@nacre.work/core 0.17.5 → 0.19.0

package/dist/webauthn.js

@@ -0,0 +1,410 @@
+/**
+ * WebAuthn, as far as the arithmetic goes.
+ *
+ * The same split `totp.ts` has: this file knows nothing about a database and
+ * everything about bytes, so it can be checked against a real authenticator's
+ * output; `packages/api/src/second-factor.ts` holds the storage and the bounds.
+ *
+ * ## Why there is no dependency
+ *
+ * `@simplewebauthn/server` is the obvious answer and is a good library. It is
+ * not the answer here, and the reason is the same one the multipart parser
+ * gives: **this is attacker-supplied binary on the authentication path**, which
+ * is the one place a dependency's parser bugs become ours. The parser took
+ * `pdf-inspector` because a PDF is a format nobody can write a reader for in an
+ * afternoon; what a second factor needs is much smaller than that, and it is
+ * bounded by a specification that says the encoding is *canonical*.
+ *
+ * Two things make it small enough to be worth writing:
+ *
+ * - **`node:crypto` imports a JWK.** COSE keys map onto JWK field for field, so
+ *   ES256, RS256 and EdDSA all verify with no ASN.1 and no DER assembly.
+ *   Checked by round-tripping a generated key of each kind before a line of
+ *   this was written.
+ * - **CTAP2 says canonical CBOR**, which is definite-length only, no tags, no
+ *   floats. So the decoder below is a subset and every absence is a *refusal*
+ *   rather than a gap — an indefinite-length map is not "unsupported here", it
+ *   is a thing a conforming authenticator does not send.
+ *
+ * The obligation that comes with the choice is strictness, exactly as it is for
+ * multipart: every bound is a refusal and never a truncation, because a
+ * truncation is a silent disagreement between what was sent and what was
+ * verified. On this path that disagreement is somebody's second factor.
+ *
+ * ## What this deliberately does not do
+ *
+ * **Attestation is not verified, and `none` is what the server asks for.** This
+ * is a *second* factor: the person has already produced a password, and what
+ * this adds is proof of possession. Attestation answers a different question —
+ * "which model of authenticator is this" — which an enterprise buying
+ * hardware-key policy cares about and a self-hoster does not. Verifying it
+ * means a trust anchor list to keep current, and a list nobody updates is worse
+ * than no list. The registration path therefore reads the attestation object
+ * for its `authData` and ignores `attStmt` entirely, which is what makes the
+ * CBOR subset small.
+ *
+ * **Passwordless is not offered.** A discoverable credential used as a first
+ * factor changes what an account is, and `docs/authz.md` says a second factor
+ * decides whether a session *starts* and grants nothing. Widening that is a
+ * change to the specification and belongs there first.
+ */
+import { createHash, createPublicKey, createVerify, verify as verifySignature } from 'node:crypto';
+/* ────────────────────────────── CBOR, the subset ────────────────────────────
+ *
+ * Enough of RFC 8949 to read an attestation object and a COSE key, and nothing
+ * else. Every bound below is chosen against what a conforming authenticator
+ * actually sends, so exceeding one is a refusal rather than a limit somebody
+ * will meet honestly.
+ */
+/** No structure here nests past four: attObj → attStmt → x5c → bytes. */
+const MAX_DEPTH = 8;
+/** A COSE key has six entries; an attestation object has three. */
+const MAX_ENTRIES = 64;
+/** An RSA modulus is 512 bytes. Nothing here is larger by an order. */
+const MAX_BYTES = 8192;
+export class CborError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'CborError';
+    }
+}
+function need(r, n) {
+    if (r.offset + n > r.bytes.length)
+        throw new CborError('ran off the end of the input');
+}
+/**
+ * The head of an item: its major type and its argument.
+ *
+ * Indefinite length (`additional === 31`) is refused rather than supported.
+ * CTAP2 canonical CBOR is definite-length, so an indefinite one is not an
+ * authenticator being flexible — it is input that did not come from one.
