@ledgerhq/revault-sdk 0.21.4 → 0.21.6

package/lib/{chunk-7WN7G7BY.js → chunk-OJW4TCAG.js}

@@ -73,7 +73,11 @@ function createApiDevice(options, logger) {
   );
   return {
     with: (index) => {
-      const seed = genSeed({ salt: options.salt, index });
+      const __seed = genSeed({ salt: options.salt, index });
+      const getSeed = async () => {
+        if (typeof __seed === "string") return Promise.resolve(__seed);
+        return __seed;
+      };
       const authenticate = async ({
         challenge,
         workspaceName
@@ -82,7 +86,7 @@ function createApiDevice(options, logger) {
         if (role === "READ_ONLY_API_KEY")
           throw new Error("Invalid role for authenticate: READ_ONLY_API_KEY");
         const { data } = await deviceApi.post("/authenticate", {
-          seed,
+          seed: await getSeed(),
           challenge: Buffer.from(challenge.challenge, "base64").toString("hex"),
           application: APPID_VAULT_ADMINISTRATOR,
           key_handle: challenge.keyHandle,
@@ -96,13 +100,13 @@ function createApiDevice(options, logger) {
       };
       const finalizePairingHandshake = async (params) => {
         const { handshake, partitionId } = params;
-        const payload = { seed, handshake, ciphertext: partitionId };
+        const payload = { seed: await getSeed(), handshake, ciphertext: partitionId };
         const res = await deviceApi.post("/finalize-pairing-handshake", payload);
         return res.data;
       };
       const generateSeedFragment = async () => {
         const payload = {
-          seed,
+          seed: await getSeed(),
           path: PATHS.KEY_MATERIAL,
           goal: 0
           // seed fragment
@@ -112,12 +116,14 @@ function createApiDevice(options, logger) {
       };
       const generateWrappingKeyFragment = async () => {
         const goal = 1;
-        const payload = { seed, goal, path: PATHS.KEY_MATERIAL };
+        const payload = { seed: await getSeed(), goal, path: PATHS.KEY_MATERIAL };
         const res = await deviceApi.post("/generate-key-fragments", payload);
         return Buffer.from(res.data, "hex").toString("base64");
       };
       const getAttestation = async () => {
-        const { data: attestationStr } = await deviceApi.post("/get-attestation", { seed });
+        const { data: attestationStr } = await deviceApi.post("/get-attestation", {
+          seed: await getSeed()
+        });
         const attestationBuffer = Buffer.from(attestationStr, "hex");
         const certLen = attestationBuffer.readInt8(32 + 65 + 1);
         return {
@@ -130,7 +136,7 @@ function createApiDevice(options, logger) {
         };
       };
       const getConfidentialityKey = async () => {
-        const res = await deviceApi.post("/get-confidentiality-key", { seed });
+        const res = await deviceApi.post("/get-confidentiality-key", { seed: await getSeed() });
         return {
           confidentialityKeyCurve25519: res.data.confidentiality_key_curve25519,
           confidentialityKeySignature: res.data.confidentiality_key_signature
@@ -140,7 +146,9 @@ function createApiDevice(options, logger) {
         return getPublicKey({ path: PATHS.CONFIDENTIALITY });
       };
       const getDeviceUserId = async () => {
-        const res = await deviceApi.post("/blue-device-id", { seed });
+        const res = await deviceApi.post("/blue-device-id", {
+          seed: await getSeed()
+        });
         return res.data.blue_device_id.toUpperCase();
       };
       const getU2FPubKey = async () => {
@@ -150,13 +158,13 @@ function createApiDevice(options, logger) {
         return getPublicKey({ path: PATHS.VALIDATION });
       };
       const hasPairing = async () => {
-        const res = await deviceApi.post("/get-partition-ids", { seed });
+        const res = await deviceApi.post("/get-partition-ids", { seed: await getSeed() });
         return res.data.length > 0;
       };
       const initPairingHandshake = async () => {
         const { data } = await deviceApi.post(
           "/initiate-pairing-handshake",
-          { seed }
+          { seed: await getSeed() }
         );
         return {
           pubKey: data.pubKey,
@@ -176,7 +184,7 @@ function createApiDevice(options, logger) {
           attestationCertificate
         ]);
         const payload = {
-          seed,
+          seed: await getSeed(),
           path: PATHS.CONFIDENTIALITY,
           pubKey: secureChannel.pubKey,
           attestation: attestation.toString("hex"),
@@ -190,7 +198,7 @@ function createApiDevice(options, logger) {
       const register = async (params) => {
         const { challenge, u2fRegisterData, name, role } = params;
         const payload = {
-          seed,
+          seed: await getSeed(),
           challenge,
           name,
           role: STR_ROLES[role],
@@ -215,13 +223,13 @@ function createApiDevice(options, logger) {
       };
       const registerData = async (params) => {
         const { challenge } = params;
-        const payload = { seed, challenge };
+        const payload = { seed: await getSeed(), challenge };
         const res = await deviceApi.post("/u2f-register-data", payload);
         return res.data;
       };
       const setPairing = async ({ pairing }) => {
         const payload = {
-          seed,
+          seed: await getSeed(),
           blob: pairing.blob,
           pairing: {
             bootstrap_enabled: pairing.pairing.bootstrapEnabled,
@@ -239,7 +247,7 @@ function createApiDevice(options, logger) {
       };
       const startKKPatternAsResponder = async (params) => {
         const payload = {
-          seed,
+          seed: await getSeed(),
           script_id: SCRIPT_IDS.ACCOUNT_MANAGER_SESSION,
           handshake: params.handshake,
           // for device-api it's normal to have empty string as handshake_attestation
@@ -257,7 +265,7 @@ function createApiDevice(options, logger) {
       const startKPatternAsResponder = async (params) => {
         const { handshake, partitionId } = params;
         const payload = {
-          seed,
+          seed: await getSeed(),
           script_id: SCRIPT_IDS.ACCOUNT_MANAGER_SESSION,
           handshake,
           // for device-api it's normal to have empty string as handshake_attestation
@@ -274,7 +282,7 @@ function createApiDevice(options, logger) {
       };
       const getPublicKey = async (params) => {
         const { path } = params;
-        const payload = { seed, secp256k1: true, path };
+        const payload = { seed: await getSeed(), secp256k1: true, path };
         const res = await deviceApi.post("/get-public-key", payload);
         return {
           pubKey: res.data.pubKey,
@@ -284,7 +292,7 @@ function createApiDevice(options, logger) {
       const validateVaultOperation = async (params) => {
         const { actions } = params;
         const payload = {
-          seed,
+          seed: await getSeed(),
           path: PATHS.VALIDATION,
           actions
         };
@@ -497,4 +505,4 @@ export {
   registerTransportModule,
   withDevicePolling
 };
-//# sourceMappingURL=chunk-7WN7G7BY.js.map
+//# sourceMappingURL=chunk-OJW4TCAG.js.map

