@oxyhq/services 5.16.23 → 5.16.24

package/lib/module/crypto/signatureService.js

@@ -0,0 +1,286 @@
+"use strict";
+
+/**
+ * Signature Service - ECDSA Digital Signatures
+ * 
+ * Handles signing and verification of messages using ECDSA secp256k1.
+ * Used for authenticating requests and proving identity ownership.
+ */
+
+import { ec as EC } from 'elliptic';
+import { KeyManager } from './keyManager';
+
+// Lazy import for expo-crypto
+let ExpoCrypto = null;
+const ec = new EC('secp256k1');
+
+/**
+ * Check if we're in a React Native environment
+ */
+function isReactNative() {
+  return typeof navigator !== 'undefined' && navigator.product === 'ReactNative';
+}
+
+/**
+ * Check if we're in a Node.js environment
+ */
+function isNodeJS() {
+  return typeof process !== 'undefined' && process.versions != null && process.versions.node != null;
+}
+
+/**
+ * Initialize expo-crypto module
+ */
+async function initExpoCrypto() {
+  if (!ExpoCrypto) {
+    ExpoCrypto = await import('expo-crypto');
+  }
+  return ExpoCrypto;
+}
+
+/**
+ * Compute SHA-256 hash of a string
+ */
+async function sha256(message) {
+  // In React Native, always use expo-crypto
+  if (isReactNative() || !isNodeJS()) {
+    const Crypto = await initExpoCrypto();
+    return Crypto.digestStringAsync(Crypto.CryptoDigestAlgorithm.SHA256, message);
+  }
+
+  // In Node.js, use Node's crypto module
+  // Use Function constructor to prevent Metro bundler from statically analyzing this require
+  // This ensures the require is only evaluated in Node.js runtime, not during Metro bundling
+  try {
+    // eslint-disable-next-line @typescript-eslint/no-implied-eval
+    const getCrypto = new Function('return require("crypto")');
+    const crypto = getCrypto();
+    return crypto.createHash('sha256').update(message).digest('hex');
+  } catch (error) {
+    // Fallback to expo-crypto if Node crypto fails
+    const Crypto = await initExpoCrypto();
+    return Crypto.digestStringAsync(Crypto.CryptoDigestAlgorithm.SHA256, message);
+  }
+}
+export class SignatureService {
+  /**
+   * Generate a random challenge string (for offline use)
+   * Uses expo-crypto in React Native, crypto.randomBytes in Node.js
+   */
+  static async generateChallenge() {
+    if (isReactNative() || !isNodeJS()) {
+      // Use expo-crypto for React Native (expo-random is deprecated)
+      const Crypto = await initExpoCrypto();
+      const randomBytes = await Crypto.getRandomBytesAsync(32);
+      return Array.from(randomBytes).map(b => b.toString(16).padStart(2, '0')).join('');
+    }
+
+    // Node.js fallback
+    try {
+      // eslint-disable-next-line @typescript-eslint/no-implied-eval
+      const getCrypto = new Function('return require("crypto")');
+      const crypto = getCrypto();
+      return crypto.randomBytes(32).toString('hex');
+    } catch (error) {
+      // Fallback to expo-crypto if Node crypto fails
+      const Crypto = await initExpoCrypto();
+      const randomBytes = await Crypto.getRandomBytesAsync(32);
+      return Array.from(randomBytes).map(b => b.toString(16).padStart(2, '0')).join('');
+    }
+  }
+
+  /**
+   * Hash a message using SHA-256
+   */
+  static async hashMessage(message) {
+    return sha256(message);
+  }
+
+  /**
+   * Sign a message using the stored private key
+   * Returns the signature in DER format (hex encoded)
+   */
+  static async sign(message) {
+    const keyPair = await KeyManager.getKeyPairObject();
+    if (!keyPair) {
+      throw new Error('No identity found. Please create or import an identity first.');
+    }
+    const messageHash = await sha256(message);
+    const signature = keyPair.sign(messageHash);
+    return signature.toDER('hex');
+  }
+
+  /**
+   * Sign a message with an explicit private key (without storing)
+   * Useful for one-time operations or testing
+   */
