@parlor/capabilities 0.0.0-stage → 0.1.0

package/dist/device-key/interface.d.ts

@@ -0,0 +1,74 @@
+/**
+ * A device's signing identity; its private keys never leave the platform keystore. The
+ * signing key signs prompts with no user present. The presence key signs answers to an
+ * agent's own permission prompts and always needs Touch ID, Face ID or a passkey.
+ */
+export interface DeviceKey {
+    /**
+     * Creates the keys on first use; stable afterwards. `presence: false` settles this device
+     * without a presence key. Throws `PresenceSetupCancelled`, keeping nothing, when the user
+     * dismisses the platform's prompt, so a later call can ask again.
+     */
+    publicKeys(enrollment: PresenceEnrollment, options?: {
+        readonly presence?: boolean;
+    }): Promise<DevicePublicKeys>;
+    /**
+     * `needed` while the next `publicKeys` would show a platform prompt (a passkey on the web),
+     * so the app can explain it first. Absent where creating the keys never prompts.
+     */
+    presenceSetup?(): Promise<"needed" | "done">;
+    sign(payload: Uint8Array, options: {
+        readonly presence: false;
+    }): Promise<DeviceSignature>;
+    sign(payload: Uint8Array, options: {
+        readonly presence: true;
+    }): Promise<PresenceSignature>;
+}
+export declare class PresenceSetupCancelled extends Error {
+    readonly name = "PresenceSetupCancelled";
+    constructor();
+}
+export interface PresenceEnrollment {
+    readonly rpId: string;
+    readonly userId: string;
+    readonly userName: string;
+    /** Server-issued, single use; the proof of possession signs it. */
+    readonly challenge: Uint8Array;
+}
+export interface DevicePublicKeys {
+    readonly signing: {
+        readonly keyId: string;
+        readonly publicKey: JsonWebKey;
+    };
+    /** Absent where the platform has no presence authenticator. */
+    readonly presence?: PresencePublicKey | undefined;
+    readonly proof: DeviceSignature;
+}
+export type PresencePublicKey = {
+    readonly format: "webauthn";
+    readonly credentialId: string;
+    readonly publicKey: JsonWebKey;
+    /** The attestation object, verified by the server once at enrollment. */
+    readonly attestation: string;
+} | {
+    readonly format: "es256-raw";
+    readonly keyId: string;
+    readonly publicKey: JsonWebKey;
+};
+export interface DeviceSignature {
+    readonly keyId: string;
+    readonly presence: "none" | "user";
+    readonly format: "es256-raw" | "webauthn";
+    /** base64url */
+    readonly signature: string;
+    readonly authenticatorData?: string | undefined;
+    readonly clientDataJSON?: string | undefined;
+}
+declare const presenceBrand: unique symbol;
+/** Only `sign(..., { presence: true })` produces one, so an ordinary signature never passes for it. */
+export type PresenceSignature = DeviceSignature & {
+    readonly presence: "user";
+    readonly [presenceBrand]: true;
+};
+export {};
+//# sourceMappingURL=interface.d.ts.map

package/dist/device-key/interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interface.d.ts","sourceRoot":"","sources":["../../src/device-key/interface.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,WAAW,SAAS;IACxB;;;;OAIG;IACH,UAAU,CACR,UAAU,EAAE,kBAAkB,EAC9B,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GACxC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC7B;;;OAGG;IACH,aAAa,CAAC,IAAI,OAAO,CAAC,QAAQ,GAAG,MAAM,CAAC,CAAC;IAC7C,IAAI,CACF,OAAO,EAAE,UAAU,EACnB,OAAO,EAAE;QAAE,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAA;KAAE,GACpC,OAAO,CAAC,eAAe,CAAC,CAAC;IAC5B,IAAI,CACF,OAAO,EAAE,UAAU,EACnB,OAAO,EAAE;QAAE,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAA;KAAE,GACnC,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC/B;AAED,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,SAAkB,IAAI,4BAA4B;IAClD,cAEC;CACF;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,mEAAmE;IACnE,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;CAChC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAA;KAAE,CAAC;IAC7E,+DAA+D;IAC/D,QAAQ,CAAC,QAAQ,CAAC,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;CACjC;AAED,MAAM,MAAM,iBAAiB,GACzB;IACE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;IAC/B,yEAAyE;IACzE,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B,GACD;IACE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;CAChC,CAAC;AAEN,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,UAAU,CAAC;IAC1C,gBAAgB;IAChB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9C;AAED,OAAO,CAAC,MAAM,aAAa,EAAE,OAAO,MAAM,CAAC;AAE3C,uGAAuG;AACvG,MAAM,MAAM,iBAAiB,GAAG,eAAe,GAAG;IAChD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,CAAC,aAAa,CAAC,EAAE,IAAI,CAAC;CAChC,CAAC"}

package/dist/device-key/interface.js

@@ -0,0 +1,7 @@
+export class PresenceSetupCancelled extends Error {
+    name = "PresenceSetupCancelled";
+    constructor() {
+        super("The passkey was not created.");
+    }
+}
+//# sourceMappingURL=interface.js.map

package/dist/device-key/interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interface.js","sourceRoot":"","sources":["../../src/device-key/interface.ts"],"names":[],"mappings":"AA8BA,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC7B,IAAI,GAAG,wBAAwB,CAAC;IAClD;QACE,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACxC,CAAC;CACF"}

