@vibes.diy/identity 2.6.1 → 2.6.3

package/LICENSE.md

@@ -1,32 +1,3 @@
-The contents of this repository are Copyright (c) corresponding authors and
-contributors, licensed under the `Permissive License Stack` meaning either of:
-
-- Apache-2.0 Software License: https://www.apache.org/licenses/LICENSE-2.0
-  ([...4tr2kfsq](https://dweb.link/ipfs/bafkreiankqxazcae4onkp436wag2lj3ccso4nawxqkkfckd6cg4tr2kfsq))
-
-- MIT Software License: https://opensource.org/licenses/MIT
-  ([...vljevcba](https://dweb.link/ipfs/bafkreiepofszg4gfe2gzuhojmksgemsub2h4uy2gewdnr35kswvljevcba))
-
-You may not use the contents of this repository except in compliance
-with one of the listed Licenses. For an extended clarification of the
-intent behind the choice of Licensing please refer to
-https://protocol.ai/blog/announcing-the-permissive-license-stack/
-
-Unless required by applicable law or agreed to in writing, software
-distributed under the terms listed in this notice is distributed on
-an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,
-either express or implied. See each License for the specific language
-governing permissions and limitations under that License.
-
-<!--- SPDX-License-Identifier: Apache-2.0 OR MIT -->
-
-`SPDX-License-Identifier: Apache-2.0 OR MIT`
-
-Verbatim copies of both licenses are included below:
-
-<details><summary>Apache-2.0 Software License</summary>
-
-```
                                  Apache License
                            Version 2.0, January 2004
                         http://www.apache.org/licenses/
@@ -203,30 +174,28 @@ Verbatim copies of both licenses are included below:
       of your accepting any such warranty or additional liability.
 
    END OF TERMS AND CONDITIONS
-```
 
-</details>
+   APPENDIX: How to apply the Apache License to your work.
 
-<details><summary>MIT Software License</summary>
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
 
-```
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
+   Copyright [yyyy] [name of copyright owner]
 
-The above copyright notice and this permission notice shall be included in
-all copies or substantial portions of the Software.
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
 
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
-THE SOFTWARE.
-```
+       http://www.apache.org/licenses/LICENSE-2.0
 
-</details>
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -1,23 +1,38 @@
 [![Join our
-  Discord](https://discord-badge.selem.workers.dev/i/weSgWt684k.svg)](https://discord.gg/weSgWt684k)
+  Discord](https://discord-badge.selem.workers.dev/i/vnpWycj4Ta.svg)](https://discord.gg/vnpWycj4Ta)
 
-# ✨ Build Mini Apps with AI Magic
+# ✨ Vibes DIY — make apps with your friends
 
-Turn your **ideas** into **interactive apps** instantly. [Try it now](https://vibes.diy/) or [fork on GitHub](https://github.com/VibesDIY/vibes.diy) to customize with your own AI account.
+Software is getting weird again. Describe what you want and get a real, live app — fun, done, and alive. [Try it now](https://vibes.diy/) or [fork on GitHub](https://github.com/VibesDIY/vibes.diy).
 
-Create beautiful, interactive mini apps with zero setup. Your creations are automatically saved and can be shared instantly.
+Make apps with your friends, so easy even AI can do it. Describe your app in plain words, it builds instantly, and you keep changing it just by talking to it. Share the link and your friends join right away — no setup, no "wait, let me send you the invite."
 
-## Features
+## Why it's different
 
-- Create interactive mini apps using AI
-- Browse and return to your previous creations
-- Auto-save your work securely
-- See your app changes in real-time
+- **Fun** — build for any reason, or no reason at all.
+- **Done** — it's a real app at its own live link, not a prototype. State is saved automatically.
+- **Alive** — keep talking to it and it keeps changing. So can anyone you share it with.
+
+Seeing a vibe makes you want to change it. Start from someone else's, tweak it to fit you, share it, and the people you share with remix their own version. You're not a user anymore — you're a maker.
+
+## What people make
+
+A character bot that answers in your voice. A neighborhood resource tracker you share at the next town meeting. A flashcard app remixed into collaborative trivia your students change live. A workout tracker a whole gym swaps routines on. Every one is the same move: start, tweak, share, remix.
+
+## Yours to control
+
+Private by default — or open to the world. You choose. Keep an app to the people you invite, or publish it so anyone can use and remix it. You set who can read, write, and open it.
+
+> Your app's data lives in a centralized cloud database. "Private" means access-gated from other people — not encrypted, and not hidden from the platform.
+
+## Open source
+
+The whole platform is open source under Apache 2.0. Read the code, open an issue, send a PR.
 
