@tinfoilsh/passkey-kit 0.1.0

package/dist/index.d.ts

@@ -0,0 +1,11 @@
+export { base64ToBytes, base64UrlToBytes, bufferSourceToArrayBuffer, bytesToBase64, bytesToBase64Url, bytesToHex, hexToBytes, } from "./codec.js";
+export { CEK_BYTES, deriveKeyEncryptionKey, deriveKeyId, generateCek, isValidCek, unwrapCek, wrapCek, } from "./crypto.js";
+export { PasskeyKitError, PasskeyTimeoutError, PrfNotSupportedError, } from "./errors.js";
+export { createPasskeyKit } from "./kit.js";
+export type { PasskeyKit } from "./kit.js";
+export { TINFOIL_HKDF_INFO_V1, TINFOIL_KEY_ID_INFO_V1, TINFOIL_PRF_SALT_INPUT_V1, } from "./protocol.js";
+export { browserLocalStorageAdapter, createMemoryStorageAdapter, } from "./storage.js";
+export type { StorageAdapter } from "./storage.js";
+export { detectPrfSupport } from "./support.js";
+export type { EnrollResult, PasskeyKitConfig, PasskeyKitErrorMessages, PasskeyKitLogger, PasskeyKitStorageKeys, PasskeyUser, PrfPasskeyResult, UnlockResult, WrappedCek, } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,yBAAyB,EACzB,aAAa,EACb,gBAAgB,EAChB,UAAU,EACV,UAAU,GACX,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,SAAS,EACT,sBAAsB,EACtB,WAAW,EACX,WAAW,EACX,UAAU,EACV,SAAS,EACT,OAAO,GACR,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC5C,YAAY,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,YAAY,EACV,YAAY,EACZ,gBAAgB,EAChB,uBAAuB,EACvB,gBAAgB,EAChB,qBAAqB,EACrB,WAAW,EACX,gBAAgB,EAChB,YAAY,EACZ,UAAU,GACX,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,8 @@
+export { base64ToBytes, base64UrlToBytes, bufferSourceToArrayBuffer, bytesToBase64, bytesToBase64Url, bytesToHex, hexToBytes, } from "./codec.js";
+export { CEK_BYTES, deriveKeyEncryptionKey, deriveKeyId, generateCek, isValidCek, unwrapCek, wrapCek, } from "./crypto.js";
+export { PasskeyKitError, PasskeyTimeoutError, PrfNotSupportedError, } from "./errors.js";
+export { createPasskeyKit } from "./kit.js";
+export { TINFOIL_HKDF_INFO_V1, TINFOIL_KEY_ID_INFO_V1, TINFOIL_PRF_SALT_INPUT_V1, } from "./protocol.js";
+export { browserLocalStorageAdapter, createMemoryStorageAdapter, } from "./storage.js";
+export { detectPrfSupport } from "./support.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,yBAAyB,EACzB,aAAa,EACb,gBAAgB,EAChB,UAAU,EACV,UAAU,GACX,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,SAAS,EACT,sBAAsB,EACtB,WAAW,EACX,WAAW,EACX,UAAU,EACV,SAAS,EACT,OAAO,GACR,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAE5C,OAAO,EACL,oBAAoB,EACpB,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,GAC3B,MAAM,cAAc,CAAC;AAEtB,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC"}

package/dist/kit.d.ts

@@ -0,0 +1,63 @@
+/**
+ * The main SDK entry point. `createPasskeyKit(config)` binds relying-party
+ * configuration, protocol constants, and local persistence into a single
+ * object exposing both high-level flows (enroll / unlock / rewrap) and the
+ * lower-level ceremony + crypto building blocks.
+ */
+import type { EnrollResult, PasskeyKitConfig, PasskeyUser, PrfPasskeyResult, UnlockResult, WrappedCek } from "./types.js";
+export interface PasskeyKit {
+    /** Optimistic device/browser PRF support check (cached per kit). */
+    isPrfSupported(): Promise<boolean>;
+    resetPrfSupportCache(): void;
+    /**
+     * Create a new PRF-capable passkey. Returns null when the user cancels;
+     * throws PrfNotSupportedError / PasskeyTimeoutError otherwise on failure.
+     */
+    createPasskey(user: PasskeyUser): Promise<PrfPasskeyResult | null>;
+    /**
+     * Prompt for an assertion against any of the given credential ids and
+     * return the matched credential's PRF output. Null on cancel/failure.
+     */
+    authenticate(credentialIds: string[], options?: {
+        throwOnCancel?: boolean;
+    }): Promise<PrfPasskeyResult | null>;
+    /** Derive the AES-256-GCM KEK from a PRF output (HKDF-SHA-256). */
+    deriveKek(prfOutput: ArrayBuffer | Uint8Array): Promise<CryptoKey>;
+    /** Create a passkey and wrap the given CEK under it in one flow. */
+    enroll(opts: {
+        user: PasskeyUser;
+        cek: Uint8Array;
+    }): Promise<EnrollResult | null>;
+    /** Authenticate against the given wrapped CEKs and unwrap the matching one. */
+    unlock(wrappedCeks: WrappedCek[]): Promise<UnlockResult | null>;
+    /**
+     * Unwrap the wrapped CEK matching the cached PRF output without a
+     * biometric prompt. Returns null when nothing is cached, no wrapped CEK
+     * matches the cached credential, or the cached output fails to unwrap;
+     * fall back to `unlock()` in that case.
+     */
+    unlockWithCachedPrf(wrappedCeks: WrappedCek[]): Promise<UnlockResult | null>;
+    /**
+     * Re-wrap a CEK using the cached PRF output (no biometric prompt).
+     * Returns null when nothing is cached.
+     */
+    rewrapWithCachedPrf(cek: Uint8Array): Promise<WrappedCek | null>;
+    /** Wrap a CEK under the KEK of an explicit PRF result. */
+    wrapWithPrfResult(prfResult: PrfPasskeyResult, cek: Uint8Array): Promise<WrappedCek>;
+    /** Unwrap a CEK with the KEK of an explicit PRF result. */
+    unwrapWithPrfResult(prfResult: PrfPasskeyResult, wrapped: Pick<WrappedCek, "kekIvHex" | "wrappedKeyHex">): Promise<Uint8Array>;
+    /**
+     * Cached PRF result from local storage, if any. The PRF output is
+     * deterministic for a given passkey, so it can be reused to avoid
+     * re-prompting biometrics on key updates.
+     */
+    getCachedPrfResult(): PrfPasskeyResult | null;
+    clearCachedPrfResult(): void;
+    /** Credential id owned by this device (platform attachment), if known. */
+    getLocalCredentialId(): string | null;
+    setLocalCredentialId(credentialId: string): void;
+    /** Clear all device-local state (e.g. on sign-out). */
+    clearLocalState(): void;
+}
+export declare function createPasskeyKit(config: PasskeyKitConfig): PasskeyKit;
+//# sourceMappingURL=kit.d.ts.map

