@ledgerhq/revault-sdk 0.13.1 → 0.17.0

package/lib/onboarding.js

@@ -1,23 +1,35 @@
 // src/onboarding.ts
+import invariant from "invariant";
 var roleLabels = {
   WRAPPING_KEY_OWNER: "Wrapping Key",
   MASTER_ADMIN: "Admin",
   SHARED_OWNER: "Shared Owner"
 };
+var devices = [
+  { index: 1, role: "WRAPPING_KEY_OWNER", name: `${roleLabels.WRAPPING_KEY_OWNER} 1` },
+  { index: 2, role: "WRAPPING_KEY_OWNER", name: `${roleLabels.WRAPPING_KEY_OWNER} 2` },
+  { index: 3, role: "WRAPPING_KEY_OWNER", name: `${roleLabels.WRAPPING_KEY_OWNER} 3` },
+  { index: 4, role: "MASTER_ADMIN", name: `${roleLabels.MASTER_ADMIN} 1` },
+  { index: 5, role: "MASTER_ADMIN", name: `${roleLabels.MASTER_ADMIN} 2` },
+  { index: 6, role: "MASTER_ADMIN", name: `${roleLabels.MASTER_ADMIN} 3` },
+  { index: 7, role: "SHARED_OWNER", name: `${roleLabels.SHARED_OWNER} 1` },
+  { index: 8, role: "SHARED_OWNER", name: `${roleLabels.SHARED_OWNER} 2` },
+  { index: 9, role: "SHARED_OWNER", name: `${roleLabels.SHARED_OWNER} 3` }
+];
+var deviceNameToIndex = (name) => {
+  const index = devices.find((d) => d.name === name)?.index;
+  invariant(index !== void 0, `Unknown device ${name}`);
+  return index;
+};
 var STEPS = {
   /**
    * Devices claiming
    */
   PENDING_DEVICE_CLAIMS: async ({ state, engine }, logger) => {
-    const roles = ["WRAPPING_KEY_OWNER", "MASTER_ADMIN", "SHARED_OWNER"];
     const promises = [];
-    for (const role of roles) {
-      const roleIndex = roles.indexOf(role);
-      const nbAlreadyClaimed = state.claimedDevices.filter((c) => c.role === role).length;
-      for (let i = nbAlreadyClaimed; i < 3; i++) {
-        const index = roleIndex * 3 + i + 1;
-        const deviceName = `${roleLabels[role]} ${index}`;
-        const promise = engine.withDeviceIndex(index).claimDevice({ role, deviceName }).then(() => logger.info(`Claimed ${deviceName}`));
+    for (const device of devices) {
+      if (state.claimedDevices.find((c) => c.deviceName === device.name) === void 0) {
+        const promise = engine.withDeviceIndex(device.index).claimDevice({ role: device.role, deviceName: device.name }).then(() => logger.info(`Claimed ${device.name}`));
         promises.push(promise);
       }
     }
@@ -35,7 +47,10 @@ var STEPS = {
       if (claimed.role !== "WRAPPING_KEY_OWNER") return false;
       const inFragment = !!state.wrappingKey?.fragments.find((f) => f.pubKey === claimed.pubKey);
       return !inFragment;
-    }).map((c) => Number(c.deviceName.replace(roleLabels.WRAPPING_KEY_OWNER, "")));
+    }).map((c) => {
+      const index = deviceNameToIndex(c.deviceName);
+      return index;
+    });
     await Promise.all(
       toCollect.map(
         (index) => engine.withDeviceIndex(index).collectWrappingKeyFragment(wrappingKey).then(() => logger.info(`Collected Wrapping Key ${index}`))
@@ -56,7 +71,7 @@ var STEPS = {
       if (claimed.role !== "MASTER_ADMIN") return false;
       const hasRegistered = !!state.masterAdmins.find((a) => a.pubKey === claimed.pubKey);
       return !hasRegistered;
-    }).map((c) => Number(c.deviceName.replace(roleLabels.MASTER_ADMIN, "")));
+    }).map((c) => deviceNameToIndex(c.deviceName));
     await Promise.all(
       toRegister.map(async (index) => {
         const name = `${roleLabels.MASTER_ADMIN} ${index}`;
@@ -79,7 +94,7 @@ var STEPS = {
       if (claimed.role !== "SHARED_OWNER") return false;
       const hasRegistered = !!state.sharedOwners.find((a) => a.pubKey === claimed.pubKey);
       return !hasRegistered;
-    }).map((c) => Number(c.deviceName.replace(roleLabels.SHARED_OWNER, "")));
+    }).map((c) => deviceNameToIndex(c.deviceName));
     await Promise.all(
       toRegister.map(async (index) => {
         const name = `${roleLabels.SHARED_OWNER} ${index}`;

