@keyneom/sync-kit 0.2.0-rc.6 → 0.2.0-rc.7

package/dist/sharing/appdata-identity-store.d.ts

@@ -0,0 +1,36 @@
+import type { Authorization } from "../core/types.js";
+import { GoogleDriveAppDataStore } from "../stores/google-drive/index.js";
+import { type ProtectedSharingIdentityStore, type ProtectedSharingIdentityV1 } from "./web-passkey.js";
+export type DriveAppDataProtectedSharingIdentityStoreOptions = {
+    /**
+     * Supplies a Drive authorization scoped to `drive.appdata`. The same Google
+     * account on any device returns the same private app-data folder, which is
+     * how a single sharing identity follows the user across devices.
+     */
+    authorization(): Promise<Authorization>;
+    /** Overrides the app-data filename derived from the app id. */
+    filename?(appId: string): string;
+    drive?: GoogleDriveAppDataStore;
+};
+/**
+ * Hosts the passkey-wrapped sharing identity in the signed-in Google account's
+ * private `drive.appdata` folder instead of device-local storage. Because the
+ * record is already AES-GCM-encrypted with the passkey PRF secret, app-data is
+ * a plaintext-safe transport: Drive only ever sees an opaque JSON blob whose
+ * `encryptedPrivateKeys` field it cannot read.
+ *
+ * The single-user, multi-device continuity this restores is deliberately
+ * distinct from the sharing (multi-user) protocol: the identity here is one
+ * account's own key, replicated to its own devices, never granted to another
+ * participant.
+ */
+export declare class DriveAppDataProtectedSharingIdentityStore implements ProtectedSharingIdentityStore {
+    private readonly options;
+    private readonly drive;
+    constructor(options: DriveAppDataProtectedSharingIdentityStoreOptions);
+    load(appId: string): Promise<ProtectedSharingIdentityV1 | null>;
+    save(record: ProtectedSharingIdentityV1): Promise<void>;
+    delete(appId: string): Promise<void>;
+    private filename;
+}
+//# sourceMappingURL=appdata-identity-store.d.ts.map

package/dist/sharing/appdata-identity-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"appdata-identity-store.d.ts","sourceRoot":"","sources":["../../src/sharing/appdata-identity-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EAEL,KAAK,6BAA6B,EAClC,KAAK,0BAA0B,EAChC,MAAM,kBAAkB,CAAC;AAE1B,MAAM,MAAM,gDAAgD,GAAG;IAC7D;;;;OAIG;IACH,aAAa,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC;IACxC,+DAA+D;IAC/D,QAAQ,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IACjC,KAAK,CAAC,EAAE,uBAAuB,CAAC;CACjC,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,qBAAa,yCACX,YAAW,6BAA6B;IAKtC,OAAO,CAAC,QAAQ,CAAC,OAAO;IAH1B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0B;gBAG7B,OAAO,EAAE,gDAAgD;IAKtE,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC;IAQ/D,IAAI,CAAC,MAAM,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC;IAUvD,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAM1C,OAAO,CAAC,QAAQ;CAKjB"}

package/dist/sharing/appdata-identity-store.js

@@ -0,0 +1,49 @@
+import { GoogleDriveAppDataStore } from "../stores/google-drive/index.js";
+import { parseProtectedSharingIdentityV1, } from "./web-passkey.js";
+/**
+ * Hosts the passkey-wrapped sharing identity in the signed-in Google account's
+ * private `drive.appdata` folder instead of device-local storage. Because the
+ * record is already AES-GCM-encrypted with the passkey PRF secret, app-data is
+ * a plaintext-safe transport: Drive only ever sees an opaque JSON blob whose
+ * `encryptedPrivateKeys` field it cannot read.
+ *
+ * The single-user, multi-device continuity this restores is deliberately
+ * distinct from the sharing (multi-user) protocol: the identity here is one
+ * account's own key, replicated to its own devices, never granted to another
+ * participant.
+ */
+export class DriveAppDataProtectedSharingIdentityStore {
+    options;
+    drive;
+    constructor(options) {
+        this.options = options;
+        this.drive = options.drive ?? new GoogleDriveAppDataStore();
+    }
+    async load(appId) {
+        const authorization = await this.options.authorization();
+        const found = await this.drive.find(this.filename(appId), authorization);
+        if (!found)
+            return null;
+        const text = await this.drive.readText(found.fileId, authorization);
+        return parseProtectedSharingIdentityV1(text);
+    }
+    async save(record) {
+        const authorization = await this.options.authorization();
+        const name = this.filename(record.appId);
+        const found = await this.drive.find(name, authorization);
+        await this.drive.write(name, JSON.stringify(record), authorization, {
+            ...(found ? { existingId: found.fileId } : {}),
+            contentType: "application/json",
+        });
+    }
+    async delete(appId) {
+        const authorization = await this.options.authorization();
+        const found = await this.drive.find(this.filename(appId), authorization);
+        if (found)
+            await this.drive.delete(found.fileId, authorization);
+    }
+    filename(appId) {
+        return (this.options.filename?.(appId) ?? `sync-kit-sharing-identity-${appId}.json`);
+    }
+}
+//# sourceMappingURL=appdata-identity-store.js.map

