@matter/protocol 0.11.0-alpha.0-20241005-e3e4e4a7a

package/dist/esm/fabric/Fabric.js

@@ -0,0 +1,422 @@
+/**
+ * @license
+ * Copyright 2022-2024 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import {
+  CertificateManager,
+  TlvIntermediateCertificate,
+  TlvOperationalCertificate,
+  TlvRootCertificate
+} from "#certificate/CertificateManager.js";
+import { GroupKeyManagement } from "#clusters/group-key-management";
+import {
+  Bytes,
+  Crypto,
+  DataWriter,
+  Endian,
+  InternalError,
+  Logger,
+  MatterError,
+  MatterFlowError,
+  PrivateKey
+} from "#general";
+import { PeerAddress } from "#peer/PeerAddress.js";
+import { CaseAuthenticatedTag, FabricId } from "#types";
+const logger = Logger.get("Fabric");
+const COMPRESSED_FABRIC_ID_INFO = Bytes.fromString("CompressedFabric");
+const GROUP_SECURITY_INFO = Bytes.fromString("GroupKey v1.0");
+class PublicKeyError extends MatterError {
+}
+var OperationalGroupKeySet;
+((OperationalGroupKeySet2) => {
+  OperationalGroupKeySet2.asTlvGroupSet = (operationalGroupSet) => {
+    const {
+      groupKeySetId,
+      epochKey0,
+      epochStartTime0,
+      epochKey1,
+      epochStartTime1,
+      epochKey2,
+      epochStartTime2,
+      groupKeySecurityPolicy,
+      groupKeyMulticastPolicy
+    } = operationalGroupSet;
+    return {
+      groupKeySetId,
+      epochKey0,
+      epochStartTime0,
+      epochKey1,
+      epochStartTime1,
+      epochKey2,
+      epochStartTime2,
+      groupKeySecurityPolicy,
+      groupKeyMulticastPolicy
+    };
+  };
+})(OperationalGroupKeySet || (OperationalGroupKeySet = {}));
+class Fabric {
+  constructor(fabricIndex, fabricId, nodeId, rootNodeId, operationalId, rootPublicKey, keyPair, rootVendorId, rootCert, identityProtectionKey, operationalIdentityProtectionKey, intermediateCACert, operationalCert, label, scopedClusterData) {
+    this.fabricIndex = fabricIndex;
+    this.fabricId = fabricId;
+    this.nodeId = nodeId;
+    this.rootNodeId = rootNodeId;
+    this.operationalId = operationalId;
+    this.rootPublicKey = rootPublicKey;
+    this.rootVendorId = rootVendorId;
+    this.rootCert = rootCert;
+    this.identityProtectionKey = identityProtectionKey;
+    this.operationalIdentityProtectionKey = operationalIdentityProtectionKey;
+    this.intermediateCACert = intermediateCACert;
+    this.operationalCert = operationalCert;
+    this.label = label;
+    this.#keyPair = keyPair;
+    this.#scopedClusterData = scopedClusterData ?? /* @__PURE__ */ new Map();
+  }
+  #sessions = /* @__PURE__ */ new Set();
+  #scopedClusterData;
+  #keyPair;
+  #removeCallbacks = new Array();
+  #persistCallback;
+  toStorageObject() {
+    return {
+      fabricIndex: this.fabricIndex,
+      fabricId: this.fabricId,
+      nodeId: this.nodeId,
+      rootNodeId: this.rootNodeId,
+      operationalId: this.operationalId,
+      rootPublicKey: this.rootPublicKey,
+      keyPair: this.#keyPair.keyPair,
+      rootVendorId: this.rootVendorId,
+      rootCert: this.rootCert,
+      identityProtectionKey: this.identityProtectionKey,
+      operationalIdentityProtectionKey: this.operationalIdentityProtectionKey,
+      intermediateCACert: this.intermediateCACert,
+      operationalCert: this.operationalCert,
+      label: this.label,
+      scopedClusterData: this.#scopedClusterData
+    };
+  }
+  static createFromStorageObject(fabricObject) {
+    return new Fabric(
+      fabricObject.fabricIndex,
+      fabricObject.fabricId,
+      fabricObject.nodeId,
+      fabricObject.rootNodeId,
+      fabricObject.operationalId,
+      fabricObject.rootPublicKey,
+      PrivateKey(fabricObject.keyPair),
+      fabricObject.rootVendorId,
+      fabricObject.rootCert,
+      fabricObject.identityProtectionKey,
+      fabricObject.operationalIdentityProtectionKey,
+      fabricObject.intermediateCACert,
+      fabricObject.operationalCert,
+      fabricObject.label,
+      fabricObject.scopedClusterData
+    );