package/lib/onboarding.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/onboarding.ts"],"sourcesContent":["import type {\n  ClaimedRole,\n  OnboardingFullStateResponse,\n  OnboardingStep,\n} from \"@ledgerhq/revault-api\";\n\nimport type { Logger } from \"@/types\";\n\nimport type { Engine, WithOnboarding } from \"./engine/types\";\n\ntype StepAction = (\n  options: {\n    engine: Engine<WithOnboarding>;\n    state: OnboardingFullStateResponse;\n  },\n  logger: Logger,\n) => Promise<OnboardingFullStateResponse>;\n\nconst roleLabels: Record<ClaimedRole, string> = {\n  WRAPPING_KEY_OWNER: \"Wrapping Key\",\n  MASTER_ADMIN: \"Admin\",\n  SHARED_OWNER: \"Shared Owner\",\n};\n\nexport const STEPS = {\n  /**\n   * Devices claiming\n   */\n  PENDING_DEVICE_CLAIMS: async ({ state, engine }, logger) => {\n    const roles: ClaimedRole[] = [\"WRAPPING_KEY_OWNER\", \"MASTER_ADMIN\", \"SHARED_OWNER\"];\n    const promises: Promise<void>[] = [];\n    for (const role of roles) {\n      const roleIndex = roles.indexOf(role);\n      const nbAlreadyClaimed = state.claimedDevices.filter((c) => c.role === role).length;\n      for (let i = nbAlreadyClaimed; i < 3; i++) {\n        const index = roleIndex * 3 + i + 1;\n        const deviceName = `${roleLabels[role]} ${index}`;\n        const promise = engine\n          .withDeviceIndex(index)\n          .claimDevice({ role, deviceName })\n          .then(() => logger.info(`Claimed ${deviceName}`));\n        promises.push(promise);\n      }\n    }\n    await Promise.all(promises);\n    return engine.client.onboarding.commitDeviceClaims.mutate({ onboardingId: state.id });\n  },\n\n  /**\n   * Wrapping Key provisioning\n   */\n  PENDING_WRAPPING_KEY_PROVISIONING: async ({ state, engine }, logger) => {\n    const { id: onboardingId } = state;\n    state = await engine.client.onboarding.startWrappingKeyProvisioning.mutate({ onboardingId });\n    const wrappingKey = state.wrappingKey!;\n    const toCollect = state.claimedDevices\n      .filter((claimed) => {\n        if (claimed.role !== \"WRAPPING_KEY_OWNER\") return false;\n        const inFragment = !!state.wrappingKey?.fragments.find((f) => f.pubKey === claimed.pubKey);\n        return !inFragment;\n      })\n      .map((c) => Number(c.deviceName.replace(roleLabels.WRAPPING_KEY_OWNER, \"\")));\n    await Promise.all(\n      toCollect.map((index) =>\n        engine\n          .withDeviceIndex(index)\n          .collectWrappingKeyFragment(wrappingKey)\n          .then(() => logger.info(`Collected Wrapping Key ${index}`)),\n      ),\n    );\n    return engine.client.onboarding.commitWrappingKey.mutate({ onboardingId });\n  },\n\n  /**\n   * Init Master Admins registration\n   */\n  PENDING_MASTER_ADMINS_REGISTRATION_INIT: async ({ engine, state }) =>\n    engine.client.onboarding.startMasterAdminsRegistration.mutate({ onboardingId: state.id }),\n\n  /**\n   * Master Admins registration\n   */\n  PENDING_MASTER_ADMINS_REGISTRATION: async ({ state, engine }, logger) => {\n    const { id: onboardingId } = state;\n    const toRegister = state.claimedDevices\n      .filter((claimed) => {\n        if (claimed.role !== \"MASTER_ADMIN\") return false;\n        const hasRegistered = !!state.masterAdmins.find((a) => a.pubKey === claimed.pubKey);\n        return !hasRegistered;\n      })\n      .map((c) => Number(c.deviceName.replace(roleLabels.MASTER_ADMIN, \"\")));\n    await Promise.all(\n      toRegister.map(async (index) => {\n        const name = `${roleLabels.MASTER_ADMIN} ${index}`;\n        await engine.withDeviceIndex(index).registerDevice({ role: \"ADMIN\", name });\n        logger.info(`Registered ${name}`);\n      }),\n    );\n    return engine.client.onboarding.createMasterAdminGroup.mutate({ onboardingId });\n  },\n\n  /**\n   * Init Shared Owners registration\n   */\n  PENDING_SHARED_OWNERS_REGISTRATION_INIT: async ({ engine, state }) =>\n    engine.client.onboarding.startSharedOwnersRegistration.mutate({ onboardingId: state.id }),\n\n  /**\n   * Shared Owners registration\n   */\n  PENDING_SHARED_OWNERS_REGISTRATION: async ({ state, engine }, logger) => {\n    const { id: onboardingId } = state;\n    const toRegister = state.claimedDevices\n      .filter((claimed) => {\n        if (claimed.role !== \"SHARED_OWNER\") return false;\n        const hasRegistered = !!state.sharedOwners.find((a) => a.pubKey === claimed.pubKey);\n        return !hasRegistered;\n      })\n      .map((c) => Number(c.deviceName.replace(roleLabels.SHARED_OWNER, \"\")));\n    await Promise.all(\n      toRegister.map(async (index) => {\n        const name = `${roleLabels.SHARED_OWNER} ${index}`;\n        await engine.withDeviceIndex(index).registerDevice({ role: \"SHARED_OWNER\", name });\n        logger.info(`Registered ${name}`);\n      }),\n    );\n    return engine.client.onboarding.commitSharedOwnersRegistration.mutate({ onboardingId });\n  },\n\n  /**\n   * Review by master admins\n   */\n  PENDING_REVIEW_BY_MASTER_ADMINS: async ({ state, engine }, logger) => {\n    const { id: onboardingId } = state;\n    state = await engine.client.onboarding.startReviewByMasterAdmins.mutate({ onboardingId });\n    const toCollect = state.masterAdmins.filter((admin) => !admin.review?.signature);\n    await Promise.all(\n      toCollect.map(async (admin) => {\n        const index = Number(admin.name.replace(roleLabels.MASTER_ADMIN, \"\"));\n        const challenge = admin.review!.challenge;\n        await engine.withDeviceIndex(index).reviewSharedOwner(challenge);\n        logger.info(`Approved with ${admin.name}`);\n      }),\n    );\n    return engine.client.onboarding.commitReviewByMasterAdmins.mutate({ onboardingId });\n  },\n\n  /**\n   * Seed provisioning\n   */\n  PENDING_SEED_PROVISIONING: async ({ state, engine }, logger) => {\n    const { id: onboardingId } = state;\n    state = await engine.client.onboarding.startSeedProvisioning.mutate({ onboardingId });\n    const toCollect = state.sharedOwners.filter((so) => !so.review?.seedFragment);\n    await Promise.all(\n      toCollect.map(async (so) => {\n        const index = Number(so.name.replace(roleLabels.SHARED_OWNER, \"\"));\n        const challenge = so.review!.seedChallenge;\n        await engine.withDeviceIndex(index).collectSeedFragment(challenge);\n        logger.info(`Collected fragment for ${so.name}`);\n      }),\n    );\n    return engine.client.onboarding.commitSeedProvisioning.mutate({ onboardingId });\n  },\n\n  /**\n   * Workspace initialization\n   */\n  PENDING_WORKSPACE_INITIALIZATION: async ({ state, engine }) =>\n    engine.client.onboarding.initializeWorkspace.mutate({ onboardingId: state.id }),\n\n  /**\n   * Onboarding completed\n   */\n  COMPLETED: async ({ state }) => state,\n} as const satisfies Record<OnboardingStep, StepAction>;\n\nconst STEPS_LIST = Object.values(STEPS);\n\nexport async function onboard(\n  {\n    engine,\n    untilStep,\n  }: {\n    engine: Engine<WithOnboarding>;\n    untilStep?: OnboardingStep;\n  },\n  logger: Logger,\n): Promise<void> {\n  const { __onboardingId } = engine;\n  logger.info(`Joining onboarding ${__onboardingId}`);\n  let state = await engine.client.onboarding.getOnboarding.query({\n    onboardingId: __onboardingId,\n  });\n\n  for (const step of STEPS_LIST.slice(STEPS_LIST.indexOf(STEPS[state.step]))) {\n    if (untilStep && state.step === untilStep) {\n      logger.info(\"Skipping the rest of the onboarding\");\n      break;\n    }\n    const index = STEPS_LIST.indexOf(step);\n    const stepProgress = `${(index + 1).toString().padStart(2, \"0\")}/${STEPS_LIST.length}`;\n    logger.info(`(${stepProgress}) ${step.name}`);\n    state = await step({ engine, state }, logger);\n  }\n}\n"],"mappings":";AAkBA,IAAM,aAA0C;AAAA,EAC9C,oBAAoB;AAAA,EACpB,cAAc;AAAA,EACd,cAAc;AAChB;AAEO,IAAM,QAAQ;AAAA;AAAA;AAAA;AAAA,EAInB,uBAAuB,OAAO,EAAE,OAAO,OAAO,GAAG,WAAW;AAC1D,UAAM,QAAuB,CAAC,sBAAsB,gBAAgB,cAAc;AAClF,UAAM,WAA4B,CAAC;AACnC,eAAW,QAAQ,OAAO;AACxB,YAAM,YAAY,MAAM,QAAQ,IAAI;AACpC,YAAM,mBAAmB,MAAM,eAAe,OAAO,CAAC,MAAM,EAAE,SAAS,IAAI,EAAE;AAC7E,eAAS,IAAI,kBAAkB,IAAI,GAAG,KAAK;AACzC,cAAM,QAAQ,YAAY,IAAI,IAAI;AAClC,cAAM,aAAa,GAAG,WAAW,IAAI,CAAC,IAAI,KAAK;AAC/C,cAAM,UAAU,OACb,gBAAgB,KAAK,EACrB,YAAY,EAAE,MAAM,WAAW,CAAC,EAChC,KAAK,MAAM,OAAO,KAAK,WAAW,UAAU,EAAE,CAAC;AAClD,iBAAS,KAAK,OAAO;AAAA,MACvB;AAAA,IACF;AACA,UAAM,QAAQ,IAAI,QAAQ;AAC1B,WAAO,OAAO,OAAO,WAAW,mBAAmB,OAAO,EAAE,cAAc,MAAM,GAAG,CAAC;AAAA,EACtF;AAAA;AAAA;AAAA;AAAA,EAKA,mCAAmC,OAAO,EAAE,OAAO,OAAO,GAAG,WAAW;AACtE,UAAM,EAAE,IAAI,aAAa,IAAI;AAC7B,YAAQ,MAAM,OAAO,OAAO,WAAW,6BAA6B,OAAO,EAAE,aAAa,CAAC;AAC3F,UAAM,cAAc,MAAM;AAC1B,UAAM,YAAY,MAAM,eACrB,OAAO,CAAC,YAAY;AACnB,UAAI,QAAQ,SAAS,qBAAsB,QAAO;AAClD,YAAM,aAAa,CAAC,CAAC,MAAM,aAAa,UAAU,KAAK,CAAC,MAAM,EAAE,WAAW,QAAQ,MAAM;AACzF,aAAO,CAAC;AAAA,IACV,CAAC,EACA,IAAI,CAAC,MAAM,OAAO,EAAE,WAAW,QAAQ,WAAW,oBAAoB,EAAE,CAAC,CAAC;AAC7E,UAAM,QAAQ;AAAA,MACZ,UAAU;AAAA,QAAI,CAAC,UACb,OACG,gBAAgB,KAAK,EACrB,2BAA2B,WAAW,EACtC,KAAK,MAAM,OAAO,KAAK,0BAA0B,KAAK,EAAE,CAAC;AAAA,MAC9D;AAAA,IACF;AACA,WAAO,OAAO,OAAO,WAAW,kBAAkB,OAAO,EAAE,aAAa,CAAC;AAAA,EAC3E;AAAA;AAAA;AAAA;AAAA,EAKA,yCAAyC,OAAO,EAAE,QAAQ,MAAM,MAC9D,OAAO,OAAO,WAAW,8BAA8B,OAAO,EAAE,cAAc,MAAM,GAAG,CAAC;AAAA;AAAA;AAAA;AAAA,EAK1F,oCAAoC,OAAO,EAAE,OAAO,OAAO,GAAG,WAAW;AACvE,UAAM,EAAE,IAAI,aAAa,IAAI;AAC7B,UAAM,aAAa,MAAM,eACtB,OAAO,CAAC,YAAY;AACnB,UAAI,QAAQ,SAAS,eAAgB,QAAO;AAC5C,YAAM,gBAAgB,CAAC,CAAC,MAAM,aAAa,KAAK,CAAC,MAAM,EAAE,WAAW,QAAQ,MAAM;AAClF,aAAO,CAAC;AAAA,IACV,CAAC,EACA,IAAI,CAAC,MAAM,OAAO,EAAE,WAAW,QAAQ,WAAW,cAAc,EAAE,CAAC,CAAC;AACvE,UAAM,QAAQ;AAAA,MACZ,WAAW,IAAI,OAAO,UAAU;AAC9B,cAAM,OAAO,GAAG,WAAW,YAAY,IAAI,KAAK;AAChD,cAAM,OAAO,gBAAgB,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,KAAK,CAAC;AAC1E,eAAO,KAAK,cAAc,IAAI,EAAE;AAAA,MAClC,CAAC;AAAA,IACH;AACA,WAAO,OAAO,OAAO,WAAW,uBAAuB,OAAO,EAAE,aAAa,CAAC;AAAA,EAChF;AAAA;AAAA;AAAA;AAAA,EAKA,yCAAyC,OAAO,EAAE,QAAQ,MAAM,MAC9D,OAAO,OAAO,WAAW,8BAA8B,OAAO,EAAE,cAAc,MAAM,GAAG,CAAC;AAAA;AAAA;AAAA;AAAA,EAK1F,oCAAoC,OAAO,EAAE,OAAO,OAAO,GAAG,WAAW;AACvE,UAAM,EAAE,IAAI,aAAa,IAAI;AAC7B,UAAM,aAAa,MAAM,eACtB,OAAO,CAAC,YAAY;AACnB,UAAI,QAAQ,SAAS,eAAgB,QAAO;AAC5C,YAAM,gBAAgB,CAAC,CAAC,MAAM,aAAa,KAAK,CAAC,MAAM,EAAE,WAAW,QAAQ,MAAM;AAClF,aAAO,CAAC;AAAA,IACV,CAAC,EACA,IAAI,CAAC,MAAM,OAAO,EAAE,WAAW,QAAQ,WAAW,cAAc,EAAE,CAAC,CAAC;AACvE,UAAM,QAAQ;AAAA,MACZ,WAAW,IAAI,OAAO,UAAU;AAC9B,cAAM,OAAO,GAAG,WAAW,YAAY,IAAI,KAAK;AAChD,cAAM,OAAO,gBAAgB,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,KAAK,CAAC;AACjF,eAAO,KAAK,cAAc,IAAI,EAAE;AAAA,MAClC,CAAC;AAAA,IACH;AACA,WAAO,OAAO,OAAO,WAAW,+BAA+B,OAAO,EAAE,aAAa,CAAC;AAAA,EACxF;AAAA;AAAA;AAAA;AAAA,EAKA,iCAAiC,OAAO,EAAE,OAAO,OAAO,GAAG,WAAW;AACpE,UAAM,EAAE,IAAI,aAAa,IAAI;AAC7B,YAAQ,MAAM,OAAO,OAAO,WAAW,0BAA0B,OAAO,EAAE,aAAa,CAAC;AACxF,UAAM,YAAY,MAAM,aAAa,OAAO,CAAC,UAAU,CAAC,MAAM,QAAQ,SAAS;AAC/E,UAAM,QAAQ;AAAA,MACZ,UAAU,IAAI,OAAO,UAAU;AAC7B,cAAM,QAAQ,OAAO,MAAM,KAAK,QAAQ,WAAW,cAAc,EAAE,CAAC;AACpE,cAAM,YAAY,MAAM,OAAQ;AAChC,cAAM,OAAO,gBAAgB,KAAK,EAAE,kBAAkB,SAAS;AAC/D,eAAO,KAAK,iBAAiB,MAAM,IAAI,EAAE;AAAA,MAC3C,CAAC;AAAA,IACH;AACA,WAAO,OAAO,OAAO,WAAW,2BAA2B,OAAO,EAAE,aAAa,CAAC;AAAA,EACpF;AAAA;AAAA;AAAA;AAAA,EAKA,2BAA2B,OAAO,EAAE,OAAO,OAAO,GAAG,WAAW;AAC9D,UAAM,EAAE,IAAI,aAAa,IAAI;AAC7B,YAAQ,MAAM,OAAO,OAAO,WAAW,sBAAsB,OAAO,EAAE,aAAa,CAAC;AACpF,UAAM,YAAY,MAAM,aAAa,OAAO,CAAC,OAAO,CAAC,GAAG,QAAQ,YAAY;AAC5E,UAAM,QAAQ;AAAA,MACZ,UAAU,IAAI,OAAO,OAAO;AAC1B,cAAM,QAAQ,OAAO,GAAG,KAAK,QAAQ,WAAW,cAAc,EAAE,CAAC;AACjE,cAAM,YAAY,GAAG,OAAQ;AAC7B,cAAM,OAAO,gBAAgB,KAAK,EAAE,oBAAoB,SAAS;AACjE,eAAO,KAAK,0BAA0B,GAAG,IAAI,EAAE;AAAA,MACjD,CAAC;AAAA,IACH;AACA,WAAO,OAAO,OAAO,WAAW,uBAAuB,OAAO,EAAE,aAAa,CAAC;AAAA,EAChF;AAAA;AAAA;AAAA;AAAA,EAKA,kCAAkC,OAAO,EAAE,OAAO,OAAO,MACvD,OAAO,OAAO,WAAW,oBAAoB,OAAO,EAAE,cAAc,MAAM,GAAG,CAAC;AAAA;AAAA;AAAA;AAAA,EAKhF,WAAW,OAAO,EAAE,MAAM,MAAM;AAClC;AAEA,IAAM,aAAa,OAAO,OAAO,KAAK;AAEtC,eAAsB,QACpB;AAAA,EACE;AAAA,EACA;AACF,GAIA,QACe;AACf,QAAM,EAAE,eAAe,IAAI;AAC3B,SAAO,KAAK,sBAAsB,cAAc,EAAE;AAClD,MAAI,QAAQ,MAAM,OAAO,OAAO,WAAW,cAAc,MAAM;AAAA,IAC7D,cAAc;AAAA,EAChB,CAAC;AAED,aAAW,QAAQ,WAAW,MAAM,WAAW,QAAQ,MAAM,MAAM,IAAI,CAAC,CAAC,GAAG;AAC1E,QAAI,aAAa,MAAM,SAAS,WAAW;AACzC,aAAO,KAAK,qCAAqC;AACjD;AAAA,IACF;AACA,UAAM,QAAQ,WAAW,QAAQ,IAAI;AACrC,UAAM,eAAe,IAAI,QAAQ,GAAG,SAAS,EAAE,SAAS,GAAG,GAAG,CAAC,IAAI,WAAW,MAAM;AACpF,WAAO,KAAK,IAAI,YAAY,KAAK,KAAK,IAAI,EAAE;AAC5C,YAAQ,MAAM,KAAK,EAAE,QAAQ,MAAM,GAAG,MAAM;AAAA,EAC9C;AACF;","names":[]}
