6CAA6C,KAAK,UAAU,EAAE,CAAC;YAC1F,MAAM,mBAAmB,GAAG,MAAM,mBAAmB,CAAC,6CAA6C,EAAE,CAAC;YACtG,OAAO,mBAAmB,CAAC;QAC/B,CAAC;QACD,OAAO,KAAK,CAAC;IACjB,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,MAAqC;IAC7D,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAqB,CAAC,CAAC;SACnD,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SACzC,IAAI,CAAC,EAAE,CAAC,CAAC;AAClB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACvC,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IAC9D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,KAAK,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAyB;IAC5D,IAAI,IAAI,YAAY,UAAU,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC;QACpC,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACjC,OAAO,MAAM,CAAC;IAClB,CAAC;IACD,wCAAwC;IACxC,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IACD,gDAAgD;IAChD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;IAClC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACpC,OAAO,MAAM,CAAC;AAClB,CAAC;AAED;;GAEG;AACH;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,EAC5C,QAAQ,EACR,WAAW,GAAG,QAAQ,EACtB,MAAM,GAAG,OAAO,EAChB,IAAI,EACJ,IAAI,GAOP;IAMG,MAAM,EAAE,GAAG,6BAA6B,CAAC;IACzC,IAAI,CAAC;QACD,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;YAClE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC9E,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,IAAI,CAAC,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACrG,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAE/D,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACnE,MAAM,YAAY,GAAG,UAAU;YAC3B,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE;YACjC,CAAC,CAAC,EAAE,CAAC;QAET,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC;YAClD,SAAS,EAAE;gBACP,SAAS;gBACT,EAAE,EAAE;oBACA,IAAI,EAAE,MAAM;oBACZ,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAClD;gBACD,IAAI,EAAE;oBACF,EAAE,EAAE,MAAM;oBACV,IAAI,EAAE,QAAQ;oBACd,WAAW;iBACd;gBACD,gBAAgB,EAAE;oBACd,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAI,sBAAsB;oBACzD,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,cAAc;oBACjD,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAI,UAAU;iBAChD;gBACD,sBAAsB,EAAE;oBACpB,WAAW,EAAE,UAAU;oBACvB,gBAAgB,EAAE,UAAU;iBAC/B;gBACD,UAAU,EAAE;oBACR,GAAG,EAAE,YAAY;iBACb;aACX;SACJ,CAAwB,CAAC;QAE1B,IAAI,CAAC,UAAU,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;QACjE,CAAC;QAED,MAAM,YAAY,GAAG,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,QAAQ,GAAQ,UAAU,CAAC,QAAQ,CAAC;QAC1C,MAAM,UAAU,GAA6B,CAAC,OAAO,QAAQ,CAAC,aAAa,KAAK,UAAU,CAAC;YACvF,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE;YAC1B,CAAC,CAAC,EAAE,CAAC;QAET,MAAM,UAAU,GAAQ,UAAU,CAAC,yBAAyB,EAAE,EAAE,IAAI,EAAE,CAAC;QACvE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,gDAAgD,EAAE,UAAU,CAAC,CAAC;QAE/E,IAAI,aAAiC,CAAC;QACtC,IAAI,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YACjC,aAAa,GAAG,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAC1D,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,wCAAwC,CAAC,CAAC;QAC/D,CAAC;QAED,OAAO;YACH,YAAY;YACZ,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,UAAU;YACV,aAAa;SAChB,CAAC;IACN,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjD,MAAM,KAAK,CAAC;IAChB,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EACrC,IAAI,EACJ,YAAY,EACZ,UAAU,EACV,IAAI,GAMP;IAIG,MAAM,EAAE,GAAG,sBAAsB,CAAC;IAClC,IAAI,CAAC;QACD,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,GAAG,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC9E,CAAC;QAED,MAAM,aAAa,GAAG,IAAI,IAAI,CAAC,OAAO,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACrG,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7D,MAAM,UAAU,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAEhD,IAAI,gBAAgB,GAAgD,SAAS,CAAC;QAC9E,IAAI,YAAY,EAAE,CAAC;YACf,MAAM,QAAQ,GAAG,eAAe,CAAC,YAAY,CAAC,CAAC;YAC/C,gBAAgB,GAAG,CAAC;oBAChB,EAAE,EAAE,QAAQ,CAAC,MAAqB;oBAClC,IAAI,EAAE,YAAqB;oBAC3B,GAAG,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACjE,CAAC,CAAC;QACP,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC;YAC9C,SAAS,EAAE;gBACP,SAAS;gBACT,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjD,gBAAgB;gBAChB,gBAAgB,EAAE,UAAU;gBAC5B,UAAU,EAAE;oBACR,GAAG,EAAE;wBACD,IAAI,EAAE;4BACF,KAAK,EAAE,UAAU;yBACpB;qBACJ;iBACG;aACX;SACJ,CAAwB,CAAC;QAE1B,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACvE,CAAC;QAED,MAAM,oBAAoB,GAAG,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC1D,MAAM,UAAU,GAAQ,SAAS,CAAC,yBAAyB,EAAE,EAAE,IAAI,EAAE,CAAC;QACtE,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,6CAA6C,EAAE,UAAU,CAAC,CAAC;QAC5E,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC;QAEjD,IAAI,CAAC,SAAS,EAAE,CAAC;YACb,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,oDAAoD,EAAE,UAAU,CAAC,CAAC;YACrF,MAAM,IAAI,KAAK,CAAC,0GAA0G,CAAC,CAAC;QAChI,CAAC;QAED,MAAM,aAAa,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;QAE7C,OAAO;YACH,aAAa;YACb,YAAY,EAAE,oBAAoB;SACrC,CAAC;IACN,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjD,MAAM,KAAK,CAAC;IAChB,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,EAClD,QAAQ,EACR,cAAc,EACd,aAAa,EACb,UAAU,EACV,SAAS,EACT,KAAK,GAQR;IACG,MAAM,cAAc,GAAG,MAAM,oBAAoB,CAAC,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC,CAAC;IACnF,MAAM,uBAAuB,CAAC,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC,CAAC;IAElE,MAAM,QAAQ,GAAG,iBAAiB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC;IACjG,MAAM,gBAAgB,GAAG,wBAAwB,EAAE,CAAC;IACpD,MAAM,SAAS,GAAG,WAAW,QAAQ,IAAI,gBAAgB,EAAE,CAAC;IAC5D,MAAM,wBAAwB,GAAG,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC;IAC7E,IAAI,CAAC,wBAAwB,IAAI,CAAC,wBAAwB,CAAC,IAAI,EAAE,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACxF,CAAC;IAED,MAAM,gBAAgB,GAAG,MAAM,0BAA0B,CAAC;QACtD,WAAW,EAAE,wBAAwB,CAAC,IAAI,EAAS;QACnD,QAAQ;QACR,SAAS;QACT,cAAc;QACd,cAAc;QACd,sBAAsB,EAAE;YACpB,MAAM,EAAE,eAAe;YACvB,IAAI,EAAE,cAAc;YACpB,GAAG,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE;QACD,SAAS;QACT,KAAK;KACR,CAAC,CAAC;IAEH,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,cAAc,EAAE,CAAC;AAC3D,CAAC"}

