@parlor/auth 0.0.0-stage → 0.2.0

package/dist/statements.js

@@ -0,0 +1,199 @@
+import { canonicalBytes, decodeBase64url, encodeBase64url, } from "@parlor/capabilities/encoding";
+import { derToRaw, verifyEs256 } from "./es256.js";
+const FUTURE_SKEW_MS = 5 * 60_000;
+const USER_PRESENT = 0x01;
+const USER_VERIFIED = 0x04;
+const AUTH_DATA_MIN_BYTES = 37;
+const sha256 = async (bytes) => new Uint8Array(await crypto.subtle.digest("SHA-256", new Uint8Array(bytes)));
+const digestOf = async (bytes) => encodeBase64url(await sha256(bytes));
+export async function promptStatement(app, prompt, at) {
+    return {
+        v: 1,
+        kind: "prompt",
+        app,
+        threadId: prompt.threadId,
+        turnId: prompt.turnId,
+        agent: `${prompt.agent.hostId}/${prompt.agent.agentId}`,
+        digest: await digestOf(new TextEncoder().encode(prompt.text)),
+        at,
+    };
+}
+export async function answerStatement(app, answer, at) {
+    return {
+        v: 1,
+        kind: "answer",
+        app,
+        threadId: answer.threadId,
+        askId: answer.askId,
+        choice: answer.values === undefined
+            ? answer.choice
+            : await digestOf(canonicalBytes({ choice: answer.choice, values: answer.values })),
+        at,
+    };
+}
+export async function signedPrompt(app, item) {
+    const { signed, agent, text } = item.body;
+    if (!signed)
+        return undefined;
+    return {
+        statement: await promptStatement(app, { threadId: item.threadId, turnId: item.turnId, agent, text }, signed.at),
+        deviceId: signed.deviceId,
+        signature: signed.signature,
+    };
+}
+export function statementBytes(statement) {
+    return canonicalBytes(statement);
+}
+const CROCKFORD = "0123456789ABCDEFGHJKMNPQRSTVWXYZ";
+export const LINK_CODE_LENGTH = 10;
+/**
+ * What a new device shows to be linked: a hash of its keys, so whoever links it checks the
+ * keys the backend hands over are the ones this device holds.
+ */
+export async function deviceCommitment(app, deviceId, signingKey, presenceKey) {
+    const point = (key) => ({ crv: key.crv, kty: key.kty, x: key.x, y: key.y });
+    return digestOf(canonicalBytes({
+        v: 1,
+        kind: "device",
+        app: new URL(app).origin,
+        deviceId,
+        signing: point(signingKey),
+        presence: presenceKey ? point(presenceKey) : null,
+    }));
+}
+/** The commitment's first 50 bits in Crockford base32, short enough to type. */
+export function linkCode(commitment) {
+    const bytes = decodeBase64url(commitment);
+    let bits = 0n;
+    for (let index = 0; index < 7; index += 1)
+        bits = (bits << 8n) | BigInt(bytes[index]);
+    bits >>= 6n;
+    let code = "";
+    for (let index = 0; index < LINK_CODE_LENGTH; index += 1) {
+        code = CROCKFORD[Number(bits & 31n)] + code;
+        bits >>= 5n;
+    }
+    return code;
+}
+/** Upper case, no separators, the letters Crockford reads as digits mapped back. */
+export function normalizeLinkCode(typed) {
+    return typed
+        .toUpperCase()
+        .replace(/[\s-]/g, "")
+        .replace(/O/g, "0")
+        .replace(/[IL]/g, "1");
+}
+export function formatLinkCode(code) {
+    return `${code.slice(0, 4)}-${code.slice(4, 8)}-${code.slice(8)}`;
+}
+export function vouchStatement(app, voucher, device, commitment, at) {
+    return {
+        v: 1,
+        kind: "vouch",
+        app: new URL(app).origin,
+        voucher,
+        device,
+        commitment,
+        at,
+    };
+}
+export function removeStatement(app, actor, device, at) {
+    return { v: 1, kind: "remove", app: new URL(app).origin, actor, device, at };
+}
+/** The fragment Parlor Host's loopback redirect carries back to the browser that approved `connect`. */
+export const HOST_PAIRING_FRAGMENT = "parlor-host-pairing";
+const pairingKey = (secret) => crypto.subtle.importKey("raw", new Uint8Array(decodeBase64url(secret)), { name: "HMAC", hash: "SHA-256" }, false, ["sign", "verify"]);
+const pairingBytes = (deviceId, signingKey) => canonicalBytes({
+    v: 1,
+    kind: "pairing",
+    deviceId,
+    signingKey: {
+        crv: signingKey.crv,
+        kty: signingKey.kty,
+        x: signingKey.x,
+        y: signingKey.y,
+    },
+});
+/**
+ * The browser that approved `connect` gets the host's pairing secret through the loopback
+ * redirect, never through the app; this binds it to one device's keys.
+ */
+export async function pairingProof(secret, deviceId, signingKey) {
+    const mac = await crypto.subtle.sign("HMAC", await pairingKey(secret), new Uint8Array(pairingBytes(deviceId, signingKey)));
+    return encodeBase64url(new Uint8Array(mac));
+}
+export async function checkPairingProof(secret, proof, deviceId, signingKey) {
+    try {
+        return await crypto.subtle.verify("HMAC", await pairingKey(secret), new Uint8Array(decodeBase64url(proof)), new Uint8Array(pairingBytes(deviceId, signingKey)));
+    }
+    catch {
+        return false;
+    }
+}
+async function assertionHolds(statement, signature, presenceKey) {
+    if (presenceKey?.format !== "webauthn" || signature.presence !== "user")
+        return false;
+    if (signature.authenticatorData === undefined ||
+        signature.clientDataJSON === undefined) {
+        return false;
+    }
+    if (signature.keyId !== presenceKey.credentialId)
+        return false;
+    if (new URL(statement.app).hostname !== presenceKey.rpId)
+        return false;
+    const clientDataBytes = decodeBase64url(signature.clientDataJSON);
+    const clientData = JSON.parse(new TextDecoder().decode(clientDataBytes));
+    const challenge = await digestOf(statementBytes(statement));
+    if (clientData.type !== "webauthn.get" ||
+        clientData.challenge !== challenge ||
+        clientData.origin !== statement.app ||
+        clientData.crossOrigin === true) {
+        return false;
+    }
+    const authData = decodeBase64url(signature.authenticatorData);
+    const flags = authData[32];
+    if (authData.length < AUTH_DATA_MIN_BYTES || flags === undefined)
+        return false;
+    if ((flags & USER_PRESENT) === 0 || (flags & USER_VERIFIED) === 0)
+        return false;
+    const rpIdHash = await sha256(new TextEncoder().encode(presenceKey.rpId));
+    if (encodeBase64url(authData.slice(0, 32)) !== encodeBase64url(rpIdHash))
+        return false;
+    const raw = derToRaw(decodeBase64url(signature.signature));
+    if (!raw)
+        return false;
+    const signed = new Uint8Array([...authData, ...(await sha256(clientDataBytes))]);
+    return verifyEs256(presenceKey.publicKey, raw, signed);
+}
+async function signatureHolds(statement, signature, pinned) {
+    if (signature.format === "webauthn") {
+        return assertionHolds(statement, signature, pinned.presenceKey);
+    }
+    const bytes = statementBytes(statement);
+    const raw = decodeBase64url(signature.signature);
+    if (signature.presence === "none")
+        return verifyEs256(pinned.signingKey, raw, bytes);
+    const { presenceKey } = pinned;
+    return presenceKey?.format === "es256-raw"
+        ? verifyEs256(presenceKey.publicKey, raw, bytes)
+        : false;
+}
+export async function verifyStatement(signed, pinned, options) {
+    const { statement, signature } = signed;
+    if (signed.deviceId !== pinned.deviceId)
+        return "invalid";
+    if (options.now - statement.at > options.maxAgeMs)
+        return "stale";
+    if (statement.at - options.now > FUTURE_SKEW_MS)
+        return "invalid";
+    if (options.requirePresence && signature.presence !== "user") {
+        return "presence_required";
+    }
+    try {
+        return (await signatureHolds(statement, signature, pinned)) ? "valid" : "invalid";
+    }
+    catch {
+        return "invalid";
+    }
+}
+//# sourceMappingURL=statements.js.map