+{"version":3,"sources":["../src/onboarding.ts"],"sourcesContent":["import type {\n  ClaimedRole,\n  OnboardingFullStateResponse,\n  OnboardingStep,\n} from \"@ledgerhq/revault-api\";\nimport invariant from \"invariant\";\n\nimport type { Logger } from \"@/types\";\n\nimport type { Engine, WithOnboarding } from \"./engine/types\";\n\ntype StepAction = (\n  options: {\n    engine: Engine<WithOnboarding>;\n    state: OnboardingFullStateResponse;\n  },\n  logger: Logger,\n) => Promise<OnboardingFullStateResponse>;\n\nconst roleLabels: Record<ClaimedRole, string> = {\n  WRAPPING_KEY_OWNER: \"Wrapping Key\",\n  MASTER_ADMIN: \"Admin\",\n  SHARED_OWNER: \"Shared Owner\",\n};\n\nconst devices: { index: number; role: ClaimedRole; name: string }[] = [\n  { index: 1, role: \"WRAPPING_KEY_OWNER\", name: `${roleLabels.WRAPPING_KEY_OWNER} 1` },\n  { index: 2, role: \"WRAPPING_KEY_OWNER\", name: `${roleLabels.WRAPPING_KEY_OWNER} 2` },\n  { index: 3, role: \"WRAPPING_KEY_OWNER\", name: `${roleLabels.WRAPPING_KEY_OWNER} 3` },\n  { index: 4, role: \"MASTER_ADMIN\", name: `${roleLabels.MASTER_ADMIN} 1` },\n  { index: 5, role: \"MASTER_ADMIN\", name: `${roleLabels.MASTER_ADMIN} 2` },\n  { index: 6, role: \"MASTER_ADMIN\", name: `${roleLabels.MASTER_ADMIN} 3` },\n  { index: 7, role: \"SHARED_OWNER\", name: `${roleLabels.SHARED_OWNER} 1` },\n  { index: 8, role: \"SHARED_OWNER\", name: `${roleLabels.SHARED_OWNER} 2` },\n  { index: 9, role: \"SHARED_OWNER\", name: `${roleLabels.SHARED_OWNER} 3` },\n];\n\nconst deviceNameToIndex = (name: string): number => {\n  const index = devices.find((d) => d.name === name)?.index;\n  invariant(index !== undefined, `Unknown device ${name}`);\n  return index;\n};\n\nexport const STEPS = {\n  /**\n   * Devices claiming\n   */\n  PENDING_DEVICE_CLAIMS: async ({ state, engine }, logger) => {\n    const promises: Promise<void>[] = [];\n    for (const device of devices) {\n      if (state.claimedDevices.find((c) => c.deviceName === device.name) === undefined) {\n        const promise = engine\n          .withDeviceIndex(device.index)\n          .claimDevice({ role: device.role, deviceName: device.name })\n          .then(() => logger.info(`Claimed ${device.name}`));\n        promises.push(promise);\n      }\n    }\n    await Promise.all(promises);\n    return engine.client.onboarding.commitDeviceClaims.mutate({ onboardingId: state.id });\n  },\n\n  /**\n   * Wrapping Key provisioning\n   */\n  PENDING_WRAPPING_KEY_PROVISIONING: async ({ state, engine }, logger) => {\n    const { id: onboardingId } = state;\n    state = await engine.client.onboarding.startWrappingKeyProvisioning.mutate({ onboardingId });\n    const wrappingKey = state.wrappingKey!;\n    const toCollect = state.claimedDevices\n      .filter((claimed) => {\n        if (claimed.role !== \"WRAPPING_KEY_OWNER\") return false;\n        const inFragment = !!state.wrappingKey?.fragments.find((f) => f.pubKey === claimed.pubKey);\n        return !inFragment;\n      })\n      .map((c) => {\n        const index = deviceNameToIndex(c.deviceName);\n        return index;\n      });\n    await Promise.all(\n      toCollect.map((index) =>\n        engine\n          .withDeviceIndex(index)\n          .collectWrappingKeyFragment(wrappingKey)\n          .then(() => logger.info(`Collected Wrapping Key ${index}`)),\n      ),\n    );\n    return engine.client.onboarding.commitWrappingKey.mutate({ onboardingId });\n  },\n\n  /**\n   * Init Master Admins registration\n   */\n  PENDING_MASTER_ADMINS_REGISTRATION_INIT: async ({ engine, state }) =>\n    engine.client.onboarding.startMasterAdminsRegistration.mutate({ onboardingId: state.id }),\n\n  /**\n   * Master Admins registration\n   */\n  PENDING_MASTER_ADMINS_REGISTRATION: async ({ state, engine }, logger) => {\n    const { id: onboardingId } = state;\n    const toRegister = state.claimedDevices\n      .filter((claimed) => {\n        if (claimed.role !== \"MASTER_ADMIN\") return false;\n        const hasRegistered = !!state.masterAdmins.find((a) => a.pubKey === claimed.pubKey);\n        return !hasRegistered;\n      })\n      .map((c) => deviceNameToIndex(c.deviceName));\n    await Promise.all(\n      toRegister.map(async (index) => {\n        const name = `${roleLabels.MASTER_ADMIN} ${index}`;\n        await engine.withDeviceIndex(index).registerDevice({ role: \"ADMIN\", name });\n        logger.info(`Registered ${name}`);\n      }),\n    );\n    return engine.client.onboarding.createMasterAdminGroup.mutate({ onboardingId });\n  },\n\n  /**\n   * Init Shared Owners registration\n   */\n  PENDING_SHARED_OWNERS_REGISTRATION_INIT: async ({ engine, state }) =>\n    engine.client.onboarding.startSharedOwnersRegistration.mutate({ onboardingId: state.id }),\n\n  /**\n   * Shared Owners registration\n   */\n  PENDING_SHARED_OWNERS_REGISTRATION: async ({ state, engine }, logger) => {\n    const { id: onboardingId } = state;\n    const toRegister = state.claimedDevices\n      .filter((claimed) => {\n        if (claimed.role !== \"SHARED_OWNER\") return false;\n        const hasRegistered = !!state.sharedOwners.find((a) => a.pubKey === claimed.pubKey);\n        return !hasRegistered;\n      })\n      .map((c) => deviceNameToIndex(c.deviceName));\n    await Promise.all(\n      toRegister.map(async (index) => {\n        const name = `${roleLabels.SHARED_OWNER} ${index}`;\n        await engine.withDeviceIndex(index).registerDevice({ role: \"SHARED_OWNER\", name });\n        logger.info(`Registered ${name}`);\n      }),\n    );\n    return engine.client.onboarding.commitSharedOwnersRegistration.mutate({ onboardingId });\n  },\n\n  /**\n   * Review by master admins\n   */\n  PENDING_REVIEW_BY_MASTER_ADMINS: async ({ state, engine }, logger) => {\n    const { id: onboardingId } = state;\n    state = await engine.client.onboarding.startReviewByMasterAdmins.mutate({ onboardingId });\n    const toCollect = state.masterAdmins.filter((admin) => !admin.review?.signature);\n    await Promise.all(\n      toCollect.map(async (admin) => {\n        const index = Number(admin.name.replace(roleLabels.MASTER_ADMIN, \"\"));\n        const challenge = admin.review!.challenge;\n        await engine.withDeviceIndex(index).reviewSharedOwner(challenge);\n        logger.info(`Approved with ${admin.name}`);\n      }),\n    );\n    return engine.client.onboarding.commitReviewByMasterAdmins.mutate({ onboardingId });\n  },\n\n  /**\n   * Seed provisioning\n   */\n  PENDING_SEED_PROVISIONING: async ({ state, engine }, logger) => {\n    const { id: onboardingId } = state;\n    state = await engine.client.onboarding.startSeedProvisioning.mutate({ onboardingId });\n    const toCollect = state.sharedOwners.filter((so) => !so.review?.seedFragment);\n    await Promise.all(\n      toCollect.map(async (so) => {\n        const index = Number(so.name.replace(roleLabels.SHARED_OWNER, \"\"));\n        const challenge = so.review!.seedChallenge;\n        await engine.withDeviceIndex(index).collectSeedFragment(challenge);\n        logger.info(`Collected fragment for ${so.name}`);\n      }),\n    );\n    return engine.client.onboarding.commitSeedProvisioning.mutate({ onboardingId });\n  },\n\n  /**\n   * Workspace initialization\n   */\n  PENDING_WORKSPACE_INITIALIZATION: async ({ state, engine }) =>\n    engine.client.onboarding.initializeWorkspace.mutate({ onboardingId: state.id }),\n\n  /**\n   * Onboarding completed\n   */\n  COMPLETED: async ({ state }) => state,\n} as const satisfies Record<OnboardingStep, StepAction>;\n\nconst STEPS_LIST = Object.values(STEPS);\n\nexport async function onboard(\n  {\n    engine,\n    untilStep,\n  }: {\n    engine: Engine<WithOnboarding>;\n    untilStep?: OnboardingStep;\n  },\n  logger: Logger,\n): Promise<void> {\n  const { __onboardingId } = engine;\n  logger.info(`Joining onboarding ${__onboardingId}`);\n  let state = await engine.client.onboarding.getOnboarding.query({\n    onboardingId: __onboardingId,\n  });\n\n  for (const step of STEPS_LIST.slice(STEPS_LIST.indexOf(STEPS[state.step]))) {\n    if (untilStep && state.step === untilStep) {\n      logger.info(\"Skipping the rest of the onboarding\");\n      break;\n    }\n    const index = STEPS_LIST.indexOf(step);\n    const stepProgress = `${(index + 1).toString().padStart(2, \"0\")}/${STEPS_LIST.length}`;\n    logger.info(`(${stepProgress}) ${step.name}`);\n    state = await step({ engine, state }, logger);\n  }\n}\n"],"mappings":";AAKA,OAAO,eAAe;AActB,IAAM,aAA0C;AAAA,EAC9C,oBAAoB;AAAA,EACpB,cAAc;AAAA,EACd,cAAc;AAChB;AAEA,IAAM,UAAgE;AAAA,EACpE,EAAE,OAAO,GAAG,MAAM,sBAAsB,MAAM,GAAG,WAAW,kBAAkB,KAAK;AAAA,EACnF,EAAE,OAAO,GAAG,MAAM,sBAAsB,MAAM,GAAG,WAAW,kBAAkB,KAAK;AAAA,EACnF,EAAE,OAAO,GAAG,MAAM,sBAAsB,MAAM,GAAG,WAAW,kBAAkB,KAAK;AAAA,EACnF,EAAE,OAAO,GAAG,MAAM,gBAAgB,MAAM,GAAG,WAAW,YAAY,KAAK;AAAA,EACvE,EAAE,OAAO,GAAG,MAAM,gBAAgB,MAAM,GAAG,WAAW,YAAY,KAAK;AAAA,EACvE,EAAE,OAAO,GAAG,MAAM,gBAAgB,MAAM,GAAG,WAAW,YAAY,KAAK;AAAA,EACvE,EAAE,OAAO,GAAG,MAAM,gBAAgB,MAAM,GAAG,WAAW,YAAY,KAAK;AAAA,EACvE,EAAE,OAAO,GAAG,MAAM,gBAAgB,MAAM,GAAG,WAAW,YAAY,KAAK;AAAA,EACvE,EAAE,OAAO,GAAG,MAAM,gBAAgB,MAAM,GAAG,WAAW,YAAY,KAAK;AACzE;AAEA,IAAM,oBAAoB,CAAC,SAAyB;AAClD,QAAM,QAAQ,QAAQ,KAAK,CAAC,MAAM,EAAE,SAAS,IAAI,GAAG;AACpD,YAAU,UAAU,QAAW,kBAAkB,IAAI,EAAE;AACvD,SAAO;AACT;AAEO,IAAM,QAAQ;AAAA;AAAA;AAAA;AAAA,EAInB,uBAAuB,OAAO,EAAE,OAAO,OAAO,GAAG,WAAW;AAC1D,UAAM,WAA4B,CAAC;AACnC,eAAW,UAAU,SAAS;AAC5B,UAAI,MAAM,eAAe,KAAK,CAAC,MAAM,EAAE,eAAe,OAAO,IAAI,MAAM,QAAW;AAChF,cAAM,UAAU,OACb,gBAAgB,OAAO,KAAK,EAC5B,YAAY,EAAE,MAAM,OAAO,MAAM,YAAY,OAAO,KAAK,CAAC,EAC1D,KAAK,MAAM,OAAO,KAAK,WAAW,OAAO,IAAI,EAAE,CAAC;AACnD,iBAAS,KAAK,OAAO;AAAA,MACvB;AAAA,IACF;AACA,UAAM,QAAQ,IAAI,QAAQ;AAC1B,WAAO,OAAO,OAAO,WAAW,mBAAmB,OAAO,EAAE,cAAc,MAAM,GAAG,CAAC;AAAA,EACtF;AAAA;AAAA;AAAA;AAAA,EAKA,mCAAmC,OAAO,EAAE,OAAO,OAAO,GAAG,WAAW;AACtE,UAAM,EAAE,IAAI,aAAa,IAAI;AAC7B,YAAQ,MAAM,OAAO,OAAO,WAAW,6BAA6B,OAAO,EAAE,aAAa,CAAC;AAC3F,UAAM,cAAc,MAAM;AAC1B,UAAM,YAAY,MAAM,eACrB,OAAO,CAAC,YAAY;AACnB,UAAI,QAAQ,SAAS,qBAAsB,QAAO;AAClD,YAAM,aAAa,CAAC,CAAC,MAAM,aAAa,UAAU,KAAK,CAAC,MAAM,EAAE,WAAW,QAAQ,MAAM;AACzF,aAAO,CAAC;AAAA,IACV,CAAC,EACA,IAAI,CAAC,MAAM;AACV,YAAM,QAAQ,kBAAkB,EAAE,UAAU;AAC5C,aAAO;AAAA,IACT,CAAC;AACH,UAAM,QAAQ;AAAA,MACZ,UAAU;AAAA,QAAI,CAAC,UACb,OACG,gBAAgB,KAAK,EACrB,2BAA2B,WAAW,EACtC,KAAK,MAAM,OAAO,KAAK,0BAA0B,KAAK,EAAE,CAAC;AAAA,MAC9D;AAAA,IACF;AACA,WAAO,OAAO,OAAO,WAAW,kBAAkB,OAAO,EAAE,aAAa,CAAC;AAAA,EAC3E;AAAA;AAAA;AAAA;AAAA,EAKA,yCAAyC,OAAO,EAAE,QAAQ,MAAM,MAC9D,OAAO,OAAO,WAAW,8BAA8B,OAAO,EAAE,cAAc,MAAM,GAAG,CAAC;AAAA;AAAA;AAAA;AAAA,EAK1F,oCAAoC,OAAO,EAAE,OAAO,OAAO,GAAG,WAAW;AACvE,UAAM,EAAE,IAAI,aAAa,IAAI;AAC7B,UAAM,aAAa,MAAM,eACtB,OAAO,CAAC,YAAY;AACnB,UAAI,QAAQ,SAAS,eAAgB,QAAO;AAC5C,YAAM,gBAAgB,CAAC,CAAC,MAAM,aAAa,KAAK,CAAC,MAAM,EAAE,WAAW,QAAQ,MAAM;AAClF,aAAO,CAAC;AAAA,IACV,CAAC,EACA,IAAI,CAAC,MAAM,kBAAkB,EAAE,UAAU,CAAC;AAC7C,UAAM,QAAQ;AAAA,MACZ,WAAW,IAAI,OAAO,UAAU;AAC9B,cAAM,OAAO,GAAG,WAAW,YAAY,IAAI,KAAK;AAChD,cAAM,OAAO,gBAAgB,KAAK,EAAE,eAAe,EAAE,MAAM,SAAS,KAAK,CAAC;AAC1E,eAAO,KAAK,cAAc,IAAI,EAAE;AAAA,MAClC,CAAC;AAAA,IACH;AACA,WAAO,OAAO,OAAO,WAAW,uBAAuB,OAAO,EAAE,aAAa,CAAC;AAAA,EAChF;AAAA;AAAA;AAAA;AAAA,EAKA,yCAAyC,OAAO,EAAE,QAAQ,MAAM,MAC9D,OAAO,OAAO,WAAW,8BAA8B,OAAO,EAAE,cAAc,MAAM,GAAG,CAAC;AAAA;AAAA;AAAA;AAAA,EAK1F,oCAAoC,OAAO,EAAE,OAAO,OAAO,GAAG,WAAW;AACvE,UAAM,EAAE,IAAI,aAAa,IAAI;AAC7B,UAAM,aAAa,MAAM,eACtB,OAAO,CAAC,YAAY;AACnB,UAAI,QAAQ,SAAS,eAAgB,QAAO;AAC5C,YAAM,gBAAgB,CAAC,CAAC,MAAM,aAAa,KAAK,CAAC,MAAM,EAAE,WAAW,QAAQ,MAAM;AAClF,aAAO,CAAC;AAAA,IACV,CAAC,EACA,IAAI,CAAC,MAAM,kBAAkB,EAAE,UAAU,CAAC;AAC7C,UAAM,QAAQ;AAAA,MACZ,WAAW,IAAI,OAAO,UAAU;AAC9B,cAAM,OAAO,GAAG,WAAW,YAAY,IAAI,KAAK;AAChD,cAAM,OAAO,gBAAgB,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,KAAK,CAAC;AACjF,eAAO,KAAK,cAAc,IAAI,EAAE;AAAA,MAClC,CAAC;AAAA,IACH;AACA,WAAO,OAAO,OAAO,WAAW,+BAA+B,OAAO,EAAE,aAAa,CAAC;AAAA,EACxF;AAAA;AAAA;AAAA;AAAA,EAKA,iCAAiC,OAAO,EAAE,OAAO,OAAO,GAAG,WAAW;AACpE,UAAM,EAAE,IAAI,aAAa,IAAI;AAC7B,YAAQ,MAAM,OAAO,OAAO,WAAW,0BAA0B,OAAO,EAAE,aAAa,CAAC;AACxF,UAAM,YAAY,MAAM,aAAa,OAAO,CAAC,UAAU,CAAC,MAAM,QAAQ,SAAS;AAC/E,UAAM,QAAQ;AAAA,MACZ,UAAU,IAAI,OAAO,UAAU;AAC7B,cAAM,QAAQ,OAAO,MAAM,KAAK,QAAQ,WAAW,cAAc,EAAE,CAAC;AACpE,cAAM,YAAY,MAAM,OAAQ;AAChC,cAAM,OAAO,gBAAgB,KAAK,EAAE,kBAAkB,SAAS;AAC/D,eAAO,KAAK,iBAAiB,MAAM,IAAI,EAAE;AAAA,MAC3C,CAAC;AAAA,IACH;AACA,WAAO,OAAO,OAAO,WAAW,2BAA2B,OAAO,EAAE,aAAa,CAAC;AAAA,EACpF;AAAA;AAAA;AAAA;AAAA,EAKA,2BAA2B,OAAO,EAAE,OAAO,OAAO,GAAG,WAAW;AAC9D,UAAM,EAAE,IAAI,aAAa,IAAI;AAC7B,YAAQ,MAAM,OAAO,OAAO,WAAW,sBAAsB,OAAO,EAAE,aAAa,CAAC;AACpF,UAAM,YAAY,MAAM,aAAa,OAAO,CAAC,OAAO,CAAC,GAAG,QAAQ,YAAY;AAC5E,UAAM,QAAQ;AAAA,MACZ,UAAU,IAAI,OAAO,OAAO;AAC1B,cAAM,QAAQ,OAAO,GAAG,KAAK,QAAQ,WAAW,cAAc,EAAE,CAAC;AACjE,cAAM,YAAY,GAAG,OAAQ;AAC7B,cAAM,OAAO,gBAAgB,KAAK,EAAE,oBAAoB,SAAS;AACjE,eAAO,KAAK,0BAA0B,GAAG,IAAI,EAAE;AAAA,MACjD,CAAC;AAAA,IACH;AACA,WAAO,OAAO,OAAO,WAAW,uBAAuB,OAAO,EAAE,aAAa,CAAC;AAAA,EAChF;AAAA;AAAA;AAAA;AAAA,EAKA,kCAAkC,OAAO,EAAE,OAAO,OAAO,MACvD,OAAO,OAAO,WAAW,oBAAoB,OAAO,EAAE,cAAc,MAAM,GAAG,CAAC;AAAA;AAAA;AAAA;AAAA,EAKhF,WAAW,OAAO,EAAE,MAAM,MAAM;AAClC;AAEA,IAAM,aAAa,OAAO,OAAO,KAAK;AAEtC,eAAsB,QACpB;AAAA,EACE;AAAA,EACA;AACF,GAIA,QACe;AACf,QAAM,EAAE,eAAe,IAAI;AAC3B,SAAO,KAAK,sBAAsB,cAAc,EAAE;AAClD,MAAI,QAAQ,MAAM,OAAO,OAAO,WAAW,cAAc,MAAM;AAAA,IAC7D,cAAc;AAAA,EAChB,CAAC;AAED,aAAW,QAAQ,WAAW,MAAM,WAAW,QAAQ,MAAM,MAAM,IAAI,CAAC,CAAC,GAAG;AAC1E,QAAI,aAAa,MAAM,SAAS,WAAW;AACzC,aAAO,KAAK,qCAAqC;AACjD;AAAA,IACF;AACA,UAAM,QAAQ,WAAW,QAAQ,IAAI;AACrC,UAAM,eAAe,IAAI,QAAQ,GAAG,SAAS,EAAE,SAAS,GAAG,GAAG,CAAC,IAAI,WAAW,MAAM;AACpF,WAAO,KAAK,IAAI,YAAY,KAAK,KAAK,IAAI,EAAE;AAC5C,YAAQ,MAAM,KAAK,EAAE,QAAQ,MAAM,GAAG,MAAM;AAAA,EAC9C;AACF;","names":[]}

