@interop/was-react 0.3.4 → 0.3.6
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/auth/verifyResponse.d.ts.map +1 -1
- package/dist/auth/verifyResponse.js +17 -4
- package/dist/auth/verifyResponse.js.map +1 -1
- package/dist/identity/agents.d.ts +19 -49
- package/dist/identity/agents.d.ts.map +1 -1
- package/dist/identity/agents.js +21 -79
- package/dist/identity/agents.js.map +1 -1
- package/package.json +3 -2
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"verifyResponse.d.ts","sourceRoot":"","sources":["../../src/auth/verifyResponse.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EACV,uBAAuB,EACvB,KAAK,EACN,MAAM,8BAA8B,CAAA;AACrC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAA;AACnE,OAAO,EAAe,KAAK,YAAY,EAAE,MAAM,cAAc,CAAA;AAc7D;;;;;;;;;;GAUG;AACH,wBAAsB,uBAAuB,CAAC,EAC5C,YAAY,EACZ,SAAS,EACT,MAAM,EACN,cAAc,EACf,EAAE;IACD,YAAY,EAAE,uBAAuB,CAAA;IACrC,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,cAAc,EAAE,cAAc,CAAA;CAC/B,GAAG,OAAO,CAAC,IAAI,CAAC,
|
|
1
|
+
{"version":3,"file":"verifyResponse.d.ts","sourceRoot":"","sources":["../../src/auth/verifyResponse.ts"],"names":[],"mappings":"AA4BA,OAAO,KAAK,EACV,uBAAuB,EACvB,KAAK,EACN,MAAM,8BAA8B,CAAA;AACrC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAA;AACnE,OAAO,EAAe,KAAK,YAAY,EAAE,MAAM,cAAc,CAAA;AAc7D;;;;;;;;;;GAUG;AACH,wBAAsB,uBAAuB,CAAC,EAC5C,YAAY,EACZ,SAAS,EACT,MAAM,EACN,cAAc,EACf,EAAE;IACD,YAAY,EAAE,uBAAuB,CAAA;IACrC,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,cAAc,EAAE,cAAc,CAAA;CAC/B,GAAG,OAAO,CAAC,IAAI,CAAC,CAqDhB;AAED;;GAEG;AACH,wBAAgB,QAAQ,CAAC,YAAY,EAAE,uBAAuB,GAAG,KAAK,EAAE,CAMvE;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,YAAY,CAAA;IACpB,MAAM,EAAE,KAAK,EAAE,CAAA;IACf;;OAEG;IACH,OAAO,EAAE,MAAM,CAAA;CAChB;AAUD;;;;;;;;;;;;GAYG;AACH,wBAAgB,WAAW,CAAC,EAC1B,MAAM,EACN,aAAa,EACb,WAAW,EACX,eAA4B,EAC7B,EAAE;IACD,MAAM,EAAE,KAAK,EAAE,CAAA;IACf,aAAa,EAAE,MAAM,CAAA;IACrB,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;CAC3B,GAAG,aAAa,CAyChB"}
|
|
@@ -51,10 +51,23 @@ export async function verifyLoginPresentation({ presentation, challenge, domain,
|
|
|
51
51
|
const failures = [
|
|
52
52
|
...result.presentationResults,
|
|
53
53
|
...result.credentialResults.flatMap(c => c.results)
|
|
54
|
-
]
|
|
55
|
-
.
|
|
56
|
-
|
|
57
|
-
|
|
54
|
+
].flatMap(check => check.outcome.status === 'failure'
|
|
55
|
+
? [{ check: check.check, problems: check.outcome.problems }]
|
|
56
|
+
: []);
|
|
57
|
+
// The thrown message surfaces in the login UI; the raw presentation and
|
|
58
|
+
// the per-check problem details are console-only diagnostics.
