@vibes.diy/identity 2.6.2 → 2.6.3

package/device-id/certor.d.ts

@@ -0,0 +1,14 @@
+import type { BaseXXEndeCoder, CertificatePayload } from "@fireproof/core-types-base";
+import type { CertorIf } from "@fireproof/core-types-device-id";
+export declare class Certor implements CertorIf {
+    #private;
+    readonly base64: BaseXXEndeCoder;
+    static fromString(base64: BaseXXEndeCoder, cert: string): Certor;
+    static fromUnverifiedJWT(base64: BaseXXEndeCoder, jwtString: string): Certor;
+    constructor(base64: BaseXXEndeCoder, cert: CertificatePayload);
+    asCert(): CertificatePayload;
+    parseCertificateSubject(s: string): Record<string, string>;
+    asSHA1(): Promise<string>;
+    asSHA256(): Promise<string>;
+    asBase64(): string;
+}

package/device-id/certor.js

@@ -0,0 +1,54 @@
+import { toSortedObject } from "@adviser/cement";
+import { CertificatePayloadSchema } from "@fireproof/core-types-base";
+import { decodeJwt } from "jose";
+import { base58btc } from "multiformats/bases/base58";
+import { sha1 } from "multiformats/hashes/sha1";
+import { sha256 } from "multiformats/hashes/sha2";
+import { deepFreeze } from "@fireproof/core-runtime";
+export class Certor {
+    #cert;
+    base64;
+    #strCert;
+    #uint8Cert;
+    static fromString(base64, cert) {
+        const certObj = CertificatePayloadSchema.parse(JSON.parse(base64.decode(cert)));
+        return new Certor(base64, certObj);
+    }
+    static fromUnverifiedJWT(base64, jwtString) {
+        const payload = decodeJwt(jwtString);
+        const certObj = CertificatePayloadSchema.parse(payload);
+        return new Certor(base64, certObj);
+    }
+    constructor(base64, cert) {
+        this.#cert = deepFreeze(toSortedObject(cert));
+        this.base64 = base64;
+    }
+    asCert() {
+        return this.#cert;
+    }
+    parseCertificateSubject(s) {
+        const parts = {};
+        s.split(",").forEach((part) => {
+            const [key, value] = part.trim().split("=");
+            if (key && value) {
+                parts[key] = value;
+            }
+        });
+        return parts;
+    }
+    async asSHA1() {
+        this.#uint8Cert ||= this.base64.decodeUint8(this.asBase64());
+        const val = await sha1.digest(this.#uint8Cert);
+        return base58btc.encode(val.bytes);
+    }
+    async asSHA256() {
+        this.#uint8Cert ||= this.base64.decodeUint8(this.asBase64());
+        const val = await sha256.digest(this.#uint8Cert);
+        return base58btc.encode(val.bytes);
+    }
+    asBase64() {
+        this.#strCert ||= this.base64.encode(JSON.stringify(toSortedObject(this.#cert)));
+        return this.#strCert;
+    }
+}
+//# sourceMappingURL=certor.js.map

package/device-id/certor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"certor.js","sourceRoot":"","sources":["../../jsr/device-id/certor.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AAGtE,OAAO,EAAE,SAAS,EAAE,MAAM,MAAM,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,0BAA0B,CAAC;AAChD,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAErD,MAAM,OAAO,MAAM;IACR,KAAK,CAAqB;IAC1B,MAAM,CAAkB;IACjC,QAAQ,CAAU;IAClB,UAAU,CAAc;IAExB,MAAM,CAAC,UAAU,CAAC,MAAuB,EAAE,IAAY;QACrD,MAAM,OAAO,GAAG,wBAAwB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChF,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,CAAC,iBAAiB,CAAC,MAAuB,EAAE,SAAiB;QACjE,MAAM,OAAO,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC;QACrC,MAAM,OAAO,GAAG,wBAAwB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACxD,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,CAAC;IAED,YAAY,MAAuB,EAAE,IAAwB;QAC3D,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,CAAuB,CAAC;QACpE,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,MAAM;QACJ,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,uBAAuB,CAAC,CAAS;QAC/B,MAAM,KAAK,GAA2B,EAAE,CAAC;QACzC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE;YAC5B,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5C,IAAI,GAAG,IAAI,KAAK,EAAE,CAAC;gBACjB,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACrB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC/C,OAAO,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,QAAQ;QACZ,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACjD,OAAO,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAED,QAAQ;QACN,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;CACF"}

