@keeper-security/keeper-sdk-javascript 0.1.0

package/dist/vault/KeeperVault.js

@@ -0,0 +1,338 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KeeperVault = void 0;
+const keeperapi_1 = require("@keeper-security/keeperapi");
+const InMemoryStorage_1 = require("../storage/InMemoryStorage");
+const SessionManager_1 = require("../auth/SessionManager");
+const ConsoleAuthUI_1 = require("../auth/ConsoleAuthUI");
+const RecordUtils_1 = require("../records/RecordUtils");
+const RecordOperations_1 = require("../records/RecordOperations");
+const Sharing_1 = require("../sharing/Sharing");
+const utils_1 = require("../utils");
+var VaultStatus;
+(function (VaultStatus) {
+    VaultStatus["RecordNotFound"] = "RECORD_NOT_FOUND";
+    VaultStatus["RecordKeyNotFound"] = "RECORD_KEY_NOT_FOUND";
+})(VaultStatus || (VaultStatus = {}));
+class KeeperVault {
+    constructor(config) {
+        var _a, _b;
+        this.auth = null;
+        this.synced = false;
+        this.batchDepth = 0;
+        this.config = {
+            host: (config === null || config === void 0 ? void 0 : config.host) || keeperapi_1.KeeperEnvironment.Prod,
+            clientVersion: (config === null || config === void 0 ? void 0 : config.clientVersion) || utils_1.SdkDefaults.CLIENT_VERSION,
+            configDir: (_a = config === null || config === void 0 ? void 0 : config.configDir) !== null && _a !== void 0 ? _a : '',
+            useConsoleAuth: (config === null || config === void 0 ? void 0 : config.useConsoleAuth) !== false,
+            logFormat: (config === null || config === void 0 ? void 0 : config.logFormat) || utils_1.SdkDefaults.LOG_FORMAT,
+            logLevel: (_b = config === null || config === void 0 ? void 0 : config.logLevel) !== null && _b !== void 0 ? _b : utils_1.LogLevel.INFO,
+            autoSync: (config === null || config === void 0 ? void 0 : config.autoSync) !== false,
+        };
+        this.log = new utils_1.ConsoleLogger(this.config.logLevel);
+        this.storage = (config === null || config === void 0 ? void 0 : config.storage) || new InMemoryStorage_1.InMemoryStorage();
+        this.sessionManager = (config === null || config === void 0 ? void 0 : config.sessionStorage) || new SessionManager_1.SessionManager(this.config.configDir || undefined);
+        this.authUI = (config === null || config === void 0 ? void 0 : config.authUI) || new ConsoleAuthUI_1.ConsoleAuthUI();
+    }
+    async createAuth(options) {
+        const host = this.config.host;
+        const baseDeviceConfig = await this.sessionManager.getDeviceConfig(host);
+        const deviceConfig = {
+            ...baseDeviceConfig,
+            deviceName: baseDeviceConfig.deviceName || utils_1.SdkDefaults.DEVICE_NAME,
+        };
+        const sessionStorage = (options === null || options === void 0 ? void 0 : options.useSessionResumption) === false
+            ? {
+                getCloneCode: async () => null,
+                saveCloneCode: (h, u, c) => this.sessionManager.saveCloneCode(h, u, c),
+                getSessionParameters: () => this.sessionManager.getSessionParameters(),
+                saveSessionParameters: (p) => this.sessionManager.saveSessionParameters(p),
+            }
+            : this.sessionManager;
+        return new keeperapi_1.Auth({
+            host,
+            clientVersion: this.config.clientVersion,
+            deviceConfig,
+            authUI3: this.config.useConsoleAuth ? this.authUI : undefined,
+            sessionStorage,
+            onDeviceConfig: this.sessionManager.createOnDeviceConfig(host),
+            useSessionResumption: options === null || options === void 0 ? void 0 : options.useSessionResumption,
+        });
+    }
+    getAuthOrThrow() {
+        if (!this.auth || !this.auth.sessionToken) {
+            throw new utils_1.KeeperSdkError('Not logged in. Call login() first.', utils_1.ResultCodes.NOT_LOGGED_IN);
+        }
+        return this.auth;
+    }
+    async login(username, password) {
+        this.auth = await this.createAuth({ useSessionResumption: false });
+        this.sessionManager.setLastUsername(username);
+        await this.auth.loginV3({
+            username,
+            password,
+            loginType: keeperapi_1.Authentication.LoginType.NORMAL,
+            loginMethod: keeperapi_1.Authentication.LoginMethod.EXISTING_ACCOUNT,
+        });
+        this.synced = false;
+        this.log.info(`Logged in as ${username}`);
+    }
