@weaveprotocol/core 0.1.0

package/dist/identity/account-vault.js

@@ -0,0 +1,251 @@
+/**
+ * @module account-vault
+ * The lock on a data folder.
+ *
+ * A folder that holds its seed in the clear is a bearer token: whoever copies it
+ * is you, and the AES key for every private space sits in the same directory as
+ * the ciphertext it opens. So the seed is never stored — only **wrapped copies**
+ * of it are, one per way of unlocking.
+ *
+ * ```
+ * account seed (16 bytes, never written in the clear)
+ *   ├── HKDF → vault key ──encrypts──> space keys and space records at rest
+ *   └── stored only as wraps:
+ *         device     a random key in this origin's storage, gated by a passkey
+ *         passphrase PBKDF2-SHA256 → AES-GCM
+ * ```
+ *
+ * Both wraps are shortcuts for one origin, and neither carries the account
+ * anywhere — that is what the code is for. Adding an app means adding a wrap
+ * there, and two shortcuts end up meaning one account without a delegation
+ * chain anywhere in sight.
+ *
+ * The recovery code needs no wrap at all: it *is* the seed, in printable form.
+ * It is shown once and never stored, and it is the way in when no wrap fits —
+ * a phone, Safari, or an origin that has never seen this folder.
+ *
+ * ## What this does not protect
+ *
+ * Expression files keep their author DID, timestamps and collection names in
+ * the clear, and public spaces keep their bodies that way by design. Locking
+ * those too would mean an opaque blob store, which would cost the property that
+ * makes a folder worth having — that you can open it and see what is in it.
+ */
+import { base64UrlEncode, base64UrlDecode, utf8Encode } from '../utils/encoding.js';
+import { protocolError } from '../utils/errors.js';
+/** AES-GCM wants 96 bits of nonce. */
+const IV_BYTES = 12;
+const SALT_BYTES = 16;
+/**
+ * PBKDF2 rounds for a passphrase wrap.
+ *
+ * Tuned to roughly a quarter-second in a browser, on the reasoning that this
+ * runs once per unlock and the thing it guards is an identity rather than a
+ * session.
+ */
+export const PASSPHRASE_ITERATIONS = 600_000;
+const VAULT_KEY_INFO = utf8Encode('weave-vault-key-v1');
+/** Random bytes as base64url, for salts and nonces. */
+function randomBytes(length) {
+    return globalThis.crypto.getRandomValues(new Uint8Array(length));
+}
+/** A short opaque id for a wrap. */
+function wrapId() {
+    return base64UrlEncode(randomBytes(8));
+}
+/**
+ * Encrypts a seed under a key.
+ * @param seed The seed to protect
+ * @param key An AES-GCM key
+ * @returns The nonce and ciphertext, base64url encoded
+ */
+async function seal(seed, key) {
+    const iv = randomBytes(IV_BYTES);
+    const ciphertext = await globalThis.crypto.subtle.encrypt({ name: 'AES-GCM', iv: iv }, key, seed);
+    return { iv: base64UrlEncode(iv), ciphertext: base64UrlEncode(new Uint8Array(ciphertext)) };
+}
+/**
+ * Decrypts a seed, turning the failure into something a UI can say out loud.
+ * @param wrap The wrap to open
+ * @param key The key it should be under
+ * @returns The seed
+ */
+async function open(wrap, key) {
+    try {
+        const plain = await globalThis.crypto.subtle.decrypt({ name: 'AES-GCM', iv: base64UrlDecode(wrap.iv) }, key, base64UrlDecode(wrap.ciphertext));
+        return new Uint8Array(plain);
+    }
+    catch {
+        // AES-GCM authenticates, so this is the wrong key rather than corruption.