package/dist/statements.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"statements.js","sourceRoot":"","sources":["../src/statements.ts"],"names":[],"mappings":"AACA,OAAO,EACL,cAAc,EACd,eAAe,EACf,eAAe,GAChB,MAAM,+BAA+B,CAAC;AAKvC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AA0EnD,MAAM,cAAc,GAAG,CAAC,GAAG,MAAM,CAAC;AAClC,MAAM,YAAY,GAAG,IAAI,CAAC;AAC1B,MAAM,aAAa,GAAG,IAAI,CAAC;AAC3B,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAQ/B,MAAM,MAAM,GAAG,KAAK,EAAE,KAAiB,EAAuB,EAAE,CAC9D,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAE/E,MAAM,QAAQ,GAAG,KAAK,EAAE,KAAiB,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAEnF,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAW,EACX,MAAoB,EACpB,EAAU;IAEV,OAAO;QACL,CAAC,EAAE,CAAC;QACJ,IAAI,EAAE,QAAQ;QACd,GAAG;QACH,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,KAAK,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE;QACvD,MAAM,EAAE,MAAM,QAAQ,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7D,EAAE;KACH,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAW,EACX,MAAoB,EACpB,EAAU;IAEV,OAAO;QACL,CAAC,EAAE,CAAC;QACJ,IAAI,EAAE,QAAQ;QACd,GAAG;QACH,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,MAAM,EACJ,MAAM,CAAC,MAAM,KAAK,SAAS;YACzB,CAAC,CAAC,MAAM,CAAC,MAAM;YACf,CAAC,CAAC,MAAM,QAAQ,CACZ,cAAc,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CACjE;QACP,EAAE;KACH,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,GAAW,EACX,IAA0B;IAE1B,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;IAC1C,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,OAAO;QACL,SAAS,EAAE,MAAM,eAAe,CAC9B,GAAG,EACH,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAC7D,MAAM,CAAC,EAAE,CACV;QACD,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,SAAoB;IACjD,OAAO,cAAc,CAAC,SAAS,CAAC,CAAC;AACnC,CAAC;AAED,MAAM,SAAS,GAAG,kCAAkC,CAAC;AACrD,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAEnC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAW,EACX,QAAgB,EAChB,UAAsB,EACtB,WAAmC;IAEnC,MAAM,KAAK,GAAG,CAAC,GAAe,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;IACxF,OAAO,QAAQ,CACb,cAAc,CAAC;QACb,CAAC,EAAE,CAAC;QACJ,IAAI,EAAE,QAAQ;QACd,GAAG,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM;QACxB,QAAQ;QACR,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC;QAC1B,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;KAClD,CAAC,CACH,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,QAAQ,CAAC,UAAkB;IACzC,MAAM,KAAK,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC;QAAE,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAE,CAAC,CAAC;IACvF,IAAI,KAAK,EAAE,CAAC;IACZ,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,gBAAgB,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACzD,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,GAAG,GAAG,CAAC,CAAE,GAAG,IAAI,CAAC;QAC7C,IAAI,KAAK,EAAE,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,OAAO,KAAK;SACT,WAAW,EAAE;SACb,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC;SAClB,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;AAC3B,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AACpE,CAAC;AAED,MAAM,UAAU,cAAc,CAC5B,GAAW,EACX,OAAe,EACf,MAAc,EACd,UAAkB,EAClB,EAAU;IAEV,OAAO;QACL,CAAC,EAAE,CAAC;QACJ,IAAI,EAAE,OAAO;QACb,GAAG,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM;QACxB,OAAO;QACP,MAAM;QACN,UAAU;QACV,EAAE;KACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,GAAW,EACX,KAAa,EACb,MAAc,EACd,EAAU;IAEV,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AAC/E,CAAC;AAED,wGAAwG;AACxG,MAAM,CAAC,MAAM,qBAAqB,GAAG,qBAAqB,CAAC;AAE3D,MAAM,UAAU,GAAG,CAAC,MAAc,EAAE,EAAE,CACpC,MAAM,CAAC,MAAM,CAAC,SAAS,CACrB,KAAK,EACL,IAAI,UAAU,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,EACvC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EACjC,KAAK,EACL,CAAC,MAAM,EAAE,QAAQ,CAAC,CACnB,CAAC;AAEJ,MAAM,YAAY,GAAG,CAAC,QAAgB,EAAE,UAAsB,EAAE,EAAE,CAChE,cAAc,CAAC;IACb,CAAC,EAAE,CAAC;IACJ,IAAI,EAAE,SAAS;IACf,QAAQ;IACR,UAAU,EAAE;QACV,GAAG,EAAE,UAAU,CAAC,GAAG;QACnB,GAAG,EAAE,UAAU,CAAC,GAAG;QACnB,CAAC,EAAE,UAAU,CAAC,CAAC;QACf,CAAC,EAAE,UAAU,CAAC,CAAC;KAChB;CACF,CAAC,CAAC;AAEL;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAc,EACd,QAAgB,EAChB,UAAsB;IAEtB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAClC,MAAM,EACN,MAAM,UAAU,CAAC,MAAM,CAAC,EACxB,IAAI,UAAU,CAAC,YAAY,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CACnD,CAAC;IACF,OAAO,eAAe,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAc,EACd,KAAa,EACb,QAAgB,EAChB,UAAsB;IAEtB,IAAI,CAAC;QACH,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAC/B,MAAM,EACN,MAAM,UAAU,CAAC,MAAM,CAAC,EACxB,IAAI,UAAU,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,EACtC,IAAI,UAAU,CAAC,YAAY,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CACnD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AASD,KAAK,UAAU,cAAc,CAC3B,SAAoB,EACpB,SAA0B,EAC1B,WAAwC;IAExC,IAAI,WAAW,EAAE,MAAM,KAAK,UAAU,IAAI,SAAS,CAAC,QAAQ,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IACtF,IACE,SAAS,CAAC,iBAAiB,KAAK,SAAS;QACzC,SAAS,CAAC,cAAc,KAAK,SAAS,EACtC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,SAAS,CAAC,KAAK,KAAK,WAAW,CAAC,YAAY;QAAE,OAAO,KAAK,CAAC;IAC/D,IAAI,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,WAAW,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACvE,MAAM,eAAe,GAAG,eAAe,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IAClE,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAe,CAAC;IACvF,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5D,IACE,UAAU,CAAC,IAAI,KAAK,cAAc;QAClC,UAAU,CAAC,SAAS,KAAK,SAAS;QAClC,UAAU,CAAC,MAAM,KAAK,SAAS,CAAC,GAAG;QACnC,UAAU,CAAC,WAAW,KAAK,IAAI,EAC/B,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,QAAQ,GAAG,eAAe,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC3B,IAAI,QAAQ,CAAC,MAAM,GAAG,mBAAmB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC/E,IAAI,CAAC,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAChF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1E,IAAI,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,eAAe,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IACvF,MAAM,GAAG,GAAG,QAAQ,CAAC,eAAe,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;IAC3D,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,QAAQ,EAAE,GAAG,CAAC,MAAM,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;IACjF,OAAO,WAAW,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;AACzD,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,SAAoB,EACpB,SAA0B,EAC1B,MAAoB;IAEpB,IAAI,SAAS,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACpC,OAAO,cAAc,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,KAAK,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;IACxC,MAAM,GAAG,GAAG,eAAe,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACjD,IAAI,SAAS,CAAC,QAAQ,KAAK,MAAM;QAAE,OAAO,WAAW,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;IACrF,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,CAAC;IAC/B,OAAO,WAAW,EAAE,MAAM,KAAK,WAAW;QACxC,CAAC,CAAC,WAAW,CAAC,WAAW,CAAC,SAAS,EAAE,GAAG,EAAE,KAAK,CAAC;QAChD,CAAC,CAAC,KAAK,CAAC;AACZ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAyB,EACzB,MAAoB,EACpB,OAAsB;IAEtB,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IACxC,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC1D,IAAI,OAAO,CAAC,GAAG,GAAG,SAAS,CAAC,EAAE,GAAG,OAAO,CAAC,QAAQ;QAAE,OAAO,OAAO,CAAC;IAClE,IAAI,SAAS,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,GAAG,cAAc;QAAE,OAAO,SAAS,CAAC;IAClE,IAAI,OAAO,CAAC,eAAe,IAAI,SAAS,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QAC7D,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IACD,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,cAAc,CAAC,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACpF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC","sourcesContent":["import type { DeviceSignature, PresenceSignature } from \"@parlor/capabilities\";\nimport {\n  canonicalBytes,\n  decodeBase64url,\n  encodeBase64url,\n} from \"@parlor/capabilities/encoding\";\nimport type { AnswerToSign, LoggedItem, PromptToSign } from \"@parlor/chat\";\nimport type { DeviceId } from \"@parlor/core\";\nimport type { PresenceKey } from \"@parlor/server\";\n\nimport { derToRaw, verifyEs256 } from \"./es256.js\";\n\nexport interface PromptStatement {\n  readonly v: 1;\n  readonly kind: \"prompt\";\n  /** The app's origin: a statement for one app is worthless to another. */\n  readonly app: string;\n  readonly threadId: string;\n  readonly turnId: string;\n  /** `<hostId>/<agentId>`: a prompt cannot be replayed to another agent. */\n  readonly agent: string;\n  /** base64url SHA-256 of the prompt text */\n  readonly digest: string;\n  readonly at: number;\n}\n\nexport interface AnswerStatement {\n  readonly v: 1;\n  readonly kind: \"answer\";\n  readonly app: string;\n  readonly threadId: string;\n  readonly askId: string;\n  /** An option id, `\"declined\"`, or the digest of a form's values. */\n  readonly choice: string;\n  readonly at: number;\n}\n\n/** A linked device's word that the device behind `commitment` is the user's. */\nexport interface VouchStatement {\n  readonly v: 1;\n  readonly kind: \"vouch\";\n  readonly app: string;\n  readonly voucher: string;\n  readonly device: string;\n  /** `deviceCommitment` of the new device's keys, as the voucher checked it. */\n  readonly commitment: string;\n  readonly at: number;\n}\n\n/** A linked device's word, with presence, that `device` should no longer use the user's agents. */\nexport interface RemoveStatement {\n  readonly v: 1;\n  readonly kind: \"remove\";\n  readonly app: string;\n  