@openentity/sdk 0.3.0 → 0.4.1

package/dist/node.d.ts

@@ -0,0 +1,15 @@
+import { type KeyPair } from "./index.ts";
+export declare const identityFile: () => string;
+export interface Identity {
+    kp: KeyPair;
+    did: string;
+    seed: Uint8Array;
+    source: "keychain" | "file";
+}
+/** The entity's key from the OS keychain, else `~/.openentity/identity.key` (mode 0600). A fresh key goes to the keychain
+ * when one answers, otherwise to the file. OPENENTITY_KEYCHAIN=off uses the file only. Same key file as the Python SDK. */
+declare function loadOrCreate(): Promise<Identity>;
+export declare const Identity: {
+    loadOrCreate: typeof loadOrCreate;
+};
+export {};

package/dist/node.js

@@ -0,0 +1,52 @@
+import {
+  keyPairFromSeed
+} from "./chunk-IWY5EQIP.js";
+
+// src/node.ts
+import { execFileSync } from "node:child_process";
+import { chmodSync, existsSync, mkdirSync, openSync, readFileSync, writeSync, closeSync, constants } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+var SERVICE = "openentity";
+var ACCOUNT = "identity";
+var run = (cmd, args, input) => {
+  try {
+    return execFileSync(cmd, args, { input, encoding: "utf8", timeout: 1e4, stdio: ["pipe", "pipe", "ignore"] }).trim();
+  } catch {
+    return null;
+  }
+};
+var keychainOn = () => process.env.OPENENTITY_KEYCHAIN !== "off";
+var keychainGet = () => !keychainOn() ? null : process.platform === "darwin" ? run("security", ["find-generic-password", "-s", SERVICE, "-a", ACCOUNT, "-w"]) : process.platform === "linux" ? run("secret-tool", ["lookup", "service", SERVICE, "account", ACCOUNT]) : null;
+var keychainSet = (seedHex) => !keychainOn() ? false : process.platform === "darwin" ? run("security", ["add-generic-password", "-U", "-s", SERVICE, "-a", ACCOUNT, "-w", seedHex]) !== null : process.platform === "linux" ? run("secret-tool", ["store", "--label=Open Entity key", "service", SERVICE, "account", ACCOUNT], seedHex) !== null : false;
+var identityFile = () => join(process.env.OPENENTITY_HOME || join(homedir(), ".openentity"), "identity.key");
+var unhex = (h) => Uint8Array.from(h.match(/../g), (x) => parseInt(x, 16));
+var hex = (b) => Array.from(b, (x) => x.toString(16).padStart(2, "0")).join("");
+async function loadOrCreate() {
+  const make = async (seedHex2, source) => {
+    const seed = unhex(seedHex2), kp = await keyPairFromSeed(seed);
+    return { kp, did: kp.did, seed, source };
+  };
+  const file = identityFile();
+  const fromKeychain = keychainGet();
+  if (fromKeychain) return make(fromKeychain, "keychain");
+  if (existsSync(file)) return make(readFileSync(file, "utf8").trim(), "file");
+  const seedHex = hex(crypto.getRandomValues(new Uint8Array(32)));
+  if (keychainSet(seedHex)) return make(seedHex, "keychain");
+  mkdirSync(dirname(file), { recursive: true, mode: 448 });
+  try {
+    const fd = openSync(file, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL, 384);
+    writeSync(fd, seedHex);
+    closeSync(fd);
+  } catch (e) {
+    if (e.code !== "EEXIST") throw e;
+    return make(readFileSync(file, "utf8").trim(), "file");
+  }
+  chmodSync(file, 384);
+  return make(seedHex, "file");
+}
+var Identity = { loadOrCreate };
+export {
+  Identity,
+  identityFile
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openentity/sdk",
-  "version": "0.3.0",
+  "version": "0.4.1",
   "description": "Reference TypeScript SDK for the Open Entity Identity Standard (OEIS-1)",
   "license": "MIT",
   "type": "module",
@@ -8,6 +8,10 @@
     ".": {
       "types": "./dist/index.d.ts",
       "default": "./dist/index.js"
+    },
+    "./node": {
+      "types": "./dist/node.d.ts",
+      "default": "./dist/node.js"
     }
   },
   "dependencies": {
@@ -40,7 +44,7 @@
     "access": "public"
   },
   "scripts": {
-    "build": "esbuild src/index.ts --bundle --packages=external --format=esm --platform=neutral --target=es2022 --outfile=dist/index.js && tsc -p tsconfig.build.json",
+    "build": "esbuild src/index.ts src/node.ts --bundle --packages=external --format=esm --platform=neutral --target=es2022 --splitting --outdir=dist && tsc -p tsconfig.build.json",
     "lint": "tsc --noEmit",
     "typecheck": "tsc --noEmit",
     "test": "vitest run",