+  }
+  async setLabel(label) {
+    this.label = label;
+    await this.persist();
+  }
+  get publicKey() {
+    return this.#keyPair.publicKey;
+  }
+  sign(data) {
+    return Crypto.sign(this.#keyPair, data);
+  }
+  verifyCredentials(operationalCert, intermediateCACert) {
+    if (intermediateCACert === void 0) {
+      CertificateManager.verifyNodeOperationalCertificate(
+        TlvRootCertificate.decode(this.rootCert),
+        TlvOperationalCertificate.decode(operationalCert)
+      );
+    } else {
+      const decodedIcaCert = TlvIntermediateCertificate.decode(intermediateCACert);
+      CertificateManager.verifyNodeOperationalCertificate(
+        decodedIcaCert,
+        TlvOperationalCertificate.decode(operationalCert)
+      );
+      CertificateManager.verifyIntermediateCaCertificate(
+        TlvRootCertificate.decode(this.rootCert),
+        decodedIcaCert
+      );
+    }
+  }
+  matchesFabricIdAndRootPublicKey(fabricId, rootPublicKey) {
+    return this.fabricId === fabricId && Bytes.areEqual(this.rootPublicKey, rootPublicKey);
+  }
+  matchesKeyPair(keyPair) {
+    return Bytes.areEqual(this.#keyPair.publicKey, keyPair.publicKey) && Bytes.areEqual(this.#keyPair.privateKey, keyPair.privateKey);
+  }
+  getDestinationId(nodeId, random) {
+    const writer = new DataWriter(Endian.Little);
+    writer.writeByteArray(random);
+    writer.writeByteArray(this.rootPublicKey);
+    writer.writeUInt64(this.fabricId);
+    writer.writeUInt64(nodeId);
+    return Crypto.hmac(this.operationalIdentityProtectionKey, writer.toByteArray());
+  }
+  addSession(session) {
+    this.#sessions.add(session);
+  }
+  removeSession(session) {
+    this.#sessions.delete(session);
+  }
+  addRemoveCallback(callback) {
+    this.#removeCallbacks.push(callback);
+  }
+  deleteRemoveCallback(callback) {
+    const index = this.#removeCallbacks.indexOf(callback);
+    if (index >= 0) {
+      this.#removeCallbacks.splice(index, 1);
+    }
+  }
+  set persistCallback(callback) {
+    this.#persistCallback = callback;
+  }
+  async remove(currentSessionId) {
+    for (const callback of this.#removeCallbacks) {
+      await callback();
+    }
+    for (const session of [...this.#sessions]) {
+      await session.destroy(false, session.id === currentSessionId);
+    }
+  }
+  persist(isUpdate = true) {
+    return this.#persistCallback?.(isUpdate);
+  }
+  getScopedClusterDataValue(cluster, clusterDataKey) {
+    const dataMap = this.#scopedClusterData.get(cluster.id);
+    if (dataMap === void 0) {
+      return void 0;
+    }
+    return dataMap.get(clusterDataKey);
+  }
+  setScopedClusterDataValue(cluster, clusterDataKey, value) {
+    if (!this.#scopedClusterData.has(cluster.id)) {
+      this.#scopedClusterData.set(cluster.id, /* @__PURE__ */ new Map());
+    }
+    this.#scopedClusterData.get(cluster.id).set(clusterDataKey, value);
+    return this.persist(false);
+  }
+  deleteScopedClusterDataValue(cluster, clusterDataKey) {
+    if (!this.#scopedClusterData.has(cluster.id)) {
+      return;
+    }
+    this.#scopedClusterData.get(cluster.id).delete(clusterDataKey);
+    return this.persist(false);
+  }
+  hasScopedClusterDataValue(cluster, clusterDataKey) {
+    return this.#scopedClusterData.has(cluster.id) && this.#scopedClusterData.get(cluster.id).has(clusterDataKey);
+  }
+  deleteScopedClusterData(cluster) {
+    this.#scopedClusterData.delete(cluster.id);
+    return this.persist(false);
+  }
+  getScopedClusterDataKeys(cluster) {
+    if (!this.#scopedClusterData.has(cluster.id)) {
+      return [];
+    }
+    return Array.from(this.#scopedClusterData.get(cluster.id).keys());
+  }
+  getGroupKeySet(groupKeySetId) {
+    if (groupKeySetId === 0) {
+      return OperationalGroupKeySet.asTlvGroupSet(this.getGroupSetForIpk());
+    }
+    return void 0;
+  }
+  getGroupSetForIpk() {
+    return {
+      groupKeySetId: 0,
+      epochKey0: this.identityProtectionKey,