 ## Quick Start
 
-1. [Try the demo](https://vibes.diy/) - No setup required!
-2. Or set up your own:
+1. [Try the demo](https://vibes.diy/) — no setup required.
+2. Or run it yourself:
    - Clone the repository
    - Install with `pnpm i`
    - Run `pnpm dev`
@@ -28,11 +43,4 @@ We are committed to providing a welcoming and inclusive environment for all cont
 
 Interested in contributing? Check out our [Contributing Guide](CONTRIBUTING.md) to get started.
 
-## Your Work is Always Safe
-
-Every app you create is automatically saved, so you can:
-
-- Browse your creations in the sidebar
-- Return to previous work anytime
-- Keep track of your building history
-- Save screenshots of your apps
+Find us on [Discord](https://discord.gg/vnpWycj4Ta), [Substack](https://vibesdiy.substack.com/), [YouTube](https://www.youtube.com/@VibesDIY), and [Bluesky](https://bsky.app/profile/vibes.diy).

package/device-id/certor.d.ts

@@ -0,0 +1,14 @@
+import type { BaseXXEndeCoder, CertificatePayload } from "@fireproof/core-types-base";
+import type { CertorIf } from "@fireproof/core-types-device-id";
+export declare class Certor implements CertorIf {
+    #private;
+    readonly base64: BaseXXEndeCoder;
+    static fromString(base64: BaseXXEndeCoder, cert: string): Certor;
+    static fromUnverifiedJWT(base64: BaseXXEndeCoder, jwtString: string): Certor;
+    constructor(base64: BaseXXEndeCoder, cert: CertificatePayload);
+    asCert(): CertificatePayload;
+    parseCertificateSubject(s: string): Record<string, string>;
+    asSHA1(): Promise<string>;
+    asSHA256(): Promise<string>;
+    asBase64(): string;
+}

package/device-id/certor.js

@@ -0,0 +1,54 @@
+import { toSortedObject } from "@adviser/cement";
+import { CertificatePayloadSchema } from "@fireproof/core-types-base";
+import { decodeJwt } from "jose";
+import { base58btc } from "multiformats/bases/base58";
+import { sha1 } from "multiformats/hashes/sha1";
+import { sha256 } from "multiformats/hashes/sha2";
+import { deepFreeze } from "@fireproof/core-runtime";
+export class Certor {
+    #cert;
+    base64;
+    #strCert;
+    #uint8Cert;
+    static fromString(base64, cert) {
+        const certObj = CertificatePayloadSchema.parse(JSON.parse(base64.decode(cert)));
+        return new Certor(base64, certObj);
+    }
+    static fromUnverifiedJWT(base64, jwtString) {
+        const payload = decodeJwt(jwtString);
+        const certObj = CertificatePayloadSchema.parse(payload);
+        return new Certor(base64, certObj);
+    }
+    constructor(base64, cert) {
+        this.#cert = deepFreeze(toSortedObject(cert));
+        this.base64 = base64;
+    }
+    asCert() {
+        return this.#cert;
+    }
+    parseCertificateSubject(s) {
+        const parts = {};
+        s.split(",").forEach((part) => {
+            const [key, value] = part.trim().split("=");
+            if (key && value) {
+                parts[key] = value;
+            }
+        });
+        return parts;
+    }
+    async asSHA1() {
+        this.#uint8Cert ||= this.base64.decodeUint8(this.asBase64());
+        const val = await sha1.digest(this.#uint8Cert);
+        return base58btc.encode(val.bytes);
+    }
+    async asSHA256() {
+        this.#uint8Cert ||= this.base64.decodeUint8(this.asBase64());
+        const val = await sha256.digest(this.#uint8Cert);
+        return base58btc.encode(val.bytes);
+    }
+    asBase64() {
+        this.#strCert ||= this.base64.encode(JSON.stringify(toSortedObject(this.#cert)));
+        return this.#strCert;
+    }
+}
+//# sourceMappingURL=certor.js.map