+    async loginWithSessionToken(username, sessionToken) {
+        const deviceConfig = await this.sessionManager.getDeviceConfig(this.config.host);
+        if (!deviceConfig.deviceToken || !deviceConfig.privateKey) {
+            throw new utils_1.KeeperSdkError('Device is not registered for this host. Perform a normal login first to register the device before using session token login.', utils_1.ResultCodes.DEVICE_NOT_REGISTERED);
+        }
+        this.auth = await this.createAuth();
+        this.sessionManager.setLastUsername(username);
+        await this.auth.loginV3({
+            username,
+            givenSessionToken: sessionToken,
+            loginType: keeperapi_1.Authentication.LoginType.NORMAL,
+            loginMethod: keeperapi_1.Authentication.LoginMethod.EXISTING_ACCOUNT,
+        });
+        if (!this.auth.sessionToken) {
+            throw new utils_1.KeeperSdkError('Session token login failed — token may be expired or invalid.', utils_1.ResultCodes.SESSION_TOKEN_EXPIRED);
+        }
+        this.synced = false;
+        this.log.info(`Logged in as ${username} (via session token)`);
+    }
+    getSessionToken() {
+        var _a;
+        return ((_a = this.auth) === null || _a === void 0 ? void 0 : _a.sessionToken) || undefined;
+    }
+    async resumeSession() {
+        const username = await this.sessionManager.getLastUsername();
+        if (!username) {
+            throw new utils_1.KeeperSdkError('No previous login found. Perform a normal login first.', utils_1.ResultCodes.NO_PREVIOUS_LOGIN);
+        }
+        this.sessionManager.setLastUsername(username);
+        const deviceConfig = await this.sessionManager.getDeviceConfig(this.config.host);
+        if (!deviceConfig.deviceToken || !deviceConfig.privateKey) {
+            throw new utils_1.KeeperSdkError('Device is not registered for this host. Perform a normal login first.', utils_1.ResultCodes.DEVICE_NOT_REGISTERED);
+        }
+        const cloneCode = await this.sessionManager.getCloneCode(this.config.host, username);
+        if (!cloneCode) {
+            throw new utils_1.KeeperSdkError('No clone code found. Persistent login not enabled or clone code expired. Perform a normal login.', utils_1.ResultCodes.NO_CLONE_CODE);
+        }
+        this.auth = await this.createAuth({ useSessionResumption: true });
+        await this.auth.loginV3({
+            loginType: keeperapi_1.Authentication.LoginType.NORMAL,
+            resumeSessionOnly: true,
+        });
+        if (!this.auth.sessionToken) {
+            throw new utils_1.KeeperSdkError('Persistent login failed — clone code may be expired or persistent login not enabled. Perform a normal login.', utils_1.ResultCodes.PERSISTENT_LOGIN_FAILED);
+        }
+        this.synced = false;
+        this.log.info(`Session resumed for ${username} (persistent login)`);
+    }
+    async sync() {
+        const auth = this.getAuthOrThrow();
+        const result = await (0, keeperapi_1.syncDown)({
+            auth,
+            storage: this.storage,
+            logFormat: this.config.logFormat,
+        });
+        this.synced = true;
+        return result;
+    }
+    async batch(fn) {
+        this.batchDepth++;
+        try {
+            await fn();
+        }
+        finally {
+            this.batchDepth--;
+            if (this.batchDepth === 0 && this.config.autoSync) {
+                await this.sync();
+            }
+        }
+    }
+    async syncIfNeeded() {
+        if (this.batchDepth > 0) {
+            this.synced = false;
+            return;
+        }
+        if (this.config.autoSync) {
+            await this.sync();
+        }
+        else {
+            this.synced = false;
+        }
+    }
+    getRecords() {
+        return this.storage.getRecords();
+    }
+    getRecordByUid(uid) {
+        return this.storage.getByUid('record', uid);
+    }
+    findRecord(uidOrTitle) {
+        const byUid = this.getRecordByUid(uidOrTitle);
+        if (byUid)
+            return byUid;
+        const needle = uidOrTitle.toLowerCase();
+        return this.getRecords().find((r) => (0, RecordUtils_1.getRecordTitle)(r).toLowerCase() === needle);
+    }
+    findRecords(criteria) {
+        return (0, RecordUtils_1.searchRecords)(this.getRecords(), criteria);
+    }
+    getRecordsByVersion(version) {
+        return this.getRecords().filter((r) => r.version === version);
+    }
+    getRecordsByType(recordType) {
