@ledgerhq/revault-sdk 0.21.5 → 0.21.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (42) hide show
  1. package/lib/bake.cjs +12 -3
  2. package/lib/bake.cjs.map +1 -1
  3. package/lib/bake.d.cts +8 -1
  4. package/lib/bake.d.ts +8 -1
  5. package/lib/bake.js +11 -2
  6. package/lib/bake.js.map +1 -1
  7. package/lib/{chunk-B5EUR3HT.cjs → chunk-2HKHCIKX.cjs} +75 -59
  8. package/lib/chunk-2HKHCIKX.cjs.map +1 -0
  9. package/lib/{chunk-7WN7G7BY.js → chunk-42CFPNWC.js} +78 -62
  10. package/lib/chunk-42CFPNWC.js.map +1 -0
  11. package/lib/{chunk-QVDZOA4O.js → chunk-73OX5XDM.js} +21 -12
  12. package/lib/chunk-73OX5XDM.js.map +1 -0
  13. package/lib/{chunk-CKNBRCHA.cjs → chunk-P53CFOI6.cjs} +22 -13
  14. package/lib/chunk-P53CFOI6.cjs.map +1 -0
  15. package/lib/crypto.cjs +4 -2
  16. package/lib/crypto.cjs.map +1 -1
  17. package/lib/crypto.d.cts +2 -1
  18. package/lib/crypto.d.ts +2 -1
  19. package/lib/crypto.js +5 -3
  20. package/lib/device.cjs +2 -2
  21. package/lib/device.d.cts +5 -5
  22. package/lib/device.d.ts +5 -5
  23. package/lib/device.js +1 -1
  24. package/lib/engine.cjs +46 -35
  25. package/lib/engine.cjs.map +1 -1
  26. package/lib/engine.d.cts +2 -2
  27. package/lib/engine.d.ts +2 -2
  28. package/lib/engine.js +28 -17
  29. package/lib/engine.js.map +1 -1
  30. package/lib/onboarding.cjs +20 -7
  31. package/lib/onboarding.cjs.map +1 -1
  32. package/lib/onboarding.d.cts +1 -1
  33. package/lib/onboarding.d.ts +1 -1
  34. package/lib/onboarding.js +19 -6
  35. package/lib/onboarding.js.map +1 -1
  36. package/lib/{types-Cp-L-rsW.d.ts → types-Dkr4g0qP.d.ts} +1 -1
  37. package/lib/{types-DEyShR5S.d.cts → types-pUN38HdE.d.cts} +1 -1
  38. package/package.json +12 -11
  39. package/lib/chunk-7WN7G7BY.js.map +0 -1
  40. package/lib/chunk-B5EUR3HT.cjs.map +0 -1
  41. package/lib/chunk-CKNBRCHA.cjs.map +0 -1
  42. package/lib/chunk-QVDZOA4O.js.map +0 -1
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@ledgerhq/revault-sdk",
3
- "version": "0.21.5",
3
+ "version": "0.21.7",
4
4
  "license": "Apache-2.0",
5
5
  "type": "module",
6
6
  "files": [
@@ -46,20 +46,21 @@
46
46
  "dependencies": {
47
47
  "@ledgerhq/errors": "^6.26.0",
48
48
  "@ledgerhq/hw-transport": "^6.31.12",
49
- "@trpc/client": "^11.6.0",
50
- "@trpc/server": "^11.6.0",
49
+ "@trpc/client": "11.6.0",
50
+ "@trpc/server": "11.6.0",
51
51
  "asn1.js": "^5.4.1",
52
52
  "axios": "^1.12.2",
53
53
  "axios-retry": "^4.5.0",
54
54
  "bn.js": "^5.2.2",
55
55
  "elliptic": "^6.6.1",
56
56
  "invariant": "^2.2.4",
57
+ "jose": "^6.1.0",
57
58
  "lodash": "^4.17.21",
58
59
  "rxjs": "^7.8.2",
59
- "superjson": "^2.2.2",
60
+ "superjson": "^2.2.3",
60
61
  "uuid": "^13.0.0",
61
62
  "zod": "^4.1.12",
62
- "@ledgerhq/revault-api": "1.39.1"
63
+ "@ledgerhq/revault-api": "1.40.1"
63
64
  },
64
65
  "devDependencies": {
65
66
  "@eslint/js": "^9.38.0",
@@ -67,23 +68,23 @@
67
68
  "@types/elliptic": "^6.4.18",
68
69
  "@types/invariant": "^2.2.37",
69
70
  "@types/lodash": "^4.17.20",
70
- "@types/node": "^22.18.11",
71
- "@vitest/coverage-v8": "^3.2.4",
72
- "@vitest/ui": "^3.2.4",
71
+ "@types/node": "^22.18.12",
72
+ "@vitest/coverage-v8": "^4.0.5",
73
+ "@vitest/ui": "^4.0.5",
73
74
  "eslint": "^9.38.0",
74
75
  "eslint-plugin-unicorn": "^61.0.2",
75
76
  "tsup": "^8.5.0",
76
77
  "tsx": "^4.20.6",
77
78
  "typescript": "^5.9.3",
78
- "typescript-eslint": "^8.46.1",
79
+ "typescript-eslint": "^8.46.2",
79
80
  "vite-plugin-node-polyfills": "^0.24.0",
80
- "vitest": "^3.2.4",
81
+ "vitest": "^4.0.5",
81
82
  "vitest-mock-extended": "^3.1.0"
82
83
  },
83
84
  "scripts": {
84
85
  "build": "tsup",
85
86
  "dev": "tsup --watch",
86
- "lint": "eslint --cache .",
87
+ "lint": "biome check",
87
88
  "test": "vitest run --coverage --coverage.thresholds.100=true",
88
89
  "test:unit": "vitest",
89
90
  "typecheck": "tsgo --noEmit"
package/lib/chunk-7WN7G7BY.js.map DELETED
@@ -1 +0,0 @@
1
- {"version":3,"sources":["../src/device/api-device.ts","../src/device/constants.ts","../src/device/utils.ts","../src/device/device-access.ts"],"sourcesContent":["import type {\n HsmCertificate,\n PsdAuthChallengeResponse,\n PsdPairingData,\n PubKey,\n} from \"@ledgerhq/revault-api\";\nimport axios from \"axios\";\nimport axiosRetry from \"axios-retry\";\nimport { v4 as uuidv4 } from \"uuid\";\n\nimport type { Logger } from \"@/logger\";\n\nimport { APPID_VAULT_ADMINISTRATOR, PATHS, SCRIPT_IDS, STR_ROLES } from \"./constants\";\nimport type { Device } from \"./types\";\n\ntype Options = {\n /**\n * device-api URL\n */\n deviceApiUrl: string;\n\n /**\n * salt used by device-api\n */\n salt: string;\n\n /**\n * seed generation function used for device-api device spawn\n */\n genSeed: (p: { salt: string; index: number }) => string;\n};\n\nexport type ApiDevice = {\n /**\n * bind a device to the given device index\n */\n with: (index: number) => Device;\n};\n\nexport function createApiDevice(options: Options, logger: Logger): ApiDevice {\n const { genSeed } = options;\n const sessionId = uuidv4();\n const deviceApi = axios.create({ baseURL: options.deviceApiUrl });\n\n axiosRetry(deviceApi, {\n retryDelay: axiosRetry.linearDelay(1000),\n retries: 3,\n /* v8 ignore start */\n retryCondition: () => true,\n onRetry: (retryCount, err) => {\n const formattedErr = `${err.code ?? `UNKNOWN`} on ${err.config?.method?.toUpperCase() ?? \"UNKNOWN_METHOD\"} ${err.config?.url ?? \"UNKNOWN_URL\"}`;\n logger.warning(\n `Retrying request to device-api (attempt ${retryCount}) - Cause: ${formattedErr}`,\n );\n },\n /* v8 ignore stop */\n });\n\n deviceApi.interceptors.request.use(\n (config) => {\n /* v8 ignore start */\n logger.debug(\n `[device-api] ${config.method?.toUpperCase()} ${config.url}${config.data ? ` ${JSON.stringify(config.data)}` : \"\"}`,\n );\n if ([\"post\", \"put\"].includes(config.method!)) {\n // when interceptor is called in combination with axios-retry, config.data can be a string or an object\n // and we should return either a string or an object compatible with the original type\n const isStringMode = typeof config.data === \"string\";\n const data = (isStringMode ? JSON.parse(config.data) : config.data) as Record<\n string,\n unknown\n >;\n const enhancedData = {\n sessionID: sessionId, // Used to ensure dedicated session if someones else uses same seed\n psd_model: \"02\", // Stax\n version: 3, // Used to properly enable noise channel\n ...data,\n };\n config.data = isStringMode ? JSON.stringify(enhancedData) : enhancedData;\n }\n return config;\n },\n /* v8 ignore stop */\n (error: Error) => Promise.reject(error),\n );\n\n return {\n with: (index: number): Device => {\n const seed = genSeed({ salt: options.salt, index });\n\n const authenticate = async ({\n challenge,\n workspaceName,\n }: {\n challenge: PsdAuthChallengeResponse;\n workspaceName: string;\n }): Promise<string> => {\n const role = challenge.role;\n if (role === \"READ_ONLY_API_KEY\")\n throw new Error(\"Invalid role for authenticate: READ_ONLY_API_KEY\");\n const { data } = await deviceApi.post<string>(\"/authenticate\", {\n seed,\n challenge: Buffer.from(challenge.challenge, \"base64\").toString(\"hex\"),\n application: APPID_VAULT_ADMINISTRATOR,\n key_handle: challenge.keyHandle,\n name: challenge.name,\n role: STR_ROLES[role],\n type: \"02\", // Stax\n workspaceName,\n });\n return data;\n };\n\n const finalizePairingHandshake = async (params: {\n handshake: string;\n partitionId: string;\n }): Promise<string> => {\n const { handshake, partitionId } = params;\n const payload = { seed, handshake, ciphertext: partitionId };\n const res = await deviceApi.post<string>(\"/finalize-pairing-handshake\", payload);\n return res.data;\n };\n\n const generateSeedFragment = async (): Promise<string> => {\n const payload = {\n seed,\n path: PATHS.KEY_MATERIAL,\n goal: 0, // seed fragment\n };\n const { data } = await deviceApi.post<string>(\"/generate-key-component\", payload);\n return data;\n };\n\n const generateWrappingKeyFragment = async (): Promise<string> => {\n const goal = 1; // means Wrapping Key\n const payload = { seed, goal, path: PATHS.KEY_MATERIAL };\n const res = await deviceApi.post<string>(\"/generate-key-fragments\", payload);\n return Buffer.from(res.data, \"hex\").toString(\"base64\");\n };\n\n const getAttestation = async (): Promise<{\n attestation: {\n codeHash: string;\n attestationPub: string;\n certificate: string;\n };\n buffer: Buffer;\n }> => {\n const { data: attestationStr } = await deviceApi.post<string>(\"/get-attestation\", { seed });\n const attestationBuffer = Buffer.from(attestationStr, \"hex\");\n const certLen = attestationBuffer.readInt8(32 + 65 + 1);\n return {\n attestation: {\n codeHash: attestationBuffer.slice(0, 32).toString(\"base64\"),\n attestationPub: attestationBuffer.slice(32, 32 + 65).toString(\"base64\"),\n certificate: attestationBuffer.slice(32 + 65, 32 + 65 + 2 + certLen).toString(\"base64\"),\n },\n buffer: attestationBuffer,\n };\n };\n\n const getConfidentialityKey = async (): Promise<{\n confidentialityKeyCurve25519: string;\n confidentialityKeySignature: string;\n }> => {\n const res = await deviceApi.post<{\n confidentiality_key_curve25519: string;\n confidentiality_key_signature: string;\n }>(\"/get-confidentiality-key\", { seed });\n return {\n confidentialityKeyCurve25519: res.data.confidentiality_key_curve25519,\n confidentialityKeySignature: res.data.confidentiality_key_signature,\n };\n };\n\n const getConfidentialityPubKey = async (): Promise<{ pubKey: string; signature: string }> => {\n return getPublicKey({ path: PATHS.CONFIDENTIALITY });\n };\n\n const getDeviceUserId = async (): Promise<string> => {\n const res = await deviceApi.post<{ blue_device_id: string }>(\"/blue-device-id\", { seed });\n return res.data.blue_device_id.toUpperCase();\n };\n\n const getU2FPubKey = async (): Promise<{ pubKey: string; signature: string }> => {\n return getPublicKey({ path: PATHS.U2F });\n };\n\n const getValidationPubKey = async (): Promise<{ pubKey: string; signature: string }> => {\n return getPublicKey({ path: PATHS.VALIDATION });\n };\n\n const hasPairing = async (): Promise<boolean> => {\n const res = await deviceApi.post<string[]>(\"/get-partition-ids\", { seed });\n return res.data.length > 0;\n };\n\n const initPairingHandshake = async (): Promise<{ pubKey: string; signature: string }> => {\n const { data } = await deviceApi.post<{ attestation: string; pubKey: string }>(\n \"/initiate-pairing-handshake\",\n { seed },\n );\n return {\n pubKey: data.pubKey,\n signature: Buffer.from(data.attestation, \"hex\").toString(\"base64\"),\n };\n };\n\n const openSession = async (params: {\n secureChannel: { pubKey: PubKey; certificate: HsmCertificate };\n }): Promise<void> => {\n const { secureChannel } = params;\n const signature = Buffer.from(secureChannel.certificate.signature, \"base64\");\n const attestationPubKey = Buffer.from(secureChannel.certificate.attestationPub, \"base64\");\n const attestationCertificate = Buffer.from(secureChannel.certificate.certificate, \"base64\");\n const attestation = Buffer.concat([\n Buffer.from([signature.length]),\n signature,\n attestationPubKey,\n Buffer.from([attestationCertificate.length]),\n attestationCertificate,\n ]);\n const payload = {\n seed,\n path: PATHS.CONFIDENTIALITY,\n pubKey: secureChannel.pubKey,\n attestation: attestation.toString(\"hex\"),\n scriptId: SCRIPT_IDS.INIT_SESSION,\n };\n const { data: deviceResponse } = await deviceApi.post<string>(\"/open-session\", payload);\n if (deviceResponse !