+        throw protocolError('VAULT_UNLOCK_FAILED', 'That did not unlock the folder.', 'Check the passphrase, or use your recovery code instead.');
+    }
+}
+/**
+ * Stretches a passphrase into the key that wraps a seed.
+ * @param passphrase What the user typed
+ * @param salt Per-wrap salt
+ * @param iterations PBKDF2 rounds, read from the wrap so old ones stay openable
+ * @returns An AES-GCM key
+ */
+async function passphraseWrappingKey(passphrase, salt, iterations) {
+    const material = await globalThis.crypto.subtle.importKey('raw', utf8Encode(passphrase.normalize('NFKC')), { name: 'PBKDF2' }, false, ['deriveKey']);
+    return globalThis.crypto.subtle.deriveKey({ name: 'PBKDF2', hash: 'SHA-256', salt: salt, iterations }, material, { name: 'AES-GCM', length: 256 }, false, ['encrypt', 'decrypt']);
+}
+/**
+ * Wraps a seed under this device's key.
+ *
+ * The key is random and lives in this origin's storage; the passkey recorded
+ * alongside is the gate in front of it, not the source of it. See
+ * {@link module:device-key}.
+ *
+ * @param seed The account seed
+ * @param deviceKey The local key, from `createDeviceKey`
+ * @param meta Which origin this belongs to, and the passkey gating it
+ * @returns A wrap ready to append to the account file
+ */
+export async function wrapSeedWithDeviceKey(seed, deviceKey, meta) {
+    const sealed = await seal(seed, deviceKey.key);
+    return {
+        kind: 'device',
+        id: wrapId(),
+        label: meta.label ?? meta.rpId,
+        rpId: meta.rpId,
+        deviceKeyId: deviceKey.id,
+        ...(meta.credentialId ? { credentialId: meta.credentialId } : {}),
+        ...(meta.userHandle ? { userHandle: meta.userHandle } : {}),
+        addedAt: new Date().toISOString(),
+        // Nothing is stretched into this key, so there is no salt to record.
+        salt: '',
+        ...sealed,
+    };
+}
+/**
+ * Opens a device wrap.
+ * @param wrap The wrap to open
+ * @param deviceKey The local key it names
+ * @returns The seed
+ */
+export async function unwrapSeedWithDeviceKey(wrap, deviceKey) {
+    return open(wrap, deviceKey);
+}
+/**
+ * Wraps a seed under a passphrase — the portable way back in.
+ * @param seed The account seed
+ * @param passphrase What the user chose
+ * @param label What to call this wrap
+ * @returns A wrap ready to append to the account file
+ */
+export async function wrapSeedWithPassphrase(seed, passphrase, label = 'Passphrase') {
+    const salt = randomBytes(SALT_BYTES);
+    const sealed = await seal(seed, await passphraseWrappingKey(passphrase, salt, PASSPHRASE_ITERATIONS));
+    return {
+        kind: 'passphrase',
+        id: wrapId(),
+        label,
+        addedAt: new Date().toISOString(),
+        salt: base64UrlEncode(salt),
+        iterations: PASSPHRASE_ITERATIONS,
+        ...sealed,
+    };
+}
+/**
+ * Opens a passphrase wrap.
+ * @param wrap The wrap to open
+ * @param passphrase What the user typed
+ * @returns The seed
+ */
+export async function unwrapSeedWithPassphrase(wrap, passphrase) {
+    const key = await passphraseWrappingKey(passphrase, base64UrlDecode(wrap.salt), wrap.iterations);
+    return open(wrap, key);
+}
+/**
+ * The vault key as raw bytes.
+ *
+ * {@link deriveVaultKey} returns a key that cannot be exported, which is right
+ * for a page — it should not be able to leak what it was given. A node derives
+ * the account registry from the key, so it is handed the bytes directly