package/lib/{types-DVIS-vF0.d.cts → types-BxfmwEOw.d.cts}

@@ -1,5 +1,5 @@
 import { AppRouter, VaultRequestResponse, ApiChallenge, UserRegistrationResponse, ClaimedRole, WrappingKeyResponse, PsdChallenge, OnboardingSeedChallenge } from '@ledgerhq/revault-api';
-import { D as Device } from './types-CsvE9Mlb.cjs';
+import { D as Device } from './types-DJfbanPz.cjs';
 import { TRPCClient } from '@trpc/client';
 import { inferRouterOutputs, inferRouterInputs } from '@trpc/server';
 

package/lib/{types-CsvE9Mlb.d.cts → types-DJfbanPz.d.cts}

@@ -1,4 +1,4 @@
-import { PsdAuthChallengeResponse, PubKey, HsmCertificate, PsdPairingData } from '@ledgerhq/revault-api';
+import { PsdAuthChallengeResponse, HsmCertificate, PubKey, PsdPairingData } from '@ledgerhq/revault-api';
 
 type Device = {
     /**
@@ -13,7 +13,8 @@ type Device = {
      */
     finalizePairingHandshake: (opts: {
         handshake: string;
-        ciphertext: string;
+        partitionId: string;
+        handshakeAttestation: HsmCertificate;
     }) => Promise<string>;
     /**
      * Generate seed fragment from Shared-Owner device
@@ -142,11 +143,18 @@ type Device = {
      * apduCommand in HEX string format
      */
     sendAPDU: (apduCommand: string) => Promise<string>;
+    /**
+     * Get app version
+     *
+     */
+    getVersion: () => Promise<string>;
     /**
      * Poll device until it's plugged-on
      *
      */
-    poll: () => Promise<{
+    poll: (opts?: {
+        retryOnError?: (err: Error) => boolean;
+    }) => Promise<{
         isAppOpened: boolean;
     }>;
     /**

package/lib/{types-CsvE9Mlb.d.ts → types-DJfbanPz.d.ts}

@@ -1,4 +1,4 @@
-import { PsdAuthChallengeResponse, PubKey, HsmCertificate, PsdPairingData } from '@ledgerhq/revault-api';
+import { PsdAuthChallengeResponse, HsmCertificate, PubKey, PsdPairingData } from '@ledgerhq/revault-api';
 
 type Device = {
     /**
@@ -13,7 +13,8 @@ type Device = {
      */
     finalizePairingHandshake: (opts: {
         handshake: string;
-        ciphertext: string;
+        partitionId: string;
+        handshakeAttestation: HsmCertificate;
     }) => Promise<string>;
     /**
      * Generate seed fragment from Shared-Owner device
@@ -142,11 +143,18 @@ type Device = {
      * apduCommand in HEX string format
      */
     sendAPDU: (apduCommand: string) => Promise<string>;
+    /**
+     * Get app version
+     *
+     */
+    getVersion: () => Promise<string>;
     /**
      * Poll device until it's plugged-on
      *
      */
-    poll: () => Promise<{
+    poll: (opts?: {
+        retryOnError?: (err: Error) => boolean;
+    }) => Promise<{
         isAppOpened: boolean;
     }>;
     /**

package/lib/{types-CisIFJCB.d.ts → types-ZEEgdlx2.d.ts}

@@ -1,5 +1,5 @@
 import { AppRouter, VaultRequestResponse, ApiChallenge, UserRegistrationResponse, ClaimedRole, WrappingKeyResponse, PsdChallenge, OnboardingSeedChallenge } from '@ledgerhq/revault-api';
-import { D as Device } from './types-CsvE9Mlb.js';
+import { D as Device } from './types-DJfbanPz.js';
 import { TRPCClient } from '@trpc/client';
 import { inferRouterOutputs, inferRouterInputs } from '@trpc/server';
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ledgerhq/revault-sdk",
-  "version": "0.13.1",
+  "version": "0.17.0",
   "license": "Apache-2.0",
   "type": "module",
   "files": [
@@ -34,34 +34,34 @@
     }
   },
   "dependencies": {
-    "@ledgerhq/errors": "^6.19.1",
-    "@ledgerhq/hw-transport": "^6.31.5",
-    "@trpc/client": "^11.2.0",
-    "@trpc/server": "^11.2.0",
-    "axios": "^1.9.0",
+    "@ledgerhq/errors": "^6.22.0",
+    "@ledgerhq/hw-transport": "^6.31.7",
+    "@trpc/client": "^11.4.3",
+    "@trpc/server": "^11.4.3",
+    "axios": "^1.10.0",
     "axios-retry": "^4.5.0",
     "invariant": "^2.2.4",
     "lodash": "^4.17.21",
     "rxjs": "^7.8.2",
     "superjson": "^1.13.3",
-    "zod": "^3.25.47",
-    "@ledgerhq/revault-api": "1.23.1"
+    "zod": "^3.25.74",
+    "@ledgerhq/revault-api": "1.29.0"
   },
   "devDependencies": {
-    "@eslint/js": "^9.28.0",
+    "@eslint/js": "^9.30.1",
     "@types/invariant": "^2.2.37",
-    "@types/lodash": "^4.17.17",
-    "@types/node": "^22.15.29",
-    "@vitest/coverage-v8": "^3.1.4",
-    "@vitest/ui": "^3.1.4",
-    "eslint": "^9.28.0",
+    "@types/lodash": "^4.17.20",
+    "@types/node": "^22.16.0",
+    "@vitest/coverage-v8": "^3.2.4",
+    "@vitest/ui": "^3.2.4",
+    "eslint": "^9.30.1",
     "eslint-plugin-unicorn": "^59.0.1",
     "tsup": "^8.5.0",
-    "tsx": "^4.19.4",
+    "tsx": "^4.20.3",
     "typescript": "^5.8.3",
-    "typescript-eslint": "^8.33.0",
-    "vite-plugin-node-polyfills": "^0.23.0",
-    "vitest": "^3.1.4",
+    "typescript-eslint": "^8.35.1",
+    "vite-plugin-node-polyfills": "^0.24.0",
+    "vitest": "^3.2.4",
     "vitest-mock-extended": "^3.1.0"
   },
   "scripts": {

