@ledgerhq/ledger-key-ring-protocol 0.5.1-fix-build-number-pre.0

package/lib/store.js

@@ -0,0 +1,62 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.memberCredentialsSelector = exports.trustchainSelector = exports.trustchainStoreSelector = exports.setMemberCredentials = exports.setTrustchain = exports.resetTrustchainStore = exports.importTrustchainStoreState = exports.trustchainHandlers = exports.TrustchainHandlerType = exports.trustchainStoreActionTypePrefix = exports.getInitialStore = exports.INITIAL_STATE = void 0;
+exports.INITIAL_STATE = {
+    trustchain: null,
+    memberCredentials: null,
+};
+const getInitialStore = () => {
+    return exports.INITIAL_STATE;
+};
+exports.getInitialStore = getInitialStore;
+exports.trustchainStoreActionTypePrefix = "TRUSTCHAIN_STORE_";
+var TrustchainHandlerType;
+(function (TrustchainHandlerType) {
+    TrustchainHandlerType["TRUSTCHAIN_STORE_IMPORT_STATE"] = "TRUSTCHAIN_STORE_IMPORT_STATE";
+    TrustchainHandlerType["TRUSTCHAIN_STORE_RESET"] = "TRUSTCHAIN_STORE_RESET";
+    TrustchainHandlerType["TRUSTCHAIN_STORE_SET_TRUSTCHAIN"] = "TRUSTCHAIN_STORE_SET_TRUSTCHAIN";
+    TrustchainHandlerType["TRUSTCHAIN_STORE_SET_MEMBER_CREDENTIALS"] = "TRUSTCHAIN_STORE_SET_MEMBER_CREDENTIALS";
+})(TrustchainHandlerType || (exports.TrustchainHandlerType = TrustchainHandlerType = {}));
+exports.trustchainHandlers = {
+    TRUSTCHAIN_STORE_IMPORT_STATE: (_, { payload: { trustchain } }) => {
+        return trustchain;
+    },
+    TRUSTCHAIN_STORE_RESET: () => {
+        return Object.assign({}, (0, exports.getInitialStore)());
+    },
+    TRUSTCHAIN_STORE_SET_TRUSTCHAIN: (state, { payload: { trustchain } }) => {
+        return Object.assign(Object.assign({}, state), { trustchain });
+    },
+    TRUSTCHAIN_STORE_SET_MEMBER_CREDENTIALS: (state, { payload: { memberCredentials } }) => {
+        return Object.assign(Object.assign({}, state), { memberCredentials });
+    },
+};
+// actions
+const importTrustchainStoreState = (trustchain) => ({
+    type: `${exports.trustchainStoreActionTypePrefix}IMPORT_STATE`,
+    payload: { trustchain },
+});
+exports.importTrustchainStoreState = importTrustchainStoreState;
+const resetTrustchainStore = () => ({
+    type: `${exports.trustchainStoreActionTypePrefix}RESET`,
+});
+exports.resetTrustchainStore = resetTrustchainStore;
+const setTrustchain = (trustchain) => ({
+    type: `${exports.trustchainStoreActionTypePrefix}SET_TRUSTCHAIN`,
+    payload: { trustchain },
+});
+exports.setTrustchain = setTrustchain;
+const setMemberCredentials = (memberCredentials) => ({
+    type: `${exports.trustchainStoreActionTypePrefix}SET_MEMBER_CREDENTIALS`,
+    payload: { memberCredentials },
+});
+exports.setMemberCredentials = setMemberCredentials;
+// Local Selectors
+// FIXME: these are not actually local Selector, a localSelector takes a TrustchainStore in param. we will need to rework this.
+const trustchainStoreSelector = (state) => state.trustchain;
+exports.trustchainStoreSelector = trustchainStoreSelector;
+const trustchainSelector = (state) => state.trustchain.trustchain;
+exports.trustchainSelector = trustchainSelector;
+const memberCredentialsSelector = (state) => state.trustchain.memberCredentials;
+exports.memberCredentialsSelector = memberCredentialsSelector;
+//# sourceMappingURL=store.js.map