package/dist/identity/passkey.respec.d.mts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=passkey.respec.d.mts.map

package/dist/identity/passkey.respec.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkey.respec.d.mts","sourceRoot":"","sources":["../../src/identity/passkey.respec.mts"],"names":[],"mappings":""}

package/dist/identity/passkey.respec.mjs

@@ -0,0 +1,169 @@
+import { respecfully, ifWe, iReckon } from '@ibgib/helper-gib/dist/respec-gib/respec-gib.mjs';
+import { getIbGibGlobalThis_IbGib } from '../helpers.mjs';
+import { bufferToHex, hexToUint8Array, normalizeSaltTo32Bytes, isPasskeyPrfSupported, createPasskeyDeviceSyncDelegate } from './passkey-helper.mjs';
+import { getDeviceDelegateSecret } from './device-delegate-helper.mjs';
+const sir = `[${import.meta.url}]`;
+// Initialize global db & store names for tests
+const globalThisIbGib = getIbGibGlobalThis_IbGib();
+globalThisIbGib.dbName_hack = 'space_gib_db';
+globalThisIbGib.storeName_hack = 'space_gib_store';
+// Mock storage substrate for Node test environment
+const inMemoryStore = new Map();
+if (typeof globalThis.indexedDB === 'undefined') {
+    globalThis.indexedDB = {
+        open: (dbName) => {
+            const req = {};
+            setTimeout(() => {
+                const db = {
+                    objectStoreNames: { contains: () => true },
+                    transaction: (storeName) => ({
+                        objectStore: (sName) => ({
+                            get: (key) => {
+                                const getReq = {};
+                                setTimeout(() => {
+                                    const val = inMemoryStore.get(key);
+                                    getReq.result = val !== undefined ? { value: val } : undefined;
+                                    if (getReq.onsuccess)
+                                        getReq.onsuccess({ target: getReq });
+                                }, 0);
+                                return getReq;
+                            },
+                            put: (datum) => {
+                                const putReq = {};
+                                setTimeout(() => {
+                                    inMemoryStore.set(datum.key, datum.value);
+                                    if (putReq.onsuccess)
+                                        putReq.onsuccess({ target: putReq });
+                                }, 0);
+                                return putReq;
+                            },
+                            delete: (key) => {
+                                const delReq = {};
+                                setTimeout(() => {
+                                    inMemoryStore.delete(key);
+                                    if (delReq.onsuccess)
+                                        delReq.onsuccess({ target: delReq });
+                                }, 0);
+                                return delReq;
+                            }
+                        })
+                    }),
+                    close: () => { }
+                };
+                req.result = db;
+                if (req.onsuccess)
+                    req.onsuccess({ target: req });
+            }, 0);
+            return req;
+        }
+    };
+}
+// Setup environment profile
+process.env.KEYSTONE_PROFILE_SOVEREIGN_SYNC = 'sync-profile.dev';
+class MockIbGibSpace {
+    name;
+    store = new Map();
+    ib = 'witness space mock-space mock_space_id user';
+    constructor(name = "mock_space") {
+        this.name = name;
+    }
+    async put({ ibGib }) {
+        const addr = `${ibGib.ib}^${ibGib.gib}`;
+        this.store.set(addr, JSON.parse(JSON.stringify(ibGib)));
+    }
+    async get({ addr }) {
+        const data = this.store.get(addr);
+        return data ? JSON.parse(JSON.stringify(data)) : null;
+    }
+    async argy({ argData, ibGibs }) {
+        return {
+            ib: 'arg^gib',