== \"9000\") {\n throw new Error(`device-api device failed with code: ${deviceResponse}`);\n }\n };\n\n const register = async (params: {\n challenge: string;\n u2fRegisterData: string;\n name: string;\n role: \"ADMIN\" | \"SHARED_OWNER\" | \"OPERATOR\";\n }): Promise<{\n u2fRegister: Buffer;\n keyHandle: Buffer;\n rfu: number;\n pubKey: string;\n }> => {\n const { challenge, u2fRegisterData, name, role } = params;\n const payload = {\n seed,\n challenge,\n name,\n role: STR_ROLES[role],\n hsm_data: u2fRegisterData,\n type: \"02\", // Stax\n application: APPID_VAULT_ADMINISTRATOR,\n };\n const { data } = await deviceApi.post<string>(\"/register\", payload);\n const response = Buffer.from(data, \"hex\");\n let i = 0;\n const rfu = response.slice(i, (i += 1))[0]!;\n const pubKey = response.slice(i, (i += 65)).toString(\"hex\");\n const keyHandleLength = response.slice(i, ++i)[0]!;\n const keyHandle = response.slice(i, (i += keyHandleLength));\n return {\n u2fRegister: response.slice(0, response.length - 2),\n keyHandle,\n rfu,\n pubKey,\n };\n };\n\n const registerData = async (params: { challenge: string }): Promise<string> => {\n const { challenge } = params;\n const payload = { seed, challenge };\n const res = await deviceApi.post<string>(\"/u2f-register-data\", payload);\n return res.data;\n };\n\n const setPairing = async ({ pairing }: { pairing: PsdPairingData }): Promise<void> => {\n const payload = {\n seed,\n blob: pairing.blob,\n pairing: {\n bootstrap_enabled: pairing.pairing.bootstrapEnabled,\n partition_key: pairing.pairing.partitionKey,\n workspace_name: pairing.pairing.workspaceName,\n },\n partition_key_attestation: {\n code_hash: pairing.partitionKeyAttestation.codeHash,\n attestation_pub: pairing.partitionKeyAttestation.attestationPub,\n certificate: pairing.partitionKeyAttestation.certificate,\n signature: pairing.partitionKeyAttestation.signature,\n },\n };\n await deviceApi.post(\"/set-partition-key\", payload);\n };\n\n const startKKPatternAsResponder = async (params: {\n handshake: string;\n handshakeAttestation: HsmCertificate;\n partitionId: string;\n }): Promise<{ handshake: string; signature: string }> => {\n const payload = {\n seed,\n script_id: SCRIPT_IDS.ACCOUNT_MANAGER_SESSION,\n handshake: params.handshake,\n // for device-api it's normal to have empty string as handshake_attestation\n handshake_attestation: \"\",\n partition_id: params.partitionId,\n };\n const { data } = await deviceApi.post<string>(\"/start-kk-pattern-as-responder\", payload);\n const buffer = Buffer.from(data, \"hex\");\n const dataLength = buffer.readInt8(0);\n return {\n handshake: buffer.slice(1, dataLength + 1).toString(\"base64\"),\n signature: buffer.slice(dataLength + 1).toString(\"base64\"),\n };\n };\n\n const startKPatternAsResponder = async (params: {\n handshake: string;\n handshakeAttestation: HsmCertificate;\n partitionId: string;\n }): Promise<void> => {\n const { handshake, partitionId } = params;\n const payload = {\n seed,\n script_id: SCRIPT_IDS.ACCOUNT_MANAGER_SESSION,\n handshake,\n // for device-api it's normal to have empty string as handshake_attestation\n handshake_attestation: \"\",\n partition_id: partitionId,\n };\n const { data: deviceResponse } = await deviceApi.post<string>(\n \"/start-k-pattern-as-responder\",\n payload,\n );\n if (deviceResponse !== \"9000\") {\n throw new Error(`device-api device failed with code: ${deviceResponse}`);\n }\n };\n\n const getPublicKey = async (params: {\n path: string;\n }): Promise<{ pubKey: string; signature: string }> => {\n const { path } = params;\n type DeviceApiGetPubKeyResponse = { attestation: string; pubKey: string };\n const payload = { seed, secp256k1: true, path };\n const res = await deviceApi.post<DeviceApiGetPubKeyResponse>(\"/get-public-key\", payload);\n return {\n pubKey: res.data.pubKey,\n signature: Buffer.from(res.data.attestation, \"hex\").toString(\"base64\"),\n };\n };\n\n const validateVaultOperation = async (params: { actions: string[] }): Promise<string> => {\n const { actions } = params;\n const payload = {\n seed,\n path: PATHS.VALIDATION,\n actions,\n };\n const { data: signature } = await deviceApi.post<string>(\"/validate-op\", payload);\n return signature;\n };\n\n const sendAPDU = (_apdu: string): Promise<string> => {\n logger.info(\"Can't send arbitrary APDU to software device\");\n return Promise.resolve(\"9000\");\n };\n\n const getVersion = async (): Promise<string> => {\n return \"1.2.3\";\n };\n\n const poll = async (): Promise<{ isAppOpened: boolean }> => {\n await new Promise((r) => setTimeout(r, 1e3));\n return { isAppOpened: true };\n };\n\n const pollApp = async (): Promise<string> => {\n await new Promise((r) => setTimeout(r, 1e3));\n return \"9000\";\n };\n\n return {\n authenticate,\n finalizePairingHandshake,\n generateSeedFragment,\n generateWrappingKeyFragment,\n getAttestation,\n getConfidentialityKey,\n getConfidentialityPubKey,\n getDeviceUserId,\n getU2FPubKey,\n getValidationPubKey,\n hasPairing,\n initPairingHandshake,\n openSession,\n register,\n registerData,\n setPairing,\n startKKPatternAsResponder,\n startKPatternAsResponder,\n validateVaultOperation,\n getVersion,\n sendAPDU,\n poll,\n pollApp,\n };\n },\n };\n}\n","export const PATHS = {\n U2F: \"5655636'/5583430'\",\n CONFIDENTIALITY: \"5655636'/4410950'\",\n KEY_MATERIAL: \"5655636'/4932953'\",\n VALIDATION: \"5655636'/5652812'\",\n} as const;\n\nexport const STATUS_LENGTH = 2;\n\nexport const SCRIPT_IDS = {\n INIT_SESSION: 3,\n ACCOUNT_MANAGER_SESSION: 2,\n} as const;\n\nexport const STR_ROLES: Record<\"OPERATOR\" | \"ADMIN\" | \"SHARED_OWNER\", string> = {\n OPERATOR: \"00\",\n ADMIN: \"01\",\n SHARED_OWNER: \"02\",\n} as const;\n\nexport const APPID_VAULT_ADMINISTRATOR =\n \"ad5be1a1fe011ce7f53ae081a22ae000a42021f3f94106a3bac9f76e8230e4b9\";\n\nconst all61xxStatus = [];\nfor (let i = 0x6100; i <= 0x61ff; i++) {\n all61xxStatus.push(i);\n}\n\nexport const PAGINATED_STATUS = all61xxStatus;\nexport const STREAMING_RESPONSE = 0x02;\nexport const STREAMING_NEXT_ACTION = 0x01;\n","import { TransportStatusError } from \"@ledgerhq/errors\";\n\nexport const isTransportStatusError = (error: unknown): error is TransportStatusError => {\n return (\n error instanceof TransportStatusError ||\n (error instanceof Error && \"statusCode\" in error && error.message.startsWith(\"Ledger device:\"))\n );\n};\n\nconst CANCEL_STATUS_CODES = [\n 0x6985, // cancel on Ledger Blue\n\n // STAX\n 0xb00c, // cancel collect wk fragment\n 0xb00d, // cancel user registration\n 0xb010, // cancel review\n 0xb012, // cancel master seed generation\n 0xb013, // cancel login\n];\n\nexport const isDeviceCancelError = (error: Error): boolean => {\n return isTransportStatusError(error) && CANCEL_STATUS_CODES.includes(error.statusCode);\n};\n","// ------------------------------------------------------------------------------------------------\n// ------------------------------------------------------------------------------------------------\n// THIS IS SOME HORRIBLE CODE IMPORTED JUST\n// FOR THE SAKE OF NOT IMPORTING UGLY, WICKED, AND\n// BROKEN @ledgerhq/live-* LIBRARIES\n//\n// IT'S MEANT TO BE CONSIDERED AS A BLACK BOX\n// ------------------------------------------------------------------------------------------------\n// ------------------------------------------------------------------------------------------------\nimport {\n BluetoothRequired,\n CantOpenDevice,\n DeviceHalted,\n FirmwareOrAppUpdateRequired,\n TransportInterfaceNotAvailable,\n TransportStatusError,\n TransportWebUSBGestureRequired,\n} from \"@ledgerhq/errors\";\nimport type Transport from \"@ledgerhq/hw-transport\";\nimport { Observable, throwError, timer } from \"rxjs\";\nimport { catchError, mergeMap, retryWhen } from \"rxjs/operators\";\n\nconst initialErrorRemapping = (error: Error): Observable<never> =>\n throwError(\n error && error instanceof TransportStatusError && error.statusCode === 0x6faa\n ? new DeviceHalted(error.message)\n : error instanceof TransportStatusError && error.statusCode === 0x6b00\n ? new FirmwareOrAppUpdateRequired(error.message)\n : error,\n );\n\n// eslint-disable-next-line @typescript-eslint/no-empty-function\nconst never = new Promise(() => {});\n\ntype Discovery = Observable<{\n type: \"add\" | \"remove\";\n id: string;\n name: string;\n}>;\n\nexport type TransportModule = {\n // unique transport name that identify the transport module\n id: string;\n // open a device by an id, this id must be unique across all modules\n // you can typically prefix it with `something|` that identify it globally\n // returns falsy if the transport module can't handle this id\n // here, open means we want to START doing something with the transport\n open: (id: string) => Promise<Transport> | null | undefined;\n // here, close means we want to STOP doing something with the transport\n close?: (transport: Transport, id: string) => Promise<void> | null | undefined;\n // disconnect/interrupt a device connection globally\n // returns falsy if the transport module can't handle this id\n disconnect: (id: string) => Promise<void> | null | undefined;\n // optional observable that allows to discover a transport\n discovery?: Discovery;\n};\n\nconst modules: TransportModule[] = [];\n\nexport const registerTransportModule = (module: TransportModule): void => {\n modules.push(module);\n};\n\nexport const close = (transport: Transport, deviceId: string): Promise<void> => {\n for (const m of modules) {\n const p = m.close?.(transport, deviceId);\n if (p) return p;\n }\n // fallback on an actual close\n return transport.close();\n};\n\nexport const open = (deviceId: string): Promise<Transport> => {\n for (const m of modules) {\n const p = m.open(deviceId);\n if (p) return p;\n }\n return Promise.reject(new Error(`Can't find handler to open ${deviceId}`));\n};\n\nconst transportFinally =\n (cleanup: () => Promise<void>) =>\n <T>(observable: Observable<T>): Observable<T> =>\n // @ts-expect-error typescript not checking against the instanceof\n Observable.create((o) => {\n let done = false;\n\n // eslint-disable-next-line @typescript-eslint/no-explicit-any\n const finalize = (): any => {\n if (done) return never;\n done = true;\n return cleanup();\n };\n\n const sub = observable.subscribe({\n next: (e) => o.next(e),\n complete: () => {\n void finalize().then(() => o.complete());\n },\n error: (e) => {\n void finalize().then(() => o.error(e));\n },\n });\n return () => {\n sub.unsubscribe();\n void finalize();\n };\n });\n\ntype AccessHook = () => () => void;\n\nconst accessHooks: AccessHook[] = [];\n\nconst deviceQueues = {};\n\nexport const withDevice =\n (deviceId: string) =>\n <T>(job: (t: Transport) => Observable<T>): Observable<T> =>\n new Observable((o) => {\n // @ts-expect-error typescript not checking against the instanceof\n let unsubscribed;\n // @ts-expect-error typescript not checking against the instanceof\n let sub;\n // @ts-expect-error typescript not checking against the instanceof\n const deviceQueue = deviceQueues[deviceId] ?? Promise.resolve();\n\n // @ts-expect-error typescript not checking against the instanceof\n const finalize = (transport, cleanups): Promise<void> =>\n close(transport, deviceId)\n // eslint-disable-next-line @typescript-eslint/no-empty-function\n .catch(() => {})\n .then(() => {\n // @ts-expect-error typescript not checking against the instanceof\n cleanups.forEach((c) => c());\n });\n\n // when we'll finish all the current job, we'll call finish\n // @ts-expect-error typescript not checking against the instanceof\n let finish;\n // this new promise is the next exec queue\n // @ts-expect-error typescript not checking against the instanceof\n deviceQueues[deviceId] = new Promise((resolve) => {\n finish = resolve;\n });\n // for any new job, we'll now wait the exec queue to be available\n deviceQueue\n .then(() => open(deviceId)) // open the transport\n // @ts-expect-error typescript not checking against the instanceof\n .then(async (transport) => {\n // @ts-expect-error typescript not checking against the instanceof\n if (unsubscribed) {\n // it was unsubscribed prematurely\n // @ts-expect-error typescript not checking against the instanceof\n return finalize(transport, [finish]);\n }\n\n if (\n transport.requestConnectionPriority &&\n typeof transport.requestConnectionPriority === \"function\"\n ) {\n await transport.requestConnectionPriority(\"High\");\n }\n\n return transport;\n })\n // @ts-expect-error typescript not checking against the instanceof\n .catch((e) => {\n // @ts-expect-error typescript not checking against the instanceof\n finish();\n if (e instanceof BluetoothRequired) throw e;\n if (e instanceof TransportWebUSBGestureRequired) throw e;\n if (e instanceof TransportInterfaceNotAvailable) throw e;\n throw new CantOpenDevice(e.message);\n })\n // @ts-expect-error typescript not checking against the instanceof\n .then((transport) => {\n if (!transport) return;\n\n // @ts-expect-error typescript not checking against the instanceof\n if (unsubscribed) {\n // it was unsubscribed prematurely\n // @ts-expect-error typescript not checking against the instanceof\n return finalize(transport, [finish]);\n }\n\n const cleanups = accessHooks.map((hook) => hook());\n sub = job(transport) // $FlowFixMe\n .pipe(\n catchError(initialErrorRemapping),\n // $FlowFixMe\n