package/device-id/csr.d.ts

@@ -0,0 +1,10 @@
+import type { Subject, Extensions, FPDeviceIDCSRPayload, SuperThis } from "@fireproof/core-types-base";
+import { Result } from "@adviser/cement";
+import { DeviceIdKey } from "./key.js";
+export declare class DeviceIdCSR {
+    #private;
+    constructor(sthis: SuperThis, key: DeviceIdKey);
+    createCSRPayload(subject: Subject, extensions?: Partial<Extensions>): Promise<FPDeviceIDCSRPayload>;
+    signCSR(payload: FPDeviceIDCSRPayload): Promise<Result<string>>;
+    createCSR(subject: Subject, extensions?: Partial<Extensions>): Promise<Result<string, Error>>;
+}

package/device-id/csr.js

@@ -0,0 +1,52 @@
+import { calculateJwkThumbprint, SignJWT } from "jose";
+import { FPDeviceIDCSRPayloadSchema } from "@fireproof/core-types-base";
+import { exception2Result } from "@adviser/cement";
+export class DeviceIdCSR {
+    #key;
+    #sthis;
+    constructor(sthis, key) {
+        this.#key = key;
+        this.#sthis = sthis;
+    }
+    async createCSRPayload(subject, extensions = {}) {
+        const now = Math.floor(Date.now() / 1000);
+        return FPDeviceIDCSRPayloadSchema.parse({
+            sub: subject.commonName,
+            iss: "csr-client",
+            aud: "certificate-authority",
+            iat: now,
+            exp: now + 3600,
+            jti: this.#sthis.nextId(16).str,
+            csr: {
+                subject: subject,
+                publicKey: await this.#key.publicKey(),
+                extensions: {
+                    subjectAltName: extensions.subjectAltName || [],
+                    keyUsage: extensions.keyUsage || ["digitalSignature", "keyEncipherment"],
+                    extendedKeyUsage: extensions.extendedKeyUsage || ["serverAuth"],
+                },
+            },
+        });
+    }
+    async signCSR(payload) {
+        return exception2Result(async () => {
+            const publicJWK = await this.#key.publicKey();
+            const jws = await new SignJWT(payload)
+                .setProtectedHeader({
+                alg: "ES256",
+                typ: "CSR+JWT",
+                jwk: publicJWK,
+                kid: await calculateJwkThumbprint(publicJWK, "sha256"),
+            })
+                .setIssuedAt()
+                .setExpirationTime("1h")
+                .sign(await this.#key.exportPrivateJWK());
+            return jws;
+        });
+    }
+    async createCSR(subject, extensions = {}) {
+        const payload = await this.createCSRPayload(subject, extensions);
+        return this.signCSR(payload);
+    }
+}
+//# sourceMappingURL=csr.js.map

package/device-id/csr.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"csr.js","sourceRoot":"","sources":["../../jsr/device-id/csr.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,sBAAsB,EAAE,OAAO,EAAqC,MAAM,MAAM,CAAC;AAC1F,OAAO,EAAE,0BAA0B,EAAE,MAAM,4BAA4B,CAAC;AAExE,OAAO,EAAE,gBAAgB,EAAU,MAAM,iBAAiB,CAAC;AAG3D,MAAM,OAAO,WAAW;IACb,IAAI,CAAc;IAClB,MAAM,CAAY;IAE3B,YAAY,KAAgB,EAAE,GAAgB;QAC5C,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,OAAgB,EAAE,UAAU,GAAwB,EAAE;QAC3E,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,OAAO,0BAA0B,CAAC,KAAK,CAAC;YACtC,GAAG,EAAE,OAAO,CAAC,UAAU;YACvB,GAAG,EAAE,YAAY;YACjB,GAAG,EAAE,uBAAuB;YAC5B,GAAG,EAAE,GAAG;YACR,GAAG,EAAE,GAAG,GAAG,IAAI;YACf,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,GAAG;YAC/B,GAAG,EAAE;gBACH,OAAO,EAAE,OAAO;gBAChB,SAAS,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;gBACtC,UAAU,EAAE;oBACV,cAAc,EAAE,UAAU,CAAC,cAAc,IAAI,EAAE;oBAC/C,QAAQ,EAAE,UAAU,CAAC,QAAQ,IAAI,CAAC,kBAAkB,EAAE,iBAAiB,CAAC;oBACxE,gBAAgB,EAAE,UAAU,CAAC,gBAAgB,IAAI,CAAC,YAAY,CAAC;iBAChE;aACF;SACF,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAA6B;QACzC,OAAO,gBAAgB,CAAC,KAAK,IAAI,EAAE;YACjC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YAC9C,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,OAAyB,CAAC;iBACrD,kBAAkB,CAAC;gBAClB,GAAG,EAAE,OAAO;gBACZ,GAAG,EAAE,SAAS;gBACd,GAAG,EAAE,SAAS;gBACd,GAAG,EAAE,MAAM,sBAAsB,CAAC,SAAS,EAAE,QAAQ,CAAC;aACvD,CAAC;iBACD,WAAW,EAAE;iBACb,iBAAiB,CAAC,IAAI,CAAC;iBACvB,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;YAC5C,OAAO,GAAG,CAAC;QACb,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,OAAgB,EAAE,UAAU,GAAwB,EAAE;QACpE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QACjE,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;CACF"}

