@nuvin/session 0.1.0-rc.5

package/dist/chunk-3IPZO7LP.js

@@ -0,0 +1,66 @@
+// src/grant/index.ts
+import { createPrivateKey, createPublicKey, generateKeyPairSync, sign, verify } from "crypto";
+var DEFAULT_GRANT_SKEW_MS = 5 * 60 * 1e3;
+function generateGrantKeyPair() {
+  const { publicKey, privateKey } = generateKeyPairSync("ed25519");
+  return {
+    publicKey: publicKey.export({ format: "der", type: "spki" }).toString("base64"),
+    privateKey: privateKey.export({ format: "der", type: "pkcs8" }).toString("base64")
+  };
+}
+function signGrant(payload, privateKeyBase64) {
+  const key = createPrivateKey({
+    key: Buffer.from(privateKeyBase64, "base64"),
+    format: "der",
+    type: "pkcs8"
+  });
+  const body = Buffer.from(JSON.stringify(payload), "utf8");
+  const signature = sign(null, body, key);
+  return `${body.toString("base64url")}.${signature.toString("base64url")}`;
+}
+var isGrantPayload = (value) => {
+  if (typeof value !== "object" || value === null) return false;
+  const record = value;
+  return typeof record.daemonId === "string" && typeof record.userId === "string" && typeof record.grantId === "string" && typeof record.issuedAt === "number" && typeof record.expiresAt === "number";
+};
+function verifyGrant(grant, opts) {
+  const now = opts.now ?? Date.now();
+  const skewMs = opts.skewMs ?? DEFAULT_GRANT_SKEW_MS;
+  const parts = grant.split(".");
+  if (parts.length !== 2 || parts[0] === "" || parts[1] === "") {
+    return { ok: false, reason: "malformed" };
+  }
+  const body = Buffer.from(parts[0], "base64url");
+  const signature = Buffer.from(parts[1], "base64url");
+  if (body.length === 0 || signature.length === 0) return { ok: false, reason: "malformed" };
+  let valid = false;
+  try {
+    const key = createPublicKey({
+      key: Buffer.from(opts.publicKey, "base64"),
+      format: "der",
+      type: "spki"
+    });
+    valid = verify(null, body, key, signature);
+  } catch {
+    return { ok: false, reason: "signature" };
+  }
+  if (!valid) return { ok: false, reason: "signature" };
+  let payload;
+  try {
+    payload = JSON.parse(body.toString("utf8"));
+  } catch {
+    return { ok: false, reason: "malformed" };
+  }
+  if (!isGrantPayload(payload)) return { ok: false, reason: "malformed" };
+  if (payload.daemonId !== opts.daemonId) return { ok: false, reason: "daemon-mismatch" };
+  if (now > payload.expiresAt + skewMs) return { ok: false, reason: "expired" };
+  if (payload.issuedAt - skewMs > now) return { ok: false, reason: "not-yet-valid" };
+  return { ok: true, payload };
+}
+
+export {
+  DEFAULT_GRANT_SKEW_MS,
+  generateGrantKeyPair,
+  signGrant,
+  verifyGrant
+};

package/dist/chunk-7G3R25NS.js

@@ -0,0 +1,6 @@
+// src/protocol/version.ts
+var PROTOCOL_VERSION = 15;
+
+export {
+  PROTOCOL_VERSION
+};