package/lib/chunk-OJW4TCAG.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/device/api-device.ts","../src/device/constants.ts","../src/device/utils.ts","../src/device/device-access.ts"],"sourcesContent":["import type {\n  HsmCertificate,\n  PsdAuthChallengeResponse,\n  PsdPairingData,\n  PubKey,\n} from \"@ledgerhq/revault-api\";\nimport axios from \"axios\";\nimport axiosRetry from \"axios-retry\";\nimport { v4 as uuidv4 } from \"uuid\";\n\nimport type { Logger } from \"@/logger\";\n\nimport { APPID_VAULT_ADMINISTRATOR, PATHS, SCRIPT_IDS, STR_ROLES } from \"./constants\";\nimport type { Device } from \"./types\";\n\ntype Options = {\n  /**\n   * device-api URL\n   */\n  deviceApiUrl: string;\n\n  /**\n   * salt used by device-api\n   */\n  salt: string;\n\n  /**\n   * seed generation function used for device-api device spawn\n   */\n  genSeed: (p: { salt: string; index: number }) => string | Promise<string>;\n};\n\nexport type ApiDevice = {\n  /**\n   * bind a device to the given device index\n   */\n  with: (index: number) => Device;\n};\n\nexport function createApiDevice(options: Options, logger: Logger): ApiDevice {\n  const { genSeed } = options;\n  const sessionId = uuidv4();\n  const deviceApi = axios.create({ baseURL: options.deviceApiUrl });\n\n  axiosRetry(deviceApi, {\n    retryDelay: axiosRetry.linearDelay(1000),\n    retries: 3,\n    /* v8 ignore start */\n    retryCondition: () => true,\n    onRetry: (retryCount, err) => {\n      const formattedErr = `${err.code ?? `UNKNOWN`} on ${err.config?.method?.toUpperCase() ?? \"UNKNOWN_METHOD\"} ${err.config?.url ?? \"UNKNOWN_URL\"}`;\n      logger.warning(\n        `Retrying request to device-api (attempt ${retryCount}) - Cause: ${formattedErr}`,\n      );\n    },\n    /* v8 ignore stop */\n  });\n\n  deviceApi.interceptors.request.use(\n    (config) => {\n      /* v8 ignore start */\n      logger.debug(\n        `[device-api] ${config.method?.toUpperCase()} ${config.url}${config.data ? ` ${JSON.stringify(config.data)}` : \"\"}`,\n      );\n      if ([\"post\", \"put\"].includes(config.method!)) {\n        // when interceptor is called in combination with axios-retry, config.data can be a string or an object\n        // and we should return either a string or an object compatible with the original type\n        const isStringMode = typeof config.data === \"string\";\n        const data = (isStringMode ? JSON.parse(config.data) : config.data) as Record<\n          string,\n          unknown\n        >;\n        const enhancedData = {\n          sessionID: sessionId, // Used to ensure dedicated session if someones else uses same seed\n          psd_model: \"02\", // Stax\n          version: 3, // Used to properly enable noise channel\n          ...data,\n        };\n        config.data = isStringMode ? JSON.stringify(enhancedData) : enhancedData;\n      }\n      return config;\n    },\n    /* v8 ignore stop */\n    (error: Error) => Promise.reject(error),\n  );\n\n  return {\n    with: (index: number): Device => {\n      const __seed = genSeed({ salt: options.salt, index });\n\n      const getSeed = async (): Promise<string> => {\n        if (typeof __seed === \"string\") return Promise.resolve(__seed);\n        return __seed;\n      };\n\n      const authenticate = async ({\n        challenge,\n        workspaceName,\n      }: {\n        challenge: PsdAuthChallengeResponse;\n        workspaceName: string;\n      }): Promise<string> => {\n        const role = challenge.role;\n        if (role === \"READ_ONLY_API_KEY\")\n          throw new Error(\"Invalid role for authenticate: READ_ONLY_API_KEY\");\n        const { data } = await deviceApi.post<string>(\"/authenticate\", {\n          seed: await getSeed(),\n          challenge: Buffer.from(challenge.challenge, \"base64\").toString(\"hex\"),\n          application: APPID_VAULT_ADMINISTRATOR,\n          key_handle: challenge.keyHandle,\n          name: challenge.name,\n          role: STR_ROLES[role],\n          type: \"02\", // Stax\n          workspaceName,\n        });\n        return data;\n      };\n\n      const finalizePairingHandshake = async (params: {\n        handshake: string;\n        partitionId: string;\n      }): Promise<string> => {\n        const { handshake, partitionId } = params;\n        const payload = { seed: await getSeed(), handshake, ciphertext: partitionId };\n        const res = await deviceApi.post<string>(\"/finalize-pairing-handshake\", payload);\n        return res.data;\n      };\n\n      const generateSeedFragment = async (): Promise<string> => {\n        const payload = {\n          seed: await getSeed(),\n          path: PATHS.KEY_MATERIAL,\n          goal: 0, // seed fragment\n        };\n        const { data } = await deviceApi.post<string>(\"/generate-key-component\", payload);\n        return data;\n      };\n\n      const generateWrappingKeyFragment = async (): Promise<string> => {\n        const goal = 1; // means Wrapping Key\n        const payload = { seed: await getSeed(), goal, path: PATHS.KEY_MATERIAL };\n        const res = await deviceApi.post<string>(\"/generate-key-fragments\", payload);\n        return Buffer.from(res.data, \"hex\").toString(\"base64\");\n      };\n\n      const getAttestation = async (): Promise<{\n        attestation: {\n          codeHash: string;\n          attestationPub: string;\n          certificate: string;\n        };\n        buffer: Buffer;\n      }> => {\n        const { data: attestationStr } = await deviceApi.post<string>(\"/get-attestation\", {\n          seed: await getSeed(),\n        });\n        const attestationBuffer = Buffer.from(attestationStr, \"hex\");\n        const certLen = attestationBuffer.readInt8(32 + 65 + 1);\n        return {\n          attestation: {\n            codeHash: attestationBuffer.slice(0, 32).toString(\"base64\"),\n            attestationPub: attestationBuffer.slice(32, 32 + 65).toString(\"base64\"),\n            certificate: attestationBuffer.slice(32 + 65, 32 + 65 + 2 + certLen).toString(\"base64\"),\n          },\n          buffer: attestationBuffer,\n        };\n      };\n\n      const getConfidentialityKey = async (): Promise<{\n        confidentialityKeyCurve25519: string;\n        confidentialityKeySignature: string;\n      }> => {\n        const res = await deviceApi.post<{\n          confidentiality_key_curve25519: string;\n          confidentiality_key_signature: string;\n        }>(\"/get-confidentiality-key\", { seed: await getSeed() });\n        return {\n          confidentialityKeyCurve25519: res.data.confidentiality_key_curve25519,\n          confidentialityKeySignature: res.data.confidentiality_key_signature,\n        };\n      };\n\n      const getConfidentialityPubKey = async (): Promise<{ pubKey: string; signature: string }> => {\n        return getPublicKey({ path: PATHS.CONFIDENTIALITY });\n      };\n\n      const getDeviceUserId = async (): Promise<string> => {\n        const res = await deviceApi.post<{ blue_device_id: string }>(\"/blue-device-id\", {\n          seed: await getSeed(),\n        });\n        return res.data.blue_device_id.toUpperCase();\n      };\n\n      const getU2FPubKey = async (): Promise<{ pubKey: string; signature: string }> => {\n        return getPublicKey({ path: PATHS.U2F });\n      };\n\n      const getValidationPubKey = async (): Promise<{ pubKey: string; signature: string }> => {\n        return getPublicKey({ path: PATHS.VALIDATION });\n      };\n\n      const hasPairing = async (): Promise<boolean> => {\n        const res = await deviceApi.post<string[]>(\"/get-partition-ids\", { seed: await getSeed() });\n        return res.data.length > 0;\n      };\n\n      const initPairingHandshake = async (): Promise<{ pubKey: string; signature: string }> => {\n        const { data } = await deviceApi.post<{ attestation: string; pubKey: string }>(\n          \"/initiate-pairing-handshake\",\n          { seed: await getSeed() },\n        );\n        return {\n          pubKey: data.pubKey,\n          signature: Buffer.from(data.attestation, \"hex\").toString(\"base64\"),\n        };\n      };\n\n      const openSession = async (params: {\n        secureChannel: { pubKey: PubKey; certificate: HsmCertificate };\n      }): Promise<void> => {\n        const { secureChannel } = params;\n        const signature = Buffer.from(secureChannel.certificate.signature, \"base64\");\n        const attestationPubKey = Buffer.from(secureChannel.certificate.attestationPub, \"base64\");\n        const attestationCertificate = Buffer.from(secureChannel.certificate.certificate, \"base64\");\n        const attestation = Buffer.concat([\n          Buffer.from([signature.length]),\n          signature,\n          attestationPubKey,\n          Buffer.from([attestationCertificate.length]),\n          attestationCertificate,\n        ]);\n        const payload = {\n          seed: await getSeed(),\n          path: PATHS.CONFIDENTIALITY,\n          pubKey: secureChannel.pubKey,\n          attestation: attestation.toString(\"hex\"),\n          scriptId: SCRIPT_IDS.INIT_SESSION,\n        };\n        const { data: deviceResponse } = await deviceApi.post<string>(\"/open-session\", payload);\n        if (deviceResponse !== \"9000\") {\n          throw new Error(`device-api device failed with code: ${deviceResponse}`);\n        }\n      };\n\n      const register = async (params: {\n        challenge: string;\n        u2fRegisterData: string;\n        name: string;\n        role: \"ADMIN\" | \"SHARED_OWNER\" | \"OPERATOR\";\n      }): Promise<{\n        u2fRegister: Buffer;\n        keyHandle: Buffer;\n        rfu: number;\n        pubKey: string;\n      }> => {\n        const { challenge, u2fRegisterData, name, role } = params;\n        const payload = {\n          seed: await getSeed(),\n          challenge,\n          name,\n          role: STR_ROLES[role],\n          hsm_data: u2fRegisterData,\n          type: \"02\", // Stax\n          application: APPID_VAULT_ADMINISTRATOR,\n        };\n        const { data } = await deviceApi.post<string>(\"/register\", payload);\n        const response = Buffer.from(data, \"hex\");\n        let i = 0;\n        const rfu = response.slice(i, (i += 1))[0]!;\n        const pubKey = response.slice(i, (i += 65)).toString(\"hex\");\n        const keyHandleLength = response.slice(i, ++i)[0]!;\n        const keyHandle = response.slice(i, (i += keyHandleLength));\n        return {\n          u2fRegister: response.slice(0, response.length - 2),\n          keyHandle,\n          rfu,\n          pubKey,\n        };\n      };\n\n      const registerData = async (params: { challenge: string }): Promise<string> => {\n        const { challenge } = params;\n        const payload = { seed: await getSeed(), challenge };\n        const res = await deviceApi.post<string>(\"/u2f-register-data\", payload);\n        return res.data;\n      };\n\n      const setPairing = async ({ pairing }: { pairing: PsdPairingData }): Promise<void> => {\n        const payload = {\n          seed: await getSeed(),\n          blob: pairing.blob,\n          pairing: {\n            bootstrap_enabled: pairing.pairing.bootstrapEnabled,\n            partition_key: pairing.pairing.partitionKey,\n            workspace_name: pairing.pairing.workspaceName,\n          },\n          partition_key_attestation: {\n            code_hash: pairing.partitionKeyAttestation.codeHash,\n            attestation_pub: pairing.partitionKeyAttestation.attestationPub,\n            certificate: pairing.partitionKeyAttestation.certificate,\n            signature: pairing.partitionKeyAttestation.signature,\n          },\n        };\n        await deviceApi.post(\"/set-partition-key\", payload);\n      };\n\n      const startKKPatternAsResponder = async (params: {\n        handshake: string;\n        handshakeAttestation: HsmCertificate;\n        partitionId: string;\n      }): Promise<{ handshake: string; signature: string }> => {\n        const payload = {\n          seed: await getSeed(),\n          script_id: SCRIPT_IDS.ACCOUNT_MANAGER_SESSION,\n          handshake: params.handshake,\n          // for device-api it's normal to have empty string as handshake_attestation\n          handshake_attestation: \"\",\n          partition_id: params.partitionId,\n        };\n        const { data } = await deviceApi.post<string>(\"/start-kk-pattern-as-responder\", payload);\n        const buffer = Buffer.from(data, \"hex\");\n        const dataLength = buffer.readInt8(0);\n        return {\n          handshake: buffer.slice(1, dataLength + 1).toString(\"base64\"),\n          signature: buffer.slice(dataLength + 1).toString(\"base64\"),\n        };\n      };\n\n      const startKPatternAsResponder = async (params: {\n        handshake: string;\n        handshakeAttestation: HsmCertificate;\n        partitionId: string;\n      }): Promise<void> => {\n        const { handshake, partitionId } = params;\n        const payload = {\n          seed: await getSeed(),\n          script_id: SCRIPT_IDS.ACCOUNT_MANAGER_SESSION,\n          handshake,\n          // for device-api it's normal to have empty string as handshake_attestation\n          handshake_attestation: \"\",\n          partition_id: partitionId,\n        };\n        const { data: deviceResponse } = await deviceApi.post<string>(\n          \"/start-k-pattern-as-responder\",\n          payload,\n        );\n        if (deviceResponse !== \"9000\") {\n          throw new Error(`device-api device failed with code: ${deviceResponse}`);\n        }\n      };\n\n      const getPublicKey = async (params: {\n        path: string;\n      }): Promise<{ pubKey: string; signature: string }> => {\n        const { path } = params;\n        type DeviceApiGetPubKeyResponse = { attestation: string; pubKey: string };\n        const payload = { seed: await getSeed(), secp256k1: true, path };\n        const res = await deviceApi.post<DeviceApiGetPubKeyResponse>(\"/get-public-key\", payload);\n        return {\n          pubKey: res.data.pubKey,\n          signature: Buffer.from(res.data.attestation, \"hex\").toString(\"base64\"),\n        };\n      };\n\n      const validateVaultOperation = async (params: { actions: string[] }): Promise<string> => {\n        const { actions } = params;\n        const payload = {\n          seed: await getSeed(),\n          path: PATHS.VALIDATION,\n          actions,\n        };\n        const { data: signature } = await deviceApi.post<string>(\"/validate-op\", payload);\n        return signature;\n      };\n\n      const sendAPDU = (_apdu: string): Promise<string> => {\n        logger.info(\"Can't send arbitrary APDU to software device\");\n        return Promise.resolve(\"9000\");\n      };\n\n      const getVersion = async (): Promise<string> => {\n        return \"1.2.3\";\n      };\n\n      const poll = async (): Promise<{ isAppOpened: boolean }> => {\n        await new Promise((r) => setTimeout(r, 1e3));\n        return { isAppOpened: true };\n      };\n\n      const pollApp = async (): Promise<string> => {\n        await new Promise((r) => setTimeout(r, 1e3));\n        return \"9000\";\n      };\n\n      return {\n        authenticate,\n        finalizePairingHandshake,\n        generateSeedFragment,\n        generateWrappingKeyFragment,\n        getAttestation,\n        getConfidentialityKey,\n        getConfidentialityPubKey,\n        getDeviceUserId,\n        getU2FPubKey,\n        getValidationPubKey,\n        hasPairing,\n        initPairingHandshake,\n        openSession,\n        register,\n        registerData,\n        setPairing,\n        startKKPatternAsResponder,\n        startKPatternAsResponder,\n        validateVaultOperation,\n        getVersion,\n        sendAPDU,\n        poll,\n        pollApp,\n      };\n    },\n  };\n}\n","export const PATHS = {\n  U2F: \"5655636'/5583430'\",\n  CONFIDENTIALITY: \"5655636'/4410950'\",\n  KEY_MATERIAL: \"5655636'/4932953'\",\n  VALIDATION: \"5655636'/5652812'\",\n} as const;\n\nexport const STATUS_LENGTH = 2;\n\nexport const SCRIPT_IDS = {\n  INIT_SESSION: 3,\n  ACCOUNT_MANAGER_SESSION: 2,\n} as const;\n\nexport const STR_ROLES: Record<\"OPERATOR\" | \"ADMIN\" | \"SHARED_OWNER\", string> = {\n  OPERATOR: \"00\",\n  ADMIN: \"01\",\n  SHARED_OWNER: \"02\",\n} as const;\n\nexport const APPID_VAULT_ADMINISTRATOR =\n  \"ad5be1a1fe011ce7f53ae081a22ae000a42021f3f94106a3bac9f76e8230e4b9\";\n\nconst all61xxStatus = [];\nfor (let i = 0x6100; i <= 0x61ff; i++) {\n  all61xxStatus.push(i);\n}\n\nexport const PAGINATED_STATUS = all61xxStatus;\nexport const STREAMING_RESPONSE = 0x02;\nexport const STREAMING_NEXT_ACTION = 0x01;\n","import { TransportStatusError } from \"@ledgerhq/errors\";\n\nexport const isTransportStatusError = (error: unknown): error is TransportStatusError => {\n  return (\n    error instanceof TransportStatusError ||\n    (error instanceof Error && \"statusCode\" in error && error.message.startsWith(\"Ledger device:\"))\n  );\n};\n\nconst CANCEL_STATUS_CODES = [\n  0x6985, // cancel on Ledger Blue\n\n  // STAX\n  0xb00c, // cancel collect wk fragment\n  0xb00d, // cancel user registration\n  0xb010, // cancel review\n  0xb012, // cancel master seed generation\n  0xb013, // cancel login\n];\n\nexport const isDeviceCancelError = (error: Error): boolean => {\n  return isTransportStatusError(error) && CANCEL_STATUS_CODES.includes(error.statusCode);\n};\n","// ------------------------------------------------------------------------------------------------\n// ------------------------------------------------------------------------------------------------\n//                  THIS IS SOME HORRIBLE CODE IMPORTED JUST\n//              FOR THE SAKE OF NOT IMPORTING UGLY, WICKED, AND\n//                     BROKEN @ledgerhq/live-* LIBRARIES\n//\n//                 IT'S MEANT TO BE CONSIDERED AS A BLACK BOX\n// ------------------------------------------------------------------------------------------------\n// ------------------------------------------------------------------------------------------------\nimport {\n  BluetoothRequired,\n  CantOpenDevice,\n  DeviceHalted,\n  FirmwareOrAppUpdateRequired,\n  TransportInterfaceNotAvailable,\n  TransportStatusError,\n  TransportWebUSBGestureRequired,\n} from \"@ledgerhq/errors\";\nimport type Transport from \"@ledgerhq/hw-transport\";\nimport { Observable, throwError, timer } from \"rxjs\";\nimport { catchError, mergeMap, retryWhen } from \"rxjs/operators\";\n\nconst initialErrorRemapping = (error: Error): Observable<never> =>\n  throwError(\n    error && error instanceof TransportStatusError && error.statusCode === 0x6faa\n      ? new DeviceHalted(error.message)\n      : error instanceof TransportStatusError && error.statusCode === 0x6b00\n        ? new FirmwareOrAppUpdateRequired(error.message)\n        : error,\n  );\n\n// eslint-disable-next-line @typescript-eslint/no-empty-function\nconst never = new Promise(() => {});\n\ntype Discovery = Observable<{\n  type: \"add\" | \"remove\";\n  id: string;\n  name: string;\n}>;\n\nexport type TransportModule = {\n  // unique transport name that identify the transport module\n  id: string;\n  // open a device by an id, this id must be unique across all modules\n  // you can typically prefix it with `something|` that identify it globally\n  // returns falsy if the transport module can't handle this id\n  // here, open means we want to START doing something with the transport\n  open: (id: string) => Promise<Transport> | null | undefined;\n  // here, close means we want to STOP doing something with the transport\n  close?: (transport: Transport, id: string) => Promise<void> | null | undefined;\n  // disconnect/interrupt a device connection globally\n  // returns falsy if the transport module can't handle this id\n  disconnect: (id: string) => Promise<void> | null | undefined;\n  // optional observable that allows to discover a transport\n  discovery?: Discovery;\n};\n\nconst modules: TransportModule[] = [];\n\nexport const registerTransportModule = (module: TransportModule): void => {\n  modules.push(module);\n};\n\nexport const close = (transport: Transport, deviceId: string): Promise<void> => {\n  for (const m of modules) {\n    const p = m.close?.