+  static async signWithKey(message, privateKey) {
+    const keyPair = ec.keyFromPrivate(privateKey);
+    const messageHash = await sha256(message);
+    const signature = keyPair.sign(messageHash);
+    return signature.toDER('hex');
+  }
+
+  /**
+   * Verify a signature against a message and public key
+   */
+  static async verify(message, signature, publicKey) {
+    try {
+      const key = ec.keyFromPublic(publicKey, 'hex');
+      const messageHash = await sha256(message);
+      return key.verify(messageHash, signature);
+    } catch {
+      return false;
+    }
+  }
+
+  /**
+   * Synchronous verification (for Node.js backend)
+   * Uses crypto module directly for hashing
+   * Note: This method should only be used in Node.js environments
+   */
+  static verifySync(message, signature, publicKey) {
+    try {
+      if (!isNodeJS()) {
+        // In React Native, use async verify instead
+        throw new Error('verifySync should only be used in Node.js. Use verify() in React Native.');
+      }
+      // Use Function constructor to prevent Metro bundler from statically analyzing this require
+      // eslint-disable-next-line @typescript-eslint/no-implied-eval
+      const getCrypto = new Function('return require("crypto")');
+      const crypto = getCrypto();
+      const key = ec.keyFromPublic(publicKey, 'hex');
+      const messageHash = crypto.createHash('sha256').update(message).digest('hex');
+      return key.verify(messageHash, signature);
+    } catch {
+      return false;
+    }
+  }
+
+  /**
+   * Create a signed message object with metadata
+   */
+  static async createSignedMessage(message) {
+    const publicKey = await KeyManager.getPublicKey();
+    if (!publicKey) {
+      throw new Error('No identity found. Please create or import an identity first.');
+    }
+    const timestamp = Date.now();
+    const messageWithTimestamp = `${message}:${timestamp}`;
+    const signature = await SignatureService.sign(messageWithTimestamp);
+    return {
+      message,
+      signature,
+      publicKey,
+      timestamp
+    };
+  }
+
+  /**
+   * Verify a signed message object
+   * Checks both signature validity and timestamp freshness
+   */
+  static async verifySignedMessage(signedMessage, maxAgeMs = 5 * 60 * 1000 // 5 minutes default
+  ) {
+    const {
+      message,
+      signature,
+      publicKey,
+      timestamp
+    } = signedMessage;
+
+    // Check timestamp freshness
+    const now = Date.now();
+    if (now - timestamp > maxAgeMs) {
+      return false;
+    }
+
+    // Verify signature
+    const messageWithTimestamp = `${message}:${timestamp}`;
+    return SignatureService.verify(messageWithTimestamp, signature, publicKey);
+  }
+
+  /**
+   * Create a signed authentication challenge response
+   * Used for challenge-response authentication
+   */
+  static async signChallenge(challenge) {
+    const publicKey = await KeyManager.getPublicKey();
+    if (!publicKey) {
+      throw new Error('No identity found. Please create or import an identity first.');
+    }
+    const timestamp = Date.now();
+    const message = `auth:${publicKey}:${challenge}:${timestamp}`;
+    const signature = await SignatureService.sign(message);
+    return {
+      challenge: signature,
+      publicKey,
+      timestamp
+    };
+  }
+
+  /**
+   * Verify a challenge response
+   */
+  static async verifyChallengeResponse(originalChallenge, response, maxAgeMs = 5 * 60 * 1000) {
+    const {
+      challenge: signature,
+      publicKey,
+      timestamp
+    } = response;
+
+    // Check timestamp freshness
+    const now = Date.now();
+    if (now - timestamp > maxAgeMs) {
+      return false;
+    }
+    const message = `auth:${publicKey}:${originalChallenge}:${timestamp}`;
+    return SignatureService.verify(message, signature, publicKey);
+  }
+