package/dist/device-key/native.d.ts

@@ -0,0 +1,38 @@
+import type { DeviceKey } from "./interface.js";
+export interface NativePublicKeys {
+    readonly signing: {
+        readonly keyId: string;
+        readonly publicKey: JsonWebKey;
+    };
+    readonly presence?: {
+        readonly keyId: string;
+        readonly publicKey: JsonWebKey;
+    };
+    readonly proof: {
+        readonly signature: string;
+    };
+}
+export interface NativeKeystore {
+    publicKeys(options: {
+        readonly presence: boolean;
+        readonly challenge: string;
+    }): Promise<NativePublicKeys>;
+    sign(options: {
+        readonly keyId: string;
+        readonly payload: string;
+    }): Promise<{
+        readonly signature: string;
+    }>;
+}
+export declare function nativeDeviceKey(keystore: NativeKeystore): DeviceKey;
+interface Invoker {
+    invoke<T>(command: string, args?: Record<string, unknown>): Promise<T>;
+}
+/**
+ * Whether the shell carries a working native command: one an older generated project lacks
+ * ("not found") or a platform without a keystore refuses ("unsupported") is unavailable.
+ */
+export declare function hasNativeCommand(load: () => Promise<Invoker>, command: string, args?: Record<string, unknown>): Promise<boolean>;
+export declare function hasIosPlugin(): boolean;
+export {};
+//# sourceMappingURL=native.d.ts.map

package/dist/device-key/native.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"native.d.ts","sourceRoot":"","sources":["../../src/device-key/native.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,SAAS,EAIV,MAAM,gBAAgB,CAAC;AAExB,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAA;KAAE,CAAC;IAC7E,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAA;KAAE,CAAC;IAC/E,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;CAChD;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,CAAC,OAAO,EAAE;QAClB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;QAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE;QACZ,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,GAAG,OAAO,CAAC;QAAE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC7C;AAED,wBAAgB,eAAe,CAAC,QAAQ,EAAE,cAAc,GAAG,SAAS,CAwDnE;AAED,UAAU,OAAO;IACf,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CACxE;AAID;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,EAC5B,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC7B,OAAO,CAAC,OAAO,CAAC,CAQlB;AAED,wBAAgB,YAAY,IAAI,OAAO,CAGtC"}

package/dist/device-key/native.js

@@ -0,0 +1,67 @@
+import { detectPlatform } from "../runtime.js";
+import { encodeBase64url } from "./encoding.js";
+export function nativeDeviceKey(keystore) {
+    let known;
+    const keysOf = () => (known ??= keystore.publicKeys({ presence: true, challenge: "" }));
+    const signature = async (keyId, presence, payload) => ({
+        keyId,
+        presence,
+        format: "es256-raw",
+        signature: (await keystore.sign({ keyId, payload: encodeBase64url(payload) }))
+            .signature,
+    });
+    async function sign(payload, options) {
+        const keys = await keysOf();
+        if (!options.presence)
+            return signature(keys.signing.keyId, "none", payload);
+        if (!keys.presence)
+            throw new Error("This device has no presence key.");
+        return (await signature(keys.presence.keyId, "user", payload));
+    }
+    return {
+        async publicKeys(enrollment) {
+            const pending = keystore.publicKeys({
+                presence: true,
+                challenge: encodeBase64url(enrollment.challenge),
+            });
+            known = pending;
+            const keys = await pending;
+            return {
+                signing: keys.signing,
+                presence: keys.presence && {
+                    format: "es256-raw",
+                    keyId: keys.presence.keyId,
+                    publicKey: keys.presence.publicKey,
+                },
+                proof: {
+                    keyId: keys.signing.keyId,
+                    presence: "none",
+                    format: "es256-raw",
+                    signature: keys.proof.signature,
+                },
+            };
+        },
+        sign,
+    };
+}
+const UNAVAILABLE = /not found|unsupported/i;
+/**
+ * Whether the shell carries a working native command: one an older generated project lacks
+ * ("not found") or a platform without a keystore refuses ("unsupported") is unavailable.
+ */
+export async function hasNativeCommand(load, command, args) {
+    if (detectPlatform() !== "tauri")
+        return false;
+    try {
+        await (await load()).invoke(command, args);
+        return true;
+    }
+    catch (error) {
+        return !UNAVAILABLE.test(error instanceof Error ? error.message : String(error));
+    }
+}
+export function hasIosPlugin() {
+    const { Capacitor } = globalThis;
+    return detectPlatform() === "capacitor" && Capacitor?.getPlatform?.() === "ios";
+}
+//# sourceMappingURL=native.js.map

package/dist/device-key/native.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"native.js","sourceRoot":"","sources":["../../src/device-key/native.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAyBhD,MAAM,UAAU,eAAe,CAAC,QAAwB;IACtD,IAAI,KAA4C,CAAC;IACjD,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAExF,MAAM,SAAS,GAAG,KAAK,EACrB,KAAa,EACb,QAAyB,EACzB,OAAmB,EACO,EAAE,CAAC,CAAC;QAC9B,KAAK;QACL,QAAQ;QACR,MAAM,EAAE,WAAW;QACnB,SAAS,EAAE,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;aAC3E,SAAS;KACb,CAAC,CAAC;IAUH,KAAK,UAAU,IAAI,CAAC,OAAmB,EAAE,OAAuC;QAC9E,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAC7E,IAAI,CAAC,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACxE,OAAO,CAAC,MAAM,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAsB,CAAC;IACtF,CAAC;IAED,OAAO;QACL,KAAK,CAAC,UAAU,CAAC,UAAU;YACzB,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC;gBAClC,QAAQ,EAAE,IAAI;gBACd,SAAS,EAAE,eAAe,CAAC,UAAU,CAAC,SAAS,CAAC;aACjD,CAAC,CAAC;YACH,KAAK,GAAG,OAAO,CAAC;YAChB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC;YAC3B,OAAO;gBACL,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI;oBACzB,MAAM,EAAE,WAAW;oBACnB,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK;oBAC1B,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,SAAS;iBACnC;gBACD,KAAK,EAAE;oBACL,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;oBACzB,QAAQ,EAAE,MAAM;oBAChB,MAAM,EAAE,WAAW;oBACnB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,SAAS;iBAChC;aACF,CAAC;QACJ,CAAC;QACD,IAAI;KACL,CAAC;AACJ,CAAC;AAMD,MAAM,WAAW,GAAG,wBAAwB,CAAC;AAE7C;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAA4B,EAC5B,OAAe,EACf,IAA8B;IAE9B,IAAI,cAAc,EAAE,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC3C,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,MAAM,EAAE,SAAS,EAAE,GAAG,UAA4D,CAAC;IACnF,OAAO,cAAc,EAAE,KAAK,WAAW,IAAI,SAAS,EAAE,WAAW,EAAE,EAAE,KAAK,KAAK,CAAC;AAClF,CAAC"}