+ */
+function head(r) {
+    need(r, 1);
+    const initial = r.bytes[r.offset];
+    r.offset += 1;
+    const major = initial >> 5;
+    const additional = initial & 0x1f;
+    if (additional < 24)
+        return { major, arg: additional };
+    if (additional === 24) {
+        need(r, 1);
+        const arg = r.bytes[r.offset];
+        r.offset += 1;
+        return { major, arg };
+    }
+    if (additional === 25) {
+        need(r, 2);
+        const arg = (r.bytes[r.offset] << 8) | r.bytes[r.offset + 1];
+        r.offset += 2;
+        return { major, arg };
+    }
+    if (additional === 26) {
+        need(r, 4);
+        const view = new DataView(r.bytes.buffer, r.bytes.byteOffset + r.offset, 4);
+        const arg = view.getUint32(0);
+        r.offset += 4;
+        return { major, arg };
+    }
+    // 27 is a 64-bit argument and 28-30 are reserved; 31 is indefinite length.
+    throw new CborError(`unsupported CBOR argument ${String(additional)} for major type ${String(major)}; ` +
+        'this reader accepts the canonical, definite-length encoding CTAP2 requires');
+}
+function item(r, depth) {
+    if (depth > MAX_DEPTH)
+        throw new CborError(`nested past ${String(MAX_DEPTH)} levels`);
+    const { major, arg } = head(r);
+    switch (major) {
+        case 0:
+            return arg;
+        case 1:
+            // -1 - arg. Negative integers are how COSE labels its key parameters.
+            return -1 - arg;
+        case 2: {
+            if (arg > MAX_BYTES)
+                throw new CborError(`byte string of ${String(arg)} bytes is over the limit`);
+            need(r, arg);
+            const out = r.bytes.subarray(r.offset, r.offset + arg);
+            r.offset += arg;
+            return out;
+        }
+        case 3: {
+            if (arg > MAX_BYTES)
+                throw new CborError(`text string of ${String(arg)} bytes is over the limit`);
+            need(r, arg);
+            const out = new TextDecoder('utf-8', { fatal: true }).decode(r.bytes.subarray(r.offset, r.offset + arg));
+            r.offset += arg;
+            return out;
+        }
+        case 4: {
+            if (arg > MAX_ENTRIES)
+                throw new CborError(`array of ${String(arg)} items is over the limit`);
+            const out = [];
+            for (let i = 0; i < arg; i += 1)
+                out.push(item(r, depth + 1));
+            return out;
+        }
+        case 5: {
+            if (arg > MAX_ENTRIES)
+                throw new CborError(`map of ${String(arg)} entries is over the limit`);
+            const out = new Map();
+            for (let i = 0; i < arg; i += 1) {
+                const key = item(r, depth + 1);
+                if (typeof key !== 'number' && typeof key !== 'string') {
+                    throw new CborError('map keys here are integers or text strings');
+                }
+                // A repeated key is not a conforming encoding, and picking one of the
+                // two would be this reader deciding something the sender did not.
+                if (out.has(key))
+                    throw new CborError(`duplicate map key ${String(key)}`);
+                out.set(key, item(r, depth + 1));
+            }
+            return out;
+        }
+        case 7: {
+            if (arg === 20)
+                return false;
+            if (arg === 21)
+                return true;
+            if (arg === 22)
+                return null;
+            throw new CborError(`unsupported simple value ${String(arg)}`);
+        }
+        default:
+            // 6 is tags. Nothing in an attestation object or a COSE key is tagged.
+            throw new CborError(`unsupported CBOR major type ${String(major)}`);
+    }
+}
+/**
+ * Decode one item, and **refuse trailing bytes**.
+ *
+ * A decoder that stops at the end of the first item and ignores what follows
+ * lets two different inputs verify identically, which is the shape of a
+ * signature-malleability bug. What is signed here is the whole buffer.
+ */
+export function decodeCbor(bytes) {
+    const r = { bytes, offset: 0 };
+    const value = item(r, 0);
+    if (r.offset !== bytes.length) {
+        throw new CborError(`${String(bytes.length - r.offset)} trailing byte(s) after the CBOR item`);
+    }
+    return value;
+}
+/**
+ * The fixed-layout half: 32 bytes of RP id hash, a flags byte, a counter, and
+ * then the attested credential where the flag says there is one.