transportFinally(() =>\n // @ts-expect-error typescript not checking against the instanceof\n finalize(transport, [...cleanups, finish]),\n ),\n )\n .subscribe(o);\n })\n // @ts-expect-error typescript not checking against the instanceof\n .catch((error) => o.error(error));\n return () => {\n unsubscribed = true;\n // @ts-expect-error typescript not checking against the instanceof\n if (sub) sub.unsubscribe();\n };\n });\n\nconst WITH_DEVICE_POLLING_DELAY = 500;\n\nexport const retryWhileErrors =\n (acceptError: (arg0: Error) => boolean) =>\n // eslint-disable-next-line @typescript-eslint/no-explicit-any\n (attempts: Observable<any>): Observable<any> =>\n attempts.pipe(\n mergeMap((error) => {\n if (!acceptError(error)) {\n return throwError(error);\n }\n\n return timer(WITH_DEVICE_POLLING_DELAY);\n }),\n );\n\nexport const withDevicePolling =\n (deviceId: string) =>\n <T>(\n job: (arg0: Transport) => Observable<T>,\n acceptError: (arg0: Error) => boolean = () => false,\n ): Observable<T> =>\n withDevice(deviceId)(job).pipe(retryWhen(retryWhileErrors(acceptError)));\n"],"mappings":";AAMA,OAAO,WAAW;AAClB,OAAO,gBAAgB;AACvB,SAAS,MAAM,cAAc;;;ACRtB,IAAM,QAAQ;AAAA,EACnB,KAAK;AAAA,EACL,iBAAiB;AAAA,EACjB,cAAc;AAAA,EACd,YAAY;AACd;AAEO,IAAM,gBAAgB;AAEtB,IAAM,aAAa;AAAA,EACxB,cAAc;AAAA,EACd,yBAAyB;AAC3B;AAEO,IAAM,YAAmE;AAAA,EAC9E,UAAU;AAAA,EACV,OAAO;AAAA,EACP,cAAc;AAChB;AAEO,IAAM,4BACX;AAEF,IAAM,gBAAgB,CAAC;AACvB,SAAS,IAAI,OAAQ,KAAK,OAAQ,KAAK;AACrC,gBAAc,KAAK,CAAC;AACtB;AAEO,IAAM,mBAAmB;AACzB,IAAM,qBAAqB;AAC3B,IAAM,wBAAwB;;;ADS9B,SAAS,gBAAgB,SAAkB,QAA2B;AAC3E,QAAM,EAAE,QAAQ,IAAI;AACpB,QAAM,YAAY,OAAO;AACzB,QAAM,YAAY,MAAM,OAAO,EAAE,SAAS,QAAQ,aAAa,CAAC;AAEhE,aAAW,WAAW;AAAA,IACpB,YAAY,WAAW,YAAY,GAAI;AAAA,IACvC,SAAS;AAAA;AAAA,IAET,gBAAgB,MAAM;AAAA,IACtB,SAAS,CAAC,YAAY,QAAQ;AAC5B,YAAM,eAAe,GAAG,IAAI,QAAQ,SAAS,OAAO,IAAI,QAAQ,QAAQ,YAAY,KAAK,gBAAgB,IAAI,IAAI,QAAQ,OAAO,aAAa;AAC7I,aAAO;AAAA,QACL,2CAA2C,UAAU,cAAc,YAAY;AAAA,MACjF;AAAA,IACF;AAAA;AAAA,EAEF,CAAC;AAED,YAAU,aAAa,QAAQ;AAAA,IAC7B,CAAC,WAAW;AAEV,aAAO;AAAA,QACL,gBAAgB,OAAO,QAAQ,YAAY,CAAC,IAAI,OAAO,GAAG,GAAG,OAAO,OAAO,IAAI,KAAK,UAAU,OAAO,IAAI,CAAC,KAAK,EAAE;AAAA,MACnH;AACA,UAAI,CAAC,QAAQ,KAAK,EAAE,SAAS,OAAO,MAAO,GAAG;AAG5C,cAAM,eAAe,OAAO,OAAO,SAAS;AAC5C,cAAM,OAAQ,eAAe,KAAK,MAAM,OAAO,IAAI,IAAI,OAAO;AAI9D,cAAM,eAAe;AAAA,UACnB,WAAW;AAAA;AAAA,UACX,WAAW;AAAA;AAAA,UACX,SAAS;AAAA;AAAA,UACT,GAAG;AAAA,QACL;AACA,eAAO,OAAO,eAAe,KAAK,UAAU,YAAY,IAAI;AAAA,MAC9D;AACA,aAAO;AAAA,IACT;AAAA;AAAA,IAEA,CAAC,UAAiB,QAAQ,OAAO,KAAK;AAAA,EACxC;AAEA,SAAO;AAAA,IACL,MAAM,CAAC,UAA0B;AAC/B,YAAM,OAAO,QAAQ,EAAE,MAAM,QAAQ,MAAM,MAAM,CAAC;AAElD,YAAM,eAAe,OAAO;AAAA,QAC1B;AAAA,QACA;AAAA,MACF,MAGuB;AACrB,cAAM,OAAO,UAAU;AACvB,YAAI,SAAS;AACX,gBAAM,IAAI,MAAM,kDAAkD;AACpE,cAAM,EAAE,KAAK,IAAI,MAAM,UAAU,KAAa,iBAAiB;AAAA,UAC7D;AAAA,UACA,WAAW,OAAO,KAAK,UAAU,WAAW,QAAQ,EAAE,SAAS,KAAK;AAAA,UACpE,aAAa;AAAA,UACb,YAAY,UAAU;AAAA,UACtB,MAAM,UAAU;AAAA,UAChB,MAAM,UAAU,IAAI;AAAA,UACpB,MAAM;AAAA;AAAA,UACN;AAAA,QACF,CAAC;AACD,eAAO;AAAA,MACT;AAEA,YAAM,2BAA2B,OAAO,WAGjB;AACrB,cAAM,EAAE,WAAW,YAAY,IAAI;AACnC,cAAM,UAAU,EAAE,MAAM,WAAW,YAAY,YAAY;AAC3D,cAAM,MAAM,MAAM,UAAU,KAAa,+BAA+B,OAAO;AAC/E,eAAO,IAAI;AAAA,MACb;AAEA,YAAM,uBAAuB,YAA6B;AACxD,cAAM,UAAU;AAAA,UACd;AAAA,UACA,MAAM,MAAM;AAAA,UACZ,MAAM;AAAA;AAAA,QACR;AACA,cAAM,EAAE,KAAK,IAAI,MAAM,UAAU,KAAa,2BAA2B,OAAO;AAChF,eAAO;AAAA,MACT;AAEA,YAAM,8BAA8B,YAA6B;AAC/D,cAAM,OAAO;AACb,cAAM,UAAU,EAAE,MAAM,MAAM,MAAM,MAAM,aAAa;AACvD,cAAM,MAAM,MAAM,UAAU,KAAa,2BAA2B,OAAO;AAC3E,eAAO,OAAO,KAAK,IAAI,MAAM,KAAK,EAAE,SAAS,QAAQ;AAAA,MACvD;AAEA,YAAM,iBAAiB,YAOjB;AACJ,cAAM,EAAE,MAAM,eAAe,IAAI,MAAM,UAAU,KAAa,oBAAoB,EAAE,KAAK,CAAC;AAC1F,cAAM,oBAAoB,OAAO,KAAK,gBAAgB,KAAK;AAC3D,cAAM,UAAU,kBAAkB,SAAS,KAAK,KAAK,CAAC;AACtD,eAAO;AAAA,UACL,aAAa;AAAA,YACX,UAAU,kBAAkB,MAAM,GAAG,EAAE,EAAE,SAAS,QAAQ;AAAA,YAC1D,gBAAgB,kBAAkB,MAAM,IAAI,KAAK,EAAE,EAAE,SAAS,QAAQ;AAAA,YACtE,aAAa,kBAAkB,MAAM,KAAK,IAAI,KAAK,KAAK,IAAI,OAAO,EAAE,SAAS,QAAQ;AAAA,UACxF;AAAA,UACA,QAAQ;AAAA,QACV;AAAA,MACF;AAEA,YAAM,wBAAwB,YAGxB;AACJ,cAAM,MAAM,MAAM,UAAU,KAGzB,4BAA4B,EAAE,KAAK,CAAC;AACvC,eAAO;AAAA,UACL,8BAA8B,IAAI,KAAK;AAAA,UACvC,6BAA6B,IAAI,KAAK;AAAA,QACxC;AAAA,MACF;AAEA,YAAM,2BAA2B,YAA4D;AAC3F,eAAO,aAAa,EAAE,MAAM,MAAM,gBAAgB,CAAC;AAAA,MACrD;AAEA,YAAM,kBAAkB,YAA6B;AACnD,cAAM,MAAM,MAAM,UAAU,KAAiC,mBAAmB,EAAE,KAAK,CAAC;AACxF,eAAO,IAAI,KAAK,eAAe,YAAY;AAAA,MAC7C;AAEA,YAAM,eAAe,YAA4D;AAC/E,eAAO,aAAa,EAAE,MAAM,MAAM,IAAI,CAAC;AAAA,MACzC;AAEA,YAAM,sBAAsB,YAA4D;AACtF,eAAO,aAAa,EAAE,MAAM,MAAM,WAAW,CAAC;AAAA,MAChD;AAEA,YAAM,aAAa,YAA8B;AAC/C,cAAM,MAAM,MAAM,UAAU,KAAe,sBAAsB,EAAE,KAAK,CAAC;AACzE,eAAO,IAAI,KAAK,SAAS;AAAA,MAC3B;AAEA,YAAM,uBAAuB,YAA4D;AACvF,cAAM,EAAE,KAAK,IAAI,MAAM,UAAU;AAAA,UAC/B;AAAA,UACA,EAAE,KAAK;AAAA,QACT;AACA,eAAO;AAAA,UACL,QAAQ,KAAK;AAAA,UACb,WAAW,OAAO,KAAK,KAAK,aAAa,KAAK,EAAE,SAAS,QAAQ;AAAA,QACnE;AAAA,MACF;AAEA,YAAM,cAAc,OAAO,WAEN;AACnB,cAAM,EAAE,cAAc,IAAI;AAC1B,cAAM,YAAY,OAAO,KAAK,cAAc,YAAY,WAAW,QAAQ;AAC3E,cAAM,oBAAoB,OAAO,KAAK,cAAc,YAAY,gBAAgB,QAAQ;AACxF,cAAM,yBAAyB,OAAO,KAAK,cAAc,YAAY,aAAa,QAAQ;AAC1F,cAAM,cAAc,OAAO,OAAO;AAAA,UAChC,OAAO,KAAK,CAAC,UAAU,MAAM,CAAC;AAAA,UAC9B;AAAA,UACA;AAAA,UACA,OAAO,KAAK,CAAC,uBAAuB,MAAM,CAAC;AAAA,UAC3C;AAAA,QACF,CAAC;AACD,cAAM,UAAU;AAAA,UACd;AAAA,UACA,MAAM,MAAM;AAAA,UACZ,QAAQ,cAAc;AAAA,UACtB,aAAa,YAAY,SAAS,KAAK;AAAA,UACvC,UAAU,WAAW;AAAA,QACvB;AACA,cAAM,EAAE,MAAM,eAAe,IAAI,MAAM,UAAU,KAAa,iBAAiB,OAAO;AACtF,YAAI,mBAAmB,QAAQ;AAC7B,gBAAM,IAAI,MAAM,uCAAuC,cAAc,EAAE;AAAA,QACzE;AAAA,MACF;AAEA,YAAM,WAAW,OAAO,WAUlB;AACJ,cAAM,EAAE,WAAW,iBAAiB,MAAM,KAAK,IAAI;AACnD,cAAM,UAAU;AAAA,UACd;AAAA,UACA;AAAA,UACA;AAAA,UACA,MAAM,UAAU,IAAI;AAAA,UACpB,UAAU;AAAA,UACV,MAAM;AAAA;AAAA,UACN,aAAa;AAAA,QACf;AACA,cAAM,EAAE,KAAK,IAAI,MAAM,UAAU,KAAa,aAAa,OAAO;AAClE,cAAM,WAAW,OAAO,KAAK,MAAM,KAAK;AACxC,YAAI,IAAI;AACR,cAAM,MAAM,SAAS,MAAM,GAAI,KAAK,CAAE,EAAE,CAAC;AACzC,cAAM,SAAS,SAAS,MAAM,GAAI,KAAK,EAAG,EAAE,SAAS,KAAK;AAC1D,cAAM,kBAAkB,SAAS,MAAM,GAAG,EAAE,CAAC,EAAE,CAAC;AAChD,cAAM,YAAY,SAAS,MAAM,GAAI,KAAK,eAAgB;AAC1D,eAAO;AAAA,UACL,aAAa,SAAS,MAAM,GAAG,SAAS,SAAS,CAAC;AAAA,UAClD;AAAA,UACA;AAAA,UACA;AAAA,QACF;AAAA,MACF;AAEA,YAAM,eAAe,OAAO,WAAmD;AAC7E,cAAM,EAAE,UAAU,IAAI;AACtB,cAAM,UAAU,EAAE,MAAM,UAAU;AAClC,cAAM,MAAM,MAAM,UAAU,KAAa,sBAAsB,OAAO;AACtE,eAAO,IAAI;AAAA,MACb;AAEA,YAAM,aAAa,OAAO,EAAE,QAAQ,MAAkD;AACpF,cAAM,UAAU;AAAA,UACd;AAAA,UACA,MAAM,QAAQ;AAAA,UACd,SAAS;AAAA,YACP,mBAAmB,QAAQ,QAAQ;AAAA,YACnC,eAAe,QAAQ,QAAQ;AAAA,YAC/B,gBAAgB,QAAQ,QAAQ;AAAA,UAClC;AAAA,UACA,2BAA2B;AAAA,YACzB,WAAW,QAAQ,wBAAwB;AAAA,YAC3C,iBAAiB,QAAQ,wBAAwB;AAAA,YACjD,aAAa,QAAQ,wBAAwB;AAAA,YAC7C,WAAW,QAAQ,wBAAwB;AAAA,UAC7C;AAAA,QACF;AACA,cAAM,UAAU,KAAK,sBAAsB,OAAO;AAAA,MACpD;AAEA,YAAM,4BAA4B,OAAO,WAIgB;AACvD,cAAM,UAAU;AAAA,UACd;AAAA,UACA,WAAW,WAAW;AAAA,UACtB,WAAW,OAAO;AAAA;AAAA,UAElB,uBAAuB;AAAA,UACvB,cAAc,OAAO;AAAA,QACvB;AACA,cAAM,EAAE,KAAK,IAAI,MAAM,UAAU,KAAa,kCAAkC,OAAO;AACvF,cAAM,SAAS,OAAO,KAAK,MAAM,KAAK;AACtC,cAAM,aAAa,OAAO,SAAS,CAAC;AACpC,eAAO;AAAA,UACL,WAAW,OAAO,MAAM,GAAG,aAAa,CAAC,EAAE,SAAS,QAAQ;AAAA,UAC5D,WAAW,OAAO,MAAM,aAAa,CAAC,EAAE,SAAS,QAAQ;AAAA,QAC3D;AAAA,MACF;AAEA,YAAM,2BAA2B,OAAO,WAInB;AACnB,cAAM,EAAE,WAAW,YAAY,IAAI;AACnC,cAAM,UAAU;AAAA,UACd;AAAA,UACA,WAAW,WAAW;AAAA,UACtB;AAAA;AAAA,UAEA,uBAAuB;AAAA,UACvB,cAAc;AAAA,QAChB;AACA,cAAM,EAAE,MAAM,eAAe,IAAI,MAAM,UAAU;AAAA,UAC/C;AAAA,UACA;AAAA,QACF;AACA,YAAI,mBAAmB,QAAQ;AAC7B,gBAAM,IAAI,MAAM,uCAAuC,cAAc,EAAE;AAAA,QACzE;AAAA,MACF;AAEA,YAAM,eAAe,OAAO,WAE0B;AACpD,cAAM,EAAE,KAAK,IAAI;AAEjB,cAAM,UAAU,EAAE,MAAM,WAAW,MAAM,KAAK;AAC9C,cAAM,MAAM,MAAM,UAAU,KAAiC,mBAAmB,OAAO;AACvF,eAAO;AAAA,UACL,QAAQ,IAAI,KAAK;AAAA,UACjB,WAAW,OAAO,KAAK,IAAI,KAAK,aAAa,KAAK,EAAE,SAAS,QAAQ;AAAA,QACvE;AAAA,MACF;AAEA,YAAM,yBAAyB,OAAO,WAAmD;AACvF,cAAM,EAAE,QAAQ,IAAI;AACpB,cAAM,UAAU;AAAA,UACd;AAAA,UACA,MAAM,MAAM;AAAA,UACZ;AAAA,QACF;AACA,cAAM,EAAE,MAAM,UAAU,IAAI,MAAM,UAAU,KAAa,gBAAgB,OAAO;AAChF,eAAO;AAAA,MACT;AAEA,YAAM,WAAW,CAAC,UAAmC;AACnD,eAAO,KAAK,8CAA8C;AAC1D,eAAO,QAAQ,QAAQ,MAAM;AAAA,MAC/B;AAEA,YAAM,aAAa,YAA6B;AAC9C,eAAO;AAAA,MACT;AAEA,YAAM,OAAO,YAA+C;AAC1D,cAAM,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,GAAG,CAAC;AAC3C,eAAO,EAAE,aAAa,KAAK;AAAA,MAC7B;AAEA,YAAM,UAAU,YAA6B;AAC3C,cAAM,IAAI,QAAQ,CAAC,MAAM,WAAW,GAAG,GAAG,CAAC;AAC3C,eAAO;AAAA,MACT;AAEA,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;;;AE5ZA,SAAS,4BAA4B;AAE9B,IAAM,yBAAyB,CAAC,UAAkD;AACvF,SACE,iBAAiB,wBAChB,iBAAiB,SAAS,gBAAgB,SAAS,MAAM,QAAQ,WAAW,gBAAgB;AAEjG;AAEA,IAAM,sBAAsB;AAAA,EAC1B;AAAA;AAAA;AAAA,EAGA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AAAA,EACA;AAAA;AACF;AAEO,IAAM,sBAAsB,CAAC,UAA0B;AAC5D,SAAO,uBAAuB,KAAK,KAAK,oBAAoB,SAAS,MAAM,UAAU;AACvF;;;ACbA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,wBAAAA;AAAA,EACA;AAAA,OACK;AAEP,SAAS,YAAY,YAAY,aAAa;AAC9C,SAAS,YAAY,UAAU,iBAAiB;AAEhD,IAAM,wBAAwB,CAAC,UAC7B;AAAA,EACE,SAAS,iBAAiBA,yBAAwB,MAAM,eAAe,QACnE,IAAI,aAAa,MAAM,OAAO,IAC9B,iBAAiBA,yBAAwB,MAAM,eAAe,QAC5D,IAAI,4BAA4B,MAAM,OAAO,IAC7C;AACR;AAGF,IAAM,QAAQ,IAAI,QAAQ,MAAM;AAAC,CAAC;AAyBlC,IAAM,UAA6B,CAAC;AAE7B,IAAM,0BAA0B,CAAC,WAAkC;AACxE,UAAQ,KAAK,MAAM;AACrB;AAEO,IAAM,QAAQ,CAAC,WAAsB,aAAoC;AAC9E,aAAW,KAAK,SAAS;AACvB,UAAM,IAAI,EAAE,QAAQ,WAAW,QAAQ;AACvC,QAAI,EAAG,QAAO;AAAA,EAChB;AAEA,SAAO,UAAU,MAAM;AACzB;AAEO,IAAM,OAAO,CAAC,aAAyC;AAC5D,aAAW,KAAK,SAAS;AACvB,UAAM,IAAI,EAAE,KAAK,QAAQ;AACzB,QAAI,EAAG,QAAO;AAAA,EAChB;AACA,SAAO,QAAQ,OAAO,IAAI,MAAM,8BAA8B,QAAQ,EAAE,CAAC;AAC3E;AAEA,IAAM,mBACJ,CAAC,YACD,CAAI;AAAA;AAAA,EAEF,WAAW,OAAO,CAAC,MAAM;AACvB,QAAI,OAAO;AAGX,UAAM,WAAW,MAAW;AAC1B,UAAI,KAAM,QAAO;AACjB,aAAO;AACP,aAAO,QAAQ;AAAA,IACjB;AAEA,UAAM,MAAM,WAAW,UAAU;AAAA,MAC/B,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC;AAAA,MACrB,UAAU,MAAM;AACd,aAAK,SAAS,EAAE,KAAK,MAAM,EAAE,SAAS,CAAC;AAAA,MACzC;AAAA,MACA,OAAO,CAAC,MAAM;AACZ,aAAK,SAAS,EAAE,KAAK,MAAM,EAAE,MAAM,CAAC,CAAC;AAAA,MACvC;AAAA,IACF,CAAC;AACD,WAAO,MAAM;AACX,UAAI,YAAY;AAChB,WAAK,SAAS;AAAA,IAChB;AAAA,EACF,CAAC;AAAA;AAIL,IAAM,cAA4B,CAAC;AAEnC,IAAM,eAAe,CAAC;AAEf,IAAM,aACX,CAAC,aACD,CAAI,QACF,IAAI,WAAW,CAAC,MAAM;AAEpB,MAAI;AAEJ,MAAI;AAEJ,QAAM,cAAc,aAAa,QAAQ,KAAK,QAAQ,QAAQ;AAG9D,QAAM,WAAW,CAAC,WAAW,aAC3B,MAAM,WAAW,QAAQ,EAEtB,MAAM,MAAM;AAAA,EAAC,CAAC,EACd,KAAK,MAAM;AAEV,aAAS,QAAQ,CAAC,MAAM,EAAE,CAAC;AAAA,EAC7B,CAAC;AAIL,MAAI;AAGJ,eAAa,QAAQ,IAAI,IAAI,QAAQ,CAAC,YAAY;AAChD,aAAS;AAAA,EACX,CAAC;AAED,cACG,KAAK,MAAM,KAAK,QAAQ,CAAC,EAEzB,KAAK,OAAO,cAAc;AAEzB,QAAI,cAAc;AAGhB,aAAO,SAAS,WAAW,CAAC,MAAM,CAAC;AAAA,IACrC;AAEA,QACE,UAAU,6BACV,OAAO,UAAU,8BAA8B,YAC/C;AACA,YAAM,UAAU,0BAA0B,MAAM;AAAA,IAClD;AAEA,WAAO;AAAA,EACT,CAAC,EAEA,MAAM,CAAC,MAAM;AAEZ,WAAO;AACP,QAAI,aAAa,kBAAmB,OAAM;AAC1C,QAAI,aAAa,+BAAgC,OAAM;AACvD,QAAI,aAAa,+BAAgC,OAAM;AACvD,UAAM,IAAI,eAAe,EAAE,OAAO;AAAA,EACpC,CAAC,EAEA,KAAK,CAAC,cAAc;AACnB,QAAI,CAAC,UAAW;AAGhB,QAAI,cAAc;AAGhB,aAAO,SAAS,WAAW,CAAC,MAAM,CAAC;AAAA,IACrC;AAEA,UAAM,WAAW,YAAY,IAAI,CAAC,SAAS,KAAK,CAAC;AACjD,UAAM,IAAI,SAAS,EAChB;AAAA,MACC,WAAW,qBAAqB;AAAA;AAAA,MAEhC;AAAA,QAAiB;AAAA;AAAA,UAEf,SAAS,WAAW,CAAC,GAAG,UAAU,MAAM,CAAC;AAAA;AAAA,MAC3C;AAAA,IACF,EACC,UAAU,CAAC;AAAA,EAChB,CAAC,EAEA,MAAM,CAAC,UAAU,EAAE,MAAM,KAAK,CAAC;AAClC,SAAO,MAAM;AACX,mBAAe;AAEf,QAAI,IAAK,KAAI,YAAY;AAAA,EAC3B;AACF,CAAC;AAEL,IAAM,4BAA4B;AAE3B,IAAM,mBACX,CAAC;AAAA;AAAA,EAED,CAAC,aACC,SAAS;AAAA,IACP,SAAS,CAAC,UAAU;AAClB,UAAI,CAAC,YAAY,KAAK,GAAG;AACvB,eAAO,WAAW,KAAK;AAAA,MACzB;AAEA,aAAO,MAAM,yBAAyB;AAAA,IACxC,CAAC;AAAA,EACH;AAAA;AAEG,IAAM,oBACX,CAAC,aACD,CACE,KACA,cAAwC,MAAM,UAE9C,WAAW,QAAQ,EAAE,GAAG,EAAE,KAAK,UAAU,iBAAiB,WAAW,CAAC,CAAC;","names":["TransportStatusError"]}
package/lib/chunk-B5EUR3HT.cjs.map DELETED
@@ -1 +0,0 @@
1