package/dist/device-key/tauri.d.ts

@@ -0,0 +1,8 @@
+import type { CapabilityAdapter } from "../capability.js";
+import type { DeviceKey } from "./interface.js";
+export interface TauriInvoke {
+    invoke<T>(command: string, args?: Record<string, unknown>): Promise<T>;
+}
+/** The generated `parlor_device_key_public` and `parlor_device_key_sign` commands, probed with a sign request for a key that cannot exist. */
+export declare function tauriDeviceKey(load?: () => Promise<TauriInvoke>): CapabilityAdapter<DeviceKey>;
+//# sourceMappingURL=tauri.d.ts.map

package/dist/device-key/tauri.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tauri.d.ts","sourceRoot":"","sources":["../../src/device-key/tauri.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAGhD,MAAM,WAAW,WAAW;IAC1B,MAAM,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CACxE;AAED,8IAA8I;AAC9I,wBAAgB,cAAc,CAC5B,IAAI,GAAE,MAAM,OAAO,CAAC,WAAW,CAAwC,GACtE,iBAAiB,CAAC,SAAS,CAAC,CAe9B"}

package/dist/device-key/tauri.js

@@ -0,0 +1,16 @@
+import { hasNativeCommand, nativeDeviceKey } from "./native.js";
+/** The generated `parlor_device_key_public` and `parlor_device_key_sign` commands, probed with a sign request for a key that cannot exist. */
+export function tauriDeviceKey(load = () => import("@tauri-apps/api/core")) {
+    return {
+        platform: "tauri",
+        available: () => hasNativeCommand(load, "parlor_device_key_sign", { keyId: "", payload: "" }),
+        create: async () => {
+            const { invoke } = await load();
+            return nativeDeviceKey({
+                publicKeys: (options) => invoke("parlor_device_key_public", { ...options }),
+                sign: (options) => invoke("parlor_device_key_sign", { ...options }),
+            });
+        },
+    };
+}
+//# sourceMappingURL=tauri.js.map

package/dist/device-key/tauri.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tauri.js","sourceRoot":"","sources":["../../src/device-key/tauri.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAyB,MAAM,aAAa,CAAC;AAMvF,8IAA8I;AAC9I,MAAM,UAAU,cAAc,CAC5B,IAAI,GAA+B,GAAG,EAAE,CAAC,MAAM,CAAC,sBAAsB,CAAC;IAEvE,OAAO;QACL,QAAQ,EAAE,OAAO;QACjB,SAAS,EAAE,GAAG,EAAE,CACd,gBAAgB,CAAC,IAAI,EAAE,wBAAwB,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAC9E,MAAM,EAAE,KAAK,IAAI,EAAE;YACjB,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,EAAE,CAAC;YAChC,OAAO,eAAe,CAAC;gBACrB,UAAU,EAAE,CAAC,OAAO,EAAE,EAAE,CACtB,MAAM,CAAmB,0BAA0B,EAAE,EAAE,GAAG,OAAO,EAAE,CAAC;gBACtE,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAChB,MAAM,CAAwB,wBAAwB,EAAE,EAAE,GAAG,OAAO,EAAE,CAAC;aAC1E,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/device-key/web.d.ts

@@ -0,0 +1,11 @@
+import type { CapabilityAdapter } from "../capability.js";
+import { type DeviceKey } from "./interface.js";
+export interface WebDeviceKeyApis {
+    readonly subtle: SubtleCrypto | undefined;
+    readonly indexedDB: IDBFactory | undefined;
+    readonly credentials: CredentialsContainer | undefined;
+    /** Whether a platform authenticator (Touch ID, Windows Hello) can make the passkey. */
+    readonly platformAuthenticator?: (() => Promise<boolean>) | undefined;
+}
+export declare function webDeviceKey(apis?: () => WebDeviceKeyApis): CapabilityAdapter<DeviceKey>;
+//# sourceMappingURL=web.d.ts.map

package/dist/device-key/web.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web.d.ts","sourceRoot":"","sources":["../../src/device-key/web.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAO1D,OAAO,EACL,KAAK,SAAS,EAOf,MAAM,gBAAgB,CAAC;AAExB,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,YAAY,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,UAAU,GAAG,SAAS,CAAC;IAC3C,QAAQ,CAAC,WAAW,EAAE,oBAAoB,GAAG,SAAS,CAAC;IACvD,uFAAuF;IACvF,QAAQ,CAAC,qBAAqB,CAAC,EAAE,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC;CACvE;AAmQD,wBAAgB,YAAY,CAC1B,IAAI,GAAE,MAAM,gBAKV,GACD,iBAAiB,CAAC,SAAS,CAAC,CAoB9B"}