+        return this.getRecords().filter((r) => (0, RecordUtils_1.getRecordType)(r) === recordType);
+    }
+    getRecordMetadata() {
+        return this.storage.getAll('metadata');
+    }
+    getRecordMetadataByUid(uid) {
+        return this.storage.getByUid('metadata', uid);
+    }
+    getSharedFolders() {
+        return this.storage.getAll('shared_folder');
+    }
+    getTeams() {
+        return this.storage.getAll('team');
+    }
+    getUserFolders() {
+        return this.storage.getAll('user_folder');
+    }
+    getSummary() {
+        return {
+            recordCount: this.storage.getCount('record'),
+            sharedFolderCount: this.storage.getCount('shared_folder'),
+            teamCount: this.storage.getCount('team'),
+            folderCount: this.storage.getCount('user_folder'),
+        };
+    }
+    printRecords(showDetails = false) {
+        const records = this.getRecords();
+        if (records.length === 0) {
+            this.log.info('No records found in vault.');
+            return;
+        }
+        this.log.info(`\n=== Vault Records (${records.length}) ===\n`);
+        for (const record of records) {
+            this.log.info((0, RecordUtils_1.formatRecord)(record, showDetails));
+        }
+    }
+    async addRecord(input) {
+        const auth = this.getAuthOrThrow();
+        const result = await (0, RecordOperations_1.addRecord)(auth, input);
+        if (result.success)
+            await this.syncIfNeeded();
+        return result;
+    }
+    async updateRecord(recordUid, data) {
+        const auth = this.getAuthOrThrow();
+        const record = this.getRecordByUid(recordUid);
+        if (!record) {
+            return { recordUid, success: false, status: VaultStatus.RecordNotFound };
+        }
+        const keyBytes = await this.storage.getKeyBytes(recordUid);
+        if (!keyBytes) {
+            return { recordUid, success: false, status: VaultStatus.RecordKeyNotFound };
+        }
+        const result = await (0, RecordOperations_1.updateRecord)(auth, recordUid, data, record.revision, keyBytes);
+        if (result.success)
+            await this.syncIfNeeded();
+        return result;
+    }
+    async deleteRecord(recordUid) {
+        const auth = this.getAuthOrThrow();
+        const result = await (0, RecordOperations_1.deleteRecord)(auth, recordUid);
+        if (result.success)
+            await this.syncIfNeeded();
+        return result;
+    }
+    async moveRecord(input) {
+        const auth = this.getAuthOrThrow();
+        const result = await (0, RecordOperations_1.moveRecord)(auth, this.storage, input);
+        if (result.success)
+            await this.syncIfNeeded();
+        return result;
+    }
+    async shareRecord(input) {
+        const auth = this.getAuthOrThrow();
+        const record = this.getRecordByUid(input.recordUid)
+            || this.findRecord(input.recordUid);
+        if (!record) {
+            return {
+                recordUid: input.recordUid,
+                email: input.email,
+                success: false,
+                status: VaultStatus.RecordNotFound,
+                message: `Record "${input.recordUid}" not found`,
+            };
+        }
+        const keyBytes = await this.storage.getKeyBytes(record.uid);
+        if (!keyBytes) {
+            return {
+                recordUid: record.uid,
+                email: input.email,
+                success: false,
+                status: VaultStatus.RecordKeyNotFound,
+                message: 'Record key not available',
+            };
+        }
+        const result = await (0, Sharing_1.shareRecord)(auth, keyBytes, { ...input, recordUid: record.uid });
+        if (result.success)
+            await this.syncIfNeeded();
+        return result;
+    }
+    async removeRecordShare(input) {
+        const auth = this.getAuthOrThrow();
+        const result = await (0, Sharing_1.removeRecordShare)(auth, input);
+        if (result.success)
+            await this.syncIfNeeded();
+        return result;
+    }
+    async getRecordHistory(recordUid) {
+        const auth = this.getAuthOrThrow();
+        const keyBytes = await this.storage.getKeyBytes(recordUid);
+        if (!keyBytes) {
+            return { recordUid, history: [] };
+        }
+        return (0, RecordOperations_1.getRecordHistory)(auth, recordUid, keyBytes);
+    }
+    getStorage() {
+        return this.storage;
+    }
+    getAuth() {