(transport, deviceId);\n    if (p) return p;\n  }\n  // fallback on an actual close\n  return transport.close();\n};\n\nexport const open = (deviceId: string): Promise<Transport> => {\n  for (const m of modules) {\n    const p = m.open(deviceId);\n    if (p) return p;\n  }\n  return Promise.reject(new Error(`Can't find handler to open ${deviceId}`));\n};\n\nconst transportFinally =\n  (cleanup: () => Promise<void>) =>\n  <T>(observable: Observable<T>): Observable<T> =>\n    // @ts-expect-error typescript not checking against the instanceof\n    Observable.create((o) => {\n      let done = false;\n\n      // eslint-disable-next-line @typescript-eslint/no-explicit-any\n      const finalize = (): any => {\n        if (done) return never;\n        done = true;\n        return cleanup();\n      };\n\n      const sub = observable.subscribe({\n        next: (e) => o.next(e),\n        complete: () => {\n          void finalize().then(() => o.complete());\n        },\n        error: (e) => {\n          void finalize().then(() => o.error(e));\n        },\n      });\n      return () => {\n        sub.unsubscribe();\n        void finalize();\n      };\n    });\n\ntype AccessHook = () => () => void;\n\nconst accessHooks: AccessHook[] = [];\n\nconst deviceQueues = {};\n\nexport const withDevice =\n  (deviceId: string) =>\n  <T>(job: (t: Transport) => Observable<T>): Observable<T> =>\n    new Observable((o) => {\n      // @ts-expect-error typescript not checking against the instanceof\n      let unsubscribed;\n      // @ts-expect-error typescript not checking against the instanceof\n      let sub;\n      // @ts-expect-error typescript not checking against the instanceof\n      const deviceQueue = deviceQueues[deviceId] ?? Promise.resolve();\n\n      // @ts-expect-error typescript not checking against the instanceof\n      const finalize = (transport, cleanups): Promise<void> =>\n        close(transport, deviceId)\n          // eslint-disable-next-line @typescript-eslint/no-empty-function\n          .catch(() => {})\n          .then(() => {\n            // @ts-expect-error typescript not checking against the instanceof\n            cleanups.forEach((c) => c());\n          });\n\n      // when we'll finish all the current job, we'll call finish\n      // @ts-expect-error typescript not checking against the instanceof\n      let finish;\n      // this new promise is the next exec queue\n      // @ts-expect-error typescript not checking against the instanceof\n      deviceQueues[deviceId] = new Promise((resolve) => {\n        finish = resolve;\n      });\n      // for any new job, we'll now wait the exec queue to be available\n      deviceQueue\n        .then(() => open(deviceId)) // open the transport\n        // @ts-expect-error typescript not checking against the instanceof\n        .then(async (transport) => {\n          // @ts-expect-error typescript not checking against the instanceof\n          if (unsubscribed) {\n            // it was unsubscribed prematurely\n            // @ts-expect-error typescript not checking against the instanceof\n            return finalize(transport, [finish]);\n          }\n\n          if (\n            transport.requestConnectionPriority &&\n            typeof transport.requestConnectionPriority === \"function\"\n          ) {\n            await transport.requestConnectionPriority(\"High\");\n          }\n\n          return transport;\n        })\n        // @ts-expect-error typescript not checking against the instanceof\n        .catch((e) => {\n          // @ts-expect-error typescript not checking against the instanceof\n          finish();\n          if (e instanceof BluetoothRequired) throw e;\n          if (e instanceof TransportWebUSBGestureRequired) throw e;\n          if (e instanceof TransportInterfaceNotAvailable) throw e;\n          throw new CantOpenDevice(e.message);\n        })\n        // @ts-expect-error typescript not checking against the instanceof\n        .then((transport) => {\n          if (!transport) return;\n\n          // @ts-expect-error typescript not checking against the instanceof\n          if (unsubscribed) {\n            // it was unsubscribed prematurely\n            // @ts-expect-error typescript not checking against the instanceof\n            return finalize(transport, [finish]);\n          }\n\n          const cleanups = accessHooks.map((hook) => hook());\n          sub = job(transport) // $FlowFixMe\n            .pipe(\n              catchError(initialErrorRemapping),\n              // $FlowFixMe\n              transportFinally(() =>\n                // @ts-expect-error typescript not checking against the instanceof\n                finalize(transport, [...cleanups, finish]),\n              ),\n            )\n            .subscribe(o);\n        })\n        // @ts-expect-error typescript not checking against the instanceof\n        .catch((error) => o.error(error));\n      return () => {\n        unsubscribed = true;\n        // @ts-expect-error typescript not checking against the instanceof\n        if (sub) sub.unsubscribe();\n      };\n    });\n\nconst WITH_DEVICE_POLLING_DELAY = 500;\n\nexport const retryWhileErrors =\n  (acceptError: (arg0: Error) => boolean) =>\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any\n  (attempts: Observable<any>): Observable<any> =>\n    attempts.pipe(\n      mergeMap((error) => {\n        if (!acceptError(error)) {\n          return throwError(error);\n        }\n\n        return timer(WITH_DEVICE_POLLING_DELAY);\n      }),\n    );\n\nexport const withDevicePolling =\n  (deviceId: string) =>\n  <T>(\n    job: (arg0: Transport) => Observable<T>,\n    acceptError: (arg0: Error) => boolean = () => false,\n  ): Observable<T> =>\n    withDevice(deviceId)(job).pipe(retryWhen(retryWhileErrors(acceptError)));\n"],"mappings":";AAMA,OAAO,WAAW;AAClB,OAAO,gBAAgB;AACvB,SAAS,MAAM,cAAc;;;ACRtB,IAAM,QAAQ;AAAA,EACnB,KAAK;AAAA,EACL,iBAAiB;AAAA,EACjB,cAAc;AAAA,EACd,YAAY;AACd;AAEO,IAAM,gBAAgB;AAEtB,IAAM,aAAa;AAAA,EACxB,cAAc;AAAA,EACd,yBAAyB;AAC3B;AAEO,IAAM,YAAmE;AAAA,EAC9E,UAAU;AAAA,EACV,OAAO;AAAA,EACP,cAAc;AAChB;AAEO,IAAM,4BACX;AAEF,IAAM,gBAAgB,CAAC;AACvB,SAAS,IAAI,OAAQ,KAAK,OAAQ,KAAK;AACrC,gBAAc,KAAK,CAAC;AACtB;AAEO,IAAM,mBAAmB;AACzB,IAAM,qBAAqB;AAC3B,IAAM,wBAAwB;;;ADS9B,SAAS,gBAAgB,SAAkB,QAA2B;AAC3E,QAAM,EAAE,QAAQ,IAAI;AACpB,QAAM,YAAY,OAAO;AACzB,QAAM,YAAY,MAAM,OAAO,EAAE,SAAS,QAAQ,aAAa,CAAC;AAEhE,aAAW,WAAW;AAAA,IACpB,YAAY,WAAW,YAAY,GAAI;AAAA,IACvC,SAAS;AAAA;AAAA,IAET,gBAAgB,MAAM;AAAA,IACtB,SAAS,CAAC,YAAY,QAAQ;AAC5B,YAAM,eAAe,GAAG,IAAI,QAAQ,SAAS,OAAO,IAAI,QAAQ,QAAQ,YAAY,KAAK,gBAAgB,IAAI,IAAI,QAAQ,OAAO,aAAa;AAC7I,aAAO;AAAA,QACL,2CAA2C,UAAU,cAAc,YAAY;AAAA,MACjF;AAAA,IACF;AAAA;AAAA,EAEF,CAAC;AAED,YAAU,aAAa,QAAQ;AAAA,IAC7B,CAAC,WAAW;AAEV,aAAO;AAAA,QACL,gBAAgB,OAAO,QAAQ,YAAY,CAAC,IAAI,OAAO,GAAG,GAAG,OAAO,OAAO,IAAI,KAAK,UAAU,OAAO,IAAI,CAAC,KAAK,EAAE;AAAA,MACnH;AACA,UAAI,CAAC,QAAQ,KAAK,EAAE,SAAS,OAAO,MAAO,GAAG;AAG5C,cAAM,eAAe,OAAO,OAAO,SAAS;AAC5C,cAAM,OAAQ,eAAe,KAAK,MAAM,OAAO,IAAI,IAAI,OAAO;AAI9D,cAAM,eAAe;AAAA,UACnB,WAAW;AAAA;AAAA,UACX,WAAW;AAAA;AAAA,UACX,SAAS;AAAA;AAAA,UACT,GAAG;AAAA,QACL;AACA,eAAO,OAAO,eAAe,KAAK,UAAU,YAAY,IAAI;AAAA,MAC9D;AACA,aAAO;AAAA,IACT;AAAA;AAAA,IAEA,CAAC,UAAiB,QAAQ,OAAO,KAAK;AAAA,EACxC;AAEA,SAAO;AAAA,IACL,MAAM,CAAC,UAA0B;AAC/B,YAAM,SAAS,QAAQ,EAAE,MAAM,QAAQ,MAAM,MAAM,CAAC;AAEpD,YAAM,UAAU,YAA6B;AAC3C,YAAI,OAAO,WAAW,SAAU,QAAO,QAAQ,QAAQ,MAAM;AAC7D,eAAO;AAAA,MACT;AAEA,YAAM,eAAe,OAAO;AAAA,QAC1B;AAAA,QACA;AAAA,MACF,MAGuB;AACrB,cAAM,OAAO,UAAU;AACvB,YAAI,SAAS;AACX,gBAAM,IAAI,MAAM,kDAAkD;AACpE,cAAM,EAAE,KAAK,IAAI,MAAM,UAAU,KAAa,iBAAiB;AAAA,UAC7D,MAAM,MAAM,QAAQ;AAAA,UACpB,WAAW,OAAO,KAAK,UAAU,WAAW,QAAQ,EAAE,SAAS,KAAK;AAAA,UACpE,aAAa;AAAA,UACb,YAAY,UAAU;AAAA,UACtB,MAAM,UAAU;AAAA,UAChB,MAAM,UAAU,IAAI;AAAA,UACpB,MAAM;AAAA;AAAA,UACN;AAAA,QACF,CAAC;AACD,eAAO;AAAA,MACT;AAEA,YAAM,2BAA2B,OAAO,WAGjB;AACrB,cAAM,EAAE,WAAW,YAAY,IAAI;AACnC,cAAM,UAAU,EAAE,MAAM,MAAM,QAAQ,GAAG,WAAW,YAAY,YAAY;AAC5E,cAAM,MAAM,MAAM,UAAU,KAAa,+BAA+B,OAAO;AAC/E,eAAO,IAAI;AAAA,MACb;AAEA,YAAM,uBAAuB,YAA6B;AACxD,cAAM,UAAU;AAAA,UACd,MAAM,MAAM,QAAQ;AAAA,UACpB,MAAM,MAAM;AAAA,UACZ,MAAM;AAAA;AAAA,QACR;AACA,cAAM,EAAE,KAAK,IAAI,MAAM,UAAU,KAAa,2BAA2B,OAAO;AAChF,eAAO;AAAA,MACT;AAEA,YAAM,8BAA8B,YAA6B;AAC/D,cAAM,OAAO;AACb,cAAM,UAAU,EAAE,MAAM,MAAM,QAAQ,GAAG,MAAM,MAAM,MAAM,aAAa;AACxE,cAAM,MAAM,MAAM,UAAU,KAAa,2BAA2B,OAAO;AAC3E,eAAO,OAAO,KAAK,IAAI,MAAM,KAAK,EAAE,SAAS,QAAQ;AAAA,MACvD;AAEA,YAAM,iBAAiB,YAOjB;AACJ,cAAM,EAAE,MAAM,eAAe,IAAI,MAAM,UAAU,KAAa,oBAAoB;AAAA,UAChF,MAAM,MAAM,QAAQ;AAAA,QACtB,CAAC;AACD,cAAM,oBAAoB,OAAO,KAAK,gBAAgB,KAAK;AAC3D,cAAM,UAAU,kBAAkB,SAAS,KAAK,KAAK,CAAC;AACtD,eAAO;AAAA,UACL,aAAa;AAAA,YACX,UAAU,kBAAkB,MAAM,GAAG,EAAE,EAAE,SAAS,QAAQ;AAAA,YAC1D,gBAAgB,kBAAkB,MAAM,IAAI,KAAK,EAAE,EAAE,SAAS,QAAQ;AAAA,YACtE,aAAa,kBAAkB,MAAM,KAAK,IAAI,KAAK,KAAK,IAAI,OAAO,EAAE,SAAS,QAAQ;AAAA,UACxF;AAAA,UACA,QAAQ;AAAA,QACV;AAAA,MACF;AAEA,YAAM,wBAAwB,YAGxB;AACJ,cAAM,MAAM,MAAM,UAAU,KAGzB,4BAA4B,EAAE,MAAM,MAAM,QAAQ,EAAE,CAAC;AACxD,eAAO;AAAA,UACL,8BAA8B,IAAI,KAAK;AAAA,UACvC,6BAA6B,IAAI,KAAK;AAAA,QACxC;AAAA,MACF;AAEA,YAAM,2BAA2B,YAA4D;AAC3F,eAAO,aAAa,EAAE,MAAM,MAAM,gBAAgB,CAAC;AAAA,MACrD;AAEA,YAAM,kBAAkB,YAA6B;AACnD,cAAM,MAAM,MAAM,UAAU,KAAiC,mBAAmB;AAAA,UAC9E,MAAM,MAAM,QAAQ;AAAA,QACtB,CAAC;AACD,eAAO,IAAI,KAAK,eAAe,YAAY;AAAA,MAC7C;AAEA,YAAM,eAAe,YAA4D;AAC/E,eAAO,aAAa,EAAE,MAAM,MAAM,IAAI,CAAC;AAAA,MACzC;AAEA,YAAM,sBAAsB,YAA4D;AACtF,eAAO,aAAa,EAAE,MAAM,MAAM,WAAW,CAAC;AAAA,MAChD;AAEA,YAAM,aAAa,YAA8B;AAC/C,cAAM,MAAM,MAAM,UAAU,KAAe,sBAAsB,EAAE,MAAM,MAAM,QAAQ,EAAE,CAAC;AAC1F,eAAO,IAAI,KAAK,SAAS;AAAA,MAC3B;AAEA,YAAM,uBAAuB,YAA4D;AACvF,cAAM,EAAE,KAAK,IAAI,MAAM,UAAU;AAAA,UAC/B;AAAA,UACA,EAAE,MAAM,MAAM,QAAQ,EAAE;AAAA,QAC1B;AACA,eAAO;AAAA,UACL,QAAQ,KAAK;AAAA,UACb,WAAW,OAAO,KAAK,KAAK,aAAa,KAAK,EAAE,SAAS,QAAQ;AAAA,QACnE;AAAA,MACF;AAEA,YAAM,cAAc,OAAO,WAEN;AACnB,cAAM,EAAE,cAAc,IAAI;AAC1B,cAAM,YAAY,OAAO,KAAK,cAAc,YAAY,WAAW,QAAQ;AAC3E,cAAM,oBAAoB,OAAO,KAAK,cAAc,YAAY,gBAAgB,QAAQ;AACxF,cAAM,yBAAyB,OAAO,KAAK,cAAc,YAAY,aAAa,QAAQ;AAC1F,cAAM,cAAc,OAAO,OAAO;AAAA,UAChC,OAAO,KAAK,CAAC,UAAU,MAAM,CAAC;AAAA,UAC9B;AAAA,UACA;AAAA,UACA,OAAO,KAAK,CAAC,uBAAuB,MAAM,CAAC;AAAA,UAC3C;AAAA,QACF,CAAC;AACD,cAAM,UAAU;AAAA,UACd,MAAM,MAAM,QAAQ;AAAA,UACpB,MAAM,MAAM;AAAA,UACZ,QAAQ,cAAc;AAAA,UACtB,aAAa,YAAY,SAAS,KAAK;AAAA,UACvC,UAAU,WAAW;AAAA,QACvB;AACA,cAAM,EAAE,MAAM,eAAe,IAAI,MAAM,UAAU,KAAa,iBAAiB,OAAO;AACtF,YAAI,mBAAmB,QAAQ;AAC7B,gBAAM,IAAI,MAAM,uCAAuC,cAAc,EAAE;AAAA,QACzE;AAAA,MACF;AAEA,YAAM,WAAW,OAAO,WAUlB;AACJ,cAAM,EAAE,WAAW,iBAAiB,MAAM,KAAK,IAAI;AACnD,cAAM,UAAU;AAAA,UACd,MAAM,MAAM,QAAQ;AAAA,UACpB;AAAA,UACA;AAAA,UACA,MAAM,UAAU,IAAI;AAAA,UACpB,UAAU;AAAA,UACV,MAAM;AAAA;AAAA,UACN,aAAa;AAAA,QACf;AACA,cAAM,EAAE,KAAK,IAAI,MAAM,UAAU,KAAa,aAAa,OAAO;AAClE,cAAM,WAAW,OAAO,KAAK,MAAM,KAAK;AACxC,YAAI,IAAI;AACR,cAAM,MAAM,SAAS,MAAM,GAAI,KAAK,CAAE,EAAE,CAAC;AACzC,cAAM,SAAS,SAAS,MAAM,GAAI,KAAK,EAAG,EAAE,SAAS,KAAK;AAC1D,cAAM,kBAAkB,SAAS,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC;AAChD,cAAM,YAAY,SAAS,MAAM,GAAI,KAAK,eAAgB;AAC1D,eAAO;AAAA,UACL,aAAa,SAAS,MAAM,GAAG,SAAS,SAAS,CAAC;AAAA,UAClD;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAEA,YAAM,eAAe,OAAO,WAAmD;AAC7E,cAAM,EAAE,UAAU,IAAI;AACtB,cAAM,UAAU,EAAE,MAAM,MAAM,QAAQ,GAAG,UAAU;AACnD,cAAM,MAAM,MAAM,UAAU,KAAa,sBAAsB,OAAO;AACtE,eAAO,IAAI;AAAA,MACb;AAEA,YAAM,aAAa,OAAO,EAAE,QAAQ,MAAkD;AACpF,cAAM,UAAU;AAAA,UACd,MAAM,MAAM,QAAQ;AAAA,UACpB,MAAM,QAAQ;AAAA,UACd,SAAS;AAAA,YACP,mBAAmB,QAAQ,QAAQ;AAAA,YACnC,eAAe,QAAQ,QAAQ;AAAA,YAC/B,gBAAgB,QAAQ,QAAQ;AAAA,UAClC;AAAA,UACA,2BAA2B;AAAA,YACzB,WAAW,QAAQ,wBAAwB;AAAA,YAC3C,iBAAiB,QAAQ,wBAAwB;AAAA,YACjD,aAAa,QAAQ,wBAAwB;AAAA,YAC7C,WAAW,QAAQ,wBAAwB;AAAA,UAC7C;AAAA,QACF;AACA,cAAM,UAAU,KAAK,sBAAsB,OAAO;AAAA,MACpD;AAEA,YAAM,4BAA4B,OAAO,WAIgB;AACvD,cAAM,UAAU;AAAA,UACd,MAAM,MAAM,QAAQ;AAAA,UACpB,WAAW,WAAW;AAAA,UACtB,WAAW,OAAO;AAAA;AAAA,UAElB,uBAAuB;AAAA,UACvB,cAAc,OAAO;AAAA,QACvB;AACA,cAAM,EAAE,KAAK,IAAI,MAAM,UAAU,KAAa,kCAAkC,OAAO;AACvF,cAAM,SAAS,OAAO,KAAK,MAAM,KAAK;AACtC,cAAM,aAAa,OAAO,SAAS,CAAC;AACpC,eAAO;AAAA,UACL,WAAW,OAAO,MAAM,GAAG,aAAa,CAAC,EAAE,SAAS,QAAQ;AAAA,UAC5D,WAAW,OAAO,MAAM,aAAa,CAAC,EAAE,SAAS,QAAQ;AAAA,QAC3D;AAAA,MACF;AAEA,YAAM,2BAA2B,OAAO,WAInB;AACnB,cAAM,EAAE,WAAW,YAAY,IAAI;AACnC,cAAM,UAAU;AAAA,UACd,MAAM,MAAM,QAAQ;AAAA,UACpB,WAAW,WAAW;AAAA,UACtB;AAAA;AAAA,UAEA,uBAAuB;AAAA,UACvB,cAAc;AAAA,QAChB;AACA,cAAM,EAAE,MAAM,eAAe,IAAI,MAAM,UAAU;AAAA,UAC/C;AAAA,UACA;AAAA,QACF;AACA,YAAI,mBAAmB,QAAQ;AAC7B,gBAAM,IAAI,MAAM,uCAAuC,cAAc,EAAE;AAAA,QACzE;AAAA,MACF;AAEA,YAAM,eAAe,OAAO,WAE0B;AACpD,cAAM,EAAE,KAAK,IAAI;AAEjB,cAAM,UAAU,EAAE,MAAM,MAAM,QAAQ,GAAG,WAAW,MAAM,KAAK;AAC/D,cAAM,MAAM,MAAM,UAAU,KAAiC,mBAAmB,OAAO;AACvF,eAAO;AAAA,UACL,QAAQ,IAAI,KAAK;AAAA,UACjB,WAAW,OAAO,KAAK,IAAI,KAAK,aAAa,KAAK,EAAE,SAAS,QAAQ;AAAA,QACvE;AAAA,MACF;AAEA,YAAM,yBAAyB,OAAO,WAAmD;AACvF,cAAM,EAAE,QAAQ,IAAI;AACpB,cAAM,UAAU;AAAA,UACd,MAAM,MAAM,QAAQ;AAAA,UACpB,MAAM,MAAM;AAAA,UACZ;AAAA,QACF;AACA,cAAM,EAAE,MAAM,UAAU,IAAI,MAAM,UAAU,KAAa,gBAAgB,OAAO;AAChF,eAAO;AAAA,MACT;AAEA,YAAM,WAAW,CAAC,UAAmC;AACnD,eAAO,KAAK,8CAA8C;AAC1D,eAAO,QAAQ,QAAQ,MAAM;AAAA,MAC/B;AAEA,YAAM,aAAa,YAA6B;AAC9C,eAAO;AAAA,MACT;AAEA,YAAM,OAAO,YAA+C;AAC1D,cAAM,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,GAAG,CAAC;AAC3C,eAAO,EAAE,aAAa,KAAK;AAAA,MAC7B;AAEA,YAAM,UAAU,YAA6B;AAC3C,cAAM,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,GAAG,CAAC;AAC3C,eAAO;AAAA,MACT;AAEA,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;AEraA,SAAS,4BAA4B;AAE9B,IAAM,yBAAyB,CAAC,UAAkD;AACvF,SACE,iBAAiB,wBAChB,iBAAiB,SAAS,gBAAgB,SAAS,MAAM,QAAQ,WAAW,gBAAgB;AAEjG;AAEA,IAAM,sBAAsB;AAAA,EAC1B;AAAA;AAAA;AAAA,EAGA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AACF;AAEO,IAAM,sBAAsB,CAAC,UAA0B;AAC5D,SAAO,uBAAuB,KAAK,KAAK,oBAAoB,SAAS,MAAM,UAAU;AACvF;;;ACbA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,wBAAAA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,YAAY,YAAY,aAAa;AAC9C,SAAS,YAAY,UAAU,iBAAiB;AAEhD,IAAM,wBAAwB,CAAC,UAC7B;AAAA,EACE,SAAS,iBAAiBA,yBAAwB,MAAM,eAAe,QACnE,IAAI,aAAa,MAAM,OAAO,IAC9B,iBAAiBA,yBAAwB,MAAM,eAAe,QAC5D,IAAI,4BAA4B,MAAM,OAAO,IAC7C;AACR;AAGF,IAAM,QAAQ,IAAI,QAAQ,MAAM;AAAC,CAAC;AAyBlC,IAAM,UAA6B,CAAC;AAE7B,IAAM,0BAA0B,CAAC,WAAkC;AACxE,UAAQ,KAAK,MAAM;AACrB;AAEO,IAAM,QAAQ,CAAC,WAAsB,aAAoC;AAC9E,aAAW,KAAK,SAAS;AACvB,UAAM,IAAI,EAAE,QAAQ,WAAW,QAAQ;AACvC,QAAI,EAAG,QAAO;AAAA,EAChB;AAEA,SAAO,UAAU,MAAM;AACzB;AAEO,IAAM,OAAO,CAAC,aAAyC;AAC5D,aAAW,KAAK,SAAS;AACvB,UAAM,IAAI,EAAE,KAAK,QAAQ;AACzB,QAAI,EAAG,QAAO;AAAA,EAChB;AACA,SAAO,QAAQ,OAAO,IAAI,MAAM,8BAA8B,QAAQ,EAAE,CAAC;AAC3E;AAEA,IAAM,mBACJ,CAAC,YACD,CAAI;AAAA;AAAA,EAEF,WAAW,OAAO,CAAC,MAAM;AACvB,QAAI,OAAO;AAGX,UAAM,WAAW,MAAW;AAC1B,UAAI,KAAM,QAAO;AACjB,aAAO;AACP,aAAO,QAAQ;AAAA,IACjB;AAEA,UAAM,MAAM,WAAW,UAAU;AAAA,MAC/B,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC;AAAA,MACrB,UAAU,MAAM;AACd,aAAK,SAAS,EAAE,KAAK,MAAM,EAAE,SAAS,CAAC;AAAA,MACzC;AAAA,MACA,OAAO,CAAC,MAAM;AACZ,aAAK,SAAS,EAAE,KAAK,MAAM,EAAE,MAAM,CAAC,CAAC;AAAA,MACvC;AAAA,IACF,CAAC;AACD,WAAO,MAAM;AACX,UAAI,YAAY;AAChB,WAAK,SAAS;AAAA,IAChB;AAAA,EACF,CAAC;AAAA;AAIL,IAAM,cAA4B,CAAC;AAEnC,IAAM,eAAe,CAAC;AAEf,IAAM,aACX,CAAC,aACD,CAAI,QACF,IAAI,WAAW,CAAC,MAAM;AAEpB,MAAI;AAEJ,MAAI;AAEJ,QAAM,cAAc,aAAa,QAAQ,KAAK,QAAQ,QAAQ;AAG9D,QAAM,WAAW,CAAC,WAAW,aAC3B,MAAM,WAAW,QAAQ,EAEtB,MAAM,MAAM;AAAA,EAAC,CAAC,EACd,KAAK,MAAM;AAEV,aAAS,QAAQ,CAAC,MAAM,EAAE,CAAC;AAAA,EAC7B,CAAC;AAIL,MAAI;AAGJ,eAAa,QAAQ,IAAI,IAAI,QAAQ,CAAC,YAAY;AAChD,aAAS;AAAA,EACX,CAAC;AAED,cACG,KAAK,MAAM,KAAK,QAAQ,CAAC,EAEzB,KAAK,OAAO,cAAc;AAEzB,QAAI,cAAc;AAGhB,aAAO,SAAS,WAAW,CAAC,MAAM,CAAC;AAAA,IACrC;AAEA,QACE,UAAU,6BACV,OAAO,UAAU,8BAA8B,YAC/C;AACA,YAAM,UAAU,0BAA0B,MAAM;AAAA,IAClD;AAEA,WAAO;AAAA,EACT,CAAC,EAEA,MAAM,CAAC,MAAM;AAEZ,WAAO;AACP,QAAI,aAAa,kBAAmB,OAAM;AAC1C,QAAI,aAAa,+BAAgC,OAAM;AACvD,QAAI,aAAa,+BAAgC,OAAM;AACvD,UAAM,IAAI,eAAe,EAAE,OAAO;AAAA,EACpC,CAAC,EAEA,KAAK,CAAC,cAAc;AACnB,QAAI,CAAC,UAAW;AAGhB,QAAI,cAAc;AAGhB,aAAO,SAAS,WAAW,CAAC,MAAM,CAAC;AAAA,IACrC;AAEA,UAAM,WAAW,YAAY,IAAI,CAAC,SAAS,KAAK,CAAC;AACjD,UAAM,IAAI,SAAS,EAChB;AAAA,MACC,WAAW,qBAAqB;AAAA;AAAA,MAEhC;AAAA,QAAiB;AAAA;AAAA,UAEf,SAAS,WAAW,CAAC,GAAG,UAAU,MAAM,CAAC;AAAA;AAAA,MAC3C;AAAA,IACF,EACC,UAAU,CAAC;AAAA,EAChB,CAAC,EAEA,MAAM,CAAC,UAAU,EAAE,MAAM,KAAK,CAAC;AAClC,SAAO,MAAM;AACX,mBAAe;AAEf,QAAI,IAAK,KAAI,YAAY;AAAA,EAC3B;AACF,CAAC;AAEL,IAAM,4BAA4B;AAE3B,IAAM,mBACX,CAAC;AAAA;AAAA,EAED,CAAC,aACC,SAAS;AAAA,IACP,SAAS,CAAC,UAAU;AAClB,UAAI,CAAC,YAAY,KAAK,GAAG;AACvB,eAAO,WAAW,KAAK;AAAA,MACzB;AAEA,aAAO,MAAM,yBAAyB;AAAA,IACxC,CAAC;AAAA,EACH;AAAA;AAEG,IAAM,oBACX,CAAC,aACD,CACE,KACA,cAAwC,MAAM,UAE9C,WAAW,QAAQ,EAAE,GAAG,EAAE,KAAK,UAAU,iBAAiB,WAAW,CAAC,CAAC;","names":["TransportStatusError"]}