+ *
+ * The credential's public key is CBOR and is *not* length-prefixed — the spec
+ * says it runs to the end unless extensions follow. So this decodes it with the
+ * reader above and uses how far that got, which is also what refuses a key with
+ * junk appended.
+ */
+export function parseAuthenticatorData(bytes) {
+    if (bytes.length < 37)
+        throw new CborError(`authenticator data is ${String(bytes.length)} bytes; 37 is the minimum`);
+    const rpIdHash = bytes.subarray(0, 32);
+    const raw = bytes[32];
+    const flags = {
+        userPresent: (raw & 0x01) !== 0,
+        userVerified: (raw & 0x04) !== 0,
+        attestedCredentialData: (raw & 0x40) !== 0,
+        extensionData: (raw & 0x80) !== 0,
+    };
+    const signCount = new DataView(bytes.buffer, bytes.byteOffset + 33, 4).getUint32(0);
+    if (!flags.attestedCredentialData)
+        return { rpIdHash, flags, signCount };
+    if (bytes.length < 55)
+        throw new CborError('attested credential data is truncated');
+    const aaguid = bytes.subarray(37, 53);
+    const idLength = (bytes[53] << 8) | bytes[54];
+    // 1023 is the ceiling WebAuthn puts on a credential id.
+    if (idLength > 1023)
+        throw new CborError(`credential id claims ${String(idLength)} bytes; 1023 is the maximum`);
+    if (bytes.length < 55 + idLength)
+        throw new CborError('credential id is truncated');
+    const id = bytes.subarray(55, 55 + idLength);
+    const r = { bytes, offset: 55 + idLength };
+    const coseKey = item(r, 0);
+    if (!(coseKey instanceof Map))
+        throw new CborError('the credential public key is not a CBOR map');
+    // Extensions may follow, and nothing here reads one — but bytes that are
+    // neither a key nor an extension are input this did not understand.
+    if (!flags.extensionData && r.offset !== bytes.length) {
+        throw new CborError(`${String(bytes.length - r.offset)} byte(s) after the public key, with no extension flag`);
+    }
+    return { rpIdHash, flags, signCount, credential: { aaguid, id, coseKey } };
+}
+/* ───────────────────────────── COSE, as a JWK ─────────────────────────────── */
+/**
+ * The algorithms this accepts, and why the list is short.
+ *
+ * ES256 is what every platform authenticator produces and is the one a
+ * deployment will actually see. RS256 is what older Windows Hello and some
+ * enterprise tokens produce. EdDSA is what a few hardware keys produce. Nothing
+ * else is offered: an algorithm this server does not name in
+ * `pubKeyCredParams` is one no authenticator will choose, so accepting it at
+ * registration would be accepting something we did not ask for.
+ */
+export const SUPPORTED_ALGORITHMS = [-7, -257, -8];
+const b64url = (bytes) => Buffer.from(bytes).toString('base64url');
+function bytesAt(key, label, what) {
+    const value = key.get(label);
+    if (!(value instanceof Uint8Array))
+        throw new CborError(`the COSE key has no ${what}`);
+    return value;
+}
+/**
+ * A COSE key becomes a JWK, which `node:crypto` imports directly.
+ *
+ * This is the whole reason there is no ASN.1 in this file. COSE and JWK are the
+ * same parameters under different names — `crv`, `x`, `y` for an EC key; `n`
+ * and `e` for RSA — so the conversion is a field mapping and the DER assembly
+ * that a WebAuthn implementation usually carries does not exist here.
+ */
+export function coseToPublicKey(key) {
+    const kty = key.get(1);
+    const named = key.get(3);
+    if (typeof named !== 'number' || !SUPPORTED_ALGORITHMS.includes(named)) {
+        throw new CborError(`algorithm ${String(named)} is not one this server asked for (ES256, RS256 or EdDSA)`);
+    }
+    const alg = named;
+    if (alg === -7) {
+        if (kty !== 2)
+            throw new CborError('ES256 needs an EC2 key');
+        // -1 is the curve; 1 is P-256, and it is the only one ES256 is defined over.