+      operationalEpochKey0: this.operationalIdentityProtectionKey,
+      epochStartTime0: 0,
+      // or do we need to track Fabric creation date?
+      groupSessionId0: null,
+      epochKey1: null,
+      operationalEpochKey1: null,
+      epochStartTime1: null,
+      groupSessionId1: null,
+      epochKey2: null,
+      operationalEpochKey2: null,
+      epochStartTime2: null,
+      groupSessionId2: null,
+      groupKeySecurityPolicy: GroupKeyManagement.GroupKeySecurityPolicy.TrustFirst,
+      groupKeyMulticastPolicy: GroupKeyManagement.GroupKeyMulticastPolicy.PerGroupId
+    };
+  }
+  getAllGroupKeySets() {
+    return [OperationalGroupKeySet.asTlvGroupSet(this.getGroupSetForIpk())];
+  }
+  get externalInformation() {
+    return {
+      fabricIndex: this.fabricIndex,
+      fabricId: this.fabricId,
+      nodeId: this.nodeId,
+      rootNodeId: this.rootNodeId,
+      rootVendorId: this.rootVendorId,
+      label: this.label
+    };
+  }
+  addressOf(nodeId) {
+    return PeerAddress({ fabricIndex: this.fabricIndex, nodeId });
+  }
+}
+class FabricBuilder {
+  #keyPair = Crypto.createKeyPair();
+  #rootVendorId;
+  #rootCert;
+  #intermediateCACert;
+  #operationalCert;
+  #fabricId;
+  #nodeId;
+  #rootNodeId;
+  #rootPublicKey;
+  #identityProtectionKey;
+  #fabricIndex;
+  #label = "";
+  get publicKey() {
+    return this.#keyPair.publicKey;
+  }
+  get fabricIndex() {
+    return this.#fabricIndex;
+  }
+  createCertificateSigningRequest() {
+    return CertificateManager.createCertificateSigningRequest(this.#keyPair);
+  }
+  setRootCert(rootCert) {
+    const decodedRootCertificate = TlvRootCertificate.decode(rootCert);
+    CertificateManager.verifyRootCertificate(decodedRootCertificate);
+    this.#rootCert = rootCert;
+    this.#rootPublicKey = decodedRootCertificate.ellipticCurvePublicKey;
+    return this;
+  }
+  // TODO Remove when legacy API gets removed because then no longer needed
+  get rootCert() {
+    return this.#rootCert;
+  }
+  hasRootCert() {
+    return this.#rootCert !== void 0;
+  }
+  setOperationalCert(operationalCert, intermediateCACert) {
+    if (intermediateCACert !== void 0 && intermediateCACert.length === 0) {
+      intermediateCACert = void 0;
+    }
+    const {
+      subject: { nodeId, fabricId, caseAuthenticatedTags },
+      ellipticCurvePublicKey
+    } = TlvOperationalCertificate.decode(operationalCert);
+    logger.debug(
+      `FabricBuilder setOperationalCert: nodeId=${nodeId}, fabricId=${fabricId}, caseAuthenticatedTags=${caseAuthenticatedTags}`
+    );
+    if (caseAuthenticatedTags !== void 0) {
+      CaseAuthenticatedTag.validateNocTagList(caseAuthenticatedTags);
+    }
+    if (!Bytes.areEqual(ellipticCurvePublicKey, this.#keyPair.publicKey)) {
+      throw new PublicKeyError("Operational Certificate does not match public key.");
+    }
+    if (this.#rootCert === void 0) {
+      throw new MatterFlowError("Root Certificate needs to be set first.");
+    }
+    if (intermediateCACert !== void 0) {
+      const decodedIntermediateCACert = TlvIntermediateCertificate.decode(intermediateCACert);
+      CertificateManager.verifyIntermediateCaCertificate(
+        TlvRootCertificate.decode(this.#rootCert),
+        decodedIntermediateCACert
+      );
+      CertificateManager.verifyNodeOperationalCertificate(
+        decodedIntermediateCACert,
+        TlvOperationalCertificate.decode(operationalCert)
+      );
+    } else {
+      CertificateManager.verifyNodeOperationalCertificate(
+        TlvRootCertificate.decode(this.#rootCert),
+        TlvOperationalCertificate.decode(operationalCert)
+      );
+    }
+    this.#operationalCert = operationalCert;
+    this.#intermediateCACert = intermediateCACert;
+    this.#fabricId = FabricId(fabricId);
+    this.#nodeId = nodeId;
+    return this;
+  }
+  setRootVendorId(rootVendorId) {
+    this.#rootVendorId = rootVendorId;
+    return this;
+  }
+  setRootNodeId(rootNodeId) {
+    this.#rootNodeId = rootNodeId;