+ * rather than the protocol relaxing that for everyone.
+ *
+ * Identical material to `deriveVaultKey`: same input, same info, same length.
+ * If those ever drift, the registry and the folder would be sealed under two
+ * different keys.
+ *
+ * @param seed The account seed
+ * @returns 32 bytes, ready to import as AES-GCM
+ */
+export async function deriveVaultKeyBytes(seed) {
+    const material = await globalThis.crypto.subtle.importKey('raw', seed, { name: 'HKDF' }, false, ['deriveBits']);
+    const bits = await globalThis.crypto.subtle.deriveBits({
+        name: 'HKDF',
+        hash: 'SHA-256',
+        salt: new Uint8Array(0),
+        info: VAULT_KEY_INFO,
+    }, material, 256);
+    return new Uint8Array(bits);
+}
+/**
+ * Derives the key that encrypts a folder's contents at rest.
+ *
+ * Separate from the signing key, and from every wrapping key, so that handing
+ * one out never implies the others.
+ *
+ * @param seed The account seed
+ * @returns An AES-GCM key for space keys and space records
+ */
+export async function deriveVaultKey(seed) {
+    const material = await globalThis.crypto.subtle.importKey('raw', seed, { name: 'HKDF' }, false, ['deriveKey']);
+    return globalThis.crypto.subtle.deriveKey({
+        name: 'HKDF',
+        hash: 'SHA-256',
+        salt: new Uint8Array(0),
+        info: VAULT_KEY_INFO,
+    }, material, { name: 'AES-GCM', length: 256 }, false, ['encrypt', 'decrypt']);
+}
+/**
+ * The device wraps this origin could actually attempt.
+ *
+ * The key a wrap names lives in the storage of the origin that made it, so one
+ * from another app is not merely likely to fail — it is unreachable from here.
+ *
+ * @param vault The account file
+ * @param rpId This origin's relying-party id, usually its hostname
+ * @returns The device wraps belonging to this origin
+ */
+export function deviceWrapsFor(vault, rpId) {
+    return vault.wraps.filter((wrap) => wrap.kind === 'device' && wrap.rpId === rpId);
+}
+/** Whether a passphrase would get anyone in. */
+export function hasPassphraseWrap(vault) {
+    return vault.wraps.some((wrap) => wrap.kind === 'passphrase');
+}
+/**
+ * Adds a wrap, replacing any earlier one for the same passkey.
+ *
+ * Re-registering on an origin should leave one usable wrap rather than a pile of
+ * stale ones, and a wrap whose credential is gone is only clutter.
+ *
+ * @param vault The account file
+ * @param wrap The wrap to add
+ * @returns The updated account file
+ */
+export function withWrap(vault, wrap) {
+    // One device wrap per origin: re-adding the shortcut should replace it, not
+    // leave an older one pointing at a key nobody will use again.
+    const superseded = (existing) => existing.kind === 'device' && wrap.kind === 'device' && existing.rpId === wrap.rpId;
+    return { ...vault, wraps: [...vault.wraps.filter((existing) => !superseded(existing)), wrap] };
+}
+/**
+ * Removes a wrap by id.
+ *
+ * Removing the last one is allowed, and leaves the account in the state a new
+ * one starts in: openable by its code and nothing else. The wraps are
+ * shortcuts, not the keys to the building.
+ *
+ * @param vault The account file
+ * @param id The wrap to remove
+ * @returns The updated account file
+ */
+export function withoutWrap(vault, id) {
+    return { ...vault, wraps: vault.wraps.filter((wrap) => wrap.id !== id) };
+}
+//# sourceMappingURL=account-vault.js.map