|
|
59
|
+
console.error('Wallet presentation failed verification. Presentation:', JSON.stringify(presentation, null, 2));
|
|
60
|
+
console.error('Failing checks:', JSON.stringify(failures, null, 2));
|
|
61
|
+
const summary = failures
|
|
62
|
+
.map(failure => {
|
|
63
|
+
const detail = failure.problems
|
|
64
|
+
.map(problem => problem.detail || problem.title)
|
|
65
|
+
.filter(Boolean)
|
|
66
|
+
.join('; ');
|
|
67
|
+
return detail ? `${failure.check}: ${detail}` : failure.check;
|
|
68
|
+
})
|
|
69
|
+
.join(', ');
|
|
70
|
+
throw new Error(`Wallet presentation failed verification (${summary || 'unknown check'}).`);
|
|
58
71
|
}
|
|
59
72
|
const rawProof = presentation.proof;
|
|
60
73
|
const proofs = Array.isArray(rawProof) ? rawProof : rawProof ? [rawProof] : [];
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"verifyResponse.js","sourceRoot":"","sources":["../../src/auth/verifyResponse.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAA;AAM3D,OAAO,EAAE,WAAW,EAAqB,MAAM,cAAc,CAAA;AAC7D,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAY9C;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,EAC5C,YAAY,EACZ,SAAS,EACT,MAAM,EACN,cAAc,EAMf;IACC,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC;QACtC,YAAY;QACZ,SAAS;QACT,UAAU,EAAE,EAAE;QACd,cAAc;KACf,CAAC,CAAA;IACF,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,QAAQ,GAAG;YACf,GAAG,MAAM,CAAC,mBAAmB;YAC7B,GAAG,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;SACpD
|
|
1
|
+
{"version":3,"file":"verifyResponse.js","sourceRoot":"","sources":["../../src/auth/verifyResponse.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAA;AAM3D,OAAO,EAAE,WAAW,EAAqB,MAAM,cAAc,CAAA;AAC7D,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAA;AACrE,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAY9C;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,EAC5C,YAAY,EACZ,SAAS,EACT,MAAM,EACN,cAAc,EAMf;IACC,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC;QACtC,YAAY;QACZ,SAAS;QACT,UAAU,EAAE,EAAE;QACd,cAAc;KACf,CAAC,CAAA;IACF,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,QAAQ,GAAG;YACf,GAAG,MAAM,CAAC,mBAAmB;YAC7B,GAAG,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;SACpD,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAChB,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS;YAChC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC5D,CAAC,CAAC,EAAE,CACP,CAAA;QACD,wEAAwE;QACxE,8DAA8D;QAC9D,OAAO,CAAC,KAAK,CACX,wDAAwD,EACxD,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CACtC,CAAA;QACD,OAAO,CAAC,KAAK,CAAC,iBAAiB,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;QACnE,MAAM,OAAO,GAAG,QAAQ;aACrB,GAAG,CAAC,OAAO,CAAC,EAAE;YACb,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ;iBAC5B,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC;iBAC/C,MAAM,CAAC,OAAO,CAAC;iBACf,IAAI,CAAC,IAAI,CAAC,CAAA;YACb,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAA;QAC/D,CAAC,CAAC;aACD,IAAI,CAAC,IAAI,CAAC,CAAA;QACb,MAAM,IAAI,KAAK,CACb,4CAA4C,OAAO,IAAI,eAAe,IAAI,CAC3E,CAAA;IACH,CAAC;IAED,MAAM,QAAQ,GAAI,YAAgD,CAAC,KAAK,CAAA;IACxE,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC9E,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAC3B,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,gBAAgB,CACjD,CAAA;IACD,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAA;IACzE,CAAC;IACD,IAAI,SAAS,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAA;IAClE,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CACb,+BAA+B,SAAS,CAAC,MAAM,IAAI,EAAE,qBAAqB,MAAM,IAAI,CACrF,CAAA;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,QAAQ,CAAC,YAAqC;IAC5D,MAAM,IAAI,GAAI,YAAmC,CAAC,IAAI,CAAA;IACtD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,CAAA;IACX,CAAC;IACD,OAAO,IAAe,CAAA;AACxB,CAAC;AAcD;;GAEG;AACH,SAAS,SAAS,CAAC,IAAW;IAC5B,MAAM,OAAO,GAAI,IAA8C,CAAC,aAAa,CAAA;IAC7E,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AACpE,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,WAAW,CAAC,EAC1B,MAAM,EACN,aAAa,EACb,WAAW,EACX,eAAe,GAAG,UAAU,EAM7B;IACC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;IAC3D,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,UAAU,GAAI,KAAkC,CAAC,UAAU,CAAA;QACjE,IAAI,UAAU,KAAK,aAAa,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CACb,6BAA6B,MAAM,CAAC,UAAU,CAAC,wBAAwB,CACxE,CAAA;QACH,CAAC;QACD,MAAM,OAAO,GAAI,KAA+B,CAAC,OAAO,CAAA;QACxD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;YACtD,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAA;QACxE,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,wEAAwE;IACxE,yEAAyE;IACzE,MAAM,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC,CAAA;IAElC,KAAK,MAAM,EAAE,IAAI,WAAW,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,MAAM,CAAC,cAAc,CAAC,EAAE,CAAC,CAAA;QACvC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CAAC,wBAAwB,EAAE,eAAe,CAAC,CAAA;QAC5D,CAAC;QACD,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAA;QAChC,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAA;QAC3E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,QAAQ,EAAE,mCAAmC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACnE,CAAA;QACH,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAA;IACtC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;IACzD,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;AACpC,CAAC"}
|
|
@@ -2,30 +2,28 @@
|
|
|
2
2
|
* Copyright (c) 2026 Interop Alliance. All rights reserved.