package/dist/kit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kit.d.ts","sourceRoot":"","sources":["../src/kit.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAWH,OAAO,KAAK,EACV,YAAY,EACZ,gBAAgB,EAEhB,WAAW,EACX,gBAAgB,EAChB,YAAY,EACZ,UAAU,EACX,MAAM,YAAY,CAAC;AA0BpB,MAAM,WAAW,UAAU;IACzB,oEAAoE;IACpE,cAAc,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;IACnC,oBAAoB,IAAI,IAAI,CAAC;IAE7B;;;OAGG;IACH,aAAa,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IACnE;;;OAGG;IACH,YAAY,CACV,aAAa,EAAE,MAAM,EAAE,EACvB,OAAO,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,OAAO,CAAA;KAAE,GACpC,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;IACpC,mEAAmE;IACnE,SAAS,CAAC,SAAS,EAAE,WAAW,GAAG,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAEnE,oEAAoE;IACpE,MAAM,CAAC,IAAI,EAAE;QACX,IAAI,EAAE,WAAW,CAAC;QAClB,GAAG,EAAE,UAAU,CAAC;KACjB,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IACjC,+EAA+E;IAC/E,MAAM,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAChE;;;;;OAKG;IACH,mBAAmB,CAAC,WAAW,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAC7E;;;OAGG;IACH,mBAAmB,CAAC,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IACjE,0DAA0D;IAC1D,iBAAiB,CACf,SAAS,EAAE,gBAAgB,EAC3B,GAAG,EAAE,UAAU,GACd,OAAO,CAAC,UAAU,CAAC,CAAC;IACvB,2DAA2D;IAC3D,mBAAmB,CACjB,SAAS,EAAE,gBAAgB,EAC3B,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,UAAU,GAAG,eAAe,CAAC,GACtD,OAAO,CAAC,UAAU,CAAC,CAAC;IAEvB;;;;OAIG;IACH,kBAAkB,IAAI,gBAAgB,GAAG,IAAI,CAAC;IAC9C,oBAAoB,IAAI,IAAI,CAAC;IAC7B,0EAA0E;IAC1E,oBAAoB,IAAI,MAAM,GAAG,IAAI,CAAC;IACtC,oBAAoB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACjD,uDAAuD;IACvD,eAAe,IAAI,IAAI,CAAC;CACzB;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,gBAAgB,GAAG,UAAU,CAyNrE"}