package/dist/sharing/appdata-identity-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appdata-identity-store.js","sourceRoot":"","sources":["../../src/sharing/appdata-identity-store.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,iCAAiC,CAAC;AAC1E,OAAO,EACL,+BAA+B,GAGhC,MAAM,kBAAkB,CAAC;AAc1B;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,yCAAyC;IAMjC;IAHF,KAAK,CAA0B;IAEhD,YACmB,OAAyD;QAAzD,YAAO,GAAP,OAAO,CAAkD;QAE1E,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,uBAAuB,EAAE,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAa;QACtB,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,CAAC;QACzE,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QACpE,OAAO,+BAA+B,CAAC,IAAI,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAkC;QAC3C,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QACzD,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE;YAClE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,WAAW,EAAE,kBAAkB;SAChC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa;QACxB,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QACzD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC,CAAC;QACzE,IAAI,KAAK;YAAE,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAClE,CAAC;IAEO,QAAQ,CAAC,KAAa;QAC5B,OAAO,CACL,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,IAAI,6BAA6B,KAAK,OAAO,CAC5E,CAAC;IACJ,CAAC;CACF"}

package/dist/sharing/migrating-identity-store.d.ts

@@ -0,0 +1,29 @@
+import { type ProtectedSharingIdentityStore, type ProtectedSharingIdentityV1 } from "./web-passkey.js";
+export type MigratingProtectedSharingIdentityStoreOptions = {
+    /** Authoritative store (e.g. `drive.appdata`), read first and always written. */
+    primary: ProtectedSharingIdentityStore;
+    /**
+     * Pre-existing device-local store (e.g. IndexedDB / EncryptedSharedPreferences).
+     * Read only as a fallback; its blob is promoted to `primary` on first hit.
+     */
+    legacy: ProtectedSharingIdentityStore;
+};
+/**
+ * Bridges a device that already holds a passkey-wrapped identity in local
+ * storage to the app-data-hosted substrate without regenerating it. On the
+ * first load after upgrade the legacy blob is promoted to the primary store,
+ * after which the primary store is authoritative and local storage is only a
+ * cache the consumer may keep for a hot path.
+ *
+ * Promotion is best-effort: if the primary write fails (offline, revoked
+ * scope) the legacy identity is still returned, so a returning user never
+ * silently generates a fresh identity and loses access to their dataset.
+ */
+export declare class MigratingProtectedSharingIdentityStore implements ProtectedSharingIdentityStore {
+    private readonly options;
+    constructor(options: MigratingProtectedSharingIdentityStoreOptions);
+    load(appId: string): Promise<ProtectedSharingIdentityV1 | null>;
+    save(record: ProtectedSharingIdentityV1): Promise<void>;
+    delete(appId: string): Promise<void>;
+}
+//# sourceMappingURL=migrating-identity-store.d.ts.map

package/dist/sharing/migrating-identity-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrating-identity-store.d.ts","sourceRoot":"","sources":["../../src/sharing/migrating-identity-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,6BAA6B,EAClC,KAAK,0BAA0B,EAChC,MAAM,kBAAkB,CAAC;AAE1B,MAAM,MAAM,6CAA6C,GAAG;IAC1D,iFAAiF;IACjF,OAAO,EAAE,6BAA6B,CAAC;IACvC;;;OAGG;IACH,MAAM,EAAE,6BAA6B,CAAC;CACvC,CAAC;AAEF;;;;;;;;;;GAUG;AACH,qBAAa,sCACX,YAAW,6BAA6B;IAGtC,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,6CAA6C;IAGnE,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC;IAU/D,IAAI,CAAC,MAAM,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvD,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAI3C"}