+    return this;
+  }
+  setIdentityProtectionKey(key) {
+    this.#identityProtectionKey = key;
+    return this;
+  }
+  initializeFromFabricForUpdate(fabric) {
+    this.#rootVendorId = fabric.rootVendorId;
+    this.#rootNodeId = fabric.rootNodeId;
+    this.#identityProtectionKey = fabric.identityProtectionKey;
+    this.#rootCert = fabric.rootCert;
+    this.#rootPublicKey = fabric.rootPublicKey;
+    this.#label = fabric.label;
+  }
+  matchesToFabric(fabric) {
+    if (this.#fabricId === void 0 || this.#rootPublicKey === void 0) {
+      throw new MatterFlowError("Node Operational Data needs to be set first.");
+    }
+    return fabric.matchesFabricIdAndRootPublicKey(this.#fabricId, this.#rootPublicKey);
+  }
+  get nodeId() {
+    return this.#nodeId;
+  }
+  get fabricId() {
+    return this.#fabricId;
+  }
+  get keyPair() {
+    return this.#keyPair;
+  }
+  async build(fabricIndex) {
+    if (this.#fabricIndex !== void 0) throw new InternalError("FabricBuilder can only be built once");
+    if (this.#rootNodeId === void 0) throw new InternalError("rootNodeId needs to be set");
+    if (this.#rootVendorId === void 0) throw new InternalError("vendorId needs to be set");
+    if (this.#rootCert === void 0 || this.#rootPublicKey === void 0)
+      throw new InternalError("rootCert needs to be set");
+    if (this.#identityProtectionKey === void 0) throw new InternalError("identityProtectionKey needs to be set");
+    if (this.#operationalCert === void 0 || this.#fabricId === void 0 || this.#nodeId === void 0)
+      throw new InternalError("operationalCert needs to be set");
+    this.#fabricIndex = fabricIndex;
+    const saltWriter = new DataWriter(Endian.Big);
+    saltWriter.writeUInt64(this.#fabricId);
+    const operationalId = await Crypto.hkdf(
+      this.#rootPublicKey.slice(1),
+      saltWriter.toByteArray(),
+      COMPRESSED_FABRIC_ID_INFO,
+      8
+    );
+    return new Fabric(
+      this.#fabricIndex,
+      this.#fabricId,
+      this.#nodeId,
+      this.#rootNodeId,
+      operationalId,
+      this.#rootPublicKey,
+      this.#keyPair,
+      this.#rootVendorId,
+      this.#rootCert,
+      this.#identityProtectionKey,
+      // Epoch Key
+      await Crypto.hkdf(this.#identityProtectionKey, operationalId, GROUP_SECURITY_INFO),
+      this.#intermediateCACert,
+      this.#operationalCert,
+      this.#label
+    );
+  }
+}
+export {
+  Fabric,
+  FabricBuilder,
+  PublicKeyError
+};
+//# sourceMappingURL=Fabric.js.map

package/dist/esm/fabric/Fabric.js.map

@@ -0,0 +1,6 @@
+{
+  "version": 3,
+  "sources": ["../../../src/fabric/Fabric.ts"],
+  "mappings": "AAAA;AAAA;AAAA;AAAA;AAAA;AAMA;AAAA,EACI;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACG;AACP,SAAS,0BAA0B;AACnC;AAAA,EAEI;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,EACA;AAAA,EACA;AAAA,EAEA;AAAA,OAEG;AACP,SAAS,mBAAmB;AAC5B,SAAS,sBAA+B,gBAA+D;AAGvG,MAAM,SAAS,OAAO,IAAI,QAAQ;AAElC,MAAM,4BAA4B,MAAM,WAAW,kBAAkB;AACrE,MAAM,sBAAsB,MAAM,WAAW,eAAe;AAErD,MAAM,uBAAuB,YAAY;AAAC;AA6BjD,IAAU;AAAA,CAAV,CAAUA,4BAAV;AACW,EAAMA,wBAAA,gBAAgB,CACzB,wBAC2D;AAC3D,UAAM;AAAA,MACF;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ,IAAI;AACJ,WAAO;AAAA,MACH;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACJ;AAAA,EACJ;AAAA,GA1BM;AAsCH,MAAM,OAAO;AAAA,EAShB,YACa,aACA,UACA,QACA,YACA,eACA,eACT,SACS,cACA,UACA,uBACA,kCACA,oBACA,iBACF,OACP,mBACF;AAfW;AACA;AACA;AACA;AACA;AACA;AAEA;AACA;AACA;AACA;AACA;AACA;AACF;AAGP,SAAK,WAAW;AAChB,SAAK,qBAAqB,qBAAqB,oBAAI,IAAgD;AAAA,EACvG;AAAA,EA3BS,YAAY,oBAAI,IAAmB;AAAA,EACnC;AAAA,EAEA;AAAA,EAET,mBAAmB,IAAI,MAAgC;AAAA,EACvD;AAAA,EAuBA,kBAAoC;AAChC,WAAO;AAAA,MACH,aAAa,KAAK;AAAA,MAClB,UAAU,KAAK;AAAA,MACf,QAAQ,KAAK;AAAA,MACb,YAAY,KAAK;AAAA,MACjB,eAAe,KAAK;AAAA,MACpB,eAAe,KAAK;AAAA,MACpB,SAAS,KAAK,SAAS;AAAA,MACvB,cAAc,KAAK;AAAA,MACnB,UAAU,KAAK;AAAA,MACf,uBAAuB,KAAK;AAAA,MAC5B,kCAAkC,KAAK;AAAA,MACvC,oBAAoB,KAAK;AAAA,MACzB,iBAAiB,KAAK;AAAA,MACtB,OAAO,KAAK;AAAA,MACZ,mBAAmB