package/dist/device-key/web.js

@@ -0,0 +1,210 @@
+import { decodeBase64url, encodeBase64url, enrollmentBytes, publicPoint, } from "./encoding.js";
+import { PresenceSetupCancelled, } from "./interface.js";
+const hasPlatformAuthenticator = async () => {
+    try {
+        return ((await globalThis.PublicKeyCredential?.isUserVerifyingPlatformAuthenticatorAvailable?.()) ??
+            false);
+    }
+    catch {
+        return false;
+    }
+};
+const DATABASE = "parlor";
+const STORE = "parlor-device";
+const SIGNING = "signing";
+const PRESENCE = "presence";
+const CEREMONY_TIMEOUT_MS = 60_000;
+const COSE_ES256 = -7;
+const P256 = { name: "ECDSA", namedCurve: "P-256" };
+const ES256 = { name: "ECDSA", hash: "SHA-256" };
+function settled(request) {
+    return new Promise((resolve, reject) => {
+        request.onsuccess = () => resolve(request.result);
+        request.onerror = () => reject(request.error);
+    });
+}
+function openKeyStore(factory) {
+    const database = new Promise((resolve, reject) => {
+        const request = factory.open(DATABASE, 1);
+        request.onupgradeneeded = () => void request.result.createObjectStore(STORE);
+        request.onsuccess = () => resolve(request.result);
+        request.onerror = () => reject(request.error);
+    });
+    return {
+        async read(key) {
+            const tx = (await database).transaction(STORE, "readonly");
+            return (await settled(tx.objectStore(STORE).get(key)));
+        },
+        async keepFirst(key, value) {
+            const tx = (await database).transaction(STORE, "readwrite");
+            const store = tx.objectStore(STORE);
+            const existing = (await settled(store.get(key)));
+            if (existing !== undefined)
+                return existing;
+            await settled(store.put(value, key));
+            return value;
+        },
+    };
+}
+const isPublicKeyCredential = (credential) => credential?.type === "public-key";
+const isAttestation = (response) => "attestationObject" in response;
+const isAssertion = (response) => "signature" in response;
+const NO_PRESENCE = { unavailable: true };
+function createWebDeviceKey(subtle, factory, credentials, platformAuthenticator) {
+    const store = openKeyStore(factory);
+    const thumbprint = async (key) => {
+        const { crv, kty, x, y } = key;
+        const digest = await subtle.digest("SHA-256", new TextEncoder().encode(JSON.stringify({ crv, kty, x, y })));
+        return encodeBase64url(new Uint8Array(digest));
+    };
+    const signingIdentity = async () => {
+        const stored = await store.read(SIGNING);
+        const pair = stored ??
+            (await store.keepFirst(SIGNING, await subtle.generateKey(P256, false, ["sign", "verify"])));
+        const publicKey = publicPoint(await subtle.exportKey("jwk", pair.publicKey));
+        return { privateKey: pair.privateKey, publicKey, keyId: await thumbprint(publicKey) };
+    };
+    const signRaw = async (payload) => {
+        const { privateKey, keyId } = await signingIdentity();
+        const signature = await subtle.sign(ES256, privateKey, new Uint8Array(payload));
+        return {
+            keyId,
+            presence: "none",
+            format: "es256-raw",
+            signature: encodeBase64url(new Uint8Array(signature)),
+        };
+    };
+    const createPresence = async (container, enrollment) => {
+        try {
+            const credential = await container.create({
+                publicKey: {
+                    rp: { id: enrollment.rpId, name: enrollment.rpId },
+                    user: {
+                        id: new TextEncoder().encode(enrollment.userId),
+                        name: enrollment.userName,
+                        displayName: enrollment.userName,
+                    },
+                    challenge: new Uint8Array(enrollment.challenge),
+                    pubKeyCredParams: [{ type: "public-key", alg: COSE_ES256 }],
+                    authenticatorSelection: {
+                        authenticatorAttachment: "platform",
+                        residentKey: "preferred",
+                        userVerification: "required",
+                    },
+                    attestation: "none",
+                    timeout: CEREMONY_TIMEOUT_MS,
+                },
+            });
+            if (!isPublicKeyCredential(credential) || !isAttestation(credential.response)) {
+                return { unavailable: true };
+            }
+            const spki = credential.response.getPublicKey();
+            if (spki === null)
+                return { unavailable: true };
+            const key = await subtle.importKey("spki", spki, P256, true, ["verify"]);
+            return {
+                credentialId: encodeBase64url(new Uint8Array(credential.rawId)),
+                rpId: enrollment.rpId,
+                publicKey: publicPoint(await subtle.exportKey("jwk", key)),
+                attestation: encodeBase64url(new Uint8Array(credential.response.attestationObject)),
+            };
+        }
+        catch (error) {
+            if (error instanceof Error && error.name === "NotAllowedError") {
+                throw new PresenceSetupCancelled();
+            }
+            return NO_PRESENCE;
+        }
+    };
+    const canCreatePresence = async () => credentials !== undefined && (await platformAuthenticator());
+    const presenceOf = async (enrollment, wanted) => {
+        const stored = (await store.read(PRESENCE)) ??
+            (await store.keepFirst(PRESENCE, credentials && wanted && (await canCreatePresence())
+                ? await createPresence(credentials, enrollment)
+                : NO_PRESENCE));
+        if ("unavailable" in stored)
+            return undefined;
+        return {
+            format: "webauthn",
+            credentialId: stored.credentialId,
+            publicKey: stored.publicKey,
+            attestation: stored.attestation,
+        };
+    };
+    const signPresence = async (payload) => {
+        const stored = await store.read(PRESENCE);
+        if (!credentials || !stored || "unavailable" in stored) {
+            throw new Error("This device has no presence key.");
+        }
+        const challenge = new Uint8Array(await subtle.digest("SHA-256", new Uint8Array(payload)));
+        const assertion = await credentials.get({
+            publicKey: {
+                challenge,
+                rpId: stored.rpId,
+                allowCredentials: [
+                    { type: "public-key", id: decodeBase64url(stored.credentialId) },
+                ],
+                userVerification: "required",
+                timeout: CEREMONY_TIMEOUT_MS,
+            },
+        });
+        if (!isPublicKeyCredential(assertion) || !isAssertion(assertion.response)) {
+            throw new Error("The presence check did not complete.");
+        }
+        const { authenticatorData, clientDataJSON, signature } = assertion.response;
+        return {
+            keyId: stored.credentialId,
+            presence: "user",
+            format: "webauthn",
+            signature: encodeBase64url(new Uint8Array(signature)),
+            authenticatorData: encodeBase64url(new Uint8Array(authenticatorData)),
+            clientDataJSON: encodeBase64url(new Uint8Array(clientDataJSON)),
+        };
+    };
+    async function sign(payload, options) {
+        return options.presence ? signPresence(payload) : signRaw(payload);
+    }
+    return {
+        async publicKeys(enrollment, options) {
+            const { publicKey, keyId } = await signingIdentity();
+            const presence = await presenceOf(enrollment, options?.presence ?? true);
+            return {
+                signing: { keyId, publicKey },
+                presence,
+                proof: await signRaw(enrollmentBytes({
+                    challenge: enrollment.challenge,
+                    signing: publicKey,
+                    presence,
+                })),
+            };
+        },
+        sign,
+        async presenceSetup() {
+            if (await store.read(PRESENCE))
+                return "done";
+            return (await canCreatePresence()) ? "needed" : "done";
+        },
+    };
+}
+export function webDeviceKey(apis = () => ({
+    subtle: globalThis.crypto?.subtle,
+    indexedDB: globalThis.indexedDB,
+    credentials: globalThis.navigator?.credentials,
+    platformAuthenticator: hasPlatformAuthenticator,
+})) {
+    return {
+        platform: "web",
+        available: () => {
+            const { subtle, indexedDB } = apis();
+            return subtle !== undefined && indexedDB !== undefined;
+        },
+        create: () => {
+            const { subtle, indexedDB, credentials, platformAuthenticator } = apis();
+            if (!subtle || !indexedDB) {
+                throw new Error("This browser cannot keep a device key.");
+            }
+            return createWebDeviceKey(subtle, indexedDB, credentials, platformAuthenticator ?? hasPlatformAuthenticator);
+        },
+    };
+}
+//# sourceMappingURL=web.js.map