+        if (key.get(-1) !== 1)
+            throw new CborError('ES256 needs curve P-256');
+        return {
+            alg,
+            jwk: { kty: 'EC', crv: 'P-256', x: b64url(bytesAt(key, -2, 'x coordinate')), y: b64url(bytesAt(key, -3, 'y coordinate')) },
+        };
+    }
+    if (alg === -8) {
+        if (kty !== 1)
+            throw new CborError('EdDSA needs an OKP key');
+        if (key.get(-1) !== 6)
+            throw new CborError('EdDSA here means Ed25519');
+        return { alg, jwk: { kty: 'OKP', crv: 'Ed25519', x: b64url(bytesAt(key, -2, 'public key')) } };
+    }
+    if (kty !== 3)
+        throw new CborError('RS256 needs an RSA key');
+    return {
+        alg,
+        jwk: { kty: 'RSA', n: b64url(bytesAt(key, -1, 'modulus')), e: b64url(bytesAt(key, -2, 'exponent')) },
+    };
+}
+const keyObject = (key) => 
+// `jwk` is a plain record here because that is what this file builds; the
+// type `createPublicKey` wants is structurally the same thing.
+createPublicKey({ key: key.jwk, format: 'jwk' });
+/**
+ * `clientDataJSON`, parsed and checked.
+ *
+ * The origin is compared for **equality** against what the deployment
+ * configured, never by suffix. `evil-nacre.work` ends with `nacre.work`, and an
+ * origin check that admits it is not a check.
+ */
+export function readClientData(json, expect) {
+    let parsed;
+    try {
+        parsed = JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(json));
+    }
+    catch {
+        throw new CborError('clientDataJSON is not valid UTF-8 JSON');
+    }
+    const data = parsed;
+    if (data.type !== expect.type)
+        throw new CborError(`clientDataJSON says "${String(data.type)}"; expected "${expect.type}"`);
+    if (typeof data.challenge !== 'string' || data.challenge !== expect.challenge) {
+        throw new CborError('the challenge does not match the one this server issued');
+    }
+    if (typeof data.origin !== 'string' || !expect.origin.includes(data.origin)) {
+        throw new CborError(`origin ${String(data.origin)} is not one this deployment serves`);
+    }
+    return data;
+}
+/**
+ * Verify a registration, and store what comes back.
+ *
+ * `attStmt` is read and discarded: see the header for why attestation is not
+ * verified here. What *is* checked is everything that decides whether the
+ * credential belongs to this deployment and this ceremony — the challenge, the
+ * origin, the RP id, and that somebody was present at the authenticator.
+ */
+export function verifyRegistration(input) {
+    readClientData(input.clientDataJSON, {
+        type: 'webauthn.create',
+        challenge: input.challenge,
+        origin: input.origins,
+    });
+    const attestation = decodeCbor(input.attestationObject);
+    if (!(attestation instanceof Map))
+        throw new CborError('the attestation object is not a CBOR map');
+    const authDataBytes = attestation.get('authData');
+    if (!(authDataBytes instanceof Uint8Array))
+        throw new CborError('the attestation object carries no authData');
+    const authData = parseAuthenticatorData(authDataBytes);
+    const expectedRpIdHash = createHash('sha256').update(input.rpId).digest();
+    if (!expectedRpIdHash.equals(Buffer.from(authData.rpIdHash))) {
+        throw new CborError('the credential was made for a different relying party');
+    }
+    // User presence is the whole of what a second factor asserts: somebody with
+    // the authenticator in hand did something. A credential registered without it
+    // would be one a page could mint silently.
+    if (!authData.flags.userPresent)
+        throw new CborError('the authenticator reports nobody was present');
+    if (authData.credential === undefined)
+        throw new CborError('the registration carries no credential');
+    return {
+        credentialId: authData.credential.id,
+        publicKey: coseToPublicKey(authData.credential.coseKey),
+        signCount: authData.signCount,
+        userVerified: authData.flags.userVerified,
+        aaguid: authData.credential.aaguid,
+    };
+}
+/**
+ * Verify an assertion.