package/device-id/certor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"certor.js","sourceRoot":"","sources":["../../jsr/device-id/certor.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAGtE,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,0BAA0B,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD,MAAM,OAAO,MAAM;IACR,KAAK,CAAqB;IAC1B,MAAM,CAAkB;IACjC,QAAQ,CAAU;IAClB,UAAU,CAAc;IAExB,MAAM,CAAC,UAAU,CAAC,MAAuB,EAAE,IAAY;QACrD,MAAM,OAAO,GAAG,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChF,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,CAAC,iBAAiB,CAAC,MAAuB,EAAE,SAAiB;QACjE,MAAM,OAAO,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,wBAAwB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxD,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,YAAY,MAAuB,EAAE,IAAwB;QAC3D,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,CAAuB,CAAC;QACpE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,uBAAuB,CAAC,CAAS;QAC/B,MAAM,KAAK,GAA2B,EAAE,CAAC;QACzC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YAC5B,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5C,IAAI,GAAG,IAAI,KAAK,EAAE,CAAC;gBACjB,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACrB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/C,OAAO,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjD,OAAO,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAED,QAAQ;QACN,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF"}

package/device-id/csr.d.ts

@@ -0,0 +1,10 @@
+import type { Subject, Extensions, FPDeviceIDCSRPayload, SuperThis } from "@fireproof/core-types-base";
+import { Result } from "@adviser/cement";
+import { DeviceIdKey } from "./key.js";
+export declare class DeviceIdCSR {
+    #private;
+    constructor(sthis: SuperThis, key: DeviceIdKey);
+    createCSRPayload(subject: Subject, extensions?: Partial<Extensions>): Promise<FPDeviceIDCSRPayload>;
+    signCSR(payload: FPDeviceIDCSRPayload): Promise<Result<string>>;
+    createCSR(subject: Subject, extensions?: Partial<Extensions>): Promise<Result<string, Error>>;
+}

package/device-id/csr.js

@@ -0,0 +1,52 @@
+import { calculateJwkThumbprint, SignJWT } from "jose";
+import { FPDeviceIDCSRPayloadSchema } from "@fireproof/core-types-base";
+import { exception2Result } from "@adviser/cement";
+export class DeviceIdCSR {
+    #key;
+    #sthis;
+    constructor(sthis, key) {
+        this.#key = key;
+        this.#sthis = sthis;
+    }
+    async createCSRPayload(subject, extensions = {}) {
+        const now = Math.floor(Date.now() / 1000);
+        return FPDeviceIDCSRPayloadSchema.parse({
+            sub: subject.commonName,
+            iss: "csr-client",
+            aud: "certificate-authority",
+            iat: now,
+            exp: now + 3600,
+            jti: this.#sthis.nextId(16).str,
+            csr: {
+                subject: subject,
+                publicKey: await this.#key.publicKey(),
+                extensions: {
+                    subjectAltName: extensions.subjectAltName || [],
+                    keyUsage: extensions.keyUsage || ["digitalSignature", "keyEncipherment"],
+                    extendedKeyUsage: extensions.extendedKeyUsage || ["serverAuth"],
+                },
+            },
+        });
+    }
+    async signCSR(payload) {
+        return exception2Result(async () => {
+            const publicJWK = await this.#key.publicKey();
+            const jws = await new SignJWT(payload)
+                .setProtectedHeader({
+                alg: "ES256",
+                typ: "CSR+JWT",
+                jwk: publicJWK,
+                kid: await calculateJwkThumbprint(publicJWK, "sha256"),
+            })
+                .setIssuedAt()
+                .setExpirationTime("1h")
+                .sign(await this.#key.exportPrivateJWK());
+            return jws;
+        });
+    }
+    async createCSR(subject, extensions = {}) {
+        const payload = await this.createCSRPayload(subject, extensions);
+        return this.signCSR(payload);
+    }
+}
+//# sourceMappingURL=csr.js.map