- {"version":3,"sources":["/home/runner/_work/revault/revault/packages/sdk/lib/chunk-B5EUR3HT.cjs","../src/device/api-device.ts","../src/device/constants.ts","../src/device/utils.ts","../src/device/device-access.ts"],"names":["TransportStatusError"],"mappings":"AAAA;ACMA,4EAAkB;AAClB,iGAAuB;AACvB,4BAA6B;ADJ7B;AACA;AELO,IAAM,MAAA,EAAQ;AAAA,EACnB,GAAA,EAAK,mBAAA;AAAA,EACL,eAAA,EAAiB,mBAAA;AAAA,EACjB,YAAA,EAAc,mBAAA;AAAA,EACd,UAAA,EAAY;AACd,CAAA;AAEO,IAAM,cAAA,EAAgB,CAAA;AAEtB,IAAM,WAAA,EAAa;AAAA,EACxB,YAAA,EAAc,CAAA;AAAA,EACd,uBAAA,EAAyB;AAC3B,CAAA;AAEO,IAAM,UAAA,EAAmE;AAAA,EAC9E,QAAA,EAAU,IAAA;AAAA,EACV,KAAA,EAAO,IAAA;AAAA,EACP,YAAA,EAAc;AAChB,CAAA;AAEO,IAAM,0BAAA,EACX,kEAAA;AAEF,IAAM,cAAA,EAAgB,CAAC,CAAA;AACvB,IAAA,CAAA,IAAS,EAAA,EAAI,KAAA,EAAQ,EAAA,GAAK,KAAA,EAAQ,CAAA,EAAA,EAAK;AACrC,EAAA,aAAA,CAAc,IAAA,CAAK,CAAC,CAAA;AACtB;AAEO,IAAM,iBAAA,EAAmB,aAAA;AACzB,IAAM,mBAAA,EAAqB,CAAA;AAC3B,IAAM,sBAAA,EAAwB,CAAA;AFArC;AACA;ACQO,SAAS,eAAA,CAAgB,OAAA,EAAkB,MAAA,EAA2B;AAC3E,EAAA,MAAM,EAAE,QAAQ,EAAA,EAAI,OAAA;AACpB,EAAA,MAAM,UAAA,EAAY,sBAAA,CAAO;AACzB,EAAA,MAAM,UAAA,EAAY,eAAA,CAAM,MAAA,CAAO,EAAE,OAAA,EAAS,OAAA,CAAQ,aAAa,CAAC,CAAA;AAEhE,EAAA,kCAAA,SAAW,EAAW;AAAA,IACpB,UAAA,EAAY,oBAAA,CAAW,WAAA,CAAY,GAAI,CAAA;AAAA,IACvC,OAAA,EAAS,CAAA;AAAA;AAAA,IAET,cAAA,EAAgB,CAAA,EAAA,GAAM,IAAA;AAAA,IACtB,OAAA,EAAS,CAAC,UAAA,EAAY,GAAA,EAAA,GAAQ;AAC5B,MAAA,MAAM,aAAA,EAAe,CAAA,mBAAA;AACd,MAAA;AACL,QAAA;AACF,MAAA;AACF,IAAA;AAAA;AAED,EAAA;AAEsB,EAAA;AACT,IAAA;AAEH,MAAA;AACW,QAAA;AAClB,MAAA;AACoB,MAAA;AAGZ,QAAA;AACQ,QAAA;AAIR,QAAA;AACO,UAAA;AAAA;AACA,UAAA;AAAA;AACF,UAAA;AAAA;AACN,UAAA;AACL,QAAA;AACc,QAAA;AAChB,MAAA;AACO,MAAA;AACT,IAAA;AAAA;AAE0B,IAAA;AAC5B,EAAA;AAEO,EAAA;AAC4B,IAAA;AACV,MAAA;AAEA,MAAA;AACnB,QAAA;AACA,QAAA;AAIqB,MAAA;AACR,QAAA;AACA,QAAA;AACK,UAAA;AACD,QAAA;AACf,UAAA;AACkB,UAAA;AACL,UAAA;AACD,UAAA;AACI,UAAA;AACA,UAAA;AACV,UAAA;AAAA;AACN,UAAA;AACD,QAAA;AACM,QAAA;AACT,MAAA;AAEM,MAAA;AAIe,QAAA;AACD,QAAA;AACA,QAAA;AACP,QAAA;AACb,MAAA;AAEM,MAAA;AACY,QAAA;AACd,UAAA;AACY,UAAA;AACN,UAAA;AAAA;AACR,QAAA;AACiB,QAAA;AACV,QAAA;AACT,MAAA;AAEM,MAAA;AACS,QAAA;AACK,QAAA;AACA,QAAA;AACC,QAAA;AACrB,MAAA;AAEM,MAAA;AAQU,QAAA;AACR,QAAA;AACU,QAAA;AACT,QAAA;AACQ,UAAA;AACD,YAAA;AACM,YAAA;AACH,YAAA;AACf,UAAA;AACQ,UAAA;AACV,QAAA;AACF,MAAA;AAEM,MAAA;AAIc,QAAA;AAIX,QAAA;AACL,UAAA;AACA,UAAA;AACF,QAAA;AACF,MAAA;AAEM,MAAA;AACgB,QAAA;AACtB,MAAA;AAEM,MAAA;AACc,QAAA;AACF,QAAA;AAClB,MAAA;AAEqB,MAAA;AACC,QAAA;AACtB,MAAA;AAEM,MAAA;AACgB,QAAA;AACtB,MAAA;AAEmB,MAAA;AACC,QAAA;AACF,QAAA;AAClB,MAAA;AAEM,MAAA;AACa,QAAA;AACf,UAAA;AACO,UAAA;AACT,QAAA;AACO,QAAA;AACQ,UAAA;AACK,UAAA;AACpB,QAAA;AACF,MAAA;AAEoB,MAAA;AAGV,QAAA;AACU,QAAA;AACZ,QAAA;AACA,QAAA;AACc,QAAA;AACL,UAAA;AACb,UAAA;AACA,UAAA;AACa,UAAA;AACb,UAAA;AACD,QAAA;AACe,QAAA;AACd,UAAA;AACY,UAAA;AACJ,UAAA;AACK,UAAA;AACH,UAAA;AACZ,QAAA;AACc,QAAA;AACV,QAAA;AACc,UAAA;AAClB,QAAA;AACF,MAAA;AAEiB,MAAA;AAWI,QAAA;AACH,QAAA;AACd,UAAA;AACA,UAAA;AACA,UAAA;AACgB,UAAA;AACN,UAAA;AACJ,UAAA;AAAA;AACO,UAAA;AACf,QAAA;AACiB,QAAA;AACA,QAAA;AACT,QAAA;AACI,QAAA;AACG,QAAA;AACT,QAAA;AACY,QAAA;AACX,QAAA;AACQ,UAAA;AACb,UAAA;AACA,UAAA;AACA,UAAA;AACF,QAAA;AACF,MAAA;AAEqB,MAAA;AACD,QAAA;AACA,QAAA;AACA,QAAA;AACP,QAAA;AACb,MAAA;AAEmB,MAAA;AACD,QAAA;AACd,UAAA;AACc,UAAA;AACL,UAAA;AACP,YAAA;AACe,YAAA;AACC,YAAA;AAClB,UAAA;AACA,UAAA;AACa,YAAA;AACX,YAAA;AACa,YAAA;AACF,YAAA;AACb,UAAA;AACF,QAAA;AACgB,QAAA;AAClB,MAAA;AAEM,MAAA;AAKY,QAAA;AACd,UAAA;AACW,UAAA;AACO,UAAA;AAAA;AAElB,UAAA;AACc,UAAA;AAChB,QAAA;AACiB,QAAA;AACF,QAAA;AACI,QAAA;AACZ,QAAA;AACa,UAAA;AACA,UAAA;AACpB,QAAA;AACF,MAAA;AAEM,MAAA;AAKe,QAAA;AACH,QAAA;AACd,UAAA;AACW,UAAA;AACX,UAAA;AAAA;AAEA,UAAA;AACc,UAAA;AAChB,QAAA;AACc,QAAA;AACZ,UAAA;AACA,UAAA;AACF,QAAA;AACI,QAAA;AACc,UAAA;AAClB,QAAA;AACF,MAAA;AAEqB,MAAA;AAGF,QAAA;AAEC,QAAA;AACA,QAAA;AACX,QAAA;AACY,UAAA;AACC,UAAA;AACpB,QAAA;AACF,MAAA;AAEM,MAAA;AACgB,QAAA;AACJ,QAAA;AACd,UAAA;AACY,UAAA;AACZ,UAAA;AACF,QAAA;AACc,QAAA;AACP,QAAA;AACT,MAAA;AAEkB,MAAA;AACJ,QAAA;AACG,QAAA;AACjB,MAAA;AAEmB,MAAA;AACV,QAAA;AACT,MAAA;AAEa,MAAA;AACQ,QAAA;AACV,QAAA;AACX,MAAA;AAEgB,MAAA;AACK,QAAA;AACZ,QAAA;AACT,MAAA;AAEO,MAAA;AACL,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACA,QAAA;AACF,MAAA;AACF,IAAA;AACF,EAAA;AACF;AD5E4B;AACA;AGjVnB;AAEI;AAEQ,EAAA;AAGrB;AAE4B;AAC1B,EAAA;AAAA;AAAA;AAGA,EAAA;AAAA;AACA,EAAA;AAAA;AACA,EAAA;AAAA;AACA,EAAA;AAAA;AACA,EAAA;AAAA;AACF;AAEoC;AAC3B,EAAA;AACT;AHkV4B;AACA;AIhW5B;AACE;AACA;AACA;AACA;AACA;AACAA;AACA;AACK;AAEc;AACA;AAES;AAEAA,EAAAA;AAK5B;AAGwB;AAAQ;AAyBE;AAEvB;AACQ,EAAA;AACrB;AAE4C;AACjB,EAAA;AACH,IAAA;AACN,IAAA;AAChB,EAAA;AAEuB,EAAA;AACzB;AAE8D;AACnC,EAAA;AACN,IAAA;AACH,IAAA;AAChB,EAAA;AAC0B,EAAA;AAC5B;AAGG;AACG;AAEuB,EAAA;AACZ,IAAA;AAGiB,IAAA;AACT,MAAA;AACV,MAAA;AACQ,MAAA;AACjB,IAAA;AAEuB,IAAA;AACA,MAAA;AACL,MAAA;AACE,QAAA;AAClB,MAAA;AACc,MAAA;AACI,QAAA;AAClB,MAAA;AACD,IAAA;AACY,IAAA;AACK,MAAA;AACF,MAAA;AAChB,IAAA;AACD,EAAA;AAAA;AAI8B;AAEb;AAGnB;AAIO,EAAA;AAEA,EAAA;AAEgB,EAAA;AAGF,EAAA;AAIF,EAAA;AAEc,IAAA;AACzB,EAAA;AAID,EAAA;AAGqB,EAAA;AACd,IAAA;AACV,EAAA;AAGa,EAAA;AAIQ,IAAA;AAGA,MAAA;AAClB,IAAA;AAGY,IAAA;AAGM,MAAA;AAClB,IAAA;AAEO,IAAA;AAGK,EAAA;AAEL,IAAA;AACU,IAAA;AACA,IAAA;AACA,IAAA;AACP,IAAA;AAGS,EAAA;AACH,IAAA;AAGE,IAAA;AAGA,MAAA;AAClB,IAAA;AAEiB,IAAA;AAEd,IAAA;AACY,MAAA;AAAqB;AAEhC,MAAA;AAAiB,QAAA;AAAA;AAEN,UAAA;AAAgC,QAAA;AAC3C,MAAA;AAEU,IAAA;AAGI,EAAA;AACT,EAAA;AACI,IAAA;AAEF,IAAA;AACf,EAAA;AACD;AAEC;AAGH;AAAA;AAGU,EAAA;AACa,IAAA;AACI,MAAA;AACF,QAAA;AACpB,MAAA;AAEa,MAAA;AACd,IAAA;AACH,EAAA;AAAA;AAGD;AJoQyB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA","file":"/home/runner/_work/revault/revault/packages/sdk/lib/chunk-B5EUR3HT.cjs","sourcesContent":[null,"import type {\n HsmCertificate,\n PsdAuthChallengeResponse,\n PsdPairingData,\n PubKey,\n} from \"@ledgerhq/revault-api\";\nimport axios from \"axios\";\nimport axiosRetry from \"axios-retry\";\nimport { v4 as uuidv4 } from \"uuid\";\n\nimport type { Logger } from \"@/logger\";\n\nimport { APPID_VAULT_ADMINISTRATOR, PATHS, SCRIPT_IDS, STR_ROLES } from \"./constants\";\nimport type { Device } from \"./types\";\n\ntype Options = {\n /**\n * device-api URL\n */\n deviceApiUrl: string;\n\n /**\n * salt used by device-api\n */\n salt: string;\n\n /**\n * seed generation function used for device-api device spawn\n */\n genSeed: (p: { salt: string; index: number }) => string;\n};\n\nexport type ApiDevice = {\n /**\n * bind a device to the given device index\n */\n with: (index: number) => Device;\n};\n\nexport function createApiDevice(options: Options, logger: Logger): ApiDevice {\n const { genSeed } = options;\n const sessionId = uuidv4();\n const deviceApi = axios.create({ baseURL: options.deviceApiUrl });\n\n axiosRetry(deviceApi, {\n retryDelay: axiosRetry.linearDelay(1000),\n retries: 3,\n /* v8 ignore start */\n retryCondition: () => true,\n onRetry: (retryCount, err) => {\n const formattedErr = `${err.code ?? `UNKNOWN`} on ${err.config?.method?.toUpperCase() ?? \"UNKNOWN_METHOD\"} ${err.config?.url ?? \"UNKNOWN_URL\"}`;\n logger.warning(\n `Retrying request to device-api (attempt ${retryCount}) - Cause: ${formattedErr}`,\n );\n },\n /* v8 ignore stop */\n });\n\n deviceApi.interceptors.request.use(\n (config) => {\n /* v8 ignore start */\n logger.debug(\n `[device-api] ${config.method?.toUpperCase()} ${config.url}${config.data ? ` ${JSON.stringify(config.data)}` : \"\"}`,\n );\n if ([\"post\", \"put\"].includes(config.method!)) {\n // when interceptor is called in combination with axios-retry, config.data can be a string or an object\n // and we should return either a string or an object compatible with the original type\n const isStringMode = typeof config.data === \"string\";\n const data = (isStringMode ? JSON.parse(config.data) : config.data) as Record<\n string,\n unknown\n >;\n const enhancedData = {\n sessionID: sessionId, // Used to ensure dedicated session if someones else uses same seed\n psd_model: \"02\", // Stax\n version: 3, // Used to properly enable noise channel\n ...data,\n };\n config.data = isStringMode ? JSON.stringify(enhancedData) : enhancedData;\n }\n return config;\n },\n /* v8 ignore stop */\n (error: Error) => Promise.reject(error),\n );\n\n return {\n with: (index: number): Device => {\n const seed = genSeed({ salt: options.salt, index });\n\n const authenticate = async ({\n challenge,\n workspaceName,\n }: {\n challenge: PsdAuthChallengeResponse;\n workspaceName: string;\n }): Promise<string> => {\n const role = challenge.role;\n if (role === \"READ_ONLY_API_KEY\")\n throw new Error(\"Invalid role for authenticate: READ_ONLY_API_KEY\");\n const { data } = await deviceApi.post<string>(\"/authenticate\", {\n seed,\n challenge: Buffer.from(challenge.challenge, \"base64\").toString(\"hex\"),\n application: APPID_VAULT_ADMINISTRATOR,\n key_handle: challenge.keyHandle,\n name: challenge.name,\n role: STR_ROLES[role],\n type: \"02\", // Stax\n workspaceName,\n });\n return data;\n };\n\n const finalizePairingHandshake = async (params: {\n handshake: string;\n partitionId: string;\n }): Promise<string> => {\n const { handshake, partitionId } = params;\n const payload = { seed, handshake, ciphertext: partitionId };\n const res = await deviceApi.post<string>(\"/finalize-pairing-handshake\", payload);\n return res.data;\n };\n\n const generateSeedFragment = async (): Promise<string> => {\n const payload = {\n seed,\n path: PATHS.KEY_MATERIAL,\n goal: 0, // seed fragment\n };\n const { data } = await deviceApi.post<string>(\"/generate-key-component\", payload);\n return data;\n };\n\n const generateWrappingKeyFragment = async (): Promise<string> => {\n const goal = 1; // means Wrapping Key\n const payload = { seed, goal, path: PATHS.KEY_MATERIAL };\n const res = await deviceApi.post<string>(\"/generate-key-fragments\", payload);\n return Buffer.from(res.data, \"hex\").toString(\"base64\");\n };\n\n const getAttestation = async (): Promise<{\n attestation: {\n codeHash: string;\n attestationPub: string;\n certificate: string;\n };\n buffer: Buffer;\n }> => {\n const { data: attestationStr } = await deviceApi.post<string>(\"/get-attestation\", { seed });\n const attestationBuffer = Buffer.from(attestationStr, \"hex\");\n const certLen = attestationBuffer.readInt8(32 + 65 + 1);\n return {\n attestation: {\n codeHash: attestationBuffer.slice(0, 32).toString(\"base64\"),\n attestationPub: attestationBuffer.slice(32, 32 + 65).toString(\"base64\"),\n certificate: attestationBuffer.slice(32 + 65, 32 + 65 + 2 + certLen).toString(\"base64\"),\n },\n buffer: attestationBuffer,\n };\n };\n\n const getConfidentialityKey = async (): Promise<{\n confidentialityKeyCurve25519: string;\n confidentialityKeySignature: string;\n }> => {\n const res = await deviceApi.post<{\n confidentiality_key_curve25519: string;\n confidentiality_key_signature: string;\n }>(\"/get-confidentiality-key\", { seed });\n return {\n confidentialityKeyCurve25519: res.data.confidentiality_key_curve25519,\n confidentialityKeySignature: res.data.confidentiality_key_signature,\n };\n };\n\n const getConfidentialityPubKey = async (): Promise<{ pubKey: string; signature: string }> => {\n return getPublicKey({ path: PATHS.CONFIDENTIALITY });\n };\n\n const getDeviceUserId = async (): Promise<string> => {\n const res = await deviceApi.post<{ blue_device_id: string }>(\"/blue-device-id\", { seed });\n return res.data.blue_device_id.toUpperCase();\n };\n\n const getU2FPubKey = async (): Promise<{ pubKey: string; signature: string }> => {\n return getPublicKey({ path: PATHS.U2F });\n };\n\n const getValidationPubKey = async (): Promise<{ pubKey: string; signature: string }> => {\n return getPublicKey({ path: PATHS.VALIDATION });\n };\n\n const hasPairing = async (): Promise<boolean> => {\n const res = await deviceApi.post<string[]>(\"/get-partition-ids\", { seed });\n return res.data.length > 0;\n };\n\n const initPairingHandshake = async (): Promise<{ pubKey: string; signature: string }> => {\n const { data } = await deviceApi.post<{ attestation: string; pubKey: string }>(\n \"/initiate-pairing-handshake\",\n { seed },\n );\n return {\n pubKey: data.pubKey,\n signature: Buffer.from(data.attestation, \"hex\").toString(\"base64\"),\n };\n };\n\n const openSession = async (params: {\n secureChannel: { pubKey: PubKey; certificate: HsmCertificate };\n }): Promise<void> => {\n const { secureChannel } = params;\n const signature = Buffer.from(secureChannel.certificate.signature, \"base64\");\n const attestationPubKey = Buffer.from(secureChannel.certificate.attestationPub, \"base64\");\n const attestationCertificate = Buffer.from(secureChannel.certificate.certificate, \"base64\");\n const attestation = Buffer.concat([\n Buffer.from([signature.length]),\n signature,\n attestationPubKey,\n Buffer.from([attestationCertificate.length]),\n attestationCertificate,\n ]);\n const payload = {\n seed,\n path: PATHS.CONFIDENTIALITY,\n pubKey: secureChannel.pubKey,\n attestation: attestation.toString(\"hex\"),\n scriptId: SCRIPT_IDS.INIT_SESSION,\n };\n const { data: deviceResponse } = await deviceApi.post<string>(\"/open-session\", payload);\n if (deviceResponse !