@vess-id/ai-identity 0.1.0 → 0.3.0

package/dist/index.mjs

@@ -2746,6 +2746,163 @@ function getClient(config, password) {
   return defaultClient;
 }
 
+// src/identity/user-key-pair-manager.ts
+var UserKeyPairManager = class {
+  /**
+   * Generate a new key pair and create a did:jwk DID
+   */
+  async generateKeyPair() {
+    const keyPair = await SDJwtClient.generateKeyPair();
+    const did = createDidJwk(keyPair.publicKey);
+    return {
+      did,
+      publicKey: keyPair.publicKey,
+      privateKey: keyPair.privateKey
+    };
+  }
+  /**
+   * Extract public key info from a did:jwk DID
+   * @throws Error if the DID is not in did:jwk format
+   */
+  extractPublicKeyInfo(did) {
+    if (!did.startsWith("did:jwk:")) {
+      throw new Error("Only did:jwk format is supported");
+    }
+    return extractPublicKeyFromDid(did);
+  }
+};
+
+// src/identity/device-enroll-manager.ts
+var DeviceEnrollManager = class {
+  baseUrl;
+  constructor(baseUrl) {
+    this.baseUrl = baseUrl.replace(/\/+$/, "");
+  }
+  /**
+   * Start the device enrollment flow.
+   * Sends the root DID public key to the Gateway and gets a user code.
+   *
+   * @param params - Root DID public info and client metadata
+   * @returns Request ID, user code, and verification URL
+   */
+  async startDeviceEnrollment(params) {
+    const response = await fetch(`${this.baseUrl}/api/v1/device/start`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({
+        rootDid: params.rootDid,
+        publicKeyJwk: params.publicKeyJwk,
+        clientInfo: params.clientInfo,
+        purpose: params.purpose || "root_did_enrollment"
+      })
+    });
+    if (!response.ok) {
+      const errorBody = await response.text();
+      throw new Error(
+        `Failed to start device enrollment: ${response.status} - ${errorBody}`
+      );
+    }
+    const body = await response.json();
+    if (!body.success) {
+      throw new Error(`Failed to start device enrollment: ${JSON.stringify(body)}`);
+    }
+    return body.data;
+  }
+  /**
+   * Start the device enrollment flow with server-side DID generation.
+   * The server generates the real key pair on approval (not at start time).
+   * Use this for remote/cloud-managed mode.
+   *
+   * @param params - Client metadata (no DID or key needed)
+   * @returns Request ID, user code, and verification URL
+   */
+  async startServerSideEnrollment(params) {
+    const response = await fetch(`${this.baseUrl}/api/v1/device/start`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({
+        generateServerSide: true,
+        clientInfo: params.clientInfo,
+        purpose: params.purpose || "root_did_enrollment"
+      })
+    });
+    if (!response.ok) {
+      const errorBody = await response.text();
+      throw new Error(
+        `Failed to start device enrollment: ${response.status} - ${errorBody}`
+      );
+    }
+    const body = await response.json();
+    if (!body.success) {
+      throw new Error(`Failed to start device enrollment: ${JSON.stringify(body)}`);
+    }
+    return body.data;
+  }
+  /**
+   * Poll for enrollment status.
+   * Call this periodically after startDeviceEnrollment() to check if
+   * the user has approved the enrollment in the web UI.
+   *
+   * @param requestId - The request ID from startDeviceEnrollment()
+   * @returns Current status and token if approved
+   */
+  async pollDeviceEnrollment(requestId) {
+    const response = await fetch(`${this.baseUrl}/api/v1/device/poll`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({ requestId })
+    });
+    if (!response.ok) {
+      const errorBody = await response.text();
+      throw new Error(
+        `Failed to poll device enrollment: ${response.status} - ${errorBody}`
+      );
+    }
+    const body = await response.json();
+    if (!body.success) {
+      throw new Error(`Failed to poll device enrollment: ${JSON.stringify(body)}`);
+    }
+    return body.data;
+  }
+  /**
+   * Convenience method: Start enrollment and poll until completion.
+   * Returns the final result (approved, expired, or denied).
+   *
+   * @param params - Enrollment parameters (client-generated mode)
+   * @param onUserCode - Callback when user code is available (present to user)
+   * @param pollIntervalMs - Polling interval in ms (default: 3000)
+   * @param maxPolls - Maximum number of poll attempts (default: 120)
+   */
+  async enrollAndWait(params, onUserCode, pollIntervalMs = 3e3, maxPolls = 120) {
+    const startResult = await this.startDeviceEnrollment(params);
+    return this.pollUntilComplete(startResult, onUserCode, pollIntervalMs, maxPolls);
+  }
+  /**
+   * Convenience method: Start server-side enrollment and poll until completion.
+   * Returns the final result including the server-generated rootDid on approval.
+   *
+   * @param params - Client metadata (server-generated mode)
+   * @param onUserCode - Callback when user code is available (present to user)
+   * @param pollIntervalMs - Polling interval in ms (default: 3000)
+   * @param maxPolls - Maximum number of poll attempts (default: 120)
+   */
+  async enrollServerSideAndWait(params, onUserCode, pollIntervalMs = 3e3, maxPolls = 120) {
+    const startResult = await this.startServerSideEnrollment(params);
+    return this.pollUntilComplete(startResult, onUserCode, pollIntervalMs, maxPolls);
+  }
+  async pollUntilComplete(startResult, onUserCode, pollIntervalMs, maxPolls) {
+    onUserCode(startResult);
+    for (let i = 0; i < maxPolls; i++) {
+      await new Promise((resolve) => setTimeout(resolve, pollIntervalMs));
+      const pollResult = await this.pollDeviceEnrollment(startResult.requestId);
+      if (pollResult.status !== "pending") {
+        return pollResult;
+      }
+    }
+    return { status: "expired" };
+  }
+};
+
 // src/vc/api-vc-manager.ts
 import {
   CredentialType as CredentialType2
@@ -4675,6 +4832,7 @@ export {
   AgentManager,
   AllowAllAbac,
   ConstraintEvaluator,
+  DeviceEnrollManager,
   DisclosureConfigManager,
   DummyCreds,
   DummyVpVerifier,
@@ -4689,6 +4847,7 @@ export {
   SimpleRebac,
   ToolManager,
   UserIdentityManager,
+  UserKeyPairManager,
   VCManager,
   VPManager,
   checkPermissionWithVP,