readonly actor: string;\n  readonly device: string;\n  readonly at: number;\n}\n\nexport type Statement =\n  | PromptStatement\n  | AnswerStatement\n  | VouchStatement\n  | RemoveStatement;\n\nexport interface Signed<S extends Statement> {\n  readonly statement: S;\n  readonly deviceId: DeviceId;\n  readonly signature: S extends AnswerStatement\n    ? DeviceSignature | PresenceSignature\n    : S extends VouchStatement | RemoveStatement\n      ? PresenceSignature\n      : DeviceSignature;\n}\n\n/** A device key the verifier pinned itself, never one that travelled with the statement. */\nexport interface PinnedDevice {\n  readonly deviceId: DeviceId;\n  readonly signingKey: JsonWebKey;\n  readonly presenceKey?: PresenceKey | undefined;\n}\n\nexport type VerifyOutcome = \"valid\" | \"invalid\" | \"stale\" | \"presence_required\";\n\nconst FUTURE_SKEW_MS = 5 * 60_000;\nconst USER_PRESENT = 0x01;\nconst USER_VERIFIED = 0x04;\nconst AUTH_DATA_MIN_BYTES = 37;\n\nexport interface VerifyOptions {\n  readonly requirePresence: boolean;\n  readonly now: number;\n  readonly maxAgeMs: number;\n}\n\nconst sha256 = async (bytes: Uint8Array): Promise<Uint8Array> =>\n  new Uint8Array(await crypto.subtle.digest(\"SHA-256\", new Uint8Array(bytes)));\n\nconst digestOf = async (bytes: Uint8Array) => encodeBase64url(await sha256(bytes));\n\nexport async function promptStatement(\n  app: string,\n  prompt: PromptToSign,\n  at: number,\n): Promise<PromptStatement> {\n  return {\n    v: 1,\n    kind: \"prompt\",\n    app,\n    threadId: prompt.threadId,\n    turnId: prompt.turnId,\n    agent: `${prompt.agent.hostId}/${prompt.agent.agentId}`,\n    digest: await digestOf(new TextEncoder().encode(prompt.text)),\n    at,\n  };\n}\n\nexport async function answerStatement(\n  app: string,\n  answer: AnswerToSign,\n  at: number,\n): Promise<AnswerStatement> {\n  return {\n    v: 1,\n    kind: \"answer\",\n    app,\n    threadId: answer.threadId,\n    askId: answer.askId,\n    choice:\n      answer.values === undefined\n        ? answer.choice\n        : await digestOf(\n            canonicalBytes({ choice: answer.choice, values: answer.values }),\n          ),\n    at,\n  };\n}\n\nexport async function signedPrompt(\n  app: string,\n  item: LoggedItem<\"prompt\">,\n): Promise<Signed<PromptStatement> | undefined> {\n  const { signed, agent, text } = item.body;\n  if (!signed) return undefined;\n  return {\n    statement: await promptStatement(\n      app,\n      { threadId: item.threadId, turnId: item.turnId, agent, text },\n      signed.at,\n    ),\n    deviceId: signed.deviceId,\n    signature: signed.signature,\n  };\n}\n\nexport function statementBytes(statement: Statement): Uint8Array {\n  return canonicalBytes(statement);\n}\n\nconst CROCKFORD = \"0123456789ABCDEFGHJKMNPQRSTVWXYZ\";\nexport const LINK_CODE_LENGTH = 10;\n\n/**\n * What a new device shows to be linked: a hash of its keys, so whoever links it checks the\n * keys the backend hands over are the ones this device holds.\n */\nexport async function deviceCommitment(\n  app: string,\n  deviceId: string,\n  signingKey: JsonWebKey,\n  presenceKey: JsonWebKey | undefined,\n): Promise<string> {\n  const point = (key: JsonWebKey) => ({ crv: key.crv, kty: key.kty, x: key.x, y: key.y });\n  return digestOf(\n    canonicalBytes({\n      v: 1,\n      kind: \"device\",\n      app: new URL(app).origin,\n      deviceId,\n      signing: point(signingKey),\n      presence: presenceKey ? point(presenceKey) : null,\n    }),\n  );\n}\n\n/** The commitment's first 50 bits in Crockford base32, short enough to type. */\nexport function linkCode(commitment: string): string {\n  const bytes = decodeBase64url(commitment);\n  let bits = 0n;\n  for (let index = 0; index < 7; index += 1) bits = (bits << 8n) | BigInt(bytes[index]!);\n  bits >>= 6n;\n  let code = \"\";\n  for (let index = 0; index < LINK_CODE_LENGTH; index += 1) {\n    code = CROCKFORD[Number(bits & 31n)]! + code;\n    bits >>= 5n;\n  }\n  return code;\n}\n\n/** Upper case, no separators, the letters Crockford reads as digits mapped back. */\nexport function normalizeLinkCode(typed: string): string {\n  return typed\n    .toUpperCase()\n    .replace(/[\\s-]/g, \"\")\n    .replace(/O/g, \"0\")\n    .replace(/[IL]/g, \"1\");\n}\n\nexport function formatLinkCode(code: string): string {\n  return `${code.slice(0, 4)}-${code.slice(4, 8)}-${code.slice(8)}`;\n}\n\nexport function vouchStatement(\n  app: string,\n  voucher: string,\n  device: string,\n  commitment: string,\n  at: number,\n): VouchStatement {\n  return {\n    v: 1,\n    kind: \"vouch\",\n    app: new URL(app).origin,\n    voucher,\n    device,\n    commitment,\n    at,\n  };\n}\n\nexport function removeStatement(\n  app: string,\n  actor: string,\n  device: string,\n  at: number,\n): RemoveStatement {\n  return { v: 1, kind: \"remove\", app: new URL(app).origin, actor, device, at };\n}\n\n/** The fragment Parlor Host's loopback redirect carries back to the browser that approved `connect`. */\nexport const HOST_PAIRING_FRAGMENT = \"parlor-host-pairing\";\n\nconst pairingKey = (secret: string) =>\n  crypto.subtle.importKey(\n    \"raw\",\n    new Uint8Array(decodeBase64url(secret)),\n    { name: \"HMAC\", hash: \"SHA-256\" },\n    false,\n    [\"sign\", \"verify\"],\n  );\n\nconst pairingBytes = (deviceId: string, signingKey: JsonWebKey) =>\n  canonicalBytes({\n    v: 1,\n    kind: \"pairing\",\n    deviceId,\n    signingKey: {\n      crv: signingKey.crv,\n      kty: signingKey.kty,\n      x: signingKey.x,\n      y: signingKey.y,\n    },\n  });\n\n/**\n * The browser that approved `connect` gets the host's pairing secret through the loopback\n * redirect, never through the app; this binds it to one device's keys.\n */\nexport async function pairingProof(\n  secret: string,\n  deviceId: string,\n  signingKey: JsonWebKey,\n): Promise<string> {\n  const mac = await crypto.subtle.sign(\n    \"HMAC\",\n    await pairingKey(secret),\n    new Uint8Array(pairingBytes(deviceId, signingKey)),\n  );\n  return encodeBase64url(new Uint8Array(mac));\n}\n\nexport async function checkPairingProof(\n  secret: string,\n  proof: string,\n  deviceId: string,\n  signingKey: JsonWebKey,\n): Promise<boolean> {\n  try {\n    return await crypto.subtle.verify(\n      \"HMAC\",\n      await pairingKey(secret),\n      new Uint8Array(decodeBase64url(proof)),\n      new Uint8Array(pairingBytes(deviceId, signingKey)),\n    );\n  } catch {\n    return false;\n  }\n}\n\ninterface ClientData {\n  readonly type?: unknown;\n  readonly challenge?: unknown;\n  readonly origin?: unknown;\n  readonly crossOrigin?: unknown;\n}\n\nasync function assertionHolds(\n  statement: Statement,\n  signature: DeviceSignature,\n  presenceKey: PinnedDevice[\"presenceKey\"],\n): Promise<boolean> {\n  if (presenceKey?.format !== \"webauthn\" || signature.presence !== \"user\") return false;\n  if (\n    signature.authenticatorData === undefined ||\n    signature.clientDataJSON === undefined\n  ) {\n    return false;\n  }\n  if (signature.keyId !== presenceKey.credentialId) return false;\n  if (new URL(statement.app).hostname !== presenceKey.rpId) return false;\n  const clientDataBytes = decodeBase64url(signature.clientDataJSON);\n  const clientData = JSON.parse(new TextDecoder().decode(clientDataBytes)) as ClientData;\n  const challenge = await digestOf(statementBytes(statement));\n  if (\n    clientData.type !== \"webauthn.get\" ||\n    clientData.challenge !== challenge ||\n    clientData.origin !== statement.app ||\n    clientData.crossOrigin === true\n  ) {\n    return false;\n  }\n  const authData = decodeBase64url(signature.authenticatorData);\n  const flags = authData[32];\n  if (authData.length < AUTH_DATA_MIN_BYTES || flags === undefined) return false;\n  if ((flags & USER_PRESENT) === 0 || (flags & USER_VERIFIED) === 0) return false;\n  const rpIdHash = await sha256(new TextEncoder().encode(presenceKey.rpId));\n  if (encodeBase64url(authData.slice(0, 32)) !== encodeBase64url(rpIdHash)) return false;\n  const raw = derToRaw(decodeBase64url(signature.signature));\n  if (!raw) return false;\n  const signed = new Uint8Array([...authData, ...(await sha256(clientDataBytes))]);\n  return verifyEs256(presenceKey.publicKey, raw, signed);\n}\n\nasync function signatureHolds(\n  statement: Statement,\n  signature: DeviceSignature,\n  pinned: PinnedDevice,\n): Promise<boolean> {\n  if (signature.format === \"webauthn\") {\n    return assertionHolds(statement, signature, pinned.presenceKey);\n  }\n  const bytes = statementBytes(statement);\n  const raw = decodeBase64url(signature.signature);\n  if (signature.presence === \"none\") return verifyEs256(pinned.signingKey, raw, bytes);\n  const { presenceKey } = pinned;\n  return presenceKey?.format === \"es256-raw\"\n    ? verifyEs256(presenceKey.publicKey, raw, bytes)\n    : false;\n}\n\nexport async function verifyStatement(\n  signed: Signed<Statement>,\n  pinned: PinnedDevice,\n  options: VerifyOptions,\n): Promise<VerifyOutcome> {\n  const { statement, signature } = signed;\n  if (signed.deviceId !== pinned.deviceId) return \"invalid\";\n  if (options.now - statement.at > options.maxAgeMs) return \"stale\";\n  if (statement.at - options.now > FUTURE_SKEW_MS) return \"invalid\";\n  if (options.requirePresence && signature.presence !== \"user\") {\n    return \"presence_required\";\n  }\n  try {\n    return (await signatureHolds(statement, signature, pinned)) ? \"valid\" : \"invalid\";\n  } catch {\n    return \"invalid\";\n  }\n}\n"]}