,KAAK;AAAA,IAC5B;AAAA,EACJ;AAAA,EAEA,OAAO,wBAAwB,cAAwC;AACnE,WAAO,IAAI;AAAA,MACP,aAAa;AAAA,MACb,aAAa;AAAA,MACb,aAAa;AAAA,MACb,aAAa;AAAA,MACb,aAAa;AAAA,MACb,aAAa;AAAA,MACb,WAAW,aAAa,OAAO;AAAA,MAC/B,aAAa;AAAA,MACb,aAAa;AAAA,MACb,aAAa;AAAA,MACb,aAAa;AAAA,MACb,aAAa;AAAA,MACb,aAAa;AAAA,MACb,aAAa;AAAA,MACb,aAAa;AAAA,IACjB;AAAA,EACJ;AAAA,EAEA,MAAM,SAAS,OAAe;AAC1B,SAAK,QAAQ;AACb,UAAM,KAAK,QAAQ;AAAA,EACvB;AAAA,EAEA,IAAI,YAAY;AACZ,WAAO,KAAK,SAAS;AAAA,EACzB;AAAA,EAEA,KAAK,MAAkB;AACnB,WAAO,OAAO,KAAK,KAAK,UAAU,IAAI;AAAA,EAC1C;AAAA,EAEA,kBAAkB,iBAA6B,oBAAiC;AAC5E,QAAI,uBAAuB,QAAW;AAElC,yBAAmB;AAAA,QACf,mBAAmB,OAAO,KAAK,QAAQ;AAAA,QACvC,0BAA0B,OAAO,eAAe;AAAA,MACpD;AAAA,IACJ,OAAO;AACH,YAAM,iBAAiB,2BAA2B,OAAO,kBAAkB;AAE3E,yBAAmB;AAAA,QACf;AAAA,QACA,0BAA0B,OAAO,eAAe;AAAA,MACpD;AAGA,yBAAmB;AAAA,QACf,mBAAmB,OAAO,KAAK,QAAQ;AAAA,QACvC;AAAA,MACJ;AAAA,IACJ;AAAA,EACJ;AAAA,EAEA,gCAAgC,UAAoB,eAA2B;AAC3E,WAAO,KAAK,aAAa,YAAY,MAAM,SAAS,KAAK,eAAe,aAAa;AAAA,EACzF;AAAA,EAEA,eAAe,SAAc;AACzB,WACI,MAAM,SAAS,KAAK,SAAS,WAAW,QAAQ,SAAS,KACzD,MAAM,SAAS,KAAK,SAAS,YAAY,QAAQ,UAAU;AAAA,EAEnE;AAAA,EAEA,iBAAiB,QAAgB,QAAoB;AACjD,UAAM,SAAS,IAAI,WAAW,OAAO,MAAM;AAC3C,WAAO,eAAe,MAAM;AAC5B,WAAO,eAAe,KAAK,aAAa;AACxC,WAAO,YAAY,KAAK,QAAQ;AAChC,WAAO,YAAY,MAAM;AACzB,WAAO,OAAO,KAAK,KAAK,kCAAkC,OAAO,YAAY,CAAC;AAAA,EAClF;AAAA,EAEA,WAAW,SAAwB;AAC/B,SAAK,UAAU,IAAI,OAAO;AAAA,EAC9B;AAAA,EAEA,cAAc,SAAwB;AAClC,SAAK,UAAU,OAAO,OAAO;AAAA,EACjC;AAAA,EAEA,kBAAkB,UAAoC;AAClD,SAAK,iBAAiB,KAAK,QAAQ;AAAA,EACvC;AAAA,EAEA,qBAAqB,UAAoC;AACrD,UAAM,QAAQ,KAAK,iBAAiB,QAAQ,QAAQ;AACpD,QAAI,SAAS,GAAG;AACZ,WAAK,iBAAiB,OAAO,OAAO,CAAC;AAAA,IACzC;AAAA,EACJ;AAAA,EAEA,IAAI,gBAAgB,UAAsD;AAEtE,SAAK,mBAAmB;AAAA,EAC5B;AAAA,EAEA,MAAM,OAAO,kBAA2B;AACpC,eAAW,YAAY,KAAK,kBAAkB;AAC1C,YAAM,SAAS;AAAA,IACnB;AACA,eAAW,WAAW,CAAC,GAAG,KAAK,SAAS,GAAG;AACvC,YAAM,QAAQ,QAAQ,OAAO,QAAQ,OAAO,gBAAgB;AAAA,IAChE;AAAA,EACJ;AAAA,EAEA,QAAQ,WAAW,MAAM;AACrB,WAAO,KAAK,mBAAmB,QAAQ;AAAA,EAC3C;AAAA,EAEA,0BAA6B,SAA2C,gBAAuC;AAC3G,UAAM,UAAU,KAAK,mBAAmB,IAAI,QAAQ,EAAE;AACtD,QAAI,YAAY,QAAW;AACvB,aAAO;AAAA,IACX;AACA,WAAO,QAAQ,IAAI,cAAc;AAAA,EACrC;AAAA,EAEA,0BAA6B,SAA2C,gBAAwB,OAAU;AACtG,QAAI,CAAC,KAAK,mBAAmB,IAAI,QAAQ,EAAE,GAAG;AAC1C,WAAK,mBAAmB,IAAI,QAAQ,IAAI,oBAAI,IAAmC,CAAC;AAAA,IACpF;AACA,SAAK,mBAAmB,IAAI,QAAQ,EAAE,EAAE,IAAI,gBAAgB,KAAK;AACjE,WAAO,KAAK,QAAQ,KAAK;AAAA,EAC7B;AAAA,EAEA,6BAA6B,SAA2C,gBAAwB;AAC5F,QAAI,CAAC,KAAK,mBAAmB,IAAI,QAAQ,EAAE,GAAG;AAC1C;AAAA,IACJ;AACA,SAAK,mBAAmB,IAAI,QAAQ,EAAE,EAAE,OAAO,cAAc;AAC7D,WAAO,KAAK,QAAQ,KAAK;AAAA,EAC7B;AAAA,EAEA,0BAA0B,SAA2C,gBAAwB;AACzF,WAAO,KAAK,mBAAmB,IAAI,QAAQ,EAAE,KAAK,KAAK,mBAAmB,IAAI,QAAQ,EAAE,EAAE,IAAI,cAAc;AAAA,EAChH;AAAA,EAEA,wBAAwB,SAA2C;AAC/D,SAAK,mBAAmB,OAAO,QAAQ,EAAE;AACzC,WAAO,KAAK,QAAQ,KAAK;AAAA,EAC7B;AAAA,EAEA,yBAAyB,SAAqD;AAC1E,QAAI,CAAC,KAAK,mBAAmB,IAAI,QAAQ,EAAE,GAAG;AAC1C,aAAO,CAAC;AAAA,IACZ;AACA,WAAO,MAAM,KAAK,KAAK,mBAAmB,IAAI,QAAQ,EAAE,EAAE,KAAK,CAAC;AAAA,EACpE;AAAA,EAEA,eAAe,eAAuB;AAClC,QAAI,kBAAkB,GAAG;AACrB,aAAO,uBAAuB,cAAc,KAAK,kBAAkB,CAAC;AAAA,IACxE;AAEA,WAAO;AAAA,EACX;AAAA,EAEQ,oBAA4C;AAChD,WAAO;AAAA,MACH,eAAe;AAAA,MACf,WAAW,KAAK;AAAA,MAChB,sBAAsB,KAAK;AAAA,MAC3B,iBAAiB;AAAA;AAAA,MACjB,iBAAiB;AAAA,MACjB,WAAW;AAAA,MACX,sBAAsB;AAAA,MACtB,iBAAiB;AAAA,MACjB,iBAAiB;AAAA,MACjB,WAAW;AAAA,MACX,sBAAsB;AAAA,MACtB,iBAAiB;AAAA,MACjB,iBAAiB;AAAA,MACjB,wBAAwB,mBAAmB,uBAAuB;AAAA,MAClE,yBAAyB,mBAAmB,wBAAwB;AAAA,IACxE;AAAA,EACJ;AAAA,EAEA,qBAAqB;AAEjB,WAAO,CAAC,uBAAuB,cAAc,KAAK,kBAAkB,CAAC,CAAC;AAAA,EAC1E;AAAA,EAEA,IAAI,sBAAgD;AAChD,WAAO;AAAA,MACH,aAAa,KAAK;AAAA,MAClB,UAAU,KAAK;AAAA,MACf,QAAQ,KAAK;AAAA,MACb,YAAY,KAAK;AAAA,MACjB,cAAc,KAAK;AAAA,MACnB,OAAO,KAAK;AAAA,IAChB;AAAA,EACJ;AAAA,EAEA,UAAU,QAAgB;AACtB,WAAO,YAAY,EAAE,aAAa,KAAK,aAAa,OAAO,CAAC;AAAA,EAChE;AACJ;AAEO,MAAM,cAAc;AAAA,EACvB,WAAW,OAAO,cAAc;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA,SAAS;AAAA,EAET,IAAI,YAAY;AACZ,WAAO,KAAK,SAAS;AAAA,EACzB;AAAA,EAEA,IAAI,cAAc;AACd,WAAO,KAAK;AAAA,EAChB;AAAA,EAEA,kCAAkC;AAC9B,WAAO,mBAAmB,gCAAgC,KAAK,QAAQ;AAAA,EAC3E;AAAA,EAEA,YAAY,UAAsB;AAC9B,UAAM,yBAAyB,mBAAmB