+        return this.getAuthOrThrow();
+    }
+    disconnect() {
+        if (this.auth) {
+            try {
+                this.auth.disconnect();
+            }
+            catch (err) {
+                this.log.debug('disconnect error:', (0, utils_1.extractErrorMessage)(err));
+            }
+            this.auth = null;
+        }
+        this.synced = false;
+    }
+    async logout() {
+        if (this.auth) {
+            try {
+                await this.auth.logout();
+            }
+            catch (err) {
+                this.log.debug('logout error:', (0, utils_1.extractErrorMessage)(err));
+            }
+        }
+        this.disconnect();
+        this.log.info('Logged out.');
+    }
+    get host() {
+        return this.config.host;
+    }
+    get isLoggedIn() {
+        return this.auth !== null && !!this.auth.sessionToken;
+    }
+    get isSynced() {
+        return this.synced;
+    }
+}
+exports.KeeperVault = KeeperVault;
+//# sourceMappingURL=KeeperVault.js.map

package/dist/vault/KeeperVault.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"KeeperVault.js","sourceRoot":"","sources":["../../src/vault/KeeperVault.ts"],"names":[],"mappings":";;;AAAA,0DAUmC;AAEnC,gEAA4D;AAC5D,2DAAuD;AACvD,yDAAqD;AACrD,wDAAmG;AACnG,kEAMoC;AAWpC,gDAG2B;AAO3B,oCAAiH;AAGjH,IAAK,WAGJ;AAHD,WAAK,WAAW;IACZ,kDAAmC,CAAA;IACnC,yDAA0C,CAAA;AAC9C,CAAC,EAHI,WAAW,KAAX,WAAW,QAGf;AAsBD,MAAa,WAAW;IAUpB,YAAY,MAA0B;;QAT9B,SAAI,GAAgB,IAAI,CAAA;QAMxB,WAAM,GAAG,KAAK,CAAA;QACd,eAAU,GAAG,CAAC,CAAA;QAGlB,IAAI,CAAC,MAAM,GAAG;YACV,IAAI,EAAE,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,IAAI,KAAI,6BAAiB,CAAC,IAAI;YAC5C,aAAa,EAAE,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,aAAa,KAAI,mBAAW,CAAC,cAAc;YAClE,SAAS,EAAE,MAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,SAAS,mCAAI,EAAE;YAClC,cAAc,EAAE,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,cAAc,MAAK,KAAK;YAChD,SAAS,EAAE,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,SAAS,KAAI,mBAAW,CAAC,UAAU;YACtD,QAAQ,EAAE,MAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,QAAQ,mCAAI,gBAAQ,CAAC,IAAI;YAC3C,QAAQ,EAAE,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,QAAQ,MAAK,KAAK;SACvC,CAAA;QAED,IAAI,CAAC,GAAG,GAAG,IAAI,qBAAa,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAA;QAClD,IAAI,CAAC,OAAO,GAAG,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,OAAO,KAAI,IAAI,iCAAe,EAAE,CAAA;QACvD,IAAI,CAAC,cAAc,GAAG,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,cAAc,KAAI,IAAI,+BAAc,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,SAAS,CAAC,CAAA;QACtG,IAAI,CAAC,MAAM,GAAG,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,MAAM,KAAI,IAAI,6BAAa,EAAE,CAAA;IACvD,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,OAA4C;QACjE,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAA;QAC7B,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,IAAI,CAAC,CAAA;QACxE,MAAM,YAAY,GAAG;YACjB,GAAG,gBAAgB;YACnB,UAAU,EAAE,gBAAgB,CAAC,UAAU,IAAI,mBAAW,CAAC,WAAW;SACrE,CAAA;QAED,MAAM,cAAc,GAAmB,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,oBAAoB,MAAK,KAAK;YAC1E,CAAC,CAAC;gBACE,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,IAAI;gBAC9B,aAAa,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;gBACtE,oBAAoB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,oBAAoB,EAAE;gBACtE,qBAAqB,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,qBAAqB,CAAC,CAAC,CAAC;aAC7E;YACD,CAAC,CAAC,IAAI,CAAC,cAAc,CAAA;QAEzB,OAAO,IAAI,gBAAI,CAAC;YACZ,IAAI;YACJ,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,aAAa;YACxC,YAAY;YACZ,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;YAC7D,cAAc;YACd,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC,oBAAoB,CAAC,IAAI,CAAC;YAC9D,oBAAoB,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,oBAAoB;SACtD,CAAC,CAAA;IACN,CAAC;IAEO,cAAc;QAClB,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;YACvC,MAAM,IAAI,sBAAc,CAAC,oCAAoC,EAAE,mBAAW,CAAC,aAAa,CAAC,CAAA;SAC5F;QACD,OAAO,IAAI,CAAC,IAAI,CAAA;IACpB,CAAC;IAEM,KAAK,CAAC,KAAK,CAAC,QAAgB,EAAE,QAAgB;QACjD,IAAI,CAAC,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,CAAA;QAClE,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAA;QAE7C,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YACpB,QAAQ;YACR,QAAQ;YACR,SAAS,EAAE,0BAAc,CAAC,SAAS,CAAC,MAAM;YAC1C,WAAW,EAAE,0BAAc,CAAC,WAAW,CAAC,gBAAgB;SAC3D,CAAC,CAAA;QAEF,IAAI,CAAC,MAAM,GAAG,KAAK,CAAA;QACnB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,QAAQ,EAAE,CAAC,CAAA;IAC