package/lib/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../src/store.ts"],"names":[],"mappings":";;;AAaa,QAAA,aAAa,GAAoB;IAC5C,UAAU,EAAE,IAAI;IAChB,iBAAiB,EAAE,IAAI;CACxB,CAAC;AAEK,MAAM,eAAe,GAAG,GAAoB,EAAE;IACnD,OAAO,qBAAa,CAAC;AACvB,CAAC,CAAC;AAFW,QAAA,eAAe,mBAE1B;AAEW,QAAA,+BAA+B,GAAG,mBAAmB,CAAC;AAEnE,IAAY,qBAKX;AALD,WAAY,qBAAqB;IAC/B,wFAAgF,CAAA;IAChF,0EAAkE,CAAA;IAClE,4FAAoF,CAAA;IACpF,4GAAoG,CAAA;AACtG,CAAC,EALW,qBAAqB,qCAArB,qBAAqB,QAKhC;AAsBY,QAAA,kBAAkB,GAAuB;IACpD,6BAA6B,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE;QAChE,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,sBAAsB,EAAE,GAAoB,EAAE;QAC5C,yBAAY,IAAA,uBAAe,GAAE,EAAG;IAClC,CAAC;IACD,+BAA+B,EAAE,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE;QACtE,uCAAY,KAAK,KAAE,UAAU,IAAG;IAClC,CAAC;IACD,uCAAuC,EAAE,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,iBAAiB,EAAE,EAAE,EAAE,EAAE;QACrF,uCAAY,KAAK,KAAE,iBAAiB,IAAG;IACzC,CAAC;CACF,CAAC;AAEF,UAAU;AAEH,MAAM,0BAA0B,GAAG,CAAC,UAA2B,EAAE,EAAE,CAAC,CAAC;IAC1E,IAAI,EAAE,GAAG,uCAA+B,cAAc;IACtD,OAAO,EAAE,EAAE,UAAU,EAAE;CACxB,CAAC,CAAC;AAHU,QAAA,0BAA0B,8BAGpC;AAEI,MAAM,oBAAoB,GAAG,GAAG,EAAE,CAAC,CAAC;IACzC,IAAI,EAAE,GAAG,uCAA+B,OAAO;CAChD,CAAC,CAAC;AAFU,QAAA,oBAAoB,wBAE9B;AAEI,MAAM,aAAa,GAAG,CAAC,UAAsB,EAAE,EAAE,CAAC,CAAC;IACxD,IAAI,EAAE,GAAG,uCAA+B,gBAAgB;IACxD,OAAO,EAAE,EAAE,UAAU,EAAE;CACxB,CAAC,CAAC;AAHU,QAAA,aAAa,iBAGvB;AAEI,MAAM,oBAAoB,GAAG,CAAC,iBAAoC,EAAE,EAAE,CAAC,CAAC;IAC7E,IAAI,EAAE,GAAG,uCAA+B,wBAAwB;IAChE,OAAO,EAAE,EAAE,iBAAiB,EAAE;CAC/B,CAAC,CAAC;AAHU,QAAA,oBAAoB,wBAG9B;AAEH,kBAAkB;AAClB,+HAA+H;AAExH,MAAM,uBAAuB,GAAG,CAAC,KAAsC,EAAmB,EAAE,CACjG,KAAK,CAAC,UAAU,CAAC;AADN,QAAA,uBAAuB,2BACjB;AAEZ,MAAM,kBAAkB,GAAG,CAAC,KAAsC,EAAqB,EAAE,CAC9F,KAAK,CAAC,UAAU,CAAC,UAAU,CAAC;AADjB,QAAA,kBAAkB,sBACD;AAEvB,MAAM,yBAAyB,GAAG,CAAC,KAEzC,EAA4B,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,iBAAiB,CAAC;AAFtD,QAAA,yBAAyB,6BAE6B"}