+  /**
+   * Create a registration signature
+   * Used when registering a new identity with the server
+   * Format matches server expectation: oxy:register:{publicKey}:{timestamp}
+   */
+  static async createRegistrationSignature() {
+    const publicKey = await KeyManager.getPublicKey();
+    if (!publicKey) {
+      throw new Error('No identity found. Please create or import an identity first.');
+    }
+    const timestamp = Date.now();
+    const message = `oxy:register:${publicKey}:${timestamp}`;
+    const signature = await SignatureService.sign(message);
+    return {
+      signature,
+      publicKey,
+      timestamp
+    };
+  }
+
+  /**
+   * Sign arbitrary data for API requests
+   * Creates a canonical string representation and signs it
+   */
+  static async signRequestData(data) {
+    const publicKey = await KeyManager.getPublicKey();
+    if (!publicKey) {
+      throw new Error('No identity found. Please create or import an identity first.');
+    }
+    const timestamp = Date.now();
+
+    // Create canonical string representation
+    const sortedKeys = Object.keys(data).sort();
+    const canonicalParts = sortedKeys.map(key => `${key}:${JSON.stringify(data[key])}`);
+    const canonicalString = canonicalParts.join('|');
+    const message = `request:${publicKey}:${timestamp}:${canonicalString}`;
+    const signature = await SignatureService.sign(message);
+    return {
+      signature,
+      publicKey,
+      timestamp
+    };
+  }
+}
+export default SignatureService;
+//# sourceMappingURL=signatureService.js.map

package/lib/module/crypto/signatureService.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["ec","EC","KeyManager","ExpoCrypto","isReactNative","navigator","product","isNodeJS","process","versions","node","initExpoCrypto","sha256","message","Crypto","digestStringAsync","CryptoDigestAlgorithm","SHA256","getCrypto","Function","crypto","createHash","update","digest","error","SignatureService","generateChallenge","randomBytes","getRandomBytesAsync","Array","from","map","b","toString","padStart","join","hashMessage","sign","keyPair","getKeyPairObject","Error","messageHash","signature","toDER","signWithKey","privateKey","keyFromPrivate","verify","publicKey","key","keyFromPublic","verifySync","createSignedMessage","getPublicKey","timestamp","Date","now","messageWithTimestamp","verifySignedMessage","signedMessage","maxAgeMs","signChallenge","challenge","verifyChallengeResponse","originalChallenge","response","createRegistrationSignature","signRequestData","data","sortedKeys","Object","keys","sort","canonicalParts","JSON","stringify","canonicalString"],"sourceRoot":"../../../src","sources":["crypto/signatureService.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,EAAE,IAAIC,EAAE,QAAQ,UAAU;AACnC,SAASC,UAAU,QAAQ,cAAc;;AAEzC;AACA,IAAIC,UAA+C,GAAG,IAAI;AAE1D,MAAMH,EAAE,GAAG,IAAIC,EAAE,CAAC,WAAW,CAAC;;AAE9B;AACA;AACA;AACA,SAASG,aAAaA,CAAA,EAAY;EAChC,OAAO,OAAOC,SAAS,KAAK,WAAW,IAAIA,SAAS,CAACC,OAAO,KAAK,aAAa;AAChF;;AAEA;AACA;AACA;AACA,SAASC,QAAQA,CAAA,EAAY;EAC3B,OAAO,OAAOC,OAAO,KAAK,WAAW,IAAIA,OAAO,CAACC,QAAQ,IAAI,IAAI,IAAID,OAAO,CAACC,QAAQ,CAACC,IAAI,IAAI,IAAI;AACpG;;AAEA;AACA;AACA;AACA,eAAeC,cAAcA,CAAA,EAA0C;EACrE,IAAI,CAACR,UAAU,EAAE;IACfA,UAAU,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC;EAC1C;EACA,OAAOA,UAAU;AACnB;;AAEA;AACA;AACA;AACA,eAAeS,MAAMA,CAACC,OAAe,EAAmB;EACtD;EACA,IAAIT,aAAa,CAAC,CAAC,IAAI,CAACG,QAAQ,CAAC,CAAC,EAAE;IAClC,MAAMO,MAAM,GAAG,MAAMH,cAAc,CAAC,CAAC;IACrC,OAAOG,MAAM,CAACC,iBAAiB,CAC7BD,MAAM,CAACE,qBAAqB,CAACC,MAAM,EACnCJ,OACF,CAAC;EACH;;EAEA;EACA;EACA;EACA,IAAI;IACF;IACA,MAAMK,SAAS,GAAG,IAAIC,QAAQ,CAAC,0BAA0B,CAAC;IAC1D,MAAMC,MAAM,GAAGF,SAAS,CAAC,CAAC;IAC1B,OAAOE,MAAM,CAACC,UAAU,CAAC,QAAQ,CAAC,CAACC,MAAM,CAACT,OAAO,CAAC,CAACU,MAAM,CAAC,KAAK,CAAC;EAClE,CAAC,CAAC,OAAOC,KAAK,EAAE;IACd;IACA,MAAMV,MAAM,GAAG,MAAMH,cAAc,CAAC,CAAC;IACrC,OAAOG,MAAM,CAACC,iBAAiB,CAC7BD,MAAM,CAACE,qBAAqB,CAACC,MAAM,EACnCJ,OACF,CAAC;EACH;AACF;AAeA,OAAO,MAAMY,gBAAgB,CAAC;EAC5B;AACF;AACA;AACA;EACE,aAAaC,iBAAiBA,CAAA,EAAoB;IAChD,IAAItB,aAAa,CAAC,CAAC,IAAI,CAACG,QAAQ,CAAC,CAAC,EAAE;MAClC;MACA,MAAMO,MAAM,GAAG,MAAMH,cAAc,CAAC,CAAC;MACrC,MAAMgB,WAAW,GAAG,MAAMb,MAAM,CAACc,mBAAmB,CAAC,EAAE,CAAC;MACxD,OAAOC,KAAK,CAACC,IAAI,CAACH,WAAW,CAAC,CAC3BI,GAAG,CAAEC,CAAS,IAAKA,CAAC,CAACC,QAAQ,CAAC,EAAE,CAAC,CAACC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CACnDC,IAAI,CAAC,EAAE,CAAC;IACb;;IAEA;IACA,IAAI;MACF;MACA,MAAMjB,SAAS,GAAG,IAAIC,QAAQ,CAAC,0BAA0B,CAAC;MAC1D,MAAMC,MAAM,GAAGF,SAAS,CAAC,CAAC;MAC1B,OAAOE,MAAM,CAACO,WAAW,CAAC,EAAE,CAAC,CAACM,QAAQ,CAAC,KAAK,CAAC;IAC/C,CAAC,CAAC,OAAOT,KAAK,EAAE;MACd;MACA,MAAMV,MAAM,GAAG,MAAMH,cAAc,CAAC,CAAC;MACrC,MAAMgB,WAAW,GAAG,MAAMb,MAAM,CAACc,mBAAmB,CAAC,EAAE,CAAC;MACxD,OAAOC,KAAK,CAACC,IAAI,CAACH,WAAW,CAAC,CAC3BI,GAAG,CAAEC,CAAS,IAAKA,CAAC,CAACC,QAAQ,CAAC,EAAE,CAAC,CAACC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CACnDC,IAAI,CAAC,EAAE,CAAC;IACb;EACF;;EAEA;AACF;AACA;EACE,aAAaC,WAAWA,CAACvB,OAAe,EAAmB;IACzD,OAAOD,MAAM,CAACC,OAAO,CAAC;EACxB;;EAEA;AACF;AACA;AACA;EACE,aAAawB,IAAIA,CAACxB,OAAe,EAAmB;IAClD,MAAMyB,OAAO,GAAG,MAAMpC,UAAU,CAACqC,gBAAgB,CAAC,CAAC;IACnD,IAAI,CAACD,OAAO,EAAE;MACZ,MAAM,IAAIE,KAAK,CAAC,+DAA+D,CAAC;IAClF;IAEA,MAAMC,WAAW,GAAG,MAAM7B,MAAM,CAACC,OAAO,CAAC;IACzC,MAAM6B,SAAS,GAAGJ,OAAO,CAACD,IAAI,CAACI,WAAW,CAAC;IAC3C,OAAOC,SAAS,CAACC,KAAK,CAAC,KAAK,CAAC;EAC/B;;EAEA;AACF;AACA;AACA;EACE,aAAaC,WAAWA,CAAC/B,OAAe,EAAEgC,UAAkB,EAAmB;IAC7E,MAAMP,OAAO,GAAGtC,EAAE,CAAC8C,cAAc,CAACD,UAAU,CAAC;IAC7C,MAAMJ,WAAW,GAAG,MAAM7B,MAAM,CAACC,OAAO,CAAC;IACzC,MAAM6B,SAAS,GAAGJ,OAAO,CAACD,IAAI,CAACI,WAAW,CAAC;IAC3C,OAAOC,SAAS,CAACC,KAAK,CAAC,KAAK,CAAC;EAC/B;;EAEA;AACF;AACA;EACE,aAAaI,MAAMA,CAAClC,OAAe,EAAE6B,SAAiB,EAAEM,SAAiB,EAAoB;IAC3F,IAAI;MACF,MAAMC,GAAG,GAAGjD,EAAE,CAACkD,aAAa,CAACF,SAAS,EAAE,KAAK,CAAC;MAC9C,MAAMP,WAAW,GAAG,MAAM7B,MAAM,CAACC,OAAO,CAAC;MACzC,OAAOoC,GAAG,CAACF,MAAM,CAACN,WAAW,EAAEC,SAAS,CAAC;IAC3C,CAAC,CAAC,MAAM;MACN,OAAO,KAAK;IACd;EACF;;EAEA;AACF;AACA;AACA;AACA;EACE,OAAOS,UAAUA,CAACtC,OAAe,EAAE6B,SAAiB,EAAEM,SAAiB,EAAW;IAChF,IAAI;MACF,IAAI,CAACzC,QAAQ,CAAC,CAAC,EAAE;QACf;QACA,MAAM,IAAIiC,KAAK,CAAC,0EAA0E,CAAC;MAC7F;MACA;MACA;MACA,MAAMtB,SAAS,GAAG,IAAIC,QAAQ,CAAC,0BAA0B,CAAC;MAC1D,MAAMC,MAAM,GAAGF,SAAS,CAAC,CAAC;MAC1B,MAAM+B,GAAG,GAAGjD,EAAE,CAACkD,aAAa,CAACF,SAAS,EAAE,KAAK,CAAC;MAC9C,MAAMP,WAAW,GAAGrB,MAAM,CAACC,UAAU,CAAC,QAAQ,CAAC,CAACC,MAAM,CAACT,OAAO,CAAC,CAACU,MAAM,CAAC,KAAK,CAAC;MAC7E,OAAO0B,GAAG,CAACF,MAAM,CAACN,WAAW,EAAEC,SAAS,CAAC;IAC3C,CAAC,CAAC,MAAM;MACN,OAAO,KAAK;IACd;EACF;;EAEA;AACF;AACA;EACE,aAAaU,mBAAmBA,CAACvC,OAAe,EAA0B;IACxE,MAAMmC,SAAS,GAAG,MAAM9C,UAAU,CAACmD,YAAY,CAAC,CAAC;IACjD,IAAI,CAACL,SAAS,EAAE;MACd,MAAM,IAAIR,KAAK,CAAC,+DAA+D,CAAC;IAClF;IAEA,MAAMc,SAAS,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC;IAC5B,MAAMC,oBAAoB,GAAG,GAAG5C,OAAO,IAAIyC,SAAS,EAAE;IACtD,MAAMZ,SAAS,GAAG,MAAMjB,gBAAgB,CAACY,IAAI,CAACoB,oBAAoB,CAAC;IAEnE,OAAO;MACL5C,OAAO;MACP6B,SAAS;MACTM,SAAS;MACTM;IACF,CAAC;EACH;;EAEA;AACF;AACA;AACA;EACE,aAAaI,mBAAmBA,CAC9BC,aAA4B,EAC5BC,QAAgB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;EAAA,EACf;IAClB,MAAM;MAAE/C,OAAO;MAAE6B,SAAS;MAAEM,SAAS;MAAEM;IAAU,CAAC,GAAGK,aAAa;;IAElE;IACA,MAAMH,GAAG,GAAGD,IAAI,CAACC,GAAG,CAAC,CAAC;IACtB,IAAIA,GAAG,GAAGF,SAAS,GAAGM,QAAQ,EAAE;MAC9B,OAAO,KAAK;IACd;;IAEA;IACA,MAAMH,oBAAoB,GAAG,GAAG5C,OAAO,IAAIyC,SAAS,EAAE;IACtD,OAAO7B,gBAAgB,CAACsB,MAAM,CAACU,oBAAoB,EAAEf,SAAS,EAAEM,SAAS,CAAC;EAC5E;;EAEA;AACF;AACA;AACA;EACE,aAAaa,aAAaA,CAACC,SAAiB,EAA0B;IACpE,MAAMd,SAAS,GAAG,MAAM9C,UAAU,CAACmD,YAAY,CAAC,CAAC;IACjD,IAAI,CAACL,SAAS,EAAE;MACd,MAAM,IAAIR,KAAK,CAAC,+DAA+D,CAAC;IAClF;IAEA,MAAMc,SAAS,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC;IAC5B,MAAM3C,OAAO,GAAG,QAAQmC,SAAS,IAAIc,SAAS,IAAIR,SAAS,