+            gib: 'arg_gib',
+            data: argData,
+            ibGibs,
+        };
+    }
+    async witness(arg) {
+        return { data: { success: true } };
+    }
+}
+class MockMetaspaceService {
+    space;
+    constructor(space) {
+        this.space = space;
+    }
+    async getLocalUserSpace({ lock } = {}) {
+        return this.space;
+    }
+    async put(args) {
+        const target = args.space || this.space;
+        return target.put(args);
+    }
+    async registerNewIbGib({ ibGib }) {
+        return this.put({ ibGib });
+    }
+    async get(args) {
+        const target = args.space || this.space;
+        if (args.addr) {
+            const x = await target.get({ addr: args.addr });
+            return { success: !!x, ibGibs: x ? [x] : [] };
+        }
+        return { success: true, ibGibs: [] };
+    }
+}
+const mockSpace = new MockIbGibSpace();
+const mockMetaspace = new MockMetaspaceService(mockSpace);
+await respecfully(sir, 'Passkey WebAuthn PRF Helper Service', async () => {
+    await ifWe(sir, 'bufferToHex and hexToUint8Array roundtrip correctly', async () => {
+        const originalBytes = new Uint8Array([0xde, 0xad, 0xbe, 0xef, 0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef]);
+        const hex = bufferToHex(originalBytes.buffer);
+        iReckon(sir, hex).willEqual('deadbeef0123456789abcdef');
+        const roundtripBytes = hexToUint8Array(hex);
+        iReckon(sir, roundtripBytes.length).willEqual(originalBytes.length);
+        for (let i = 0; i < originalBytes.length; i++) {
+            iReckon(sir, roundtripBytes[i]).willEqual(originalBytes[i]);
+        }
+    });
+    await ifWe(sir, 'normalizeSaltTo32Bytes normalizes various salt inputs to 32 bytes', async () => {
+        // 1. Hex string of 64 chars (32 bytes)
+        const hex64 = '0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef';
+        const normHex = normalizeSaltTo32Bytes(hex64);
+        iReckon(sir, normHex.length).willEqual(32);
+        iReckon(sir, bufferToHex(normHex.buffer)).willEqual(hex64);
+        // 2. Text string
+        const textSalt = 'ibgib_passkey_salt_domain_123';
+        const normText = normalizeSaltTo32Bytes(textSalt);
+        iReckon(sir, normText.length).willEqual(32);
+        // 3. Uint8Array
+        const rawBytes = new Uint8Array(32);
+        rawBytes.fill(0x42);
+        const normRaw = normalizeSaltTo32Bytes(rawBytes);
+        iReckon(sir, normRaw.length).willEqual(32);
+        iReckon(sir, normRaw[0]).willEqual(0x42);
+    });
+    await ifWe(sir, 'isPasskeyPrfSupported evaluates capabilities cleanly', async () => {
+        // In Node environment without window
+        const supported = await isPasskeyPrfSupported();
+        iReckon(sir, typeof supported).willEqual('boolean');
+    });
+    await ifWe(sir, 'createPasskeyDeviceSyncDelegate creates standard passkey sync delegate', async () => {
+        const username = 'alice';
+        const primaryTjpAddr = 'keystone^alice_primary_tjp.addr';
+        const passkeySecret = 'deadbeefdeadbeefdeadbeefdeadbeefdeadbeefdeadbeefdeadbeefdeadbeef';
+        const { delegateKeystone, deviceTag, delegateSecret } = await createPasskeyDeviceSyncDelegate({
+            username,
+            primaryTjpAddr,
+            passkeySecret,
+            transports: ['internal'],
+            metaspace: mockMetaspace,
+            space: mockSpace,
+        });
+        iReckon(sir, delegateKeystone).asTo('delegateKeystone is generated').isGonnaBeTruthy();
+        iReckon(sir, deviceTag.startsWith('passkey-alice-')).asTo('deviceTag follows passkey naming format').isGonnaBeTrue();
+        iReckon(sir, delegateSecret).asTo('delegateSecret is derived').isGonnaBeTruthy();
+        // Verify stored in IndexedDB
+        const storedSecret = await getDeviceDelegateSecret({ primaryTjpAddr });
+        iReckon(sir, storedSecret).willEqual(delegateSecret);
+    });
+});
+//# sourceMappingURL=passkey.respec.mjs.map