+ *
+ * The signature is over `authenticatorData || sha256(clientDataJSON)`, which is
+ * what binds the challenge and the origin into the signed message rather than
+ * leaving them as things this code merely looked at.
+ *
+ * **The counter is checked and a stuck counter is allowed.** A counter that
+ * went backwards is the signal WebAuthn offers for a cloned authenticator, so
+ * it is a refusal. A counter that stays at zero is what every platform
+ * authenticator — Touch ID, Windows Hello, a passkey in a password manager —
+ * actually does, so refusing that would refuse the authenticators most people
+ * have.
+ */
+export function verifyAssertion(input) {
+    readClientData(input.clientDataJSON, {
+        type: 'webauthn.get',
+        challenge: input.challenge,
+        origin: input.origins,
+    });
+    const authData = parseAuthenticatorData(input.authenticatorData);
+    const expectedRpIdHash = createHash('sha256').update(input.rpId).digest();
+    if (!expectedRpIdHash.equals(Buffer.from(authData.rpIdHash))) {
+        throw new CborError('the assertion is for a different relying party');
+    }
+    if (!authData.flags.userPresent)
+        throw new CborError('the authenticator reports nobody was present');
+    const signed = Buffer.concat([
+        Buffer.from(input.authenticatorData),
+        createHash('sha256').update(input.clientDataJSON).digest(),
+    ]);
+    const key = keyObject(input.publicKey);
+    const ok = input.publicKey.alg === -8
+        ? // EdDSA takes no digest name: the algorithm names its own.
+            verifySignature(null, signed, key, input.signature)
+        : createVerify('sha256').update(signed).verify(key, input.signature);
+    if (!ok)
+        throw new CborError('the signature does not verify against the stored credential');
+    if (authData.signCount !== 0 && authData.signCount <= input.storedSignCount) {
+        throw new CborError(`the signature counter went from ${String(input.storedSignCount)} to ${String(authData.signCount)}, ` +
+            'which is what a cloned authenticator looks like');
+    }
+    return { signCount: authData.signCount, userVerified: authData.flags.userVerified };
+}
+//# sourceMappingURL=webauthn.js.map

package/dist/webauthn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webauthn.js","sourceRoot":"","sources":["../webauthn.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,IAAI,eAAe,EAAE,MAAM,aAAa,CAAA;AAGlG;;;;;;GAMG;AAEH,yEAAyE;AACzE,MAAM,SAAS,GAAG,CAAC,CAAA;AACnB,mEAAmE;AACnE,MAAM,WAAW,GAAG,EAAE,CAAA;AACtB,uEAAuE;AACvE,MAAM,SAAS,GAAG,IAAI,CAAA;AAEtB,MAAM,OAAO,SAAU,SAAQ,KAAK;IAClC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,WAAW,CAAA;IACzB,CAAC;CACF;AASD,SAAS,IAAI,CAAC,CAAS,EAAE,CAAS;IAChC,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,SAAS,CAAC,8BAA8B,CAAC,CAAA;AACxF,CAAC;AAED;;;;;;GAMG;AACH,SAAS,IAAI,CAAC,CAAS;IACrB,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACV,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAE,CAAA;IAClC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAA;IACb,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,CAAA;IAC1B,MAAM,UAAU,GAAG,OAAO,GAAG,IAAI,CAAA;IAEjC,IAAI,UAAU,GAAG,EAAE;QAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,CAAA;IACtD,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACV,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAE,CAAA;QAC9B,CAAC,CAAC,MAAM,IAAI,CAAC,CAAA;QACb,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAA;IACvB,CAAC;IACD,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACV,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAE,CAAA;QAC9D,CAAC,CAAC,MAAM,IAAI,CAAC,CAAA;QACb,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAA;IACvB,CAAC;IACD,IAAI,UAAU,KAAK,EAAE,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QACV,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;QAC3E,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;QAC7B,CAAC,CAAC,MAAM,IAAI,CAAC,CAAA;QACb,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAA;IACvB,CAAC;IACD,2EAA2E;IAC3E,MAAM,IAAI,SAAS,CACjB,6BAA6B,MAAM,CAAC,UAAU,CAAC,mBAAmB,MAAM,CAAC,KAAK,CAAC,IAAI;QACjF,4EAA4E,CAC/E,CAAA;AACH,CAAC;AAED,SAAS,IAAI,CAAC,CAAS,EAAE,KAAa;IACpC,IAAI,KAAK,GAAG,SAAS;QAAE,MAAM,IAAI,SAAS,CAAC,eAAe,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAA;IACrF,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;IAE9B,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,CAAC;YACJ,OAAO,GAAG,CAAA;QACZ,KAAK,CAAC;YACJ,sEAAsE;YACtE,OAAO,CAAC,CAAC,GAAG,GAAG,CAAA;QACjB,KAAK,CAAC,CAAC,CAAC,CAAC;YACP,IAAI,GAAG,GAAG,SAAS;gBAAE,MAAM,IAAI,SAAS,CAAC,kBAAkB,MAAM,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAA;YACjG,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;YACZ,MAAM,GAAG,GAAG,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAA;YACtD,CAAC,CAAC,MAAM,IAAI,GAAG,CAAA;YACf,OAAO,GAAG,CAAA;QACZ,CAAC;QACD,KAAK,CAAC,CAAC,CAAC,CAAC;YACP,IAAI,GAAG,GAAG,SAAS;gBAAE,MAAM,IAAI,SAAS,CAAC,kBAAkB,MAAM,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAA;YACjG,IAAI,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;YACZ,MAAM,GAAG,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAA;YACxG,CAAC,CAAC,MAAM,IAAI,GAAG,CAAA;YACf,OAAO,GAAG,CAAA;QACZ,CAAC;QACD,KAAK,CAAC,CAAC,CAAC,CAAC;YACP,IAAI,GAAG,GAAG,WAAW;gBAAE,MAAM,IAAI,SAAS,CAAC,YAAY,MAAM,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAA;YAC7F,MAAM,GAAG,GAAgB,EAAE,CAAA;YAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAA;YAC7D,OAAO,GAAG,CAAA;QACZ,CAAC;QACD,KAAK,CAAC,CAAC,CAAC,CAAC;YACP,IAAI,GAAG,GAAG,WAAW;gBAAE,MAAM,IAAI,SAAS,CAAC,UAAU,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAA;YAC7F,MAAM,GAAG,GAAG,IAAI,GAAG,EAA8B,CAAA;YACjD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAA;gBAC9B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;oBACvD,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAA;gBACnE,CAAC;gBACD,sEAAsE;gBACtE,kEAAkE;gBAClE,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,MAAM,IAAI,SAAS,CAAC,qBAAqB,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;gBACzE,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAA;YAClC,CAAC;YACD,OAAO,GAAG,CAAA;QACZ,CAAC;QACD,KAAK,CAAC,CAAC,CAAC,CAAC;YACP,IAAI,GAAG,KAAK,EAAE;gBAAE,OAAO,KAAK,CAAA;YAC5B,IAAI,GAAG,KAAK,EAAE;gBAAE,OAAO,IAAI,CAAA;YAC3B,IAAI,GAAG,KAAK,EAAE;gBAAE,OAAO,IAAI,CAAA;YAC3B,MAAM,IAAI,SAAS,CAAC,4BAA4B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAChE,CAAC;QACD;YACE,uEAAuE;YACvE,MAAM,IAAI,SAAS,CAAC,+BAA+B,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACvE,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,KAAiB;IAC1C,MAAM,CAAC,GAAW,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,CAAA;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACxB,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QAC9B,MAAM,IAAI,SAAS,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,uCAAuC,CAAC,CAAA;IAChG,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AA0BD;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAiB;IACtD,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,IAAI,SAAS,CAAC,yBAAyB,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,2BAA2B,CAAC,CAAA;IAEpH,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACtC,MAAM,GAAG,GAAG,KAAK,CAAC,EAAE,CAAE,CAAA;IACtB,MAAM,KAAK,GAAuB;QAChC,WAAW,