|
|
3
3
|
*/
|
|
4
4
|
/**
|
|
5
|
-
* WAS identity
|
|
5
|
+
* WAS master-identity derivation from a 32-byte master seed.
|
|
6
6
|
*
|
|
7
7
|
* SEED-DERIVATION CONVENTION (pinned, part of the shared-key contract): the
|
|
8
8
|
* pinned `@interop/webkms-client` exposes `CapabilityAgent.fromSeed({ seed })`,
|
|
9
|
-
* which takes the raw 32 bytes AS-IS (no hashing). We use it for
|
|
10
|
-
* identity
|
|
11
|
-
*
|
|
12
|
-
* a byte array vs its text form.
|
|
9
|
+
* which takes the raw 32 bytes AS-IS (no hashing). We use it for the master
|
|
10
|
+
* identity, feeding raw bytes -- never `fromSecret`, which salt-hashes a STRING
|
|
11
|
+
* and would derive a different key for a byte array vs its text form.
|
|
13
12
|
*
|
|
14
13
|
* WHAT SELECTS THE KEY (verified against `CapabilityAgent.fromSeed`): the key
|
|
15
14
|
* material is derived from the `seed` bytes (the HMAC key) and the `keyName`
|
|
16
15
|
* string (the HMAC message) alone. The `handle` is stored on the returned agent
|
|
17
16
|
* as a cosmetic identifier and does NOT enter key derivation -- nor the derived
|
|
18
17
|
* did:key id, which is the fingerprint of the seed+keyName key pair. So the
|
|
19
|
-
* PINNED derivation inputs are the seed bytes and the `keyName`
|
|
20
|
-
* (`IDENTITY_KEY_NAME`
|
|
21
|
-
*
|
|
22
|
-
*
|
|
23
|
-
*
|
|
18
|
+
* PINNED derivation inputs are the seed bytes and the `keyName` value
|
|
19
|
+
* (`IDENTITY_KEY_NAME` below); changing THAT after first use is a data-migration
|
|
20
|
+
* event. The `identityHandle` parameter is safe to change and exists only so an
|
|
21
|
+
* app can supply a label for cosmetic continuity; it does not affect the
|
|
22
|
+
* identity, keys, or any stored data.
|
|
24
23
|
*
|
|
25
|
-
*
|
|
26
|
-
*
|
|
27
|
-
*
|
|
28
|
-
* or sibling collections -- the future multi-app sharing unit.
|
|
24
|
+
* The per-collection key-agreement (KAK) derivation now lives in
|
|
25
|
+
* `@interop/wallet-core/identity` (`deriveCollectionKeys`, along with its pinned
|
|
26
|
+
* HKDF derivation inputs) and is re-exported here for compatibility.
|
|
29
27
|
*
|
|
30
28
|
* Not test-node-safe on React Native, but fine under Node/Vitest: the crypto
|
|
31
29
|
* stack (`webkms-client`, `x25519-key-agreement-key`) runs on the standard Web
|
|
@@ -33,17 +31,18 @@
|
|
|
33
31
|
*/
|
|
34
32
|
import { CapabilityAgent } from '@interop/webkms-client';
|
|
35
33
|
import { ZcapClient } from '@interop/ezcap';
|
|
36
|
-
|
|
34
|
+
/**
|
|
35
|
+
* The per-collection vault-key (KAK) derivation, its result type, and its
|
|
36
|
+
* default cosmetic handle now live in `@interop/wallet-core/identity` (moved
|
|
37
|
+
* there verbatim, with their pinned `kak:v1:<collectionId>` HKDF derivation
|
|
38
|
+
* inputs); re-exported here so existing imports keep working.