package/lib/{chunk-CZLZUISN.js → chunk-OU3QTNYT.js}

@@ -1,6 +1,7 @@
 // src/crypto/utils.ts
 import crypto from "crypto";
 import elliptic2 from "elliptic";
+import * as jose from "jose";
 
 // src/crypto/key-encoder.ts
 import asn1 from "asn1.js";
@@ -221,7 +222,7 @@ function extractPublicKey(pemKey) {
   pem.pop();
   const keyBuffer = Buffer.from(pem.join(""), "base64");
   const actualKeyBuffer = keyBuffer.slice(26);
-  return actualKeyBuffer.toString("hex");
+  return actualKeyBuffer.toString("hex").toUpperCase();
 }
 function hexToPem(hexString, { isPrivate = true } = {}) {
   const keyEncoder = new KeyEncoder("p256");
@@ -255,8 +256,14 @@ function genKeys(entropy) {
     hexPubKey
   };
 }
+var sign = async (privateKeyPem, base64Challenge) => {
+  const challengeDataBytes = jose.base64url.decode(base64Challenge);
+  const privateKey = crypto.createPrivateKey(privateKeyPem);
+  return await new jose.CompactSign(challengeDataBytes).setProtectedHeader({ alg: "ES256", typ: "JWT" }).sign(privateKey);
+};
 
 export {
-  genKeys
+  genKeys,
+  sign
 };
-//# sourceMappingURL=chunk-CZLZUISN.js.map
+//# sourceMappingURL=chunk-OU3QTNYT.js.map