== \"9000\") {\n throw new Error(`device-api device failed with code: ${deviceResponse}`);\n }\n };\n\n const register = async (params: {\n challenge: string;\n u2fRegisterData: string;\n name: string;\n role: \"ADMIN\" | \"SHARED_OWNER\" | \"OPERATOR\";\n }): Promise<{\n u2fRegister: Buffer;\n keyHandle: Buffer;\n rfu: number;\n pubKey: string;\n }> => {\n const { challenge, u2fRegisterData, name, role } = params;\n const payload = {\n seed,\n challenge,\n name,\n role: STR_ROLES[role],\n hsm_data: u2fRegisterData,\n type: \"02\", // Stax\n application: APPID_VAULT_ADMINISTRATOR,\n };\n const { data } = await deviceApi.post<string>(\"/register\", payload);\n const response = Buffer.from(data, \"hex\");\n let i = 0;\n const rfu = response.slice(i, (i += 1))[0]!;\n const pubKey = response.slice(i, (i += 65)).toString(\"hex\");\n const keyHandleLength = response.slice(i, ++i)[0]!;\n const keyHandle = response.slice(i, (i += keyHandleLength));\n return {\n u2fRegister: response.slice(0, response.length - 2),\n keyHandle,\n rfu,\n pubKey,\n };\n };\n\n const registerData = async (params: { challenge: string }): Promise<string> => {\n const { challenge } = params;\n const payload = { seed, challenge };\n const res = await deviceApi.post<string>(\"/u2f-register-data\", payload);\n return res.data;\n };\n\n const setPairing = async ({ pairing }: { pairing: PsdPairingData }): Promise<void> => {\n const payload = {\n seed,\n blob: pairing.blob,\n pairing: {\n bootstrap_enabled: pairing.pairing.bootstrapEnabled,\n partition_key: pairing.pairing.partitionKey,\n workspace_name: pairing.pairing.workspaceName,\n },\n partition_key_attestation: {\n code_hash: pairing.partitionKeyAttestation.codeHash,\n attestation_pub: pairing.partitionKeyAttestation.attestationPub,\n certificate: pairing.partitionKeyAttestation.certificate,\n signature: pairing.partitionKeyAttestation.signature,\n },\n };\n await deviceApi.post(\"/set-partition-key\", payload);\n };\n\n const startKKPatternAsResponder = async (params: {\n handshake: string;\n handshakeAttestation: HsmCertificate;\n partitionId: string;\n }): Promise<{ handshake: string; signature: string }> => {\n const payload = {\n seed,\n script_id: SCRIPT_IDS.ACCOUNT_MANAGER_SESSION,\n handshake: params.handshake,\n // for device-api it's normal to have empty string as handshake_attestation\n handshake_attestation: \"\",\n partition_id: params.partitionId,\n };\n const { data } = await deviceApi.post<string>(\"/start-kk-pattern-as-responder\", payload);\n const buffer = Buffer.from(data, \"hex\");\n const dataLength = buffer.readInt8(0);\n return {\n handshake: buffer.slice(1, dataLength + 1).toString(\"base64\"),\n signature: buffer.slice(dataLength + 1).toString(\"base64\"),\n };\n };\n\n const startKPatternAsResponder = async (params: {\n handshake: string;\n handshakeAttestation: HsmCertificate;\n partitionId: string;\n }): Promise<void> => {\n const { handshake, partitionId } = params;\n const payload = {\n seed,\n script_id: SCRIPT_IDS.ACCOUNT_MANAGER_SESSION,\n handshake,\n // for device-api it's normal to have empty string as handshake_attestation\n handshake_attestation: \"\",\n partition_id: partitionId,\n };\n const { data: deviceResponse } = await deviceApi.post<string>(\n \"/start-k-pattern-as-responder\",\n payload,\n );\n if (deviceResponse !== \"9000\") {\n throw new Error(`device-api device failed with code: ${deviceResponse}`);\n }\n };\n\n const getPublicKey = async (params: {\n path: string;\n }): Promise<{ pubKey: string; signature: string }> => {\n const { path } = params;\n type DeviceApiGetPubKeyResponse = { attestation: string; pubKey: string };\n const payload = { seed, secp256k1: true, path };\n const res = await deviceApi.post<DeviceApiGetPubKeyResponse>(\"/get-public-key\", payload);\n return {\n pubKey: res.data.pubKey,\n signature: Buffer.from(res.data.attestation, \"hex\").toString(\"base64\"),\n };\n };\n\n const validateVaultOperation = async (params: { actions: string[] }): Promise<string> => {\n const { actions } = params;\n const payload = {\n seed,\n path: PATHS.VALIDATION,\n actions,\n };\n const { data: signature } = await deviceApi.post<string>(\"/validate-op\", payload);\n return signature;\n };\n\n const sendAPDU = (_apdu: string): Promise<string> => {\n logger.info(\"Can't send arbitrary APDU to software device\");\n return Promise.resolve(\"9000\");\n };\n\n const getVersion = async (): Promise<string> => {\n return \"1.2.3\";\n };\n\n const poll = async (): Promise<{ isAppOpened: boolean }> => {\n await new Promise((r) => setTimeout(r, 1e3));\n return { isAppOpened: true };\n };\n\n const pollApp = async (): Promise<string> => {\n await new Promise((r) => setTimeout(r, 1e3));\n return \"9000\";\n };\n\n return {\n authenticate,\n finalizePairingHandshake,\n generateSeedFragment,\n generateWrappingKeyFragment,\n getAttestation,\n getConfidentialityKey,\n getConfidentialityPubKey,\n getDeviceUserId,\n getU2FPubKey,\n getValidationPubKey,\n hasPairing,\n initPairingHandshake,\n openSession,\n register,\n registerData,\n setPairing,\n startKKPatternAsResponder,\n startKPatternAsResponder,\n validateVaultOperation,\n getVersion,\n sendAPDU,\n poll,\n pollApp,\n };\n },\n };\n}\n","export const PATHS = {\n U2F: \"5655636'/5583430'\",\n CONFIDENTIALITY: \"5655636'/4410950'\",\n KEY_MATERIAL: \"5655636'/4932953'\",\n VALIDATION: \"5655636'/5652812'\",\n} as const;\n\nexport const STATUS_LENGTH = 2;\n\nexport const SCRIPT_IDS = {\n INIT_SESSION: 3,\n ACCOUNT_MANAGER_SESSION: 2,\n} as const;\n\nexport const STR_ROLES: Record<\"OPERATOR\" | \"ADMIN\" | \"SHARED_OWNER\", string> = {\n OPERATOR: \"00\",\n ADMIN: \"01\",\n SHARED_OWNER: \"02\",\n} as const;\n\nexport const APPID_VAULT_ADMINISTRATOR =\n \"ad5be1a1fe011ce7f53ae081a22ae000a42021f3f94106a3bac9f76e8230e4b9\";\n\nconst all61xxStatus = [];\nfor (let i = 0x6100; i <= 0x61ff; i++) {\n all61xxStatus.push(i);\n}\n\nexport const PAGINATED_STATUS = all61xxStatus;\nexport const STREAMING_RESPONSE = 0x02;\nexport const STREAMING_NEXT_ACTION = 0x01;\n","import { TransportStatusError } from \"@ledgerhq/errors\";\n\nexport const isTransportStatusError = (error: unknown): error is TransportStatusError => {\n return (\n error instanceof TransportStatusError ||\n (error instanceof Error && \"statusCode\" in error && error.message.startsWith(\"Ledger device:\"))\n );\n};\n\nconst CANCEL_STATUS_CODES = [\n 0x6985, // cancel on Ledger Blue\n\n // STAX\n 0xb00c, // cancel collect wk fragment\n 0xb00d, // cancel user registration\n 0xb010, // cancel review\n 0xb012, // cancel master seed generation\n 0xb013, // cancel login\n];\n\nexport const isDeviceCancelError = (error: Error): boolean => {\n return isTransportStatusError(error) && CANCEL_STATUS_CODES.includes(error.statusCode);\n};\n","// ------------------------------------------------------------------------------------------------\n// ------------------------------------------------------------------------------------------------\n// THIS IS SOME HORRIBLE CODE IMPORTED JUST\n// FOR THE SAKE OF NOT IMPORTING UGLY, WICKED, AND\n// BROKEN @ledgerhq/live-* LIBRARIES\n//\n// IT'S MEANT TO BE CONSIDERED AS A BLACK BOX\n// ------------------------------------------------------------------------------------------------\n// ------------------------------------------------------------------------------------------------\nimport {\n BluetoothRequired,\n CantOpenDevice,\n DeviceHalted,\n FirmwareOrAppUpdateRequired,\n TransportInterfaceNotAvailable,\n TransportStatusError,\n TransportWebUSBGestureRequired,\n} from \"@ledgerhq/errors\";\nimport type Transport from \"@ledgerhq/hw-transport\";\nimport { Observable, throwError, timer } from \"rxjs\";\nimport { catchError, mergeMap, retryWhen } from \"rxjs/operators\";\n\nconst initialErrorRemapping = (error: Error): Observable<never> =>\n throwError(\n error && error instanceof TransportStatusError && error.statusCode === 0x6faa\n ? new DeviceHalted(error.message)\n : error instanceof TransportStatusError && error.statusCode === 0x6b00\n ? new FirmwareOrAppUpdateRequired(error.message)\n : error,\n );\n\n// eslint-disable-next-line @typescript-eslint/no-empty-function\nconst never = new Promise(() => {});\n\ntype Discovery = Observable<{\n type: \"add\" | \"remove\";\n id: string;\n name: string;\n}>;\n\nexport type TransportModule = {\n // unique transport name that identify the transport module\n id: string;\n // open a device by an id, this id must be unique across all modules\n // you can typically prefix it with `something|` that identify it globally\n // returns falsy if the transport module can't handle this id\n // here, open means we want to START doing something with the transport\n open: (id: string) => Promise<Transport> | null | undefined;\n // here, close means we want to STOP doing something with the transport\n close?: (transport: Transport, id: string) => Promise<void> | null | undefined;\n // disconnect/interrupt a device connection globally\n // returns falsy if the transport module can't handle this id\n disconnect: (id: string) => Promise<void> | null | undefined;\n // optional observable that allows to discover a transport\n discovery?: Discovery;\n};\n\nconst modules: TransportModule[] = [];\n\nexport const registerTransportModule = (module: TransportModule): void => {\n modules.push(module);\n};\n\nexport const close = (transport: Transport, deviceId: string): Promise<void> => {\n for (const m of modules) {\n const p = m.close?.(transport, deviceId);\n if (p) return p;\n }\n // fallback on an actual close\n return transport.close();\n};\n\nexport const open = (deviceId: string): Promise<Transport> => {\n for (const m of modules) {\n const p = m.open(deviceId);\n if (p) return p;\n }\n return Promise.reject(new Error(`Can't find handler to open ${deviceId}`));\n};\n\nconst transportFinally =\n (cleanup: () => Promise<void>) =>\n <T>(observable: Observable<T>): Observable<T> =>\n // @ts-expect-error typescript not checking against the instanceof\n Observable.create((o) => {\n let done = false;\n\n // eslint-disable-next-line @typescript-eslint/no-explicit-any\n const finalize = (): any => {\n if (done) return never;\n done = true;\n return cleanup();\n };\n\n const sub = observable.subscribe({\n next: (e) => o.next(e),\n complete: () => {\n void finalize().then(() => o.complete());\n },\n error: (e) => {\n void finalize().then(() => o.error(e));\n },\n });\n return () => {\n sub.unsubscribe();\n void finalize();\n };\n });\n\ntype AccessHook = () => () => void;\n\nconst accessHooks: AccessHook[] = [];\n\nconst deviceQueues = {};\n\nexport const withDevice =\n (deviceId: string) =>\n <T>(job: (t: Transport) => Observable<T>): Observable<T> =>\n new Observable((o) => {\n // @ts-expect-error typescript not checking against the instanceof\n let unsubscribed;\n // @ts-expect-error typescript not checking against the instanceof\n let sub;\n // @ts-expect-error typescript not checking against the instanceof\n const deviceQueue = deviceQueues[deviceId] ?? Promise.resolve();\n\n // @ts-expect-error typescript not checking against the instanceof\n const finalize = (transport, cleanups): Promise<void> =>\n close(transport, deviceId)\n // eslint-disable-next-line @typescript-eslint/no-empty-function\n .catch(() => {})\n .then(() => {\n // @ts-expect-error typescript not checking against the instanceof\n cleanups.forEach((c) => c());\n });\n\n // when we'll finish all the current job, we'll call finish\n // @ts-expect-error typescript not checking against the instanceof\n let finish;\n // this new promise is the next exec queue\n // @ts-expect-error typescript not checking against the instanceof\n deviceQueues[deviceId] = new Promise((resolve) => {\n finish = resolve;\n });\n // for any new job, we'll now wait the exec queue to be available\n deviceQueue\n .then(() => open(deviceId)) // open the transport\n // @ts-expect-error typescript not checking against the instanceof\n .then(async (transport) => {\n // @ts-expect-error typescript not checking against the instanceof\n if (unsubscribed) {\n // it was unsubscribed prematurely\n // @ts-expect-error typescript not checking against the instanceof\n return finalize(transport, [finish]);\n }\n\n if (\n transport.requestConnectionPriority &&\n typeof transport.requestConnectionPriority === \"function\"\n ) {\n await transport.requestConnectionPriority(\"High\");\n }\n\n return transport;\n })\n // @ts-expect-error typescript not checking against the instanceof\n .catch((e) => {\n // @ts-expect-error typescript not checking against the instanceof\n finish();\n if (e instanceof BluetoothRequired) throw e;\n if (e instanceof TransportWebUSBGestureRequired) throw e;\n if (e instanceof TransportInterfaceNotAvailable) throw e;\n throw new CantOpenDevice(e.message);\n })\n // @ts-expect-error typescript not checking against the instanceof\n .then((transport) => {\n if (!transport) return;\n\n // @ts-expect-error typescript not checking against the instanceof\n if (unsubscribed) {\n // it was unsubscribed prematurely\n // @ts-expect-error typescript not checking against the instanceof\n return finalize(transport, [finish]);\n }\n\n const cleanups = accessHooks.map((hook) => hook());\n sub = job(transport) // $FlowFixMe\n .pipe(\n catchError(initialErrorRemapping),\n // $FlowFixMe\n transportFinally(() =>\n // @ts-expect-error typescript not checking against the instanceof\n finalize(transport, [...cleanups, finish]),\n ),\n )\n .subscribe(o);\n })\n // @ts-expect-error typescript not checking against the instanceof\n .catch((error) => o.error(error));\n return () => {\n unsubscribed = true;\n // @ts-expect-error typescript not checking against the instanceof\n if (sub) sub.unsubscribe();\n };\n });\n\nconst WITH_DEVICE_POLLING_DELAY = 500;\n\nexport const retryWhileErrors =\n (acceptError: (arg0: Error) => boolean) =>\n // eslint-disable-next-line @typescript-eslint/no-explicit-any\n (attempts: Observable<any>): Observable<any> =>\n attempts.pipe(\n mergeMap((error) => {\n if (!acceptError(error)) {\n return throwError(error);\n }\n\n return timer(WITH_DEVICE_POLLING_DELAY);\n }),\n );\n\nexport const withDevicePolling =\n (deviceId: string) =>\n <T>(\n job: (arg0: Transport) => Observable<T>,\n acceptError: (arg0: Error) => boolean = () => false,\n ): Observable<T> =>\n withDevice(deviceId)(job).pipe(retryWhen(retryWhileErrors(acceptError)));\n"]}