package/device-id/csr.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"csr.js","sourceRoot":"","sources":["../../jsr/device-id/csr.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,sBAAsB,EAAE,OAAO,EAAqC,MAAM,MAAM,CAAC;AAC1F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAExE,OAAO,EAAE,gBAAgB,EAAU,MAAM,iBAAiB,CAAC;AAG3D,MAAM,OAAO,WAAW;IACb,IAAI,CAAc;IAClB,MAAM,CAAY;IAE3B,YAAY,KAAgB,EAAE,GAAgB;QAC5C,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,OAAgB,EAAE,UAAU,GAAwB,EAAE;QAC3E,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,OAAO,0BAA0B,CAAC,KAAK,CAAC;YACtC,GAAG,EAAE,OAAO,CAAC,UAAU;YACvB,GAAG,EAAE,YAAY;YACjB,GAAG,EAAE,uBAAuB;YAC5B,GAAG,EAAE,GAAG;YACR,GAAG,EAAE,GAAG,GAAG,IAAI;YACf,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG;YAC/B,GAAG,EAAE;gBACH,OAAO,EAAE,OAAO;gBAChB,SAAS,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;gBACtC,UAAU,EAAE;oBACV,cAAc,EAAE,UAAU,CAAC,cAAc,IAAI,EAAE;oBAC/C,QAAQ,EAAE,UAAU,CAAC,QAAQ,IAAI,CAAC,kBAAkB,EAAE,iBAAiB,CAAC;oBACxE,gBAAgB,EAAE,UAAU,CAAC,gBAAgB,IAAI,CAAC,YAAY,CAAC;iBAChE;aACF;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAA6B;QACzC,OAAO,gBAAgB,CAAC,KAAK,IAAI,EAAE;YACjC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC9C,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,OAAyB,CAAC;iBACrD,kBAAkB,CAAC;gBAClB,GAAG,EAAE,OAAO;gBACZ,GAAG,EAAE,SAAS;gBACd,GAAG,EAAE,SAAS;gBACd,GAAG,EAAE,MAAM,sBAAsB,CAAC,SAAS,EAAE,QAAQ,CAAC;aACvD,CAAC;iBACD,WAAW,EAAE;iBACb,iBAAiB,CAAC,IAAI,CAAC;iBACvB,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;YAC5C,OAAO,GAAG,CAAC;QACb,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,OAAgB,EAAE,UAAU,GAAwB,EAAE;QACpE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;CACF"}

package/device-id/key.d.ts

@@ -0,0 +1,13 @@
+import { Result } from "@adviser/cement";
+import type { JWKPrivate, JWKPublic } from "@fireproof/core-types-base";
+import type { DeviceIdKeyIf } from "@fireproof/core-types-device-id";
+import { type GenerateKeyPairOptions } from "jose";
+export declare class DeviceIdKey implements DeviceIdKeyIf {
+    #private;
+    static create(opts?: GenerateKeyPairOptions): Promise<DeviceIdKey>;
+    static createFromJWK(jwk: JWKPrivate, opts?: GenerateKeyPairOptions): Promise<Result<DeviceIdKey>>;
+    private constructor();
+    fingerPrint(): Promise<string>;
+    exportPrivateJWK(): Promise<JWKPrivate>;
+    publicKey(): Promise<JWKPublic>;
+}

package/device-id/key.js

@@ -0,0 +1,46 @@
+import { Result } from "@adviser/cement";
+import { JWKPrivateSchema, JWKPublicSchema } from "@fireproof/core-types-base";
+import { generateKeyPair, exportJWK, calculateJwkThumbprint } from "jose";
+import { sts } from "@fireproof/core-runtime";
+export class DeviceIdKey {
+    #privateKey;
+    static async create(opts = { extractable: true }) {
+        const pair = await generateKeyPair("ES256", opts);
+        return new DeviceIdKey(pair.privateKey);
+    }
+    static async createFromJWK(jwk, opts = { extractable: true }) {
+        const parsed = JWKPrivateSchema.safeParse(jwk);
+        if (!parsed.success) {
+            return Result.Err(`Invalid JWK: ${parsed.error.message}`);
+        }
+        const j = parsed.data;
+        const rKey = await sts.importJWK(j, undefined, opts);
+        if (rKey.isErr()) {
+            return Result.Err(rKey);
+        }
+        return Result.Ok(new DeviceIdKey(rKey.Ok().key));
+    }
+    constructor(pair) {
+        this.#privateKey = pair;
+    }
+    async fingerPrint() {
+        return calculateJwkThumbprint(await this.exportPrivateJWK(), "sha256");
+    }
+    async exportPrivateJWK() {
+        const jwk = await exportJWK(this.#privateKey);
+        const { success, data } = JWKPrivateSchema.safeParse(jwk);
+        if (!success || !data) {
+            throw new Error("Invalid JWK");
+        }
+        return data;
+    }
+    async publicKey() {
+        const privateJWK = await exportJWK(this.#privateKey);
+        const { success, data, error } = JWKPublicSchema.safeParse(privateJWK);
+        if (!success || !data) {
+            throw new Error(`Invalid public JWK: ${error.message}`);
+        }
+        return data;
+    }
+}
+//# sourceMappingURL=key.js.map