package/lib/chunk-DPHEFR6E.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/device/api-device.ts","../src/device/constants.ts","../src/device/utils.ts","../src/device/device-access.ts"],"sourcesContent":["import type {\n  HsmCertificate,\n  PsdAuthChallengeResponse,\n  PsdPairingData,\n  PubKey,\n} from \"@ledgerhq/revault-api\";\nimport axios from \"axios\";\nimport axiosRetry from \"axios-retry\";\n\nimport type { Logger } from \"@/types\";\n\nimport { APPID_VAULT_ADMINISTRATOR, PATHS, SCRIPT_IDS, STR_ROLES } from \"./constants\";\nimport type { Device } from \"./types\";\n\ntype Options = {\n  /**\n   * device-api URL\n   */\n  deviceApiUrl: string;\n\n  /**\n   * salt used by device-api\n   */\n  salt: string;\n\n  /**\n   * seed generation function used for device-api device spawn\n   */\n  genSeed: (p: { salt: string; index: number }) => string;\n};\n\nexport type ApiDevice = {\n  /**\n   * bind a device to the given device index\n   */\n  with: (index: number) => Device;\n};\n\nexport function createApiDevice(options: Options, logger: Logger): ApiDevice {\n  const { genSeed } = options;\n  const sessionId = Date.now().toString();\n  const deviceApi = axios.create({ baseURL: options.deviceApiUrl });\n\n  axiosRetry(deviceApi, {\n    retryDelay: axiosRetry.linearDelay(1000),\n    retries: 3,\n    /* v8 ignore start */\n    retryCondition: () => true,\n    onRetry: (retryCount, err) => {\n      const formattedErr = `${err.code ?? `UNKNOWN`} on ${err.config?.method?.toUpperCase() ?? \"UNKNOWN_METHOD\"} ${err.config?.url ?? \"UNKNOWN_URL\"}`;\n      logger.warning(\n        `Retrying request to device-api (attempt ${retryCount}) - Cause: ${formattedErr}`,\n      );\n    },\n    /* v8 ignore stop */\n  });\n\n  deviceApi.interceptors.request.use(\n    (config) => {\n      /* v8 ignore start */\n      logger.debug(\n        `[device-api] ${config.method?.toUpperCase()} ${config.url}${config.data ? ` ${JSON.stringify(config.data)}` : \"\"}`,\n      );\n      if ([\"post\", \"put\"].includes(config.method!)) {\n        // when interceptor is called in combination with axios-retry, config.data can be a string or an object\n        // and we should return either a string or an object compatible with the original type\n        const isStringMode = typeof config.data === \"string\";\n        const data = (isStringMode ? JSON.parse(config.data) : config.data) as Record<\n          string,\n          unknown\n        >;\n        const enhancedData = {\n          sessionID: sessionId, // Used to ensure dedicated session if someones else uses same seed\n          psd_model: \"02\", // Stax\n          version: 3, // Used to properly enable noise channel\n          ...data,\n        };\n        config.data = isStringMode ? JSON.stringify(enhancedData) : enhancedData;\n      }\n      return config;\n    },\n    /* v8 ignore stop */\n    (error: Error) => Promise.reject(error),\n  );\n\n  return {\n    with: (index: number): Device => {\n      const seed = genSeed({ salt: options.salt, index });\n\n      const authenticate = async ({\n        challenge,\n        workspaceName,\n      }: {\n        challenge: PsdAuthChallengeResponse;\n        workspaceName: string;\n      }): Promise<string> => {\n        const role = challenge.role;\n        if (role === \"READ_ONLY_API_KEY\")\n          throw new Error(\"Invalid role for authenticate: READ_ONLY_API_KEY\");\n        const { data } = await deviceApi.post<string>(\"/authenticate\", {\n          seed,\n          challenge: Buffer.from(challenge.challenge, \"base64\").toString(\"hex\"),\n          application: APPID_VAULT_ADMINISTRATOR,\n          key_handle: challenge.keyHandle,\n          name: challenge.name,\n          role: STR_ROLES[role],\n          type: \"02\", // Stax\n          workspaceName,\n        });\n        return data;\n      };\n\n      const finalizePairingHandshake = async (params: {\n        handshake: string;\n        ciphertext: string;\n      }): Promise<string> => {\n        const { handshake, ciphertext } = params;\n        const payload = { seed, handshake, ciphertext };\n        const res = await deviceApi.post<string>(\"/finalize-pairing-handshake\", payload);\n        return res.data;\n      };\n\n      const generateSeedFragment = async (): Promise<string> => {\n        const payload = {\n          seed,\n          path: PATHS.KEY_MATERIAL,\n          goal: 0, // seed fragment\n        };\n        const { data } = await deviceApi.post<string>(\"/generate-key-component\", payload);\n        return data;\n      };\n\n      const generateWrappingKeyFragment = async (): Promise<string> => {\n        const goal = 1; // means Wrapping Key\n        const payload = { seed, goal, path: PATHS.KEY_MATERIAL };\n        const res = await deviceApi.post<string>(\"/generate-key-fragments\", payload);\n        return Buffer.from(res.data, \"hex\").toString(\"base64\");\n      };\n\n      const getAttestation = async (): Promise<{\n        attestation: {\n          codeHash: string;\n          attestationPub: string;\n          certificate: string;\n        };\n        buffer: Buffer;\n      }> => {\n        const { data: attestationStr } = await deviceApi.post<string>(\"/get-attestation\", { seed });\n        const attestationBuffer = Buffer.from(attestationStr, \"hex\");\n        const certLen = attestationBuffer.readInt8(32 + 65 + 1);\n        return {\n          attestation: {\n            codeHash: attestationBuffer.slice(0, 32).toString(\"base64\"),\n            attestationPub: attestationBuffer.slice(32, 32 + 65).toString(\"base64\"),\n            certificate: attestationBuffer.slice(32 + 65, 32 + 65 + 2 + certLen).toString(\"base64\"),\n          },\n          buffer: attestationBuffer,\n        };\n      };\n\n      const getConfidentialityKey = async (): Promise<{\n        confidentialityKeyCurve25519: string;\n        confidentialityKeySignature: string;\n      }> => {\n        const res = await deviceApi.post<{\n          confidentiality_key_curve25519: string;\n          confidentiality_key_signature: string;\n        }>(\"/get-confidentiality-key\", { seed });\n        return {\n          confidentialityKeyCurve25519: res.data.confidentiality_key_curve25519,\n          confidentialityKeySignature: res.data.confidentiality_key_signature,\n        };\n      };\n\n      const getConfidentialityPubKey = async (): Promise<{ pubKey: string; signature: string }> => {\n        return getPublicKey({ path: PATHS.CONFIDENTIALITY });\n      };\n\n      const getDeviceUserId = async (): Promise<string> => {\n        const res = await deviceApi.post<{ blue_device_id: string }>(\"/blue-device-id\", { seed });\n        return res.data.blue_device_id.toUpperCase();\n      };\n\n      const getU2FPubKey = async (): Promise<{ pubKey: string; signature: string }> => {\n        return getPublicKey({ path: PATHS.U2F });\n      };\n\n      const getValidationPubKey = async (): Promise<{ pubKey: string; signature: string }> => {\n        return getPublicKey({ path: PATHS.VALIDATION });\n      };\n\n      const hasPairing = async (): Promise<boolean> => {\n        const res = await deviceApi.post<string[]>(\"/get-partition-ids\", { seed });\n        return res.data.length > 0;\n      };\n\n      const initPairingHandshake = async (): Promise<{ pubKey: string; signature: string }> => {\n        const { data } = await deviceApi.post<{ attestation: string; pubKey: string }>(\n          \"/initiate-pairing-handshake\",\n          { seed },\n        );\n        return {\n          pubKey: data.pubKey,\n          signature: Buffer.from(data.attestation, \"hex\").toString(\"base64\"),\n        };\n      };\n\n      const openSession = async (params: {\n        secureChannel: { pubKey: PubKey; certificate: HsmCertificate };\n      }): Promise<void> => {\n        const { secureChannel } = params;\n        const signature = Buffer.from(secureChannel.certificate.signature, \"base64\");\n        const attestationPubKey = Buffer.from(secureChannel.certificate.attestationPub, \"base64\");\n        const attestationCertificate = Buffer.from(secureChannel.certificate.certificate, \"base64\");\n        const attestation = Buffer.concat([\n          Buffer.from([signature.length]),\n          signature,\n          attestationPubKey,\n          Buffer.from([attestationCertificate.length]),\n          attestationCertificate,\n        ]);\n        const payload = {\n          seed,\n          path: PATHS.CONFIDENTIALITY,\n          pubKey: secureChannel.pubKey,\n          attestation: attestation.toString(\"hex\"),\n          scriptId: SCRIPT_IDS.INIT_SESSION,\n        };\n        const { data: deviceResponse } = await deviceApi.post<string>(\"/open-session\", payload);\n        if (deviceResponse !== \"9000\") {\n          throw new Error(`device-api device failed with code: ${deviceResponse}`);\n        }\n      };\n\n      const register = async (params: {\n        challenge: string;\n        u2fRegisterData: string;\n        name: string;\n        role: \"ADMIN\" | \"SHARED_OWNER\" | \"OPERATOR\";\n      }): Promise<{\n        u2fRegister: Buffer;\n        keyHandle: Buffer;\n        rfu: number;\n        pubKey: string;\n      }> => {\n        const { challenge, u2fRegisterData, name, role } = params;\n        const payload = {\n          seed,\n          challenge,\n          name,\n          role: STR_ROLES[role],\n          hsm_data: u2fRegisterData,\n          type: \"02\", // Stax\n          application: APPID_VAULT_ADMINISTRATOR,\n        };\n        const { data } = await deviceApi.post<string>(\"/register\", payload);\n        const response = Buffer.from(data, \"hex\");\n        let i = 0;\n        const rfu = response.slice(i, (i += 1))[0]!;\n        const pubKey = response.slice(i, (i += 65)).toString(\"hex\");\n        const keyHandleLength = response.slice(i, ++i)[0]!;\n        const keyHandle = response.slice(i, (i += keyHandleLength));\n        return {\n          u2fRegister: response.slice(0, response.length - 2),\n          keyHandle,\n          rfu,\n          pubKey,\n        };\n      };\n\n      const registerData = async (params: { challenge: string }): Promise<string> => {\n        const { challenge } = params;\n        const payload = { seed, challenge };\n        const res = await deviceApi.post<string>(\"/u2f-register-data\", payload);\n        return res.data;\n      };\n\n      const setPairing = async ({ pairing }: { pairing: PsdPairingData }): Promise<void> => {\n        const payload = {\n          seed,\n          blob: pairing.blob,\n          pairing: {\n            bootstrap_enabled: pairing.pairing.bootstrapEnabled,\n            partition_key: pairing.pairing.partitionKey,\n            workspace_name: pairing.pairing.workspaceName,\n          },\n          partition_key_attestation: {\n            code_hash: pairing.partitionKeyAttestation.codeHash,\n            attestation_pub: pairing.partitionKeyAttestation.attestationPub,\n            certificate: pairing.partitionKeyAttestation.certificate,\n            signature: pairing.partitionKeyAttestation.signature,\n          },\n        };\n        await deviceApi.post(\"/set-partition-key\", payload);\n      };\n\n      const startKKPatternAsResponder = async (params: {\n        handshake: string;\n        handshakeAttestation: HsmCertificate;\n        partitionId: string;\n      }): Promise<{ handshake: string; signature: string }> => {\n        const payload = {\n          seed,\n          script_id: SCRIPT_IDS.ACCOUNT_MANAGER_SESSION,\n          handshake: params.handshake,\n          // for device-api it's normal to have empty string as handshake_attestation\n          handshake_attestation: \"\",\n          partition_id: params.partitionId,\n        };\n        const { data } = await deviceApi.post<string>(\"/start-kk-pattern-as-responder\", payload);\n        const buffer = Buffer.from(data, \"hex\");\n        const dataLength = buffer.readInt8(0);\n        return {\n          handshake: buffer.slice(1, dataLength + 1).toString(\"base64\"),\n          signature: buffer.slice(dataLength + 1).toString(\"base64\"),\n        };\n      };\n\n      const startKPatternAsResponder = async (params: {\n        handshake: string;\n        handshakeAttestation: HsmCertificate;\n        partitionId: string;\n      }): Promise<void> => {\n        const { handshake, partitionId } = params;\n        const payload = {\n          seed,\n          script_id: SCRIPT_IDS.ACCOUNT_MANAGER_SESSION,\n          handshake,\n          // for device-api it's normal to have empty string as handshake_attestation\n          handshake_attestation: \"\",\n          partition_id: partitionId,\n        };\n        const { data: deviceResponse } = await deviceApi.post<string>(\n          \"/start-k-pattern-as-responder\",\n          payload,\n        );\n        if (deviceResponse !== \"9000\") {\n          throw new Error(`device-api device failed with code: ${deviceResponse}`);\n        }\n      };\n\n      const getPublicKey = async (params: {\n        path: string;\n      }): Promise<{ pubKey: string; signature: string }> => {\n        const { path } = params;\n        type DeviceApiGetPubKeyResponse = { attestation: string; pubKey: string };\n        const payload = { seed, secp256k1: true, path };\n        const res = await deviceApi.post<DeviceApiGetPubKeyResponse>(\"/get-public-key\", payload);\n        return {\n          pubKey: res.data.pubKey,\n          signature: Buffer.from(res.data.attestation, \"hex\").toString(\"base64\"),\n        };\n      };\n\n      const validateVaultOperation = async (params: { actions: string[] }): Promise<string> => {\n        const { actions } = params;\n        const payload = {\n          seed,\n          path: PATHS.VALIDATION,\n          actions,\n        };\n        const { data: signature } = await deviceApi.post<string>(\"/validate-op\", payload);\n        return signature;\n      };\n\n      const sendAPDU = (_apdu: string): Promise<string> => {\n        logger.info(\"Can't send arbitrary APDU to software device\");\n        return Promise.resolve(\"9000\");\n      };\n\n      const poll = async (): Promise<{ isAppOpened: boolean }> => {\n        await new Promise((r) => setTimeout(r, 1e3));\n        return { isAppOpened: true };\n      };\n\n      const pollApp = async (): Promise<string> => {\n        await new Promise((r) => setTimeout(r, 1e3));\n        return \"9000\";\n      };\n\n      return {\n        authenticate,\n        finalizePairingHandshake,\n        generateSeedFragment,\n        generateWrappingKeyFragment,\n        getAttestation,\n        getConfidentialityKey,\n        getConfidentialityPubKey,\n        getDeviceUserId,\n        getU2FPubKey,\n        getValidationPubKey,\n        hasPairing,\n        initPairingHandshake,\n        openSession,\n        register,\n        registerData,\n        setPairing,\n        startKKPatternAsResponder,\n        startKPatternAsResponder,\n        validateVaultOperation,\n        sendAPDU,\n        poll,\n        pollApp,\n      };\n    },\n  };\n}\n","export const PATHS = {\n  U2F: \"5655636'/5583430'\",\n  CONFIDENTIALITY: \"5655636'/4410950'\",\n  KEY_MATERIAL: \"5655636'/4932953'\",\n  VALIDATION: \"5655636'/5652812'\",\n} as const;\n\nexport const STATUS_LENGTH = 2;\n\nexport const SCRIPT_IDS = {\n  INIT_SESSION: 3,\n  ACCOUNT_MANAGER_SESSION: 2,\n} as const;\n\nexport const STR_ROLES: Record<\"OPERATOR\" | \"ADMIN\" | \"SHARED_OWNER\", string> = {\n  OPERATOR: \"00\",\n  ADMIN: \"01\",\n  SHARED_OWNER: \"02\",\n} as const;\n\nexport const APPID_VAULT_ADMINISTRATOR =\n  \"ad5be1a1fe011ce7f53ae081a22ae000a42021f3f94106a3bac9f76e8230e4b9\";\n\nconst all61xxStatus = [];\nfor (let i = 0x6100; i <= 0x61ff; i++) {\n  all61xxStatus.push(i);\n}\n\nexport const PAGINATED_STATUS = all61xxStatus;\nexport const STREAMING_RESPONSE = 0x02;\nexport const STREAMING_NEXT_ACTION = 0x01;\n","import { TransportStatusError } from \"@ledgerhq/errors\";\n\nexport const isTransportStatusError = (error: unknown): error is TransportStatusError => {\n  return (\n    error instanceof TransportStatusError ||\n    (error instanceof Error && \"statusCode\" in error && error.message.startsWith(\"Ledger device:\"))\n  );\n};\n\nconst CANCEL_STATUS_CODES = [\n  0x6985, // cancel on Ledger Blue\n\n  // STAX\n  0xb00c, // cancel collect wk fragment\n  0xb00d, // cancel user registration\n  0xb010, // cancel review\n  0xb012, // cancel master seed generation\n];\n\nexport const isDeviceCancelError = (error: Error): boolean => {\n  return isTransportStatusError(error) && CANCEL_STATUS_CODES.includes(error.statusCode);\n};\n","// ------------------------------------------------------------------------------------------------\n// ------------------------------------------------------------------------------------------------\n//                  THIS IS SOME HORRIBLE CODE IMPORTED JUST\n//              FOR THE SAKE OF NOT IMPORTING UGLY, WICKED, AND\n//                     BROKEN @ledgerhq/live-* LIBRARIES\n//\n//                 IT'S MEANT TO BE CONSIDERED AS A BLACK BOX\n// ------------------------------------------------------------------------------------------------\n// ------------------------------------------------------------------------------------------------\nimport {\n  BluetoothRequired,\n  CantOpenDevice,\n  DeviceHalted,\n  FirmwareOrAppUpdateRequired,\n  TransportInterfaceNotAvailable,\n  TransportStatusError,\n  TransportWebUSBGestureRequired,\n} from \"@ledgerhq/errors\";\nimport type Transport from \"@ledgerhq/hw-transport\";\nimport { Observable, throwError, timer } from \"rxjs\";\nimport { catchError, mergeMap, retryWhen } from \"rxjs/operators\";\n\nconst initialErrorRemapping = (error: Error): Observable<never> =>\n  throwError(\n    error && error instanceof TransportStatusError && error.statusCode === 0x6faa\n      ? new DeviceHalted(error.message)\n      : error instanceof TransportStatusError && error.statusCode === 0x6b00\n        ? new FirmwareOrAppUpdateRequired(error.message)\n        : error,\n  );\n\n// eslint-disable-next-line @typescript-eslint/no-empty-function\nconst never = new Promise(() => {});\n\ntype Discovery = Observable<{\n  type: \"add\" | \"remove\";\n  id: string;\n  name: string;\n}>;\n\nexport type TransportModule = {\n  // unique transport name that identify the transport module\n  id: string;\n  // open a device by an id, this id must be unique across all modules\n  // you can typically prefix it with `something|` that identify it globally\n  // returns falsy if the transport module can't handle this id\n  // here, open means we want to START doing something with the transport\n  open: (id: string) => Promise<Transport> | null | undefined;\n  // here, close means we want to STOP doing something with the transport\n  close?: (transport: Transport, id: string) => Promise<void> | null | undefined;\n  // disconnect/interrupt a device connection globally\n  // returns falsy if the transport module can't handle this id\n  disconnect: (id: string) => Promise<void> | null | undefined;\n  // optional observable that allows to discover a transport\n  discovery?: Discovery;\n};\n\nconst modules: TransportModule[] = [];\n\nexport const registerTransportModule = (module: TransportModule): void => {\n  modules.push(module);\n};\n\nexport const close = (transport: Transport, deviceId: string): Promise<void> => {\n  for (const m of modules) {\n    const p = m.close?.