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC;QAC/B,YAAY,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC;QAChC,sBAAsB,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC;QAC1C,aAAa,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC;KAClC,CAAA;IACD,MAAM,SAAS,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAA;IAEnF,IAAI,CAAC,KAAK,CAAC,sBAAsB;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,CAAA;IAExE,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,IAAI,SAAS,CAAC,uCAAuC,CAAC,CAAA;IACnF,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;IACrC,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,EAAE,CAAE,IAAI,CAAC,CAAC,GAAG,KAAK,CAAC,EAAE,CAAE,CAAA;IAC/C,wDAAwD;IACxD,IAAI,QAAQ,GAAG,IAAI;QAAE,MAAM,IAAI,SAAS,CAAC,wBAAwB,MAAM,CAAC,QAAQ,CAAC,6BAA6B,CAAC,CAAA;IAC/G,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,GAAG,QAAQ;QAAE,MAAM,IAAI,SAAS,CAAC,4BAA4B,CAAC,CAAA;IACnF,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,QAAQ,CAAC,CAAA;IAE5C,MAAM,CAAC,GAAW,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,GAAG,QAAQ,EAAE,CAAA;IAClD,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC1B,IAAI,CAAC,CAAC,OAAO,YAAY,GAAG,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,6CAA6C,CAAC,CAAA;IAEjG,yEAAyE;IACzE,oEAAoE;IACpE,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QACtD,MAAM,IAAI,SAAS,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,uDAAuD,CAAC,CAAA;IAChH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,CAAA;AAC5E,CAAC;AAED,kFAAkF;AAElF;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC,CAAU,CAAA;AAG3D,MAAM,MAAM,GAAG,CAAC,KAAiB,EAAU,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;AAQtF,SAAS,OAAO,CAAC,GAAoC,EAAE,KAAa,EAAE,IAAY;IAChF,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IAC5B,IAAI,CAAC,CAAC,KAAK,YAAY,UAAU,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,uBAAuB,IAAI,EAAE,CAAC,CAAA;IACtF,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,GAAoC;IAClE,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IACtB,MAAM,KAAK,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAE,oBAA0C,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9F,MAAM,IAAI,SAAS,CACjB,aAAa,MAAM,CAAC,KAAK,CAAC,2DAA2D,CACtF,CAAA;IACH,CAAC;IACD,MAAM,GAAG,GAAG,KAAkB,CAAA;IAE9B,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;QACf,IAAI,GAAG,KAAK,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,wBAAwB,CAAC,CAAA;QAC5D,6EAA6E;QAC7E,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,yBAAyB,CAAC,CAAA;QACrE,OAAO;YACL,GAAG;YACH,GAAG,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,EAAE;SAC3H,CAAA;IACH,CAAC;IAED,IAAI,GAAG,KAAK,CAAC,CAAC,EAAE,CAAC;QACf,IAAI,GAAG,KAAK,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,wBAAwB,CAAC,CAAA;QAC5D,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,SAAS,CAAC,0BAA0B,CAAC,CAAA;QACtE,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,EAAE,EAAE,CAAA;IAChG,CAAC;IAED,IAAI,GAAG,KAAK,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,wBAAwB,CAAC,CAAA;IAC5D,OAAO;QACL,GAAG;QACH,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,EAAE;KACrG,CAAA;AACH,CAAC;AAED,MAAM,SAAS,GAAG,CAAC,GAAc,EAAa,EAAE;AAC9C,0EAA0E;AAC1E,+DAA+D;AAC/D,eAAe,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAiF,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;AAWhI;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAC5B,IAAgB,EAChB,MAAsE;IAEtE,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAA;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAA;IAC/D,CAAC;IACD,MAAM,IAAI,GAAG,MAA6B,CAAA;IAC1C,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;QAAE,MAAM,IAAI,SAAS,CAAC,wBAAwB