package/lib/chunk-OU3QTNYT.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/crypto/utils.ts","../src/crypto/key-encoder.ts"],"sourcesContent":["import crypto from \"crypto\";\nimport elliptic from \"elliptic\";\nimport * as jose from \"jose\";\n\nimport { KeyEncoder } from \"./key-encoder\";\nimport type { GeneratedKeys } from \"./types\";\n\nfunction extractPublicKey(pemKey: string): string {\n  // convert the PEM formatted public key to raw public key in X9.62 uncompressed format\n  // this is an oversimplified method and may not work with different curves or PEM formats\n  const pem = pemKey.split(\"\\n\");\n  pem.shift(); // remove the first line (BEGIN PUBLIC KEY)\n  pem.pop(); // remove the last line (END PUBLIC KEY)\n  // convert base64 to buffer\n  const keyBuffer = Buffer.from(pem.join(\"\"), \"base64\");\n  // assuming the first 26 bytes are the header for the SPKI formatted key.\n  // the actual key should begin after this header.\n  const actualKeyBuffer = keyBuffer.slice(26);\n  return actualKeyBuffer.toString(\"hex\").toUpperCase();\n}\n\nfunction hexToPem(hexString: string, { isPrivate = true } = {}): string {\n  const keyEncoder = new KeyEncoder(\"p256\");\n  if (isPrivate) {\n    return keyEncoder.encodePrivate(hexString, \"raw\", \"pem\");\n  }\n  return keyEncoder.encodePublic(hexString, \"raw\", \"pem\");\n}\n\n/**\n * If `entropy` is passed, will generate keys pair deterministically\n * else, random keys pair generated\n */\nexport function genKeys(entropy?: string): GeneratedKeys {\n  if (entropy) {\n    const ec = new elliptic.ec(\"p256\");\n    const hashedEntropy = crypto.createHash(\"sha256\").update(entropy).digest(\"hex\");\n    const keyPair = ec.genKeyPair({\n      entropy: Buffer.from(hashedEntropy, \"hex\"),\n    });\n    return {\n      privateKey: String(hexToPem(keyPair.getPrivate(\"hex\"))),\n      publicKey: String(hexToPem(keyPair.getPublic(\"hex\"), { isPrivate: false })),\n      hexPubKey: extractPublicKey(String(hexToPem(keyPair.getPublic(\"hex\"), { isPrivate: false }))),\n    };\n  }\n  const { publicKey, privateKey } = crypto.generateKeyPairSync(\"ec\", {\n    namedCurve: \"P-256\",\n    publicKeyEncoding: { type: \"spki\", format: \"pem\" },\n    privateKeyEncoding: { type: \"sec1\", format: \"pem\" },\n  });\n  const hexPubKey = extractPublicKey(publicKey);\n  return {\n    privateKey,\n    publicKey,\n    hexPubKey,\n  };\n}\n\nexport const sign = async (privateKeyPem: string, base64Challenge: string): Promise<string> => {\n  // Decode base64url challenge to bytes\n  const challengeDataBytes = jose.base64url.decode(base64Challenge);\n\n  // For EC private key format, we need to use a different import method\n  // Since jose doesn't support SEC1 format directly, let's use Node.js crypto\n  // Create a KeyObject from the EC private key\n  const privateKey = crypto.createPrivateKey(privateKeyPem);\n\n  // Use jose with the KeyObject\n  return await new jose.CompactSign(challengeDataBytes)\n    .setProtectedHeader({ alg: \"ES256\", typ: \"JWT\" })\n    .sign(privateKey);\n};\n","// ========================================================================== //\n//                                                                            //\n//                                 DISCLAIMER                                 //\n//                                                                            //\n//                This code has been blindly copy-pasted from:                //\n//                    https://github.com/LedgerHQ/pkey-ts                     //\n//                                                                            //\n// ========================================================================== //\n//\n// @ts-expect-error this library does not ship types\nimport asn1 from \"asn1.js\";\nimport BN from \"bn.js\";\nimport elliptic from \"elliptic\";\n\n/* cspell:disable */\nconst ECPrivateKeyASN = asn1.define(\"ECPrivateKey\", function () {\n  // @ts-expect-error pure black box\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any, @typescript-eslint/no-unnecessary-type-assertion\n  const self = this as any;\n  self\n    .seq()\n    .obj(\n      self.key(\"version\").int(),\n      self.key(\"privateKey\").octstr(),\n      self.key(\"parameters\").explicit(0).objid().optional(),\n      self.key(\"publicKey\").explicit(1).bitstr().optional(),\n    );\n});\n\nconst ECPrivateKey8ASN = asn1.define(\n  \"ECPrivateKey\",\n  /* v8 ignore start */\n  function () {\n    // @ts-expect-error pure black box\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any, @typescript-eslint/no-unnecessary-type-assertion\n    const self = this as any;\n    self\n      .seq()\n      .obj(\n        self.key(\"version\").int(),\n        self\n          .key(\"privateKeyAlgorithm\")\n          .seq()\n          .obj(self.key(\"ecPublicKey\").objid(), self.key(\"curve\").objid()),\n        self.key(\"privateKey\").octstr().contains(ECPrivateKeyASN),\n        self.key(\"attributes\").explicit(0).bitstr().optional(),\n      );\n  },\n  /* v8 ignore stop */\n);\n\nconst SubjectPublicKeyInfoASN = asn1.define(\"SubjectPublicKeyInfo\", function () {\n  // @ts-expect-error pure black box\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any, @typescript-eslint/no-unnecessary-type-assertion\n  const self = this as any;\n  self\n    .seq()\n    .obj(\n      self.key(\"algorithm\").seq().obj(self.key(\"id\").objid(), self.key(\"curve\").objid()),\n      self.key(\"pub\").bitstr(),\n    );\n});\n\ntype CurveOptions = {\n  curveParameters: number[];\n  privatePEMOptions: { label: string };\n  publicPEMOptions: { label: string };\n  curve: elliptic.ec;\n};\n\nconst curves: Record<string, CurveOptions> = {\n  secp256k1: {\n    curveParameters: [1, 3, 132, 0, 10],\n    privatePEMOptions: { label: \"EC PRIVATE KEY\" },\n    publicPEMOptions: { label: \"PUBLIC KEY\" },\n    curve: new elliptic.ec(\"secp256k1\"),\n  },\n  p256: {\n    curveParameters: [1, 2, 840, 10045, 3, 1, 7], // OID for p256 curve\n    privatePEMOptions: { label: \"EC PRIVATE KEY\" },\n    publicPEMOptions: { label: \"PUBLIC KEY\" },\n    curve: new elliptic.ec(\"p256\"),\n  },\n};\n\ntype PrivateKeyPKCS1 = {\n  version: BN;\n  privateKey: Buffer;\n  parameters: number[];\n  publicKey?: {\n    unused: number;\n    data: Buffer;\n  };\n};\n\ntype PrivateKeyPKCS8 = {\n  version: BN;\n  privateKey: PrivateKeyPKCS1;\n  privateKeyAlgorithm: { ecPublicKey: number[]; curve: number[] };\n};\n\nexport type KeyFormat = \"raw\" | \"pem\" | \"der\";\n\nexport class KeyEncoder {\n  algorithmID: number[];\n  options: CurveOptions;\n\n  constructor(options: string | CurveOptions) {\n    if (typeof options === \"string\") {\n      /* v8 ignore start */\n      if (options !== \"secp256k1\" && options !== \"p256\") {\n        throw new Error(\"Unknown curve \" + options);\n      }\n      /* v8 ignore stop */\n      options = curves[options]!;\n    }\n    this.options = options;\n    this.algorithmID = [1, 2, 840, 10045, 2, 1];\n  }\n\n  /* v8 ignore start */\n  private PKCS1toPKCS8(privateKey: PrivateKeyPKCS1): PrivateKeyPKCS8 {\n    return {\n      version: new BN(0),\n      privateKey,\n      privateKeyAlgorithm: {\n        ecPublicKey: this.algorithmID,\n        curve: privateKey.parameters,\n      },\n    };\n  }\n  /* v8 ignore stop */\n\n  privateKeyObject(rawPrivateKey: string, rawPublicKey: string): PrivateKeyPKCS1 {\n    const privateKeyObject: PrivateKeyPKCS1 = {\n      version: new BN(1),\n      privateKey: Buffer.from(rawPrivateKey, \"hex\"),\n      parameters: this.options.curveParameters,\n    };\n\n    if (rawPublicKey) {\n      privateKeyObject.publicKey = {\n        unused: 0,\n        data: Buffer.from(rawPublicKey, \"hex\"),\n      };\n    }\n\n    return privateKeyObject;\n  }\n\n  publicKeyObject(rawPublicKey: string): {\n    algorithm: { id: number[]; curve: number[] };\n    pub: { unused: number; data: Buffer };\n  } {\n    return {\n      algorithm: {\n        id: this.algorithmID,\n        curve: this.options.curveParameters,\n      },\n      pub: {\n        unused: 0,\n        data: Buffer.from(rawPublicKey, \"hex\"),\n      },\n    };\n  }\n\n  encodePrivate(\n    privateKey: string | Buffer,\n    originalFormat: KeyFormat,\n    destinationFormat: KeyFormat,\n    destinationFormatType: \"pkcs8\" | \"pkcs1\" = \"pkcs1\",\n  ): string {\n    let privateKeyObject: PrivateKeyPKCS1;\n\n    /* Parse the incoming private key and convert it to a private key object */\n    switch (originalFormat) {\n      case \"raw\": {\n        if (typeof privateKey !== \"string\") {\n          throw new Error(\"private key must be a string\");\n        }\n        const keyPair = this.options.curve.keyFromPrivate(privateKey, \"hex\");\n        const rawPublicKey = keyPair.getPublic(\"hex\");\n        privateKeyObject = this.privateKeyObject(privateKey, rawPublicKey);\n        break;\n      }\n      case \"der\":\n        if (typeof privateKey === \"string\") {\n          privateKey = Buffer.from(privateKey, \"hex\");\n        }\n        privateKeyObject = ECPrivateKeyASN.decode(privateKey, \"der\");\n        break;\n      case \"pem\":\n        if (typeof privateKey !== \"string\") {\n          throw new Error(\"private key must be a string\");\n        }\n        privateKeyObject = ECPrivateKeyASN.decode(\n          privateKey,\n          \"pem\",\n          this.options.privatePEMOptions,\n        );\n        break;\n      /* v8 ignore start */\n      default:\n        throw new Error(\"invalid private key format\");\n      /* v8 ignore stop */\n    }\n\n    /* Export the private key object to the desired format */\n    switch (destinationFormat) {\n      case \"raw\":\n        if (destinationFormatType === \"pkcs1\") {\n          return privateKeyObject.privateKey.toString(\"hex\");\n        } else if (destinationFormatType === \"pkcs8\") {\n          return this.PKCS1toPKCS8(privateKeyObject).privateKey.privateKey.toString(\"hex\");\n        }\n        break;\n      case \"der\":\n        if (destinationFormatType === \"pkcs1\") {\n          return ECPrivateKeyASN.encode(privateKeyObject, \"der\").toString(\"hex\");\n        } else if (destinationFormatType === \"pkcs8\") {\n          return ECPrivateKey8ASN.encode(this.PKCS1toPKCS8(privateKeyObject), \"der\").toString(\n            \"hex\",\n          );\n        }\n        break;\n      case \"pem\":\n        if (destinationFormatType === \"pkcs1\") {\n          return ECPrivateKeyASN.encode(privateKeyObject, \"pem\", this.options.privatePEMOptions);\n        } else if (destinationFormatType === \"pkcs8\") {\n          return ECPrivateKey8ASN.encode(this.PKCS1toPKCS8(privateKeyObject), \"pem\", {\n            ...this.options.privatePEMOptions,\n            label: \"PRIVATE KEY\",\n          });\n        }\n        break;\n      /* v8 ignore start */\n      default:\n        throw new Error(\"invalid destination format for private key\");\n      /* v8 ignore stop */\n    }\n\n    throw new Error(\"unsupported destination format or type\");\n  }\n\n  encodePublic(\n    publicKey: string | Buffer,\n    originalFormat: KeyFormat,\n    destinationFormat: KeyFormat,\n  ): string {\n    let publicKeyObject;\n\n    switch (originalFormat) {\n      case \"raw\":\n        if (typeof publicKey !== \"string\") {\n          throw new Error(\"public key must be a string\");\n        }\n        publicKeyObject = this.publicKeyObject(publicKey);\n        break;\n      case \"der\":\n        if (typeof publicKey === \"string\") {\n          publicKey = Buffer.from(publicKey, \"hex\");\n        }\n        publicKeyObject = SubjectPublicKeyInfoASN.decode(publicKey, \"der\");\n        break;\n      case \"pem\":\n        if (typeof publicKey !== \"string\") {\n          throw new Error(\"public key must be a string\");\n        }\n        publicKeyObject = SubjectPublicKeyInfoASN.decode(\n          publicKey,\n          \"pem\",\n          this.options.publicPEMOptions,\n        );\n        break;\n      /* v8 ignore start */\n      default:\n        throw new Error(\"invalid public key format\");\n      /* v8 ignore stop */\n    }\n\n    /* Export the private key object to the desired format */\n    switch (destinationFormat) {\n      case \"raw\":\n        return publicKeyObject.pub.data.toString(\"hex\");\n      case \"der\":\n        return SubjectPublicKeyInfoASN.encode(publicKeyObject, \"der\").toString(\"hex\");\n      case \"pem\":\n        return SubjectPublicKeyInfoASN.encode(\n          publicKeyObject,\n          \"pem\",\n          this.options.publicPEMOptions,\n        );\n      /* v8 ignore start */\n      default:\n        throw new Error(\"invalid destination format for public key\");\n      /* v8 ignore stop */\n    }\n  }\n}\n/* cspell:enable */\n"],"mappings":";AAAA,OAAO,YAAY;AACnB,OAAOA,eAAc;AACrB,YAAY,UAAU;;;ACQtB,OAAO,UAAU;AACjB,OAAO,QAAQ;AACf,OAAO,cAAc;AAGrB,IAAM,kBAAkB,KAAK,OAAO,gBAAgB,WAAY;AAG9D,QAAM,OAAO;AACb,OACG,IAAI,EACJ;AAAA,IACC,KAAK,IAAI,SAAS,EAAE,IAAI;AAAA,IACxB,KAAK,IAAI,YAAY,EAAE,OAAO;AAAA,IAC9B,KAAK,IAAI,YAAY,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,SAAS;AAAA,IACpD,KAAK,IAAI,WAAW,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,SAAS;AAAA,EACtD;AACJ,CAAC;AAED,IAAM,mBAAmB,KAAK;AAAA,EAC5B;AAAA;AAAA,EAEA,WAAY;AAGV,UAAM,OAAO;AACb,SACG,IAAI,EACJ;AAAA,MACC,KAAK,IAAI,SAAS,EAAE,IAAI;AAAA,MACxB,KACG,IAAI,qBAAqB,EACzB,IAAI,EACJ,IAAI,KAAK,IAAI,aAAa,EAAE,MAAM,GAAG,KAAK,IAAI,OAAO,EAAE,MAAM,CAAC;AAAA,MACjE,KAAK,IAAI,YAAY,EAAE,OAAO,EAAE,SAAS,eAAe;AAAA,MACxD,KAAK,IAAI,YAAY,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,SAAS;AAAA,IACvD;AAAA,EACJ;AAAA;AAEF;AAEA,IAAM,0BAA0B,KAAK,OAAO,wBAAwB,WAAY;AAG9E,QAAM,OAAO;AACb,OACG,IAAI,EACJ;AAAA,IACC,KAAK,IAAI,WAAW,EAAE,IAAI,EAAE,IAAI,KAAK,IAAI,IAAI,EAAE,MAAM,GAAG,KAAK,IAAI,OAAO,EAAE,MAAM,CAAC;AAAA,IACjF,KAAK,IAAI,KAAK,EAAE,OAAO;AAAA,EACzB;AACJ,CAAC;AASD,IAAM,SAAuC;AAAA,EAC3C,WAAW;AAAA,IACT,iBAAiB,CAAC,GAAG,GAAG,KAAK,GAAG,EAAE;AAAA,IAClC,mBAAmB,EAAE,OAAO,iBAAiB;AAAA,IAC7C,kBAAkB,EAAE,OAAO,aAAa;AAAA,IACxC,OAAO,IAAI,SAAS,GAAG,WAAW;AAAA,EACpC;AAAA,EACA,MAAM;AAAA,IACJ,iBAAiB,CAAC,GAAG,GAAG,KAAK,OAAO,GAAG,GAAG,CAAC;AAAA;AAAA,IAC3C,mBAAmB,EAAE,OAAO,iBAAiB;AAAA,IAC7C,kBAAkB,EAAE,OAAO,aAAa;AAAA,IACxC,OAAO,IAAI,SAAS,GAAG,MAAM;AAAA,EAC/B;AACF;AAoBO,IAAM,aAAN,MAAiB;AAAA,EACtB;AAAA,EACA;AAAA,EAEA,YAAY,SAAgC;AAC1C,QAAI,OAAO,YAAY,UAAU;AAE/B,UAAI,YAAY,eAAe,YAAY,QAAQ;AACjD,cAAM,IAAI,MAAM,mBAAmB,OAAO;AAAA,MAC5C;AAEA,gBAAU,OAAO,OAAO;AAAA,IAC1B;AACA,SAAK,UAAU;AACf,SAAK,cAAc,CAAC,GAAG,GAAG,KAAK,OAAO,GAAG,CAAC;AAAA,EAC5C;AAAA;AAAA,EAGQ,aAAa,YAA8C;AACjE,WAAO;AAAA,MACL,SAAS,IAAI,GAAG,CAAC;AAAA,MACjB;AAAA,MACA,qBAAqB;AAAA,QACnB,aAAa,KAAK;AAAA,QAClB,OAAO,WAAW;AAAA,MACpB;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,iBAAiB,eAAuB,cAAuC;AAC7E,UAAM,mBAAoC;AAAA,MACxC,SAAS,IAAI,GAAG,CAAC;AAAA,MACjB,YAAY,OAAO,KAAK,eAAe,KAAK;AAAA,MAC5C,YAAY,KAAK,QAAQ;AAAA,IAC3B;AAEA,QAAI,cAAc;AAChB,uBAAiB,YAAY;AAAA,QAC3B,QAAQ;AAAA,QACR,MAAM,OAAO,KAAK,cAAc,KAAK;AAAA,MACvC;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,gBAAgB,cAGd;AACA,WAAO;AAAA,MACL,WAAW;AAAA,QACT,IAAI,KAAK;AAAA,QACT,OAAO,KAAK,QAAQ;AAAA,MACtB;AAAA,MACA,KAAK;AAAA,QACH,QAAQ;AAAA,QACR,MAAM,OAAO,KAAK,cAAc,KAAK;AAAA,MACvC;AAAA,IACF;AAAA,EACF;AAAA,EAEA,cACE,YACA,gBACA,mBACA,wBAA2C,SACnC;AACR,QAAI;AAGJ,YAAQ,gBAAgB;AAAA,MACtB,KAAK,OAAO;AACV,YAAI,OAAO,eAAe,UAAU;AAClC,gBAAM,IAAI,MAAM,8BAA8B;AAAA,QAChD;AACA,cAAM,UAAU,KAAK,QAAQ,MAAM,eAAe,YAAY,KAAK;AACnE,cAAM,eAAe,QAAQ,UAAU,KAAK;AAC5C,2BAAmB,KAAK,iBAAiB,YAAY,YAAY;AACjE;AAAA,MACF;AAAA,MACA,KAAK;AACH,YAAI,OAAO,eAAe,UAAU;AAClC,uBAAa,OAAO,KAAK,YAAY,KAAK;AAAA,QAC5C;AACA,2BAAmB,gBAAgB,OAAO,YAAY,KAAK;AAC3D;AAAA,MACF,KAAK;AACH,YAAI,OAAO,eAAe,UAAU;AAClC,gBAAM,IAAI,MAAM,8BAA8B;AAAA,QAChD;AACA,2BAAmB,gBAAgB;AAAA,UACjC;AAAA,UACA;AAAA,UACA,KAAK,QAAQ;AAAA,QACf;AACA;AAAA;AAAA,MAEF;AACE,cAAM,IAAI,MAAM,4BAA4B;AAAA,IAEhD;AAGA,YAAQ,mBAAmB;AAAA,MACzB,KAAK;AACH,YAAI,0BAA0B,SAAS;AACrC,iBAAO,iBAAiB,WAAW,SAAS,KAAK;AAAA,QACnD,WAAW,0BAA0B,SAAS;AAC5C,iBAAO,KAAK,aAAa,gBAAgB,EAAE,WAAW,WAAW,SAAS,KAAK;AAAA,QACjF;AACA;AAAA,MACF,KAAK;AACH,YAAI,0BAA0B,SAAS;AACrC,iBAAO,gBAAgB,OAAO,kBAAkB,KAAK,EAAE,SAAS,KAAK;AAAA,QACvE,WAAW,0BAA0B,SAAS;AAC5C,iBAAO,iBAAiB,OAAO,KAAK,aAAa,gBAAgB,GAAG,KAAK,EAAE;AAAA,YACzE;AAAA,UACF;AAAA,QACF;AACA;AAAA,MACF,KAAK;AACH,YAAI,0BAA0B,SAAS;AACrC,iBAAO,gBAAgB,OAAO,kBAAkB,OAAO,KAAK,QAAQ,iBAAiB;AAAA,QACvF,WAAW,0BAA0B,SAAS;AAC5C,iBAAO,iBAAiB,OAAO,KAAK,aAAa,gBAAgB,GAAG,OAAO;AAAA,YACzE,GAAG,KAAK,QAAQ;AAAA,YAChB,OAAO;AAAA,UACT,CAAC;AAAA,QACH;AACA;AAAA;AAAA,MAEF;AACE,cAAM,IAAI,MAAM,4CAA4C;AAAA,IAEhE;AAEA,UAAM,IAAI,MAAM,wCAAwC;AAAA,EAC1D;AAAA,EAEA,aACE,WACA,gBACA,mBACQ;AACR,QAAI;AAEJ,YAAQ,gBAAgB;AAAA,MACtB,KAAK;AACH,YAAI,OAAO,cAAc,UAAU;AACjC,gBAAM,IAAI,MAAM,6BAA6B;AAAA,QAC/C;AACA,0BAAkB,KAAK,gBAAgB,SAAS;AAChD;AAAA,MACF,KAAK;AACH,YAAI,OAAO,cAAc,UAAU;AACjC,sBAAY,OAAO,KAAK,WAAW,KAAK;AAAA,QAC1C;AACA,0BAAkB,wBAAwB,OAAO,WAAW,KAAK;AACjE;AAAA,MACF,KAAK;AACH,YAAI,OAAO,cAAc,UAAU;AACjC,gBAAM,IAAI,MAAM,6BAA6B;AAAA,QAC/C;AACA,0BAAkB,wBAAwB;AAAA,UACxC;AAAA,UACA;AAAA,UACA,KAAK,QAAQ;AAAA,QACf;AACA;AAAA;AAAA,MAEF;AACE,cAAM,IAAI,MAAM,2BAA2B;AAAA,IAE/C;AAGA,YAAQ,mBAAmB;AAAA,MACzB,KAAK;AACH,eAAO,gBAAgB,IAAI,KAAK,SAAS,KAAK;AAAA,MAChD,KAAK;AACH,eAAO,wBAAwB,OAAO,iBAAiB,KAAK,EAAE,SAAS,KAAK;AAAA,MAC9E,KAAK;AACH,eAAO,wBAAwB;AAAA,UAC7B;AAAA,UACA;AAAA,UACA,KAAK,QAAQ;AAAA,QACf;AAAA;AAAA,MAEF;AACE,cAAM,IAAI,MAAM,2CAA2C;AAAA,IAE/D;AAAA,EACF;AACF;;;ADnSA,SAAS,iBAAiB,QAAwB;AAGhD,QAAM,MAAM,OAAO,MAAM,IAAI;AAC7B,MAAI,MAAM;AACV,MAAI,IAAI;AAER,QAAM,YAAY,OAAO,KAAK,IAAI,KAAK,EAAE,GAAG,QAAQ;AAGpD,QAAM,kBAAkB,UAAU,MAAM,EAAE;AAC1C,SAAO,gBAAgB,SAAS,KAAK,EAAE,YAAY;AACrD;AAEA,SAAS,SAAS,WAAmB,EAAE,YAAY,KAAK,IAAI,CAAC,GAAW;AACtE,QAAM,aAAa,IAAI,WAAW,MAAM;AACxC,MAAI,WAAW;AACb,WAAO,WAAW,cAAc,WAAW,OAAO,KAAK;AAAA,EACzD;AACA,SAAO,WAAW,aAAa,WAAW,OAAO,KAAK;AACxD;AAMO,SAAS,QAAQ,SAAiC;AACvD,MAAI,SAAS;AACX,UAAM,KAAK,IAAIC,UAAS,GAAG,MAAM;AACjC,UAAM,gBAAgB,OAAO,WAAW,QAAQ,EAAE,OAAO,OAAO,EAAE,OAAO,KAAK;AAC9E,UAAM,UAAU,GAAG,WAAW;AAAA,MAC5B,SAAS,OAAO,KAAK,eAAe,KAAK;AAAA,IAC3C,CAAC;AACD,WAAO;AAAA,MACL,YAAY,OAAO,SAAS,QAAQ,WAAW,KAAK,CAAC,CAAC;AAAA,MACtD,WAAW,OAAO,SAAS,QAAQ,UAAU,KAAK,GAAG,EAAE,WAAW,MAAM,CAAC,CAAC;AAAA,MAC1E,WAAW,iBAAiB,OAAO,SAAS,QAAQ,UAAU,KAAK,GAAG,EAAE,WAAW,MAAM,CAAC,CAAC,CAAC;AAAA,IAC9F;AAAA,EACF;AACA,QAAM,EAAE,WAAW,WAAW,IAAI,OAAO,oBAAoB,MAAM;AAAA,IACjE,YAAY;AAAA,IACZ,mBAAmB,EAAE,MAAM,QAAQ,QAAQ,MAAM;AAAA,IACjD,oBAAoB,EAAE,MAAM,QAAQ,QAAQ,MAAM;AAAA,EACpD,CAAC;AACD,QAAM,YAAY,iBAAiB,SAAS;AAC5C,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;AAEO,IAAM,OAAO,OAAO,eAAuB,oBAA6C;AAE7F,QAAM,qBAA0B,eAAU,OAAO,eAAe;AAKhE,QAAM,aAAa,OAAO,iBAAiB,aAAa;AAGxD,SAAO,MAAM,IAAS,iBAAY,kBAAkB,EACjD,mBAAmB,EAAE,KAAK,SAAS,KAAK,MAAM,CAAC,EAC/C,KAAK,UAAU;AACpB;","names":["elliptic","elliptic"]}