7C,CAAC;IAEM,KAAK,CAAC,qBAAqB,CAAC,QAAgB,EAAE,YAAoB;QACrE,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAEhF,IAAI,CAAC,YAAY,CAAC,WAAW,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE;YACvD,MAAM,IAAI,sBAAc,CACpB,+HAA+H,EAC/H,mBAAW,CAAC,qBAAqB,CACpC,CAAA;SACJ;QAED,IAAI,CAAC,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,EAAE,CAAA;QACnC,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAA;QAE7C,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YACpB,QAAQ;YACR,iBAAiB,EAAE,YAAY;YAC/B,SAAS,EAAE,0BAAc,CAAC,SAAS,CAAC,MAAM;YAC1C,WAAW,EAAE,0BAAc,CAAC,WAAW,CAAC,gBAAgB;SAC3D,CAAC,CAAA;QAEF,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;YACzB,MAAM,IAAI,sBAAc,CACpB,+DAA+D,EAC/D,mBAAW,CAAC,qBAAqB,CACpC,CAAA;SACJ;QAED,IAAI,CAAC,MAAM,GAAG,KAAK,CAAA;QACnB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,QAAQ,sBAAsB,CAAC,CAAA;IACjE,CAAC;IAEM,eAAe;;QAClB,OAAO,CAAA,MAAA,IAAI,CAAC,IAAI,0CAAE,YAAY,KAAI,SAAS,CAAA;IAC/C,CAAC;IAEM,KAAK,CAAC,aAAa;QACtB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,CAAA;QAC5D,IAAI,CAAC,QAAQ,EAAE;YACX,MAAM,IAAI,sBAAc,CACpB,wDAAwD,EACxD,mBAAW,CAAC,iBAAiB,CAChC,CAAA;SACJ;QACD,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAA;QAE7C,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAChF,IAAI,CAAC,YAAY,CAAC,WAAW,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE;YACvD,MAAM,IAAI,sBAAc,CACpB,uEAAuE,EACvE,mBAAW,CAAC,qBAAqB,CACpC,CAAA;SACJ;QAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAA;QACpF,IAAI,CAAC,SAAS,EAAE;YACZ,MAAM,IAAI,sBAAc,CACpB,kGAAkG,EAClG,mBAAW,CAAC,aAAa,CAC5B,CAAA;SACJ;QAED,IAAI,CAAC,IAAI,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAA;QAEjE,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC;YACpB,SAAS,EAAE,0BAAc,CAAC,SAAS,CAAC,MAAM;YAC1C,iBAAiB,EAAE,IAAI;SAC1B,CAAC,CAAA;QAEF,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE;YACzB,MAAM,IAAI,sBAAc,CACpB,8GAA8G,EAC9G,mBAAW,CAAC,uBAAuB,CACtC,CAAA;SACJ;QAED,IAAI,CAAC,MAAM,GAAG,KAAK,CAAA;QACnB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,uBAAuB,QAAQ,qBAAqB,CAAC,CAAA;IACvE,CAAC;IAEM,KAAK,CAAC,IAAI;QACb,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,EAAE,CAAA;QAElC,MAAM,MAAM,GAAG,MAAM,IAAA,oBAAQ,EAAC;YAC1B,IAAI;YACJ,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS;SACnC,CAAC,CAAA;QAEF,IAAI,CAAC,MAAM,GAAG,IAAI,CAAA;QAClB,OAAO,MAAM,CAAA;IACjB,CAAC;IAEM,KAAK,CAAC,KAAK,CAAC,EAAuB;QACtC,IAAI,CAAC,UAAU,EAAE,CAAA;QACjB,IAAI;YACA,MAAM,EAAE,EAAE,CAAA;SACb;gBAAS;YACN,IAAI,CAAC,UAAU,EAAE,CAAA;YACjB,IAAI,IAAI,CAAC,UAAU,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE;gBAC/C,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;aACpB;SACJ;IACL,CAAC;IAEO,KAAK,CAAC,YAAY;QACtB,IAAI,IAAI,CAAC,UAAU,GAAG,CAAC,EAAE;YACrB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAA;YACnB,OAAM;SACT;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE;YACtB,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;SACpB;aAAM;YACH,IAAI,CAAC,MAAM,GAAG,KAAK,CAAA;SACtB;IACL,CAAC;IAEM,UAAU;QACb,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAA;IACpC,CAAC;IAEM,cAAc,CAAC,GAAW;QAC7B,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAU,QAAQ,EAAE,GAAG,CAAC,CAAA;IACxD,CAAC;IAEM,UAAU,CAAC,UAAkB;QAChC,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,CAAA;QAC7C,IAAI,KAAK;YAAE,OAAO,KAAK,CAAA;QAEvB,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,EAAE,CAAA;QACvC,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,4BAAc,EAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAA;IACpF,CAAC;IAEM,WAAW,CAAC,QAAgB;QAC/B,OAAO,IAAA,2BAAa,EAAC,IAAI,CAAC,UAAU,EAAE,EAAE,QAAQ,CAAC,CAAA;IACrD,CAAC;IAEM,mBAAmB,CAAC,OAAe;QACtC,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAA;IACjE,CAAC;IAEM,gBAAgB,CAAC,UAAkB;QACtC,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,2BAAa,EAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAA;IAC3E,CAAC;IAEM,iBAAiB;QACpB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAkB,UAAU,CAAC,CAAA;IAC3D,CAAC;IAEM,sBAAsB,CAAC,GAAW;QACrC,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAkB,UAAU,EAAE,GAAG,CAAC,CAAA;IAClE,CAAC;IAEM,gBAAgB;QACnB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAgB,eAAe,CAAC,CAAA;IAC9D,CAAC;IAEM,QAAQ;QACX,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAQ,MAAM,CAAC,CAAA;IAC7C,CAAC;IAEM,cAAc;QACjB,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAc,aAAa,CAAC,CAAA;IAC1D,CAAC;IAEM,UAAU;QACb,OAAO;YACH,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAC5C,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