package/dist/kit.js

@@ -0,0 +1,199 @@
+/**
+ * The main SDK entry point. `createPasskeyKit(config)` binds relying-party
+ * configuration, protocol constants, and local persistence into a single
+ * object exposing both high-level flows (enroll / unlock / rewrap) and the
+ * lower-level ceremony + crypto building blocks.
+ */
+import { base64ToBytes, bytesToBase64 } from "./codec.js";
+import { deriveKeyEncryptionKey as deriveKekFromPrf, unwrapCek, wrapCek, } from "./crypto.js";
+import { TINFOIL_HKDF_INFO_V1, TINFOIL_PRF_SALT_INPUT_V1 } from "./protocol.js";
+import { browserLocalStorageAdapter } from "./storage.js";
+import { detectPrfSupport } from "./support.js";
+import { authenticatePrfPasskey, createPrfPasskey, } from "./webauthn.js";
+const DEFAULT_STORAGE_KEYS = {
+    prfResult: "tinfoil-secret-passkey-prf-output",
+    localCredentialId: "tinfoil-local-passkey-credential-id",
+};
+const DEFAULT_WEBAUTHN_TIMEOUT_MS = 30000;
+// Internal hard timeout to guard against providers (e.g. some
+// password-manager browser extensions) that never resolve the
+// credentials.create/get promise. Kept tight so users aren't left staring
+// at an indefinite spinner; the WebAuthn flow itself should complete well
+// within this window once the provider actually prompts.
+const DEFAULT_STUCK_TIMEOUT_MS = 60000;
+export function createPasskeyKit(config) {
+    const logger = config.logger ?? {};
+    const storage = config.storage === undefined ? browserLocalStorageAdapter : config.storage;
+    const storageKeys = {
+        ...DEFAULT_STORAGE_KEYS,
+        ...config.storageKeys,
+    };
+    // Byte inputs are snapshotted so later caller-side buffer reuse cannot
+    // silently change the PRF domain or KEK derivation between ceremonies.
+    const prfSalt = typeof config.prfSaltInput === "string" || config.prfSaltInput === undefined
+        ? new TextEncoder().encode(config.prfSaltInput ?? TINFOIL_PRF_SALT_INPUT_V1)
+        : config.prfSaltInput.slice();
+    const hkdfInfo = config.hkdfInfo === undefined
+        ? TINFOIL_HKDF_INFO_V1
+        : typeof config.hkdfInfo === "string"
+            ? config.hkdfInfo
+            : config.hkdfInfo.slice();
+    let prfSupportCache = null;
+    function cachePrfResult(result) {
+        if (!storage)
+            return;
+        const entry = {
+            credentialId: result.credentialId,
+            prfOutput: bytesToBase64(new Uint8Array(result.prfOutput)),
+        };
+        try {
+            storage.setItem(storageKeys.prfResult, JSON.stringify(entry));
+        }
+        catch {
+            // best-effort
+        }
+    }
+    function getCachedPrfResult() {
+        if (!storage)
+            return null;
+        try {
+            const raw = storage.getItem(storageKeys.prfResult);
+            if (!raw)
+                return null;
+            const entry = JSON.parse(raw);
+            return {
+                credentialId: entry.credentialId,
+                prfOutput: base64ToBytes(entry.prfOutput).buffer,
+            };
+        }
+        catch {
+            return null;
+        }
+    }
+    function setLocalCredentialId(credentialId) {
+        storage?.setItem(storageKeys.localCredentialId, credentialId);
+    }
+    // Cross-device hybrid (QR-paired phone, etc.) reports
+    // `authenticatorAttachment === 'cross-platform'` on the resulting
+    // credential. Caching the cred id in that case would make this
+    // device look like it has its own passkey when in reality the user
+    // just borrowed another device's passkey for a one-shot unlock.
+    // Per WebAuthn L3 §5.2.1, we only treat `authenticatorAttachment`
+    // of `'platform'` as "this device truly owns this credential".
+    function onPrfResult(result, credential) {
+        cachePrfResult(result);
+        if (credential.authenticatorAttachment === "platform") {
+            try {
+                setLocalCredentialId(result.credentialId);
+            }
+            catch {
+                // best-effort: a throwing custom adapter must not discard the
+                // ceremony result
+            }
+        }
+    }
+    const ceremonyContext = {
+        rpId: config.rpId,
+        rpName: config.rpName,
+        prfSalt,
+        webauthnTimeoutMs: config.webauthnTimeoutMs ?? DEFAULT_WEBAUTHN_TIMEOUT_MS,
+        stuckTimeoutMs: config.stuckTimeoutMs ?? DEFAULT_STUCK_TIMEOUT_MS,
+        errorMessages: config.errorMessages,
+        logger,
+        onPrfResult,
+    };
+    const deriveKek = (prfOutput) => deriveKekFromPrf(prfOutput, hkdfInfo);
+    async function wrapWithPrfResult(prfResult, cek) {
+        const kek = await deriveKek(prfResult.prfOutput);
+        return wrapCek({ credentialId: prfResult.credentialId, kek, cek });
+    }
+    return {
+        async isPrfSupported() {
+            if (prfSupportCache !== null)
+                return prfSupportCache;
+            prfSupportCache = await detectPrfSupport();
+            return prfSupportCache;
+        },
+        resetPrfSupportCache() {
+            prfSupportCache = null;
+        },
+        createPasskey(user) {
+            return createPrfPasskey(ceremonyContext, user);
+        },
+        async authenticate(credentialIds, options = {}) {
+            // An empty allowCredentials list would start a discoverable-passkey
+            // ceremony against ANY credential, breaking the "only the supplied
+            // ids" contract.
+            if (credentialIds.length === 0)
+                return null;
+            return authenticatePrfPasskey(ceremonyContext, credentialIds, options);
+        },
+        deriveKek,
+        async enroll(opts) {
+            const prfResult = await createPrfPasskey(ceremonyContext, opts.user);
+            if (!prfResult)
+                return null;
+            const wrappedCek = await wrapWithPrfResult(prfResult, opts.cek);
+            return { credentialId: prfResult.credentialId, wrappedCek, prfResult };
+        },
+        async unlock(wrappedCeks) {
+            if (wrappedCeks.length === 0)
+                return null;
+            const prfResult = await authenticatePrfPasskey(ceremonyContext, wrappedCeks.map((w) => w.credentialId));
+            if (!prfResult)
+                return null;
+            const match = wrappedCeks.find((w) => w.credentialId === prfResult.credentialId);
+            if (!match) {
+                logger.error?.("assertion matched a credential with no wrapped CEK", undefined, { action: "unlock", credentialId: prfResult.credentialId });
+                return null;
+            }
+            const kek = await deriveKek(prfResult.prfOutput);
+            const cek = await unwrapCek(kek, match);
+            return { credentialId: prfResult.credentialId, cek };
+        },
+        async unlockWithCachedPrf(wrappedCeks) {
+            const cached = getCachedPrfResult();
+            if (!cached)
+                return null;
+            const match = wrappedCeks.find((w) => w.credentialId === cached.credentialId);
+            if (!match)
+                return null;
+            try {
+                const kek = await deriveKek(cached.prfOutput);
+                const cek = await unwrapCek(kek, match);
+                return { credentialId: cached.credentialId, cek };
+            }
+            catch (error) {
+                logger.error?.("failed to unwrap CEK with cached PRF output", error, {
+                    action: "unlockWithCachedPrf",
+                    credentialId: cached.credentialId,
+                });
+                return null;
+            }
+        },
+        async rewrapWithCachedPrf(cek) {
+            const cached = getCachedPrfResult();
+            if (!cached)
+                return null;
+            return wrapWithPrfResult(cached, cek);
+        },
+        wrapWithPrfResult,
+        async unwrapWithPrfResult(prfResult, wrapped) {
+            const kek = await deriveKek(prfResult.prfOutput);
+            return unwrapCek(kek, wrapped);
+        },
+        getCachedPrfResult,
+        clearCachedPrfResult() {
+            storage?.removeItem(storageKeys.prfResult);
+        },
+        getLocalCredentialId() {
+            return storage?.getItem(storageKeys.localCredentialId) ?? null;
+        },
+        setLocalCredentialId,
+        clearLocalState() {
+            storage?.removeItem(storageKeys.prfResult);
+            storage?.removeItem(storageKeys.localCredentialId);
+        },
+    };
+}
+//# sourceMappingURL=kit.js.map