package/lib/{chunk-JGXOGWYB.cjs → chunk-XO66ZFXN.cjs}

@@ -1,6 +1,7 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }// src/crypto/utils.ts
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _interopRequireWildcard(obj) { if (obj && obj.__esModule) { return obj; } else { var newObj = {}; if (obj != null) { for (var key in obj) { if (Object.prototype.hasOwnProperty.call(obj, key)) { newObj[key] = obj[key]; } } } newObj.default = obj; return newObj; } } function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }// src/crypto/utils.ts
 var _crypto = require('crypto'); var _crypto2 = _interopRequireDefault(_crypto);
 var _elliptic = require('elliptic'); var _elliptic2 = _interopRequireDefault(_elliptic);
+var _jose = require('jose'); var jose = _interopRequireWildcard(_jose);
 
 // src/crypto/key-encoder.ts
 var _asn1js = require('asn1.js'); var _asn1js2 = _interopRequireDefault(_asn1js);
@@ -221,7 +222,7 @@ function extractPublicKey(pemKey) {
   pem.pop();
   const keyBuffer = Buffer.from(pem.join(""), "base64");
   const actualKeyBuffer = keyBuffer.slice(26);
-  return actualKeyBuffer.toString("hex");
+  return actualKeyBuffer.toString("hex").toUpperCase();
 }
 function hexToPem(hexString, { isPrivate = true } = {}) {
   const keyEncoder = new KeyEncoder("p256");
@@ -255,8 +256,14 @@ function genKeys(entropy) {
     hexPubKey
   };
 }
+var sign = async (privateKeyPem, base64Challenge) => {
+  const challengeDataBytes = jose.base64url.decode(base64Challenge);
+  const privateKey = _crypto2.default.createPrivateKey(privateKeyPem);
+  return await new jose.CompactSign(challengeDataBytes).setProtectedHeader({ alg: "ES256", typ: "JWT" }).sign(privateKey);
+};
+
 
 
 
-exports.genKeys = genKeys;
-//# sourceMappingURL=chunk-JGXOGWYB.cjs.map
+exports.genKeys = genKeys; exports.sign = sign;
+//# sourceMappingURL=chunk-XO66ZFXN.cjs.map