package/dist/identity/account-vault.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-vault.js","sourceRoot":"","sources":["../../src/identity/account-vault.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACpF,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEnD,sCAAsC;AACtC,MAAM,QAAQ,GAAG,EAAE,CAAC;AACpB,MAAM,UAAU,GAAG,EAAE,CAAC;AAEtB;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,OAAO,CAAC;AAE7C,MAAM,cAAc,GAAG,UAAU,CAAC,oBAAoB,CAAC,CAAC;AA0DxD,uDAAuD;AACvD,SAAS,WAAW,CAAC,MAAc;IACjC,OAAO,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,oCAAoC;AACpC,SAAS,MAAM;IACb,OAAO,eAAe,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;AACzC,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,IAAI,CAAC,IAAgB,EAAE,GAAc;IAClD,MAAM,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACjC,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CACvD,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAkB,EAAE,EAC3C,GAAG,EACH,IAAoB,CACrB,CAAC;IACF,OAAO,EAAE,EAAE,EAAE,eAAe,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,eAAe,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;AAC9F,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,IAAI,CAAC,IAAc,EAAE,GAAc;IAChD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAClD,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,eAAe,CAAC,IAAI,CAAC,EAAE,CAAiB,EAAE,EACjE,GAAG,EACH,eAAe,CAAC,IAAI,CAAC,UAAU,CAAiB,CACjD,CAAC;QACF,OAAO,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,0EAA0E;QAC1E,MAAM,aAAa,CACjB,qBAAqB,EACrB,iCAAiC,EACjC,0DAA0D,CAC3D,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,qBAAqB,CAClC,UAAkB,EAClB,IAAgB,EAChB,UAAkB;IAElB,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CACvD,KAAK,EACL,UAAU,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,CAAiB,EACxD,EAAE,IAAI,EAAE,QAAQ,EAAE,EAClB,KAAK,EACL,CAAC,WAAW,CAAC,CACd,CAAC;IACF,OAAO,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CACvC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAoB,EAAE,UAAU,EAAE,EAC3E,QAAQ,EACR,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAChC,KAAK,EACL,CAAC,SAAS,EAAE,SAAS,CAAC,CACvB,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,IAAgB,EAChB,SAAyC,EACzC,IAAkF;IAElF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC;IAE/C,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,EAAE,EAAE,MAAM,EAAE;QACZ,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,IAAI;QAC9B,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,SAAS,CAAC,EAAE;QACzB,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACjC,qEAAqE;QACrE,IAAI,EAAE,EAAE;QACR,GAAG,MAAM;KACV,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,IAAgB,EAChB,SAAoB;IAEpB,OAAO,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAgB,EAChB,UAAkB,EAClB,QAAgB,YAAY;IAE5B,MAAM,IAAI,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,MAAM,qBAAqB,CAAC,UAAU,EAAE,IAAI,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAEtG,OAAO;QACL,IAAI,EAAE,YAAY;QAClB,EAAE,EAAE,MAAM,EAAE;QACZ,KAAK;QACL,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACjC,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC;QAC3B,UAAU,EAAE,qBAAqB;QACjC,GAAG,MAAM;KACV,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,IAAoB,EACpB,UAAkB;IAElB,MAAM,GAAG,GAAG,MAAM,qBAAqB,CAAC,UAAU,EAAE,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IACjG,OAAO,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AACzB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,IAAgB;IACxD,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CACvD,KAAK,EACL,IAAoB,EACpB,EAAE,IAAI,EAAE,MAAM,EAAE,EAChB,KAAK,EACL,CAAC,YAAY,CAAC,CACf,CAAC;IAEF,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CACpD;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,IAAI,UAAU,CAAC,CAAC,CAAiB;QACvC,IAAI,EAAE,cAA8B;KACrC,EACD,QAAQ,EACR,GAAG,CACJ,CAAC;IAEF,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAgB;IACnD,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CACvD,KAAK,EACL,IAAoB,EACpB,EAAE,IAAI,EAAE,MAAM,EAAE,EAChB,KAAK,EACL,CAAC,WAAW,CAAC,CACd,CAAC;IACF,OAAO,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CACvC;QACE,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,IAAI,UAAU,CAAC,CAAC,CAAiB;QACvC,IAAI,EAAE,cAA8B;KACrC,EACD,QAAQ,EACR,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAChC,KAAK,EACL,CAAC,SAAS,EAAE,SAAS,CAAC,CACvB,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,cAAc,CAAC,KAAmB,EAAE,IAAY;IAC9D,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,CACvB,CAAC,IAAI,EAAsB,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAC3E,CAAC;AACJ,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,iBAAiB,CAAC,KAAmB;IACnD,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;AAChE,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,QAAQ,CAAC,KAAmB,EAAE,IAAc;IAC1D,4EAA4E;IAC5E,8DAA8D;IAC9D,MAAM,UAAU,GAAG,CAAC,QAAkB,EAAW,EAAE,CACjD,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC;IAEtF,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC;AACjG,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,WAAW,CAAC,KAAmB,EAAE,EAAU;IACzD,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AAC3E,CAAC"}

