@theoo/sdk 0.1.0

package/dist/webauthn.d.ts

@@ -0,0 +1,34 @@
+import * as b64 from "./base64url.js";
+import type { WebAuthnOptions } from "./types.js";
+/**
+ * Where passkey ceremonies happen. The SDK asks Theoo for options, hands
+ * them here, and sends back what comes out. Browsers use the one in
+ * `./browser`; React Native plugs in the platform's passkey API.
+ *
+ * Both methods take and return the WebAuthn *JSON* shapes (base64url byte
+ * fields), which is what Theoo speaks.
+ */
+export interface PasskeyProvider {
+    /** `navigator.credentials.create`, in JSON. Enrols a new passkey. */
+    create(options: WebAuthnOptions): Promise<unknown>;
+    /** `navigator.credentials.get`, in JSON. Signs a challenge with an existing passkey. */
+    get(options: WebAuthnOptions): Promise<unknown>;
+}
+type AnyRecord = Record<string, unknown>;
+/** The `publicKey` half of an options document, with byte fields decoded. */
+export declare function toCreationOptions(options: WebAuthnOptions): AnyRecord;
+export declare function toRequestOptions(options: WebAuthnOptions): AnyRecord;
+/**
+ * A credential as JSON, the way `PublicKeyCredential.toJSON()` renders it and
+ * the way Theoo verifies it. Handles both registration and assertion.
+ */
+export declare function credentialToJSON(credential: {
+    id: string;
+    rawId: ArrayBuffer;
+    type: string;
+    authenticatorAttachment?: string | null;
+    response: AnyRecord;
+    getClientExtensionResults?: () => unknown;
+}): AnyRecord;
+export { b64 as base64url };
+//# sourceMappingURL=webauthn.d.ts.map

package/dist/webauthn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webauthn.d.ts","sourceRoot":"","sources":["../src/webauthn.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,gBAAgB,CAAC;AACtC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,qEAAqE;IACrE,MAAM,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACnD,wFAAwF;IACxF,GAAG,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACjD;AAKD,KAAK,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEzC,6EAA6E;AAC7E,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,eAAe,GAAG,SAAS,CAQrE;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,eAAe,GAAG,SAAS,CAKpE;AASD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE;IAC3C,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,WAAW,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,uBAAuB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxC,QAAQ,EAAE,SAAS,CAAC;IACpB,yBAAyB,CAAC,EAAE,MAAM,OAAO,CAAC;CAC3C,GAAG,SAAS,CAsBZ;AAED,OAAO,EAAE,GAAG,IAAI,SAAS,EAAE,CAAC"}

package/dist/webauthn.js

@@ -0,0 +1,62 @@
+import * as b64 from "./base64url.js";
+const BYTE_FIELDS_CREATE = ["challenge"];
+const BYTE_FIELDS_GET = ["challenge"];
+/** The `publicKey` half of an options document, with byte fields decoded. */
+export function toCreationOptions(options) {
+    const pk = { ...(options.publicKey ?? options) };
+    for (const f of BYTE_FIELDS_CREATE)
+        if (typeof pk[f] === "string")
+            pk[f] = b64.decode(pk[f]);
+    if (pk.user && typeof pk.user.id === "string") {
+        pk.user = { ...pk.user, id: b64.decode(pk.user.id) };
+    }
+    if (Array.isArray(pk.excludeCredentials))
+        pk.excludeCredentials = decodeDescriptors(pk.excludeCredentials);
+    return pk;
+}
+export function toRequestOptions(options) {
+    const pk = { ...(options.publicKey ?? options) };
+    for (const f of BYTE_FIELDS_GET)
+        if (typeof pk[f] === "string")
+            pk[f] = b64.decode(pk[f]);
+    if (Array.isArray(pk.allowCredentials))
+        pk.allowCredentials = decodeDescriptors(pk.allowCredentials);
+    return pk;
+}
+function decodeDescriptors(list) {
+    return list.map((d) => {
+        const desc = d;
+        return typeof desc.id === "string" ? { ...desc, id: b64.decode(desc.id) } : desc;
+    });
+}
+/**
+ * A credential as JSON, the way `PublicKeyCredential.toJSON()` renders it and
+ * the way Theoo verifies it. Handles both registration and assertion.
+ */
+export function credentialToJSON(credential) {
+    const r = credential.response;
+    const response = { clientDataJSON: b64.encode(r.clientDataJSON) };
+    if (r.attestationObject) {
+        response.attestationObject = b64.encode(r.attestationObject);
+        const getTransports = r.getTransports;
+        if (typeof getTransports === "function")
+            response.transports = getTransports.call(r);
+    }
+    if (r.authenticatorData) {
+        response.authenticatorData = b64.encode(r.authenticatorData);
+        response.signature = b64.encode(r.signature);
+        response.userHandle = r.userHandle ? b64.encode(r.userHandle) : null;
+    }
+    const out = {
+        id: credential.id,
+        rawId: b64.encode(credential.rawId),
+        type: credential.type,
+        response,
+        clientExtensionResults: credential.getClientExtensionResults ? credential.getClientExtensionResults() : {},
+    };
+    if (credential.authenticatorAttachment)
+        out.authenticatorAttachment = credential.authenticatorAttachment;
+    return out;
+}
+export { b64 as base64url };
+//# sourceMappingURL=webauthn.js.map