package/dist/kit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kit.js","sourceRoot":"","sources":["../src/kit.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,EACL,sBAAsB,IAAI,gBAAgB,EAC1C,SAAS,EACT,OAAO,GACR,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,MAAM,eAAe,CAAC;AAChF,OAAO,EAAE,0BAA0B,EAAuB,MAAM,cAAc,CAAC;AAC/E,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAUhD,OAAO,EACL,sBAAsB,EACtB,gBAAgB,GAEjB,MAAM,eAAe,CAAC;AAEvB,MAAM,oBAAoB,GAA0B;IAClD,SAAS,EAAE,mCAAmC;IAC9C,iBAAiB,EAAE,qCAAqC;CACzD,CAAC;AAEF,MAAM,2BAA2B,GAAG,KAAM,CAAC;AAE3C,8DAA8D;AAC9D,8DAA8D;AAC9D,0EAA0E;AAC1E,0EAA0E;AAC1E,yDAAyD;AACzD,MAAM,wBAAwB,GAAG,KAAM,CAAC;AAwExC,MAAM,UAAU,gBAAgB,CAAC,MAAwB;IACvD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;IACnC,MAAM,OAAO,GACX,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;IAC7E,MAAM,WAAW,GAA0B;QACzC,GAAG,oBAAoB;QACvB,GAAG,MAAM,CAAC,WAAW;KACtB,CAAC;IACF,uEAAuE;IACvE,uEAAuE;IACvE,MAAM,OAAO,GACX,OAAO,MAAM,CAAC,YAAY,KAAK,QAAQ,IAAI,MAAM,CAAC,YAAY,KAAK,SAAS;QAC1E,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CACtB,MAAM,CAAC,YAAY,IAAI,yBAAyB,CACjD;QACH,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;IAClC,MAAM,QAAQ,GACZ,MAAM,CAAC,QAAQ,KAAK,SAAS;QAC3B,CAAC,CAAC,oBAAoB;QACtB,CAAC,CAAC,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;YACnC,CAAC,CAAC,MAAM,CAAC,QAAQ;YACjB,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IAEhC,IAAI,eAAe,GAAmB,IAAI,CAAC;IAE3C,SAAS,cAAc,CAAC,MAAwB;QAC9C,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,MAAM,KAAK,GAAkB;YAC3B,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,SAAS,EAAE,aAAa,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;SAC3D,CAAC;QACF,IAAI,CAAC;YACH,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAChE,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;IACH,CAAC;IAED,SAAS,kBAAkB;QACzB,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;YACnD,IAAI,CAAC,GAAG;gBAAE,OAAO,IAAI,CAAC;YACtB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,CAAC;YAC/C,OAAO;gBACL,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,SAAS,EAAE,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,MAAqB;aAChE,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,SAAS,oBAAoB,CAAC,YAAoB;QAChD,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC;IAChE,CAAC;IAED,sDAAsD;IACtD,kEAAkE;IAClE,+DAA+D;IAC/D,mEAAmE;IACnE,gEAAgE;IAChE,kEAAkE;IAClE,+DAA+D;IAC/D,SAAS,WAAW,CAClB,MAAwB,EACxB,UAA+B;QAE/B,cAAc,CAAC,MAAM,CAAC,CAAC;QACvB,IAAI,UAAU,CAAC,uBAAuB,KAAK,UAAU,EAAE,CAAC;YACtD,IAAI,CAAC;gBACH,oBAAoB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YAC5C,CAAC;YAAC,MAAM,CAAC;gBACP,8DAA8D;gBAC9D,kBAAkB;YACpB,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,eAAe,GAAoB;QACvC,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO;QACP,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,IAAI,2BAA2B;QAC1E,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,wBAAwB;QACjE,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,MAAM;QACN,WAAW;KACZ,CAAC;IAEF,MAAM,SAAS,GAAG,CAAC,SAAmC,EAAE,EAAE,CACxD,gBAAgB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAExC,KAAK,UAAU,iBAAiB,CAC9B,SAA2B,EAC3B,GAAe;QAEf,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACjD,OAAO,OAAO,CAAC,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,OAAO;QACL,KAAK,CAAC,cAAc;YAClB,IAAI,eAAe,KAAK,IAAI;gBAAE,OAAO,eAAe,CAAC;YACrD,eAAe,GAAG,MAAM,gBAAgB,EAAE,CAAC;YAC3C,OAAO,eAAe,CAAC;QACzB,CAAC;QAED,oBAAoB;YAClB,eAAe,GAAG,IAAI,CAAC;QACzB,CAAC;QAED,aAAa,CAAC,IAAiB;YAC7B,OAAO,gBAAgB,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;QACjD,CAAC;QAED,KAAK,CAAC,YAAY,CAChB,aAAuB,EACvB,UAAuC,EAAE;YAEzC,oEAAoE;YACpE,mEAAmE;YACnE,iBAAiB;YACjB,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC5C,OAAO,sBAAsB,CAAC,eAAe,EAAE,aAAa,EAAE,OAAO,CAAC,CAAC;QACzE,CAAC;QAED,SAAS;QAET,KAAK,CAAC,MAAM,CAAC,IAGZ;YACC,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACrE,IAAI,CAAC,SAAS;gBAAE,OAAO,IAAI,CAAC;YAC5B,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YAChE,OAAO,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC;QACzE,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,WAAyB;YACpC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC1C,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAC5C,eAAe,EACf,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,CACvC,CAAC;YACF,IAAI,CAAC,SAAS;gBAAE,OAAO,IAAI,CAAC;YAC5B,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAC5B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,SAAS,CAAC,YAAY,CACjD,CAAC;YACF,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,CAAC,KAAK,EAAE,CACZ,oDAAoD,EACpD,SAAS,EACT,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,CAC3D,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACjD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACxC,OAAO,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC;QACvD,CAAC;QAED,KAAK,CAAC,mBAAmB,CACvB,WAAyB;YAEzB,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YACzB,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAC5B,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,MAAM,CAAC,YAAY,CAC9C,CAAC;YACF,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC;YACxB,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;gBAC9C,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBACxC,OAAO,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,GAAG,EAAE,CAAC;YACpD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,KAAK,EAAE,CAAC,6CAA6C,EAAE,KAAK,EAAE;oBACnE,MAAM,EAAE,qBAAqB;oBAC7B,YAAY,EAAE,MAAM,CAAC,YAAY;iBAClC,CAAC,CAAC;gBACH,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,KAAK,CAAC,mBAAmB,CAAC,GAAe;YACvC,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC;YACpC,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAC;YACzB,OAAO,iBAAiB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACxC,CAAC;QAED,iBAAiB;QAEjB,KAAK,CAAC,mBAAmB,CACvB,SAA2B,EAC3B,OAAuD;YAEvD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACjD,OAAO,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACjC,CAAC;QAED,kBAAkB;QAElB,oBAAoB;YAClB,OAAO,EAAE,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAC7C,CAAC;QAED,oBAAoB;YAClB,OAAO,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC,iBAAiB,CAAC,IAAI,IAAI,CAAC;QACjE,CAAC;QAED,oBAAoB;QAEpB,eAAe;YACb,OAAO,EAAE,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;YAC3C,OAAO,EAAE,UAAU,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC;QACrD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/protocol.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Tinfoil v1 protocol constants. Every client wrapping the same CEK must
+ * use identical values: the PRF salt input and HKDF info string both feed
+ * the KEK derivation, so changing either changes every derived KEK.
+ * Override both to establish a new protocol domain.
+ */
+/** Input to the WebAuthn PRF `eval.first` salt. */
+export declare const TINFOIL_PRF_SALT_INPUT_V1 = "tinfoil-chat-key-encryption";
+/** HKDF info string for domain separation when deriving the KEK. */
+export declare const TINFOIL_HKDF_INFO_V1 = "tinfoil-chat-kek-v1";
+/** HKDF info string for deriving a stable public CEK identifier. */
+export declare const TINFOIL_KEY_ID_INFO_V1 = "tinfoil-key-id-v1";
+//# sourceMappingURL=protocol.d.ts.map