package/dist/identity/agent-note.d.ts

@@ -0,0 +1,19 @@
+/**
+ * @module identity/agent-note
+ * A note that says its key is an agent's.
+ *
+ * An agent isn't an identity of its own: it writes for a person, under a note
+ * from their account, like any app. What sets it apart is one fact the account
+ * signs into that note — so every peer can tell a record was written "via
+ * agent", and can refuse what an agent must never do alone: change the space's
+ * collections, or who may do what. Those always need a person.
+ *
+ * The fact is the account's word, carried in a note it signed. A note without
+ * it is an ordinary app's; nothing about the key itself says "agent".
+ */
+import { type Fact } from './ucan.js';
+/** The fact an agent's note carries */
+export declare const AGENT_FACT: Fact;
+/** Whether a note (an encoded UCAN) was made out to an agent. False for anything unreadable. */
+export declare function isAgentNote(encoded: string | null | undefined): boolean;
+//# sourceMappingURL=agent-note.d.ts.map

package/dist/identity/agent-note.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-note.d.ts","sourceRoot":"","sources":["../../src/identity/agent-note.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAa,KAAK,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjD,uCAAuC;AACvC,eAAO,MAAM,UAAU,EAAE,IAAwC,CAAC;AAElE,gGAAgG;AAChG,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAQvE"}

package/dist/identity/agent-note.js

@@ -0,0 +1,29 @@
+/**
+ * @module identity/agent-note
+ * A note that says its key is an agent's.
+ *
+ * An agent isn't an identity of its own: it writes for a person, under a note
+ * from their account, like any app. What sets it apart is one fact the account
+ * signs into that note — so every peer can tell a record was written "via
+ * agent", and can refuse what an agent must never do alone: change the space's
+ * collections, or who may do what. Those always need a person.
+ *
+ * The fact is the account's word, carried in a note it signed. A note without
+ * it is an ordinary app's; nothing about the key itself says "agent".
+ */
+import { parseUCAN } from './ucan.js';
+/** The fact an agent's note carries */
+export const AGENT_FACT = Object.freeze({ weave: 'agent' });
+/** Whether a note (an encoded UCAN) was made out to an agent. False for anything unreadable. */
+export function isAgentNote(encoded) {
+    if (!encoded)
+        return false;
+    try {
+        const facts = parseUCAN(encoded).payload.fct;
+        return Array.isArray(facts) && facts.some((fact) => fact?.weave === AGENT_FACT.weave);
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=agent-note.js.map

package/dist/identity/agent-note.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-note.js","sourceRoot":"","sources":["../../src/identity/agent-note.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,SAAS,EAAa,MAAM,WAAW,CAAC;AAEjD,uCAAuC;AACvC,MAAM,CAAC,MAAM,UAAU,GAAS,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;AAElE,gGAAgG;AAChG,MAAM,UAAU,WAAW,CAAC,OAAkC;IAC5D,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;QAC7C,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,KAAK,KAAK,UAAU,CAAC,KAAK,CAAC,CAAC;IACxF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/identity/crypto-p256.d.ts

@@ -0,0 +1,7 @@
+import { CryptoProvider } from '../types.js';
+/**
+ * Creates a CryptoProvider using the Web Crypto API with ECDSA P-256.
+ * @returns {CryptoProvider} A crypto provider implementation for ECDSA P-256.
+ */
+export declare function createP256Provider(): CryptoProvider;
+//# sourceMappingURL=crypto-p256.d.ts.map

package/dist/identity/crypto-p256.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto-p256.d.ts","sourceRoot":"","sources":["../../src/identity/crypto-p256.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAuB,MAAM,aAAa,CAAC;AAqBlE;;;GAGG;AACH,wBAAgB,kBAAkB,IAAI,cAAc,CAmHnD"}