package/device-id/key.d.ts

@@ -0,0 +1,13 @@
+import { Result } from "@adviser/cement";
+import type { JWKPrivate, JWKPublic } from "@fireproof/core-types-base";
+import type { DeviceIdKeyIf } from "@fireproof/core-types-device-id";
+import { type GenerateKeyPairOptions } from "jose";
+export declare class DeviceIdKey implements DeviceIdKeyIf {
+    #private;
+    static create(opts?: GenerateKeyPairOptions): Promise<DeviceIdKey>;
+    static createFromJWK(jwk: JWKPrivate, opts?: GenerateKeyPairOptions): Promise<Result<DeviceIdKey>>;
+    private constructor();
+    fingerPrint(): Promise<string>;
+    exportPrivateJWK(): Promise<JWKPrivate>;
+    publicKey(): Promise<JWKPublic>;
+}

package/device-id/key.js

@@ -0,0 +1,46 @@
+import { Result } from "@adviser/cement";
+import { JWKPrivateSchema, JWKPublicSchema } from "@fireproof/core-types-base";
+import { generateKeyPair, exportJWK, calculateJwkThumbprint } from "jose";
+import { sts } from "@fireproof/core-runtime";
+export class DeviceIdKey {
+    #privateKey;
+    static async create(opts = { extractable: true }) {
+        const pair = await generateKeyPair("ES256", opts);
+        return new DeviceIdKey(pair.privateKey);
+    }
+    static async createFromJWK(jwk, opts = { extractable: true }) {
+        const parsed = JWKPrivateSchema.safeParse(jwk);
+        if (!parsed.success) {
+            return Result.Err(`Invalid JWK: ${parsed.error.message}`);
+        }
+        const j = parsed.data;
+        const rKey = await sts.importJWK(j, undefined, opts);
+        if (rKey.isErr()) {
+            return Result.Err(rKey);
+        }
+        return Result.Ok(new DeviceIdKey(rKey.Ok().key));
+    }
+    constructor(pair) {
+        this.#privateKey = pair;
+    }
+    async fingerPrint() {
+        return calculateJwkThumbprint(await this.exportPrivateJWK(), "sha256");
+    }
+    async exportPrivateJWK() {
+        const jwk = await exportJWK(this.#privateKey);
+        const { success, data } = JWKPrivateSchema.safeParse(jwk);
+        if (!success || !data) {
+            throw new Error("Invalid JWK");
+        }
+        return data;
+    }
+    async publicKey() {
+        const privateJWK = await exportJWK(this.#privateKey);
+        const { success, data, error } = JWKPublicSchema.safeParse(privateJWK);
+        if (!success || !data) {
+            throw new Error(`Invalid public JWK: ${error.message}`);
+        }
+        return data;
+    }
+}
+//# sourceMappingURL=key.js.map