(transport, deviceId);\n    if (p) return p;\n  }\n  // fallback on an actual close\n  return transport.close();\n};\n\nexport const open = (deviceId: string): Promise<Transport> => {\n  for (const m of modules) {\n    const p = m.open(deviceId);\n    if (p) return p;\n  }\n  return Promise.reject(new Error(`Can't find handler to open ${deviceId}`));\n};\n\nconst transportFinally =\n  (cleanup: () => Promise<void>) =>\n  <T>(observable: Observable<T>): Observable<T> =>\n    // @ts-expect-error typescript not checking against the instanceof\n    Observable.create((o) => {\n      let done = false;\n\n      // eslint-disable-next-line @typescript-eslint/no-explicit-any\n      const finalize = (): any => {\n        if (done) return never;\n        done = true;\n        return cleanup();\n      };\n\n      const sub = observable.subscribe({\n        next: (e) => o.next(e),\n        complete: () => {\n          void finalize().then(() => o.complete());\n        },\n        error: (e) => {\n          void finalize().then(() => o.error(e));\n        },\n      });\n      return () => {\n        sub.unsubscribe();\n        void finalize();\n      };\n    });\n\ntype AccessHook = () => () => void;\n\nconst accessHooks: AccessHook[] = [];\n\nconst deviceQueues = {};\n\nexport const withDevice =\n  (deviceId: string) =>\n  <T>(job: (t: Transport) => Observable<T>): Observable<T> =>\n    new Observable((o) => {\n      // @ts-expect-error typescript not checking against the instanceof\n      let unsubscribed;\n      // @ts-expect-error typescript not checking against the instanceof\n      let sub;\n      // @ts-expect-error typescript not checking against the instanceof\n      const deviceQueue = deviceQueues[deviceId] ?? Promise.resolve();\n\n      // @ts-expect-error typescript not checking against the instanceof\n      const finalize = (transport, cleanups): Promise<void> =>\n        close(transport, deviceId)\n          // eslint-disable-next-line @typescript-eslint/no-empty-function\n          .catch(() => {})\n          .then(() => {\n            // @ts-expect-error typescript not checking against the instanceof\n            cleanups.forEach((c) => c());\n          });\n\n      // when we'll finish all the current job, we'll call finish\n      // @ts-expect-error typescript not checking against the instanceof\n      let finish;\n      // this new promise is the next exec queue\n      // @ts-expect-error typescript not checking against the instanceof\n      deviceQueues[deviceId] = new Promise((resolve) => {\n        finish = resolve;\n      });\n      // for any new job, we'll now wait the exec queue to be available\n      deviceQueue\n        .then(() => open(deviceId)) // open the transport\n        // @ts-expect-error typescript not checking against the instanceof\n        .then(async (transport) => {\n          // @ts-expect-error typescript not checking against the instanceof\n          if (unsubscribed) {\n            // it was unsubscribed prematurely\n            // @ts-expect-error typescript not checking against the instanceof\n            return finalize(transport, [finish]);\n          }\n\n          if (\n            transport.requestConnectionPriority &&\n            typeof transport.requestConnectionPriority === \"function\"\n          ) {\n            await transport.requestConnectionPriority(\"High\");\n          }\n\n          return transport;\n        })\n        // @ts-expect-error typescript not checking against the instanceof\n        .catch((e) => {\n          // @ts-expect-error typescript not checking against the instanceof\n          finish();\n          if (e instanceof BluetoothRequired) throw e;\n          if (e instanceof TransportWebUSBGestureRequired) throw e;\n          if (e instanceof TransportInterfaceNotAvailable) throw e;\n          throw new CantOpenDevice(e.message);\n        })\n        // @ts-expect-error typescript not checking against the instanceof\n        .then((transport) => {\n          if (!transport) return;\n\n          // @ts-expect-error typescript not checking against the instanceof\n          if (unsubscribed) {\n            // it was unsubscribed prematurely\n            // @ts-expect-error typescript not checking against the instanceof\n            return finalize(transport, [finish]);\n          }\n\n          const cleanups = accessHooks.map((hook) => hook());\n          sub = job(transport) // $FlowFixMe\n            .pipe(\n              catchError(initialErrorRemapping),\n              // $FlowFixMe\n              transportFinally(() =>\n                // @ts-expect-error typescript not checking against the instanceof\n                finalize(transport, [...cleanups, finish]),\n              ),\n            )\n            .subscribe(o);\n        })\n        // @ts-expect-error typescript not checking against the instanceof\n        .catch((error) => o.error(error));\n      return () => {\n        unsubscribed = true;\n        // @ts-expect-error typescript not checking against the instanceof\n        if (sub) sub.unsubscribe();\n      };\n    });\n\nconst WITH_DEVICE_POLLING_DELAY = 500;\n\nexport const retryWhileErrors =\n  (acceptError: (arg0: Error) => boolean) =>\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  (attempts: Observable<any>): Observable<any> =>\n    attempts.pipe(\n      mergeMap((error) => {\n        if (!acceptError(error)) {\n          return throwError(error);\n        }\n\n        return timer(WITH_DEVICE_POLLING_DELAY);\n      }),\n    );\n\nexport const withDevicePolling =\n  (deviceId: string) =>\n  <T>(\n    job: (arg0: Transport) => Observable<T>,\n    acceptError: (arg0: Error) => boolean = () => false,\n  ): Observable<T> =>\n    withDevice(deviceId)(job).pipe(retryWhen(retryWhileErrors(acceptError)));\n"],"mappings":";AAMA,OAAO,WAAW;AAClB,OAAO,gBAAgB;;;ACPhB,IAAM,QAAQ;AAAA,EACnB,KAAK;AAAA,EACL,iBAAiB;AAAA,EACjB,cAAc;AAAA,EACd,YAAY;AACd;AAEO,IAAM,gBAAgB;AAEtB,IAAM,aAAa;AAAA,EACxB,cAAc;AAAA,EACd,yBAAyB;AAC3B;AAEO,IAAM,YAAmE;AAAA,EAC9E,UAAU;AAAA,EACV,OAAO;AAAA,EACP,cAAc;AAChB;AAEO,IAAM,4BACX;AAEF,IAAM,gBAAgB,CAAC;AACvB,SAAS,IAAI,OAAQ,KAAK,OAAQ,KAAK;AACrC,gBAAc,KAAK,CAAC;AACtB;AAEO,IAAM,mBAAmB;AACzB,IAAM,qBAAqB;AAC3B,IAAM,wBAAwB;;;ADQ9B,SAAS,gBAAgB,SAAkB,QAA2B;AAC3E,QAAM,EAAE,QAAQ,IAAI;AACpB,QAAM,YAAY,KAAK,IAAI,EAAE,SAAS;AACtC,QAAM,YAAY,MAAM,OAAO,EAAE,SAAS,QAAQ,aAAa,CAAC;AAEhE,aAAW,WAAW;AAAA,IACpB,YAAY,WAAW,YAAY,GAAI;AAAA,IACvC,SAAS;AAAA;AAAA,IAET,gBAAgB,MAAM;AAAA,IACtB,SAAS,CAAC,YAAY,QAAQ;AAC5B,YAAM,eAAe,GAAG,IAAI,QAAQ,SAAS,OAAO,IAAI,QAAQ,QAAQ,YAAY,KAAK,gBAAgB,IAAI,IAAI,QAAQ,OAAO,aAAa;AAC7I,aAAO;AAAA,QACL,2CAA2C,UAAU,cAAc,YAAY;AAAA,MACjF;AAAA,IACF;AAAA;AAAA,EAEF,CAAC;AAED,YAAU,aAAa,QAAQ;AAAA,IAC7B,CAAC,WAAW;AAEV,aAAO;AAAA,QACL,gBAAgB,OAAO,QAAQ,YAAY,CAAC,IAAI,OAAO,GAAG,GAAG,OAAO,OAAO,IAAI,KAAK,UAAU,OAAO,IAAI,CAAC,KAAK,EAAE;AAAA,MACnH;AACA,UAAI,CAAC,QAAQ,KAAK,EAAE,SAAS,OAAO,MAAO,GAAG;AAG5C,cAAM,eAAe,OAAO,OAAO,SAAS;AAC5C,cAAM,OAAQ,eAAe,KAAK,MAAM,OAAO,IAAI,IAAI,OAAO;AAI9D,cAAM,eAAe;AAAA,UACnB,WAAW;AAAA;AAAA,UACX,WAAW;AAAA;AAAA,UACX,SAAS;AAAA;AAAA,UACT,GAAG;AAAA,QACL;AACA,eAAO,OAAO,eAAe,KAAK,UAAU,YAAY,IAAI;AAAA,MAC9D;AACA,aAAO;AAAA,IACT;AAAA;AAAA,IAEA,CAAC,UAAiB,QAAQ,OAAO,KAAK;AAAA,EACxC;AAEA,SAAO;AAAA,IACL,MAAM,CAAC,UAA0B;AAC/B,YAAM,OAAO,QAAQ,EAAE,MAAM,QAAQ,MAAM,MAAM,CAAC;AAElD,YAAM,eAAe,OAAO;AAAA,QAC1B;AAAA,QACA;AAAA,MACF,MAGuB;AACrB,cAAM,OAAO,UAAU;AACvB,YAAI,SAAS;AACX,gBAAM,IAAI,MAAM,kDAAkD;AACpE,cAAM,EAAE,KAAK,IAAI,MAAM,UAAU,KAAa,iBAAiB;AAAA,UAC7D;AAAA,UACA,WAAW,OAAO,KAAK,UAAU,WAAW,QAAQ,EAAE,SAAS,KAAK;AAAA,UACpE,aAAa;AAAA,UACb,YAAY,UAAU;AAAA,UACtB,MAAM,UAAU;AAAA,UAChB,MAAM,UAAU,IAAI;AAAA,UACpB,MAAM;AAAA;AAAA,UACN;AAAA,QACF,CAAC;AACD,eAAO;AAAA,MACT;AAEA,YAAM,2BAA2B,OAAO,WAGjB;AACrB,cAAM,EAAE,WAAW,WAAW,IAAI;AAClC,cAAM,UAAU,EAAE,MAAM,WAAW,WAAW;AAC9C,cAAM,MAAM,MAAM,UAAU,KAAa,+BAA+B,OAAO;AAC/E,eAAO,IAAI;AAAA,MACb;AAEA,YAAM,uBAAuB,YAA6B;AACxD,cAAM,UAAU;AAAA,UACd;AAAA,UACA,MAAM,MAAM;AAAA,UACZ,MAAM;AAAA;AAAA,QACR;AACA,cAAM,EAAE,KAAK,IAAI,MAAM,UAAU,KAAa,2BAA2B,OAAO;AAChF,eAAO;AAAA,MACT;AAEA,YAAM,8BAA8B,YAA6B;AAC/D,cAAM,OAAO;AACb,cAAM,UAAU,EAAE,MAAM,MAAM,MAAM,MAAM,aAAa;AACvD,cAAM,MAAM,MAAM,UAAU,KAAa,2BAA2B,OAAO;AAC3E,eAAO,OAAO,KAAK,IAAI,MAAM,KAAK,EAAE,SAAS,QAAQ;AAAA,MACvD;AAEA,YAAM,iBAAiB,YAOjB;AACJ,cAAM,EAAE,MAAM,eAAe,IAAI,MAAM,UAAU,KAAa,oBAAoB,EAAE,KAAK,CAAC;AAC1F,cAAM,oBAAoB,OAAO,KAAK,gBAAgB,KAAK;AAC3D,cAAM,UAAU,kBAAkB,SAAS,KAAK,KAAK,CAAC;AACtD,eAAO;AAAA,UACL,aAAa;AAAA,YACX,UAAU,kBAAkB,MAAM,GAAG,EAAE,EAAE,SAAS,QAAQ;AAAA,YAC1D,gBAAgB,kBAAkB,MAAM,IAAI,KAAK,EAAE,EAAE,SAAS,QAAQ;AAAA,YACtE,aAAa,kBAAkB,MAAM,KAAK,IAAI,KAAK,KAAK,IAAI,OAAO,EAAE,SAAS,QAAQ;AAAA,UACxF;AAAA,UACA,QAAQ;AAAA,QACV;AAAA,MACF;AAEA,YAAM,wBAAwB,YAGxB;AACJ,cAAM,MAAM,MAAM,UAAU,KAGzB,4BAA4B,EAAE,KAAK,CAAC;AACvC,eAAO;AAAA,UACL,8BAA8B,IAAI,KAAK;AAAA,UACvC,6BAA6B,IAAI,KAAK;AAAA,QACxC;AAAA,MACF;AAEA,YAAM,2BAA2B,YAA4D;AAC3F,eAAO,aAAa,EAAE,MAAM,MAAM,gBAAgB,CAAC;AAAA,MACrD;AAEA,YAAM,kBAAkB,YAA6B;AACnD,cAAM,MAAM,MAAM,UAAU,KAAiC,mBAAmB,EAAE,KAAK,CAAC;AACxF,eAAO,IAAI,KAAK,eAAe,YAAY;AAAA,MAC7C;AAEA,YAAM,eAAe,YAA4D;AAC/E,eAAO,aAAa,EAAE,MAAM,MAAM,IAAI,CAAC;AAAA,MACzC;AAEA,YAAM,sBAAsB,YAA4D;AACtF,eAAO,aAAa,EAAE,MAAM,MAAM,WAAW,CAAC;AAAA,MAChD;AAEA,YAAM,aAAa,YAA8B;AAC/C,cAAM,MAAM,MAAM,UAAU,KAAe,sBAAsB,EAAE,KAAK,CAAC;AACzE,eAAO,IAAI,KAAK,SAAS;AAAA,MAC3B;AAEA,YAAM,uBAAuB,YAA4D;AACvF,cAAM,EAAE,KAAK,IAAI,MAAM,UAAU;AAAA,UAC/B;AAAA,UACA,EAAE,KAAK;AAAA,QACT;AACA,eAAO;AAAA,UACL,QAAQ,KAAK;AAAA,UACb,WAAW,OAAO,KAAK,KAAK,aAAa,KAAK,EAAE,SAAS,QAAQ;AAAA,QACnE;AAAA,MACF;AAEA,YAAM,cAAc,OAAO,WAEN;AACnB,cAAM,EAAE,cAAc,IAAI;AAC1B,cAAM,YAAY,OAAO,KAAK,cAAc,YAAY,WAAW,QAAQ;AAC3E,cAAM,oBAAoB,OAAO,KAAK,cAAc,YAAY,gBAAgB,QAAQ;AACxF,cAAM,yBAAyB,OAAO,KAAK,cAAc,YAAY,aAAa,QAAQ;AAC1F,cAAM,cAAc,OAAO,OAAO;AAAA,UAChC,OAAO,KAAK,CAAC,UAAU,MAAM,CAAC;AAAA,UAC9B;AAAA,UACA;AAAA,UACA,OAAO,KAAK,CAAC,uBAAuB,MAAM,CAAC;AAAA,UAC3C;AAAA,QACF,CAAC;AACD,cAAM,UAAU;AAAA,UACd;AAAA,UACA,MAAM,MAAM;AAAA,UACZ,QAAQ,cAAc;AAAA,UACtB,aAAa,YAAY,SAAS,KAAK;AAAA,UACvC,UAAU,WAAW;AAAA,QACvB;AACA,cAAM,EAAE,MAAM,eAAe,IAAI,MAAM,UAAU,KAAa,iBAAiB,OAAO;AACtF,YAAI,mBAAmB,QAAQ;AAC7B,gBAAM,IAAI,MAAM,uCAAuC,cAAc,EAAE;AAAA,QACzE;AAAA,MACF;AAEA,YAAM,WAAW,OAAO,WAUlB;AACJ,cAAM,EAAE,WAAW,iBAAiB,MAAM,KAAK,IAAI;AACnD,cAAM,UAAU;AAAA,UACd;AAAA,UACA;AAAA,UACA;AAAA,UACA,MAAM,UAAU,IAAI;AAAA,UACpB,UAAU;AAAA,UACV,MAAM;AAAA;AAAA,UACN,aAAa;AAAA,QACf;AACA,cAAM,EAAE,KAAK,IAAI,MAAM,UAAU,KAAa,aAAa,OAAO;AAClE,cAAM,WAAW,OAAO,KAAK,MAAM,KAAK;AACxC,YAAI,IAAI;AACR,cAAM,MAAM,SAAS,MAAM,GAAI,KAAK,CAAE,EAAE,CAAC;AACzC,cAAM,SAAS,SAAS,MAAM,GAAI,KAAK,EAAG,EAAE,SAAS,KAAK;AAC1D,cAAM,kBAAkB,SAAS,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC;AAChD,cAAM,YAAY,SAAS,MAAM,GAAI,KAAK,eAAgB;AAC1D,eAAO;AAAA,UACL,aAAa,SAAS,MAAM,GAAG,SAAS,SAAS,CAAC;AAAA,UAClD;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAEA,YAAM,eAAe,OAAO,WAAmD;AAC7E,cAAM,EAAE,UAAU,IAAI;AACtB,cAAM,UAAU,EAAE,MAAM,UAAU;AAClC,cAAM,MAAM,MAAM,UAAU,KAAa,sBAAsB,OAAO;AACtE,eAAO,IAAI;AAAA,MACb;AAEA,YAAM,aAAa,OAAO,EAAE,QAAQ,MAAkD;AACpF,cAAM,UAAU;AAAA,UACd;AAAA,UACA,MAAM,QAAQ;AAAA,UACd,SAAS;AAAA,YACP,mBAAmB,QAAQ,QAAQ;AAAA,YACnC,eAAe,QAAQ,QAAQ;AAAA,YAC/B,gBAAgB,QAAQ,QAAQ;AAAA,UAClC;AAAA,UACA,2BAA2B;AAAA,YACzB,WAAW,QAAQ,wBAAwB;AAAA,YAC3C,iBAAiB,QAAQ,wBAAwB;AAAA,YACjD,aAAa,QAAQ,wBAAwB;AAAA,YAC7C,WAAW,QAAQ,wBAAwB;AAAA,UAC7C;AAAA,QACF;AACA,cAAM,UAAU,KAAK,sBAAsB,OAAO;AAAA,MACpD;AAEA,YAAM,4BAA4B,OAAO,WAIgB;AACvD,cAAM,UAAU;AAAA,UACd;AAAA,UACA,WAAW,WAAW;AAAA,UACtB,WAAW,OAAO;AAAA;AAAA,UAElB,uBAAuB;AAAA,UACvB,cAAc,OAAO;AAAA,QACvB;AACA,cAAM,EAAE,KAAK,IAAI,MAAM,UAAU,KAAa,kCAAkC,OAAO;AACvF,cAAM,SAAS,OAAO,KAAK,MAAM,KAAK;AACtC,cAAM,aAAa,OAAO,SAAS,CAAC;AACpC,eAAO;AAAA,UACL,WAAW,OAAO,MAAM,GAAG,aAAa,CAAC,EAAE,SAAS,QAAQ;AAAA,UAC5D,WAAW,OAAO,MAAM,aAAa,CAAC,EAAE,SAAS,QAAQ;AAAA,QAC3D;AAAA,MACF;AAEA,YAAM,2BAA2B,OAAO,WAInB;AACnB,cAAM,EAAE,WAAW,YAAY,IAAI;AACnC,cAAM,UAAU;AAAA,UACd;AAAA,UACA,WAAW,WAAW;AAAA,UACtB;AAAA;AAAA,UAEA,uBAAuB;AAAA,UACvB,cAAc;AAAA,QAChB;AACA,cAAM,EAAE,MAAM,eAAe,IAAI,MAAM,UAAU;AAAA,UAC/C;AAAA,UACA;AAAA,QACF;AACA,YAAI,mBAAmB,QAAQ;AAC7B,gBAAM,IAAI,MAAM,uCAAuC,cAAc,EAAE;AAAA,QACzE;AAAA,MACF;AAEA,YAAM,eAAe,OAAO,WAE0B;AACpD,cAAM,EAAE,KAAK,IAAI;AAEjB,cAAM,UAAU,EAAE,MAAM,WAAW,MAAM,KAAK;AAC9C,cAAM,MAAM,MAAM,UAAU,KAAiC,mBAAmB,OAAO;AACvF,eAAO;AAAA,UACL,QAAQ,IAAI,KAAK;AAAA,UACjB,WAAW,OAAO,KAAK,IAAI,KAAK,aAAa,KAAK,EAAE,SAAS,QAAQ;AAAA,QACvE;AAAA,MACF;AAEA,YAAM,yBAAyB,OAAO,WAAmD;AACvF,cAAM,EAAE,QAAQ,IAAI;AACpB,cAAM,UAAU;AAAA,UACd;AAAA,UACA,MAAM,MAAM;AAAA,UACZ;AAAA,QACF;AACA,cAAM,EAAE,MAAM,UAAU,IAAI,MAAM,UAAU,KAAa,gBAAgB,OAAO;AAChF,eAAO;AAAA,MACT;AAEA,YAAM,WAAW,CAAC,UAAmC;AACnD,eAAO,KAAK,8CAA8C;AAC1D,eAAO,QAAQ,QAAQ,MAAM;AAAA,MAC/B;AAEA,YAAM,OAAO,YAA+C;AAC1D,cAAM,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,GAAG,CAAC;AAC3C,eAAO,EAAE,aAAa,KAAK;AAAA,MAC7B;AAEA,YAAM,UAAU,YAA6B;AAC3C,cAAM,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,GAAG,CAAC;AAC3C,eAAO;AAAA,MACT;AAEA,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;AEtZA,SAAS,4BAA4B;AAE9B,IAAM,yBAAyB,CAAC,UAAkD;AACvF,SACE,iBAAiB,wBAChB,iBAAiB,SAAS,gBAAgB,SAAS,MAAM,QAAQ,WAAW,gBAAgB;AAEjG;AAEA,IAAM,sBAAsB;AAAA,EAC1B;AAAA;AAAA;AAAA,EAGA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AACF;AAEO,IAAM,sBAAsB,CAAC,UAA0B;AAC5D,SAAO,uBAAuB,KAAK,KAAK,oBAAoB,SAAS,MAAM,UAAU;AACvF;;;ACZA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,wBAAAA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,YAAY,YAAY,aAAa;AAC9C,SAAS,YAAY,UAAU,iBAAiB;AAEhD,IAAM,wBAAwB,CAAC,UAC7B;AAAA,EACE,SAAS,iBAAiBA,yBAAwB,MAAM,eAAe,QACnE,IAAI,aAAa,MAAM,OAAO,IAC9B,iBAAiBA,yBAAwB,MAAM,eAAe,QAC5D,IAAI,4BAA4B,MAAM,OAAO,IAC7C;AACR;AAGF,IAAM,QAAQ,IAAI,QAAQ,MAAM;AAAC,CAAC;AAyBlC,IAAM,UAA6B,CAAC;AAE7B,IAAM,0BAA0B,CAAC,WAAkC;AACxE,UAAQ,KAAK,MAAM;AACrB;AAEO,IAAM,QAAQ,CAAC,WAAsB,aAAoC;AAC9E,aAAW,KAAK,SAAS;AACvB,UAAM,IAAI,EAAE,QAAQ,WAAW,QAAQ;AACvC,QAAI,EAAG,QAAO;AAAA,EAChB;AAEA,SAAO,UAAU,MAAM;AACzB;AAEO,IAAM,OAAO,CAAC,aAAyC;AAC5D,aAAW,KAAK,SAAS;AACvB,UAAM,IAAI,EAAE,KAAK,QAAQ;AACzB,QAAI,EAAG,QAAO;AAAA,EAChB;AACA,SAAO,QAAQ,OAAO,IAAI,MAAM,8BAA8B,QAAQ,EAAE,CAAC;AAC3E;AAEA,IAAM,mBACJ,CAAC,YACD,CAAI;AAAA;AAAA,EAEF,WAAW,OAAO,CAAC,MAAM;AACvB,QAAI,OAAO;AAGX,UAAM,WAAW,MAAW;AAC1B,UAAI,KAAM,QAAO;AACjB,aAAO;AACP,aAAO,QAAQ;AAAA,IACjB;AAEA,UAAM,MAAM,WAAW,UAAU;AAAA,MAC/B,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC;AAAA,MACrB,UAAU,MAAM;AACd,aAAK,SAAS,EAAE,KAAK,MAAM,EAAE,SAAS,CAAC;AAAA,MACzC;AAAA,MACA,OAAO,CAAC,MAAM;AACZ,aAAK,SAAS,EAAE,KAAK,MAAM,EAAE,MAAM,CAAC,CAAC;AAAA,MACvC;AAAA,IACF,CAAC;AACD,WAAO,MAAM;AACX,UAAI,YAAY;AAChB,WAAK,SAAS;AAAA,IAChB;AAAA,EACF,CAAC;AAAA;AAIL,IAAM,cAA4B,CAAC;AAEnC,IAAM,eAAe,CAAC;AAEf,IAAM,aACX,CAAC,aACD,CAAI,QACF,IAAI,WAAW,CAAC,MAAM;AAEpB,MAAI;AAEJ,MAAI;AAEJ,QAAM,cAAc,aAAa,QAAQ,KAAK,QAAQ,QAAQ;AAG9D,QAAM,WAAW,CAAC,WAAW,aAC3B,MAAM,WAAW,QAAQ,EAEtB,MAAM,MAAM;AAAA,EAAC,CAAC,EACd,KAAK,MAAM;AAEV,aAAS,QAAQ,CAAC,MAAM,EAAE,CAAC;AAAA,EAC7B,CAAC;AAIL,MAAI;AAGJ,eAAa,QAAQ,IAAI,IAAI,QAAQ,CAAC,YAAY;AAChD,aAAS;AAAA,EACX,CAAC;AAED,cACG,KAAK,MAAM,KAAK,QAAQ,CAAC,EAEzB,KAAK,OAAO,cAAc;AAEzB,QAAI,cAAc;AAGhB,aAAO,SAAS,WAAW,CAAC,MAAM,CAAC;AAAA,IACrC;AAEA,QACE,UAAU,6BACV,OAAO,UAAU,8BAA8B,YAC/C;AACA,YAAM,UAAU,0BAA0B,MAAM;AAAA,IAClD;AAEA,WAAO;AAAA,EACT,CAAC,EAEA,MAAM,CAAC,MAAM;AAEZ,WAAO;AACP,QAAI,aAAa,kBAAmB,OAAM;AAC1C,QAAI,aAAa,+BAAgC,OAAM;AACvD,QAAI,aAAa,+BAAgC,OAAM;AACvD,UAAM,IAAI,eAAe,EAAE,OAAO;AAAA,EACpC,CAAC,EAEA,KAAK,CAAC,cAAc;AACnB,QAAI,CAAC,UAAW;AAGhB,QAAI,cAAc;AAGhB,aAAO,SAAS,WAAW,CAAC,MAAM,CAAC;AAAA,IACrC;AAEA,UAAM,WAAW,YAAY,IAAI,CAAC,SAAS,KAAK,CAAC;AACjD,UAAM,IAAI,SAAS,EAChB;AAAA,MACC,WAAW,qBAAqB;AAAA;AAAA,MAEhC;AAAA,QAAiB;AAAA;AAAA,UAEf,SAAS,WAAW,CAAC,GAAG,UAAU,MAAM,CAAC;AAAA;AAAA,MAC3C;AAAA,IACF,EACC,UAAU,CAAC;AAAA,EAChB,CAAC,EAEA,MAAM,CAAC,UAAU,EAAE,MAAM,KAAK,CAAC;AAClC,SAAO,MAAM;AACX,mBAAe;AAEf,QAAI,IAAK,KAAI,YAAY;AAAA,EAC3B;AACF,CAAC;AAEL,IAAM,4BAA4B;AAE3B,IAAM,mBACX,CAAC;AAAA;AAAA,EAED,CAAC,aACC,SAAS;AAAA,IACP,SAAS,CAAC,UAAU;AAClB,UAAI,CAAC,YAAY,KAAK,GAAG;AACvB,eAAO,WAAW,KAAK;AAAA,MACzB;AAEA,aAAO,MAAM,yBAAyB;AAAA,IACxC,CAAC;AAAA,EACH;AAAA;AAEG,IAAM,oBACX,CAAC,aACD,CACE,KACA,cAAwC,MAAM,UAE9C,WAAW,QAAQ,EAAE,GAAG,EAAE,KAAK,UAAU,iBAAiB,WAAW,CAAC,CAAC;","names":["TransportStatusError"]}