package/dist/identity/passkey.respec.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkey.respec.mjs","sourceRoot":"","sources":["../../src/identity/passkey.respec.mts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,IAAI,EAAa,OAAO,EAAE,MAAM,kDAAkD,CAAC;AACzG,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EACH,WAAW,EACX,eAAe,EACf,sBAAsB,EACtB,qBAAqB,EAGrB,+BAA+B,EAClC,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAEvE,MAAM,GAAG,GAAG,IAAI,OAAO,IAAI,CAAC,GAAG,GAAG,CAAC;AAEnC,+CAA+C;AAC/C,MAAM,eAAe,GAAG,wBAAwB,EAAE,CAAC;AACnD,eAAe,CAAC,WAAW,GAAG,cAAc,CAAC;AAC7C,eAAe,CAAC,cAAc,GAAG,iBAAiB,CAAC;AAEnD,mDAAmD;AACnD,MAAM,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;AAEhD,IAAI,OAAO,UAAU,CAAC,SAAS,KAAK,WAAW,EAAE,CAAC;IAC7C,UAAkB,CAAC,SAAS,GAAG;QAC5B,IAAI,EAAE,CAAC,MAAc,EAAE,EAAE;YACrB,MAAM,GAAG,GAAQ,EAAE,CAAC;YACpB,UAAU,CAAC,GAAG,EAAE;gBACZ,MAAM,EAAE,GAAG;oBACP,gBAAgB,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE;oBAC1C,WAAW,EAAE,CAAC,SAAiB,EAAE,EAAE,CAAC,CAAC;wBACjC,WAAW,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,CAAC;4BAC7B,GAAG,EAAE,CAAC,GAAW,EAAE,EAAE;gCACjB,MAAM,MAAM,GAAQ,EAAE,CAAC;gCACvB,UAAU,CAAC,GAAG,EAAE;oCACZ,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oCACnC,MAAM,CAAC,MAAM,GAAG,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;oCAC/D,IAAI,MAAM,CAAC,SAAS;wCAAE,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;gCAC/D,CAAC,EAAE,CAAC,CAAC,CAAC;gCACN,OAAO,MAAM,CAAC;4BAClB,CAAC;4BACD,GAAG,EAAE,CAAC,KAAU,EAAE,EAAE;gCAChB,MAAM,MAAM,GAAQ,EAAE,CAAC;gCACvB,UAAU,CAAC,GAAG,EAAE;oCACZ,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;oCAC1C,IAAI,MAAM,CAAC,SAAS;wCAAE,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;gCAC/D,CAAC,EAAE,CAAC,CAAC,CAAC;gCACN,OAAO,MAAM,CAAC;4BAClB,CAAC;4BACD,MAAM,EAAE,CAAC,GAAW,EAAE,EAAE;gCACpB,MAAM,MAAM,GAAQ,EAAE,CAAC;gCACvB,UAAU,CAAC,GAAG,EAAE;oCACZ,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;oCAC1B,IAAI,MAAM,CAAC,SAAS;wCAAE,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;gCAC/D,CAAC,EAAE,CAAC,CAAC,CAAC;gCACN,OAAO,MAAM,CAAC;4BAClB,CAAC;yBACJ,CAAC;qBACL,CAAC;oBACF,KAAK,EAAE,GAAG,EAAE,GAAE,CAAC;iBAClB,CAAC;gBACF,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC;gBAChB,IAAI,GAAG,CAAC,SAAS;oBAAE,GAAG,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACtD,CAAC,EAAE,CAAC,CAAC,CAAC;YACN,OAAO,GAAG,CAAC;QACf,CAAC;KACJ,CAAC;AACN,CAAC;AAED,4BAA4B;AAC5B,OAAO,CAAC,GAAG,CAAC,+BAA+B,GAAG,kBAAkB,CAAC;AAEjE,MAAM,cAAc;IAIG,IAAI;IAHvB,KAAK,GAAG,IAAI,GAAG,EAAe,CAAC;IAC/B,EAAE,GAAW,6CAA6C,CAAC;IAE3D,YAAmB,IAAI,GAAW,YAAY;oBAA3B,IAAI;IAA2B,CAAC;IAEnD,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,EAAkB;QAC/B,MAAM,IAAI,GAAG,GAAG,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,GAAG,EAAE,CAAC;QACxC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,EAAE,IAAI,EAAoB;QAChC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,EAAoC;QAC5D,OAAO;YACH,EAAE,EAAE,SAAS;YACb,GAAG,EAAE,SAAS;YACd,IAAI,EAAE,OAAO;YACb,MAAM;SACT,CAAC;IACN,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAQ;QAClB,OAAO,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC;IACvC