package/dist/tokens.d.ts

@@ -0,0 +1,69 @@
+import { type AgentPrincipal, type HostPrincipal, type TurnBinding } from "@parlor/core";
+import { type Delegation, type TurnDelegation } from "@parlor/server";
+/** A host assertion's audience: signed by the computer's own key, per request. */
+export declare const HOST_AUDIENCE = "parlor:host";
+/** A turn token's audience: signed by the server, carried by the host's MCP proxy. */
+export declare const TURN_AUDIENCE = "parlor:mcp";
+export declare const HOST_ASSERTION_TYP = "parlor-host+jwt";
+export declare const TURN_TOKEN_TYP = "parlor-turn+jwt";
+/**
+ * A turn token never outlives the revocation horizon, or a revoked grant's token could
+ * verify after `RevocationSet` forgot the revocation.
+ */
+export declare const MAX_TURN_TOKEN_TTL_MS: number;
+export type TokenAudience = typeof HOST_AUDIENCE | typeof TURN_AUDIENCE;
+declare const audience: unique symbol;
+/** A compact JWS whose audience is known from the scheme it arrived under; never swapped. */
+export type Jws<A extends TokenAudience> = string & {
+    readonly [audience]: A;
+};
+export type HostAssertion = Jws<typeof HOST_AUDIENCE>;
+export type TurnToken = Jws<typeof TURN_AUDIENCE>;
+/** What an `authorization` header carries, sorted by scheme and shape before any verification. */
+export type Credential = {
+    readonly kind: "host";
+    readonly assertion: HostAssertion;
+} | {
+    readonly kind: "turn";
+    readonly token: TurnToken;
+} | {
+    readonly kind: "access";
+    readonly token: string;
+} | {
+    readonly kind: "session";
+    readonly token: string;
+};
+export interface TurnTokenClaims {
+    readonly aud: typeof TURN_AUDIENCE;
+    readonly iss: string;
+    /** user id */
+    readonly sub: string;
+    /** grant id: revoking the grant kills the token */
+    readonly gid: string;
+    readonly hid: string;
+    readonly thr: string;
+    readonly trn: string;
+    /** the client the prompt came from; `ui_*` binds to it */
+    readonly cid: string;
+    readonly agt: string;
+    readonly iat: number;
+    /** as long as the turn's lease */
+    readonly exp: number;
+}
+export interface TurnTokenKeys {
+    readonly issuer: string;
+    readonly kid: string;
+    readonly privateKey: CryptoKey;
+    readonly publicKeys: ReadonlyMap<string, CryptoKey>;
+}
+/** `ParlorHost <jws>` is a host; a `Bearer` JWS whose header says `typ: parlor-turn+jwt` is a turn. */
+export declare function credentialOf(authorization: string | null): Credential | undefined;
+/** Mints a turn token for `host`'s grant; the provider's `delegate`. */
+export declare function delegate(keys: TurnTokenKeys, host: HostPrincipal, turn: TurnDelegation, now: number): Promise<Delegation>;
+/** Signature, `aud`, `iss` and `exp` only; the caller then asks `RevocationSet` about `gid`. */
+export declare function verifyTurnToken(keys: TurnTokenKeys, token: TurnToken, now: number): Promise<TurnTokenClaims>;
+export declare function agentPrincipalOf(claims: TurnTokenClaims): AgentPrincipal & {
+    readonly turn: TurnBinding;
+};
+export {};
+//# sourceMappingURL=tokens.d.ts.map

package/dist/tokens.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.d.ts","sourceRoot":"","sources":["../src/tokens.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,cAAc,EAEnB,KAAK,aAAa,EAClB,KAAK,WAAW,EACjB,MAAM,cAAc,CAAC;AACtB,OAAO,EAEL,KAAK,UAAU,EAEf,KAAK,cAAc,EACpB,MAAM,gBAAgB,CAAC;AAIxB,kFAAkF;AAClF,eAAO,MAAM,aAAa,gBAAgB,CAAC;AAC3C,sFAAsF;AACtF,eAAO,MAAM,aAAa,eAAe,CAAC;AAE1C,eAAO,MAAM,kBAAkB,oBAAoB,CAAC;AACpD,eAAO,MAAM,cAAc,oBAAoB,CAAC;AAIhD;;;GAGG;AACH,eAAO,MAAM,qBAAqB,QAAwC,CAAC;AAE3E,MAAM,MAAM,aAAa,GAAG,OAAO,aAAa,GAAG,OAAO,aAAa,CAAC;AAExE,OAAO,CAAC,MAAM,QAAQ,EAAE,OAAO,MAAM,CAAC;AAEtC,6FAA6F;AAC7F,MAAM,MAAM,GAAG,CAAC,CAAC,SAAS,aAAa,IAAI,MAAM,GAAG;IAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;CAAE,CAAC;AAC/E,MAAM,MAAM,aAAa,GAAG,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC;AACtD,MAAM,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC;AAElD,kGAAkG;AAClG,MAAM,MAAM,UAAU,GAClB;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAA;CAAE,GAC5D;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAA;CAAE,GACpD;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,GAAG,EAAE,OAAO,aAAa,CAAC;IACnC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,cAAc;IACd,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,mDAAmD;IACnD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,0DAA0D;IAC1D,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,kCAAkC;IAClC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;CACrD;AAgBD,uGAAuG;AACvG,wBAAgB,YAAY,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,GAAG,UAAU,GAAG,SAAS,CAkBjF;AAED,wEAAwE;AACxE,wBAAsB,QAAQ,CAC5B,IAAI,EAAE,aAAa,EACnB,IAAI,EAAE,aAAa,EACnB,IAAI,EAAE,cAAc,EACpB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,UAAU,CAAC,CAqBrB;AAgBD,gGAAgG;AAChG,wBAAsB,eAAe,CACnC,IAAI,EAAE,aAAa,EACnB,KAAK,EAAE,SAAS,EAChB,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,eAAe,CAAC,CAgC1B;AAED,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,eAAe,GACtB,cAAc,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;CAAE,CAajD"}