package/dist/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,mDAAmD;AACnD,eAAO,MAAM,yBAAyB,gCAAgC,CAAC;AAEvE,oEAAoE;AACpE,eAAO,MAAM,oBAAoB,wBAAwB,CAAC;AAE1D,oEAAoE;AACpE,eAAO,MAAM,sBAAsB,sBAAsB,CAAC"}

package/dist/protocol.js

@@ -0,0 +1,13 @@
+/**
+ * Tinfoil v1 protocol constants. Every client wrapping the same CEK must
+ * use identical values: the PRF salt input and HKDF info string both feed
+ * the KEK derivation, so changing either changes every derived KEK.
+ * Override both to establish a new protocol domain.
+ */
+/** Input to the WebAuthn PRF `eval.first` salt. */
+export const TINFOIL_PRF_SALT_INPUT_V1 = "tinfoil-chat-key-encryption";
+/** HKDF info string for domain separation when deriving the KEK. */
+export const TINFOIL_HKDF_INFO_V1 = "tinfoil-chat-kek-v1";
+/** HKDF info string for deriving a stable public CEK identifier. */
+export const TINFOIL_KEY_ID_INFO_V1 = "tinfoil-key-id-v1";
+//# sourceMappingURL=protocol.js.map

package/dist/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,mDAAmD;AACnD,MAAM,CAAC,MAAM,yBAAyB,GAAG,6BAA6B,CAAC;AAEvE,oEAAoE;AACpE,MAAM,CAAC,MAAM,oBAAoB,GAAG,qBAAqB,CAAC;AAE1D,oEAAoE;AACpE,MAAM,CAAC,MAAM,sBAAsB,GAAG,mBAAmB,CAAC"}