package/lib/chunk-VCAQTGQE.cjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["/home/runner/_work/revault/revault/packages/sdk/lib/chunk-VCAQTGQE.cjs","../src/device/api-device.ts","../src/device/constants.ts","../src/device/utils.ts","../src/device/device-access.ts"],"names":["TransportStatusError"],"mappings":"AAAA;ACMA,4EAAkB;AAClB,iGAAuB;ADJvB;AACA;AEJO,IAAM,MAAA,EAAQ;AAAA,EACnB,GAAA,EAAK,mBAAA;AAAA,EACL,eAAA,EAAiB,mBAAA;AAAA,EACjB,YAAA,EAAc,mBAAA;AAAA,EACd,UAAA,EAAY;AACd,CAAA;AAEO,IAAM,cAAA,EAAgB,CAAA;AAEtB,IAAM,WAAA,EAAa;AAAA,EACxB,YAAA,EAAc,CAAA;AAAA,EACd,uBAAA,EAAyB;AAC3B,CAAA;AAEO,IAAM,UAAA,EAAmE;AAAA,EAC9E,QAAA,EAAU,IAAA;AAAA,EACV,KAAA,EAAO,IAAA;AAAA,EACP,YAAA,EAAc;AAChB,CAAA;AAEO,IAAM,0BAAA,EACX,kEAAA;AAEF,IAAM,cAAA,EAAgB,CAAC,CAAA;AACvB,IAAA,CAAA,IAAS,EAAA,EAAI,KAAA,EAAQ,EAAA,GAAK,KAAA,EAAQ,CAAA,EAAA,EAAK;AACrC,EAAA,aAAA,CAAc,IAAA,CAAK,CAAC,CAAA;AACtB;AAEO,IAAM,iBAAA,EAAmB,aAAA;AACzB,IAAM,mBAAA,EAAqB,CAAA;AAC3B,IAAM,sBAAA,EAAwB,CAAA;AFDrC;AACA;ACQO,SAAS,eAAA,CAAgB,OAAA,EAAkB,MAAA,EAA2B;AAC3E,EAAA,MAAM,EAAE,QAAQ,EAAA,EAAI,OAAA;AACpB,EAAA,MAAM,UAAA,EAAY,IAAA,CAAK,GAAA,CAAI,CAAA,CAAE,QAAA,CAAS,CAAA;AACtC,EAAA,MAAM,UAAA,EAAY,eAAA,CAAM,MAAA,CAAO,EAAE,OAAA,EAAS,OAAA,CAAQ,aAAa,CAAC,CAAA;AAEhE,EAAA,kCAAA,SAAW,EAAW;AAAA,IACpB,UAAA,EAAY,oBAAA,CAAW,WAAA,CAAY,GAAI,CAAA;AAAA,IACvC,OAAA,EAAS,CAAA;AAAA;AAAA,IAET,cAAA,EAAgB,CAAA,EAAA,GAAM,IAAA;AAAA,IACtB,OAAA,EAAS,CAAC,UAAA,EAAY,GAAA,EAAA,GAAQ;AAC5B,MAAA,MAAM,aAAA,EAAe,CAAA,mBAAA;AACd,MAAA;AACL,QAAA;AACF,MAAA;AACF,IAAA;AAAA;AAED,EAAA;AAEsB,EAAA;AACT,IAAA;AAEH,MAAA;AACW,QAAA;AAClB,MAAA;AACoB,MAAA;AAGZ,QAAA;AACQ,QAAA;AAIR,QAAA;AACO,UAAA;AAAA;AACA,UAAA;AAAA;AACF,UAAA;AAAA;AACN,UAAA;AACL,QAAA;AACc,QAAA;AAChB,MAAA;AACO,MAAA;AACT,IAAA;AAAA;AAE0B,IAAA;AAC5B,EAAA;AAEO,EAAA;AAC4B,IAAA;AACV,MAAA;AAEA,MAAA;AACnB,QAAA;AACA,QAAA;AAIqB,MAAA;AACR,QAAA;AACA,QAAA;AACK,UAAA;AACD,QAAA;AACf,UAAA;AACkB,UAAA;AACL,UAAA;AACD,UAAA;AACI,UAAA;AACA,UAAA;AACV,UAAA;AAAA;AACN,UAAA;AACD,QAAA;AACM,QAAA;AACT,MAAA;AAEM,MAAA;AAIe,QAAA;AACD,QAAA;AACA,QAAA;AACP,QAAA;AACb,MAAA;AAEM,MAAA;AACY,QAAA;AACd,UAAA;AACY,UAAA;AACN,UAAA;AAAA;AACR,QAAA;AACiB,QAAA;AACV,QAAA;AACT,MAAA;AAEM,MAAA;AACS,QAAA;AACK,QAAA;AACA,QAAA;AACC,QAAA;AACrB,MAAA;AAEM,MAAA;AAQU,QAAA;AACR,QAAA;AACU,QAAA;AACT,QAAA;AACQ,UAAA;AACD,YAAA;AACM,YAAA;AACH,YAAA;AACf,UAAA;AACQ,UAAA;AACV,QAAA;AACF,MAAA;AAEM,MAAA;AAIc,QAAA;AAIX,QAAA;AACL,UAAA;AACA,UAAA;AACF,QAAA;AACF,MAAA;AAEM,MAAA;AACgB,QAAA;AACtB,MAAA;AAEM,MAAA;AACc,QAAA;AACF,QAAA;AAClB,MAAA;AAEqB,MAAA;AACC,QAAA;AACtB,MAAA;AAEM,MAAA;AACgB,QAAA;AACtB,MAAA;AAEmB,MAAA;AACC,QAAA;AACF,QAAA;AAClB,MAAA;AAEM,MAAA;AACa,QAAA;AACf,UAAA;AACO,UAAA;AACT,QAAA;AACO,QAAA;AACQ,UAAA;AACK,UAAA;AACpB,QAAA;AACF,MAAA;AAEoB,MAAA;AAGV,QAAA;AACU,QAAA;AACZ,QAAA;AACA,QAAA;AACc,QAAA;AACL,UAAA;AACb,UAAA;AACA,UAAA;AACa,UAAA;AACb,UAAA;AACD,QAAA;AACe,QAAA;AACd,UAAA;AACY,UAAA;AACJ,UAAA;AACK,UAAA;AACH,UAAA;AACZ,QAAA;AACc,QAAA;AACV,QAAA;AACc,UAAA;AAClB,QAAA;AACF,MAAA;AAEiB,MAAA;AAWI,QAAA;AACH,QAAA;AACd,UAAA;AACA,UAAA;AACA,UAAA;AACgB,UAAA;AACN,UAAA;AACJ,UAAA;AAAA;AACO,UAAA;AACf,QAAA;AACiB,QAAA;AACA,QAAA;AACT,QAAA;AACI,QAAA;AACG,QAAA;AACT,QAAA;AACY,QAAA;AACX,QAAA;AACQ,UAAA;AACb,UAAA;AACA,UAAA;AACA,UAAA;AACF,QAAA;AACF,MAAA;AAEqB,MAAA;AACD,QAAA;AACA,QAAA;AACA,QAAA;AACP,QAAA;AACb,MAAA;AAEmB,MAAA;AACD,QAAA;AACd,UAAA;AACc,UAAA;AACL,UAAA;AACP,YAAA;AACe,YAAA;AACC,YAAA;AAClB,UAAA;AACA,UAAA;AACa,YAAA;AACX,YAAA;AACa,YAAA;AACF,YAAA;AACb,UAAA;AACF,QAAA;AACgB,QAAA;AAClB,MAAA;AAEM,MAAA;AAKY,QAAA;AACd,UAAA;AACW,UAAA;AACO,UAAA;AAAA;AAElB,UAAA;AACc,UAAA;AAChB,QAAA;AACiB,QAAA;AACF,QAAA;AACI,QAAA;AACZ,QAAA;AACa,UAAA;AACA,UAAA;AACpB,QAAA;AACF,MAAA;AAEM,MAAA;AAKe,QAAA;AACH,QAAA;AACd,UAAA;AACW,UAAA;AACX,UAAA;AAAA;AAEA,UAAA;AACc,UAAA;AAChB,QAAA;AACc,QAAA;AACZ,UAAA;AACA,UAAA;AACF,QAAA;AACI,QAAA;AACc,UAAA;AAClB,QAAA;AACF,MAAA;AAEqB,MAAA;AAGF,QAAA;AAEC,QAAA;AACA,QAAA;AACX,QAAA;AACY,UAAA;AACC,UAAA;AACpB,QAAA;AACF,MAAA;AAEM,MAAA;AACgB,QAAA;AACJ,QAAA;AACd,UAAA;AACY,UAAA;AACZ,UAAA;AACF,QAAA;AACc,QAAA;AACP,QAAA;AACT,MAAA;AAEkB,MAAA;AACJ,QAAA;AACG,QAAA;AACjB,MAAA;AAEa,MAAA;AACQ,QAAA;AACV,QAAA;AACX,MAAA;AAEgB,MAAA;AACK,QAAA;AACZ,QAAA;AACT,MAAA;AAEO,MAAA;AACL,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACF,MAAA;AACF,IAAA;AACF,EAAA;AACF;AD3E4B;AACA;AG5UnB;AAEI;AAEQ,EAAA;AAGrB;AAE4B;AAC1B,EAAA;AAAA;AAAA;AAGA,EAAA;AAAA;AACA,EAAA;AAAA;AACA,EAAA;AAAA;AACA,EAAA;AAAA;AACF;AAEoC;AAC3B,EAAA;AACT;AH4U4B;AACA;AIzV5B;AACE;AACA;AACA;AACA;AACA;AACAA;AACA;AACK;AAEc;AACA;AAES;AAEAA,EAAAA;AAK5B;AAGwB;AAAQ;AAyBE;AAEvB;AACQ,EAAA;AACrB;AAE4C;AACjB,EAAA;AACH,IAAA;AACN,IAAA;AAChB,EAAA;AAEuB,EAAA;AACzB;AAE8D;AACnC,EAAA;AACN,IAAA;AACH,IAAA;AAChB,EAAA;AAC0B,EAAA;AAC5B;AAGG;AACG;AAEuB,EAAA;AACZ,IAAA;AAGiB,IAAA;AACT,MAAA;AACV,MAAA;AACQ,MAAA;AACjB,IAAA;AAEuB,IAAA;AACA,MAAA;AACL,MAAA;AACE,QAAA;AAClB,MAAA;AACc,MAAA;AACI,QAAA;AAClB,MAAA;AACD,IAAA;AACY,IAAA;AACK,MAAA;AACF,MAAA;AAChB,IAAA;AACD,EAAA;AAAA;AAI8B;AAEb;AAGnB;AAIO,EAAA;AAEA,EAAA;AAEgB,EAAA;AAGF,EAAA;AAIF,EAAA;AAEc,IAAA;AACzB,EAAA;AAID,EAAA;AAGqB,EAAA;AACd,IAAA;AACV,EAAA;AAGa,EAAA;AAIQ,IAAA;AAGA,MAAA;AAClB,IAAA;AAGY,IAAA;AAGM,MAAA;AAClB,IAAA;AAEO,IAAA;AAGK,EAAA;AAEL,IAAA;AACU,IAAA;AACA,IAAA;AACA,IAAA;AACP,IAAA;AAGS,EAAA;AACH,IAAA;AAGE,IAAA;AAGA,MAAA;AAClB,IAAA;AAEiB,IAAA;AAEd,IAAA;AACY,MAAA;AAAqB;AAEhC,MAAA;AAAiB,QAAA;AAAA;AAEN,UAAA;AAAgC,QAAA;AAC3C,MAAA;AAEU,IAAA;AAGI,EAAA;AACT,EAAA;AACI,IAAA;AAEF,IAAA;AACf,EAAA;AACD;AAEC;AAGH;AAAA;AAGU,EAAA;AACa,IAAA;AACI,MAAA;AACF,QAAA;AACpB,MAAA;AAEa,MAAA;AACd,IAAA;AACH,EAAA;AAAA;AAGD;AJ6PyB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA","file":"/home/runner/_work/revault/revault/packages/sdk/lib/chunk-VCAQTGQE.cjs","sourcesContent":[null,"import type {\n  HsmCertificate,\n  PsdAuthChallengeResponse,\n  PsdPairingData,\n  PubKey,\n} from \"@ledgerhq/revault-api\";\nimport axios from \"axios\";\nimport axiosRetry from \"axios-retry\";\n\nimport type { Logger } from \"@/types\";\n\nimport { APPID_VAULT_ADMINISTRATOR, PATHS, SCRIPT_IDS, STR_ROLES } from \"./constants\";\nimport type { Device } from \"./types\";\n\ntype Options = {\n  /**\n   * device-api URL\n   */\n  deviceApiUrl: string;\n\n  /**\n   * salt used by device-api\n   */\n  salt: string;\n\n  /**\n   * seed generation function used for device-api device spawn\n   */\n  genSeed: (p: { salt: string; index: number }) => string;\n};\n\nexport type ApiDevice = {\n  /**\n   * bind a device to the given device index\n   */\n  with: (index: number) => Device;\n};\n\nexport function createApiDevice(options: Options, logger: Logger): ApiDevice {\n  const { genSeed } = options;\n  const sessionId = Date.now().toString();\n  const deviceApi = axios.create({ baseURL: options.deviceApiUrl });\n\n  axiosRetry(deviceApi, {\n    retryDelay: axiosRetry.linearDelay(1000),\n    retries: 3,\n    /* v8 ignore start */\n    retryCondition: () => true,\n    onRetry: (retryCount, err) => {\n      const formattedErr = `${err.code ?? `UNKNOWN`} on ${err.config?.method?.toUpperCase() ?? \"UNKNOWN_METHOD\"} ${err.config?.url ?? \"UNKNOWN_URL\"}`;\n      logger.warning(\n        `Retrying request to device-api (attempt ${retryCount}) - Cause: ${formattedErr}`,\n      );\n    },\n    /* v8 ignore stop */\n  });\n\n  deviceApi.interceptors.request.use(\n    (config) => {\n      /* v8 ignore start */\n      logger.debug(\n        `[device-api] ${config.method?.toUpperCase()} ${config.url}${config.data ? ` ${JSON.stringify(config.data)}` : \"\"}`,\n      );\n      if ([\"post\", \"put\"].includes(config.method!)) {\n        // when interceptor is called in combination with axios-retry, config.data can be a string or an object\n        // and we should return either a string or an object compatible with the original type\n        const isStringMode = typeof config.data === \"string\";\n        const data = (isStringMode ? JSON.parse(config.data) : config.data) as Record<\n          string,\n          unknown\n        >;\n        const enhancedData = {\n          sessionID: sessionId, // Used to ensure dedicated session if someones else uses same seed\n          psd_model: \"02\", // Stax\n          version: 3, // Used to properly enable noise channel\n          ...data,\n        };\n        config.data = isStringMode ? JSON.stringify(enhancedData) : enhancedData;\n      }\n      return config;\n    },\n    /* v8 ignore stop */\n    (error: Error) => Promise.reject(error),\n  );\n\n  return {\n    with: (index: number): Device => {\n      const seed = genSeed({ salt: options.salt, index });\n\n      const authenticate = async ({\n        challenge,\n        workspaceName,\n      }: {\n        challenge: PsdAuthChallengeResponse;\n        workspaceName: string;\n      }): Promise<string> => {\n        const role = challenge.role;\n        if (role === \"READ_ONLY_API_KEY\")\n          throw new Error(\"Invalid role for authenticate: READ_ONLY_API_KEY\");\n        const { data } = await deviceApi.post<string>(\"/authenticate\", {\n          seed,\n          challenge: Buffer.from(challenge.challenge, \"base64\").toString(\"hex\"),\n          application: APPID_VAULT_ADMINISTRATOR,\n          key_handle: challenge.keyHandle,\n          name: challenge.name,\n          role: STR_ROLES[role],\n          type: \"02\", // Stax\n          workspaceName,\n        });\n        return data;\n      };\n\n      const finalizePairingHandshake = async (params: {\n        handshake: string;\n        ciphertext: string;\n      }): Promise<string> => {\n        const { handshake, ciphertext } = params;\n        const payload = { seed, handshake, ciphertext };\n        const res = await deviceApi.post<string>(\"/finalize-pairing-handshake\", payload);\n        return res.data;\n      };\n\n      const generateSeedFragment = async (): Promise<string> => {\n        const payload = {\n          seed,\n          path: PATHS.KEY_MATERIAL,\n          goal: 0, // seed fragment\n        };\n        const { data } = await deviceApi.post<string>(\"/generate-key-component\", payload);\n        return data;\n      };\n\n      const generateWrappingKeyFragment = async (): Promise<string> => {\n        const goal = 1; // means Wrapping Key\n        const payload = { seed, goal, path: PATHS.KEY_MATERIAL };\n        const res = await deviceApi.post<string>(\"/generate-key-fragments\", payload);\n        return Buffer.from(res.data, \"hex\").toString(\"base64\");\n      };\n\n      const getAttestation = async (): Promise<{\n        attestation: {\n          codeHash: string;\n          attestationPub: string;\n          certificate: string;\n        };\n        buffer: Buffer;\n      }> => {\n        const { data: attestationStr } = await deviceApi.post<string>(\"/get-attestation\", { seed });\n        const attestationBuffer = Buffer.from(attestationStr, \"hex\");\n        const certLen = attestationBuffer.readInt8(32 + 65 + 1);\n        return {\n          attestation: {\n            codeHash: attestationBuffer.slice(0, 32).toString(\"base64\"),\n            attestationPub: attestationBuffer.slice(32, 32 + 65).toString(\"base64\"),\n            certificate: attestationBuffer.slice(32 + 65, 32 + 65 + 2 + certLen).toString(\"base64\"),\n          },\n          buffer: attestationBuffer,\n        };\n      };\n\n      const getConfidentialityKey = async (): Promise<{\n        confidentialityKeyCurve25519: string;\n        confidentialityKeySignature: string;\n      }> => {\n        const res = await deviceApi.post<{\n          confidentiality_key_curve25519: string;\n          confidentiality_key_signature: string;\n        }>(\"/get-confidentiality-key\", { seed });\n        return {\n          confidentialityKeyCurve25519: res.data.confidentiality_key_curve25519,\n          confidentialityKeySignature: res.data.confidentiality_key_signature,\n        };\n      };\n\n      const getConfidentialityPubKey = async (): Promise<{ pubKey: string; signature: string }> => {\n        return getPublicKey({ path: PATHS.CONFIDENTIALITY });\n      };\n\n      const getDeviceUserId = async (): Promise<string> => {\n        const res = await deviceApi.post<{ blue_device_id: string }>(\"/blue-device-id\", { seed });\n        return res.data.blue_device_id.toUpperCase();\n      };\n\n      const getU2FPubKey = async (): Promise<{ pubKey: string; signature: string }> => {\n        return getPublicKey({ path: PATHS.U2F });\n      };\n\n      const getValidationPubKey = async (): Promise<{ pubKey: string; signature: string }> => {\n        return getPublicKey({ path: PATHS.VALIDATION });\n      };\n\n      const hasPairing = async (): Promise<boolean> => {\n        const res = await deviceApi.post<string[]>(\"/get-partition-ids\", { seed });\n        return res.data.length > 0;\n      };\n\n      const initPairingHandshake = async (): Promise<{ pubKey: string; signature: string }> => {\n        const { data } = await deviceApi.post<{ attestation: string; pubKey: string }>(\n          \"/initiate-pairing-handshake\",\n          { seed },\n        );\n        return {\n          pubKey: data.pubKey,\n          signature: Buffer.from(data.attestation, \"hex\").toString(\"base64\"),\n        };\n      };\n\n      const openSession = async (params: {\n        secureChannel: { pubKey: PubKey; certificate: HsmCertificate };\n      }): Promise<void> => {\n        const { secureChannel } = params;\n        const signature = Buffer.from(secureChannel.certificate.signature, \"base64\");\n        const attestationPubKey = Buffer.from(secureChannel.certificate.attestationPub, \"base64\");\n        const attestationCertificate = Buffer.from(secureChannel.certificate.certificate, \"base64\");\n        const attestation = Buffer.concat([\n          Buffer.from([signature.length]),\n          signature,\n          attestationPubKey,\n          Buffer.from([attestationCertificate.length]),\n          attestationCertificate,\n        ]);\n        const payload = {\n          seed,\n          path: PATHS.CONFIDENTIALITY,\n          pubKey: secureChannel.pubKey,\n          attestation: attestation.toString(\"hex\"),\n          scriptId: SCRIPT_IDS.INIT_SESSION,\n        };\n        const { data: deviceResponse } = await deviceApi.post<string>(\"/open-session\", payload);\n        if (deviceResponse !