,CAAC;CACJ;AAED,MAAM,oBAAoB;IACH,KAAK;IAAxB,YAAmB,KAAqB;qBAArB,KAAK;IAAoB,CAAC;IAE7C,KAAK,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,GAAuB,EAAE;QACrD,OAAO,IAAI,CAAC,KAAK,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAS;QACf,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC;QACxC,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,EAAE,KAAK,EAAkB;QAC5C,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,IAAsD;QAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC;QACxC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACZ,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAChD,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAClD,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACzC,CAAC;CACJ;AAED,MAAM,SAAS,GAAG,IAAI,cAAc,EAAE,CAAC;AACvC,MAAM,aAAa,GAAG,IAAI,oBAAoB,CAAC,SAAS,CAAC,CAAC;AAE1D,MAAM,WAAW,CAAC,GAAG,EAAE,qCAAqC,EAAE,KAAK,IAAI,EAAE;IAErE,MAAM,IAAI,CAAC,GAAG,EAAE,qDAAqD,EAAE,KAAK,IAAI,EAAE;QAC9E,MAAM,aAAa,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC/G,MAAM,GAAG,GAAG,WAAW,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;QAExD,MAAM,cAAc,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QAC5C,OAAO,CAAC,GAAG,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;QACpE,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5C,OAAO,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QAChE,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,CAAC,GAAG,EAAE,mEAAmE,EAAE,KAAK,IAAI,EAAE;QAC5F,uCAAuC;QACvC,MAAM,KAAK,GAAG,kEAAkE,CAAC;QACjF,MAAM,OAAO,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;QAC9C,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAE3D,iBAAiB;QACjB,MAAM,QAAQ,GAAG,+BAA+B,CAAC;QACjD,MAAM,QAAQ,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QAClD,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAE5C,gBAAgB;QAChB,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QACpC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,MAAM,OAAO,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;QACjD,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC3C,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,CAAC,GAAG,EAAE,sDAAsD,EAAE,KAAK,IAAI,EAAE;QAC/E,qCAAqC;QACrC,MAAM,SAAS,GAAG,MAAM,qBAAqB,EAAE,CAAC;QAChD,OAAO,CAAC,GAAG,EAAE,OAAO,SAAS,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,CAAC,GAAG,EAAE,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACjG,MAAM,QAAQ,GAAG,OAAO,CAAC;QACzB,MAAM,cAAc,GAAG,iCAAiC,CAAC;QACzD,MAAM,aAAa,GAAG,kEAAkE,CAAC;QAEzF,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,cAAc,EAAE,GAAG,MAAM,+BAA+B,CAAC;YAC1F,QAAQ;YACR,cAAc;YACd,aAAa;YACb,UAAU,EAAE,CAAC,UAAU,CAAC;YACxB,SAAS,EAAE,aAAoB;YAC/B,KAAK,EAAE,SAAgB;SAC1B,CAAC,CAAC;QAEH,OAAO,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,eAAe,EAAE,CAAC;QACvF,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC,aAAa,EAAE,CAAC;QACrH,OAAO,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,eAAe,EAAE,CAAC;QAEjF,6BAA6B;QAC7B,MAAM,YAAY,GAAG,MAAM,uBAAuB,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC;QACvE,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACP,CAAC,CAAC,CAAC"}