package/lib/types.d.ts

@@ -0,0 +1,181 @@
+import { Observable } from "rxjs";
+import Transport from "@ledgerhq/hw-transport";
+import { TrustchainsResponse } from "./api";
+/**
+ * The JWT is a JSON Web Token that is used to authenticate the user.
+ */
+export type JWT = {
+    accessToken: string;
+    permissions: {
+        [trustchainId: string]: {
+            [path: string]: string[];
+        };
+    };
+};
+/**
+ * A function which allow all interactions with the hardware device.
+ */
+export type WithDevice = (deviceId: string, options?: {
+    openTimeoutMs?: number;
+}) => <T>(fn: (transport: Transport) => Observable<T>) => Observable<T>;
+/**
+ * A Trustchain contains the identifier and the contextual data we need to manage members and encrypt/decrypt data.
+ */
+export type Trustchain = {
+    /**
+     * The immutable id of the trustchain root
+     */
+    rootId: string;
+    /**
+     * The secret used to encrypt/decrypt the wallet sync data
+     */
+    walletSyncEncryptionKey: string;
+    /**
+     * The derivation path on which the current walletSyncEncryptionKey value is stored
+     */
+    applicationPath: string;
+};
+/**
+ * The Trustchain member credentials are stored on each client, with the privatekey only known by the current client.
+ */
+export type MemberCredentials = {
+    /**
+     * The public key of the member (in hexadecimal)
+     */
+    pubkey: string;
+    /**
+     * The private key of the member (in hexadecimal)
+     */
+    privatekey: string;
+};
+/**
+ * A member of the trustchain
+ */
+export type TrustchainMember = {
+    /**
+     * The id of the member. It corresponds to the MemberCredentials.pubkey
+     */
+    id: string;
+    /**
+     * The name of the member as displayed in the UI
+     */
+    name: string;
+    /**
+     * a technical permissions of the member. it will often just be Permissions.OWNER
+     */
+    permissions: number;
+};
+/**
+ * The TrustchainSDKContext is a context that is used to initialize the TrustchainSDK.
+ */
+export type TrustchainSDKContext = {
+    applicationId: number;
+    name: string;
+    apiBaseUrl: string;
+};
+/**
+ * provide global callbacks for specific lifecycles.
+ * this allows us to decouple trustchain with the rest of Ledger Live.
+ * For now, we only introduce very specific hooks we need.
+ */
+export type TrustchainLifecycle = {
+    /**
+     * called when a trustchain rotation is occuring
+     * the first function is called when the rotation is starting
+     * the second function is called when the rotation is done.
+     *
+     * in that case, we typically want to delete all other resources depending on it.
+     * we do this with the existing jwt token before refreshing it.
+     */
+    onTrustchainRotation: (trustchainSdk: TrustchainSDK, oldTrustchain: Trustchain, memberCredentials: MemberCredentials) => Promise<(newTrustchain: Trustchain) => Promise<void>>;
+};
+export declare enum TrustchainResultType {
+    created = "created",
+    updated = "updated",
+    restored = "restored"
+}
+/**
+ * the trustchain with a result type indicating what happened during getOrCreateTrustchain
+ */
+export type TrustchainResult = {
+    type: TrustchainResultType.created;
+    trustchain: Trustchain;
+} | {
+    type: TrustchainResultType.updated;
+    trustchain: Trustchain;
+} | {
+    type: TrustchainResultType.restored;
+    trustchain: Trustchain;
+};
+/**
+ * cache (default): the SDK will use the cached JWT if it's still valid, otherwise it will refresh it.
+ * refresh: the SDK will always refresh the JWT if possible.
+ * no-cache: the SDK will always request a new JWT.
+ */
+export type AuthCachePolicy = "no-cache" | "refresh" | "cache";
+/**
+ * The main interface for the UI to interact with the trustchain protocol.
+ *
+ * @example
+ *
+ * import { sdk } from "@ledgerhq/ledger-key-ring-protocol";
+ *
+ * sdk.getOrCreateTrustchain(deviceId, memberCredentials).then(trustchain => console.log(trustchain));
+ */
+export interface TrustchainSDK {
+    /**
+     * Generate the live credentials that represents a Live instance, member of the trustchain.
+     * This method is expected to be used the first time Ledger Live is opened (if Live never generated them before) and then persisted over the future user sessions of Ledger Live in order for the member to be able to authenticate and manage the trustchain.
+     */
+    initMemberCredentials(): Promise<MemberCredentials>;
+    /**
+     * Access a JWT from the TrustchainSDK. manage the reauthentication if needed.
+     * A trustchain must have been created and the Live instance must have been added as a member.
+     * The returned token will typically be used for regular operations like wallet sync.
+     */
+    withAuth<T>(trustchain: Trustchain, memberCredentials: MemberCredentials, f: (jwt: JWT) => Promise<T>, policy?: AuthCachePolicy, ignorePermissionsChecks?: boolean): Promise<T>;
+    /**
+     * This method will either create the required trustchains (root and application) or restore them.
+     * The returned trustchain will be initialized on the root level and also will have the branch derivation corresponding to the contextual applicationId.
+     * It will also have the wallet sync encryption key initialized.
+     * The latest jwt is also returned because it was potentially updated during the process.
+     */
+    getOrCreateTrustchain(deviceId: string, memberCredentials: MemberCredentials, callbacks?: GetOrCreateTrustchainCallbacks, topic?: Uint8Array, currentTrustchain?: Trustchain): Promise<TrustchainResult>;
+    /**
+     * Restore the current trustchain encryption key, typically due to a key rotation.
+     */
+    restoreTrustchain(trustchain: Trustchain, memberCredentials: MemberCredentials): Promise<Trustchain>;
+    /**
+     * list the current members of the application trustchain
+     */
+    getMembers(trustchain: Trustchain, memberCredentials: MemberCredentials): Promise<TrustchainMember[]>;
+    /**
+     * remove a member from the application trustchain
+     */
+    removeMember(deviceId: string, trustchain: Trustchain, memberCredentials: MemberCredentials, member: TrustchainMember, callbacks?: TrustchainDeviceCallbacks): Promise<Trustchain>;
+    /**
+     * add a member to the application trustchain
+     */
+    addMember(trustchain: Trustchain, memberCredentials: MemberCredentials, member: TrustchainMember): Promise<void>;
+    /**
+     * destroy the trustchain
+     */
+    destroyTrustchain(trustchain: Trustchain, memberCredentials: MemberCredentials): Promise<void>;
+    /**
+     * encrypt data with the trustchain encryption key
+     */
+    encryptUserData(trustchain: Trustchain, obj: object): Promise<Uint8Array>;
+    /**
+     * decrypt data with the trustchain encryption key
+     */
+    decryptUserData(trustchain: Trustchain, data: Uint8Array): Promise<Uint8Array>;
+    invalidateJwt(): void;
+}
+export interface TrustchainDeviceCallbacks {
+    onStartRequestUserInteraction?: () => void;
+    onEndRequestUserInteraction?: () => void;
+}
+export interface GetOrCreateTrustchainCallbacks extends TrustchainDeviceCallbacks {
+    onInitialResponse?: (trustchains: TrustchainsResponse) => void;
+}
+//# sourceMappingURL=types.d.ts.map