,OAAO,QAAQ;AACjE,uBAAmB,sBAAsB,sBAAsB;AAC/D,SAAK,YAAY;AACjB,SAAK,iBAAiB,uBAAuB;AAC7C,WAAO;AAAA,EACX;AAAA;AAAA,EAGA,IAAI,WAAW;AACX,WAAO,KAAK;AAAA,EAChB;AAAA,EAEA,cAAc;AACV,WAAO,KAAK,cAAc;AAAA,EAC9B;AAAA,EAEA,mBAAmB,iBAA6B,oBAAiC;AAC7E,QAAI,uBAAuB,UAAa,mBAAmB,WAAW,GAAG;AACrE,2BAAqB;AAAA,IACzB;AACA,UAAM;AAAA,MACF,SAAS,EAAE,QAAQ,UAAU,sBAAsB;AAAA,MACnD;AAAA,IACJ,IAAI,0BAA0B,OAAO,eAAe;AACpD,WAAO;AAAA,MACH,4CAA4C,MAAM,cAAc,QAAQ,2BAA2B,qBAAqB;AAAA,IAC5H;AACA,QAAI,0BAA0B,QAAW;AACrC,2BAAqB,mBAAmB,qBAAqB;AAAA,IACjE;AAEA,QAAI,CAAC,MAAM,SAAS,wBAAwB,KAAK,SAAS,SAAS,GAAG;AAClE,YAAM,IAAI,eAAe,oDAAoD;AAAA,IACjF;AAEA,QAAI,KAAK,cAAc,QAAW;AAC9B,YAAM,IAAI,gBAAgB,yCAAyC;AAAA,IACvE;AAEA,QAAI,uBAAuB,QAAW;AAClC,YAAM,4BAA4B,2BAA2B,OAAO,kBAAkB;AACtF,yBAAmB;AAAA,QACf,mBAAmB,OAAO,KAAK,SAAS;AAAA,QACxC;AAAA,MACJ;AACA,yBAAmB;AAAA,QACf;AAAA,QACA,0BAA0B,OAAO,eAAe;AAAA,MACpD;AAAA,IACJ,OAAO;AACH,yBAAmB;AAAA,QACf,mBAAmB,OAAO,KAAK,SAAS;AAAA,QACxC,0BAA0B,OAAO,eAAe;AAAA,MACpD;AAAA,IACJ;AAEA,SAAK,mBAAmB;AACxB,SAAK,sBAAsB;AAC3B,SAAK,YAAY,SAAS,QAAQ;AAClC,SAAK,UAAU;AAEf,WAAO;AAAA,EACX;AAAA,EAEA,gBAAgB,cAAwB;AACpC,SAAK,gBAAgB;AACrB,WAAO;AAAA,EACX;AAAA,EAEA,cAAc,YAAoB;AAC9B,SAAK,cAAc;AACnB,WAAO;AAAA,EACX;AAAA,EAEA,yBAAyB,KAAiB;AACtC,SAAK,yBAAyB;AAC9B,WAAO;AAAA,EACX;AAAA,EAEA,8BAA8B,QAAgB;AAC1C,SAAK,gBAAgB,OAAO;AAC5B,SAAK,cAAc,OAAO;AAC1B,SAAK,yBAAyB,OAAO;AACrC,SAAK,YAAY,OAAO;AACxB,SAAK,iBAAiB,OAAO;AAC7B,SAAK,SAAS,OAAO;AAAA,EACzB;AAAA,EAEA,gBAAgB,QAAgB;AAC5B,QAAI,KAAK,cAAc,UAAa,KAAK,mBAAmB,QAAW;AACnE,YAAM,IAAI,gBAAgB,8CAA8C;AAAA,IAC5E;AACA,WAAO,OAAO,gCAAgC,KAAK,WAAW,KAAK,cAAc;AAAA,EACrF;AAAA,EAEA,IAAI,SAAS;AACT,WAAO,KAAK;AAAA,EAChB;AAAA,EAEA,IAAI,WAAW;AACX,WAAO,KAAK;AAAA,EAChB;AAAA,EAEA,IAAI,UAAU;AACV,WAAO,KAAK;AAAA,EAChB;AAAA,EAEA,MAAM,MAAM,aAA0B;AAClC,QAAI,KAAK,iBAAiB,OAAW,OAAM,IAAI,cAAc,sCAAsC;AACnG,QAAI,KAAK,gBAAgB,OAAW,OAAM,IAAI,cAAc,4BAA4B;AACxF,QAAI,KAAK,kBAAkB,OAAW,OAAM,IAAI,cAAc,0BAA0B;AACxF,QAAI,KAAK,cAAc,UAAa,KAAK,mBAAmB;AACxD,YAAM,IAAI,cAAc,0BAA0B;AACtD,QAAI,KAAK,2BAA2B,OAAW,OAAM,IAAI,cAAc,uCAAuC;AAC9G,QAAI,KAAK,qBAAqB,UAAa,KAAK,cAAc,UAAa,KAAK,YAAY;AACxF,YAAM,IAAI,cAAc,iCAAiC;AAE7D,SAAK,eAAe;AACpB,UAAM,aAAa,IAAI,WAAW,OAAO,GAAG;AAC5C,eAAW,YAAY,KAAK,SAAS;AACrC,UAAM,gBAAgB,MAAM,OAAO;AAAA,MAC/B,KAAK,eAAe,MAAM,CAAC;AAAA,MAC3B,WAAW,YAAY;AAAA,MACvB;AAAA,MACA;AAAA,IACJ;AAEA,WAAO,IAAI;AAAA,MACP,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL;AAAA,MACA,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA;AAAA,MACL,MAAM,OAAO,KAAK,KAAK,wBAAwB,eAAe,mBAAmB;AAAA,MACjF,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,IACT;AAAA,EACJ;AACJ;",
+  "names": ["OperationalGroupKeySet"]
+}

package/dist/esm/fabric/FabricManager.d.ts

@@ -0,0 +1,44 @@
+/**
+ * @license
+ * Copyright 2022-2024 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import { Construction, Environment, Environmental, Key, MatterError, MaybePromise, Observable, StorageContext } from "#general";
+import { PeerAddress } from "#peer/PeerAddress.js";
+import { FabricIndex } from "#types";
+import { Fabric } from "./Fabric.js";
+/** Specific Error for when a fabric is not found. */
+export declare class FabricNotFoundError extends MatterError {
+}
+export declare class FabricTableFullError extends MatterError {
+}
+export declare enum FabricAction {
+    Added = 0,
+    Removed = 1,
+    Updated = 2
+}
+export declare class FabricManager {
+    #private;
+    constructor(storage?: StorageContext);
+    get construction(): Construction<FabricManager>;
+    [Construction.construct](): Promise<void>;
+    [Environmental.create](env: Environment): FabricManager;
+    get events(): {
+        added: Observable<[fabric: Fabric], void>;
+        updated: Observable<[fabric: Fabric], void>;
+        deleted: Observable<[fabric: Fabric], void>;
+        failsafeClosed: Observable<[], void>;
+    };
+    for(address: FabricIndex | PeerAddress): Fabric;
+    getNextFabricIndex(): FabricIndex;
+    persistFabrics(): MaybePromise<void>;
+    addFabric(fabric: Fabric): void;