EAAE;IAC7D,MAAMZ,SAAS,GAAG,MAAMjB,gBAAgB,CAACY,IAAI,CAACxB,OAAO,CAAC;IAEtD,OAAO;MACLiD,SAAS,EAAEpB,SAAS;MACpBM,SAAS;MACTM;IACF,CAAC;EACH;;EAEA;AACF;AACA;EACE,aAAaS,uBAAuBA,CAClCC,iBAAyB,EACzBC,QAAuB,EACvBL,QAAgB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,EACd;IAClB,MAAM;MAAEE,SAAS,EAAEpB,SAAS;MAAEM,SAAS;MAAEM;IAAU,CAAC,GAAGW,QAAQ;;IAE/D;IACA,MAAMT,GAAG,GAAGD,IAAI,CAACC,GAAG,CAAC,CAAC;IACtB,IAAIA,GAAG,GAAGF,SAAS,GAAGM,QAAQ,EAAE;MAC9B,OAAO,KAAK;IACd;IAEA,MAAM/C,OAAO,GAAG,QAAQmC,SAAS,IAAIgB,iBAAiB,IAAIV,SAAS,EAAE;IACrE,OAAO7B,gBAAgB,CAACsB,MAAM,CAAClC,OAAO,EAAE6B,SAAS,EAAEM,SAAS,CAAC;EAC/D;;EAEA;AACF;AACA;AACA;AACA;EACE,aAAakB,2BAA2BA,CAAA,EAAyE;IAC/G,MAAMlB,SAAS,GAAG,MAAM9C,UAAU,CAACmD,YAAY,CAAC,CAAC;IACjD,IAAI,CAACL,SAAS,EAAE;MACd,MAAM,IAAIR,KAAK,CAAC,+DAA+D,CAAC;IAClF;IAEA,MAAMc,SAAS,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC;IAC5B,MAAM3C,OAAO,GAAG,gBAAgBmC,SAAS,IAAIM,SAAS,EAAE;IACxD,MAAMZ,SAAS,GAAG,MAAMjB,gBAAgB,CAACY,IAAI,CAACxB,OAAO,CAAC;IAEtD,OAAO;MACL6B,SAAS;MACTM,SAAS;MACTM;IACF,CAAC;EACH;;EAEA;AACF;AACA;AACA;EACE,aAAaa,eAAeA,CAACC,IAA6B,EAIvD;IACD,MAAMpB,SAAS,GAAG,MAAM9C,UAAU,CAACmD,YAAY,CAAC,CAAC;IACjD,IAAI,CAACL,SAAS,EAAE;MACd,MAAM,IAAIR,KAAK,CAAC,+DAA+D,CAAC;IAClF;IAEA,MAAMc,SAAS,GAAGC,IAAI,CAACC,GAAG,CAAC,CAAC;;IAE5B;IACA,MAAMa,UAAU,GAAGC,MAAM,CAACC,IAAI,CAACH,IAAI,CAAC,CAACI,IAAI,CAAC,CAAC;IAC3C,MAAMC,cAAc,GAAGJ,UAAU,CAACtC,GAAG,CAACkB,GAAG,IAAI,GAAGA,GAAG,IAAIyB,IAAI,CAACC,SAAS,CAACP,IAAI,CAACnB,GAAG,CAAC,CAAC,EAAE,CAAC;IACnF,MAAM2B,eAAe,GAAGH,cAAc,CAACtC,IAAI,CAAC,GAAG,CAAC;IAEhD,MAAMtB,OAAO,GAAG,WAAWmC,SAAS,IAAIM,SAAS,IAAIsB,eAAe,EAAE;IACtE,MAAMlC,SAAS,GAAG,MAAMjB,gBAAgB,CAACY,IAAI,CAACxB,OAAO,CAAC;IAEtD,OAAO;MACL6B,SAAS;MACTM,SAAS;MACTM;IACF,CAAC;EACH;AACF;AAEA,eAAe7B,gBAAgB","ignoreList":[]}

package/lib/module/crypto/types.js

@@ -0,0 +1,2 @@
+"use strict";
+//# sourceMappingURL=types.js.map

package/lib/module/crypto/types.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sourceRoot":"../../../src","sources":["crypto/types.ts"],"mappings":"","ignoreList":[]}

package/lib/module/i18n/index.js

@@ -0,0 +1,71 @@
+"use strict";
+
+// Use JSON locale files (RN Metro supports static requires reliably)
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+const enUS = require('./locales/en-US.json');
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+const esES = require('./locales/es-ES.json');
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+const caES = require('./locales/ca-ES.json');
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+const frFR = require('./locales/fr-FR.json');
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+const deDE = require('./locales/de-DE.json');
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+const itIT = require('./locales/it-IT.json');
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+const ptPT = require('./locales/pt-PT.json');
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+const jaJP = require('./locales/ja-JP.json');
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+const koKR = require('./locales/ko-KR.json');
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+const zhCN = require('./locales/zh-CN.json');
+// eslint-disable-next-line @typescript-eslint/no-var-requires
+const arSA = require('./locales/ar-SA.json');
+const DICTS = {
+  'en': enUS,
+  'en-US': enUS,
+  'es': esES,
+  'es-ES': esES,
+  'ca': caES,
+  'ca-ES': caES,
+  'fr': frFR,
+  'fr-FR': frFR,
+  'de': deDE,
+  'de-DE': deDE,
+  'it': itIT,
+  'it-IT': itIT,
+  'pt': ptPT,
+  'pt-PT': ptPT,
+  'ja': jaJP,
+  'ja-JP': jaJP,
+  'ko': koKR,
+  'ko-KR': koKR,
+  'zh': zhCN,
+  'zh-CN': zhCN,
+  'ar': arSA,
+  'ar-SA': arSA
+};
+const FALLBACK = 'en-US';
+function getNested(obj, path) {
+  return path.split('.').reduce((acc, key) => acc && acc[key] != null ? acc[key] : undefined, obj);
+}