package/lib/chunk-CKNBRCHA.cjs.map DELETED
@@ -1 +0,0 @@
1
- {"version":3,"sources":["/home/runner/_work/revault/revault/packages/sdk/lib/chunk-CKNBRCHA.cjs","../src/crypto/utils.ts","../src/crypto/key-encoder.ts"],"names":["elliptic"],"mappings":"AAAA;ACAA,gFAAmB;AACnB,wFAAqB;ADErB;AACA;AEMA,iFAAiB;AACjB,yEAAe;AACf;AAGA,IAAM,gBAAA,EAAkB,gBAAA,CAAK,MAAA,CAAO,cAAA,EAAgB,QAAA,CAAA,EAAY;AAG9D,EAAA,MAAM,KAAA,EAAO,IAAA;AACb,EAAA,IAAA,CACG,GAAA,CAAI,CAAA,CACJ,GAAA;AAAA,IACC,IAAA,CAAK,GAAA,CAAI,SAAS,CAAA,CAAE,GAAA,CAAI,CAAA;AAAA,IACxB,IAAA,CAAK,GAAA,CAAI,YAAY,CAAA,CAAE,MAAA,CAAO,CAAA;AAAA,IAC9B,IAAA,CAAK,GAAA,CAAI,YAAY,CAAA,CAAE,QAAA,CAAS,CAAC,CAAA,CAAE,KAAA,CAAM,CAAA,CAAE,QAAA,CAAS,CAAA;AAAA,IACpD,IAAA,CAAK,GAAA,CAAI,WAAW,CAAA,CAAE,QAAA,CAAS,CAAC,CAAA,CAAE,MAAA,CAAO,CAAA,CAAE,QAAA,CAAS;AAAA,EACtD,CAAA;AACJ,CAAC,CAAA;AAED,IAAM,iBAAA,EAAmB,gBAAA,CAAK,MAAA;AAAA,EAC5B,cAAA;AAAA;AAAA,EAEA,QAAA,CAAA,EAAY;AAGV,IAAA,MAAM,KAAA,EAAO,IAAA;AACb,IAAA,IAAA,CACG,GAAA,CAAI,CAAA,CACJ,GAAA;AAAA,MACC,IAAA,CAAK,GAAA,CAAI,SAAS,CAAA,CAAE,GAAA,CAAI,CAAA;AAAA,MACxB,IAAA,CACG,GAAA,CAAI,qBAAqB,CAAA,CACzB,GAAA,CAAI,CAAA,CACJ,GAAA,CAAI,IAAA,CAAK,GAAA,CAAI,aAAa,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,IAAA,CAAK,GAAA,CAAI,OAAO,CAAA,CAAE,KAAA,CAAM,CAAC,CAAA;AAAA,MACjE,IAAA,CAAK,GAAA,CAAI,YAAY,CAAA,CAAE,MAAA,CAAO,CAAA,CAAE,QAAA,CAAS,eAAe,CAAA;AAAA,MACxD,IAAA,CAAK,GAAA,CAAI,YAAY,CAAA,CAAE,QAAA,CAAS,CAAC,CAAA,CAAE,MAAA,CAAO,CAAA,CAAE,QAAA,CAAS;AAAA,IACvD,CAAA;AAAA,EACJ;AAAA;AAEF,CAAA;AAEA,IAAM,wBAAA,EAA0B,gBAAA,CAAK,MAAA,CAAO,sBAAA,EAAwB,QAAA,CAAA,EAAY;AAG9E,EAAA,MAAM,KAAA,EAAO,IAAA;AACb,EAAA,IAAA,CACG,GAAA,CAAI,CAAA,CACJ,GAAA;AAAA,IACC,IAAA,CAAK,GAAA,CAAI,WAAW,CAAA,CAAE,GAAA,CAAI,CAAA,CAAE,GAAA,CAAI,IAAA,CAAK,GAAA,CAAI,IAAI,CAAA,CAAE,KAAA,CAAM,CAAA,EAAG,IAAA,CAAK,GAAA,CAAI,OAAO,CAAA,CAAE,KAAA,CAAM,CAAC,CAAA;AAAA,IACjF,IAAA,CAAK,GAAA,CAAI,KAAK,CAAA,CAAE,MAAA,CAAO;AAAA,EACzB,CAAA;AACJ,CAAC,CAAA;AASD,IAAM,OAAA,EAAuC;AAAA,EAC3C,SAAA,EAAW;AAAA,IACT,eAAA,EAAiB,CAAC,CAAA,EAAG,CAAA,EAAG,GAAA,EAAK,CAAA,EAAG,EAAE,CAAA;AAAA,IAClC,iBAAA,EAAmB,EAAE,KAAA,EAAO,iBAAiB,CAAA;AAAA,IAC7C,gBAAA,EAAkB,EAAE,KAAA,EAAO,aAAa,CAAA;AAAA,IACxC,KAAA,EAAO,IAAI,kBAAA,CAAS,EAAA,CAAG,WAAW;AAAA,EACpC,CAAA;AAAA,EACA,IAAA,EAAM;AAAA,IACJ,eAAA,EAAiB,CAAC,CAAA,EAAG,CAAA,EAAG,GAAA,EAAK,KAAA,EAAO,CAAA,EAAG,CAAA,EAAG,CAAC,CAAA;AAAA;AAAA,IAC3C,iBAAA,EAAmB,EAAE,KAAA,EAAO,iBAAiB,CAAA;AAAA,IAC7C,gBAAA,EAAkB,EAAE,KAAA,EAAO,aAAa,CAAA;AAAA,IACxC,KAAA,EAAO,IAAI,kBAAA,CAAS,EAAA,CAAG,MAAM;AAAA,EAC/B;AACF,CAAA;AAoBO,IAAM,WAAA,EAAN,MAAiB;AAAA,EACtB;AAAA,EACA;AAAA,EAEA,WAAA,CAAY,OAAA,EAAgC;AAC1C,IAAA,GAAA,CAAI,OAAO,QAAA,IAAY,QAAA,EAAU;AAE/B,MAAA,GAAA,CAAI,QAAA,IAAY,YAAA,GAAe,QAAA,IAAY,MAAA,EAAQ;AACjD,QAAA,MAAM,IAAI,KAAA,CAAM,iBAAA,EAAmB,OAAO,CAAA;AAAA,MAC5C;AAEA,MAAA,QAAA,EAAU,MAAA,CAAO,OAAO,CAAA;AAAA,IAC1B;AACA,IAAA,IAAA,CAAK,QAAA,EAAU,OAAA;AACf,IAAA,IAAA,CAAK,YAAA,EAAc,CAAC,CAAA,EAAG,CAAA,EAAG,GAAA,EAAK,KAAA,EAAO,CAAA,EAAG,CAAC,CAAA;AAAA,EAC5C;AAAA;AAAA,EAGQ,YAAA,CAAa,UAAA,EAA8C;AACjE,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,IAAI,mBAAA,CAAG,CAAC,CAAA;AAAA,MACjB,UAAA;AAAA,MACA,mBAAA,EAAqB;AAAA,QACnB,WAAA,EAAa,IAAA,CAAK,WAAA;AAAA,QAClB,KAAA,EAAO,UAAA,CAAW;AAAA,MACpB;AAAA,IACF,CAAA;AAAA,EACF;AAAA;AAAA,EAGA,gBAAA,CAAiB,aAAA,EAAuB,YAAA,EAAuC;AAC7E,IAAA,MAAM,iBAAA,EAAoC;AAAA,MACxC,OAAA,EAAS,IAAI,mBAAA,CAAG,CAAC,CAAA;AAAA,MACjB,UAAA,EAAY,MAAA,CAAO,IAAA,CAAK,aAAA,EAAe,KAAK,CAAA;AAAA,MAC5C,UAAA,EAAY,IAAA,CAAK,OAAA,CAAQ;AAAA,IAC3B,CAAA;AAEA,IAAA,GAAA,CAAI,YAAA,EAAc;AAChB,MAAA,gBAAA,CAAiB,UAAA,EAAY;AAAA,QAC3B,MAAA,EAAQ,CAAA;AAAA,QACR,IAAA,EAAM,MAAA,CAAO,IAAA,CAAK,YAAA,EAAc,KAAK;AAAA,MACvC,CAAA;AAAA,IACF;AAEA,IAAA,OAAO,gBAAA;AAAA,EACT;AAAA,EAEA,eAAA,CAAgB,YAAA,EAGd;AACA,IAAA,OAAO;AAAA,MACL,SAAA,EAAW;AAAA,QACT,EAAA,EAAI,IAAA,CAAK,WAAA;AAAA,QACT,KAAA,EAAO,IAAA,CAAK,OAAA,CAAQ;AAAA,MACtB,CAAA;AAAA,MACA,GAAA,EAAK;AAAA,QACH,MAAA,EAAQ,CAAA;AAAA,QACR,IAAA,EAAM,MAAA,CAAO,IAAA,CAAK,YAAA,EAAc,KAAK;AAAA,MACvC;AAAA,IACF,CAAA;AAAA,EACF;AAAA,EAEA,aAAA,CACE,UAAA,EACA,cAAA,EACA,iBAAA,EACA,sBAAA,EAA2C,OAAA,EACnC;AACR,IAAA,IAAI,gBAAA;AAGJ,IAAA,OAAA,CAAQ,cAAA,EAAgB;AAAA,MACtB,KAAK,KAAA,EAAO;AACV,QAAA,GAAA,CAAI,OAAO,WAAA,IAAe,QAAA,EAAU;AAClC,UAAA,MAAM,IAAI,KAAA,CAAM,8BAA8B,CAAA;AAAA,QAChD;AACA,QAAA,MAAM,QAAA,EAAU,IAAA,CAAK,OAAA,CAAQ,KAAA,CAAM,cAAA,CAAe,UAAA,EAAY,KAAK,CAAA;AACnE,QAAA,MAAM,aAAA,EAAe,OAAA,CAAQ,SAAA,CAAU,KAAK,CAAA;AAC5C,QAAA,iBAAA,EAAmB,IAAA,CAAK,gBAAA,CAAiB,UAAA,EAAY,YAAY,CAAA;AACjE,QAAA,KAAA;AAAA,MACF;AAAA,MACA,KAAK,KAAA;AACH,QAAA,GAAA,CAAI,OAAO,WAAA,IAAe,QAAA,EAAU;AAClC,UAAA,WAAA,EAAa,MAAA,CAAO,IAAA,CAAK,UAAA,EAAY,KAAK,CAAA;AAAA,QAC5C;AACA,QAAA,iBAAA,EAAmB,eAAA,CAAgB,MAAA,CAAO,UAAA,EAAY,KAAK,CAAA;AAC3D,QAAA,KAAA;AAAA,MACF,KAAK,KAAA;AACH,QAAA,GAAA,CAAI,OAAO,WAAA,IAAe,QAAA,EAAU;AAClC,UAAA,MAAM,IAAI,KAAA,CAAM,8BAA8B,CAAA;AAAA,QAChD;AACA,QAAA,iBAAA,EAAmB,eAAA,CAAgB,MAAA;AAAA,UACjC,UAAA;AAAA,UACA,KAAA;AAAA,UACA,IAAA,CAAK,OAAA,CAAQ;AAAA,QACf,CAAA;AACA,QAAA,KAAA;AAAA;AAAA,MAEF,OAAA;AACE,QAAA,MAAM,IAAI,KAAA,CAAM,4BAA4B,CAAA;AAAA,IAEhD;AAGA,IAAA,OAAA,CAAQ,iBAAA,EAAmB;AAAA,MACzB,KAAK,KAAA;AACH,QAAA,GAAA,CAAI,sBAAA,IAA0B,OAAA,EAAS;AACrC,UAAA,OAAO,gBAAA,CAAiB,UAAA,CAAW,QAAA,CAAS,KAAK,CAAA;AAAA,QACnD,EAAA,KAAA,GAAA,CAAW,sBAAA,IAA0B,OAAA,EAAS;AAC5C,UAAA,OAAO,IAAA,CAAK,YAAA,CAAa,gBAAgB,CAAA,CAAE,UAAA,CAAW,UAAA,CAAW,QAAA,CAAS,KAAK,CAAA;AAAA,QACjF;AACA,QAAA,KAAA;AAAA,MACF,KAAK,KAAA;AACH,QAAA,GAAA,CAAI,sBAAA,IAA0B,OAAA,EAAS;AACrC,UAAA,OAAO,eAAA,CAAgB,MAAA,CAAO,gBAAA,EAAkB,KAAK,CAAA,CAAE,QAAA,CAAS,KAAK,CAAA;AAAA,QACvE,EAAA,KAAA,GAAA,CAAW,sBAAA,IAA0B,OAAA,EAAS;AAC5C,UAAA,OAAO,gBAAA,CAAiB,MAAA,CAAO,IAAA,CAAK,YAAA,CAAa,gBAAgB,CAAA,EAAG,KAAK,CAAA,CAAE,QAAA;AAAA,YACzE;AAAA,UACF,CAAA;AAAA,QACF;AACA,QAAA,KAAA;AAAA,MACF,KAAK,KAAA;AACH,QAAA,GAAA,CAAI,sBAAA,IAA0B,OAAA,EAAS;AACrC,UAAA,OAAO,eAAA,CAAgB,MAAA,CAAO,gBAAA,EAAkB,KAAA,EAAO,IAAA,CAAK,OAAA,CAAQ,iBAAiB,CAAA;AAAA,QACvF,EAAA,KAAA,GAAA,CAAW,sBAAA,IAA0B,OAAA,EAAS;AAC5C,UAAA,OAAO,gBAAA,CAAiB,MAAA,CAAO,IAAA,CAAK,YAAA,CAAa,gBAAgB,CAAA,EAAG,KAAA,EAAO;AAAA,YACzE,GAAG,IAAA,CAAK,OAAA,CAAQ,iBAAA;AAAA,YAChB,KAAA,EAAO;AAAA,UACT,CAAC,CAAA;AAAA,QACH;AACA,QAAA,KAAA;AAAA;AAAA,MAEF,OAAA;AACE,QAAA,MAAM,IAAI,KAAA,CAAM,4CAA4C,CAAA;AAAA,IAEhE;AAEA,IAAA,MAAM,IAAI,KAAA,CAAM,wCAAwC,CAAA;AAAA,EAC1D;AAAA,EAEA,YAAA,CACE,SAAA,EACA,cAAA,EACA,iBAAA,EACQ;AACR,IAAA,IAAI,eAAA;AAEJ,IAAA,OAAA,CAAQ,cAAA,EAAgB;AAAA,MACtB,KAAK,KAAA;AACH,QAAA,GAAA,CAAI,OAAO,UAAA,IAAc,QAAA,EAAU;AACjC,UAAA,MAAM,IAAI,KAAA,CAAM,6BAA6B,CAAA;AAAA,QAC/C;AACA,QAAA,gBAAA,EAAkB,IAAA,CAAK,eAAA,CAAgB,SAAS,CAAA;AAChD,QAAA,KAAA;AAAA,MACF,KAAK,KAAA;AACH,QAAA,GAAA,CAAI,OAAO,UAAA,IAAc,QAAA,EAAU;AACjC,UAAA,UAAA,EAAY,MAAA,CAAO,IAAA,CAAK,SAAA,EAAW,KAAK,CAAA;AAAA,QAC1C;AACA,QAAA,gBAAA,EAAkB,uBAAA,CAAwB,MAAA,CAAO,SAAA,EAAW,KAAK,CAAA;AACjE,QAAA,KAAA;AAAA,MACF,KAAK,KAAA;AACH,QAAA,GAAA,CAAI,OAAO,UAAA,IAAc,QAAA,EAAU;AACjC,UAAA,MAAM,IAAI,KAAA,CAAM,6BAA6B,CAAA;AAAA,QAC/C;AACA,QAAA,gBAAA,EAAkB,uBAAA,CAAwB,MAAA;AAAA,UACxC,SAAA;AAAA,UACA,KAAA;AAAA,UACA,IAAA,CAAK,OAAA,CAAQ;AAAA,QACf,CAAA;AACA,QAAA,KAAA;AAAA;AAAA,MAEF,OAAA;AACE,QAAA,MAAM,IAAI,KAAA,CAAM,2BAA2B,CAAA;AAAA,IAE/C;AAGA,IAAA,OAAA,CAAQ,iBAAA,EAAmB;AAAA,MACzB,KAAK,KAAA;AACH,QAAA,OAAO,eAAA,CAAgB,GAAA,CAAI,IAAA,CAAK,QAAA,CAAS,KAAK,CAAA;AAAA,MAChD,KAAK,KAAA;AACH,QAAA,OAAO,uBAAA,CAAwB,MAAA,CAAO,eAAA,EAAiB,KAAK,CAAA,CAAE,QAAA,CAAS,KAAK,CAAA;AAAA,MAC9E,KAAK,KAAA;AACH,QAAA,OAAO,uBAAA,CAAwB,MAAA;AAAA,UAC7B,eAAA;AAAA,UACA,KAAA;AAAA,UACA,IAAA,CAAK,OAAA,CAAQ;AAAA,QACf,CAAA;AAAA;AAAA,MAEF,OAAA;AACE,QAAA,MAAM,IAAI,KAAA,CAAM,2CAA2C,CAAA;AAAA,IAE/D;AAAA,EACF;AACF,CAAA;AFnFA;AACA;AClNA,SAAS,gBAAA,CAAiB,MAAA,EAAwB;AAGhD,EAAA,MAAM,IAAA,EAAM,MAAA,CAAO,KAAA,CAAM,IAAI,CAAA;AAC7B,EAAA,GAAA,CAAI,KAAA,CAAM,CAAA;AACV,EAAA,GAAA,CAAI,GAAA,CAAI,CAAA;AAER,EAAA,MAAM,UAAA,EAAY,MAAA,CAAO,IAAA,CAAK,GAAA,CAAI,IAAA,CAAK,EAAE,CAAA,EAAG,QAAQ,CAAA;AAGpD,EAAA,MAAM,gBAAA,EAAkB,SAAA,CAAU,KAAA,CAAM,EAAE,CAAA;AAC1C,EAAA,OAAO,eAAA,CAAgB,QAAA,CAAS,KAAK,CAAA,CAAE,WAAA,CAAY,CAAA;AACrD;AAEA,SAAS,QAAA,CAAS,SAAA,EAAmB,EAAE,UAAA,EAAY,KAAK,EAAA,EAAI,CAAC,CAAA,EAAW;AACtE,EAAA,MAAM,WAAA,EAAa,IAAI,UAAA,CAAW,MAAM,CAAA;AACxC,EAAA,GAAA,CAAI,SAAA,EAAW;AACb,IAAA,OAAO,UAAA,CAAW,aAAA,CAAc,SAAA,EAAW,KAAA,EAAO,KAAK,CAAA;AAAA,EACzD;AACA,EAAA,OAAO,UAAA,CAAW,YAAA,CAAa,SAAA,EAAW,KAAA,EAAO,KAAK,CAAA;AACxD;AAMO,SAAS,OAAA,CAAQ,OAAA,EAAiC;AACvD,EAAA,GAAA,CAAI,OAAA,EAAS;AACX,IAAA,MAAM,GAAA,EAAK,IAAIA,kBAAAA,CAAS,EAAA,CAAG,MAAM,CAAA;AACjC,IAAA,MAAM,cAAA,EAAgB,gBAAA,CAAO,UAAA,CAAW,QAAQ,CAAA,CAAE,MAAA,CAAO,OAAO,CAAA,CAAE,MAAA,CAAO,KAAK,CAAA;AAC9E,IAAA,MAAM,QAAA,EAAU,EAAA,CAAG,UAAA,CAAW;AAAA,MAC5B,OAAA,EAAS,MAAA,CAAO,IAAA,CAAK,aAAA,EAAe,KAAK;AAAA,IAC3C,CAAC,CAAA;AACD,IAAA,OAAO;AAAA,MACL,UAAA,EAAY,MAAA,CAAO,QAAA,CAAS,OAAA,CAAQ,UAAA,CAAW,KAAK,CAAC,CAAC,CAAA;AAAA,MACtD,SAAA,EAAW,MAAA,CAAO,QAAA,CAAS,OAAA,CAAQ,SAAA,CAAU,KAAK,CAAA,EAAG,EAAE,SAAA,EAAW,MAAM,CAAC,CAAC,CAAA;AAAA,MAC1E,SAAA,EAAW,gBAAA,CAAiB,MAAA,CAAO,QAAA,CAAS,OAAA,CAAQ,SAAA,CAAU,KAAK,CAAA,EAAG,EAAE,SAAA,EAAW,MAAM,CAAC,CAAC,CAAC;AAAA,IAC9F,CAAA;AAAA,EACF;AACA,EAAA,MAAM,EAAE,SAAA,EAAW,WAAW,EAAA,EAAI,gBAAA,CAAO,mBAAA,CAAoB,IAAA,EAAM;AAAA,IACjE,UAAA,EAAY,OAAA;AAAA,IACZ,iBAAA,EAAmB,EAAE,IAAA,EAAM,MAAA,EAAQ,MAAA,EAAQ,MAAM,CAAA;AAAA,IACjD,kBAAA,EAAoB,EAAE,IAAA,EAAM,MAAA,EAAQ,MAAA,EAAQ,MAAM;AAAA,EACpD,CAAC,CAAA;AACD,EAAA,MAAM,UAAA,EAAY,gBAAA,CAAiB,SAAS,CAAA;AAC5C,EAAA,OAAO;AAAA,IACL,UAAA;AAAA,IACA,SAAA;AAAA,IACA;AAAA,EACF,CAAA;AACF;ADyMA;AACA;AACE;AACF,0BAAC","file":"/home/runner/_work/revault/revault/packages/sdk/lib/chunk-CKNBRCHA.cjs","sourcesContent":[null,"import crypto from \"crypto\";\nimport elliptic from \"elliptic\";\n\nimport { KeyEncoder } from \"./key-encoder\";\nimport type { GeneratedKeys } from \"./types\";\n\nfunction extractPublicKey(pemKey: string): string {\n // convert the PEM formatted public key to raw public key in X9.62 uncompressed format\n // this is an oversimplified method and may not work with different curves or PEM formats\n const pem = pemKey.split(\"\\n\");\n pem.shift(); // remove the first line (BEGIN PUBLIC KEY)\n pem.pop(); // remove the last line (END PUBLIC KEY)\n // convert base64 to buffer\n const keyBuffer = Buffer.from(pem.join(\"\"), \"base64\");\n // assuming the first 26 bytes are the header for the SPKI formatted key.\n // the actual key should begin after this header.