;YACzD,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;YACxC,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC;SACpD,CAAA;IACL,CAAC;IAEM,YAAY,CAAC,WAAW,GAAG,KAAK;QACnC,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAA;QACjC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE;YACtB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAA;YAC3C,OAAM;SACT;QACD,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,wBAAwB,OAAO,CAAC,MAAM,SAAS,CAAC,CAAA;QAC9D,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE;YAC1B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAA,0BAAY,EAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAA;SACnD;IACL,CAAC;IAEM,KAAK,CAAC,SAAS,CAAC,KAAqB;QACxC,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,EAAE,CAAA;QAClC,MAAM,MAAM,GAAG,MAAM,IAAA,4BAAW,EAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QAC7C,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,CAAC,YAAY,EAAE,CAAA;QAC7C,OAAO,MAAM,CAAA;IACjB,CAAC;IAEM,KAAK,CAAC,YAAY,CAAC,SAAiB,EAAE,IAAqB;QAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,EAAE,CAAA;QAElC,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAA;QAC7C,IAAI,CAAC,MAAM,EAAE;YACT,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,cAAc,EAAE,CAAA;SAC3E;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,CAAA;QAC1D,IAAI,CAAC,QAAQ,EAAE;YACX,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,iBAAiB,EAAE,CAAA;SAC9E;QAED,MAAM,MAAM,GAAG,MAAM,IAAA,+BAAc,EAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAA;QACrF,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,CAAC,YAAY,EAAE,CAAA;QAC7C,OAAO,MAAM,CAAA;IACjB,CAAC;IAEM,KAAK,CAAC,YAAY,CAAC,SAAiB;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,EAAE,CAAA;QAClC,MAAM,MAAM,GAAG,MAAM,IAAA,+BAAc,EAAC,IAAI,EAAE,SAAS,CAAC,CAAA;QACpD,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,CAAC,YAAY,EAAE,CAAA;QAC7C,OAAO,MAAM,CAAA;IACjB,CAAC;IAEM,KAAK,CAAC,UAAU,CAAC,KAAsB;QAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,EAAE,CAAA;QAClC,MAAM,MAAM,GAAG,MAAM,IAAA,6BAAY,EAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAC5D,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,CAAC,YAAY,EAAE,CAAA;QAC7C,OAAO,MAAM,CAAA;IACjB,CAAC;IAEM,KAAK,CAAC,WAAW,CAAC,KAAuB;QAC5C,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,EAAE,CAAA;QAElC,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC;eAC5C,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QACvC,IAAI,CAAC,MAAM,EAAE;YACT,OAAO;gBACH,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,WAAW,CAAC,cAAc;gBAClC,OAAO,EAAE,WAAW,KAAK,CAAC,SAAS,aAAa;aACnD,CAAA;SACJ;QAED,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAC3D,IAAI,CAAC,QAAQ,EAAE;YACX,OAAO;gBACH,SAAS,EAAE,MAAM,CAAC,GAAG;gBACrB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,WAAW,CAAC,iBAAiB;gBACrC,OAAO,EAAE,0BAA0B;aACtC,CAAA;SACJ;QAED,MAAM,MAAM,GAAG,MAAM,IAAA,qBAAa,EAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAA;QACvF,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,CAAC,YAAY,EAAE,CAAA;QAC7C,OAAO,MAAM,CAAA;IACjB,CAAC;IAEM,KAAK,CAAC,iBAAiB,CAAC,KAAuB;QAClD,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,EAAE,CAAA;QAClC,MAAM,MAAM,GAAG,MAAM,IAAA,2BAAmB,EAAC,IAAI,EAAE,KAAK,CAAC,CAAA;QACrD,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,CAAC,YAAY,EAAE,CAAA;QAC7C,OAAO,MAAM,CAAA;IACjB,CAAC;IAEM,KAAK,CAAC,gBAAgB,CAAC,SAAiB;QAC3C,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,EAAE,CAAA;QAElC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,CAAA;QAC1D,IAAI,CAAC,QAAQ,EAAE;YACX,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;SACpC;QAED,OAAO,IAAA,mCAAkB,EAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAA;IACxD,CAAC;IAEM,UAAU;QACb,OAAO,IAAI,CAAC,OAAO,CAAA;IACvB,CAAC;IAEM,OAAO;QACV,OAAO,IAAI,CAAC,cAAc,EAAE,CAAA;IAChC,CAAC;IAEM,UAAU;QACb,IAAI,IAAI,CAAC,IAAI,EAAE;YACX,IAAI;gBAAE,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAA;aAAE;YAAC,OAAO,GAAG,EAAE;gBACvC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,mBAAmB,EAAE,IAAA,2BAAmB,EAAC,GAAG,CAAC,CAAC,CAAA;aAChE;YACD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;SACnB;QACD,IAAI,CAAC,MAAM,GAAG,KAAK,CAAA;IACvB,CAAC;IAEM,KAAK,CAAC,MAAM;QACf,IAAI,IAAI,CAAC,IAAI,EAAE;YACX,IAAI;gBAAE,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAA;aAAE;YAAC,OAAO,GAAG,EAAE;gBACzC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,EAAE,IAAA,2BAAmB,EAAC,GAAG,CAAC,CAAC,CAAA;aAC5D;SACJ;QACD,IAAI,CAAC,UAAU,EAAE,CAAA;QACjB,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,CAAA;IAChC,CAAC;IAED,IAAW,IAAI;QACX,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAA;IAC3B,CAAC;IAED,IAAW,UAAU;QACjB,OAAO,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,CAAA;IACzD,CAAC;IAED,IAAW,QAAQ;QACf,OAAO,IAAI,CAAC,MAAM,CAAA;IACtB,CAAC;CACJ;AArYD,kCAqYC"}