|
|
39
|
+
*/
|
|
40
|
+
export { deriveCollectionKeys, DEFAULT_KAK_HANDLE, type CollectionKeys } from '@interop/wallet-core/identity';
|
|
37
41
|
/**
|
|
38
42
|
* Default cosmetic label for the master identity agent. Local naming only (does
|
|
39
43
|
* not affect key material or the derived did:key); safe to override.
|
|
40
44
|
*/
|
|
41
45
|
export declare const DEFAULT_IDENTITY_HANDLE = "was-react";
|
|
42
|
-
/**
|
|
43
|
-
* Default cosmetic label for a per-collection key-agreement agent. Local naming
|
|
44
|
-
* only (does not affect key material); safe to override.
|
|
45
|
-
*/
|
|
46
|
-
export declare const DEFAULT_KAK_HANDLE = "was-react-kak";
|
|
47
46
|
/**
|
|
48
47
|
* The agents derived from the master seed: the app's stable did:key controller,
|
|
49
48
|
* its signing agent, and a ZcapClient for signing storage requests later.
|
|
@@ -53,16 +52,6 @@ export interface IdentityAgents {
|
|
|
53
52
|
keyAgent: CapabilityAgent;
|
|
54
53
|
zcapClient: ZcapClient;
|
|
55
54
|
}
|
|
56
|
-
/**
|
|
57
|
-
* Derives one collection's X25519 key agreement key (KAK) plus its resolver, the
|
|
58
|
-
* material the doc-cipher needs. The concrete KAK type carries `type` /
|
|
59
|
-
* `publicKeyMultibase`; it is widened to `IKeyAgreementKey` only at the
|
|
60
|
-
* boundary.
|
|
61
|
-
*/
|
|
62
|
-
export interface CollectionKeys {
|
|
63
|
-
keyAgreementKey: IKeyAgreementKey;
|
|
64
|
-
keyResolver: IKeyResolver;
|
|
65
|
-
}
|
|
66
55
|
/**
|
|
67
56
|
* Derives the master identity agents from the master seed. The did:key
|
|
68
57
|
* controller is stable across devices for the same seed.
|
|
@@ -77,23 +66,4 @@ export declare function deriveIdentity({ seed, identityHandle }: {
|
|
|
77
66
|
seed: Uint8Array;
|
|
78
67
|
identityHandle?: string;
|
|
79
68
|
}): Promise<IdentityAgents>;
|
|
80
|
-
/**
|
|
81
|
-
* Derives one collection's vault key material from the master seed:
|
|
82
|
-
* `HKDF(master, 'kak:v1:<collectionId>')` to a per-collection seed, then the
|
|
83
|
-
* Ed25519-to-X25519 (Montgomery-form) key-agreement key. Deterministic, so the
|
|
84
|
-
* same seed decrypts the same envelopes on any device. Encryption uses these
|
|
85
|
-
* per-collection KAKs from day one -- never share one KAK across collections.