package/lib/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,MAAM,CAAC;AAClC,OAAO,SAAS,MAAM,wBAAwB,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,OAAO,CAAC;AAE5C;;GAEG;AACH,MAAM,MAAM,GAAG,GAAG;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE;QACX,CAAC,YAAY,EAAE,MAAM,GAAG;YACtB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;SAC1B,CAAC;KACH,CAAC;CACH,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,CACvB,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,KACjC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,SAAS,EAAE,SAAS,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC;AAEvE;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,uBAAuB,EAAE,MAAM,CAAC;IAChC;;OAEG;IACH,eAAe,EAAE,MAAM,CAAC;CACzB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG;IAC9B;;OAEG;IACH,MAAM,EAAE,MAAM,CAAC;IACf;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B;;OAEG;IACH,EAAE,EAAE,MAAM,CAAC;IACX;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IACb;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF;;GAEG;AACH,MAAM,MAAM,oBAAoB,GAAG;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC;;;;;;;OAOG;IACH,oBAAoB,EAAE,CACpB,aAAa,EAAE,aAAa,EAC5B,aAAa,EAAE,UAAU,EACzB,iBAAiB,EAAE,iBAAiB,KACjC,OAAO,CAAC,CAAC,aAAa,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;CAC5D,CAAC;AAEF,oBAAY,oBAAoB;IAC9B,OAAO,YAAY;IACnB,OAAO,YAAY;IACnB,QAAQ,aAAa;CACtB;AAED;;GAEG;AACH,MAAM,MAAM,gBAAgB,GACxB;IAEE,IAAI,EAAE,oBAAoB,CAAC,OAAO,CAAC;IACnC,UAAU,EAAE,UAAU,CAAC;CACxB,GACD;IAEE,IAAI,EAAE,oBAAoB,CAAC,OAAO,CAAC;IACnC,UAAU,EAAE,UAAU,CAAC;CACxB,GACD;IAEE,IAAI,EAAE,oBAAoB,CAAC,QAAQ,CAAC;IACpC,UAAU,EAAE,UAAU,CAAC;CACxB,CAAC;AAEN;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,SAAS,GAAG,OAAO,CAAC;AAE/D;;;;;;;;GAQG;AACH,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,qBAAqB,IAAI,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAEpD;;;;OAIG;IACH,QAAQ,CAAC,CAAC,EACR,UAAU,EAAE,UAAU,EACtB,iBAAiB,EAAE,iBAAiB,EACpC,CAAC,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,EAC3B,MAAM,CAAC,EAAE,eAAe,EACxB,uBAAuB,CAAC,EAAE,OAAO,GAChC,OAAO,CAAC,CAAC,CAAC,CAAC;IAEd;;;;;OAKG;IACH,qBAAqB,CACnB,QAAQ,EAAE,MAAM,EAChB,iBAAiB,EAAE,iBAAiB,EACpC,SAAS,CAAC,EAAE,8BAA8B,EAC1C,KAAK,CAAC,EAAE,UAAU,EAClB,iBAAiB,CAAC,EAAE,UAAU,GAC7B,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAE7B;;OAEG;IACH,iBAAiB,CACf,UAAU,EAAE,UAAU,EACtB,iBAAiB,EAAE,iBAAiB,GACnC,OAAO,CAAC,UAAU,CAAC,CAAC;IAEvB;;OAEG;IACH,UAAU,CACR,UAAU,EAAE,UAAU,EACtB,iBAAiB,EAAE,iBAAiB,GACnC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAE/B;;OAEG;IACH,YAAY,CACV,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,UAAU,EACtB,iBAAiB,EAAE,iBAAiB,EACpC,MAAM,EAAE,gBAAgB,EACxB,SAAS,CAAC,EAAE,yBAAyB,GACpC,OAAO,CAAC,UAAU,CAAC,CAAC;IAEvB;;OAEG;IACH,SAAS,CACP,UAAU,EAAE,UAAU,EACtB,iBAAiB,EAAE,iBAAiB,EACpC,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;OAEG;IACH,iBAAiB,CAAC,UAAU,EAAE,UAAU,EAAE,iBAAiB,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE/F;;OAEG;IACH,eAAe,CAAC,UAAU,EAAE,UAAU,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAE1E;;OAEG;IACH,eAAe,CAAC,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IAE/E,aAAa,IAAI,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,yBAAyB;IACxC,6BAA6B,CAAC,EAAE,MAAM,IAAI,CAAC;IAC3C,2BAA2B,CAAC,EAAE,MAAM,IAAI,CAAC;CAC1C;AAED,MAAM,WAAW,8BAA+B,SAAQ,yBAAyB;IAC/E,iBAAiB,CAAC,EAAE,CAAC,WAAW,EAAE,mBAAmB,KAAK,IAAI,CAAC;CAChE"}

package/lib/types.js

@@ -0,0 +1,10 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TrustchainResultType = void 0;
+var TrustchainResultType;
+(function (TrustchainResultType) {
+    TrustchainResultType["created"] = "created";
+    TrustchainResultType["updated"] = "updated";
+    TrustchainResultType["restored"] = "restored";
+})(TrustchainResultType || (exports.TrustchainResultType = TrustchainResultType = {}));
+//# sourceMappingURL=types.js.map

package/lib/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":";;;AAwGA,IAAY,oBAIX;AAJD,WAAY,oBAAoB;IAC9B,2CAAmB,CAAA;IACnB,2CAAmB,CAAA;IACnB,6CAAqB,CAAA;AACvB,CAAC,EAJW,oBAAoB,oCAApB,oBAAoB,QAI/B"}

package/lib-es/HWDeviceProvider.d.ts

@@ -0,0 +1,25 @@
+import { ApduDevice } from "@ledgerhq/hw-ledger-key-ring-protocol/ApduDevice";
+import { AuthCachePolicy, JWT, TrustchainDeviceCallbacks, WithDevice } from "./types";
+export declare class HWDeviceProvider {
+    /**
+     * TODO withDevice should be imported statically from @ledgerhq/live-common/hw/deviceAccess
+     *
+     * but ATM making @ledgerhq/live-common a dependency of @ledgerhq/ledger-key-ring-protocol causes:
+     * > Turbo error: Invalid package dependency graph: cyclic dependency detected:
+     * >   @ledgerhq/ledger-key-ring-protocol,@ledgerhq/live-wallet,@ledgerhq/live-common
+     *
+     * Maybe hw/deviceAccess.ts and hw/index.ts could be moved to @ledgerhq/devices
+     * This would break the cyclic dependency as @ledgerhq/live-common would depend on @ledgerhq/devices
+     * but not the other way around.
+     */
+    private withDevice;
+    private jwt?;
+    private api;
+    constructor(apiBaseURL: string, withDevice: WithDevice);
+    withJwt<T>(deviceId: string, job: (jwt: JWT) => Promise<T>, policy?: AuthCachePolicy, callbacks?: TrustchainDeviceCallbacks): Promise<T>;
+    withHw<T>(deviceId: string, job: (hw: ApduDevice) => Promise<T>, callbacks?: TrustchainDeviceCallbacks): Promise<T>;
+    refreshJwt(deviceId: string, callbacks?: TrustchainDeviceCallbacks): Promise<void>;
+    clearJwt(): void;
+    private _authWithDevice;
+}
+//# sourceMappingURL=HWDeviceProvider.d.ts.map