+export function translate(locale, key, vars) {
+  const lang = locale && DICTS[locale] ? locale : FALLBACK;
+  const dict = DICTS[lang] || DICTS[FALLBACK];
+  let val = getNested(dict, key);
+  if (typeof val !== 'string') return key; // fallback to key if missing
+  if (vars) {
+    Object.keys(vars).forEach(k => {
+      const token = `{{${k}}}`;
+      val = val.replaceAll(token, String(vars[k]));
+    });
+  }
+  return val;
+}
+export function hasKey(locale, key) {
+  const lang = locale && DICTS[locale] ? locale : FALLBACK;
+  return getNested(DICTS[lang], key) != null || getNested(DICTS[FALLBACK], key) != null;
+}
+//# sourceMappingURL=index.js.map

package/lib/module/i18n/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["enUS","require","esES","caES","frFR","deDE","itIT","ptPT","jaJP","koKR","zhCN","arSA","DICTS","FALLBACK","getNested","obj","path","split","reduce","acc","key","undefined","translate","locale","vars","lang","dict","val","Object","keys","forEach","k","token","replaceAll","String","hasKey"],"sourceRoot":"../../../src","sources":["i18n/index.ts"],"mappings":";;AAAA;AACA;AACA,MAAMA,IAAI,GAAGC,OAAO,CAAC,sBAAsB,CAAwB;AACnE;AACA,MAAMC,IAAI,GAAGD,OAAO,CAAC,sBAAsB,CAAwB;AACnE;AACA,MAAME,IAAI,GAAGF,OAAO,CAAC,sBAAsB,CAAwB;AACnE;AACA,MAAMG,IAAI,GAAGH,OAAO,CAAC,sBAAsB,CAAwB;AACnE;AACA,MAAMI,IAAI,GAAGJ,OAAO,CAAC,sBAAsB,CAAwB;AACnE;AACA,MAAMK,IAAI,GAAGL,OAAO,CAAC,sBAAsB,CAAwB;AACnE;AACA,MAAMM,IAAI,GAAGN,OAAO,CAAC,sBAAsB,CAAwB;AACnE;AACA,MAAMO,IAAI,GAAGP,OAAO,CAAC,sBAAsB,CAAwB;AACnE;AACA,MAAMQ,IAAI,GAAGR,OAAO,CAAC,sBAAsB,CAAwB;AACnE;AACA,MAAMS,IAAI,GAAGT,OAAO,CAAC,sBAAsB,CAAwB;AACnE;AACA,MAAMU,IAAI,GAAGV,OAAO,CAAC,sBAAsB,CAAwB;AAInE,MAAMW,KAAiC,GAAG;EACxC,IAAI,EAAEZ,IAAkB;EACxB,OAAO,EAAEA,IAAkB;EAC3B,IAAI,EAAEE,IAAkB;EACxB,OAAO,EAAEA,IAAkB;EAC3B,IAAI,EAAEC,IAAkB;EACxB,OAAO,EAAEA,IAAkB;EAC3B,IAAI,EAAEC,IAAkB;EACxB,OAAO,EAAEA,IAAkB;EAC3B,IAAI,EAAEC,IAAkB;EACxB,OAAO,EAAEA,IAAkB;EAC3B,IAAI,EAAEC,IAAkB;EACxB,OAAO,EAAEA,IAAkB;EAC3B,IAAI,EAAEC,IAAkB;EACxB,OAAO,EAAEA,IAAkB;EAC3B,IAAI,EAAEC,IAAkB;EACxB,OAAO,EAAEA,IAAkB;EAC3B,IAAI,EAAEC,IAAkB;EACxB,OAAO,EAAEA,IAAkB;EAC3B,IAAI,EAAEC,IAAkB;EACxB,OAAO,EAAEA,IAAkB;EAC3B,IAAI,EAAEC,IAAkB;EACxB,OAAO,EAAEA;AACX,CAAC;AAED,MAAME,QAAQ,GAAG,OAAO;AAExB,SAASC,SAASA,CAACC,GAAQ,EAAEC,IAAY,EAAO;EAC9C,OAAOA,IAAI,CAACC,KAAK,CAAC,GAAG,CAAC,CAACC,MAAM,CAAC,CAACC,GAAG,EAAEC,GAAG,KAAMD,GAAG,IAAIA,GAAG,CAACC,GAAG,CAAC,IAAI,IAAI,GAAGD,GAAG,CAACC,GAAG,CAAC,GAAGC,SAAU,EAAEN,GAAG,CAAC;AACpG;AAEA,OAAO,SAASO,SAASA,CAACC,MAA0B,EAAEH,GAAW,EAAEI,IAAsC,EAAU;EACjH,MAAMC,IAAI,GAAGF,MAAM,IAAIX,KAAK,CAACW,MAAM,CAAC,GAAGA,MAAM,GAAGV,QAAQ;EACxD,MAAMa,IAAI,GAAGd,KAAK,CAACa,IAAI,CAAC,IAAIb,KAAK,CAACC,QAAQ,CAAC;EAC3C,IAAIc,GAAG,GAAGb,SAAS,CAACY,IAAI,EAAEN,GAAG,CAAC;EAC9B,IAAI,OAAOO,GAAG,KAAK,QAAQ,EAAE,OAAOP,GAAG,CAAC,CAAC;EACzC,IAAII,IAAI,EAAE;IACRI,MAAM,CAACC,IAAI,CAACL,IAAI,CAAC,CAACM,OAAO,CAACC,CAAC,IAAI;MAC7B,MAAMC,KAAK,GAAG,KAAKD,CAAC,IAAI;MACxBJ,GAAG,GAAGA,GAAG,CAACM,UAAU,CAACD,KAAK,EAAEE,MAAM,CAACV,IAAI,CAACO,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC,CAAC;EACJ;EACA,OAAOJ,GAAG;AACZ;AAEA,OAAO,SAASQ,MAAMA,CAACZ,MAA0B,EAAEH,GAAW,EAAW;EACvE,MAAMK,IAAI,GAAGF,MAAM,IAAIX,KAAK,CAACW,MAAM,CAAC,GAAGA,MAAM,GAAGV,QAAQ;EACxD,OAAOC,SAAS,CAACF,KAAK,CAACa,IAAI,CAAC,EAAEL,GAAG,CAAC,IAAI,IAAI,IAAIN,SAAS,CAACF,KAAK,CAACC,QAAQ,CAAC,EAAEO,GAAG,CAAC,IAAI,IAAI;AACvF","ignoreList":[]}

package/lib/module/i18n/locales/ar-SA.json

@@ -0,0 +1,120 @@
+{
+  "signin": {
+    "title": "تسجيل الدخول",
+    "subtitle": "سجل الدخول للمتابعة",
+    "addAccountTitle": "إضافة حساب آخر",
+    "addAccountSubtitle": "تسجيل الدخول بحساب آخر",
+    "username": {
+      "label": "اسم المستخدم",
+      "placeholder": "أدخل اسم المستخدم",
+      "helper": "3-30 حرفًا، أحرف وأرقام فقط",
+      "required": "يرجى إدخال اسم المستخدم.",
+      "minLength": "يجب أن يكون اسم المستخدم 3 أحرف على الأقل."