package/dist/device-key/web.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web.js","sourceRoot":"","sources":["../../src/device-key/web.ts"],"names":[],"mappings":"AACA,OAAO,EACL,eAAe,EACf,eAAe,EACf,eAAe,EACf,WAAW,GACZ,MAAM,eAAe,CAAC;AACvB,OAAO,EAML,sBAAsB,GAEvB,MAAM,gBAAgB,CAAC;AAUxB,MAAM,wBAAwB,GAAG,KAAK,IAAsB,EAAE;IAC5D,IAAI,CAAC;QACH,OAAO,CACL,CAAC,MAAM,UAAU,CAAC,mBAAmB,EAAE,6CAA6C,EAAE,EAAE,CAAC;YACzF,KAAK,CACN,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,QAAQ,CAAC;AAC1B,MAAM,KAAK,GAAG,eAAe,CAAC;AAC9B,MAAM,OAAO,GAAG,SAAS,CAAC;AAC1B,MAAM,QAAQ,GAAG,UAAU,CAAC;AAC5B,MAAM,mBAAmB,GAAG,MAAM,CAAC;AACnC,MAAM,UAAU,GAAG,CAAC,CAAC,CAAC;AACtB,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAW,CAAC;AAC7D,MAAM,KAAK,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAW,CAAC;AAgB1D,SAAS,OAAO,CAAI,OAAsB;IACxC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,OAAO,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClD,OAAO,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,OAAmB;IACvC,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAc,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC5D,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC1C,OAAO,CAAC,eAAe,GAAG,GAAG,EAAE,CAAC,KAAK,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAC7E,OAAO,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClD,OAAO,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IACH,OAAO;QACL,KAAK,CAAC,IAAI,CAAI,GAAW;YACvB,MAAM,EAAE,GAAG,CAAC,MAAM,QAAQ,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YAC3D,OAAO,CAAC,MAAM,OAAO,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAkB,CAAC;QAC1E,CAAC;QACD,KAAK,CAAC,SAAS,CAAI,GAAW,EAAE,KAAQ;YACtC,MAAM,EAAE,GAAG,CAAC,MAAM,QAAQ,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YAC5D,MAAM,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACpC,MAAM,QAAQ,GAAG,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAkB,CAAC;YAClE,IAAI,QAAQ,KAAK,SAAS;gBAAE,OAAO,QAAQ,CAAC;YAC5C,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;YACrC,OAAO,KAAK,CAAC;QACf,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,qBAAqB,GAAG,CAC5B,UAA6B,EACM,EAAE,CAAC,UAAU,EAAE,IAAI,KAAK,YAAY,CAAC;AAE1E,MAAM,aAAa,GAAG,CACpB,QAA+B,EACe,EAAE,CAAC,mBAAmB,IAAI,QAAQ,CAAC;AAEnF,MAAM,WAAW,GAAG,CAClB,QAA+B,EACa,EAAE,CAAC,WAAW,IAAI,QAAQ,CAAC;AAEzE,MAAM,WAAW,GAAmB,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;AAE1D,SAAS,kBAAkB,CACzB,MAAoB,EACpB,OAAmB,EACnB,WAA6C,EAC7C,qBAA6C;IAE7C,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAEpC,MAAM,UAAU,GAAG,KAAK,EAAE,GAAe,EAAE,EAAE;QAC3C,MAAM,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,GAAG,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAChC,SAAS,EACT,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAC7D,CAAC;QACF,OAAO,eAAe,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACjD,CAAC,CAAC;IAEF,MAAM,eAAe,GAAG,KAAK,IAAI,EAAE;QACjC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAgB,OAAO,CAAC,CAAC;QACxD,MAAM,IAAI,GACR,MAAM;YACN,CAAC,MAAM,KAAK,CAAC,SAAS,CACpB,OAAO,EACP,MAAM,MAAM,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAC1D,CAAC,CAAC;QACL,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7E,OAAO,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;IACxF,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,KAAK,EAAE,OAAmB,EAA4B,EAAE;QACtE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;QACtD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC;QAChF,OAAO;YACL,KAAK;YACL,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,WAAW;YACnB,SAAS,EAAE,eAAe,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;SACtD,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,cAAc,GAAG,KAAK,EAC1B,SAA+B,EAC/B,UAA8B,EACL,EAAE;QAC3B,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC;gBACxC,SAAS,EAAE;oBACT,EAAE,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE;oBAClD,IAAI,EAAE;wBACJ,EAAE,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC;wBAC/C,IAAI,EAAE,UAAU,CAAC,QAAQ;wBACzB,WAAW,EAAE,UAAU,CAAC,QAAQ;qBACjC;oBACD,SAAS,EAAE,IAAI,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC;oBAC/C,gBAAgB,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC;oBAC3D,sBAAsB,EAAE;wBACtB,uBAAuB,EAAE,UAAU;wBACnC,WAAW,EAAE,WAAW;wBACxB,gBAAgB,EAAE,UAAU;qBAC7B;oBACD,WAAW,EAAE,MAAM;oBACnB,OAAO,EAAE,mBAAmB;iBAC7B;aACF,CAAC,CAAC;YACH