package/lib-es/HWDeviceProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"HWDeviceProvider.d.ts","sourceRoot":"","sources":["../src/HWDeviceProvider.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,kDAAkD,CAAC;AAK9E,OAAO,EAAE,eAAe,EAAE,GAAG,EAAE,yBAAyB,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAGtF,qBAAa,gBAAgB;IAC3B;;;;;;;;;;OAUG;IACH,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,GAAG,CAAC,CAAM;IAClB,OAAO,CAAC,GAAG,CAA4B;gBAE3B,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU;IAK/C,OAAO,CAAC,CAAC,EACd,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,EAC7B,MAAM,CAAC,EAAE,eAAe,EACxB,SAAS,CAAC,EAAE,yBAAyB,GACpC,OAAO,CAAC,CAAC,CAAC;IAaA,MAAM,CAAC,CAAC,EACnB,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,CAAC,EAAE,EAAE,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,EACnC,SAAS,CAAC,EAAE,yBAAyB,GACpC,OAAO,CAAC,CAAC,CAAC;IA0BA,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,yBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIxF,QAAQ;YAID,eAAe;CAiB9B"}

package/lib-es/HWDeviceProvider.js

@@ -0,0 +1,81 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import { from, lastValueFrom } from "rxjs";
+import { UserRefusedOnDevice } from "@ledgerhq/errors";
+import { StatusCodes, TransportStatusError } from "@ledgerhq/hw-transport";
+import { crypto, device } from "@ledgerhq/hw-ledger-key-ring-protocol";
+import getApi from "./api";
+import { genericWithJWT } from "./auth";
+import { TrustchainNotAllowed } from "./errors";
+export class HWDeviceProvider {
+    constructor(apiBaseURL, withDevice) {
+        this.api = getApi(apiBaseURL);
+        this.withDevice = withDevice;
+    }
+    withJwt(deviceId, job, policy, callbacks) {
+        return genericWithJWT(jwt => {
+            this.jwt = jwt;
+            return job(jwt);
+        }, this.jwt, () => this._authWithDevice(deviceId, callbacks), (jwt) => this.api.refreshAuth(jwt), policy);
+    }
+    withHw(deviceId, job, callbacks) {
+        return __awaiter(this, void 0, void 0, function* () {
+            var _a, _b;
+            (_a = callbacks === null || callbacks === void 0 ? void 0 : callbacks.onStartRequestUserInteraction) === null || _a === void 0 ? void 0 : _a.call(callbacks);
+            const runWithDevice = this.withDevice(deviceId);
+            try {
+                return yield lastValueFrom(runWithDevice(transport => from(job(device.apdu(transport)))));
+            }
+            catch (error) {
+                if (!(error instanceof TransportStatusError)) {
+                    throw error;
+                }
+                switch (error.statusCode) {
+                    case StatusCodes.USER_REFUSED_ON_DEVICE:
+                    case StatusCodes.CONDITIONS_OF_USE_NOT_SATISFIED:
+                        throw new UserRefusedOnDevice();
+                    case StatusCodes.TRUSTCHAIN_WRONG_SEED:
+                        this.clearJwt();
+                        throw new TrustchainNotAllowed();
+                    default:
+                        throw error;
+                }
+            }
+            finally {
+                (_b = callbacks === null || callbacks === void 0 ? void 0 : callbacks.onEndRequestUserInteraction) === null || _b === void 0 ? void 0 : _b.call(callbacks);
+            }
+        });
+    }
+    refreshJwt(deviceId, callbacks) {
+        return __awaiter(this, void 0, void 0, function* () {
+            this.jwt = yield this.withJwt(deviceId, this.api.refreshAuth, "cache", callbacks);
+        });
+    }
+    clearJwt() {
+        this.jwt = undefined;
+    }
+    _authWithDevice(deviceId, callbacks) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const challenge = yield this.api.getAuthenticationChallenge();
+            const data = crypto.from_hex(challenge.tlv);
+            const seedId = yield this.withHw(deviceId, hw => hw.getSeedId(data), callbacks);
+            const signature = crypto.to_hex(seedId.signature);
+            return this.api.postChallengeResponse({
+                challenge: challenge.json,
+                signature: {
+                    credential: seedId.pubkeyCredential.toJSON(),
+                    signature,
+                    attestation: crypto.to_hex(seedId.attestationResult),
+                },
+            });
+        });
+    }
+}
+//# sourceMappingURL=HWDeviceProvider.js.map