package/dist/tokens.js

@@ -0,0 +1,134 @@
+import { asId, } from "@parlor/core";
+import { AuthFailure, REVOCATION_HORIZON_MS, } from "@parlor/server";
+import { decodeProtectedHeader, errors, jwtVerify, SignJWT } from "jose";
+import { z } from "zod";
+/** A host assertion's audience: signed by the computer's own key, per request. */
+export const HOST_AUDIENCE = "parlor:host";
+/** A turn token's audience: signed by the server, carried by the host's MCP proxy. */
+export const TURN_AUDIENCE = "parlor:mcp";
+export const HOST_ASSERTION_TYP = "parlor-host+jwt";
+export const TURN_TOKEN_TYP = "parlor-turn+jwt";
+const CLOCK_SKEW_MS = 60_000;
+/**
+ * A turn token never outlives the revocation horizon, or a revoked grant's token could
+ * verify after `RevocationSet` forgot the revocation.
+ */
+export const MAX_TURN_TOKEN_TTL_MS = REVOCATION_HORIZON_MS - CLOCK_SKEW_MS;
+const JWS_SHAPE = /^[\w-]+\.[\w-]+\.[\w-]+$/;
+function brand(compact) {
+    return compact;
+}
+function typOf(jws) {
+    try {
+        return decodeProtectedHeader(jws).typ;
+    }
+    catch {
+        throw new AuthFailure("invalid", "The token is malformed.");
+    }
+}
+/** `ParlorHost <jws>` is a host; a `Bearer` JWS whose header says `typ: parlor-turn+jwt` is a turn. */
+export function credentialOf(authorization) {
+    if (authorization === null)
+        return undefined;
+    const match = /^([A-Za-z]+)\s+(\S+)$/.exec(authorization);
+    const scheme = match?.[1]?.toLowerCase();
+    const value = match?.[2];
+    if (value === undefined || (scheme !== "bearer" && scheme !== "parlorhost")) {
+        throw new AuthFailure("invalid", "Use a Bearer token.");
+    }
+    if (scheme === "parlorhost") {
+        if (!JWS_SHAPE.test(value)) {
+            throw new AuthFailure("invalid", "The host assertion is malformed.");
+        }
+        return { kind: "host", assertion: brand(value) };
+    }
+    if (!JWS_SHAPE.test(value))
+        return { kind: "session", token: value };
+    return typOf(value) === TURN_TOKEN_TYP
+        ? { kind: "turn", token: brand(value) }
+        : { kind: "access", token: value };
+}
+/** Mints a turn token for `host`'s grant; the provider's `delegate`. */
+export async function delegate(keys, host, turn, now) {
+    if (!(turn.ttlMs > 0))
+        throw new RangeError("A turn token needs a positive lifetime.");
+    const iat = Math.floor(now / 1000);
+    const exp = iat + Math.ceil(Math.min(turn.ttlMs, MAX_TURN_TOKEN_TTL_MS) / 1000);
+    const claims = {
+        aud: TURN_AUDIENCE,
+        iss: keys.issuer,
+        sub: host.userId,
+        gid: host.grantId,
+        hid: host.hostId,
+        thr: turn.threadId,
+        trn: turn.turnId,
+        cid: turn.clientId,
+        agt: turn.agent,
+        iat,
+        exp,
+    };
+    const token = await new SignJWT({ ...claims })
+        .setProtectedHeader({ alg: "ES256", typ: TURN_TOKEN_TYP, kid: keys.kid })
+        .sign(keys.privateKey);
+    return { token, expiresAt: exp * 1000 };
+}
+const claimsSchema = z.object({
+    aud: z.literal(TURN_AUDIENCE),
+    iss: z.string().min(1),
+    sub: z.string().min(1),
+    gid: z.string().min(1),
+    hid: z.string().min(1),
+    thr: z.string().min(1),
+    trn: z.string().min(1),
+    cid: z.string(),
+    agt: z.string().min(1),
+    iat: z.number().int(),
+    exp: z.number().int(),
+});
+/** Signature, `aud`, `iss` and `exp` only; the caller then asks `RevocationSet` about `gid`. */
+export async function verifyTurnToken(keys, token, now) {
+    let payload;
+    try {
+        ({ payload } = await jwtVerify(token, (header) => {
+            const key = header.kid === undefined ? undefined : keys.publicKeys.get(header.kid);
+            if (!key)
+                throw new errors.JWKSNoMatchingKey();
+            return key;
+        }, {
+            algorithms: ["ES256"],
+            typ: TURN_TOKEN_TYP,
+            issuer: keys.issuer,
+            audience: TURN_AUDIENCE,
+            currentDate: new Date(now),
+        }));
+    }
+    catch (error) {
+        if (error instanceof errors.JWTExpired) {
+            throw new AuthFailure("expired", "The turn token expired.");
+        }
+        throw new AuthFailure("invalid", "The turn token is invalid.");
+    }
+    const claims = claimsSchema.safeParse(payload);
+    if (!claims.success)
+        throw new AuthFailure("invalid", "The turn token is malformed.");
+    const { iat, exp } = claims.data;
+    if (exp - iat > MAX_TURN_TOKEN_TTL_MS / 1000 || iat * 1000 > now + CLOCK_SKEW_MS) {
+        throw new AuthFailure("invalid", "The turn token has an impossible lifetime.");
+    }
+    return claims.data;
+}
+export function agentPrincipalOf(claims) {
+    return {
+        kind: "agent",
+        userId: asId("user", claims.sub),
+        grantId: asId("grant", claims.gid),
+        agent: { name: claims.agt, verified: true },
+        turn: {
+            threadId: asId("thread", claims.thr),
+            turnId: asId("turn", claims.trn),
+            hostId: asId("host", claims.hid),
+            clientId: claims.cid,
+        },
+    };
+}
+//# sourceMappingURL=tokens.js.map