package/package.json

@@ -0,0 +1,32 @@
+{
+    "name": "@keeper-security/keeper-sdk-javascript",
+    "version": "0.1.0",
+    "description": "High-level wrapper for Keeper Security JavaScript SDK",
+    "repository": {
+        "type": "git",
+        "url": "git+https://github.com/Keeper-Security/keeper-sdk-javascript.git",
+        "directory": "KeeperSdk"
+    },
+    "license": "ISC",
+    "main": "src/index.ts",
+    "scripts": {
+        "build": "tsc",
+        "clean": "rm -rf dist",
+        "link-local": "npm link ../keeperapi",
+        "format": "prettier --write .",
+        "format:check": "prettier --check .",
+        "test": "jest",
+        "types": "tsc --watch",
+        "types:ci": "tsc",
+        "prepublishOnly": "npm run build"
+    },
+    "dependencies": {
+        "@keeper-security/keeperapi": "17.1.3",
+        "ts-node": "^10.7.0",
+        "typescript": "^4.6.3"
+    },
+    "devDependencies": {
+        "@types/node": "^25.6.0",
+        "prettier": "^3.8.1"
+    }
+}

package/src/auth/ConsoleAuthUI.ts

@@ -0,0 +1,169 @@
+import readline from 'readline/promises'
+import { setTimeout as delay } from 'timers/promises'
+import type { AuthUI3, DeviceApprovalChannel, TwoFactorChannelData } from '@keeper-security/keeperapi'
+import { Authentication } from '@keeper-security/keeperapi'
+import { logger, extractErrorMessage, KeeperSdkError, AuthDefaults, ResultCodes } from '../utils'
+
+export class ConsoleAuthUI implements AuthUI3 {
+    private static readonly DEVICE_VERIFICATION = {
+        Email: 0,
+        KeeperPush: 1,
+        TFA: 2,
+        AdminApproval: 3,
+    } as const
+
+    private static channelName(channel: number): string {
+        switch (channel) {
+            case ConsoleAuthUI.DEVICE_VERIFICATION.Email:
+                return 'Email Verification'
+            case ConsoleAuthUI.DEVICE_VERIFICATION.KeeperPush:
+                return 'Keeper Push'
+            case ConsoleAuthUI.DEVICE_VERIFICATION.TFA:
+                return 'Two-Factor Authentication'
+            case ConsoleAuthUI.DEVICE_VERIFICATION.AdminApproval:
+                return 'Admin Approval'
+            default:
+                return `Channel ${channel}`
+        }
+    }
+
+    private static twoFactorChannelName(channelType: Authentication.TwoFactorChannelType): string {
+        switch (channelType) {
+            case Authentication.TwoFactorChannelType.TWO_FA_CT_TOTP:
+                return 'Authenticator App (TOTP)'
+            case Authentication.TwoFactorChannelType.TWO_FA_CT_SMS:
+                return 'SMS'
+            case Authentication.TwoFactorChannelType.TWO_FA_CT_DUO:
+                return 'Duo Security'
+            case Authentication.TwoFactorChannelType.TWO_FA_CT_RSA:
+                return 'RSA SecurID'
+            case Authentication.TwoFactorChannelType.TWO_FA_CT_DNA:
+                return 'Keeper DNA'
+            case Authentication.TwoFactorChannelType.TWO_FA_CT_U2F:
+                return 'U2F Security Key'
+            case Authentication.TwoFactorChannelType.TWO_FA_CT_WEBAUTHN:
+                return 'WebAuthn Security Key'
+            case Authentication.TwoFactorChannelType.TWO_FA_CT_KEEPER:
+                return 'Keeper'
+            default:
+                throw new KeeperSdkError(
+                    `Unsupported 2FA channel type: ${channelType}`,
+                    ResultCodes.UNSUPPORTED_2FA_CHANNEL
+                )
+        }
+    }
+
+    private static async waitWithCancel(timeoutMs: number, cancel?: Promise<void>): Promise<void> {
+        if (!cancel) {
+            await delay(timeoutMs)
+            return
+        }
+        await Promise.race([delay(timeoutMs), cancel])
+    }
+
+    public async waitForDeviceApproval(channels: DeviceApprovalChannel[], isCloud: boolean): Promise<boolean> {
+        const rl = readline.createInterface({
+            input: process.stdin,
+            output: process.stdout,
+        })
+
+        try {
+            logger.info('\n--- Device Approval Required ---')
+            logger.info('This device needs to be approved before you can log in.')