package/dist/storage.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Pluggable local persistence for the SDK's device-side state: the cached
+ * PRF output and the credential id this device owns. Adapters are
+ * synchronous by design (mirroring the Web Storage API) so callers can
+ * read cached state without awaiting.
+ *
+ * SECURITY: the PRF output cached through an adapter is raw key material —
+ * anyone who can read it can re-derive the KEK and unwrap the CEK. The
+ * default `localStorage` adapter stores it in plaintext, which is only as
+ * strong as the origin's script-injection defenses (an XSS attacker could
+ * equally just run the ceremony or exfiltrate decrypted data). Hosts with
+ * stricter requirements should supply their own adapter with at-rest
+ * protection, or pass `storage: null` to disable caching and re-prompt
+ * biometrics instead.
+ */
+export interface StorageAdapter {
+    getItem(key: string): string | null;
+    setItem(key: string, value: string): void;
+    removeItem(key: string): void;
+}
+/**
+ * Default adapter backed by `window.localStorage`. Every operation is
+ * best-effort: quota errors, privacy-mode failures, blocked-storage
+ * contexts (e.g. sandboxed frames, where even touching `localStorage`
+ * throws), and SSR (no window) all degrade to no-ops so storage problems
+ * never interrupt a passkey ceremony.
+ */
+export declare const browserLocalStorageAdapter: StorageAdapter;
+/** In-memory adapter for tests and non-browser environments. */
+export declare function createMemoryStorageAdapter(): StorageAdapter;
+//# sourceMappingURL=storage.d.ts.map

package/dist/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../src/storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAA;IACnC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACzC,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;CAC9B;AAED;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,EAAE,cAyBxC,CAAA;AAED,gEAAgE;AAChE,wBAAgB,0BAA0B,IAAI,cAAc,CAW3D"}

package/dist/storage.js

@@ -0,0 +1,68 @@
+/**
+ * Pluggable local persistence for the SDK's device-side state: the cached
+ * PRF output and the credential id this device owns. Adapters are
+ * synchronous by design (mirroring the Web Storage API) so callers can
+ * read cached state without awaiting.
+ *
+ * SECURITY: the PRF output cached through an adapter is raw key material —
+ * anyone who can read it can re-derive the KEK and unwrap the CEK. The
+ * default `localStorage` adapter stores it in plaintext, which is only as
+ * strong as the origin's script-injection defenses (an XSS attacker could
+ * equally just run the ceremony or exfiltrate decrypted data). Hosts with
+ * stricter requirements should supply their own adapter with at-rest
+ * protection, or pass `storage: null` to disable caching and re-prompt
+ * biometrics instead.
+ */
+/**
+ * Default adapter backed by `window.localStorage`. Every operation is
+ * best-effort: quota errors, privacy-mode failures, blocked-storage
+ * contexts (e.g. sandboxed frames, where even touching `localStorage`
+ * throws), and SSR (no window) all degrade to no-ops so storage problems
+ * never interrupt a passkey ceremony.
+ */
+export const browserLocalStorageAdapter = {
+    getItem(key) {
+        try {
+            if (typeof localStorage === 'undefined')
+                return null;
+            return localStorage.getItem(key);
+        }
+        catch {
+            return null;
+        }
+    },
+    setItem(key, value) {
+        try {
+            if (typeof localStorage === 'undefined')
+                return;
+            localStorage.setItem(key, value);
+        }
+        catch {
+            // best-effort
+        }
+    },
+    removeItem(key) {
+        try {
+            if (typeof localStorage === 'undefined')
+                return;
+            localStorage.removeItem(key);
+        }
+        catch {
+            // best-effort
+        }
+    },
+};
+/** In-memory adapter for tests and non-browser environments. */
+export function createMemoryStorageAdapter() {
+    const store = new Map();
+    return {
+        getItem: (key) => store.get(key) ?? null,
+        setItem: (key, value) => {
+            store.set(key, value);
+        },
+        removeItem: (key) => {
+            store.delete(key);
+        },
+    };
+}
+//# sourceMappingURL=storage.js.map

package/dist/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../src/storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAQH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAmB;IACxD,OAAO,CAAC,GAAW;QACjB,IAAI,CAAC;YACH,IAAI,OAAO,YAAY,KAAK,WAAW;gBAAE,OAAO,IAAI,CAAA;YACpD,OAAO,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAA;QACb,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAW,EAAE,KAAa;QAChC,IAAI,CAAC;YACH,IAAI,OAAO,YAAY,KAAK,WAAW;gBAAE,OAAM;YAC/C,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;IACH,CAAC;IACD,UAAU,CAAC,GAAW;QACpB,IAAI,CAAC;YACH,IAAI,OAAO,YAAY,KAAK,WAAW;gBAAE,OAAM;YAC/C,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAA;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;IACH,CAAC;CACF,CAAA;AAED,gEAAgE;AAChE,MAAM,UAAU,0BAA0B;IACxC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAA;IACvC,OAAO;QACL,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI;QACxC,OAAO,EAAE,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;YACtB,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QACvB,CAAC;QACD,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE;YAClB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACnB,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/support.d.ts