package/dist/index.d.mts

@@ -12,8 +12,9 @@ export * from "./helpers.web.mjs";
 export * from "./helpers.mjs";
 export * from "./api/ibgib-api-bridge.mjs";
 export * from "./identity/keystone-sync-service.mjs";
-export * from "./identity/custodian-delegate-helper.mjs";
+export * from "./identity/device-delegate-helper.mjs";
 export * from "./identity/sso-popup-helper.mjs";
+export * from "./identity/passkey-helper.mjs";
 export * from "./ui/component/identity/index.mjs";
 export * from "./ui/ui-constants.mjs";
 export * from "./ui/ui-types.mjs";

package/dist/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","sourceRoot":"","sources":["../src/index.mts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,+BAA+B,CAAC;AAC9C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wCAAwC,CAAC;AAEvD,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAG9B,cAAc,4BAA4B,CAAC;AAG3C,cAAc,sCAAsC,CAAC;AACrD,cAAc,0CAA0C,CAAC;AAEzD,cAAc,iCAAiC,CAAC;AAGhD,cAAc,mCAAmC,CAAC;AAGlD,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.mts","sourceRoot":"","sources":["../src/index.mts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,+BAA+B,CAAC;AAC9C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wCAAwC,CAAC;AAEvD,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAG9B,cAAc,4BAA4B,CAAC;AAG3C,cAAc,sCAAsC,CAAC;AACrD,cAAc,uCAAuC,CAAC;AACtD,cAAc,iCAAiC,CAAC;AAChD,cAAc,+BAA+B,CAAC;AAG9C,cAAc,mCAAmC,CAAC;AAGlD,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC"}

package/dist/index.mjs

@@ -14,9 +14,9 @@ export * from "./helpers.mjs";
 export * from "./api/ibgib-api-bridge.mjs";
 // Identity & Sync services
 export * from "./identity/keystone-sync-service.mjs";
-export * from "./identity/custodian-delegate-helper.mjs";
-// export * from "./identity/sso-callback-helper.mjs";
+export * from "./identity/device-delegate-helper.mjs";
 export * from "./identity/sso-popup-helper.mjs";
+export * from "./identity/passkey-helper.mjs";
 // Identity UI components
 export * from "./ui/component/identity/index.mjs";
 // UI constants & types