\n const actualKeyBuffer = keyBuffer.slice(26);\n return actualKeyBuffer.toString(\"hex\").toUpperCase();\n}\n\nfunction hexToPem(hexString: string, { isPrivate = true } = {}): string {\n const keyEncoder = new KeyEncoder(\"p256\");\n if (isPrivate) {\n return keyEncoder.encodePrivate(hexString, \"raw\", \"pem\");\n }\n return keyEncoder.encodePublic(hexString, \"raw\", \"pem\");\n}\n\n/**\n * If `entropy` is passed, will generate keys pair deterministically\n * else, random keys pair generated\n */\nexport function genKeys(entropy?: string): GeneratedKeys {\n if (entropy) {\n const ec = new elliptic.ec(\"p256\");\n const hashedEntropy = crypto.createHash(\"sha256\").update(entropy).digest(\"hex\");\n const keyPair = ec.genKeyPair({\n entropy: Buffer.from(hashedEntropy, \"hex\"),\n });\n return {\n privateKey: String(hexToPem(keyPair.getPrivate(\"hex\"))),\n publicKey: String(hexToPem(keyPair.getPublic(\"hex\"), { isPrivate: false })),\n hexPubKey: extractPublicKey(String(hexToPem(keyPair.getPublic(\"hex\"), { isPrivate: false }))),\n };\n }\n const { publicKey, privateKey } = crypto.generateKeyPairSync(\"ec\", {\n namedCurve: \"P-256\",\n publicKeyEncoding: { type: \"spki\", format: \"pem\" },\n privateKeyEncoding: { type: \"sec1\", format: \"pem\" },\n });\n const hexPubKey = extractPublicKey(publicKey);\n return {\n privateKey,\n publicKey,\n hexPubKey,\n };\n}\n","// ========================================================================== //\n// //\n// DISCLAIMER //\n// //\n// This code has been blindly copy-pasted from: //\n// https://github.com/LedgerHQ/pkey-ts //\n// //\n// ========================================================================== //\n//\n// @ts-expect-error this library does not ship types\nimport asn1 from \"asn1.js\";\nimport BN from \"bn.js\";\nimport elliptic from \"elliptic\";\n\n/* cspell:disable */\nconst ECPrivateKeyASN = asn1.define(\"ECPrivateKey\", function () {\n // @ts-expect-error pure black box\n // eslint-disable-next-line @typescript-eslint/no-explicit-any, @typescript-eslint/no-unnecessary-type-assertion\n const self = this as any;\n self\n .seq()\n .obj(\n self.key(\"version\").int(),\n self.key(\"privateKey\").octstr(),\n self.key(\"parameters\").explicit(0).objid().optional(),\n self.key(\"publicKey\").explicit(1).bitstr().optional(),\n );\n});\n\nconst ECPrivateKey8ASN = asn1.define(\n \"ECPrivateKey\",\n /* v8 ignore start */\n function () {\n // @ts-expect-error pure black box\n // eslint-disable-next-line @typescript-eslint/no-explicit-any, @typescript-eslint/no-unnecessary-type-assertion\n const self = this as any;\n self\n .seq()\n .obj(\n self.key(\"version\").int(),\n self\n .key(\"privateKeyAlgorithm\")\n .seq()\n .obj(self.key(\"ecPublicKey\").objid(), self.key(\"curve\").objid()),\n self.key(\"privateKey\").octstr().contains(ECPrivateKeyASN),\n self.key(\"attributes\").explicit(0).bitstr().optional(),\n );\n },\n /* v8 ignore stop */\n);\n\nconst SubjectPublicKeyInfoASN = asn1.define(\"SubjectPublicKeyInfo\", function () {\n // @ts-expect-error pure black box\n // eslint-disable-next-line @typescript-eslint/no-explicit-any, @typescript-eslint/no-unnecessary-type-assertion\n const self = this as any;\n self\n .seq()\n .obj(\n self.key(\"algorithm\").seq().obj(self.key(\"id\").objid(), self.key(\"curve\").objid()),\n self.key(\"pub\").bitstr(),\n );\n});\n\ntype CurveOptions = {\n curveParameters: number[];\n privatePEMOptions: { label: string };\n publicPEMOptions: { label: string };\n curve: elliptic.ec;\n};\n\nconst curves: Record<string, CurveOptions> = {\n secp256k1: {\n curveParameters: [1, 3, 132, 0, 10],\n privatePEMOptions: { label: \"EC PRIVATE KEY\" },\n publicPEMOptions: { label: \"PUBLIC KEY\" },\n curve: new elliptic.ec(\"secp256k1\"),\n },\n p256: {\n curveParameters: [1, 2, 840, 10045, 3, 1, 7], // OID for p256 curve\n privatePEMOptions: { label: \"EC PRIVATE KEY\" },\n publicPEMOptions: { label: \"PUBLIC KEY\" },\n curve: new elliptic.ec(\"p256\"),\n },\n};\n\ntype PrivateKeyPKCS1 = {\n version: BN;\n privateKey: Buffer;\n parameters: number[];\n publicKey?: {\n unused: number;\n data: Buffer;\n };\n};\n\ntype PrivateKeyPKCS8 = {\n version: BN;\n privateKey: PrivateKeyPKCS1;\n privateKeyAlgorithm: { ecPublicKey: number[]; curve: number[] };\n};\n\nexport type KeyFormat = \"raw\" | \"pem\" | \"der\";\n\nexport class KeyEncoder {\n algorithmID: number[];\n options: CurveOptions;\n\n constructor(options: string | CurveOptions) {\n if (typeof options === \"string\") {\n /* v8 ignore start */\n if (options !== \"secp256k1\" && options !== \"p256\") {\n throw new Error(\"Unknown curve \" + options);\n }\n /* v8 ignore stop */\n options = curves[options]!;\n }\n this.options = options;\n this.algorithmID = [1, 2, 840, 10045, 2, 1];\n }\n\n /* v8 ignore start */\n private PKCS1toPKCS8(privateKey: PrivateKeyPKCS1): PrivateKeyPKCS8 {\n return {\n version: new BN(0),\n privateKey,\n privateKeyAlgorithm: {\n ecPublicKey: this.algorithmID,\n curve: privateKey.parameters,\n },\n };\n }\n /* v8 ignore stop */\n\n privateKeyObject(rawPrivateKey: string, rawPublicKey: string): PrivateKeyPKCS1 {\n const privateKeyObject: PrivateKeyPKCS1 = {\n version: new BN(1),\n privateKey: Buffer.from(rawPrivateKey, \"hex\"),\n parameters: this.options.curveParameters,\n };\n\n if (rawPublicKey) {\n privateKeyObject.publicKey = {\n unused: 0,\n data: Buffer.from(rawPublicKey, \"hex\"),\n };\n }\n\n return privateKeyObject;\n }\n\n publicKeyObject(rawPublicKey: string): {\n algorithm: { id: number[]; curve: number[] };\n pub: { unused: number; data: Buffer };\n } {\n return {\n algorithm: {\n id: this.algorithmID,\n curve: this.options.curveParameters,\n },\n pub: {\n unused: 0,\n data: Buffer.from(rawPublicKey, \"hex\"),\n },\n };\n }\n\n encodePrivate(\n privateKey: string | Buffer,\n originalFormat: KeyFormat,\n destinationFormat: KeyFormat,\n destinationFormatType: \"pkcs8\" | \"pkcs1\" = \"pkcs1\",\n ): string {\n let privateKeyObject: PrivateKeyPKCS1;\n\n /* Parse the incoming private key and convert it to a private key object */\n switch (originalFormat) {\n case \"raw\": {\n if (typeof privateKey !== \"string\") {\n throw new Error(\"private key must be a string\");\n }\n const keyPair = this.options.curve.keyFromPrivate(privateKey, \"hex\");\n const rawPublicKey = keyPair.getPublic(\"hex\");\n privateKeyObject = this.privateKeyObject(privateKey, rawPublicKey);\n break;\n }\n case \"der\":\n if (typeof privateKey === \"string\") {\n privateKey = Buffer.from(privateKey, \"hex\");\n }\n privateKeyObject = ECPrivateKeyASN.decode(privateKey, \"der\");\n break;\n case \"pem\":\n if (typeof privateKey !== \"string\") {\n throw new Error(\"private key must be a string\");\n }\n privateKeyObject = ECPrivateKeyASN.decode(\n privateKey,\n \"pem\",\n this.options.privatePEMOptions,\n );\n break;\n /* v8 ignore start */\n default:\n throw new Error(\"invalid private key format\");\n /* v8 ignore stop */\n }\n\n /* Export the private key object to the desired format */\n switch (destinationFormat) {\n case \"raw\":\n if (destinationFormatType === \"pkcs1\") {\n return privateKeyObject.privateKey.toString(\"hex\");\n } else if (destinationFormatType === \"pkcs8\") {\n return this.PKCS1toPKCS8(privateKeyObject).privateKey.privateKey.toString(\"hex\");\n }\n break;\n case \"der\":\n if (destinationFormatType === \"pkcs1\") {\n return ECPrivateKeyASN.encode(privateKeyObject, \"der\").toString(\"hex\");\n } else if (destinationFormatType === \"pkcs8\") {\n return ECPrivateKey8ASN.encode(this.PKCS1toPKCS8(privateKeyObject), \"der\").toString(\n \"hex\",\n );\n }\n break;\n case \"pem\":\n if (destinationFormatType === \"pkcs1\") {\n return ECPrivateKeyASN.encode(privateKeyObject, \"pem\", this.options.privatePEMOptions);\n } else if (destinationFormatType === \"pkcs8\") {\n return ECPrivateKey8ASN.encode(this.PKCS1toPKCS8(privateKeyObject), \"pem\", {\n ...this.options.privatePEMOptions,\n label: \"PRIVATE KEY\",\n });\n }\n break;\n /* v8 ignore start */\n default:\n throw new Error(\"invalid destination format for private key\");\n /* v8 ignore stop */\n }\n\n throw new Error(\"unsupported destination format or type\");\n }\n\n encodePublic(\n publicKey: string | Buffer,\n originalFormat: KeyFormat,\n destinationFormat: KeyFormat,\n ): string {\n let publicKeyObject;\n\n switch (originalFormat) {\n case \"raw\":\n if (typeof publicKey !== \"string\") {\n throw new Error(\"public key must be a string\");\n }\n publicKeyObject = this.publicKeyObject(publicKey);\n break;\n case \"der\":\n if (typeof publicKey === \"string\") {\n publicKey = Buffer.from(publicKey, \"hex\");\n }\n publicKeyObject = SubjectPublicKeyInfoASN.decode(publicKey, \"der\");\n break;\n case \"pem\":\n if (typeof publicKey !== \"string\") {\n throw new Error(\"public key must be a string\");\n }\n publicKeyObject = SubjectPublicKeyInfoASN.decode(\n publicKey,\n \"pem\",\n this.options.publicPEMOptions,\n );\n break;\n /* v8 ignore start */\n default:\n throw new Error(\"invalid public key format\");\n /* v8 ignore stop */\n }\n\n /* Export the private key object to the desired format */\n switch (destinationFormat) {\n case \"raw\":\n return publicKeyObject.pub.data.toString(\"hex\");\n case \"der\":\n return SubjectPublicKeyInfoASN.encode(publicKeyObject, \"der\").toString(\"hex\");\n case \"pem\":\n return SubjectPublicKeyInfoASN.encode(\n publicKeyObject,\n \"pem\",\n this.options.publicPEMOptions,\n );\n /* v8 ignore start */\n default:\n throw new Error(\"invalid destination format for public key\");\n /* v8 ignore stop */\n }\n }\n}\n/* cspell:enable */\n"]}
package/lib/chunk-QVDZOA4O.js.map DELETED
@@ -1 +0,0 @@
1
- {"version":3,"sources":["../src/crypto/utils.ts","../src/crypto/key-encoder.ts"],"sourcesContent":["import crypto from \"crypto\";\nimport elliptic from \"elliptic\";\n\nimport { KeyEncoder } from \"./key-encoder\";\nimport type { GeneratedKeys } from \"./types\";\n\nfunction extractPublicKey(pemKey: string): string {\n // convert the PEM formatted public key to raw public key in X9.62 uncompressed format\n // this is an oversimplified method and may not work with different curves or PEM formats\n const pem = pemKey.split(\"\\n\");\n pem.shift(); // remove the first line (BEGIN PUBLIC KEY)\n pem.pop(); // remove the last line (END PUBLIC KEY)\n // convert base64 to buffer\n const keyBuffer = Buffer.from(pem.join(\"\"), \"base64\");\n // assuming the first 26 bytes are the header for the SPKI formatted key.\n // the actual key should begin after this header.\n const actualKeyBuffer = keyBuffer.slice(26);\n return actualKeyBuffer.toString(\"hex\").toUpperCase();\n}\n\nfunction hexToPem(hexString: string, { isPrivate = true } = {}): string {\n const keyEncoder = new KeyEncoder(\"p256\");\n if (isPrivate) {\n return keyEncoder.encodePrivate(hexString, \"raw\", \"pem\");\n }\n return keyEncoder.encodePublic(hexString, \"raw\", \"pem\");\n}\n\n/**\n * If `entropy` is passed, will generate keys pair deterministically\n * else, random keys pair generated\n */\nexport function genKeys(entropy?: string): GeneratedKeys {\n if (entropy) {\n const ec = new elliptic.ec(\"p256\");\n const hashedEntropy = crypto.createHash(\"sha256\").update(entropy).digest(\"hex\");\n const keyPair = ec.genKeyPair({\n entropy: Buffer.from(hashedEntropy, \"hex\"),\n });\n return {\n privateKey: String(hexToPem(keyPair.getPrivate(\"hex\"))),\n publicKey: String(hexToPem(keyPair.getPublic(\"hex\"), { isPrivate: false })),\n hexPubKey: extractPublicKey(String(hexToPem(keyPair.getPublic(\"hex\"), { isPrivate: false }))),\n };\n }\n const { publicKey, privateKey } = crypto.generateKeyPairSync(\"ec\", {\n namedCurve: \"P-256\",\n publicKeyEncoding: { type: \"spki\", format: \"pem\" },\n privateKeyEncoding: { type: \"sec1\", format: \"pem\" },\n });\n const hexPubKey = extractPublicKey(publicKey);\n return {\n privateKey,\n publicKey,\n hexPubKey,\n };\n}\n","// ========================================================================== //\n// //\n// DISCLAIMER //\n// //\n// This code has been blindly copy-pasted from: //\n// https://github.com/LedgerHQ/pkey-ts //\n// //\n// ========================================================================== //\n//\n// @ts-expect-error this library does not ship types\nimport asn1 from \"asn1.js\";\nimport BN from \"bn.js\";\nimport elliptic from \"elliptic\";\n\n/* cspell:disable */\nconst ECPrivateKeyASN = asn1.define(\"ECPrivateKey\", function () {\n // @ts-expect-error pure black box\n // eslint-disable-next-line @typescript-eslint/no-explicit-any, @typescript-eslint/no-unnecessary-type-assertion\n const self = this as any;\n self\n .seq()\n .obj(\n self.key(\"version\").int(),\n self.key(\"privateKey\").octstr(),\n self.key(\"parameters\").explicit(0).objid().optional(),\n self.key(\"publicKey\").explicit(1).bitstr().optional(),\n );\n});\n\nconst ECPrivateKey8ASN = asn1.define(\n \"ECPrivateKey\",\n /* v8 ignore start */\n function () {\n // @ts-expect-error pure black box\n // eslint-disable-next-line @typescript-eslint/no-explicit-any, @typescript-eslint/no-unnecessary-type-assertion\n const self = this as any;\n self\n .seq()\n .obj(\n self.key(\"version\").int(),\n self\n .key(\"privateKeyAlgorithm\")\n .seq()\n .obj(self.key(\"ecPublicKey\").objid(), self.key(\"curve\").objid()),\n self.key(\"privateKey\").octstr().contains(ECPrivateKeyASN),\n self.key(\"attributes\").explicit(0).bitstr().optional(),\n );\n },\n /* v8 ignore stop */\n);\n\nconst SubjectPublicKeyInfoASN = asn1.define(\"SubjectPublicKeyInfo\", function () {\n // @ts-expect-error pure black box\n // eslint-disable-next-line @typescript-eslint/no-explicit-any, @typescript-eslint/no-unnecessary-type-assertion\n const self = this as any;\n self\n .seq()\n .obj(\n self.key(\"algorithm\").seq().obj(self.key(\"id\").objid(), self.key(\"curve\").objid()),\n self.key(\"pub\").bitstr(),\n );\n});\n\ntype CurveOptions = {\n curveParameters: number[];\n privatePEMOptions: { label: string };\n publicPEMOptions: { label: string };\n curve: elliptic.ec;\n};\n\nconst curves: Record<string, CurveOptions> = {\n secp256k1: {\n curveParameters: [1, 3, 132, 0, 10],\n privatePEMOptions: { label: \"EC PRIVATE KEY\" },\n publicPEMOptions: { label: \"PUBLIC KEY\" },\n curve: new elliptic.ec(\"secp256k1\"),\n },\n p256: {\n curveParameters: [1, 2, 840, 10045, 3, 1, 7], // OID for p256 curve\n privatePEMOptions: { label: \"EC PRIVATE KEY\" },\n publicPEMOptions: { label: \"PUBLIC KEY\" },\n curve: new elliptic.ec(\"p256\"),\n },\n};\n\ntype PrivateKeyPKCS1 = {\n version: BN;\n privateKey: Buffer;\n parameters: number[];\n publicKey?: {\n unused: number;\n data: Buffer;\n };\n};\n\ntype PrivateKeyPKCS8 = {\n version: BN;\n privateKey: PrivateKeyPKCS1;\n privateKeyAlgorithm: { ecPublicKey: number[]; curve: number[] };\n};\n\nexport type KeyFormat = \"raw\" | \"pem\" | \"der\";\n\nexport class KeyEncoder {\n algorithmID: number[];\n options: CurveOptions;\n\n constructor(options: string | CurveOptions) {\n if (typeof options === \"string\") {\n /* v8 ignore start */\n if (options !