@@ -0,0 +1,15 @@
+/**
+ * PRF support detection.
+ *
+ * Checks whether the current browser/platform supports the WebAuthn PRF
+ * extension. This is an optimistic check — actual PRF support is only
+ * confirmed when a credential is created with prf.enabled: true in the
+ * response. If creation fails, callers should fall back to a manual flow.
+ *
+ * Detection strategy:
+ * 1. Check window.PublicKeyCredential exists (basic WebAuthn support)
+ * 2. Check isUserVerifyingPlatformAuthenticatorAvailable() (biometric/PIN authenticator present)
+ * 3. Optionally check getClientCapabilities() for explicit PRF support signal (new API, not universal)
+ */
+export declare function detectPrfSupport(): Promise<boolean>;
+//# sourceMappingURL=support.d.ts.map

package/dist/support.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"support.d.ts","sourceRoot":"","sources":["../src/support.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,OAAO,CAAC,CA+CzD"}

package/dist/support.js

@@ -0,0 +1,58 @@
+/**
+ * PRF support detection.
+ *
+ * Checks whether the current browser/platform supports the WebAuthn PRF
+ * extension. This is an optimistic check — actual PRF support is only
+ * confirmed when a credential is created with prf.enabled: true in the
+ * response. If creation fails, callers should fall back to a manual flow.
+ *
+ * Detection strategy:
+ * 1. Check window.PublicKeyCredential exists (basic WebAuthn support)
+ * 2. Check isUserVerifyingPlatformAuthenticatorAvailable() (biometric/PIN authenticator present)
+ * 3. Optionally check getClientCapabilities() for explicit PRF support signal (new API, not universal)
+ */
+export async function detectPrfSupport() {
+    if (typeof window === 'undefined') {
+        return false;
+    }
+    if (!window.PublicKeyCredential) {
+        return false;
+    }
+    // Check that a platform authenticator is available (Face ID, Touch ID, Windows Hello, etc.)
+    try {
+        const available = await PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable();
+        if (!available) {
+            return false;
+        }
+    }
+    catch {
+        return false;
+    }
+    // If getClientCapabilities is available, use it for a more precise check.
+    // This API is newer and may not be present in all browsers.
+    try {
+        if (typeof PublicKeyCredential.getClientCapabilities === 'function') {
+            const caps = await PublicKeyCredential.getClientCapabilities();
+            if (caps && typeof caps === 'object') {
+                // The shape of this API varies across browser versions.
+                // Chrome returns a map-like object; check for extension-prf or prf key.
+                const hasPrf = caps['extension-prf'] === true ||
+                    caps['prf'] === true;
+                if (hasPrf) {
+                    return true;
+                }
+                // If getClientCapabilities is available but doesn't report PRF,
+                // that's a strong negative signal on platforms that implement it.
+                // However, since this API is still evolving, we don't treat absence
+                // as definitive — fall through to the optimistic path.
+            }
+        }
+    }
+    catch {
+        // getClientCapabilities not available or threw — fall through
+    }
+    // Optimistic: platform authenticator is available, WebAuthn is supported.
+    // Actual PRF support will be confirmed during credential creation.
+    return true;
+}
+//# sourceMappingURL=support.js.map