package/lib-es/HWDeviceProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"HWDeviceProvider.js","sourceRoot":"","sources":["../src/HWDeviceProvider.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,MAAM,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEvD,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC3E,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,uCAAuC,CAAC;AACvE,OAAO,MAAM,MAAM,OAAO,CAAC;AAC3B,OAAO,EAAE,cAAc,EAAE,MAAM,QAAQ,CAAC;AAExC,OAAO,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAEhD,MAAM,OAAO,gBAAgB;IAgB3B,YAAY,UAAkB,EAAE,UAAsB;QACpD,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;QAC9B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAEM,OAAO,CACZ,QAAgB,EAChB,GAA6B,EAC7B,MAAwB,EACxB,SAAqC;QAErC,OAAO,cAAc,CACnB,GAAG,CAAC,EAAE;YACJ,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;YACf,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;QAClB,CAAC,EACD,IAAI,CAAC,GAAG,EACR,GAAG,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,SAAS,CAAC,EAC/C,CAAC,GAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,EACvC,MAAM,CACP,CAAC;IACJ,CAAC;IAEY,MAAM,CACjB,QAAgB,EAChB,GAAmC,EACnC,SAAqC;;;YAErC,MAAA,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,6BAA6B,yDAAI,CAAC;YAC7C,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YAChD,IAAI,CAAC;gBACH,OAAO,MAAM,aAAa,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5F,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,CAAC,KAAK,YAAY,oBAAoB,CAAC,EAAE,CAAC;oBAC7C,MAAM,KAAK,CAAC;gBACd,CAAC;gBACD,QAAQ,KAAK,CAAC,UAAU,EAAE,CAAC;oBACzB,KAAK,WAAW,CAAC,sBAAsB,CAAC;oBACxC,KAAK,WAAW,CAAC,+BAA+B;wBAC9C,MAAM,IAAI,mBAAmB,EAAE,CAAC;oBAElC,KAAK,WAAW,CAAC,qBAAqB;wBACpC,IAAI,CAAC,QAAQ,EAAE,CAAC;wBAChB,MAAM,IAAI,oBAAoB,EAAE,CAAC;oBAEnC;wBACE,MAAM,KAAK,CAAC;gBAChB,CAAC;YACH,CAAC;oBAAS,CAAC;gBACT,MAAA,SAAS,aAAT,SAAS,uBAAT,SAAS,CAAE,2BAA2B,yDAAI,CAAC;YAC7C,CAAC;QACH,CAAC;KAAA;IAEY,UAAU,CAAC,QAAgB,EAAE,SAAqC;;YAC7E,IAAI,CAAC,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC;QACpF,CAAC;KAAA;IAEM,QAAQ;QACb,IAAI,CAAC,GAAG,GAAG,SAAS,CAAC;IACvB,CAAC;IAEa,eAAe,CAC3B,QAAgB,EAChB,SAAqC;;YAErC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,0BAA0B,EAAE,CAAC;YAC9D,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;YAChF,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAClD,OAAO,IAAI,CAAC,GAAG,CAAC,qBAAqB,CAAC;gBACpC,SAAS,EAAE,SAAS,CAAC,IAAI;gBACzB,SAAS,EAAE;oBACT,UAAU,EAAE,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAE;oBAC5C,SAAS;oBACT,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC;iBACrD;aACF,CAAC,CAAC;QACL,CAAC;KAAA;CACF"}

package/lib-es/api.d.ts

@@ -0,0 +1,77 @@
+import { JWT } from "./types";
+export type StatusAPIResponse = {
+    name: string;
+    version: string;
+};
+export type APIJWT = {
+    access_token: string;
+    permissions: {
+        [trustchainId: string]: {
+            [path: string]: string[];
+        };
+    };
+};
+export type Challenge = {
+    version: number;
+    challenge: {
+        data: string;
+        expiry: string;
+    };
+    host: string;
+    rp: {
+        credential: {
+            version: number;
+            curveId: number;
+            signAlgorithm: number;
+            publicKey: string;
+        };
+        signature: string;
+    }[];
+    protocolVersion: {
+        major: number;
+        minor: number;
+        patch: number;
+    };
+};
+export type ChallengeSignature = {
+    credential: {
+        version: number;
+        curveId: number;
+        signAlgorithm: number;
+        publicKey: string;
+    };
+    signature: string;
+    attestation: string;
+};
+export type TrustchainsResponse = {
+    [trustchainId: string]: {
+        [path: string]: string[];
+    };
+};
+export type TrustchainResponse = {
+    [key: string]: string;
+};
+export type PutCommandsRequest = {
+    path: string;
+    blocks: string[];
+};
+declare const getApi: (apiBaseURL: string) => {
+    getAuthenticationChallenge: () => Promise<{
+        json: Challenge;
+        tlv: string;
+    }>;
+    postChallengeResponse: (request: {
+        challenge: Challenge;
+        signature: ChallengeSignature;
+    }) => Promise<JWT>;
+    refreshAuth: (jwt: JWT) => Promise<JWT>;
+    getTrustchains: (jwt: JWT) => Promise<TrustchainsResponse>;
+    getTrustchain: (jwt: JWT, trustchain_id: string) => Promise<TrustchainResponse>;
+    postDerivation: (jwt: JWT, trustchain_id: string, commandStream: string) => Promise<void>;
+    postSeed: (jwt: JWT, commandStream: string) => Promise<void>;
+    putCommands: (jwt: JWT, trustchain_id: string, request: PutCommandsRequest) => Promise<void>;
+    deleteTrustchain: (jwt: JWT, trustchain_id: string) => Promise<void>;
+    fetchStatus: () => Promise<StatusAPIResponse>;
+};
+export default getApi;
+//# sourceMappingURL=api.d.ts.map