package/dist/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","sourceRoot":"","sources":["../src/index.mts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,+BAA+B,CAAC;AAC9C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wCAAwC,CAAC;AAEvD,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAE9B,kBAAkB;AAClB,cAAc,4BAA4B,CAAC;AAE3C,2BAA2B;AAC3B,cAAc,sCAAsC,CAAC;AACrD,cAAc,0CAA0C,CAAC;AACzD,sDAAsD;AACtD,cAAc,iCAAiC,CAAC;AAEhD,yBAAyB;AACzB,cAAc,mCAAmC,CAAC;AAElD,uBAAuB;AACvB,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC"}
+{"version":3,"file":"index.mjs","sourceRoot":"","sources":["../src/index.mts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,+BAA+B,CAAC;AAC9C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,wCAAwC,CAAC;AAEvD,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,mBAAmB,CAAC;AAClC,cAAc,eAAe,CAAC;AAE9B,kBAAkB;AAClB,cAAc,4BAA4B,CAAC;AAE3C,2BAA2B;AAC3B,cAAc,sCAAsC,CAAC;AACrD,cAAc,uCAAuC,CAAC;AACtD,cAAc,iCAAiC,CAAC;AAChD,cAAc,+BAA+B,CAAC;AAE9C,yBAAyB;AACzB,cAAc,mCAAmC,CAAC;AAElD,uBAAuB;AACvB,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC"}

package/dist/storage/storage-helpers.web.d.mts

@@ -105,4 +105,13 @@ export declare function storageReaddir({ dbName, storeName, dirPath, withFileTyp
     dirPath: string;
     withFileTypes?: boolean;
 }): Promise<string[] | Dirent[]>;
+/**
+ * Deletes a single key from indexeddb storage.
+ */
+export declare function storageDelete({ dbName, storeName, key, logalot, }: {
+    dbName: string;
+    storeName: string;
+    key: string;
+    logalot?: boolean;
+}): Promise<void>;
 //# sourceMappingURL=storage-helpers.web.d.mts.map