package/dist/webauthn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webauthn.js","sourceRoot":"","sources":["../src/webauthn.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,GAAG,MAAM,gBAAgB,CAAC;AAkBtC,MAAM,kBAAkB,GAAG,CAAC,WAAW,CAAU,CAAC;AAClD,MAAM,eAAe,GAAG,CAAC,WAAW,CAAU,CAAC;AAI/C,6EAA6E;AAC7E,MAAM,UAAU,iBAAiB,CAAC,OAAwB;IACxD,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,EAAe,CAAC;IAC9D,KAAK,MAAM,CAAC,IAAI,kBAAkB;QAAE,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,QAAQ;YAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAW,CAAC,CAAC;IACvG,IAAI,EAAE,CAAC,IAAI,IAAI,OAAQ,EAAE,CAAC,IAAkB,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;QAC7D,EAAE,CAAC,IAAI,GAAG,EAAE,GAAI,EAAE,CAAC,IAAkB,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,CAAE,EAAE,CAAC,IAAkB,CAAC,EAAY,CAAC,EAAE,CAAC;IAC/F,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,kBAAkB,CAAC;QAAE,EAAE,CAAC,kBAAkB,GAAG,iBAAiB,CAAC,EAAE,CAAC,kBAAkB,CAAC,CAAC;IAC3G,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAwB;IACvD,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,EAAe,CAAC;IAC9D,KAAK,MAAM,CAAC,IAAI,eAAe;QAAE,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,QAAQ;YAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAW,CAAC,CAAC;IACpG,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,gBAAgB,CAAC;QAAE,EAAE,CAAC,gBAAgB,GAAG,iBAAiB,CAAC,EAAE,CAAC,gBAAgB,CAAC,CAAC;IACrG,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAe;IACxC,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACpB,MAAM,IAAI,GAAG,CAAc,CAAC;QAC5B,OAAO,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACnF,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAOhC;IACC,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC;IAC9B,MAAM,QAAQ,GAAc,EAAE,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,cAA6B,CAAC,EAAE,CAAC;IAC5F,IAAI,CAAC,CAAC,iBAAiB,EAAE,CAAC;QACxB,QAAQ,CAAC,iBAAiB,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,iBAAgC,CAAC,CAAC;QAC5E,MAAM,aAAa,GAAI,CAAwC,CAAC,aAAa,CAAC;QAC9E,IAAI,OAAO,aAAa,KAAK,UAAU;YAAE,QAAQ,CAAC,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,CAAC,CAAC,iBAAiB,EAAE,CAAC;QACxB,QAAQ,CAAC,iBAAiB,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,iBAAgC,CAAC,CAAC;QAC5E,QAAQ,CAAC,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,SAAwB,CAAC,CAAC;QAC5D,QAAQ,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,UAAyB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACtF,CAAC;IACD,MAAM,GAAG,GAAc;QACrB,EAAE,EAAE,UAAU,CAAC,EAAE;QACjB,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC;QACnC,IAAI,EAAE,UAAU,CAAC,IAAI;QACrB,QAAQ;QACR,sBAAsB,EAAE,UAAU,CAAC,yBAAyB,CAAC,CAAC,CAAC,UAAU,CAAC,yBAAyB,EAAE,CAAC,CAAC,CAAC,EAAE;KAC3G,CAAC;IACF,IAAI,UAAU,CAAC,uBAAuB;QAAE,GAAG,CAAC,uBAAuB,GAAG,UAAU,CAAC,uBAAuB,CAAC;IACzG,OAAO,GAAG,CAAC;AACb,CAAC;AAED,OAAO,EAAE,GAAG,IAAI,SAAS,EAAE,CAAC"}

package/package.json

@@ -0,0 +1,37 @@
+{
+  "name": "@theoo/sdk",
+  "version": "0.1.0",
+  "description": "Theoo client: passkey-owned smart accounts, sign-in, on-chain operations, session keys and recovery, for browsers and servers.",
+  "license": "MIT",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./browser": {
+      "types": "./dist/browser.d.ts",
+      "import": "./dist/browser.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "sideEffects": false,
+  "devDependencies": {
+    "typescript": "^5.7.0",
+    "vitest": "^3.0.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "vitest run"
+  }
+}