package/lib/chunk-XO66ZFXN.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/home/runner/_work/revault/revault/packages/sdk/lib/chunk-XO66ZFXN.cjs","../src/crypto/utils.ts","../src/crypto/key-encoder.ts"],"names":["elliptic"],"mappings":"AAAA;ACAA,gFAAmB;AACnB,wFAAqB;AACrB,uEAAsB;ADEtB;AACA;AEKA,iFAAiB;AACjB,yEAAe;AACf;AAGA,IAAM,gBAAA,EAAkB,gBAAA,CAAK,MAAA,CAAO,cAAA,EAAgB,QAAA,CAAA,EAAY;AAG9D,EAAA,MAAM,KAAA,EAAO,IAAA;AACb,EAAA,IAAA,CACG,GAAA,CAAI,CAAA,CACJ,GAAA;AAAA,IACC,IAAA,CAAK,GAAA,CAAI,SAAS,CAAA,CAAE,GAAA,CAAI,CAAA;AAAA,IACxB,IAAA,CAAK,GAAA,CAAI,YAAY,CAAA,CAAE,MAAA,CAAO,CAAA;AAAA,IAC9B,IAAA,CAAK,GAAA,CAAI,YAAY,CAAA,CAAE,QAAA,CAAS,CAAC,CAAA,CAAE,KAAA,CAAM,CAAA,CAAE,QAAA,CAAS,CAAA;AAAA,IACpD,IAAA,CAAK,GAAA,CAAI,WAAW,CAAA,CAAE,QAAA,CAAS,CAAC,CAAA,CAAE,MAAA,CAAO,CAAA,CAAE,QAAA,CAAS;AAAA,EACtD,CAAA;AACJ,CAAC,CAAA;AAED,IAAM,iBAAA,EAAmB,gBAAA,CAAK,MAAA;AAAA,EAC5B,cAAA;AAAA;AAAA,EAEA,QAAA,CAAA,EAAY;AAGV,IAAA,MAAM,KAAA,EAAO,IAAA;AACb,IAAA,IAAA,CACG,GAAA,CAAI,CAAA,CACJ,GAAA;AAAA,MACC,IAAA,CAAK,GAAA,CAAI,SAAS,CAAA,CAAE,GAAA,CAAI,CAAA;AAAA,MACxB,IAAA,CACG,GAAA,CAAI,qBAAqB,CAAA,CACzB,GAAA,CAAI,CAAA,CACJ,GAAA,CAAI,IAAA,CAAK,GAAA,CAAI,aAAa,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,IAAA,CAAK,GAAA,CAAI,OAAO,CAAA,CAAE,KAAA,CAAM,CAAC,CAAA;AAAA,MACjE,IAAA,CAAK,GAAA,CAAI,YAAY,CAAA,CAAE,MAAA,CAAO,CAAA,CAAE,QAAA,CAAS,eAAe,CAAA;AAAA,MACxD,IAAA,CAAK,GAAA,CAAI,YAAY,CAAA,CAAE,QAAA,CAAS,CAAC,CAAA,CAAE,MAAA,CAAO,CAAA,CAAE,QAAA,CAAS;AAAA,IACvD,CAAA;AAAA,EACJ;AAAA;AAEF,CAAA;AAEA,IAAM,wBAAA,EAA0B,gBAAA,CAAK,MAAA,CAAO,sBAAA,EAAwB,QAAA,CAAA,EAAY;AAG9E,EAAA,MAAM,KAAA,EAAO,IAAA;AACb,EAAA,IAAA,CACG,GAAA,CAAI,CAAA,CACJ,GAAA;AAAA,IACC,IAAA,CAAK,GAAA,CAAI,WAAW,CAAA,CAAE,GAAA,CAAI,CAAA,CAAE,GAAA,CAAI,IAAA,CAAK,GAAA,CAAI,IAAI,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,IAAA,CAAK,GAAA,CAAI,OAAO,CAAA,CAAE,KAAA,CAAM,CAAC,CAAA;AAAA,IACjF,IAAA,CAAK,GAAA,CAAI,KAAK,CAAA,CAAE,MAAA,CAAO;AAAA,EACzB,CAAA;AACJ,CAAC,CAAA;AASD,IAAM,OAAA,EAAuC;AAAA,EAC3C,SAAA,EAAW;AAAA,IACT,eAAA,EAAiB,CAAC,CAAA,EAAG,CAAA,EAAG,GAAA,EAAK,CAAA,EAAG,EAAE,CAAA;AAAA,IAClC,iBAAA,EAAmB,EAAE,KAAA,EAAO,iBAAiB,CAAA;AAAA,IAC7C,gBAAA,EAAkB,EAAE,KAAA,EAAO,aAAa,CAAA;AAAA,IACxC,KAAA,EAAO,IAAI,kBAAA,CAAS,EAAA,CAAG,WAAW;AAAA,EACpC,CAAA;AAAA,EACA,IAAA,EAAM;AAAA,IACJ,eAAA,EAAiB,CAAC,CAAA,EAAG,CAAA,EAAG,GAAA,EAAK,KAAA,EAAO,CAAA,EAAG,CAAA,EAAG,CAAC,CAAA;AAAA;AAAA,IAC3C,iBAAA,EAAmB,EAAE,KAAA,EAAO,iBAAiB,CAAA;AAAA,IAC7C,gBAAA,EAAkB,EAAE,KAAA,EAAO,aAAa,CAAA;AAAA,IACxC,KAAA,EAAO,IAAI,kBAAA,CAAS,EAAA,CAAG,MAAM;AAAA,EAC/B;AACF,CAAA;AAoBO,IAAM,WAAA,EAAN,MAAiB;AAAA,EACtB;AAAA,EACA;AAAA,EAEA,WAAA,CAAY,OAAA,EAAgC;AAC1C,IAAA,GAAA,CAAI,OAAO,QAAA,IAAY,QAAA,EAAU;AAE/B,MAAA,GAAA,CAAI,QAAA,IAAY,YAAA,GAAe,QAAA,IAAY,MAAA,EAAQ;AACjD,QAAA,MAAM,IAAI,KAAA,CAAM,iBAAA,EAAmB,OAAO,CAAA;AAAA,MAC5C;AAEA,MAAA,QAAA,EAAU,MAAA,CAAO,OAAO,CAAA;AAAA,IAC1B;AACA,IAAA,IAAA,CAAK,QAAA,EAAU,OAAA;AACf,IAAA,IAAA,CAAK,YAAA,EAAc,CAAC,CAAA,EAAG,CAAA,EAAG,GAAA,EAAK,KAAA,EAAO,CAAA,EAAG,CAAC,CAAA;AAAA,EAC5C;AAAA;AAAA,EAGQ,YAAA,CAAa,UAAA,EAA8C;AACjE,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,IAAI,mBAAA,CAAG,CAAC,CAAA;AAAA,MACjB,UAAA;AAAA,MACA,mBAAA,EAAqB;AAAA,QACnB,WAAA,EAAa,IAAA,CAAK,WAAA;AAAA,QAClB,KAAA,EAAO,UAAA,CAAW;AAAA,MACpB;AAAA,IACF,CAAA;AAAA,EACF;AAAA;AAAA,EAGA,gBAAA,CAAiB,aAAA,EAAuB,YAAA,EAAuC;AAC7E,IAAA,MAAM,iBAAA,EAAoC;AAAA,MACxC,OAAA,EAAS,IAAI,mBAAA,CAAG,CAAC,CAAA;AAAA,MACjB,UAAA,EAAY,MAAA,CAAO,IAAA,CAAK,aAAA,EAAe,KAAK,CAAA;AAAA,MAC5C,UAAA,EAAY,IAAA,CAAK,OAAA,CAAQ;AAAA,IAC3B,CAAA;AAEA,IAAA,GAAA,CAAI,YAAA,EAAc;AAChB,MAAA,gBAAA,CAAiB,UAAA,EAAY;AAAA,QAC3B,MAAA,EAAQ,CAAA;AAAA,QACR,IAAA,EAAM,MAAA,CAAO,IAAA,CAAK,YAAA,EAAc,KAAK;AAAA,MACvC,CAAA;AAAA,IACF;AAEA,IAAA,OAAO,gBAAA;AAAA,EACT;AAAA,EAEA,eAAA,CAAgB,YAAA,EAGd;AACA,IAAA,OAAO;AAAA,MACL,SAAA,EAAW;AAAA,QACT,EAAA,EAAI,IAAA,CAAK,WAAA;AAAA,QACT,KAAA,EAAO,IAAA,CAAK,OAAA,CAAQ;AAAA,MACtB,CAAA;AAAA,MACA,GAAA,EAAK;AAAA,QACH,MAAA,EAAQ,CAAA;AAAA,QACR,IAAA,EAAM,MAAA,CAAO,IAAA,CAAK,YAAA,EAAc,KAAK;AAAA,MACvC;AAAA,IACF,CAAA;AAAA,EACF;AAAA,EAEA,aAAA,CACE,UAAA,EACA,cAAA,EACA,iBAAA,EACA,sBAAA,EAA2C,OAAA,EACnC;AACR,IAAA,IAAI,gBAAA;AAGJ,IAAA,OAAA,CAAQ,cAAA,EAAgB;AAAA,MACtB,KAAK,KAAA,EAAO;AACV,QAAA,GAAA,CAAI,OAAO,WAAA,IAAe,QAAA,EAAU;AAClC,UAAA,MAAM,IAAI,KAAA,CAAM,8BAA8B,CAAA;AAAA,QAChD;AACA,QAAA,MAAM,QAAA,EAAU,IAAA,CAAK,OAAA,CAAQ,KAAA,CAAM,cAAA,CAAe,UAAA,EAAY,KAAK,CAAA;AACnE,QAAA,MAAM,aAAA,EAAe,OAAA,CAAQ,SAAA,CAAU,KAAK,CAAA;AAC5C,QAAA,iBAAA,EAAmB,IAAA,CAAK,gBAAA,CAAiB,UAAA,EAAY,YAAY,CAAA;AACjE,QAAA,KAAA;AAAA,MACF;AAAA,MACA,KAAK,KAAA;AACH,QAAA,GAAA,CAAI,OAAO,WAAA,IAAe,QAAA,EAAU;AAClC,UAAA,WAAA,EAAa,MAAA,CAAO,IAAA,CAAK,UAAA,EAAY,KAAK,CAAA;AAAA,QAC5C;AACA,QAAA,iBAAA,EAAmB,eAAA,CAAgB,MAAA,CAAO,UAAA,EAAY,KAAK,CAAA;AAC3D,QAAA,KAAA;AAAA,MACF,KAAK,KAAA;AACH,QAAA,GAAA,CAAI,OAAO,WAAA,IAAe,QAAA,EAAU;AAClC,UAAA,MAAM,IAAI,KAAA,CAAM,8BAA8B,CAAA;AAAA,QAChD;AACA,QAAA,iBAAA,EAAmB,eAAA,CAAgB,MAAA;AAAA,UACjC,UAAA;AAAA,UACA,KAAA;AAAA,UACA,IAAA,CAAK,OAAA,CAAQ;AAAA,QACf,CAAA;AACA,QAAA,KAAA;AAAA;AAAA,MAEF,OAAA;AACE,QAAA,MAAM,IAAI,KAAA,CAAM,4BAA4B,CAAA;AAAA,IAEhD;AAGA,IAAA,OAAA,CAAQ,iBAAA,EAAmB;AAAA,MACzB,KAAK,KAAA;AACH,QAAA,GAAA,CAAI,sBAAA,IAA0B,OAAA,EAAS;AACrC,UAAA,OAAO,gBAAA,CAAiB,UAAA,CAAW,QAAA,CAAS,KAAK,CAAA;AAAA,QACnD,EAAA,KAAA,GAAA,CAAW,sBAAA,IAA0B,OAAA,EAAS;AAC5C,UAAA,OAAO,IAAA,CAAK,YAAA,CAAa,gBAAgB,CAAA,CAAE,UAAA,CAAW,UAAA,CAAW,QAAA,CAAS,KAAK,CAAA;AAAA,QACjF;AACA,QAAA,KAAA;AAAA,MACF,KAAK,KAAA;AACH,QAAA,GAAA,CAAI,sBAAA,IAA0B,OAAA,EAAS;AACrC,UAAA,OAAO,eAAA,CAAgB,MAAA,CAAO,gBAAA,EAAkB,KAAK,CAAA,CAAE,QAAA,CAAS,KAAK,CAAA;AAAA,QACvE,EAAA,KAAA,GAAA,CAAW,sBAAA,IAA0B,OAAA,EAAS;AAC5C,UAAA,OAAO,gBAAA,CAAiB,MAAA,CAAO,IAAA,CAAK,YAAA,CAAa,gBAAgB,CAAA,EAAG,KAAK,CAAA,CAAE,QAAA;AAAA,YACzE;AAAA,UACF,CAAA;AAAA,QACF;AACA,QAAA,KAAA;AAAA,MACF,KAAK,KAAA;AACH,QAAA,GAAA,CAAI,sBAAA,IAA0B,OAAA,EAAS;AACrC,UAAA,OAAO,eAAA,CAAgB,MAAA,CAAO,gBAAA,EAAkB,KAAA,EAAO,IAAA,CAAK,OAAA,CAAQ,iBAAiB,CAAA;AAAA,QACvF,EAAA,KAAA,GAAA,CAAW,sBAAA,IAA0B,OAAA,EAAS;AAC5C,UAAA,OAAO,gBAAA,CAAiB,MAAA,CAAO,IAAA,CAAK,YAAA,CAAa,gBAAgB,CAAA,EAAG,KAAA,EAAO;AAAA,YACzE,GAAG,IAAA,CAAK,OAAA,CAAQ,iBAAA;AAAA,YAChB,KAAA,EAAO;AAAA,UACT,CAAC,CAAA;AAAA,QACH;AACA,QAAA,KAAA;AAAA;AAAA,MAEF,OAAA;AACE,QAAA,MAAM,IAAI,KAAA,CAAM,4CAA4C,CAAA;AAAA,IAEhE;AAEA,IAAA,MAAM,IAAI,KAAA,CAAM,wCAAwC,CAAA;AAAA,EAC1D;AAAA,EAEA,YAAA,CACE,SAAA,EACA,cAAA,EACA,iBAAA,EACQ;AACR,IAAA,IAAI,eAAA;AAEJ,IAAA,OAAA,CAAQ,cAAA,EAAgB;AAAA,MACtB,KAAK,KAAA;AACH,QAAA,GAAA,CAAI,OAAO,UAAA,IAAc,QAAA,EAAU;AACjC,UAAA,MAAM,IAAI,KAAA,CAAM,6BAA6B,CAAA;AAAA,QAC/C;AACA,QAAA,gBAAA,EAAkB,IAAA,CAAK,eAAA,CAAgB,SAAS,CAAA;AAChD,QAAA,KAAA;AAAA,MACF,KAAK,KAAA;AACH,QAAA,GAAA,CAAI,OAAO,UAAA,IAAc,QAAA,EAAU;AACjC,UAAA,UAAA,EAAY,MAAA,CAAO,IAAA,CAAK,SAAA,EAAW,KAAK,CAAA;AAAA,QAC1C;AACA,QAAA,gBAAA,EAAkB,uBAAA,CAAwB,MAAA,CAAO,SAAA,EAAW,KAAK,CAAA;AACjE,QAAA,KAAA;AAAA,MACF,KAAK,KAAA;AACH,QAAA,GAAA,CAAI,OAAO,UAAA,IAAc,QAAA,EAAU;AACjC,UAAA,MAAM,IAAI,KAAA,CAAM,6BAA6B,CAAA;AAAA,QAC/C;AACA,QAAA,gBAAA,EAAkB,uBAAA,CAAwB,MAAA;AAAA,UACxC,SAAA;AAAA,UACA,KAAA;AAAA,UACA,IAAA,CAAK,OAAA,CAAQ;AAAA,QACf,CAAA;AACA,QAAA,KAAA;AAAA;AAAA,MAEF,OAAA;AACE,QAAA,MAAM,IAAI,KAAA,CAAM,2BAA2B,CAAA;AAAA,IAE/C;AAGA,IAAA,OAAA,CAAQ,iBAAA,EAAmB;AAAA,MACzB,KAAK,KAAA;AACH,QAAA,OAAO,eAAA,CAAgB,GAAA,CAAI,IAAA,CAAK,QAAA,CAAS,KAAK,CAAA;AAAA,MAChD,KAAK,KAAA;AACH,QAAA,OAAO,uBAAA,CAAwB,MAAA,CAAO,eAAA,EAAiB,KAAK,CAAA,CAAE,QAAA,CAAS,KAAK,CAAA;AAAA,MAC9E,KAAK,KAAA;AACH,QAAA,OAAO,uBAAA,CAAwB,MAAA;AAAA,UAC7B,eAAA;AAAA,UACA,KAAA;AAAA,UACA,IAAA,CAAK,OAAA,CAAQ;AAAA,QACf,CAAA;AAAA;AAAA,MAEF,OAAA;AACE,QAAA,MAAM,IAAI,KAAA,CAAM,2CAA2C,CAAA;AAAA,IAE/D;AAAA,EACF;AACF,CAAA;AFlFA;AACA;AClNA,SAAS,gBAAA,CAAiB,MAAA,EAAwB;AAGhD,EAAA,MAAM,IAAA,EAAM,MAAA,CAAO,KAAA,CAAM,IAAI,CAAA;AAC7B,EAAA,GAAA,CAAI,KAAA,CAAM,CAAA;AACV,EAAA,GAAA,CAAI,GAAA,CAAI,CAAA;AAER,EAAA,MAAM,UAAA,EAAY,MAAA,CAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,EAAE,CAAA,EAAG,QAAQ,CAAA;AAGpD,EAAA,MAAM,gBAAA,EAAkB,SAAA,CAAU,KAAA,CAAM,EAAE,CAAA;AAC1C,EAAA,OAAO,eAAA,CAAgB,QAAA,CAAS,KAAK,CAAA,CAAE,WAAA,CAAY,CAAA;AACrD;AAEA,SAAS,QAAA,CAAS,SAAA,EAAmB,EAAE,UAAA,EAAY,KAAK,EAAA,EAAI,CAAC,CAAA,EAAW;AACtE,EAAA,MAAM,WAAA,EAAa,IAAI,UAAA,CAAW,MAAM,CAAA;AACxC,EAAA,GAAA,CAAI,SAAA,EAAW;AACb,IAAA,OAAO,UAAA,CAAW,aAAA,CAAc,SAAA,EAAW,KAAA,EAAO,KAAK,CAAA;AAAA,EACzD;AACA,EAAA,OAAO,UAAA,CAAW,YAAA,CAAa,SAAA,EAAW,KAAA,EAAO,KAAK,CAAA;AACxD;AAMO,SAAS,OAAA,CAAQ,OAAA,EAAiC;AACvD,EAAA,GAAA,CAAI,OAAA,EAAS;AACX,IAAA,MAAM,GAAA,EAAK,IAAIA,kBAAAA,CAAS,EAAA,CAAG,MAAM,CAAA;AACjC,IAAA,MAAM,cAAA,EAAgB,gBAAA,CAAO,UAAA,CAAW,QAAQ,CAAA,CAAE,MAAA,CAAO,OAAO,CAAA,CAAE,MAAA,CAAO,KAAK,CAAA;AAC9E,IAAA,MAAM,QAAA,EAAU,EAAA,CAAG,UAAA,CAAW;AAAA,MAC5B,OAAA,EAAS,MAAA,CAAO,IAAA,CAAK,aAAA,EAAe,KAAK;AAAA,IAC3C,CAAC,CAAA;AACD,IAAA,OAAO;AAAA,MACL,UAAA,EAAY,MAAA,CAAO,QAAA,CAAS,OAAA,CAAQ,UAAA,CAAW,KAAK,CAAC,CAAC,CAAA;AAAA,MACtD,SAAA,EAAW,MAAA,CAAO,QAAA,CAAS,OAAA,CAAQ,SAAA,CAAU,KAAK,CAAA,EAAG,EAAE,SAAA,EAAW,MAAM,CAAC,CAAC,CAAA;AAAA,MAC1E,SAAA,EAAW,gBAAA,CAAiB,MAAA,CAAO,QAAA,CAAS,OAAA,CAAQ,SAAA,CAAU,KAAK,CAAA,EAAG,EAAE,SAAA,EAAW,MAAM,CAAC,CAAC,CAAC;AAAA,IAC9F,CAAA;AAAA,EACF;AACA,EAAA,MAAM,EAAE,SAAA,EAAW,WAAW,EAAA,EAAI,gBAAA,CAAO,mBAAA,CAAoB,IAAA,EAAM;AAAA,IACjE,UAAA,EAAY,OAAA;AAAA,IACZ,iBAAA,EAAmB,EAAE,IAAA,EAAM,MAAA,EAAQ,MAAA,EAAQ,MAAM,CAAA;AAAA,IACjD,kBAAA,EAAoB,EAAE,IAAA,EAAM,MAAA,EAAQ,MAAA,EAAQ,MAAM;AAAA,EACpD,CAAC,CAAA;AACD,EAAA,MAAM,UAAA,EAAY,gBAAA,CAAiB,SAAS,CAAA;AAC5C,EAAA,OAAO;AAAA,IACL,UAAA;AAAA,IACA,SAAA;AAAA,IACA;AAAA,EACF,CAAA;AACF;AAEO,IAAM,KAAA,EAAO,MAAA,CAAO,aAAA,EAAuB,eAAA,EAAA,GAA6C;AAE7F,EAAA,MAAM,mBAAA,EAA0B,IAAA,CAAA,SAAA,CAAU,MAAA,CAAO,eAAe,CAAA;AAKhE,EAAA,MAAM,WAAA,EAAa,gBAAA,CAAO,gBAAA,CAAiB,aAAa,CAAA;AAGxD,EAAA,OAAO,MAAM,IAAS,IAAA,CAAA,WAAA,CAAY,kBAAkB,CAAA,CACjD,kBAAA,CAAmB,EAAE,GAAA,EAAK,OAAA,EAAS,GAAA,EAAK,MAAM,CAAC,CAAA,CAC/C,IAAA,CAAK,UAAU,CAAA;AACpB,CAAA;AD+LA;AACA;AACE;AACA;AACF,+CAAC","file":"/home/runner/_work/revault/revault/packages/sdk/lib/chunk-XO66ZFXN.cjs","sourcesContent":[null,"import crypto from \"crypto\";\nimport elliptic from \"elliptic\";\nimport * as jose from \"jose\";\n\nimport { KeyEncoder } from \"./key-encoder\";\nimport type { GeneratedKeys } from \"./types\";\n\nfunction extractPublicKey(pemKey: string): string {\n  // convert the PEM formatted public key to raw public key in X9.62 uncompressed format\n  // this is an oversimplified method and may not work with different curves or PEM formats\n  const pem = pemKey.split(\"\\n\");\n  pem.shift(); // remove the first line (BEGIN PUBLIC KEY)\n  pem.pop(); // remove the last line (END PUBLIC KEY)\n  // convert base64 to buffer\n  const keyBuffer = Buffer.from(pem.join(\"\"), \"base64\");\n  // assuming the first 26 bytes are the header for the SPKI formatted key.\n  // the actual key should begin after this header.\n  const actualKeyBuffer = keyBuffer.slice(26);\n  return actualKeyBuffer.toString(\"hex\").toUpperCase();\n}\n\nfunction hexToPem(hexString: string, { isPrivate = true } = {}): string {\n  const keyEncoder = new KeyEncoder(\"p256\");\n  if (isPrivate) {\n    return keyEncoder.encodePrivate(hexString, \"raw\", \"pem\");\n  }\n  return keyEncoder.encodePublic(hexString, \"raw\", \"pem\");\n}\n\n/**\n * If `entropy` is passed, will generate keys pair deterministically\n * else, random keys pair generated\n */\nexport function genKeys(entropy?: string): GeneratedKeys {\n  if (entropy) {\n    const ec = new elliptic.ec(\"p256\");\n    const hashedEntropy = crypto.createHash(\"sha256\").update(entropy).digest(\"hex\");\n    const keyPair = ec.genKeyPair({\n      entropy: Buffer.from(hashedEntropy, \"hex\"),\n    });\n    return {\n      privateKey: String(hexToPem(keyPair.getPrivate(\"hex\"))),\n      publicKey: String(hexToPem(keyPair.getPublic(\"hex\"), { isPrivate: false })),\n      hexPubKey: extractPublicKey(String(hexToPem(keyPair.getPublic(\"hex\"), { isPrivate: false }))),\n    };\n  }\n  const { publicKey, privateKey } = crypto.generateKeyPairSync(\"ec\", {\n    namedCurve: \"P-256\",\n    publicKeyEncoding: { type: \"spki\", format: \"pem\" },\n    privateKeyEncoding: { type: \"sec1\", format: \"pem\" },\n  });\n  const hexPubKey = extractPublicKey(publicKey);\n  return {\n    privateKey,\n    publicKey,\n    hexPubKey,\n  };\n}\n\nexport const sign = async (privateKeyPem: string, base64Challenge: string): Promise<string> => {\n  // Decode base64url challenge to bytes\n  const challengeDataBytes = jose.base64url.decode(base64Challenge);\n\n  // For EC private key format, we need to use a different import method\n  // Since jose doesn't support SEC1 format directly, let's use Node.js crypto\n  // Create a KeyObject from the EC private key\n  const privateKey = crypto.createPrivateKey(privateKeyPem);\n\n  // Use jose with the KeyObject\n  return await new jose.CompactSign(challengeDataBytes)\n    .setProtectedHeader({ alg: \"ES256\", typ: \"JWT\" })\n    .sign(privateKey);\n};\n","// ========================================================================== //\n//                                                                            //\n//                                 DISCLAIMER                                 //\n//                                                                            //\n//                This code has been blindly copy-pasted from:                //\n//                    https://github.com/LedgerHQ/pkey-ts                     //\n//                                                                            //\n// ========================================================================== //\n//\n// @ts-expect-error this library does not ship types\nimport asn1 from \"asn1.js\";\nimport BN from \"bn.js\";\nimport elliptic from \"elliptic\";\n\n/* cspell:disable */\nconst ECPrivateKeyASN = asn1.define(\"ECPrivateKey\", function () {\n  // @ts-expect-error pure black box\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any, @typescript-eslint/no-unnecessary-type-assertion\n  const self = this as any;\n  self\n    .seq()\n    .obj(\n      self.key(\"version\").int(),\n      self.key(\"privateKey\").octstr(),\n      self.key(\"parameters\").explicit(0).objid().optional(),\n      self.key(\"publicKey\").explicit(1).bitstr().optional(),\n    );\n});\n\nconst ECPrivateKey8ASN = asn1.define(\n  \"ECPrivateKey\",\n  /* v8 ignore start */\n  function () {\n    // @ts-expect-error pure black box\n    // eslint-disable-next-line @typescript-eslint/no-explicit-any, @typescript-eslint/no-unnecessary-type-assertion\n    const self = this as any;\n    self\n      .seq()\n      .obj(\n        self.key(\"version\").int(),\n        self\n          .key(\"privateKeyAlgorithm\")\n          .seq()\n          .obj(self.key(\"ecPublicKey\").objid(), self.key(\"curve\").objid()),\n        self.key(\"privateKey\").octstr().contains(ECPrivateKeyASN),\n        self.key(\"attributes\").explicit(0).bitstr().optional(),\n      );\n  },\n  /* v8 ignore stop */\n);\n\nconst SubjectPublicKeyInfoASN = asn1.define(\"SubjectPublicKeyInfo\", function () {\n  // @ts-expect-error pure black box\n  // eslint-disable-next-line @typescript-eslint/no-explicit-any, @typescript-eslint/no-unnecessary-type-assertion\n  const self = this as any;\n  self\n    .seq()\n    .obj(\n      self.key(\"algorithm\").seq().obj(self.key(\"id\").objid(), self.key(\"curve\").objid()),\n      self.key(\"pub\").bitstr(),\n    );\n});\n\ntype CurveOptions = {\n  curveParameters: number[];\n  privatePEMOptions: { label: string };\n  publicPEMOptions: { label: string };\n  curve: elliptic.ec;\n};\n\nconst curves: Record<string, CurveOptions> = {\n  secp256k1: {\n    curveParameters: [1, 3, 132, 0, 10],\n    privatePEMOptions: { label: \"EC PRIVATE KEY\" },\n    publicPEMOptions: { label: \"PUBLIC KEY\" },\n    curve: new elliptic.ec(\"secp256k1\"),\n  },\n  p256: {\n    curveParameters: [1, 2, 840, 10045, 3, 1, 7], // OID for p256 curve\n    privatePEMOptions: { label: \"EC PRIVATE KEY\" },\n    publicPEMOptions: { label: \"PUBLIC KEY\" },\n    curve: new elliptic.ec(\"p256\"),\n  },\n};\n\ntype PrivateKeyPKCS1 = {\n  version: BN;\n  privateKey: Buffer;\n  parameters: number[];\n  publicKey?: {\n    unused: number;\n    data: Buffer;\n  };\n};\n\ntype PrivateKeyPKCS8 = {\n  version: BN;\n  privateKey: PrivateKeyPKCS1;\n  privateKeyAlgorithm: { ecPublicKey: number[]; curve: number[] };\n};\n\nexport type KeyFormat = \"raw\" | \"pem\" | \"der\";\n\nexport class KeyEncoder {\n  algorithmID: number[];\n  options: CurveOptions;\n\n  constructor(options: string | CurveOptions) {\n    if (typeof options === \"string\") {\n      /* v8 ignore start */\n      if (options !== \"secp256k1\" && options !== \"p256\") {\n        throw new Error(\"Unknown curve \" + options);\n      }\n      /* v8 ignore stop */\n      options = curves[options]!;\n    }\n    this.options = options;\n    this.algorithmID = [1, 2, 840, 10045, 2, 1];\n  }\n\n  /* v8 ignore start */\n  private PKCS1toPKCS8(privateKey: PrivateKeyPKCS1): PrivateKeyPKCS8 {\n    return {\n      version: new BN(0),\n      privateKey,\n      privateKeyAlgorithm: {\n        ecPublicKey: this.algorithmID,\n        curve: privateKey.parameters,\n      },\n    };\n  }\n  /* v8 ignore stop */\n\n  privateKeyObject(rawPrivateKey: string, rawPublicKey: string): PrivateKeyPKCS1 {\n    const privateKeyObject: PrivateKeyPKCS1 = {\n      version: new BN(1),\n      privateKey: Buffer.from(rawPrivateKey, \"hex\"),\n      parameters: this.options.curveParameters,\n    };\n\n    if (rawPublicKey) {\n      privateKeyObject.publicKey = {\n        unused: 0,\n        data: Buffer.from(rawPublicKey, \"hex\"),\n      };\n    }\n\n    return privateKeyObject;\n  }\n\n  publicKeyObject(rawPublicKey: string): {\n    algorithm: { id: number[]; curve: number[] };\n    pub: { unused: number; data: Buffer };\n  } {\n    return {\n      algorithm: {\n        id: this.algorithmID,\n        curve: this.options.curveParameters,\n      },\n      pub: {\n        unused: 0,\n        data: Buffer.from(rawPublicKey, \"hex\"),\n      },\n    };\n  }\n\n  encodePrivate(\n    privateKey: string | Buffer,\n    originalFormat: KeyFormat,\n    destinationFormat: KeyFormat,\n    destinationFormatType: \"pkcs8\" | \"pkcs1\" = \"pkcs1\",\n  ): string {\n    let privateKeyObject: PrivateKeyPKCS1;\n\n    /* Parse the incoming private key and convert it to a private key object */\n    switch (originalFormat) {\n      case \"raw\": {\n        if (typeof privateKey !== \"string\") {\n          throw new Error(\"private key must be a string\");\n        }\n        const keyPair = this.options.curve.keyFromPrivate(privateKey, \"hex\");\n        const rawPublicKey = keyPair.getPublic(\"hex\");\n        privateKeyObject = this.privateKeyObject(privateKey, rawPublicKey);\n        break;\n      }\n      case \"der\":\n        if (typeof privateKey === \"string\") {\n          privateKey = Buffer.from(privateKey, \"hex\");\n        }\n        privateKeyObject = ECPrivateKeyASN.decode(privateKey, \"der\");\n        break;\n      case \"pem\":\n        if (typeof privateKey !== \"string\") {\n          throw new Error(\"private key must be a string\");\n        }\n        privateKeyObject = ECPrivateKeyASN.decode(\n          privateKey,\n          \"pem\",\n          this.options.privatePEMOptions,\n        );\n        break;\n      /* v8 ignore start */\n      default:\n        throw new Error(\"invalid private key format\");\n      /* v8 ignore stop */\n    }\n\n    /* Export the private key object to the desired format */\n    switch (destinationFormat) {\n      case \"raw\":\n        if (destinationFormatType === \"pkcs1\") {\n          return privateKeyObject.privateKey.toString(\"hex\");\n        } else if (destinationFormatType === \"pkcs8\") {\n          return this.PKCS1toPKCS8(privateKeyObject).privateKey.privateKey.toString(\"hex\");\n        }\n        break;\n      case \"der\":\n        if (destinationFormatType === \"pkcs1\") {\n          return ECPrivateKeyASN.encode(privateKeyObject, \"der\").toString(\"hex\");\n        } else if (destinationFormatType === \"pkcs8\") {\n          return ECPrivateKey8ASN.encode(this.PKCS1toPKCS8(privateKeyObject), \"der\").toString(\n            \"hex\",\n          );\n        }\n        break;\n      case \"pem\":\n        if (destinationFormatType === \"pkcs1\") {\n          return ECPrivateKeyASN.encode(privateKeyObject, \"pem\", this.options.privatePEMOptions);\n        } else if (destinationFormatType === \"pkcs8\") {\n          return ECPrivateKey8ASN.encode(this.PKCS1toPKCS8(privateKeyObject), \"pem\", {\n            ...this.options.privatePEMOptions,\n            label: \"PRIVATE KEY\",\n          });\n        }\n        break;\n      /* v8 ignore start */\n      default:\n        throw new Error(\"invalid destination format for private key\");\n      /* v8 ignore stop */\n    }\n\n    throw new Error(\"unsupported destination format or type\");\n  }\n\n  encodePublic(\n    publicKey: string | Buffer,\n    originalFormat: KeyFormat,\n    destinationFormat: KeyFormat,\n  ): string {\n    let publicKeyObject;\n\n    switch (originalFormat) {\n      case \"raw\":\n        if (typeof publicKey !== \"string\") {\n          throw new Error(\"public key must be a string\");\n        }\n        publicKeyObject = this.publicKeyObject(publicKey);\n        break;\n      case \"der\":\n        if (typeof publicKey === \"string\") {\n          publicKey = Buffer.from(publicKey, \"hex\");\n        }\n        publicKeyObject = SubjectPublicKeyInfoASN.decode(publicKey, \"der\");\n        break;\n      case \"pem\":\n        if (typeof publicKey !== \"string\") {\n          throw new Error(\"public key must be a string\");\n        }\n        publicKeyObject = SubjectPublicKeyInfoASN.decode(\n          publicKey,\n          \"pem\",\n          this.options.publicPEMOptions,\n        );\n        break;\n      /* v8 ignore start */\n      default:\n        throw new Error(\"invalid public key format\");\n      /* v8 ignore stop */\n    }\n\n    /* Export the private key object to the desired format */\n    switch (destinationFormat) {\n      case \"raw\":\n        return publicKeyObject.pub.data.toString(\"hex\");\n      case \"der\":\n        return SubjectPublicKeyInfoASN.encode(publicKeyObject, \"der\").toString(\"hex\");\n      case \"pem\":\n        return SubjectPublicKeyInfoASN.encode(\n          publicKeyObject,\n          \"pem\",\n          this.options.publicPEMOptions,\n        );\n      /* v8 ignore start */\n      default:\n        throw new Error(\"invalid destination format for public key\");\n      /* v8 ignore stop */\n    }\n  }\n}\n/* cspell:enable */\n"]}