+    },
+    "password": {
+      "label": "كلمة المرور",
+      "placeholder": "أدخل كلمة المرور",
+      "required": "يرجى إدخال كلمة المرور.",
+      "hint": "أدخل كلمة المرور لتسجيل الدخول"
+    },
+    "actions": {
+      "continue": "متابعة",
+      "back": "رجوع",
+      "signIn": "تسجيل الدخول",
+      "verify": "التحقق",
+      "openAccountSwitcher": "التبديل إلى حساب آخر",
+      "openAccountSwitcherSubtitle": "{{count}} حسابات أخرى متاحة",
+      "openAccountSwitcherSubtitle_singular": "حساب آخر واحد متاح",
+      "openAccountSwitcherSubtitle_zero": "راجع حساباتك المحفوظة",
+      "manageAccounts": "إدارة الحسابات المحفوظة",
+      "manageAccountsSubtitle": "مراجعة الجلسات أو إزالتها أو تسجيل الخروج",
+      "loadingOtherAccounts": "جاري تحميل الحسابات الأخرى…",
+      "switchAccountFailed": "لم نتمكن من التبديل بين الحسابات. يرجى المحاولة مرة أخرى."
+    },
+    "forgotPrompt": "نسيت كلمة المرور؟",
+    "security": {
+      "dataSecure": "بياناتك مشفرة وآمنة"
+    },
+    "currentlySignedInAs": "مسجل الدخول حاليًا كـ",
+    "alreadySignedInWith": "مسجل الدخول بالفعل بـ",
+    "alreadySignedIn": "مسجل الدخول بالفعل",
+    "alreadySignedInMessage": "هذا الحساب مسجل الدخول بالفعل. المتابعة بهذا الحساب؟",
+    "continueWithAccount": "متابعة",
+    "currentAccount": "الحالي",
+    "or": "أو",
+    "viewAllAccounts": "عرض {{count}} المزيد",
+    "status": {
+      "accountSwitched": "استخدام {{name}} الآن"
+    },
+  },
+  "signup": {
+    "welcome": {
+      "title": "مرحبًا بك في Oxy!",
+      "subtitle": "أنشئ حسابك في خطوات قليلة",
+      "haveAccount": "لديك حساب بالفعل؟",
+      "signInCta": "تسجيل الدخول"
+    },
+    "identity": {
+      "title": "من أنت؟",
+      "subtitle": "اختر اسم المستخدم وأدخل بريدك الإلكتروني"
+    },
+    "username": {
+      "helper": "3-30 حرفًا، أحرف وأرقام فقط",
+      "required": "يرجى إدخال اسم مستخدم",
+      "minLength": "يجب أن يكون اسم المستخدم 3 أحرف على الأقل"
+    },
+    "email": {
+      "required": "يرجى إدخال عنوان بريد إلكتروني",
+      "invalid": "يرجى إدخال عنوان بريد إلكتروني صالح",
+      "helper": "لن نشارك بريدك الإلكتروني أبدًا"
+    },
+    "security": {
+      "title": "أمّن حسابك",
+      "subtitle": "أنشئ كلمة مرور قوية لحماية حسابك"
+    },
+    "password": {
+      "helper": "8 أحرف على الأقل",
+      "required": "يرجى إدخال كلمة مرور",
+      "minLength": "يجب أن تكون كلمة المرور 8 أحرف على الأقل",
+      "confirmRequired": "يرجى تأكيد كلمة المرور",
+      "mismatch": "كلمات المرور غير متطابقة",
+      "confirmHint": "أعد إدخال كلمة المرور للتأكيد"
+    },
+    "summary": {
+      "title": "أوشكت على الانتهاء!",
+      "subtitle": "راجع معلوماتك وأنشئ حسابك",
+      "sectionTitle": "معلومات الحساب",
+      "fields": {
+        "username": "اسم المستخدم",
+        "email": "البريد الإلكتروني",
+        "password": "كلمة المرور"
+      },
+      "notSet": "غير محدد",
+      "securityTip": "لمزيد من الأمان، قم بتمكين المصادقة الحيوية من إعدادات الحساب بعد إنشاء حسابك.",
+      "legalReminder": "بإنشاء حساب، فإنك توافق على شروط الخدمة وسياسة الخصوصية الخاصة بنا."