package/dist/identity/crypto-p256.js

@@ -0,0 +1,84 @@
+import { base64UrlEncode } from '../utils/encoding.js';
+import { p256 } from '@noble/curves/nist.js';
+/** 48 bytes: the 32-byte group order plus 16 more, so reducing mod n is unbiased */
+const P256_SEED_BYTES = 48;
+/** Domain separation for identity keys. Changing it changes every derived DID. */
+const P256_KEY_INFO = new TextEncoder().encode('weave/p256-identity-key/v1');
+/** HKDF-SHA256 with an empty salt: the seed is already uniformly random. */
+async function hkdf(ikm, info, length) {
+    const key = await globalThis.crypto.subtle.importKey('raw', ikm, 'HKDF', false, ['deriveBits']);
+    const bits = await globalThis.crypto.subtle.deriveBits({ name: 'HKDF', hash: 'SHA-256', salt: new Uint8Array(0), info: info }, key, length * 8);
+    return new Uint8Array(bits);
+}
+/**
+ * Creates a CryptoProvider using the Web Crypto API with ECDSA P-256.
+ * @returns {CryptoProvider} A crypto provider implementation for ECDSA P-256.
+ */
+export function createP256Provider() {
+    return Object.freeze({
+        algorithm: 'ECDSA-P256',
+        async generateKeyPair() {
+            const keyPair = await globalThis.crypto.subtle.generateKey({
+                name: 'ECDSA',
+                namedCurve: 'P-256'
+            }, 
+            // Not extractable: a script that gets into the page can sign with the
+            // key while it is there, but cannot carry it off and keep signing.
+            // The public half exports regardless.
+            false, ['sign', 'verify']);
+            return Object.freeze({
+                publicKey: keyPair.publicKey,
+                privateKey: keyPair.privateKey
+            });
+        },
+        async deriveKeyPairFromSeed(seed) {
+            // HKDF stretches the seed to the 48 bytes FIPS 186-5 (appendix A.2) asks
+            // for, and noble reduces them to a scalar in [1, n-1] with negligible bias.
+            // Web Crypto can sign with a scalar but cannot compute its public point,
+            // which is the one step noble supplies.
+            const expanded = await hkdf(seed, P256_KEY_INFO, P256_SEED_BYTES);
+            const secretKey = p256.utils.randomSecretKey(expanded);
+            const point = p256.getPublicKey(secretKey, false); // 0x04 ‖ x ‖ y
+            const x = base64UrlEncode(point.subarray(1, 33));
+            const y = base64UrlEncode(point.subarray(33, 65));
+            const d = base64UrlEncode(secretKey);
+            const algorithm = { name: 'ECDSA', namedCurve: 'P-256' };
+            const privateKey = await globalThis.crypto.subtle.importKey('jwk', { kty: 'EC', crv: 'P-256', x, y, d, ext: false, key_ops: ['sign'] }, algorithm, false, ['sign']);
+            const publicKey = await globalThis.crypto.subtle.importKey('jwk', { kty: 'EC', crv: 'P-256', x, y, ext: true, key_ops: ['verify'] }, algorithm, true, ['verify']);
+            return Object.freeze({ publicKey, privateKey });
+        },
+        async sign(privateKey, data) {
+            const signature = await globalThis.crypto.subtle.sign({
+                name: 'ECDSA',
+                hash: { name: 'SHA-256' }
+            }, privateKey, data);
+            return new Uint8Array(signature);
+        },
+        async verify(publicKey, signature, data) {
+            return await globalThis.crypto.subtle.verify({
+                name: 'ECDSA',
+                hash: { name: 'SHA-256' }
+            }, publicKey, signature, data);
+        },
+        /** The 33-byte compressed point — the form did:key specifies for P-256. */
+        async exportPublicKey(key) {
+            const raw = new Uint8Array(await globalThis.crypto.subtle.exportKey('raw', key));
+            return p256.Point.fromBytes(raw).toBytes(true);
+        },
+        /** Accepts a compressed or uncompressed point; Web Crypto only reliably imports the latter. */
+        async importPublicKey(bytes) {
+            const uncompressed = p256.Point.fromBytes(bytes).toBytes(false);
+            return await globalThis.crypto.subtle.importKey('raw', uncompressed, {
+                name: 'ECDSA',
+                namedCurve: 'P-256'
+            }, true, ['verify']);
+        },
+        async importPrivateKey(bytes) {
+            return await globalThis.crypto.subtle.importKey('pkcs8', bytes, {
+                name: 'ECDSA',
+                namedCurve: 'P-256'
+            }, false, ['sign']);
+        }
+    });
+}
+//# sourceMappingURL=crypto-p256.js.map