package/device-id/key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key.js","sourceRoot":"","sources":["../../jsr/device-id/key.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAG/E,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,sBAAsB,EAA+B,MAAM,MAAM,CAAC;AACvG,OAAO,EAAE,GAAG,EAAE,MAAM,yBAAyB,CAAC;AAE9C,MAAM,OAAO,WAAW;IACb,WAAW,CAAY;IAEhC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,GAA2B,EAAE,WAAW,EAAE,IAAI,EAAE;QACtE,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAClD,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC,UAAuB,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,GAAe,EAAE,IAAI,GAA2B,EAAE,WAAW,EAAE,IAAI,EAAE;QAC9F,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,MAAM,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;QACtB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QACrD,IAAI,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;YACjB,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QACD,OAAO,MAAM,CAAC,EAAE,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,GAAgB,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,YAAoB,IAAe;QACjC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,WAAW;QACf,OAAO,sBAAsB,CAAC,MAAM,IAAI,CAAC,gBAAgB,EAAE,EAAE,QAAQ,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC9C,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;QACjC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,SAAS;QACb,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACrD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,eAAe,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACvE,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,uBAAuB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/device-id/sign.d.ts

@@ -0,0 +1,8 @@
+import type { BaseXXEndeCoder, CertificatePayload, JWTPayload } from "@fireproof/core-types-base";
+import { DeviceIdKey } from "./key.js";
+export declare class DeviceIdSignMsg {
+    #private;
+    readonly base64: BaseXXEndeCoder;
+    constructor(base64: BaseXXEndeCoder, key: DeviceIdKey, cert: CertificatePayload);
+    sign<T extends JWTPayload>(payload: T, algorithm?: string): Promise<string>;
+}

package/device-id/sign.js

@@ -0,0 +1,31 @@
+import { calculateJwkThumbprint, SignJWT } from "jose";
+import { Certor } from "./certor.js";
+export class DeviceIdSignMsg {
+    #key;
+    #cert;
+    base64;
+    constructor(base64, key, cert) {
+        this.#key = key;
+        this.#cert = cert;
+        this.base64 = base64;
+    }
+    async sign(payload, algorithm = "ES256") {
+        const certor = new Certor(this.base64, this.#cert);
+        const x5c = [certor.asBase64()];
+        const x5t = await certor.asSHA1();
+        const x5tS256 = await certor.asSHA256();
+        return await new SignJWT(payload)
+            .setProtectedHeader({
+            alg: algorithm,
+            typ: "JWT",
+            kid: await calculateJwkThumbprint(await this.#key.publicKey(), "sha256"),
+            x5c: x5c,
+            x5t: x5t,
+            "x5t#S256": x5tS256,
+        })
+            .setIssuedAt()
+            .setExpirationTime("1h")
+            .sign(await this.#key.exportPrivateJWK());
+    }
+}
+//# sourceMappingURL=sign.js.map

package/device-id/sign.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign.js","sourceRoot":"","sources":["../../jsr/device-id/sign.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,sBAAsB,EAAE,OAAO,EAAqC,MAAM,MAAM,CAAC;AAE1F,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAGrC,MAAM,OAAO,eAAe;IACjB,IAAI,CAAc;IAClB,KAAK,CAAqB;IAC1B,MAAM,CAAkB;IAEjC,YAAY,MAAuB,EAAE,GAAgB,EAAE,IAAwB;QAC7E,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,IAAI,CAAuB,OAAU,EAAE,SAAS,GAAG,OAAO;QAC9D,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAChC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxC,OAAO,MAAM,IAAI,OAAO,CAAC,OAAyB,CAAC;aAChD,kBAAkB,CAAC;YAClB,GAAG,EAAE,SAAS;YACd,GAAG,EAAE,KAAK;YACV,GAAG,EAAE,MAAM,sBAAsB,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,QAAQ,CAAC;YACxE,GAAG,EAAE,GAAG;YACR,GAAG,EAAE,GAAG;YACR,UAAU,EAAE,OAAO;SACpB,CAAC;aACD,WAAW,EAAE;aACb,iBAAiB,CAAC,IAAI,CAAC;aACvB,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC9C,CAAC;CACF"}