package/lib-es/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,MAAM,SAAS,CAAC;AAE9B,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,MAAM,GAAG;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE;QACX,CAAC,YAAY,EAAE,MAAM,GAAG;YACtB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;SAC1B,CAAC;KACH,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE;QACT,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE;QACF,UAAU,EAAE;YACV,OAAO,EAAE,MAAM,CAAC;YAChB,OAAO,EAAE,MAAM,CAAC;YAChB,aAAa,EAAE,MAAM,CAAC;YACtB,SAAS,EAAE,MAAM,CAAC;SACnB,CAAC;QACF,SAAS,EAAE,MAAM,CAAC;KACnB,EAAE,CAAC;IACJ,eAAe,EAAE;QACf,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;QACd,KAAK,EAAE,MAAM,CAAC;KACf,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,UAAU,EAAE;QACV,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,aAAa,EAAE,MAAM,CAAC;QACtB,SAAS,EAAE,MAAM,CAAC;KACnB,CAAC;IACF,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG;IAChC,CAAC,YAAY,EAAE,MAAM,GAAG;QACtB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;KAC1B,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CAAC;AAEF,QAAA,MAAM,MAAM,eAAgB,MAAM;sCACa,QAAQ;QAAE,IAAI,EAAE,SAAS,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC;qCAQxC;QAC5C,SAAS,EAAE,SAAS,CAAC;QACrB,SAAS,EAAE,kBAAkB,CAAC;KAC/B,KAAG,QAAQ,GAAG,CAAC;uBAYgB,GAAG,KAAG,QAAQ,GAAG,CAAC;0BAcf,GAAG,KAAG,QAAQ,mBAAmB,CAAC;yBAWnC,GAAG,iBAAiB,MAAM,KAAG,QAAQ,kBAAkB,CAAC;0BAYnF,GAAG,iBACO,MAAM,iBACN,MAAM,KACpB,QAAQ,IAAI,CAAC;oBAYa,GAAG,iBAAiB,MAAM,KAAG,QAAQ,IAAI,CAAC;uBAahE,GAAG,iBACO,MAAM,WACZ,kBAAkB,KAC1B,QAAQ,IAAI,CAAC;4BAWqB,GAAG,iBAAiB,MAAM,KAAG,QAAQ,IAAI,CAAC;uBAUjD,QAAQ,iBAAiB,CAAC;CAoBzD,CAAC;AAEF,eAAe,MAAM,CAAC"}

package/lib-es/api.js

@@ -0,0 +1,145 @@
+var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
+    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
+    return new (P || (P = Promise))(function (resolve, reject) {
+        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
+        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
+        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
+        step((generator = generator.apply(thisArg, _arguments || [])).next());
+    });
+};
+import network from "@ledgerhq/live-network";
+const getApi = (apiBaseURL) => {
+    function getAuthenticationChallenge() {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { data } = yield network({
+                url: `${apiBaseURL}/v1/challenge`,
+                method: "GET",
+            });
+            return data;
+        });
+    }
+    function postChallengeResponse(request) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { data } = yield network({
+                url: `${apiBaseURL}/v1/authenticate`,
+                method: "POST",
+                data: request,
+            });
+            return {
+                accessToken: data.access_token,
+                permissions: data.permissions,
+            };
+        });
+    }
+    function refreshAuth(jwt) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { data } = yield network({
+                url: `${apiBaseURL}/v1/refresh`,
+                method: "GET",
+                headers: {
+                    Authorization: `Bearer ${jwt.accessToken}`,
+                },
+            });
+            return {
+                accessToken: data.access_token,
+                permissions: data.permissions,
+            };
+        });
+    }
+    function getTrustchains(jwt) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { data } = yield network({
+                url: `${apiBaseURL}/v1/trustchains`,
+                method: "GET",
+                headers: {
+                    Authorization: `Bearer ${jwt.accessToken}`,
+                },
+            });
+            return data;
+        });
+    }
+    function getTrustchain(jwt, trustchain_id) {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { data } = yield network({
+                url: `${apiBaseURL}/v1/trustchain/${trustchain_id}`,
+                method: "GET",
+                headers: {
+                    Authorization: `Bearer ${jwt.accessToken}`,
+                },
+            });
+            return data;
+        });
+    }
+    function postDerivation(jwt, trustchain_id, commandStream) {
+        return __awaiter(this, void 0, void 0, function* () {
+            yield network({
+                url: `${apiBaseURL}/v1/trustchain/${trustchain_id}/derivation`,
+                method: "POST",
+                headers: {
+                    Authorization: `Bearer ${jwt.accessToken}`,
+                    "Content-Type": "application/json",
+                },
+                data: commandStream,
+            });
+        });
+    }
+    function postSeed(jwt, commandStream) {
+        return __awaiter(this, void 0, void 0, function* () {
+            yield network({
+                url: `${apiBaseURL}/v1/seed`,
+                method: "POST",
+                headers: {
+                    "Content-Type": "application/json",
+                    Authorization: `Bearer ${jwt.accessToken}`,
+                },
+                data: commandStream,
+            });
+        });
+    }
+    function putCommands(jwt, trustchain_id, request) {
+        return __awaiter(this, void 0, void 0, function* () {
+            yield network({
+                url: `${apiBaseURL}/v1/trustchain/${trustchain_id}/commands`,
+                method: "PUT",
+                headers: {
+                    Authorization: `Bearer ${jwt.accessToken}`,
+                },
+                data: request,
+            });
+        });
+    }
+    function deleteTrustchain(jwt, trustchain_id) {
+        return __awaiter(this, void 0, void 0, function* () {
+            yield network({
+                url: `${apiBaseURL}/v1/trustchain/${trustchain_id}`,
+                method: "DELETE",
+                headers: {
+                    Authorization: `Bearer ${jwt.accessToken}`,
+                },
+            });
+        });
+    }
+    function fetchStatus() {
+        return __awaiter(this, void 0, void 0, function* () {
+            const { data } = yield network({
+                url: `${apiBaseURL}/_info`,
+                method: "GET",
+            });
+            return data;
+        });
+    }
+    return {
+        getAuthenticationChallenge,
+        postChallengeResponse,
+        refreshAuth,
+        getTrustchains,
+        getTrustchain,
+        postDerivation,
+        postSeed,
+        putCommands,
+        deleteTrustchain,
+        fetchStatus,
+    };
+};
+export default getApi;
+//# sourceMappingURL=api.js.map