package/dist/identity/crypto-p256.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto-p256.js","sourceRoot":"","sources":["../../src/identity/crypto-p256.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAE7C,oFAAoF;AACpF,MAAM,eAAe,GAAG,EAAE,CAAC;AAE3B,kFAAkF;AAClF,MAAM,aAAa,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;AAE7E,4EAA4E;AAC5E,KAAK,UAAU,IAAI,CAAC,GAAe,EAAE,IAAgB,EAAE,MAAc;IACnE,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAmB,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC;IAChH,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CACpD,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAoB,EAAE,EACtF,GAAG,EACH,MAAM,GAAG,CAAC,CACX,CAAC;IACF,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,SAAS,EAAE,YAAY;QAEvB,KAAK,CAAC,eAAe;YACnB,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CACxD;gBACE,IAAI,EAAE,OAAO;gBACb,UAAU,EAAE,OAAO;aACpB;YACD,sEAAsE;YACtE,mEAAmE;YACnE,sCAAsC;YACtC,KAAK,EACL,CAAC,MAAM,EAAE,QAAQ,CAAC,CACnB,CAAC;YAEF,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,UAAU,EAAE,OAAO,CAAC,UAAU;aAC/B,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,qBAAqB,CAAC,IAAgB;YAC1C,yEAAyE;YACzE,4EAA4E;YAC5E,yEAAyE;YACzE,wCAAwC;YACxC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC;YAClE,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;YACvD,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,eAAe;YAElE,MAAM,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YACjD,MAAM,CAAC,GAAG,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YAClD,MAAM,CAAC,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;YAErC,MAAM,SAAS,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAW,CAAC;YAElE,MAAM,UAAU,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CACzD,KAAK,EACL,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,EACnE,SAAS,EACT,KAAK,EACL,CAAC,MAAM,CAAC,CACT,CAAC;YAEF,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CACxD,KAAK,EACL,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,QAAQ,CAAC,EAAE,EACjE,SAAS,EACT,IAAI,EACJ,CAAC,QAAQ,CAAC,CACX,CAAC;YAEF,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;QAClD,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,UAAqB,EAAE,IAAgB;YAChD,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CACnD;gBACE,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;aAC1B,EACD,UAAU,EACV,IAAoB,CACrB,CAAC;YACF,OAAO,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;QACnC,CAAC;QAED,KAAK,CAAC,MAAM,CAAC,SAAoB,EAAE,SAAqB,EAAE,IAAgB;YACxE,OAAO,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAC1C;gBACE,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE;aAC1B,EACD,SAAS,EACT,SAAyB,EACzB,IAAoB,CACrB,CAAC;QACJ,CAAC;QAED,2EAA2E;QAC3E,KAAK,CAAC,eAAe,CAAC,GAAc;YAClC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;YACjF,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACjD,CAAC;QAED,+FAA+F;QAC/F,KAAK,CAAC,eAAe,CAAC,KAAiB;YACrC,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAChE,OAAO,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAC7C,KAAK,EACL,YAA4B,EAC5B;gBACE,IAAI,EAAE,OAAO;gBACb,UAAU,EAAE,OAAO;aACpB,EACD,IAAI,EACJ,CAAC,QAAQ,CAAC,CACX,CAAC;QACJ,CAAC;QAED,KAAK,CAAC,gBAAgB,CAAC,KAAiB;YACtC,OAAO,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAC7C,OAAO,EACP,KAAqB,EACrB;gBACE,IAAI,EAAE,OAAO;gBACb,UAAU,EAAE,OAAO;aACpB,EACD,KAAK,EACL,CAAC,MAAM,CAAC,CACT,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/identity/device-key.d.ts