+    removeFabric(fabricIndex: FabricIndex): Promise<void>;
+    getFabrics(): Fabric[];
+    findFabricFromDestinationId(destinationId: Uint8Array, initiatorRandom: Uint8Array): Fabric;
+    findByKeypair(keypair: Key): Fabric | undefined;
+    findByIndex(index: FabricIndex): Fabric | undefined;
+    updateFabric(fabric: Fabric): Promise<void>;
+    revokeFabric(fabricIndex: FabricIndex): Promise<void>;
+}
+//# sourceMappingURL=FabricManager.d.ts.map

package/dist/esm/fabric/FabricManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"FabricManager.d.ts","sourceRoot":"","sources":["../../../src/fabric/FabricManager.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAEH,YAAY,EACZ,WAAW,EACX,aAAa,EAGb,GAAG,EACH,WAAW,EAEX,YAAY,EACZ,UAAU,EACV,cAAc,EAEjB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,EAAE,MAAM,EAAoB,MAAM,aAAa,CAAC;AAEvD,qDAAqD;AACrD,qBAAa,mBAAoB,SAAQ,WAAW;CAAG;AACvD,qBAAa,oBAAqB,SAAQ,WAAW;CAAG;AAExD,oBAAY,YAAY;IACpB,KAAK,IAAA;IACL,OAAO,IAAA;IACP,OAAO,IAAA;CACV;AAED,qBAAa,aAAa;;gBAaV,OAAO,CAAC,EAAE,cAAc;IA2BpC,IAAI,YAAY,gCAEf;IAEK,CAAC,YAAY,CAAC,SAAS,CAAC;IAI9B,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,WAAW;IAMvC,IAAI,MAAM;;;;;MAET;IAED,GAAG,CAAC,OAAO,EAAE,WAAW,GAAG,WAAW;IAWtC,kBAAkB;IAalB,cAAc,IAAI,YAAY,CAAC,IAAI,CAAC;IAmBpC,SAAS,CAAC,MAAM,EAAE,MAAM;IAyBlB,YAAY,CAAC,WAAW,EAAE,WAAW;IAa3C,UAAU;IAMV,2BAA2B,CAAC,aAAa,EAAE,UAAU,EAAE,eAAe,EAAE,UAAU;IAYlF,aAAa,CAAC,OAAO,EAAE,GAAG;IAW1B,WAAW,CAAC,KAAK,EAAE,WAAW;IAIxB,YAAY,CAAC,MAAM,EAAE,MAAM;IAc3B,YAAY,CAAC,WAAW,EAAE,WAAW;CAS9C"}

package/dist/esm/fabric/FabricManager.js

@@ -0,0 +1,200 @@
+/**
+ * @license
+ * Copyright 2022-2024 Matter.js Authors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+import {
+  Bytes,
+  Construction,
+  Environmental,
+  ImplementationError,
+  InternalError,
+  MatterError,
+  MatterFlowError,
+  MaybePromise,
+  Observable,
+  StorageManager
+} from "#general";
+import { FabricIndex } from "#types";
+import { Fabric } from "./Fabric.js";
+class FabricNotFoundError extends MatterError {
+}
+class FabricTableFullError extends MatterError {
+}
+var FabricAction = /* @__PURE__ */ ((FabricAction2) => {
+  FabricAction2[FabricAction2["Added"] = 0] = "Added";
+  FabricAction2[FabricAction2["Removed"] = 1] = "Removed";
+  FabricAction2[FabricAction2["Updated"] = 2] = "Updated";
+  return FabricAction2;
+})(FabricAction || {});
+class FabricManager {
+  #nextFabricIndex = 1;
+  #fabrics = /* @__PURE__ */ new Map();
+  #initializationDone = false;
+  #storage;
+  #events = {
+    added: Observable(),
+    updated: Observable(),
+    deleted: Observable(),
+    failsafeClosed: Observable()
+  };
+  #construction;
+  constructor(storage) {
+    this.#storage = storage;
+    let construct;
+    if (this.#storage === void 0) {
+      construct = () => {
+      };
+    } else {
+      construct = async () => {
+        if (this.#storage === void 0) {
+          return;
+        }
+        const fabrics = await this.#storage.get("fabrics", []);
+        for (const fabric of fabrics) {
+          this.#addFabric(Fabric.createFromStorageObject(fabric));
+        }
+        this.#nextFabricIndex = await this.#storage.get("nextFabricIndex", this.#nextFabricIndex);
+        this.#initializationDone = true;
+      };
+    }
+    this.#construction = Construction(this, construct);
+  }
+  get construction() {
+    return this.#construction;
+  }
+  async [Construction.construct]() {
+    await this.construction;
+  }
+  [Environmental.create](env) {
+    const instance = new FabricManager(env.get(StorageManager).createContext("fabrics"));
+    env.set(FabricManager, instance);
+    return instance;
+  }
+  get events() {
+    return this.#events;
+  }
+  for(address) {
+    if (typeof address === "object") {
+      address = address.fabricIndex;
+    }
+    const fabric = this.#fabrics.get(address);
+    if (fabric === void 0) {
+      throw new FabricNotFoundError(`Cannot access fabric for unknown index ${address}`);