|
|
86
|
-
*
|
|
87
|
-
* @param options {object}
|
|
88
|
-
* @param options.seed {Uint8Array} the 32-byte master seed
|
|
89
|
-
* @param options.collectionId {string} the WAS collection id (the HKDF label)
|
|
90
|
-
* @param [options.kakHandle] {string} cosmetic agent label; does not affect
|
|
91
|
-
* keys (defaults to `DEFAULT_KAK_HANDLE`)
|
|
92
|
-
* @returns {Promise<CollectionKeys>}
|
|
93
|
-
*/
|
|
94
|
-
export declare function deriveCollectionKeys({ seed, collectionId, kakHandle }: {
|
|
95
|
-
seed: Uint8Array;
|
|
96
|
-
collectionId: string;
|
|
97
|
-
kakHandle?: string;
|
|
98
|
-
}): Promise<CollectionKeys>;
|
|
99
69
|
//# sourceMappingURL=agents.d.ts.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../src/identity/agents.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH
|
|
1
|
+
{"version":3,"file":"agents.d.ts","sourceRoot":"","sources":["../../src/identity/agents.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAExD,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAE3C;;;;;GAKG;AACH,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,KAAK,cAAc,EACpB,MAAM,+BAA+B,CAAA;AAEtC;;;GAGG;AACH,eAAO,MAAM,uBAAuB,cAAc,CAAA;AAMlD;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,aAAa,EAAE,MAAM,CAAA;IACrB,QAAQ,EAAE,eAAe,CAAA;IACzB,UAAU,EAAE,UAAU,CAAA;CACvB;AAED;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAAC,EACnC,IAAI,EACJ,cAAwC,EACzC,EAAE;IACD,IAAI,EAAE,UAAU,CAAA;IAChB,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB,GAAG,OAAO,CAAC,cAAc,CAAC,CAa1B"}
|
package/dist/identity/agents.js
CHANGED
|
@@ -2,30 +2,28 @@
|
|
|
2
2
|
* Copyright (c) 2026 Interop Alliance. All rights reserved.
|
|
3
3
|
*/
|
|
4
4
|
/**
|
|
5
|
-
* WAS identity
|
|
5
|
+
* WAS master-identity derivation from a 32-byte master seed.
|
|
6
6
|
*
|
|
7
7
|
* SEED-DERIVATION CONVENTION (pinned, part of the shared-key contract): the
|
|
8
8
|
* pinned `@interop/webkms-client` exposes `CapabilityAgent.fromSeed({ seed })`,
|
|
9
|
-
* which takes the raw 32 bytes AS-IS (no hashing). We use it for
|
|
10
|
-
* identity
|
|
11
|
-
*
|
|
12
|
-
* a byte array vs its text form.
|
|
9
|
+
* which takes the raw 32 bytes AS-IS (no hashing). We use it for the master
|
|
10
|
+
* identity, feeding raw bytes -- never `fromSecret`, which salt-hashes a STRING
|
|
11
|
+
* and would derive a different key for a byte array vs its text form.
|
|
13
12
|
*
|
|
14
13
|
* WHAT SELECTS THE KEY (verified against `CapabilityAgent.fromSeed`): the key
|
|
15
14
|
* material is derived from the `seed` bytes (the HMAC key) and the `keyName`
|
|
16
15
|
* string (the HMAC message) alone. The `handle` is stored on the returned agent
|
|
17
16
|
* as a cosmetic identifier and does NOT enter key derivation -- nor the derived
|
|
18
17
|
* did:key id, which is the fingerprint of the seed+keyName key pair. So the
|
|
19
|
-
* PINNED derivation inputs are the seed bytes and the `keyName`
|
|
20
|
-
* (`IDENTITY_KEY_NAME`
|
|
21
|
-
*
|
|
22
|
-
*
|
|
23
|
-
*
|
|
18
|
+
* PINNED derivation inputs are the seed bytes and the `keyName` value
|
|
19
|
+
* (`IDENTITY_KEY_NAME` below); changing THAT after first use is a data-migration
|
|
20
|
+
* event. The `identityHandle` parameter is safe to change and exists only so an
|
|
21
|
+
* app can supply a label for cosmetic continuity; it does not affect the
|
|
22
|
+
* identity, keys, or any stored data.
|
|
24
23
|
*
|
|
25
|
-
*
|
|
26
|
-
*
|
|
27
|
-
*
|
|
28
|
-
* or sibling collections -- the future multi-app sharing unit.
|
|
24
|
+
* The per-collection key-agreement (KAK) derivation now lives in
|
|
25
|
+
* `@interop/wallet-core/identity` (`deriveCollectionKeys`, along with its pinned
|
|
26
|
+
* HKDF derivation inputs) and is re-exported here for compatibility.