package/dist/support.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"support.js","sourceRoot":"","sources":["../src/support.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,IAAI,OAAO,MAAM,KAAK,WAAW,EAAE,CAAC;QAClC,OAAO,KAAK,CAAA;IACd,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAChC,OAAO,KAAK,CAAA;IACd,CAAC;IAED,4FAA4F;IAC5F,IAAI,CAAC;QACH,MAAM,SAAS,GACb,MAAM,mBAAmB,CAAC,6CAA6C,EAAE,CAAA;QAC3E,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;IAED,0EAA0E;IAC1E,4DAA4D;IAC5D,IAAI,CAAC;QACH,IAAI,OAAO,mBAAmB,CAAC,qBAAqB,KAAK,UAAU,EAAE,CAAC;YACpE,MAAM,IAAI,GAAG,MAAM,mBAAmB,CAAC,qBAAqB,EAAE,CAAA;YAC9D,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACrC,wDAAwD;gBACxD,wEAAwE;gBACxE,MAAM,MAAM,GACT,IAAgC,CAAC,eAAe,CAAC,KAAK,IAAI;oBAC1D,IAAgC,CAAC,KAAK,CAAC,KAAK,IAAI,CAAA;gBACnD,IAAI,MAAM,EAAE,CAAC;oBACX,OAAO,IAAI,CAAA;gBACb,CAAC;gBACD,gEAAgE;gBAChE,kEAAkE;gBAClE,oEAAoE;gBACpE,uDAAuD;YACzD,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,8DAA8D;IAChE,CAAC;IAED,0EAA0E;IAC1E,mEAAmE;IACnE,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,101 @@
+import type { StorageAdapter } from "./storage.js";
+/** Structured logging hooks; the SDK never writes to the console itself. */
+export interface PasskeyKitLogger {
+    info?(message: string, metadata?: Record<string, unknown>): void;
+    error?(message: string, error?: unknown, metadata?: Record<string, unknown>): void;
+}
+export interface PasskeyKitStorageKeys {
+    /** Key under which the cached PRF result is persisted. */
+    prfResult: string;
+    /** Key under which this device's own credential id is persisted. */
+    localCredentialId: string;
+}
+/**
+ * Overrides for the messages on errors the SDK throws. Useful for branding
+ * or localization; the error classes themselves stay the same, so
+ * `instanceof` checks are unaffected.
+ */
+export interface PasskeyKitErrorMessages {
+    /** Message used for `PrfNotSupportedError`. */
+    prfNotSupported?: string;
+    /** Message used for `PasskeyTimeoutError`. */
+    timeout?: string;
+}
+export interface PasskeyKitConfig {
+    /** WebAuthn relying party id (e.g. `example.com`, or `localhost` in dev). */
+    rpId: string;
+    /** Human-readable relying party name shown in passkey prompts. */
+    rpName: string;
+    /**
+     * Input to the PRF `eval.first` salt. Must stay stable across all clients
+     * of the same protocol: changing it changes every derived KEK.
+     * Defaults to the Tinfoil v1 protocol constant.
+     */
+    prfSaltInput?: string | Uint8Array;
+    /**
+     * HKDF info string used for domain separation when deriving the KEK from
+     * the PRF output. Defaults to the Tinfoil v1 protocol constant.
+     */
+    hkdfInfo?: string | Uint8Array;
+    /**
+     * Local persistence for the PRF cache and this device's credential id.
+     * Defaults to a best-effort `localStorage` adapter; pass `null` to
+     * disable local persistence entirely.
+     */
+    storage?: StorageAdapter | null;
+    storageKeys?: Partial<PasskeyKitStorageKeys>;
+    /** Timeout passed to the WebAuthn API (some browsers ignore this). */
+    webauthnTimeoutMs?: number;
+    /**
+     * Hard client-side timeout guarding against providers that never resolve
+     * the WebAuthn promise. When exceeded, `PasskeyTimeoutError` is thrown.
+     */
+    stuckTimeoutMs?: number;
+    /** Custom messages for the errors the SDK throws. */
+    errorMessages?: PasskeyKitErrorMessages;
+    logger?: PasskeyKitLogger;
+}
+/** Identity attached to a newly created passkey. */
+export interface PasskeyUser {
+    /** Stable opaque user id (becomes the WebAuthn user handle). */
+    id: string;
+    /** Account identifier shown in passkey pickers (usually an email). */
+    name: string;
+    /** Friendly display name; falls back to `name` when omitted. */
+    displayName?: string;
+}
+/** Result of a successful PRF ceremony (create or authenticate). */
+export interface PrfPasskeyResult {
+    /** base64url-encoded credential id. */
+    credentialId: string;
+    /** Raw 32-byte PRF output; treat as secret key material. */
+    prfOutput: ArrayBuffer;
+}
+/** A CEK wrapped under a passkey-derived KEK with AES-256-GCM. */
+export interface WrappedCek {
+    /** base64url-encoded credential id whose PRF output wraps this CEK. */
+    credentialId: string;
+    /** 12-byte AES-GCM IV, hex-encoded. */
+    kekIvHex: string;
+    /** Wrapped CEK ciphertext (including GCM tag), hex-encoded. */
+    wrappedKeyHex: string;
+}
+/** Result of the high-level enroll flow: create passkey + wrap CEK. */
+export interface EnrollResult {
+    credentialId: string;
+    /** Ciphertext safe to persist server-side. */
+    wrappedCek: WrappedCek;
+    /**
+     * Device-local secret state (PRF output). Already persisted through the
+     * storage adapter when one is configured; returned so hosts with custom
+     * persistence can store it themselves.
+     */
+    prfResult: PrfPasskeyResult;
+}
+/** Result of the high-level unlock flow: authenticate + unwrap CEK. */
+export interface UnlockResult {
+    credentialId: string;
+    /** The recovered raw 32-byte CEK. */
+    cek: Uint8Array;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEnD,4EAA4E;AAC5E,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACjE,KAAK,CAAC,CACJ,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,OAAO,EACf,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACjC,IAAI,CAAC;CACT;AAED,MAAM,WAAW,qBAAqB;IACpC,0DAA0D;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,oEAAoE;IACpE,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,+CAA+C;IAC/C,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,8CAA8C;IAC9C,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,gBAAgB;IAC/B,6EAA6E;IAC7E,IAAI,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,GAAG,UAAU,CAAC;IACnC;;;OAGG;IACH,QAAQ,CAAC,EAAE,MAAM,GAAG,UAAU,CAAC;IAC/B;;;;OAIG;IACH,OAAO,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IAChC,WAAW,CAAC,EAAE,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAC7C,sEAAsE;IACtE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,qDAAqD;IACrD,aAAa,CAAC,EAAE,uBAAuB,CAAC;IACxC,MAAM,CAAC,EAAE,gBAAgB,CAAC;CAC3B;AAED,oDAAoD;AACpD,MAAM,WAAW,WAAW;IAC1B,gEAAgE;IAChE,EAAE,EAAE,MAAM,CAAC;IACX,sEAAsE;IACtE,IAAI,EAAE,MAAM,CAAC;IACb,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,oEAAoE;AACpE,MAAM,WAAW,gBAAgB;IAC/B,uCAAuC;IACvC,YAAY,EAAE,MAAM,CAAC;IACrB,4DAA4D;IAC5D,SAAS,EAAE,WAAW,CAAC;CACxB;AAED,kEAAkE;AAClE,MAAM,WAAW,UAAU;IACzB,uEAAuE;IACvE,YAAY,EAAE,MAAM,CAAC;IACrB,uCAAuC;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,+DAA+D;IAC/D,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,uEAAuE;AACvE,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,8CAA8C;IAC9C,UAAU,EAAE,UAAU,CAAC;IACvB;;;;OAIG;IACH,SAAS,EAAE,gBAAgB,CAAC;CAC7B;AAED,uEAAuE;AACvE,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,qCAAqC;IACrC,GAAG,EAAE,UAAU,CAAC;CACjB"}