package/lib-es/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,OAAO,MAAM,wBAAwB,CAAC;AAkE7C,MAAM,MAAM,GAAG,CAAC,UAAkB,EAAE,EAAE;IACpC,SAAe,0BAA0B;;YACvC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CAAmC;gBAC/D,GAAG,EAAE,GAAG,UAAU,eAAe;gBACjC,MAAM,EAAE,KAAK;aACd,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;KAAA;IAED,SAAe,qBAAqB,CAAC,OAGpC;;YACC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CAAS;gBACrC,GAAG,EAAE,GAAG,UAAU,kBAAkB;gBACpC,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,OAAO;aACd,CAAC,CAAC;YACH,OAAO;gBACL,WAAW,EAAE,IAAI,CAAC,YAAY;gBAC9B,WAAW,EAAE,IAAI,CAAC,WAAW;aAC9B,CAAC;QACJ,CAAC;KAAA;IAED,SAAe,WAAW,CAAC,GAAQ;;YACjC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CAAS;gBACrC,GAAG,EAAE,GAAG,UAAU,aAAa;gBAC/B,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,GAAG,CAAC,WAAW,EAAE;iBAC3C;aACF,CAAC,CAAC;YACH,OAAO;gBACL,WAAW,EAAE,IAAI,CAAC,YAAY;gBAC9B,WAAW,EAAE,IAAI,CAAC,WAAW;aAC9B,CAAC;QACJ,CAAC;KAAA;IAED,SAAe,cAAc,CAAC,GAAQ;;YACpC,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CAAsB;gBAClD,GAAG,EAAE,GAAG,UAAU,iBAAiB;gBACnC,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,GAAG,CAAC,WAAW,EAAE;iBAC3C;aACF,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;KAAA;IAED,SAAe,aAAa,CAAC,GAAQ,EAAE,aAAqB;;YAC1D,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CAAqB;gBACjD,GAAG,EAAE,GAAG,UAAU,kBAAkB,aAAa,EAAE;gBACnD,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,GAAG,CAAC,WAAW,EAAE;iBAC3C;aACF,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;KAAA;IAED,SAAe,cAAc,CAC3B,GAAQ,EACR,aAAqB,EACrB,aAAqB;;YAErB,MAAM,OAAO,CAAO;gBAClB,GAAG,EAAE,GAAG,UAAU,kBAAkB,aAAa,aAAa;gBAC9D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,GAAG,CAAC,WAAW,EAAE;oBAC1C,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,aAAa;aACpB,CAAC,CAAC;QACL,CAAC;KAAA;IAED,SAAe,QAAQ,CAAC,GAAQ,EAAE,aAAqB;;YACrD,MAAM,OAAO,CAAO;gBAClB,GAAG,EAAE,GAAG,UAAU,UAAU;gBAC5B,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,aAAa,EAAE,UAAU,GAAG,CAAC,WAAW,EAAE;iBAC3C;gBACD,IAAI,EAAE,aAAa;aACpB,CAAC,CAAC;QACL,CAAC;KAAA;IAED,SAAe,WAAW,CACxB,GAAQ,EACR,aAAqB,EACrB,OAA2B;;YAE3B,MAAM,OAAO,CAAO;gBAClB,GAAG,EAAE,GAAG,UAAU,kBAAkB,aAAa,WAAW;gBAC5D,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,GAAG,CAAC,WAAW,EAAE;iBAC3C;gBACD,IAAI,EAAE,OAAO;aACd,CAAC,CAAC;QACL,CAAC;KAAA;IAED,SAAe,gBAAgB,CAAC,GAAQ,EAAE,aAAqB;;YAC7D,MAAM,OAAO,CAAO;gBAClB,GAAG,EAAE,GAAG,UAAU,kBAAkB,aAAa,EAAE;gBACnD,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,GAAG,CAAC,WAAW,EAAE;iBAC3C;aACF,CAAC,CAAC;QACL,CAAC;KAAA;IAED,SAAe,WAAW;;YACxB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,OAAO,CAAoB;gBAChD,GAAG,EAAE,GAAG,UAAU,QAAQ;gBAC1B,MAAM,EAAE,KAAK;aACd,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;KAAA;IAED,OAAO;QACL,0BAA0B;QAC1B,qBAAqB;QACrB,WAAW;QACX,cAAc;QACd,aAAa;QACb,cAAc;QACd,QAAQ;QACR,WAAW;QACX,gBAAgB;QAChB,WAAW;KACZ,CAAC;AACJ,CAAC,CAAC;AAEF,eAAe,MAAM,CAAC"}

package/lib-es/auth.d.ts

@@ -0,0 +1,3 @@
+import { AuthCachePolicy, JWT } from "./types";
+export declare function genericWithJWT<T>(job: (jwt: JWT) => Promise<T>, initialJWT: JWT | undefined, auth: () => Promise<JWT>, refreshAuth: (jw: JWT) => Promise<JWT>, policy?: AuthCachePolicy): Promise<T>;
+//# sourceMappingURL=auth.d.ts.map

package/lib-es/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,GAAG,EAAE,MAAM,SAAS,CAAC;AAG/C,wBAAsB,cAAc,CAAC,CAAC,EACpC,GAAG,EAAE,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC,EAC7B,UAAU,EAAE,GAAG,GAAG,SAAS,EAC3B,IAAI,EAAE,MAAM,OAAO,CAAC,GAAG,CAAC,EACxB,WAAW,EAAE,CAAC,EAAE,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,EACtC,MAAM,GAAE,eAAyB,GAChC,OAAO,CAAC,CAAC,CAAC,CA2CZ"}