package/dist/storage/storage-helpers.web.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"storage-helpers.web.d.mts","sourceRoot":"","sources":["../../src/storage/storage-helpers.web.mts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAMH,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAKjD;;GAEG;AACH,MAAM,WAAW,qBAAqB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,KAAK,EAAE,MAAM,GAAG,UAAU,CAAC;CAC9B;AAID,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC,CAwB1D;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CAAC,EACpC,MAAM,EACN,SAAS,EACT,OAAO,EACP,OAAe,GAClB,EAAE;IACC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;CACrB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqGhB;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,EACnC,MAAM,EACN,OAAe,GAClB,EAAE;IACC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;CACrB,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAevC;AAGD;;GAEG;AACH,wBAAsB,4BAA4B,CAAC,EAC/C,MAAM,EACN,SAAS,EACT,OAAe,GAClB,EAAE;IACC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;CACrB,GAAG,OAAO,CAAC,IAAI,CAAC,CAmEhB;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAAC,EAC7B,MAAM,EACN,OAAO,EACP,SAAS,EACT,GAAG,EACH,KAAK,EACL,OAAe,GAClB,EAAE;IACC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,GAAG,UAAU,CAAC;IAC3B,OAAO,CAAC,EAAE,OAAO,CAAC;CACrB,GAAG,OAAO,CAAC,IAAI,CAAC,CAmDhB;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAAC,EAC7B,MAAM,EACN,OAAO,EACP,SAAS,EACT,GAAG,EACH,OAAe,GAClB,EAAE;IACC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,OAAO,CAAC;CACrB,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAmF9B;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,EAClC,MAAM,EACN,KAAK,GACR,EAAE;IACC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB,GAAG,OAAO,CAAC,OAAO,CAAC,CA6CnB;AAED;;GAEG;AACH,wBAAsB,WAAW,CAAC,EAC9B,MAAM,EACN,SAAS,EACT,QAAQ,GACX,EAAE;IACC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuFhB;AAED;;GAEG;AACH,wBAAsB,cAAc,CAAC,EACjC,MAAM,EACN,SAAS,EACT,OAAO,EACP,aAAqB,GACxB,EAAE;IACC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,OAAO,CAAC;CAC3B,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CA0F/B"}
+{"version":3,"file":"storage-helpers.web.d.mts","sourceRoot":"","sources":["../../src/storage/storage-helpers.web.mts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAMH,OAAO,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAKjD;;GAEG;AACH,MAAM,WAAW,qBAAqB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ;;OAEG;IACH,KAAK,EAAE,MAAM,GAAG,UAAU,CAAC;CAC9B;AAID,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,IAAI,CAAC,CAwB1D;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CAAC,EACpC,MAAM,EACN,SAAS,EACT,OAAO,EACP,OAAe,GAClB,EAAE;IACC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;CACrB,GAAG,OAAO,CAAC,IAAI,CAAC,CAqGhB;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,EACnC,MAAM,EACN,OAAe,GAClB,EAAE;IACC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;CACrB,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAevC;AAGD;;GAEG;AACH,wBAAsB,4BAA4B,CAAC,EAC/C,MAAM,EACN,SAAS,EACT,OAAe,GAClB,EAAE;IACC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;CACrB,GAAG,OAAO,CAAC,IAAI,CAAC,CAmEhB;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAAC,EAC7B,MAAM,EACN,OAAO,EACP,SAAS,EACT,GAAG,EACH,KAAK,EACL,OAAe,GAClB,EAAE;IACC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,GAAG,UAAU,CAAC;IAC3B,OAAO,CAAC,EAAE,OAAO,CAAC;CACrB,GAAG,OAAO,CAAC,IAAI,CAAC,CAmDhB;AAED;;;GAGG;AACH,wBAAsB,UAAU,CAAC,EAC7B,MAAM,EACN,OAAO,EACP,SAAS,EACT,GAAG,EACH,OAAe,GAClB,EAAE;IACC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,OAAO,CAAC;CACrB,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAmF9B;AAED;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,EAClC,MAAM,EACN,KAAK,GACR,EAAE;IACC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAClB,GAAG,OAAO,CAAC,OAAO,CAAC,CA6CnB;AAED;;GAEG;AACH,wBAAsB,WAAW,CAAC,EAC9B,MAAM,EACN,SAAS,EACT,QAAQ,GACX,EAAE;IACC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuFhB;AAED;;GAEG;AACH,wBAAsB,cAAc,CAAC,EACjC,MAAM,EACN,SAAS,EACT,OAAO,EACP,aAAqB,GACxB,EAAE;IACC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,OAAO,CAAC;CAC3B,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CA0F/B;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,EAChC,MAAM,EACN,SAAS,EACT,GAAG,EACH,OAAe,GAClB,EAAE;IACC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,OAAO,CAAC;CACrB,GAAG,OAAO,CAAC,IAAI,CAAC,CAgChB"}

package/dist/storage/storage-helpers.web.mjs

@@ -754,4 +754,46 @@ export async function storageReaddir({ dbName, storeName, dirPath, withFileTypes
         }
     }
 }
+/**
+ * Deletes a single key from indexeddb storage.
+ */
+export async function storageDelete({ dbName, storeName, key, logalot = false, }) {
+    const lc = `[${storageDelete.name}]`;
+    let db = undefined;
+    try {
+        if (logalot) {
+            console.log(`${lc} starting... (I: 8a7b6c5d4e3f2a1b0c9d8e7f6a5b4c3d)`);
+        }
+        await new Promise((resolve, reject) => {
+            const openDBRequest = indexedDB.open(dbName);
+            openDBRequest.onerror = () => {
+                reject(openDBRequest.error);
+            };
+            openDBRequest.onsuccess = () => {
+                db = openDBRequest.result;
+                const transaction = db.transaction(storeName, "readwrite");
+                const objectStore = transaction.objectStore(storeName);
+                const deleteRequest = objectStore.delete(key);
+                deleteRequest.onerror = () => {
+                    reject(deleteRequest.error);
+                };
+                deleteRequest.onsuccess = () => {
+                    resolve();
+                };
+            };
+        });
+    }
+    catch (error) {
+        console.error(`${lc} ${extractErrorMsg(error)}`);
+        throw error;
+    }
+    finally {
+        if (db) {
+            db.close();
+        }
+        if (logalot) {
+            console.log(`${lc} complete.`);
+        }
+    }
+}
 //# sourceMappingURL=storage-helpers.web.mjs.map