package/node.d.ts

@@ -2,7 +2,10 @@ import { Result } from "@adviser/cement";
 import type { SuperThis } from "@fireproof/core-types-base";
 import type { DashAuthType } from "@fireproof/core-types-protocols-dashboard";
 export { getKeyBag } from "@fireproof/core-keybag";
-export { DeviceIdKey, DeviceIdSignMsg, DeviceIdCSR, DeviceIdCA } from "@fireproof/core-device-id";
+export { DeviceIdKey } from "./device-id/key.js";
+export { DeviceIdSignMsg } from "./device-id/sign.js";
+export { DeviceIdCSR } from "./device-id/csr.js";
+export { DeviceIdCA } from "@fireproof/core-device-id";
 export { deviceIdRegisterEvento, isResDeviceIdRegister } from "@fireproof/core-cli";
 export type { ReqDeviceIdRegister } from "@fireproof/core-cli";
 export declare function createDeviceIdGetToken(sthis: SuperThis, opts: {

package/node.js

@@ -1,8 +1,12 @@
 import { Lazy, Result } from "@adviser/cement";
 import { getKeyBag } from "@fireproof/core-keybag";
-import { DeviceIdKey, DeviceIdSignMsg } from "@fireproof/core-device-id";
+import { DeviceIdKey } from "./device-id/key.js";
+import { DeviceIdSignMsg } from "./device-id/sign.js";
 export { getKeyBag } from "@fireproof/core-keybag";
-export { DeviceIdKey, DeviceIdSignMsg, DeviceIdCSR, DeviceIdCA } from "@fireproof/core-device-id";
+export { DeviceIdKey } from "./device-id/key.js";
+export { DeviceIdSignMsg } from "./device-id/sign.js";
+export { DeviceIdCSR } from "./device-id/csr.js";
+export { DeviceIdCA } from "@fireproof/core-device-id";
 export { deviceIdRegisterEvento, isResDeviceIdRegister } from "@fireproof/core-cli";
 export async function createDeviceIdGetToken(sthis, opts) {
     const kb = await getKeyBag(sthis);

package/node.js.map

@@ -1 +1 @@
-{"version":3,"file":"node.js","sourceRoot":"","sources":["../jsr/node.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAG/C,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAMzE,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAIlG,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAiBpF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAAgB,EAChB,IAAoE;IAEpE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,kBAAkB,IAAI,uDAAuD,CAAC,CAAC;IACtG,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACzE,IAAI,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QACpB,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC;IACtB,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,EAAG,CAAC,kBAAkB,CAAC;IACxD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IAC5E,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,OAAO,IAAI,CACT,KAAK,IAAmC,EAAE;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAC7B;YACE,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,WAAW;YAChB,QAAQ,EAAE,MAAM,OAAO,CAAC,EAAE,EAAE,CAAC,WAAW,EAAE;YAC1C,GAAG,EAAE,EAAE,GAAG;YACV,GAAG,EAAE,GAAG,GAAG,GAAG;YACd,GAAG,EAAE,GAAG,GAAG,CAAC;YACZ,GAAG,EAAE,GAAG;YACR,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG;SACI,EAC7B,OAAO,CACR,CAAC;QACF,OAAO,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,CAAC,EACD,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CACpC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"node.js","sourceRoot":"","sources":["../jsr/node.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAG/C,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAMtD,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAGnD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAIvD,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAiBpF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAAgB,EAChB,IAAoE;IAEpE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,kBAAkB,IAAI,uDAAuD,CAAC,CAAC;IACtG,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACzE,IAAI,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QACpB,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC;IACtB,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,EAAG,CAAC,kBAAkB,CAAC;IACxD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IAC5E,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,OAAO,IAAI,CACT,KAAK,IAAmC,EAAE;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAC7B;YACE,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,WAAW;YAChB,QAAQ,EAAE,MAAM,OAAO,CAAC,EAAE,EAAE,CAAC,WAAW,EAAE;YAC1C,GAAG,EAAE,EAAE,GAAG;YACV,GAAG,EAAE,GAAG,GAAG,GAAG;YACd,GAAG,EAAE,GAAG,GAAG,CAAC;YACZ,GAAG,EAAE,GAAG;YACR,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG;SACI,EAC7B,OAAO,CACR,CAAC;QACF,OAAO,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,CAAC,EACD,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CACpC,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vibes.diy/identity",
-  "version": "2.6.1",
+  "version": "2.6.3",
   "type": "module",
   "main": "./index.js",
   "exports": {
@@ -22,6 +22,8 @@
     "@fireproof/core-types-base": "~0.24.19",
     "@fireproof/core-types-device-id": "~0.24.19",
     "@fireproof/core-types-protocols-dashboard": "~0.24.19",
+    "jose": "~6.2.2",
+    "multiformats": "~13.4.2",
     "zod": "~4.4.3"
   },
   "repository": {