package/device-id/key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key.js","sourceRoot":"","sources":["../../jsr/device-id/key.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAG/E,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,sBAAsB,EAA+B,MAAM,MAAM,CAAC;AACvG,OAAO,EAAE,GAAG,EAAE,MAAM,yBAAyB,CAAC;AAE9C,MAAM,OAAO,WAAW;IACb,WAAW,CAAY;IAEhC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,GAA2B,EAAE,WAAW,EAAE,IAAI,EAAE;QACtE,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAClD,OAAO,IAAI,WAAW,CAAC,IAAI,CAAC,UAAuB,CAAC,CAAC;IACvD,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,GAAe,EAAE,IAAI,GAA2B,EAAE,WAAW,EAAE,IAAI,EAAE;QAC9F,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,OAAO,MAAM,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC;QACtB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QACrD,IAAI,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;YACjB,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC1B,CAAC;QACD,OAAO,MAAM,CAAC,EAAE,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,GAAgB,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,YAAoB,IAAe;QACjC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,WAAW;QACf,OAAO,sBAAsB,CAAC,MAAM,IAAI,CAAC,gBAAgB,EAAE,EAAE,QAAQ,CAAC,CAAC;IACzE,CAAC;IAED,KAAK,CAAC,gBAAgB;QACpB,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC9C,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,gBAAgB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,aAAa,CAAC,CAAC;QACjC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,SAAS;QACb,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACrD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,eAAe,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACvE,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,uBAAuB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/device-id/sign.d.ts

@@ -0,0 +1,8 @@
+import type { BaseXXEndeCoder, CertificatePayload, JWTPayload } from "@fireproof/core-types-base";
+import { DeviceIdKey } from "./key.js";
+export declare class DeviceIdSignMsg {
+    #private;
+    readonly base64: BaseXXEndeCoder;
+    constructor(base64: BaseXXEndeCoder, key: DeviceIdKey, cert: CertificatePayload);
+    sign<T extends JWTPayload>(payload: T, algorithm?: string): Promise<string>;
+}

package/device-id/sign.js

@@ -0,0 +1,31 @@
+import { calculateJwkThumbprint, SignJWT } from "jose";
+import { Certor } from "./certor.js";
+export class DeviceIdSignMsg {
+    #key;
+    #cert;
+    base64;
+    constructor(base64, key, cert) {
+        this.#key = key;
+        this.#cert = cert;
+        this.base64 = base64;
+    }
+    async sign(payload, algorithm = "ES256") {
+        const certor = new Certor(this.base64, this.#cert);
+        const x5c = [certor.asBase64()];
+        const x5t = await certor.asSHA1();
+        const x5tS256 = await certor.asSHA256();
+        return await new SignJWT(payload)
+            .setProtectedHeader({
+            alg: algorithm,
+            typ: "JWT",
+            kid: await calculateJwkThumbprint(await this.#key.publicKey(), "sha256"),
+            x5c: x5c,
+            x5t: x5t,
+            "x5t#S256": x5tS256,
+        })
+            .setIssuedAt()
+            .setExpirationTime("1h")
+            .sign(await this.#key.exportPrivateJWK());
+    }
+}
+//# sourceMappingURL=sign.js.map

package/device-id/sign.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign.js","sourceRoot":"","sources":["../../jsr/device-id/sign.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,sBAAsB,EAAE,OAAO,EAAqC,MAAM,MAAM,CAAC;AAE1F,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAGrC,MAAM,OAAO,eAAe;IACjB,IAAI,CAAc;IAClB,KAAK,CAAqB;IAC1B,MAAM,CAAkB;IAEjC,YAAY,MAAuB,EAAE,GAAgB,EAAE,IAAwB;QAC7E,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC;QAChB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,IAAI,CAAuB,OAAU,EAAE,SAAS,GAAG,OAAO;QAC9D,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACnD,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAChC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxC,OAAO,MAAM,IAAI,OAAO,CAAC,OAAyB,CAAC;aAChD,kBAAkB,CAAC;YAClB,GAAG,EAAE,SAAS;YACd,GAAG,EAAE,KAAK;YACV,GAAG,EAAE,MAAM,sBAAsB,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,QAAQ,CAAC;YACxE,GAAG,EAAE,GAAG;YACR,GAAG,EAAE,GAAG;YACR,UAAU,EAAE,OAAO;SACpB,CAAC;aACD,WAAW,EAAE;aACb,iBAAiB,CAAC,IAAI,CAAC;aACvB,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC9C,CAAC;CACF"}

package/node.d.ts

@@ -2,7 +2,10 @@ import { Result } from "@adviser/cement";
 import type { SuperThis } from "@fireproof/core-types-base";
 import type { DashAuthType } from "@fireproof/core-types-protocols-dashboard";
 export { getKeyBag } from "@fireproof/core-keybag";
-export { DeviceIdKey, DeviceIdSignMsg, DeviceIdCSR, DeviceIdCA } from "@fireproof/core-device-id";
+export { DeviceIdKey } from "./device-id/key.js";
+export { DeviceIdSignMsg } from "./device-id/sign.js";
+export { DeviceIdCSR } from "./device-id/csr.js";
+export { DeviceIdCA } from "@fireproof/core-device-id";
 export { deviceIdRegisterEvento, isResDeviceIdRegister } from "@fireproof/core-cli";
 export type { ReqDeviceIdRegister } from "@fireproof/core-cli";
 export declare function createDeviceIdGetToken(sthis: SuperThis, opts: {