|
|
29
27
|
*
|
|
30
28
|
* Not test-node-safe on React Native, but fine under Node/Vitest: the crypto
|
|
31
29
|
* stack (`webkms-client`, `x25519-key-agreement-key`) runs on the standard Web
|
|
@@ -34,38 +32,21 @@
|
|
|
34
32
|
import { CapabilityAgent } from '@interop/webkms-client';
|
|
35
33
|
import { Ed25519Signature2020 } from '@interop/ed25519-signature';
|
|
36
34
|
import { ZcapClient } from '@interop/ezcap';
|
|
37
|
-
|
|
35
|
+
/**
|
|
36
|
+
* The per-collection vault-key (KAK) derivation, its result type, and its
|
|
37
|
+
* default cosmetic handle now live in `@interop/wallet-core/identity` (moved
|
|
38
|
+
* there verbatim, with their pinned `kak:v1:<collectionId>` HKDF derivation
|
|
39
|
+
* inputs); re-exported here so existing imports keep working.
|
|
40
|
+
*/
|
|
41
|
+
export { deriveCollectionKeys, DEFAULT_KAK_HANDLE } from '@interop/wallet-core/identity';
|
|
38
42
|
/**
|
|
39
43
|
* Default cosmetic label for the master identity agent. Local naming only (does
|
|
40
44
|
* not affect key material or the derived did:key); safe to override.
|
|
41
45
|
*/
|
|
42
46
|
export const DEFAULT_IDENTITY_HANDLE = 'was-react';
|
|
43
|
-
|
|
44
|
-
|
|
45
|
-
* only (does not affect key material); safe to override.
|
|
46
|
-
*/
|
|
47
|
-
export const DEFAULT_KAK_HANDLE = 'was-react-kak';
|
|
48
|
-
// PINNED key-derivation inputs (the HMAC message that, with the seed, selects
|
|
49
|
-
// the key). Changing either after first use is a data-migration event.
|
|
47
|
+
// PINNED key-derivation input (the HMAC message that, with the seed, selects
|
|
48
|
+
// the key). Changing it after first use is a data-migration event.
|
|
50
49
|
const IDENTITY_KEY_NAME = 'app-key';
|
|
51
|
-
const KAK_KEY_NAME = 'kak';
|
|
52
|
-
/**
|
|
53
|
-
* HKDF-SHA256 expansion of the master seed into a 32-byte per-context seed.
|
|
54
|
-
*
|
|
55
|
-
* @param master {Uint8Array}
|
|
56
|
-
* @param info {string} the domain-separation label (e.g. `kak:v1:projects`)
|
|
57
|
-
* @returns {Promise<Uint8Array>}
|
|
58
|
-
*/
|
|
59
|
-
async function hkdfExpand(master, info) {
|
|
60
|
-
const key = await globalThis.crypto.subtle.importKey('raw', master, 'HKDF', false, ['deriveBits']);
|
|
61
|
-
const bits = await globalThis.crypto.subtle.deriveBits({
|
|
62
|
-
name: 'HKDF',
|
|
63
|
-
hash: 'SHA-256',
|
|
64
|
-
salt: new Uint8Array(0),
|
|
65
|
-
info: new TextEncoder().encode(info)
|
|
66
|
-
}, key, 256);
|
|
67
|
-
return new Uint8Array(bits);
|
|
68
|
-
}
|
|
69
50
|
/**
|
|
70
51
|
* Derives the master identity agents from the master seed. The did:key
|
|
71
52
|
* controller is stable across devices for the same seed.
|
|
@@ -90,43 +71,4 @@ export async function deriveIdentity({ seed, identityHandle = DEFAULT_IDENTITY_H
|
|
|
90
71
|
});
|
|
91
72
|
return { controllerDid: keyAgent.id, keyAgent, zcapClient };
|
|
92
73
|
}
|
|
93
|
-
/**
|
|
94
|
-
* Derives one collection's vault key material from the master seed:
|
|
95
|
-
* `HKDF(master, 'kak:v1:<collectionId>')` to a per-collection seed, then the
|
|
96
|
-
* Ed25519-to-X25519 (Montgomery-form) key-agreement key. Deterministic, so the
|
|
97
|
-
* same seed decrypts the same envelopes on any device. Encryption uses these
|
|
98
|
-
* per-collection KAKs from day one -- never share one KAK across collections.