package/dist/tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../src/tokens.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,IAAI,GAGL,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,WAAW,EAEX,qBAAqB,GAEtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACzE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,kFAAkF;AAClF,MAAM,CAAC,MAAM,aAAa,GAAG,aAAa,CAAC;AAC3C,sFAAsF;AACtF,MAAM,CAAC,MAAM,aAAa,GAAG,YAAY,CAAC;AAE1C,MAAM,CAAC,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AACpD,MAAM,CAAC,MAAM,cAAc,GAAG,iBAAiB,CAAC;AAEhD,MAAM,aAAa,GAAG,MAAM,CAAC;AAE7B;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,qBAAqB,GAAG,aAAa,CAAC;AA2C3E,MAAM,SAAS,GAAG,0BAA0B,CAAC;AAE7C,SAAS,KAAK,CAA0B,OAAe;IACrD,OAAO,OAAiB,CAAC;AAC3B,CAAC;AAED,SAAS,KAAK,CAAC,GAAW;IACxB,IAAI,CAAC;QACH,OAAO,qBAAqB,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,WAAW,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC;AAED,uGAAuG;AACvG,MAAM,UAAU,YAAY,CAAC,aAA4B;IACvD,IAAI,aAAa,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC7C,MAAM,KAAK,GAAG,uBAAuB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;IACzB,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,YAAY,CAAC,EAAE,CAAC;QAC5E,MAAM,IAAI,WAAW,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;IAC1D,CAAC;IACD,IAAI,MAAM,KAAK,YAAY,EAAE,CAAC;QAC5B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,IAAI,WAAW,CAAC,SAAS,EAAE,kCAAkC,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,CAAuB,KAAK,CAAC,EAAE,CAAC;IACzE,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACrE,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,cAAc;QACpC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAuB,KAAK,CAAC,EAAE;QAC7D,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AACvC,CAAC;AAED,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,IAAmB,EACnB,IAAmB,EACnB,IAAoB,EACpB,GAAW;IAEX,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,yCAAyC,CAAC,CAAC;IACvF,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,qBAAqB,CAAC,GAAG,IAAI,CAAC,CAAC;IAChF,MAAM,MAAM,GAAoB;QAC9B,GAAG,EAAE,aAAa;QAClB,GAAG,EAAE,IAAI,CAAC,MAAM;QAChB,GAAG,EAAE,IAAI,CAAC,MAAM;QAChB,GAAG,EAAE,IAAI,CAAC,OAAO;QACjB,GAAG,EAAE,IAAI,CAAC,MAAM;QAChB,GAAG,EAAE,IAAI,CAAC,QAAQ;QAClB,GAAG,EAAE,IAAI,CAAC,MAAM;QAChB,GAAG,EAAE,IAAI,CAAC,QAAQ;QAClB,GAAG,EAAE,IAAI,CAAC,KAAK;QACf,GAAG;QACH,GAAG;KACJ,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,IAAI,OAAO,CAAC,EAAE,GAAG,MAAM,EAAE,CAAC;SAC3C,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;SACxE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACzB,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,GAAG,IAAI,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IAC7B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACrB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;CACtB,CAAC,CAAC;AAEH,gGAAgG;AAChG,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAmB,EACnB,KAAgB,EAChB,GAAW;IAEX,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,CAAC,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAC5B,KAAK,EACL,CAAC,MAAM,EAAE,EAAE;YACT,MAAM,GAAG,GACP,MAAM,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzE,IAAI,CAAC,GAAG;gBAAE,MAAM,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAC/C,OAAO,GAAG,CAAC;QACb,CAAC,EACD;YACE,UAAU,EAAE,CAAC,OAAO,CAAC;YACrB,GAAG,EAAE,cAAc;YACnB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,aAAa;YACvB,WAAW,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC;SAC3B,CACF,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,MAAM,CAAC,UAAU,EAAE,CAAC;YACvC,MAAM,IAAI,WAAW,CAAC,SAAS,EAAE,yBAAyB,CAAC,CAAC;QAC9D,CAAC;QACD,MAAM,IAAI,WAAW,CAAC,SAAS,EAAE,4BAA4B,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,MAAM,IAAI,WAAW,CAAC,SAAS,EAAE,8BAA8B,CAAC,CAAC;IACtF,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;IACjC,IAAI,GAAG,GAAG,GAAG,GAAG,qBAAqB,GAAG,IAAI,IAAI,GAAG,GAAG,IAAI,GAAG,GAAG,GAAG,aAAa,EAAE,CAAC;QACjF,MAAM,IAAI,WAAW,CAAC,SAAS,EAAE,4CAA4C,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,MAAuB;IAEvB,OAAO;QACL,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC;QAChC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC;QAClC,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC3C,IAAI,EAAE;YACJ,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC;YACpC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC;YAChC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC;YAChC,QAAQ,EAAE,MAAM,CAAC,GAAG;SACrB;KACF,CAAC;AACJ,CAAC","sourcesContent":["import {\n  type AgentPrincipal,\n  asId,\n  type HostPrincipal,\n  type TurnBinding,\n} from \"@parlor/core\";\nimport {\n  AuthFailure,\n  type Delegation,\n  REVOCATION_HORIZON_MS,\n  type TurnDelegation,\n} from \"@parlor/server\";\nimport { decodeProtectedHeader, errors, jwtVerify, SignJWT } from \"jose\";\nimport { z } from \"zod\";\n\n/** A host assertion's audience: signed by the computer's own key, per request. */\nexport const HOST_AUDIENCE = \"parlor:host\";\n/** A turn token's audience: signed by the server, carried by the host's MCP proxy. */\nexport const TURN_AUDIENCE = \"parlor:mcp\";\n\nexport const HOST_ASSERTION_TYP = \"parlor-host+jwt\";\nexport const TURN_TOKEN_TYP = \"parlor-turn+jwt\";\n\nconst CLOCK_SKEW_MS = 60_000;\n\n/**\n * A turn token never outlives the revocation horizon, or a revoked grant's token could\n * verify after `RevocationSet` forgot the revocation.\n */\nexport const MAX_TURN_TOKEN_TTL_MS = REVOCATION_HORIZON_MS - CLOCK_SKEW_MS;\n\nexport type TokenAudience = typeof HOST_AUDIENCE | typeof TURN_AUDIENCE;\n\ndeclare const audience: unique symbol;\n\n/** A compact JWS whose audience is known from the scheme it arrived under; never swapped. */\nexport type Jws<A extends TokenAudience> = string & { readonly [audience]: A };\nexport type HostAssertion = Jws<typeof HOST_AUDIENCE>;\nexport type TurnToken = Jws<typeof TURN_AUDIENCE>;\n\n/** What an `authorization` header carries, sorted by scheme and shape before any verification. */\nexport type Credential =\n  | { readonly kind: \"host\"; readonly assertion: HostAssertion }\n  | { readonly kind: \"turn\"; readonly token: TurnToken }\n  | { readonly kind: \"access\"; readonly token: string }\n  | { readonly kind: \"session\"; readonly token: string };\n\nexport interface TurnTokenClaims {\n  readonly aud: typeof TURN_AUDIENCE;\n  readonly iss: string;\n  /** user id */\n  readonly sub: string;\n  /** grant id: revoking the grant kills the token */\n  readonly gid: string;\n  readonly hid: string;\n  readonly thr: string;\n  readonly trn: string;\n  /** the client the prompt came from; `ui_*` binds to it */\n  readonly cid: string;\n  readonly agt: string;\n  readonly iat: number;\n  /** as long as the turn's lease */\n  readonly exp: number;\n}\n\nexport interface TurnTokenKeys {\n  readonly issuer: string;\n  readonly kid: string;\n  readonly privateKey: CryptoKey;\n  readonly publicKeys: ReadonlyMap<string, CryptoKey>;\n}\n\nconst JWS_SHAPE = /^[\\w-]+\\.[\\w-]+\\.[\\w-]+$/;\n\nfunction brand<A extends TokenAudience>(compact: string): Jws<A> {\n  return compact as Jws<A>;\n}\n\nfunction typOf(jws: string): string | undefined {\n  try {\n    return decodeProtectedHeader(jws).typ;\n  } catch {\n    throw new AuthFailure(\"invalid\", \"The token is malformed.\");\n  }\n}\n\n/** `ParlorHost <jws>` is a host; a `Bearer` JWS whose header says `typ: parlor-turn+jwt` is a turn. */\nexport function credentialOf(authorization: string | null): Credential | undefined {\n  if (authorization === null) return undefined;\n  const match = /^([A-Za-z]+)\\s+(\\S+)$/.exec(authorization);\n  const scheme = match?.[1]?.toLowerCase();\n  const value = match?.[2];\n  if (value === undefined || (scheme !== \"bearer\" && scheme !== \"parlorhost\")) {\n    throw new AuthFailure(\"invalid\", \"Use a Bearer token.\");\n  }\n  if (scheme === \"parlorhost\") {\n    if (!JWS_SHAPE.test(value)) {\n      throw new AuthFailure(\"invalid\", \"The host assertion is malformed.\");\n    }\n    return { kind: \"host\", assertion: brand<typeof HOST_AUDIENCE>(value) };\n  }\n  if (!JWS_SHAPE.test(value)) return { kind: \"session\", token: value };\n  return typOf(value) === TURN_TOKEN_TYP\n    ? { kind: \"turn\", token: brand<typeof TURN_AUDIENCE>(value) }\n    : { kind: \"access\", token: value };\n}\n\n/** Mints a turn token for `host`'s grant; the provider's `delegate`. */\nexport async function delegate(\n  keys: TurnTokenKeys,\n  host: HostPrincipal,\n  turn: TurnDelegation,\n  now: number,\n): Promise<Delegation> {\n  if (!(turn.ttlMs > 0)) throw new RangeError(\"A turn token needs a positive lifetime.\");\n  const iat = Math.floor(now / 1000);\n  const exp = iat + Math.ceil(Math.min(turn.ttlMs, MAX_TURN_TOKEN_TTL_MS) / 1000);\n  const claims: TurnTokenClaims = {\n    aud: TURN_AUDIENCE,\n    iss: keys.issuer,\n    sub: host.userId,\n    gid: host.grantId,\n    hid: host.hostId,\n    thr: turn.threadId,\n    trn: turn.turnId,\n    cid: turn.clientId,\n    agt: turn.agent,\n    iat,\n    exp,\n  };\n  const token = await new SignJWT({ ...claims })\n    .setProtectedHeader({ alg: \"ES256\", typ: TURN_TOKEN_TYP, kid: keys.kid })\n    .sign(keys.privateKey);\n  return { token, expiresAt: exp * 1000 };\n}\n\nconst claimsSchema = z.object({\n  aud: z.literal(TURN_AUDIENCE),\n  iss: z.string().min(1),\n  sub: z.string().min(1),\n  gid: z.string().min(1),\n  hid: z.string().min(1),\n  thr: z.string().min(1),\n  trn: z.string().min(1),\n  cid: z.string(),\n  agt: z.string().min(1),\n  iat: z.number().int(),\n  exp: z.number().int(),\n});\n\n/** Signature, `aud`, `iss` and `exp` only; the caller then asks `RevocationSet` about `gid`. */\nexport async function verifyTurnToken(\n  keys: TurnTokenKeys,\n  token: TurnToken,\n  now: number,\n): Promise<TurnTokenClaims> {\n  let payload: unknown;\n  try {\n    ({ payload } = await jwtVerify(\n      token,\n      (header) => {\n        const key =\n          header.kid === undefined ? undefined : keys.publicKeys.get(header.kid);\n        if (!key) throw new errors.JWKSNoMatchingKey();\n        return key;\n      },\n      {\n        algorithms: [\"ES256\"],\n        typ: TURN_TOKEN_TYP,\n        issuer: keys.issuer,\n        audience: TURN_AUDIENCE,\n        currentDate: new Date(now),\n      },\n    ));\n  } catch (error) {\n    if (error instanceof errors.JWTExpired) {\n      throw new AuthFailure(\"expired\", \"The turn token expired.\");\n    }\n    throw new AuthFailure(\"invalid\", \"The turn token is invalid.\");\n  }\n  const claims = claimsSchema.safeParse(payload);\n  if (!claims.success) throw new AuthFailure(\"invalid\", \"The turn token is malformed.\");\n  const { iat, exp } = claims.data;\n  if (exp - iat > MAX_TURN_TOKEN_TTL_MS / 1000 || iat * 1000 > now + CLOCK_SKEW_MS) {\n    throw new AuthFailure(\"invalid\", \"The turn token has an impossible lifetime.\");\n  }\n  return claims.data;\n}\n\nexport function agentPrincipalOf(\n  claims: TurnTokenClaims,\n): AgentPrincipal & { readonly turn: TurnBinding } {\n  return {\n    kind: \"agent\",\n    userId: asId(\"user\", claims.sub),\n    grantId: asId(\"grant\", claims.gid),\n    agent: { name: claims.agt, verified: true },\n    turn: {\n      threadId: asId(\"thread\", claims.thr),\n      turnId: asId(\"turn\", claims.trn),\n      hostId: asId(\"host\", claims.hid),\n      clientId: claims.cid,\n    },\n  };\n}\n"]}