+    }
+  },
+  "common": {
+    "actions": {
+      "back": "رجوع",
+      "continue": "متابعة",
+      "next": "التالي",
+      "getStarted": "ابدأ",
+      "createAccount": "إنشاء حساب",
+      "signIn": "تسجيل الدخول",
+      "verify": "التحقق",
+      "resetPassword": "إعادة تعيين كلمة المرور"
+    },
+    "links": {
+      "recoverAccount": "استعادة حسابك",
+      "signUp": "التسجيل"
+    },
+    "labels": {
+      "username": "اسم المستخدم",
+      "email": "البريد الإلكتروني",
+      "password": "كلمة المرور",
+      "confirmPassword": "تأكيد كلمة المرور"
+    }
+  }
+}
+

package/lib/module/i18n/locales/ca-ES.json

@@ -0,0 +1,120 @@
+{
+  "signin": {
+    "title": "Iniciar sessió",
+    "subtitle": "Inicia sessió per continuar",
+    "addAccountTitle": "Afegir un altre compte",
+    "addAccountSubtitle": "Inicia sessió amb un altre compte",
+    "username": {
+      "label": "Nom d'usuari",
+      "placeholder": "Introdueix el teu nom d'usuari",
+      "helper": "3-30 caràcters, només lletres i números",
+      "required": "Si us plau, introdueix el teu nom d'usuari.",
+      "minLength": "El nom d'usuari ha de tenir almenys 3 caràcters."
+    },
+    "password": {
+      "label": "Contrasenya",
+      "placeholder": "Introdueix la teva contrasenya",
+      "required": "Si us plau, introdueix la teva contrasenya.",
+      "hint": "Introdueix la teva contrasenya per iniciar sessió"
+    },
+    "actions": {
+      "continue": "Continuar",
+      "back": "Enrere",
+      "signIn": "Iniciar sessió",
+      "verify": "Verificar",
+      "openAccountSwitcher": "Canviar a un altre compte",
+      "openAccountSwitcherSubtitle": "{{count}} altres comptes disponibles",
+      "openAccountSwitcherSubtitle_singular": "1 altre compte disponible",
+      "openAccountSwitcherSubtitle_zero": "Revisa els teus comptes guardats",
+      "manageAccounts": "Gestionar comptes guardats",
+      "manageAccountsSubtitle": "Revisar sessions, eliminar o tancar sessió",
+      "loadingOtherAccounts": "Carregant altres comptes…",
+      "switchAccountFailed": "No hem pogut canviar de compte. Torna-ho a intentar."
+    },
+    "forgotPrompt": "Has oblidat la teva contrasenya?",
+    "security": {
+      "dataSecure": "Les teves dades estan xifrades i segures"
+    },
+    "currentlySignedInAs": "Actualment has iniciat sessió com",
+    "alreadySignedInWith": "Ja has iniciat sessió amb",
+    "alreadySignedIn": "Ja has iniciat sessió",
+    "alreadySignedInMessage": "Aquest compte ja ha iniciat sessió. Continuar amb aquest compte?",
+    "continueWithAccount": "Continuar",
+    "currentAccount": "Actual",
+    "or": "o",
+    "viewAllAccounts": "Veure {{count}} més",
+    "status": {
+      "accountSwitched": "Ara utilitzant {{name}}"
+    },
+  },
+  "signup": {
+    "welcome": {
+      "title": "Benvingut a Oxy!",
+      "subtitle": "Crea el teu compte en pocs passos",
+      "haveAccount": "Ja tens un compte?",
+      "signInCta": "Inicia sessió"
+    },
+    "identity": {
+      "title": "Qui ets?",
+      "subtitle": "Tria el teu nom d'usuari i introdueix el teu correu"
+    },
+    "username": {
+      "helper": "3-30 caràcters, només lletres i números",
+      "required": "Si us plau, introdueix un nom d'usuari",
+      "minLength": "El nom d'usuari ha de tenir almenys 3 caràcters"
+    },
+    "email": {
+      "required": "Si us plau, introdueix una adreça de correu electrònic",
+      "invalid": "Si us plau, introdueix una adreça de correu electrònic vàlida",
+      "helper": "Mai compartirem el teu correu"
+    },
+    "security": {
+      "title": "Protegeix el teu compte",
+      "subtitle": "Crea una contrasenya forta per protegir el teu compte"
+    },
+    "password": {
+      "helper": "Almenys 8 caràcters",
+      "required": "Si us plau, introdueix una contrasenya",
+      "minLength": "La contrasenya ha de tenir almenys 8 caràcters",
+      "confirmRequired": "Si us plau, confirma la teva contrasenya",
+      "mismatch": "Les contrasenyes no coincideixen",
+      "confirmHint": "Torna a introduir la teva contrasenya per confirmar"
+    },
+    "summary": {
+      "title": "Gairebé allà!",
+      "subtitle": "Revisa la teva informació i crea el teu compte",
+      "sectionTitle": "Informació del compte",
+      "fields": {
+        "username": "Nom d'usuari",
+        "email": "Correu electrònic",
+        "password": "Contrasenya"
+      },
+      "notSet": "No definit",
+      "securityTip": "Per a una major seguretat, habilita l'autenticació biomètrica des de Configuració del compte després de crear el teu compte.",
+      "legalReminder": "En crear un compte, acceptes els nostres Termes de servei i Política de privacitat."
+    }
+  },
+  "common": {
+    "actions": {
+      "back": "Enrere",
+      "continue": "Continuar",
+      "next": "Següent",
+      "getStarted": "Començar",
+      "createAccount": "Crear compte",
+      "signIn": "Iniciar sessió",
+      "verify": "Verificar",
+      "resetPassword": "Restablir contrasenya"
+    },
+    "links": {
+      "recoverAccount": "Recuperar el teu compte",
+      "signUp": "Registrar-se"
+    },
+    "labels": {
+      "username": "Nom d'usuari",
+      "email": "Correu electrònic",
+      "password": "Contrasenya",
+      "confirmPassword": "Confirmar contrasenya"
+    }
+  }
+}
+