+            logger.info('Available verification methods:')
+            channels.forEach((ch, i) => {
+                logger.info(`  ${i + 1}. ${ConsoleAuthUI.channelName(ch.channel)}`)
+            })
+
+            const choice = (await rl.question('\nSelect method (number): ')).trim()
+            const idx = parseInt(choice, 10) - 1
+
+            if (isNaN(idx) || idx < 0 || idx >= channels.length) {
+                logger.warn('Invalid selection, cancelling.')
+                return false
+            }
+
+            const selected = channels[idx]
+            logger.info(`\nSending ${ConsoleAuthUI.channelName(selected.channel)} request...`)
+            await selected.sendApprovalRequest()
+
+            if (selected.validateCode) {
+                const code = (await rl.question('Enter verification code: ')).trim()
+                if (!code) return false
+                await selected.validateCode(code)
+            } else {
+                logger.info('Approval request sent. Waiting for approval on your other device...')
+                await ConsoleAuthUI.waitWithCancel(AuthDefaults.APPROVAL_TIMEOUT_MS)
+            }
+
+            return true
+        } catch (e) {
+            logger.error('Device approval error:', extractErrorMessage(e))
+            return false
+        } finally {
+            rl.close()
+        }
+    }
+
+    public async waitForTwoFactorCode(channels: TwoFactorChannelData[], cancel: Promise<void>): Promise<boolean> {
+        const rl = readline.createInterface({
+            input: process.stdin,
+            output: process.stdout,
+        })
+
+        try {
+            logger.info('\n--- Two-Factor Authentication Required ---')
+            logger.info('Available 2FA methods:')
+            channels.forEach((ch, i) => {
+                const name = ConsoleAuthUI.twoFactorChannelName(ch.channel.channelType!)
+                logger.info(`  ${i + 1}. ${name}`)
+            })
+
+            const choice = (await rl.question('\nSelect method (number): ')).trim()
+            const idx = parseInt(choice, 10) - 1
+
+            if (isNaN(idx) || idx < 0 || idx >= channels.length) {
+                logger.warn('Invalid selection, cancelling.')
+                return false
+            }
+
+            const selected = channels[idx]
+            const name = ConsoleAuthUI.twoFactorChannelName(selected.channel.channelType!)
+
+            if (selected.availablePushes && selected.availablePushes.length > 0) {
+                const pushChoice = (await rl.question(`Send push notification for ${name}? (y/n): `)).trim()
+                if (pushChoice.toLowerCase() === 'y' && selected.sendPush) {
+                    selected.sendPush(selected.availablePushes[0])
+                    logger.info('Push sent. Waiting for approval...')
+                    await ConsoleAuthUI.waitWithCancel(AuthDefaults.APPROVAL_TIMEOUT_MS, cancel)
+                    return true
+                }
+            }
+
+            const code = (await rl.question(`Enter ${name} code: `)).trim()
+            if (!code) return false
+
+            selected.sendCode(code)
+            await ConsoleAuthUI.waitWithCancel(AuthDefaults.CODE_VALIDATION_DELAY_MS, cancel)
+            return true
+        } catch (e) {
+            logger.error('2FA error:', extractErrorMessage(e))
+            return false
+        } finally {
+            rl.close()
+        }
+    }
+
+    public async getPassword(isAlternate: boolean): Promise<string> {
+        const rl = readline.createInterface({
+            input: process.stdin,
+            output: process.stdout,
+        })
+        try {
+            const label = isAlternate ? 'alternate master password' : 'master password'
+            return (await rl.question(`Enter your ${label}: `)).trim()
+        } finally {
+            rl.close()
+        }
+    }
+}