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,MAAM,CAAC,IAAI,GAAG,CAAC,CAAA;IAC3H,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM,CAAC,SAAS,EAAE,CAAC;QAC9E,MAAM,IAAI,SAAS,CAAC,yDAAyD,CAAC,CAAA;IAChF,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,SAAS,CAAC,UAAU,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,oCAAoC,CAAC,CAAA;IACxF,CAAC;IACD,OAAO,IAAkB,CAAA;AAC3B,CAAC;AAoBD;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAwB;IACzD,cAAc,CAAC,KAAK,CAAC,cAAc,EAAE;QACnC,IAAI,EAAE,iBAAiB;QACvB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,OAAO;KACtB,CAAC,CAAA;IAEF,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAA;IACvD,IAAI,CAAC,CAAC,WAAW,YAAY,GAAG,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,0CAA0C,CAAC,CAAA;IAClG,MAAM,aAAa,GAAG,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAA;IACjD,IAAI,CAAC,CAAC,aAAa,YAAY,UAAU,CAAC;QAAE,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAA;IAE7G,MAAM,QAAQ,GAAG,sBAAsB,CAAC,aAAa,CAAC,CAAA;IACtD,MAAM,gBAAgB,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAA;IACzE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,SAAS,CAAC,uDAAuD,CAAC,CAAA;IAC9E,CAAC;IACD,4EAA4E;IAC5E,8EAA8E;IAC9E,2CAA2C;IAC3C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW;QAAE,MAAM,IAAI,SAAS,CAAC,8CAA8C,CAAC,CAAA;IACpG,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS;QAAE,MAAM,IAAI,SAAS,CAAC,wCAAwC,CAAC,CAAA;IAEpG,OAAO;QACL,YAAY,EAAE,QAAQ,CAAC,UAAU,CAAC,EAAE;QACpC,SAAS,EAAE,eAAe,CAAC,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC;QACvD,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,YAAY;QACzC,MAAM,EAAE,QAAQ,CAAC,UAAU,CAAC,MAAM;KACnC,CAAA;AACH,CAAC;AAoBD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,eAAe,CAAC,KAAqB;IACnD,cAAc,CAAC,KAAK,CAAC,cAAc,EAAE;QACnC,IAAI,EAAE,cAAc;QACpB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,MAAM,EAAE,KAAK,CAAC,OAAO;KACtB,CAAC,CAAA;IAEF,MAAM,QAAQ,GAAG,sBAAsB,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAA;IAChE,MAAM,gBAAgB,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAA;IACzE,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,SAAS,CAAC,gDAAgD,CAAC,CAAA;IACvE,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW;QAAE,MAAM,IAAI,SAAS,CAAC,8CAA8C,CAAC,CAAA;IAEpG,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC;QACpC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,MAAM,EAAE;KAC3D,CAAC,CAAA;IAEF,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IACtC,MAAM,EAAE,GACN,KAAK,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC;QACxB,CAAC,CAAC,2DAA2D;YAC3D,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,SAAS,CAAC;QACrD,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,SAAS,CAAC,CAAA;IACxE,IAAI,CAAC,EAAE;QAAE,MAAM,IAAI,SAAS,CAAC,6DAA6D,CAAC,CAAA;IAE3F,IAAI,QAAQ,CAAC,SAAS,KAAK,CAAC,IAAI,QAAQ,CAAC,SAAS,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QAC5E,MAAM,IAAI,SAAS,CACjB,mCAAmC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,OAAO,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI;YACnG,iDAAiD,CACpD,CAAA;IACH,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,YAAY,EAAE,CAAA;AACrF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nacre.work/core",
-  "version": "0.17.5",
+  "version": "0.19.0",
   "description": "Nacre core: data model, permission resolver, and shared types",
   "repository": {
     "type": "git",
@@ -28,10 +28,12 @@
   ],
   "dependencies": {
     "@qdrant/js-client-rest": "^1.18.0",
+    "nodemailer": "^9.0.5",
     "pg": "^8.22.0"
   },
   "devDependencies": {
     "@types/node": "^26.1.2",
+    "@types/nodemailer": "^8.0.1",
     "jose": "^6.2.7"
   },
   "keywords": [