+    }
+    return fabric;
+  }
+  getNextFabricIndex() {
+    this.#construction.assert();
+    for (let i = 0; i < 254; i++) {
+      const fabricIndex = this.#nextFabricIndex++;
+      if (this.#nextFabricIndex > 254) this.#nextFabricIndex = 1;
+      if (!this.#fabrics.has(FabricIndex(fabricIndex))) {
+        return FabricIndex(fabricIndex);
+      }
+    }
+    throw new FabricTableFullError("No free fabric index available.");
+  }
+  persistFabrics() {
+    if (this.#storage === void 0) {
+      throw new ImplementationError(
+        "Fabric persistence is disabled because FabricManager constructed without storage"
+      );
+    }
+    this.#construction.assert();
+    const storeResult = this.#storage.set(
+      "fabrics",
+      Array.from(this.#fabrics.values()).map((fabric) => fabric.toStorageObject())
+    );
+    if (MaybePromise.is(storeResult)) {
+      return storeResult.then(() => this.#storage.set("nextFabricIndex", this.#nextFabricIndex));
+    }
+    return this.#storage.set("nextFabricIndex", this.#nextFabricIndex);
+  }
+  addFabric(fabric) {
+    this.#construction.assert();
+    this.#addFabric(fabric);
+  }
+  #addFabric(fabric) {
+    const { fabricIndex } = fabric;
+    if (this.#fabrics.has(fabricIndex)) {
+      throw new MatterFlowError(`Fabric with index ${fabricIndex} already exists.`);
+    }
+    this.#fabrics.set(fabricIndex, fabric);
+    fabric.addRemoveCallback(async () => this.removeFabric(fabricIndex));
+    fabric.persistCallback = (isUpdate = true) => {
+      const persistResult = this.persistFabrics();
+      return MaybePromise.then(persistResult, () => {
+        if (isUpdate) {
+          this.#events.updated.emit(fabric);
+        }
+      });
+    };
+    if (this.#initializationDone) {
+      this.#events.added.emit(fabric);
+    }
+  }
+  async removeFabric(fabricIndex) {
+    await this.#construction;
+    const fabric = this.#fabrics.get(fabricIndex);
+    if (fabric === void 0)
+      throw new FabricNotFoundError(
+        `Fabric with index ${fabricIndex} cannot be removed because it does not exist.`
+      );
+    this.#fabrics.delete(fabricIndex);
+    await this.persistFabrics();
+    this.#events.deleted.emit(fabric);
+  }
+  getFabrics() {
+    this.#construction.assert();
+    return Array.from(this.#fabrics.values());
+  }
+  findFabricFromDestinationId(destinationId, initiatorRandom) {
+    this.#construction.assert();
+    for (const fabric of this.#fabrics.values()) {
+      const candidateDestinationId = fabric.getDestinationId(fabric.nodeId, initiatorRandom);
+      if (!Bytes.areEqual(candidateDestinationId, destinationId)) continue;
+      return fabric;
+    }
+    throw new InternalError("Fabric cannot be found from destinationId");
+  }
+  findByKeypair(keypair) {
+    this.#construction.assert();
+    for (const fabric of this.#fabrics.values()) {
+      if (fabric.matchesKeyPair(keypair)) {
+        return fabric;
+      }
+    }
+    return void 0;
+  }
+  findByIndex(index) {
+    return Array.from(this.#fabrics.values()).find((fabric) => fabric.fabricIndex === index);
+  }
+  async updateFabric(fabric) {
+    await this.#construction;
+    const { fabricIndex } = fabric;
+    if (!this.#fabrics.has(fabricIndex)) {
+      throw new FabricNotFoundError(
+        `Fabric with index ${fabricIndex} cannot be updated because it does not exist.`
+      );
+    }
+    this.#fabrics.set(fabricIndex, fabric);
+    await this.persistFabrics();
+    this.#events.updated.emit(fabric);
+  }
+  async revokeFabric(fabricIndex) {
+    await this.#construction;
+    const fabric = this.#fabrics.get(fabricIndex);
+    if (fabric === void 0) {
+      throw new MatterFlowError(`Fabric with index ${fabricIndex} does not exist to revoke.`);
+    }
+    await fabric.remove();
+  }
+}
+export {
+  FabricAction,
+  FabricManager,
+  FabricNotFoundError,
+  FabricTableFullError
+};
+//# sourceMappingURL=FabricManager.js.map