package/dist/sharing/migrating-identity-store.js

@@ -0,0 +1,37 @@
+import { parseProtectedSharingIdentityV1, } from "./web-passkey.js";
+/**
+ * Bridges a device that already holds a passkey-wrapped identity in local
+ * storage to the app-data-hosted substrate without regenerating it. On the
+ * first load after upgrade the legacy blob is promoted to the primary store,
+ * after which the primary store is authoritative and local storage is only a
+ * cache the consumer may keep for a hot path.
+ *
+ * Promotion is best-effort: if the primary write fails (offline, revoked
+ * scope) the legacy identity is still returned, so a returning user never
+ * silently generates a fresh identity and loses access to their dataset.
+ */
+export class MigratingProtectedSharingIdentityStore {
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    async load(appId) {
+        const primary = await this.options.primary.load(appId);
+        if (primary)
+            return parseProtectedSharingIdentityV1(primary);
+        const legacy = await this.options.legacy.load(appId);
+        if (!legacy)
+            return null;
+        const record = parseProtectedSharingIdentityV1(legacy);
+        await this.options.primary.save(record).catch(() => undefined);
+        return record;
+    }
+    async save(record) {
+        await this.options.primary.save(record);
+    }
+    async delete(appId) {
+        await this.options.primary.delete(appId);
+        await this.options.legacy.delete(appId).catch(() => undefined);
+    }
+}
+//# sourceMappingURL=migrating-identity-store.js.map

package/dist/sharing/migrating-identity-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrating-identity-store.js","sourceRoot":"","sources":["../../src/sharing/migrating-identity-store.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,+BAA+B,GAGhC,MAAM,kBAAkB,CAAC;AAY1B;;;;;;;;;;GAUG;AACH,MAAM,OAAO,sCAAsC;IAI9B;IADnB,YACmB,OAAsD;QAAtD,YAAO,GAAP,OAAO,CAA+C;IACtE,CAAC;IAEJ,KAAK,CAAC,IAAI,CAAC,KAAa;QACtB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvD,IAAI,OAAO;YAAE,OAAO,+BAA+B,CAAC,OAAO,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,MAAM,GAAG,+BAA+B,CAAC,MAAM,CAAC,CAAC;QACvD,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC/D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAkC;QAC3C,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAa;QACxB,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IACjE,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@keyneom/sync-kit",
-  "version": "0.2.0-rc.6",
+  "version": "0.2.0-rc.7",
   "private": false,
   "description": "Provider-neutral encrypted application-data synchronization with opt-in browser adapters.",
   "keywords": [
@@ -68,6 +68,16 @@
       "import": "./dist/sharing/account-binding.js",
       "default": "./dist/sharing/account-binding.js"
     },
+    "./sharing/appdata-identity-store": {
+      "types": "./dist/sharing/appdata-identity-store.d.ts",
+      "import": "./dist/sharing/appdata-identity-store.js",
+      "default": "./dist/sharing/appdata-identity-store.js"
+    },
+    "./sharing/migrating-identity-store": {
+      "types": "./dist/sharing/migrating-identity-store.d.ts",
+      "import": "./dist/sharing/migrating-identity-store.js",
+      "default": "./dist/sharing/migrating-identity-store.js"
+    },
     "./sharing/lifecycle": {
       "types": "./dist/sharing/lifecycle.d.ts",
       "import": "./dist/sharing/lifecycle.js",
@@ -113,6 +123,7 @@
     "build": "tsc -p tsconfig.build.json",
     "check": "npm run fixtures:check && npm run native:check && npm run parity:check && npm run parity:sharing:check && npm run lint && npm run typecheck && npm test && npm run build && npm run pack:check",
     "fixtures": "node scripts/generate-v1-fixtures.mjs",
+    "fixtures:identity": "npm run build && node scripts/generate-protected-identity-fixture.mjs",
     "fixtures:check": "node scripts/check-v1-fixtures.mjs",
     "native:check": "bash scripts/check-native-sharing-fixture.sh",
     "parity:check": "bash scripts/check-js-kotlin-parity.sh",