package/dist/turn-keys.d.ts

@@ -0,0 +1,16 @@
+import type { DataProvider } from "@parlor/core";
+import type { Migration } from "@parlor/server";
+import type { TurnTokenKeys } from "./tokens.js";
+export declare const TURN_KEYS_MIGRATION: Migration;
+export interface TurnKeyStore {
+    keys(): Promise<TurnTokenKeys>;
+    refresh(): Promise<TurnTokenKeys>;
+}
+export interface TurnKeyStoreOptions {
+    readonly database: DataProvider;
+    readonly issuer: string;
+    readonly secret: () => Promise<string>;
+    readonly now?: (() => number) | undefined;
+}
+export declare function createTurnKeyStore(options: TurnKeyStoreOptions): TurnKeyStore;
+//# sourceMappingURL=turn-keys.d.ts.map

package/dist/turn-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"turn-keys.d.ts","sourceRoot":"","sources":["../src/turn-keys.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAKhD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAEjD,eAAO,MAAM,mBAAmB,EAAE,SAWjC,CAAC;AAiCF,MAAM,WAAW,YAAY;IAC3B,IAAI,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC;IAC/B,OAAO,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;IACvC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,MAAM,CAAC,GAAG,SAAS,CAAC;CAC3C;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,YAAY,CAiG7E"}

package/dist/turn-keys.js

@@ -0,0 +1,108 @@
+import { createCipheriv, createDecipheriv, hkdfSync, randomBytes } from "node:crypto";
+import { sql } from "drizzle-orm";
+import { exportJWK, generateKeyPair } from "jose";
+import { jwkOf, rowsOf } from "./database.js";
+export const TURN_KEYS_MIGRATION = {
+    id: "auth/0005_turn_keys",
+    sql: `
+    create table parlor_auth_turn_keys (
+      kid text primary key,
+      public_key jsonb not null,
+      private_key text not null,
+      active boolean not null default true,
+      created_at timestamptz not null default now()
+    );
+    create unique index parlor_auth_turn_keys_active on parlor_auth_turn_keys (active) where active`,
+};
+const KEY_ALGORITHM = { name: "ECDSA", namedCurve: "P-256" };
+const REFRESH_MIN_INTERVAL_MS = 1000;
+function sealingKey(secret) {
+    return Buffer.from(hkdfSync("sha256", secret, "", "parlor-auth/turn-keys", 32));
+}
+function seal(secret, plaintext) {
+    const iv = randomBytes(12);
+    const cipher = createCipheriv("aes-256-gcm", sealingKey(secret), iv);
+    const body = Buffer.concat([cipher.update(plaintext, "utf8"), cipher.final()]);
+    return [iv, cipher.getAuthTag(), body]
+        .map((part) => part.toString("base64url"))
+        .join(".");
+}
+function unseal(secret, sealed) {
+    const [iv, tag, body] = sealed.split(".").map((part) => Buffer.from(part, "base64url"));
+    if (!iv || !tag || !body)
+        throw new Error("The sealed turn key is malformed.");
+    const decipher = createDecipheriv("aes-256-gcm", sealingKey(secret), iv);
+    decipher.setAuthTag(tag);
+    return Buffer.concat([decipher.update(body), decipher.final()]).toString("utf8");
+}
+export function createTurnKeyStore(options) {
+    const { database, issuer } = options;
+    const now = options.now ?? Date.now;
+    let loaded;
+    let refreshedAt = 0;
+    const read = async () => rowsOf(await database.read().execute(sql `select kid, public_key, private_key, active from parlor_auth_turn_keys`));
+    const replace = async (secret, retiring) => {
+        const pair = await generateKeyPair("ES256", { extractable: true });
+        const publicKey = await exportJWK(pair.publicKey);
+        const privateKey = await exportJWK(pair.privateKey);
+        const kid = crypto.randomUUID();
+        await database.transaction(async (tx) => {
+            const db = tx;
+            if (retiring !== undefined) {
+                await db.execute(sql `update parlor_auth_turn_keys set active = false where kid = ${retiring} and active`);
+            }
+            await db.execute(sql `
+        insert into parlor_auth_turn_keys (kid, public_key, private_key)
+        values (${kid}, ${JSON.stringify(publicKey)}::jsonb, ${seal(secret, JSON.stringify(privateKey))})
+        on conflict do nothing`);
+        });
+    };
+    const signingKeyOf = async (secret, row) => {
+        try {
+            return await crypto.subtle.importKey("jwk", JSON.parse(unseal(secret, row.private_key)), KEY_ALGORITHM, false, ["sign"]);
+        }
+        catch {
+            return undefined;
+        }
+    };
+    const build = async (mayReplace) => {
+        const secret = await options.secret();
+        let rows = await read();
+        let active = rows.find((row) => row.active);
+        let privateKey = active && (await signingKeyOf(secret, active));
+        if (!privateKey && !mayReplace)
+            throw new Error("The turn signing key cannot be opened.");
+        if (!privateKey) {
+            await replace(secret, active?.kid);
+            rows = await read();
+            active = rows.find((row) => row.active);
+            privateKey = active && (await signingKeyOf(secret, active));
+        }
+        if (!active || !privateKey)
+            throw new Error("The turn signing key could not be created.");
+        const verifyKeys = await Promise.all(rows.map(async (row) => {
+            const key = await crypto.subtle.importKey("jwk", jwkOf(row.public_key), KEY_ALGORITHM, false, ["verify"]);
+            return [row.kid, key];
+        }));
+        return { issuer, kid: active.kid, privateKey, publicKeys: new Map(verifyKeys) };
+    };
+    const load = () => {
+        loaded ??= build(true).catch((error) => {
+            loaded = undefined;
+            throw error;
+        });
+        return loaded;
+    };
+    return {
+        keys: load,
+        async refresh() {
+            const current = await load();
+            if (now() - refreshedAt < REFRESH_MIN_INTERVAL_MS)
+                return current;
+            refreshedAt = now();
+            loaded = build(false).catch(() => current);
+            return loaded;
+        },
+    };
+}
+//# sourceMappingURL=turn-keys.js.map