|
|
99
|
-
*
|
|
100
|
-
* @param options {object}
|
|
101
|
-
* @param options.seed {Uint8Array} the 32-byte master seed
|
|
102
|
-
* @param options.collectionId {string} the WAS collection id (the HKDF label)
|
|
103
|
-
* @param [options.kakHandle] {string} cosmetic agent label; does not affect
|
|
104
|
-
* keys (defaults to `DEFAULT_KAK_HANDLE`)
|
|
105
|
-
* @returns {Promise<CollectionKeys>}
|
|
106
|
-
*/
|
|
107
|
-
export async function deriveCollectionKeys({ seed, collectionId, kakHandle = DEFAULT_KAK_HANDLE }) {
|
|
108
|
-
const collectionSeed = await hkdfExpand(seed, `kak:v1:${collectionId}`);
|
|
109
|
-
const keyAgent = await CapabilityAgent.fromSeed({
|
|
110
|
-
seed: collectionSeed,
|
|
111
|
-
handle: kakHandle,
|
|
112
|
-
keyName: KAK_KEY_NAME
|
|
113
|
-
});
|
|
114
|
-
const keyAgreementKey = X25519KeyAgreementKey2020.fromEd25519VerificationKey2020({
|
|
115
|
-
keyPair: keyAgent.getVerificationKeyPair()
|
|
116
|
-
});
|
|
117
|
-
const keyResolver = async ({ id }) => {
|
|
118
|
-
if (id !== keyAgreementKey.id) {
|
|
119
|
-
throw new Error(`Unknown key id "${id}".`);
|
|
120
|
-
}
|
|
121
|
-
return {
|
|
122
|
-
id: keyAgreementKey.id,
|
|
123
|
-
type: keyAgreementKey.type,
|
|
124
|
-
publicKeyMultibase: keyAgreementKey.publicKeyMultibase
|
|
125
|
-
};
|
|
126
|
-
};
|
|
127
|
-
return {
|
|
128
|
-
keyAgreementKey: keyAgreementKey,
|
|
129
|
-
keyResolver
|
|
130
|
-
};
|
|
131
|
-
}
|
|
132
74
|
//# sourceMappingURL=agents.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"agents.js","sourceRoot":"","sources":["../../src/identity/agents.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH
|
|
1
|
+
{"version":3,"file":"agents.js","sourceRoot":"","sources":["../../src/identity/agents.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAA;AACjE,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAE3C;;;;;GAKG;AACH,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAEnB,MAAM,+BAA+B,CAAA;AAEtC;;;GAGG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,WAAW,CAAA;AAElD,6EAA6E;AAC7E,mEAAmE;AACnE,MAAM,iBAAiB,GAAG,SAAS,CAAA;AAYnC;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,EACnC,IAAI,EACJ,cAAc,GAAG,uBAAuB,EAIzC;IACC,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC;QAC9C,IAAI;QACJ,MAAM,EAAE,cAAc;QACtB,OAAO,EAAE,iBAAiB;KAC3B,CAAC,CAAA;IACF,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAA;IACnC,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC;QAChC,UAAU,EAAE,oBAAoB;QAChC,gBAAgB,EAAE,MAAM;QACxB,gBAAgB,EAAE,MAAM;KACzB,CAAC,CAAA;IACF,OAAO,EAAE,aAAa,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAA;AAC7D,CAAC"}
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@interop/was-react",
|
|
3
3
|
"description": "React library for building 'Bring Your Own Everything' (BYOE) apps on Wallet Attached Storage: DID Auth login via CHAPI wallet, local-first encrypted storage, and background sync to a WAS server.",
|
|
4
|
-
"version": "0.3.
|
|
4
|
+
"version": "0.3.6",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"scripts": {
|
|
7
7
|
"build": "pnpm run clear && tsc",
|
|
@@ -51,7 +51,8 @@
|
|
|
51
51
|
"@interop/ezcap": "^7.4.1",
|
|
52
52
|
"@interop/security-document-loader": "^9.4.4",
|
|
53
53
|
"@interop/vc": "^11.0.6",
|
|
54
|
-
"@interop/verifier-core": "^3.4.
|
|
54
|
+
"@interop/verifier-core": "^3.4.1",
|
|
55
|
+
"@interop/wallet-core": "^0.5.0",
|
|
55
56
|
"@interop/was-client": "^0.19.0",
|
|
56
57
|
"@interop/webkms-client": "^14.7.1",
|
|
57
58
|
"@interop/x25519-key-agreement-key": "^5.2.1",
|