== \"9000\") {\n          throw new Error(`device-api device failed with code: ${deviceResponse}`);\n        }\n      };\n\n      const register = async (params: {\n        challenge: string;\n        u2fRegisterData: string;\n        name: string;\n        role: \"ADMIN\" | \"SHARED_OWNER\" | \"OPERATOR\";\n      }): Promise<{\n        u2fRegister: Buffer;\n        keyHandle: Buffer;\n        rfu: number;\n        pubKey: string;\n      }> => {\n        const { challenge, u2fRegisterData, name, role } = params;\n        const payload = {\n          seed,\n          challenge,\n          name,\n          role: STR_ROLES[role],\n          hsm_data: u2fRegisterData,\n          type: \"02\", // Stax\n          application: APPID_VAULT_ADMINISTRATOR,\n        };\n        const { data } = await deviceApi.post<string>(\"/register\", payload);\n        const response = Buffer.from(data, \"hex\");\n        let i = 0;\n        const rfu = response.slice(i, (i += 1))[0]!;\n        const pubKey = response.slice(i, (i += 65)).toString(\"hex\");\n        const keyHandleLength = response.slice(i, ++i)[0]!;\n        const keyHandle = response.slice(i, (i += keyHandleLength));\n        return {\n          u2fRegister: response.slice(0, response.length - 2),\n          keyHandle,\n          rfu,\n          pubKey,\n        };\n      };\n\n      const registerData = async (params: { challenge: string }): Promise<string> => {\n        const { challenge } = params;\n        const payload = { seed, challenge };\n        const res = await deviceApi.post<string>(\"/u2f-register-data\", payload);\n        return res.data;\n      };\n\n      const setPairing = async ({ pairing }: { pairing: PsdPairingData }): Promise<void> => {\n        const payload = {\n          seed,\n          blob: pairing.blob,\n          pairing: {\n            bootstrap_enabled: pairing.pairing.bootstrapEnabled,\n            partition_key: pairing.pairing.partitionKey,\n            workspace_name: pairing.pairing.workspaceName,\n          },\n          partition_key_attestation: {\n            code_hash: pairing.partitionKeyAttestation.codeHash,\n            attestation_pub: pairing.partitionKeyAttestation.attestationPub,\n            certificate: pairing.partitionKeyAttestation.certificate,\n            signature: pairing.partitionKeyAttestation.signature,\n          },\n        };\n        await deviceApi.post(\"/set-partition-key\", payload);\n      };\n\n      const startKKPatternAsResponder = async (params: {\n        handshake: string;\n        handshakeAttestation: HsmCertificate;\n        partitionId: string;\n      }): Promise<{ handshake: string; signature: string }> => {\n        const payload = {\n          seed,\n          script_id: SCRIPT_IDS.ACCOUNT_MANAGER_SESSION,\n          handshake: params.handshake,\n          // for device-api it's normal to have empty string as handshake_attestation\n          handshake_attestation: \"\",\n          partition_id: params.partitionId,\n        };\n        const { data } = await deviceApi.post<string>(\"/start-kk-pattern-as-responder\", payload);\n        const buffer = Buffer.from(data, \"hex\");\n        const dataLength = buffer.readInt8(0);\n        return {\n          handshake: buffer.slice(1, dataLength + 1).toString(\"base64\"),\n          signature: buffer.slice(dataLength + 1).toString(\"base64\"),\n        };\n      };\n\n      const startKPatternAsResponder = async (params: {\n        handshake: string;\n        handshakeAttestation: HsmCertificate;\n        partitionId: string;\n      }): Promise<void> => {\n        const { handshake, partitionId } = params;\n        const payload = {\n          seed,\n          script_id: SCRIPT_IDS.ACCOUNT_MANAGER_SESSION,\n          handshake,\n          // for device-api it's normal to have empty string as handshake_attestation\n          handshake_attestation: \"\",\n          partition_id: partitionId,\n        };\n        const { data: deviceResponse } = await deviceApi.post<string>(\n          \"/start-k-pattern-as-responder\",\n          payload,\n        );\n        if (deviceResponse !== \"9000\") {\n          throw new Error(`device-api device failed with code: ${deviceResponse}`);\n        }\n      };\n\n      const getPublicKey = async (params: {\n        path: string;\n      }): Promise<{ pubKey: string; signature: string }> => {\n        const { path } = params;\n        type DeviceApiGetPubKeyResponse = { attestation: string; pubKey: string };\n        const payload = { seed, secp256k1: true, path };\n        const res = await deviceApi.post<DeviceApiGetPubKeyResponse>(\"/get-public-key\", payload);\n        return {\n          pubKey: res.data.pubKey,\n          signature: Buffer.from(res.data.attestation, \"hex\").toString(\"base64\"),\n        };\n      };\n\n      const validateVaultOperation = async (params: { actions: string[] }): Promise<string> => {\n        const { actions } = params;\n        const payload = {\n          seed,\n          path: PATHS.VALIDATION,\n          actions,\n        };\n        const { data: signature } = await deviceApi.post<string>(\"/validate-op\", payload);\n        return signature;\n      };\n\n      const sendAPDU = (_apdu: string): Promise<string> => {\n        logger.info(\"Can't send arbitrary APDU to software device\");\n        return Promise.resolve(\"9000\");\n      };\n\n      const poll = async (): Promise<{ isAppOpened: boolean }> => {\n        await new Promise((r) => setTimeout(r, 1e3));\n        return { isAppOpened: true };\n      };\n\n      const pollApp = async (): Promise<string> => {\n        await new Promise((r) => setTimeout(r, 1e3));\n        return \"9000\";\n      };\n\n      return {\n        authenticate,\n        finalizePairingHandshake,\n        generateSeedFragment,\n        generateWrappingKeyFragment,\n        getAttestation,\n        getConfidentialityKey,\n        getConfidentialityPubKey,\n        getDeviceUserId,\n        getU2FPubKey,\n        getValidationPubKey,\n        hasPairing,\n        initPairingHandshake,\n        openSession,\n        register,\n        registerData,\n        setPairing,\n        startKKPatternAsResponder,\n        startKPatternAsResponder,\n        validateVaultOperation,\n        sendAPDU,\n        poll,\n        pollApp,\n      };\n    },\n  };\n}\n","export const PATHS = {\n  U2F: \"5655636'/5583430'\",\n  CONFIDENTIALITY: \"5655636'/4410950'\",\n  KEY_MATERIAL: \"5655636'/4932953'\",\n  VALIDATION: \"5655636'/5652812'\",\n} as const;\n\nexport const STATUS_LENGTH = 2;\n\nexport const SCRIPT_IDS = {\n  INIT_SESSION: 3,\n  ACCOUNT_MANAGER_SESSION: 2,\n} as const;\n\nexport const STR_ROLES: Record<\"OPERATOR\" | \"ADMIN\" | \"SHARED_OWNER\", string> = {\n  OPERATOR: \"00\",\n  ADMIN: \"01\",\n  SHARED_OWNER: \"02\",\n} as const;\n\nexport const APPID_VAULT_ADMINISTRATOR =\n  \"ad5be1a1fe011ce7f53ae081a22ae000a42021f3f94106a3bac9f76e8230e4b9\";\n\nconst all61xxStatus = [];\nfor (let i = 0x6100; i <= 0x61ff; i++) {\n  all61xxStatus.push(i);\n}\n\nexport const PAGINATED_STATUS = all61xxStatus;\nexport const STREAMING_RESPONSE = 0x02;\nexport const STREAMING_NEXT_ACTION = 0x01;\n","import { TransportStatusError } from \"@ledgerhq/errors\";\n\nexport const isTransportStatusError = (error: unknown): error is TransportStatusError => {\n  return (\n    error instanceof TransportStatusError ||\n    (error instanceof Error && \"statusCode\" in error && error.message.startsWith(\"Ledger device:\"))\n  );\n};\n\nconst CANCEL_STATUS_CODES = [\n  0x6985, // cancel on Ledger Blue\n\n  // STAX\n  0xb00c, // cancel collect wk fragment\n  0xb00d, // cancel user registration\n  0xb010, // cancel review\n  0xb012, // cancel master seed generation\n];\n\nexport const isDeviceCancelError = (error: Error): boolean => {\n  return isTransportStatusError(error) && CANCEL_STATUS_CODES.includes(error.statusCode);\n};\n","// ------------------------------------------------------------------------------------------------\n// ------------------------------------------------------------------------------------------------\n//                  THIS IS SOME HORRIBLE CODE IMPORTED JUST\n//              FOR THE SAKE OF NOT IMPORTING UGLY, WICKED, AND\n//                     BROKEN @ledgerhq/live-* LIBRARIES\n//\n//                 IT'S MEANT TO BE CONSIDERED AS A BLACK BOX\n// ------------------------------------------------------------------------------------------------\n// ------------------------------------------------------------------------------------------------\nimport {\n  BluetoothRequired,\n  CantOpenDevice,\n  DeviceHalted,\n  FirmwareOrAppUpdateRequired,\n  TransportInterfaceNotAvailable,\n  TransportStatusError,\n  TransportWebUSBGestureRequired,\n} from \"@ledgerhq/errors\";\nimport type Transport from \"@ledgerhq/hw-transport\";\nimport { Observable, throwError, timer } from \"rxjs\";\nimport { catchError, mergeMap, retryWhen } from \"rxjs/operators\";\n\nconst initialErrorRemapping = (error: Error): Observable<never> =>\n  throwError(\n    error && error instanceof TransportStatusError && error.statusCode === 0x6faa\n      ? new DeviceHalted(error.message)\n      : error instanceof TransportStatusError && error.statusCode === 0x6b00\n        ? new FirmwareOrAppUpdateRequired(error.message)\n        : error,\n  );\n\n// eslint-disable-next-line @typescript-eslint/no-empty-function\nconst never = new Promise(() => {});\n\ntype Discovery = Observable<{\n  type: \"add\" | \"remove\";\n  id: string;\n  name: string;\n}>;\n\nexport type TransportModule = {\n  // unique transport name that identify the transport module\n  id: string;\n  // open a device by an id, this id must be unique across all modules\n  // you can typically prefix it with `something|` that identify it globally\n  // returns falsy if the transport module can't handle this id\n  // here, open means we want to START doing something with the transport\n  open: (id: string) => Promise<Transport> | null | undefined;\n  // here, close means we want to STOP doing something with the transport\n  close?: (transport: Transport, id: string) => Promise<void> | null | undefined;\n  // disconnect/interrupt a device connection globally\n  // returns falsy if the transport module can't handle this id\n  disconnect: (id: string) => Promise<void> | null | undefined;\n  // optional observable that allows to discover a transport\n  discovery?: Discovery;\n};\n\nconst modules: TransportModule[] = [];\n\nexport const registerTransportModule = (module: TransportModule): void => {\n  modules.push(module);\n};\n\nexport const close = (transport: Transport, deviceId: string): Promise<void> => {\n  for (const m of modules) {\n    const p = m.close?.(transport, deviceId);\n    if (p) return p;\n  }\n  // fallback on an actual close\n  return transport.close();\n};\n\nexport const open = (deviceId: string): Promise<Transport> => {\n  for (const m of modules) {\n    const p = m.open(deviceId);\n    if (p) return p;\n  }\n  return Promise.reject(new Error(`Can't find handler to open ${deviceId}`));\n};\n\nconst transportFinally =\n  (cleanup: () => Promise<void>) =>\n  <T>(observable: Observable<T>): Observable<T> =>\n    // @ts-expect-error typescript not checking against the instanceof\n    Observable.create((o) => {\n      let done = false;\n\n      // eslint-disable-next-line @typescript-eslint/no-explicit-any\n      const finalize = (): any => {\n        if (done) return never;\n        done = true;\n        return cleanup();\n      };\n\n      const sub = observable.subscribe({\n        next: (e) => o.next(e),\n        complete: () => {\n          void finalize().then(() => o.complete());\n        },\n        error: (e) => {\n          void finalize().then(() => o.error(e));\n        },\n      });\n      return () => {\n        sub.unsubscribe();\n        void finalize();\n      };\n    });\n\ntype AccessHook = () => () => void;\n\nconst accessHooks: AccessHook[] = [];\n\nconst deviceQueues = {};\n\nexport const withDevice =\n  (deviceId: string) =>\n  <T>(job: (t: Transport) => Observable<T>): Observable<T> =>\n    new Observable((o) => {\n      // @ts-expect-error typescript not checking against the instanceof\n      let unsubscribed;\n      // @ts-expect-error typescript not checking against the instanceof\n      let sub;\n      // @ts-expect-error typescript not checking against the instanceof\n      const deviceQueue = deviceQueues[deviceId] ?? Promise.resolve();\n\n      // @ts-expect-error typescript not checking against the instanceof\n      const finalize = (transport, cleanups): Promise<void> =>\n        close(transport, deviceId)\n          // eslint-disable-next-line @typescript-eslint/no-empty-function\n          .catch(() => {})\n          .then(() => {\n            // @ts-expect-error typescript not checking against the instanceof\n            cleanups.forEach((c) => c());\n          });\n\n      // when we'll finish all the current job, we'll call finish\n      // @ts-expect-error typescript not checking against the instanceof\n      let finish;\n      // this new promise is the next exec queue\n      // @ts-expect-error typescript not checking against the instanceof\n      deviceQueues[deviceId] = new Promise((resolve) => {\n        finish = resolve;\n      });\n      // for any new job, we'll now wait the exec queue to be available\n      deviceQueue\n        .then(() => open(deviceId)) // open the transport\n        // @ts-expect-error typescript not checking against the instanceof\n        .then(async (transport) => {\n          // @ts-expect-error typescript not checking against the instanceof\n          if (unsubscribed) {\n            // it was unsubscribed prematurely\n            // @ts-expect-error typescript not checking against the instanceof\n            return finalize(transport, [finish]);\n          }\n\n          if (\n            transport.requestConnectionPriority &&\n            typeof transport.requestConnectionPriority === \"function\"\n          ) {\n            await transport.requestConnectionPriority(\"High\");\n          }\n\n          return transport;\n        })\n        // @ts-expect-error typescript not checking against the instanceof\n        .catch((e) => {\n          // @ts-expect-error typescript not checking against the instanceof\n          finish();\n          if (e instanceof BluetoothRequired) throw e;\n          if (e instanceof TransportWebUSBGestureRequired) throw e;\n          if (e instanceof TransportInterfaceNotAvailable) throw e;\n          throw new CantOpenDevice(e.message);\n        })\n        // @ts-expect-error typescript not checking against the instanceof\n        .then((transport) => {\n          if (!transport) return;\n\n          // @ts-expect-error typescript not checking against the instanceof\n          if (unsubscribed) {\n            // it was unsubscribed prematurely\n            // @ts-expect-error typescript not checking against the instanceof\n            return finalize(transport, [finish]);\n          }\n\n          const cleanups = accessHooks.map((hook) => hook());\n          sub = job(transport) // $FlowFixMe\n            .pipe(\n              catchError(initialErrorRemapping),\n              // $FlowFixMe\n              transportFinally(() =>\n                // @ts-expect-error typescript not checking against the instanceof\n                finalize(transport, [...cleanups, finish]),\n              ),\n            )\n            .subscribe(o);\n        })\n        // @ts-expect-error typescript not checking against the instanceof\n        .catch((error) => o.error(error));\n      return () => {\n        unsubscribed = true;\n        // @ts-expect-error typescript not checking against the instanceof\n        if (sub) sub.unsubscribe();\n      };\n    });\n\nconst WITH_DEVICE_POLLING_DELAY = 500;\n\nexport const retryWhileErrors =\n  (acceptError: (arg0: Error) => boolean) =>\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  (attempts: Observable<any>): Observable<any> =>\n    attempts.pipe(\n      mergeMap((error) => {\n        if (!acceptError(error)) {\n          return throwError(error);\n        }\n\n        return timer(WITH_DEVICE_POLLING_DELAY);\n      }),\n    );\n\nexport const withDevicePolling =\n  (deviceId: string) =>\n  <T>(\n    job: (arg0: Transport) => Observable<T>,\n    acceptError: (arg0: Error) => boolean = () => false,\n  ): Observable<T> =>\n    withDevice(deviceId)(job).pipe(retryWhen(retryWhileErrors(acceptError)));\n"]}