== \"secp256k1\" && options !== \"p256\") {\n throw new Error(\"Unknown curve \" + options);\n }\n /* v8 ignore stop */\n options = curves[options]!;\n }\n this.options = options;\n this.algorithmID = [1, 2, 840, 10045, 2, 1];\n }\n\n /* v8 ignore start */\n private PKCS1toPKCS8(privateKey: PrivateKeyPKCS1): PrivateKeyPKCS8 {\n return {\n version: new BN(0),\n privateKey,\n privateKeyAlgorithm: {\n ecPublicKey: this.algorithmID,\n curve: privateKey.parameters,\n },\n };\n }\n /* v8 ignore stop */\n\n privateKeyObject(rawPrivateKey: string, rawPublicKey: string): PrivateKeyPKCS1 {\n const privateKeyObject: PrivateKeyPKCS1 = {\n version: new BN(1),\n privateKey: Buffer.from(rawPrivateKey, \"hex\"),\n parameters: this.options.curveParameters,\n };\n\n if (rawPublicKey) {\n privateKeyObject.publicKey = {\n unused: 0,\n data: Buffer.from(rawPublicKey, \"hex\"),\n };\n }\n\n return privateKeyObject;\n }\n\n publicKeyObject(rawPublicKey: string): {\n algorithm: { id: number[]; curve: number[] };\n pub: { unused: number; data: Buffer };\n } {\n return {\n algorithm: {\n id: this.algorithmID,\n curve: this.options.curveParameters,\n },\n pub: {\n unused: 0,\n data: Buffer.from(rawPublicKey, \"hex\"),\n },\n };\n }\n\n encodePrivate(\n privateKey: string | Buffer,\n originalFormat: KeyFormat,\n destinationFormat: KeyFormat,\n destinationFormatType: \"pkcs8\" | \"pkcs1\" = \"pkcs1\",\n ): string {\n let privateKeyObject: PrivateKeyPKCS1;\n\n /* Parse the incoming private key and convert it to a private key object */\n switch (originalFormat) {\n case \"raw\": {\n if (typeof privateKey !== \"string\") {\n throw new Error(\"private key must be a string\");\n }\n const keyPair = this.options.curve.keyFromPrivate(privateKey, \"hex\");\n const rawPublicKey = keyPair.getPublic(\"hex\");\n privateKeyObject = this.privateKeyObject(privateKey, rawPublicKey);\n break;\n }\n case \"der\":\n if (typeof privateKey === \"string\") {\n privateKey = Buffer.from(privateKey, \"hex\");\n }\n privateKeyObject = ECPrivateKeyASN.decode(privateKey, \"der\");\n break;\n case \"pem\":\n if (typeof privateKey !== \"string\") {\n throw new Error(\"private key must be a string\");\n }\n privateKeyObject = ECPrivateKeyASN.decode(\n privateKey,\n \"pem\",\n this.options.privatePEMOptions,\n );\n break;\n /* v8 ignore start */\n default:\n throw new Error(\"invalid private key format\");\n /* v8 ignore stop */\n }\n\n /* Export the private key object to the desired format */\n switch (destinationFormat) {\n case \"raw\":\n if (destinationFormatType === \"pkcs1\") {\n return privateKeyObject.privateKey.toString(\"hex\");\n } else if (destinationFormatType === \"pkcs8\") {\n return this.PKCS1toPKCS8(privateKeyObject).privateKey.privateKey.toString(\"hex\");\n }\n break;\n case \"der\":\n if (destinationFormatType === \"pkcs1\") {\n return ECPrivateKeyASN.encode(privateKeyObject, \"der\").toString(\"hex\");\n } else if (destinationFormatType === \"pkcs8\") {\n return ECPrivateKey8ASN.encode(this.PKCS1toPKCS8(privateKeyObject), \"der\").toString(\n \"hex\",\n );\n }\n break;\n case \"pem\":\n if (destinationFormatType === \"pkcs1\") {\n return ECPrivateKeyASN.encode(privateKeyObject, \"pem\", this.options.privatePEMOptions);\n } else if (destinationFormatType === \"pkcs8\") {\n return ECPrivateKey8ASN.encode(this.PKCS1toPKCS8(privateKeyObject), \"pem\", {\n ...this.options.privatePEMOptions,\n label: \"PRIVATE KEY\",\n });\n }\n break;\n /* v8 ignore start */\n default:\n throw new Error(\"invalid destination format for private key\");\n /* v8 ignore stop */\n }\n\n throw new Error(\"unsupported destination format or type\");\n }\n\n encodePublic(\n publicKey: string | Buffer,\n originalFormat: KeyFormat,\n destinationFormat: KeyFormat,\n ): string {\n let publicKeyObject;\n\n switch (originalFormat) {\n case \"raw\":\n if (typeof publicKey !== \"string\") {\n throw new Error(\"public key must be a string\");\n }\n publicKeyObject = this.publicKeyObject(publicKey);\n break;\n case \"der\":\n if (typeof publicKey === \"string\") {\n publicKey = Buffer.from(publicKey, \"hex\");\n }\n publicKeyObject = SubjectPublicKeyInfoASN.decode(publicKey, \"der\");\n break;\n case \"pem\":\n if (typeof publicKey !== \"string\") {\n throw new Error(\"public key must be a string\");\n }\n publicKeyObject = SubjectPublicKeyInfoASN.decode(\n publicKey,\n \"pem\",\n this.options.publicPEMOptions,\n );\n break;\n /* v8 ignore start */\n default:\n throw new Error(\"invalid public key format\");\n /* v8 ignore stop */\n }\n\n /* Export the private key object to the desired format */\n switch (destinationFormat) {\n case \"raw\":\n return publicKeyObject.pub.data.toString(\"hex\");\n case \"der\":\n return SubjectPublicKeyInfoASN.encode(publicKeyObject, \"der\").toString(\"hex\");\n case \"pem\":\n return SubjectPublicKeyInfoASN.encode(\n publicKeyObject,\n \"pem\",\n this.options.publicPEMOptions,\n );\n /* v8 ignore start */\n default:\n throw new Error(\"invalid destination format for public key\");\n /* v8 ignore stop */\n }\n }\n}\n/* cspell:enable */\n"],"mappings":";AAAA,OAAO,YAAY;AACnB,OAAOA,eAAc;;;ACSrB,OAAO,UAAU;AACjB,OAAO,QAAQ;AACf,OAAO,cAAc;AAGrB,IAAM,kBAAkB,KAAK,OAAO,gBAAgB,WAAY;AAG9D,QAAM,OAAO;AACb,OACG,IAAI,EACJ;AAAA,IACC,KAAK,IAAI,SAAS,EAAE,IAAI;AAAA,IACxB,KAAK,IAAI,YAAY,EAAE,OAAO;AAAA,IAC9B,KAAK,IAAI,YAAY,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,SAAS;AAAA,IACpD,KAAK,IAAI,WAAW,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,SAAS;AAAA,EACtD;AACJ,CAAC;AAED,IAAM,mBAAmB,KAAK;AAAA,EAC5B;AAAA;AAAA,EAEA,WAAY;AAGV,UAAM,OAAO;AACb,SACG,IAAI,EACJ;AAAA,MACC,KAAK,IAAI,SAAS,EAAE,IAAI;AAAA,MACxB,KACG,IAAI,qBAAqB,EACzB,IAAI,EACJ,IAAI,KAAK,IAAI,aAAa,EAAE,MAAM,GAAG,KAAK,IAAI,OAAO,EAAE,MAAM,CAAC;AAAA,MACjE,KAAK,IAAI,YAAY,EAAE,OAAO,EAAE,SAAS,eAAe;AAAA,MACxD,KAAK,IAAI,YAAY,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,SAAS;AAAA,IACvD;AAAA,EACJ;AAAA;AAEF;AAEA,IAAM,0BAA0B,KAAK,OAAO,wBAAwB,WAAY;AAG9E,QAAM,OAAO;AACb,OACG,IAAI,EACJ;AAAA,IACC,KAAK,IAAI,WAAW,EAAE,IAAI,EAAE,IAAI,KAAK,IAAI,IAAI,EAAE,MAAM,GAAG,KAAK,IAAI,OAAO,EAAE,MAAM,CAAC;AAAA,IACjF,KAAK,IAAI,KAAK,EAAE,OAAO;AAAA,EACzB;AACJ,CAAC;AASD,IAAM,SAAuC;AAAA,EAC3C,WAAW;AAAA,IACT,iBAAiB,CAAC,GAAG,GAAG,KAAK,GAAG,EAAE;AAAA,IAClC,mBAAmB,EAAE,OAAO,iBAAiB;AAAA,IAC7C,kBAAkB,EAAE,OAAO,aAAa;AAAA,IACxC,OAAO,IAAI,SAAS,GAAG,WAAW;AAAA,EACpC;AAAA,EACA,MAAM;AAAA,IACJ,iBAAiB,CAAC,GAAG,GAAG,KAAK,OAAO,GAAG,GAAG,CAAC;AAAA;AAAA,IAC3C,mBAAmB,EAAE,OAAO,iBAAiB;AAAA,IAC7C,kBAAkB,EAAE,OAAO,aAAa;AAAA,IACxC,OAAO,IAAI,SAAS,GAAG,MAAM;AAAA,EAC/B;AACF;AAoBO,IAAM,aAAN,MAAiB;AAAA,EACtB;AAAA,EACA;AAAA,EAEA,YAAY,SAAgC;AAC1C,QAAI,OAAO,YAAY,UAAU;AAE/B,UAAI,YAAY,eAAe,YAAY,QAAQ;AACjD,cAAM,IAAI,MAAM,mBAAmB,OAAO;AAAA,MAC5C;AAEA,gBAAU,OAAO,OAAO;AAAA,IAC1B;AACA,SAAK,UAAU;AACf,SAAK,cAAc,CAAC,GAAG,GAAG,KAAK,OAAO,GAAG,CAAC;AAAA,EAC5C;AAAA;AAAA,EAGQ,aAAa,YAA8C;AACjE,WAAO;AAAA,MACL,SAAS,IAAI,GAAG,CAAC;AAAA,MACjB;AAAA,MACA,qBAAqB;AAAA,QACnB,aAAa,KAAK;AAAA,QAClB,OAAO,WAAW;AAAA,MACpB;AAAA,IACF;AAAA,EACF;AAAA;AAAA,EAGA,iBAAiB,eAAuB,cAAuC;AAC7E,UAAM,mBAAoC;AAAA,MACxC,SAAS,IAAI,GAAG,CAAC;AAAA,MACjB,YAAY,OAAO,KAAK,eAAe,KAAK;AAAA,MAC5C,YAAY,KAAK,QAAQ;AAAA,IAC3B;AAEA,QAAI,cAAc;AAChB,uBAAiB,YAAY;AAAA,QAC3B,QAAQ;AAAA,QACR,MAAM,OAAO,KAAK,cAAc,KAAK;AAAA,MACvC;AAAA,IACF;AAEA,WAAO;AAAA,EACT;AAAA,EAEA,gBAAgB,cAGd;AACA,WAAO;AAAA,MACL,WAAW;AAAA,QACT,IAAI,KAAK;AAAA,QACT,OAAO,KAAK,QAAQ;AAAA,MACtB;AAAA,MACA,KAAK;AAAA,QACH,QAAQ;AAAA,QACR,MAAM,OAAO,KAAK,cAAc,KAAK;AAAA,MACvC;AAAA,IACF;AAAA,EACF;AAAA,EAEA,cACE,YACA,gBACA,mBACA,wBAA2C,SACnC;AACR,QAAI;AAGJ,YAAQ,gBAAgB;AAAA,MACtB,KAAK,OAAO;AACV,YAAI,OAAO,eAAe,UAAU;AAClC,gBAAM,IAAI,MAAM,8BAA8B;AAAA,QAChD;AACA,cAAM,UAAU,KAAK,QAAQ,MAAM,eAAe,YAAY,KAAK;AACnE,cAAM,eAAe,QAAQ,UAAU,KAAK;AAC5C,2BAAmB,KAAK,iBAAiB,YAAY,YAAY;AACjE;AAAA,MACF;AAAA,MACA,KAAK;AACH,YAAI,OAAO,eAAe,UAAU;AAClC,uBAAa,OAAO,KAAK,YAAY,KAAK;AAAA,QAC5C;AACA,2BAAmB,gBAAgB,OAAO,YAAY,KAAK;AAC3D;AAAA,MACF,KAAK;AACH,YAAI,OAAO,eAAe,UAAU;AAClC,gBAAM,IAAI,MAAM,8BAA8B;AAAA,QAChD;AACA,2BAAmB,gBAAgB;AAAA,UACjC;AAAA,UACA;AAAA,UACA,KAAK,QAAQ;AAAA,QACf;AACA;AAAA;AAAA,MAEF;AACE,cAAM,IAAI,MAAM,4BAA4B;AAAA,IAEhD;AAGA,YAAQ,mBAAmB;AAAA,MACzB,KAAK;AACH,YAAI,0BAA0B,SAAS;AACrC,iBAAO,iBAAiB,WAAW,SAAS,KAAK;AAAA,QACnD,WAAW,0BAA0B,SAAS;AAC5C,iBAAO,KAAK,aAAa,gBAAgB,EAAE,WAAW,WAAW,SAAS,KAAK;AAAA,QACjF;AACA;AAAA,MACF,KAAK;AACH,YAAI,0BAA0B,SAAS;AACrC,iBAAO,gBAAgB,OAAO,kBAAkB,KAAK,EAAE,SAAS,KAAK;AAAA,QACvE,WAAW,0BAA0B,SAAS;AAC5C,iBAAO,iBAAiB,OAAO,KAAK,aAAa,gBAAgB,GAAG,KAAK,EAAE;AAAA,YACzE;AAAA,UACF;AAAA,QACF;AACA;AAAA,MACF,KAAK;AACH,YAAI,0BAA0B,SAAS;AACrC,iBAAO,gBAAgB,OAAO,kBAAkB,OAAO,KAAK,QAAQ,iBAAiB;AAAA,QACvF,WAAW,0BAA0B,SAAS;AAC5C,iBAAO,iBAAiB,OAAO,KAAK,aAAa,gBAAgB,GAAG,OAAO;AAAA,YACzE,GAAG,KAAK,QAAQ;AAAA,YAChB,OAAO;AAAA,UACT,CAAC;AAAA,QACH;AACA;AAAA;AAAA,MAEF;AACE,cAAM,IAAI,MAAM,4CAA4C;AAAA,IAEhE;AAEA,UAAM,IAAI,MAAM,wCAAwC;AAAA,EAC1D;AAAA,EAEA,aACE,WACA,gBACA,mBACQ;AACR,QAAI;AAEJ,YAAQ,gBAAgB;AAAA,MACtB,KAAK;AACH,YAAI,OAAO,cAAc,UAAU;AACjC,gBAAM,IAAI,MAAM,6BAA6B;AAAA,QAC/C;AACA,0BAAkB,KAAK,gBAAgB,SAAS;AAChD;AAAA,MACF,KAAK;AACH,YAAI,OAAO,cAAc,UAAU;AACjC,sBAAY,OAAO,KAAK,WAAW,KAAK;AAAA,QAC1C;AACA,0BAAkB,wBAAwB,OAAO,WAAW,KAAK;AACjE;AAAA,MACF,KAAK;AACH,YAAI,OAAO,cAAc,UAAU;AACjC,gBAAM,IAAI,MAAM,6BAA6B;AAAA,QAC/C;AACA,0BAAkB,wBAAwB;AAAA,UACxC;AAAA,UACA;AAAA,UACA,KAAK,QAAQ;AAAA,QACf;AACA;AAAA;AAAA,MAEF;AACE,cAAM,IAAI,MAAM,2BAA2B;AAAA,IAE/C;AAGA,YAAQ,mBAAmB;AAAA,MACzB,KAAK;AACH,eAAO,gBAAgB,IAAI,KAAK,SAAS,KAAK;AAAA,MAChD,KAAK;AACH,eAAO,wBAAwB,OAAO,iBAAiB,KAAK,EAAE,SAAS,KAAK;AAAA,MAC9E,KAAK;AACH,eAAO,wBAAwB;AAAA,UAC7B;AAAA,UACA;AAAA,UACA,KAAK,QAAQ;AAAA,QACf;AAAA;AAAA,MAEF;AACE,cAAM,IAAI,MAAM,2CAA2C;AAAA,IAE/D;AAAA,EACF;AACF;;;ADpSA,SAAS,iBAAiB,QAAwB;AAGhD,QAAM,MAAM,OAAO,MAAM,IAAI;AAC7B,MAAI,MAAM;AACV,MAAI,IAAI;AAER,QAAM,YAAY,OAAO,KAAK,IAAI,KAAK,EAAE,GAAG,QAAQ;AAGpD,QAAM,kBAAkB,UAAU,MAAM,EAAE;AAC1C,SAAO,gBAAgB,SAAS,KAAK,EAAE,YAAY;AACrD;AAEA,SAAS,SAAS,WAAmB,EAAE,YAAY,KAAK,IAAI,CAAC,GAAW;AACtE,QAAM,aAAa,IAAI,WAAW,MAAM;AACxC,MAAI,WAAW;AACb,WAAO,WAAW,cAAc,WAAW,OAAO,KAAK;AAAA,EACzD;AACA,SAAO,WAAW,aAAa,WAAW,OAAO,KAAK;AACxD;AAMO,SAAS,QAAQ,SAAiC;AACvD,MAAI,SAAS;AACX,UAAM,KAAK,IAAIC,UAAS,GAAG,MAAM;AACjC,UAAM,gBAAgB,OAAO,WAAW,QAAQ,EAAE,OAAO,OAAO,EAAE,OAAO,KAAK;AAC9E,UAAM,UAAU,GAAG,WAAW;AAAA,MAC5B,SAAS,OAAO,KAAK,eAAe,KAAK;AAAA,IAC3C,CAAC;AACD,WAAO;AAAA,MACL,YAAY,OAAO,SAAS,QAAQ,WAAW,KAAK,CAAC,CAAC;AAAA,MACtD,WAAW,OAAO,SAAS,QAAQ,UAAU,KAAK,GAAG,EAAE,WAAW,MAAM,CAAC,CAAC;AAAA,MAC1E,WAAW,iBAAiB,OAAO,SAAS,QAAQ,UAAU,KAAK,GAAG,EAAE,WAAW,MAAM,CAAC,CAAC,CAAC;AAAA,IAC9F;AAAA,EACF;AACA,QAAM,EAAE,WAAW,WAAW,IAAI,OAAO,oBAAoB,MAAM;AAAA,IACjE,YAAY;AAAA,IACZ,mBAAmB,EAAE,MAAM,QAAQ,QAAQ,MAAM;AAAA,IACjD,oBAAoB,EAAE,MAAM,QAAQ,QAAQ,MAAM;AAAA,EACpD,CAAC;AACD,QAAM,YAAY,iBAAiB,SAAS;AAC5C,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,EACF;AACF;","names":["elliptic","elliptic"]}