,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC9E,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;YAC/B,CAAC;YACD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC;YAChD,IAAI,IAAI,KAAK,IAAI;gBAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;YAChD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;YACzE,OAAO;gBACL,YAAY,EAAE,eAAe,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;gBAC/D,IAAI,EAAE,UAAU,CAAC,IAAI;gBACrB,SAAS,EAAE,WAAW,CAAC,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;gBAC1D,WAAW,EAAE,eAAe,CAC1B,IAAI,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CACtD;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBAC/D,MAAM,IAAI,sBAAsB,EAAE,CAAC;YACrC,CAAC;YACD,OAAO,WAAW,CAAC;QACrB,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,iBAAiB,GAAG,KAAK,IAAI,EAAE,CACnC,WAAW,KAAK,SAAS,IAAI,CAAC,MAAM,qBAAqB,EAAE,CAAC,CAAC;IAE/D,MAAM,UAAU,GAAG,KAAK,EACtB,UAA8B,EAC9B,MAAe,EACyB,EAAE;QAC1C,MAAM,MAAM,GACV,CAAC,MAAM,KAAK,CAAC,IAAI,CAAiB,QAAQ,CAAC,CAAC;YAC5C,CAAC,MAAM,KAAK,CAAC,SAAS,CACpB,QAAQ,EACR,WAAW,IAAI,MAAM,IAAI,CAAC,MAAM,iBAAiB,EAAE,CAAC;gBAClD,CAAC,CAAC,MAAM,cAAc,CAAC,WAAW,EAAE,UAAU,CAAC;gBAC/C,CAAC,CAAC,WAAW,CAChB,CAAC,CAAC;QACL,IAAI,aAAa,IAAI,MAAM;YAAE,OAAO,SAAS,CAAC;QAC9C,OAAO;YACL,MAAM,EAAE,UAAU;YAClB,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;SAChC,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,YAAY,GAAG,KAAK,EAAE,OAAmB,EAA8B,EAAE;QAC7E,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAiB,QAAQ,CAAC,CAAC;QAC1D,IAAI,CAAC,WAAW,IAAI,CAAC,MAAM,IAAI,aAAa,IAAI,MAAM,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QACtD,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,UAAU,CAC9B,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,CACxD,CAAC;QACF,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC;YACtC,SAAS,EAAE;gBACT,SAAS;gBACT,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,gBAAgB,EAAE;oBAChB,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,eAAe,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE;iBACjE;gBACD,gBAAgB,EAAE,UAAU;gBAC5B,OAAO,EAAE,mBAAmB;aAC7B;SACF,CAAC,CAAC;QACH,IAAI,CAAC,qBAAqB,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC1E,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,EAAE,iBAAiB,EAAE,cAAc,EAAE,SAAS,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAC;QAC5E,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,YAAY;YAC1B,QAAQ,EAAE,MAAM;YAChB,MAAM,EAAE,UAAU;YAClB,SAAS,EAAE,eAAe,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;YACrD,iBAAiB,EAAE,eAAe,CAAC,IAAI,UAAU,CAAC,iBAAiB,CAAC,CAAC;YACrE,cAAc,EAAE,eAAe,CAAC,IAAI,UAAU,CAAC,cAAc,CAAC,CAAC;SAC3C,CAAC;IACzB,CAAC,CAAC;IAUF,KAAK,UAAU,IAAI,CAAC,OAAmB,EAAE,OAAuC;QAC9E,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACrE,CAAC;IAED,OAAO;QACL,KAAK,CAAC,UAAU,CAAC,UAAU,EAAE,OAAO;YAClC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,MAAM,eAAe,EAAE,CAAC;YACrD,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,UAAU,EAAE,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC,CAAC;YACzE,OAAO;gBACL,OAAO,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE;gBAC7B,QAAQ;gBACR,KAAK,EAAE,MAAM,OAAO,CAClB,eAAe,CAAC;oBACd,SAAS,EAAE,UAAU,CAAC,SAAS;oBAC/B,OAAO,EAAE,SAAS;oBAClB,QAAQ;iBACT,CAAC,CACH;aACF,CAAC;QACJ,CAAC;QACD,IAAI;QACJ,KAAK,CAAC,aAAa;YACjB,IAAI,MAAM,KAAK,CAAC,IAAI,CAAiB,QAAQ,CAAC;gBAAE,OAAO,MAAM,CAAC;YAC9D,OAAO,CAAC,MAAM,iBAAiB,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;QACzD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAC1B,IAAI,GAA2B,GAAG,EAAE,CAAC,CAAC;IACpC,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,MAAM;IACjC,SAAS,EAAE,UAAU,CAAC,SAAS;IAC/B,WAAW,EAAE,UAAU,CAAC,SAAS,EAAE,WAAW;IAC9C,qBAAqB,EAAE,wBAAwB;CAChD,CAAC;IAEF,OAAO;QACL,QAAQ,EAAE,KAAK;QACf,SAAS,EAAE,GAAG,EAAE;YACd,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,CAAC;YACrC,OAAO,MAAM,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,CAAC;QACzD,CAAC;QACD,MAAM,EAAE,GAAG,EAAE;YACX,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,qBAAqB,EAAE,GAAG,IAAI,EAAE,CAAC;YACzE,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;gBAC1B,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAC5D,CAAC;YACD,OAAO,kBAAkB,CACvB,MAAM,EACN,SAAS,EACT,WAAW,EACX,qBAAqB,IAAI,wBAAwB,CAClD,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/files/capacitor.d.ts