package/lib/crypto.cjs

@@ -1,7 +1,9 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
-var _chunkJGXOGWYBcjs = require('./chunk-JGXOGWYB.cjs');
 
+var _chunkXO66ZFXNcjs = require('./chunk-XO66ZFXN.cjs');
 
-exports.genKeys = _chunkJGXOGWYBcjs.genKeys;
+
+
+exports.genKeys = _chunkXO66ZFXNcjs.genKeys; exports.sign = _chunkXO66ZFXNcjs.sign;
 //# sourceMappingURL=crypto.cjs.map

package/lib/crypto.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["/home/runner/_work/revault/revault/packages/sdk/lib/crypto.cjs"],"names":[],"mappings":"AAAA;AACE;AACF,wDAA6B;AAC7B;AACE;AACF,4CAAC","file":"/home/runner/_work/revault/revault/packages/sdk/lib/crypto.cjs"}
+{"version":3,"sources":["/home/runner/_work/revault/revault/packages/sdk/lib/crypto.cjs"],"names":[],"mappings":"AAAA;AACE;AACA;AACF,wDAA6B;AAC7B;AACE;AACA;AACF,mFAAC","file":"/home/runner/_work/revault/revault/packages/sdk/lib/crypto.cjs"}

package/lib/crypto.d.cts

@@ -9,5 +9,6 @@ type GeneratedKeys = {
  * else, random keys pair generated
  */
 declare function genKeys(entropy?: string): GeneratedKeys;
+declare const sign: (privateKeyPem: string, base64Challenge: string) => Promise<string>;
 
-export { type GeneratedKeys, genKeys };
+export { type GeneratedKeys, genKeys, sign };

package/lib/crypto.d.ts

@@ -9,5 +9,6 @@ type GeneratedKeys = {
  * else, random keys pair generated
  */
 declare function genKeys(entropy?: string): GeneratedKeys;
+declare const sign: (privateKeyPem: string, base64Challenge: string) => Promise<string>;
 
-export { type GeneratedKeys, genKeys };
+export { type GeneratedKeys, genKeys, sign };

package/lib/crypto.js

@@ -1,7 +1,9 @@
 import {
-  genKeys
-} from "./chunk-CZLZUISN.js";
+  genKeys,
+  sign
+} from "./chunk-OU3QTNYT.js";
 export {
-  genKeys
+  genKeys,
+  sign
 };
 //# sourceMappingURL=crypto.js.map

package/lib/device.cjs

@@ -3,11 +3,11 @@
 
 
 
-var _chunkB5EUR3HTcjs = require('./chunk-B5EUR3HT.cjs');
+var _chunkKS6SB3HRcjs = require('./chunk-KS6SB3HR.cjs');
 
 
 
 
 
-exports.createApiDevice = _chunkB5EUR3HTcjs.createApiDevice; exports.isDeviceCancelError = _chunkB5EUR3HTcjs.isDeviceCancelError; exports.isTransportStatusError = _chunkB5EUR3HTcjs.isTransportStatusError; exports.registerTransportModule = _chunkB5EUR3HTcjs.registerTransportModule;
+exports.createApiDevice = _chunkKS6SB3HRcjs.createApiDevice; exports.isDeviceCancelError = _chunkKS6SB3HRcjs.isDeviceCancelError; exports.isTransportStatusError = _chunkKS6SB3HRcjs.isTransportStatusError; exports.registerTransportModule = _chunkKS6SB3HRcjs.registerTransportModule;
 //# sourceMappingURL=device.cjs.map

package/lib/device.d.cts

@@ -20,7 +20,7 @@ type Options = {
     genSeed: (p: {
         salt: string;
         index: number;
-    }) => string;
+    }) => string | Promise<string>;
 };
 type ApiDevice = {
     /**

package/lib/device.d.ts

@@ -20,7 +20,7 @@ type Options = {
     genSeed: (p: {
         salt: string;
         index: number;
-    }) => string;
+    }) => string | Promise<string>;
 };
 type ApiDevice = {
     /**

package/lib/device.js

@@ -3,7 +3,7 @@ import {
   isDeviceCancelError,
   isTransportStatusError,
   registerTransportModule
-} from "./chunk-7WN7G7BY.js";
+} from "./chunk-OJW4TCAG.js";
 export {
   createApiDevice,
   isDeviceCancelError,