package/dist/turn-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"turn-keys.js","sourceRoot":"","sources":["../src/turn-keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAItF,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,MAAM,CAAC;AAElD,OAAO,EAAiB,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAG7D,MAAM,CAAC,MAAM,mBAAmB,GAAc;IAC5C,EAAE,EAAE,qBAAqB;IACzB,GAAG,EAAE;;;;;;;;oGAQ6F;CACnG,CAAC;AAEF,MAAM,aAAa,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAW,CAAC;AACtE,MAAM,uBAAuB,GAAG,IAAI,CAAC;AASrC,SAAS,UAAU,CAAC,MAAc;IAChC,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,uBAAuB,EAAE,EAAE,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,SAAS,IAAI,CAAC,MAAc,EAAE,SAAiB;IAC7C,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;IACrE,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IAC/E,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC;SACnC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;SACzC,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CAAC,MAAc,EAAE,MAAc;IAC5C,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;IACxF,IAAI,CAAC,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC/E,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;IACzE,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACzB,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AACnF,CAAC;AAcD,MAAM,UAAU,kBAAkB,CAAC,OAA4B;IAC7D,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IACrC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,IAAI,MAA0C,CAAC;IAC/C,IAAI,WAAW,GAAG,CAAC,CAAC;IAEpB,MAAM,IAAI,GAAG,KAAK,IAAuB,EAAE,CACzC,MAAM,CACJ,MAAO,QAAQ,CAAC,IAAI,EAAe,CAAC,OAAO,CACzC,GAAG,CAAA,wEAAwE,CAC5E,CACF,CAAC;IAEJ,MAAM,OAAO,GAAG,KAAK,EAAE,MAAc,EAAE,QAA4B,EAAiB,EAAE;QACpF,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,MAAM,SAAS,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAClD,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;QAChC,MAAM,QAAQ,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;YACtC,MAAM,EAAE,GAAG,EAAc,CAAC;YAC1B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,EAAE,CAAC,OAAO,CACd,GAAG,CAAA,+DAA+D,QAAQ,aAAa,CACxF,CAAC;YACJ,CAAC;YACD,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAA;;kBAER,GAAG,KAAK,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,YAAY,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;+BACxE,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,KAAK,EACxB,MAAc,EACd,GAAW,EACqB,EAAE;QAClC,IAAI,CAAC;YACH,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAClC,KAAK,EACL,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,CAAC,CAAe,EACzD,aAAa,EACb,KAAK,EACL,CAAC,MAAM,CAAC,CACT,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,KAAK,EAAE,UAAmB,EAA0B,EAAE;QAClE,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,CAAC;QACtC,IAAI,IAAI,GAAG,MAAM,IAAI,EAAE,CAAC;QACxB,IAAI,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU;YAC5B,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YACnC,IAAI,GAAG,MAAM,IAAI,EAAE,CAAC;YACpB,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACxC,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9D,CAAC;QACD,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU;YACxB,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,GAAG,CAClC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACrB,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACvC,KAAK,EACL,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EACrB,aAAa,EACb,KAAK,EACL,CAAC,QAAQ,CAAC,CACX,CAAC;YACF,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAU,CAAC;QACjC,CAAC,CAAC,CACH,CAAC;QACF,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;IAClF,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,GAA2B,EAAE;QACxC,MAAM,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC9C,MAAM,GAAG,SAAS,CAAC;YACnB,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,IAAI;QACV,KAAK,CAAC,OAAO;YACX,MAAM,OAAO,GAAG,MAAM,IAAI,EAAE,CAAC;YAC7B,IAAI,GAAG,EAAE,GAAG,WAAW,GAAG,uBAAuB;gBAAE,OAAO,OAAO,CAAC;YAClE,WAAW,GAAG,GAAG,EAAE,CAAC;YACpB,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;YAC3C,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC","sourcesContent":["import { createCipheriv, createDecipheriv, hkdfSync, randomBytes } from \"node:crypto\";\n\nimport type { DataProvider } from \"@parlor/core\";\nimport type { Migration } from \"@parlor/server\";\nimport { sql } from \"drizzle-orm\";\nimport { exportJWK, generateKeyPair } from \"jose\";\n\nimport { type Database, jwkOf, rowsOf } from \"./database.js\";\nimport type { TurnTokenKeys } from \"./tokens.js\";\n\nexport const TURN_KEYS_MIGRATION: Migration = {\n  id: \"auth/0005_turn_keys\",\n  sql: `\n    create table parlor_auth_turn_keys (\n      kid text primary key,\n      public_key jsonb not null,\n      private_key text not null,\n      active boolean not null default true,\n      created_at timestamptz not null default now()\n    );\n    create unique index parlor_auth_turn_keys_active on parlor_auth_turn_keys (active) where active`,\n};\n\nconst KEY_ALGORITHM = { name: \"ECDSA\", namedCurve: \"P-256\" } as const;\nconst REFRESH_MIN_INTERVAL_MS = 1000;\n\ninterface KeyRow {\n  readonly kid: string;\n  readonly public_key: JsonWebKey | string;\n  readonly private_key: string;\n  readonly active: boolean;\n}\n\nfunction sealingKey(secret: string): Buffer {\n  return Buffer.from(hkdfSync(\"sha256\", secret, \"\", \"parlor-auth/turn-keys\", 32));\n}\n\nfunction seal(secret: string, plaintext: string): string {\n  const iv = randomBytes(12);\n  const cipher = createCipheriv(\"aes-256-gcm\", sealingKey(secret), iv);\n  const body = Buffer.concat([cipher.update(plaintext, \"utf8\"), cipher.final()]);\n  return [iv, cipher.getAuthTag(), body]\n    .map((part) => part.toString(\"base64url\"))\n    .join(\".\");\n}\n\nfunction unseal(secret: string, sealed: string): string {\n  const [iv, tag, body] = sealed.split(\".\").map((part) => Buffer.from(part, \"base64url\"));\n  if (!iv || !tag || !body) throw new Error(\"The sealed turn key is malformed.\");\n  const decipher = createDecipheriv(\"aes-256-gcm\", sealingKey(secret), iv);\n  decipher.setAuthTag(tag);\n  return Buffer.concat([decipher.update(body), decipher.final()]).toString(\"utf8\");\n}\n\nexport interface TurnKeyStore {\n  keys(): Promise<TurnTokenKeys>;\n  refresh(): Promise<TurnTokenKeys>;\n}\n\nexport interface TurnKeyStoreOptions {\n  readonly database: DataProvider;\n  readonly issuer: string;\n  readonly secret: () => Promise<string>;\n  readonly now?: (() => number) | undefined;\n}\n\nexport function createTurnKeyStore(options: TurnKeyStoreOptions): TurnKeyStore {\n  const { database, issuer } = options;\n  const now = options.now ?? Date.now;\n  let loaded: Promise<TurnTokenKeys> | undefined;\n  let refreshedAt = 0;\n\n  const read = async (): Promise<KeyRow[]> =>\n    rowsOf<KeyRow>(\n      await (database.read() as Database).execute(\n        sql`select kid, public_key, private_key, active from parlor_auth_turn_keys`,\n      ),\n    );\n\n  const replace = async (secret: string, retiring: string | undefined): Promise<void> => {\n    const pair = await generateKeyPair(\"ES256\", { extractable: true });\n    const publicKey = await exportJWK(pair.publicKey);\n    const privateKey = await exportJWK(pair.privateKey);\n    const kid = crypto.randomUUID();\n    await database.transaction(async (tx) => {\n      const db = tx as Database;\n      if (retiring !== undefined) {\n        await db.execute(\n          sql`update parlor_auth_turn_keys set active = false where kid = ${retiring} and active`,\n        );\n      }\n      await db.execute(sql`\n        insert into parlor_auth_turn_keys (kid, public_key, private_key)\n        values (${kid}, ${JSON.stringify(publicKey)}::jsonb, ${seal(secret, JSON.stringify(privateKey))})\n        on conflict do nothing`);\n    });\n  };\n\n  const signingKeyOf = async (\n    secret: string,\n    row: KeyRow,\n  ): Promise<CryptoKey | undefined> => {\n    try {\n      return await crypto.subtle.importKey(\n        \"jwk\",\n        JSON.parse(unseal(secret, row.private_key)) as JsonWebKey,\n        KEY_ALGORITHM,\n        false,\n        [\"sign\"],\n      );\n    } catch {\n      return undefined;\n    }\n  };\n\n  const build = async (mayReplace: boolean): Promise<TurnTokenKeys> => {\n    const secret = await options.secret();\n    let rows = await read();\n    let active = rows.find((row) => row.active);\n    let privateKey = active && (await signingKeyOf(secret, active));\n    if (!privateKey && !mayReplace)\n      throw new Error(\"The turn signing key cannot be opened.\");\n    if (!privateKey) {\n      await replace(secret, active?.kid);\n      rows = await read();\n      active = rows.find((row) => row.active);\n      privateKey = active && (await signingKeyOf(secret, active));\n    }\n    if (!active || !privateKey)\n      throw new Error(\"The turn signing key could not be created.\");\n    const verifyKeys = await Promise.all(\n      rows.map(async (row) => {\n        const key = await crypto.subtle.importKey(\n          \"jwk\",\n          jwkOf(row.public_key),\n          KEY_ALGORITHM,\n          false,\n          [\"verify\"],\n        );\n        return [row.kid, key] as const;\n      }),\n    );\n    return { issuer, kid: active.kid, privateKey, publicKeys: new Map(verifyKeys) };\n  };\n\n  const load = (): Promise<TurnTokenKeys> => {\n    loaded ??= build(true).catch((error: unknown) => {\n      loaded = undefined;\n      throw error;\n    });\n    return loaded;\n  };\n\n  return {\n    keys: load,\n    async refresh() {\n      const current = await load();\n      if (now() - refreshedAt < REFRESH_MIN_INTERVAL_MS) return current;\n      refreshedAt = now();\n      loaded = build(false).catch(() => current);\n      return loaded;\n    },\n  };\n}\n"]}