@@ -0,0 +1,19 @@
+import type { CapabilityAdapter } from "../capability.js";
+import type { Files } from "./interface.js";
+/** `@capacitor/filesystem`, narrowed to writing base64 into the app's cache. */
+export interface CapacitorCacheWriter {
+    writeToCache(path: string, base64: string): Promise<{
+        uri: string;
+    }>;
+}
+export interface CapacitorShareModule {
+    Share: {
+        share(options: {
+            title?: string;
+            files: string[];
+        }): Promise<unknown>;
+    };
+}
+/** Picks with the webview's own file input; saves through the share sheet ("Save to Files"). */
+export declare function capacitorFiles(loadCache?: () => Promise<CapacitorCacheWriter>, loadShare?: () => Promise<CapacitorShareModule>, getDocument?: () => Document | undefined): CapabilityAdapter<Files>;
+//# sourceMappingURL=capacitor.d.ts.map

package/dist/files/capacitor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capacitor.d.ts","sourceRoot":"","sources":["../../src/files/capacitor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAI5C,gFAAgF;AAChF,MAAM,WAAW,oBAAoB;IACnC,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACtE;AAUD,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE;QAAE,KAAK,CAAC,OAAO,EAAE;YAAE,KAAK,CAAC,EAAE,MAAM,CAAC;YAAC,KAAK,EAAE,MAAM,EAAE,CAAA;SAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;KAAE,CAAC;CAClF;AAcD,gGAAgG;AAChG,wBAAgB,cAAc,CAC5B,SAAS,GAAE,MAAM,OAAO,CAAC,oBAAoB,CAAmB,EAChE,SAAS,GAAE,MAAM,OAAO,CAAC,oBAAoB,CAAoC,EACjF,WAAW,GAAE,MAAM,QAAQ,GAAG,SAAqC,GAClE,iBAAiB,CAAC,KAAK,CAAC,CA0B1B"}

package/dist/files/capacitor.js

@@ -0,0 +1,47 @@
+import { detectPlatform } from "../runtime.js";
+import { bytesOf } from "./mime.js";
+import { pickWithInput } from "./web.js";
+const filesystemCache = async () => {
+    const { Filesystem, Directory } = await import("@capacitor/filesystem");
+    return {
+        writeToCache: (path, data) => Filesystem.writeFile({ path, data, directory: Directory.Cache, recursive: true }),
+    };
+};
+function base64Of(bytes) {
+    let binary = "";
+    for (let at = 0; at < bytes.length; at += 0x8000) {
+        binary += String.fromCharCode(...bytes.subarray(at, at + 0x8000));
+    }
+    return btoa(binary);
+}
+/** The share sheet reports a dismissal as an error whose message says it was canceled. */
+const wasCancelled = (error) => error instanceof Error && /cancel/i.test(error.message);
+/** Picks with the webview's own file input; saves through the share sheet ("Save to Files"). */
+export function capacitorFiles(loadCache = filesystemCache, loadShare = () => import("@capacitor/share"), getDocument = () => globalThis.document) {
+    return {
+        platform: "capacitor",
+        available: () => detectPlatform() === "capacitor" && getDocument() !== undefined,
+        create: async () => {
+            const document = getDocument();
+            if (!document)
+                throw new Error("Files need a document");
+            const [cache, { Share }] = await Promise.all([loadCache(), loadShare()]);
+            return {
+                pick: (options) => pickWithInput(document, options),
+                save: async (data, options) => {
+                    const { uri } = await cache.writeToCache(`parlor-save/${options.name}`, base64Of(await bytesOf(data)));
+                    try {
+                        await Share.share({ title: options.name, files: [uri] });
+                        return "saved";
+                    }
+                    catch (error) {
+                        if (wasCancelled(error))
+                            return "cancelled";
+                        throw error;
+                    }
+                },
+            };
+        },
+    };
+}
+//# sourceMappingURL=capacitor.js.map