package/node.js

@@ -1,8 +1,12 @@
 import { Lazy, Result } from "@adviser/cement";
 import { getKeyBag } from "@fireproof/core-keybag";
-import { DeviceIdKey, DeviceIdSignMsg } from "@fireproof/core-device-id";
+import { DeviceIdKey } from "./device-id/key.js";
+import { DeviceIdSignMsg } from "./device-id/sign.js";
 export { getKeyBag } from "@fireproof/core-keybag";
-export { DeviceIdKey, DeviceIdSignMsg, DeviceIdCSR, DeviceIdCA } from "@fireproof/core-device-id";
+export { DeviceIdKey } from "./device-id/key.js";
+export { DeviceIdSignMsg } from "./device-id/sign.js";
+export { DeviceIdCSR } from "./device-id/csr.js";
+export { DeviceIdCA } from "@fireproof/core-device-id";
 export { deviceIdRegisterEvento, isResDeviceIdRegister } from "@fireproof/core-cli";
 export async function createDeviceIdGetToken(sthis, opts) {
     const kb = await getKeyBag(sthis);

package/node.js.map

@@ -1 +1 @@
-{"version":3,"file":"node.js","sourceRoot":"","sources":["../jsr/node.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAG/C,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAMzE,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAIlG,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAiBpF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAAgB,EAChB,IAAoE;IAEpE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,kBAAkB,IAAI,uDAAuD,CAAC,CAAC;IACtG,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACzE,IAAI,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QACpB,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC;IACtB,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,EAAG,CAAC,kBAAkB,CAAC;IACxD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IAC5E,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,OAAO,IAAI,CACT,KAAK,IAAmC,EAAE;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAC7B;YACE,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,WAAW;YAChB,QAAQ,EAAE,MAAM,OAAO,CAAC,EAAE,EAAE,CAAC,WAAW,EAAE;YAC1C,GAAG,EAAE,EAAE,GAAG;YACV,GAAG,EAAE,GAAG,GAAG,GAAG;YACd,GAAG,EAAE,GAAG,GAAG,CAAC;YACZ,GAAG,EAAE,GAAG;YACR,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG;SACI,EAC7B,OAAO,CACR,CAAC;QACF,OAAO,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,CAAC,EACD,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CACpC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"node.js","sourceRoot":"","sources":["../jsr/node.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAG/C,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAMtD,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAGnD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAIvD,OAAO,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAiBpF,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAAgB,EAChB,IAAoE;IAEpE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,kBAAkB,IAAI,uDAAuD,CAAC,CAAC;IACtG,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,WAAW,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;IACzE,IAAI,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QACpB,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC;IACtB,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,EAAG,CAAC,kBAAkB,CAAC;IACxD,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IAC5E,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,OAAO,IAAI,CACT,KAAK,IAAmC,EAAE;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAC7B;YACE,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,WAAW;YAChB,QAAQ,EAAE,MAAM,OAAO,CAAC,EAAE,EAAE,CAAC,WAAW,EAAE;YAC1C,GAAG,EAAE,EAAE,GAAG;YACV,GAAG,EAAE,GAAG,GAAG,GAAG;YACd,GAAG,EAAE,GAAG,GAAG,CAAC;YACZ,GAAG,EAAE,GAAG;YACR,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG;SACI,EAC7B,OAAO,CACR,CAAC;QACF,OAAO,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IACjD,CAAC,EACD,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CACpC,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vibes.diy/identity",
-  "version": "2.6.2",
+  "version": "2.6.3",
   "type": "module",
   "main": "./index.js",
   "exports": {
@@ -22,6 +22,8 @@
     "@fireproof/core-types-base": "~0.24.19",
     "@fireproof/core-types-device-id": "~0.24.19",
     "@fireproof/core-types-protocols-dashboard": "~0.24.19",
+    "jose": "~6.2.2",
+    "multiformats": "~13.4.2",
     "zod": "~4.4.3"
   },
   "repository": {