package/dist/files/capacitor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capacitor.js","sourceRoot":"","sources":["../../src/files/capacitor.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAOzC,MAAM,eAAe,GAAG,KAAK,IAAmC,EAAE;IAChE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAAC;IACxE,OAAO;QACL,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAC3B,UAAU,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;KACpF,CAAC;AACJ,CAAC,CAAC;AAMF,SAAS,QAAQ,CAAC,KAAiB;IACjC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,MAAM,EAAE,CAAC;QACjD,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC;AAED,0FAA0F;AAC1F,MAAM,YAAY,GAAG,CAAC,KAAc,EAAE,EAAE,CACtC,KAAK,YAAY,KAAK,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAE1D,gGAAgG;AAChG,MAAM,UAAU,cAAc,CAC5B,SAAS,GAAwC,eAAe,EAChE,SAAS,GAAwC,GAAG,EAAE,CAAC,MAAM,CAAC,kBAAkB,CAAC,EACjF,WAAW,GAA+B,GAAG,EAAE,CAAC,UAAU,CAAC,QAAQ;IAEnE,OAAO;QACL,QAAQ,EAAE,WAAW;QACrB,SAAS,EAAE,GAAG,EAAE,CAAC,cAAc,EAAE,KAAK,WAAW,IAAI,WAAW,EAAE,KAAK,SAAS;QAChF,MAAM,EAAE,KAAK,IAAI,EAAE;YACjB,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;YAC/B,IAAI,CAAC,QAAQ;gBAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;YACxD,MAAM,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;YACzE,OAAO;gBACL,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC;gBACnD,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE;oBAC5B,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,KAAK,CAAC,YAAY,CACtC,eAAe,OAAO,CAAC,IAAI,EAAE,EAC7B,QAAQ,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAC9B,CAAC;oBACF,IAAI,CAAC;wBACH,MAAM,KAAK,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;wBACzD,OAAO,OAAO,CAAC;oBACjB,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,IAAI,YAAY,CAAC,KAAK,CAAC;4BAAE,OAAO,WAAW,CAAC;wBAC5C,MAAM,KAAK,CAAC;oBACd,CAAC;gBACH,CAAC;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/files/index.d.ts

@@ -0,0 +1,7 @@
+import type { Files } from "./interface.js";
+export type { Files, PickedFile, PickOptions, SaveOptions, SaveOutcome, } from "./interface.js";
+export { capacitorFiles, type CapacitorCacheWriter, type CapacitorShareModule, } from "./capacitor.js";
+export { tauriFiles, type TauriDialogModule, type TauriFsModule } from "./tauri.js";
+export { webFiles, type WebFilesApis } from "./web.js";
+export declare const files: import("../capability.js").CapabilityDefinition<Files>;
+//# sourceMappingURL=index.d.ts.map

package/dist/files/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/files/index.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAE5C,YAAY,EACV,KAAK,EACL,UAAU,EACV,WAAW,EACX,WAAW,EACX,WAAW,GACZ,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,cAAc,EACd,KAAK,oBAAoB,EACzB,KAAK,oBAAoB,GAC1B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,UAAU,EAAE,KAAK,iBAAiB,EAAE,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AACpF,OAAO,EAAE,QAAQ,EAAE,KAAK,YAAY,EAAE,MAAM,UAAU,CAAC;AAEvD,eAAO,MAAM,KAAK,wDAGhB,CAAC"}

package/dist/files/index.js

@@ -0,0 +1,10 @@
+import { platformAdapters } from "#adapters";
+import { defineCapability } from "../capability.js";
+export { capacitorFiles, } from "./capacitor.js";
+export { tauriFiles } from "./tauri.js";
+export { webFiles } from "./web.js";
+export const files = defineCapability({
+    name: "files",
+    adapters: platformAdapters.files,
+});
+//# sourceMappingURL=index.js.map

package/dist/files/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/files/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAE7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAUpD,OAAO,EACL,cAAc,GAGf,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,UAAU,EAA8C,MAAM,YAAY,CAAC;AACpF,OAAO,EAAE,QAAQ,EAAqB,MAAM,UAAU,CAAC;AAEvD,MAAM,CAAC,MAAM,KAAK,GAAG,gBAAgB,CAAQ;IAC3C,IAAI,EAAE,OAAO;IACb,QAAQ,EAAE,gBAAgB,CAAC,KAAK;CACjC,CAAC,CAAC"}

package/dist/files/interface.d.ts

@@ -0,0 +1,29 @@
+export interface PickOptions {
+    /** What may be chosen, as an `<input accept>` takes it: `["image/*", ".pdf"]`. */
+    readonly accept?: readonly string[] | undefined;
+    readonly multiple?: boolean | undefined;
+}
+export interface PickedFile {
+    readonly name: string;
+    /** The MIME type, or `""` when the platform cannot tell. */
+    readonly type: string;
+    readonly size: number;
+    bytes(): Promise<Uint8Array>;
+    text(): Promise<string>;
+}
+export interface SaveOptions {
+    /** The file name to suggest. */
+    readonly name: string;
+    readonly type?: string | undefined;
+}
+export type SaveOutcome = "saved" | "cancelled";
+export interface Files {
+    /** Asks the user for files; an empty list when they cancel. */
+    pick(options?: PickOptions): Promise<readonly PickedFile[]>;
+    /**
+     * Asks the user where to keep `data`: a save dialog where there is one, a download in a
+     * browser without, the share sheet on a phone.
+     */
+    save(data: Blob | Uint8Array | string, options: SaveOptions): Promise<SaveOutcome>;
+}
+//# sourceMappingURL=interface.d.ts.map

package/dist/files/interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interface.d.ts","sourceRoot":"","sources":["../../src/files/interface.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,WAAW;IAC1B,kFAAkF;IAClF,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACzC;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,KAAK,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7B,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CACzB;AAED,MAAM,WAAW,WAAW;IAC1B,gCAAgC;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC;AAED,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,WAAW,CAAC;AAEhD,MAAM,WAAW,KAAK;IACpB,+DAA+D;IAC/D,IAAI,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,UAAU,EAAE,CAAC,CAAC;IAC5D;;;OAGG;IACH,IAAI,CAAC,IAAI,EAAE,IAAI,GAAG,UAAU,GAAG,MAAM,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CACpF"}

package/dist/files/interface.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=interface.js.map

package/dist/files/interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interface.js","sourceRoot":"","sources":["../../src/files/interface.ts"],"names":[],"mappings":""}