@@ -0,0 +1,60 @@
+/**
+ * @module device-key
+ * The key that unlocks an account on one device.
+ *
+ * A passkey can only hand back a secret through the PRF extension, and several
+ * widely used providers — Bitwarden among them — store passkeys without it. So
+ * the shortcut does not ask the passkey for key material at all. It keeps a
+ * random key here, and uses the passkey as the gate in front of it.
+ *
+ * ```
+ * random key, non-extractable, in this origin's storage
+ *   └─ wraps the account seed, which lives in the vault
+ * a passkey assertion decides whether we reach for it
+ * ```
+ *
+ * **Be clear about what that is.** The gate is enforced by this code, not by
+ * cryptography: anything that can reach this origin's storage can use the key
+ * without ever touching the passkey. What it does protect against is the case
+ * that motivates the vault in the first place — someone holding a copy of the
+ * folder, who has the wrapped seed and none of this.
+ *
+ * The key is generated non-extractable, so script can use it in place but
+ * cannot copy it out. Malware on the machine can decrypt; it cannot walk away
+ * with something that keeps working elsewhere.
+ */
+/** A local key, and the id a wrap records to find it again. */
+export interface DeviceKey {
+    readonly id: string;
+    readonly key: CryptoKey;
+}
+/**
+ * Makes a key for this device and remembers it.
+ *
+ * Non-extractable on purpose: a CryptoKey survives being stored and fetched
+ * from IndexedDB, and staying non-extractable the whole time means no code
+ * path — ours or anyone's — can turn it back into bytes.
+ *
+ * @param dbName Overridable for tests
+ * @returns The key, and the id a wrap should record
+ */
+export declare function createDeviceKey(dbName?: string): Promise<DeviceKey>;
+/**
+ * Finds a device key by id.
+ *
+ * Absent is a normal answer, not a failure: it means this wrap was made in
+ * another browser, or storage has been cleared since. The account is still
+ * openable by its password.
+ *
+ * @param id The id recorded in the wrap
+ * @param dbName Overridable for tests
+ * @returns The key, or null when this device does not have it
+ */
+export declare function getDeviceKey(id: string, dbName?: string): Promise<CryptoKey | null>;
+/**
+ * Forgets a device key, which makes its wrap permanently unopenable.
+ * @param id The id recorded in the wrap
+ * @param dbName Overridable for tests
+ */
+export declare function deleteDeviceKey(id: string, dbName?: string): Promise<void>;
+//# sourceMappingURL=device-key.d.ts.map

package/dist/identity/device-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-key.d.ts","sourceRoot":"","sources":["../../src/identity/device-key.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAOH,+DAA+D;AAC/D,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC;CACzB;AAiCD;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CAAC,MAAM,GAAE,MAAgB,GAAG,OAAO,CAAC,SAAS,CAAC,CAWlF;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,YAAY,CAChC,EAAE,EAAE,MAAM,EACV,MAAM,GAAE,MAAgB,GACvB,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAM3B;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,GAAE,MAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAMzF"}

package/dist/identity/device-key.js

@@ -0,0 +1,103 @@
+/**
+ * @module device-key
+ * The key that unlocks an account on one device.
+ *
+ * A passkey can only hand back a secret through the PRF extension, and several
+ * widely used providers — Bitwarden among them — store passkeys without it. So
+ * the shortcut does not ask the passkey for key material at all. It keeps a
+ * random key here, and uses the passkey as the gate in front of it.
+ *
+ * ```
+ * random key, non-extractable, in this origin's storage
+ *   └─ wraps the account seed, which lives in the vault
+ * a passkey assertion decides whether we reach for it
+ * ```
+ *
+ * **Be clear about what that is.** The gate is enforced by this code, not by
+ * cryptography: anything that can reach this origin's storage can use the key
+ * without ever touching the passkey. What it does protect against is the case
+ * that motivates the vault in the first place — someone holding a copy of the
+ * folder, who has the wrapped seed and none of this.
+ *
+ * The key is generated non-extractable, so script can use it in place but
+ * cannot copy it out. Malware on the machine can decrypt; it cannot walk away
+ * with something that keeps working elsewhere.
+ */
+import { base64UrlEncode } from '../utils/encoding.js';
+const DB_NAME = 'weave-device-keys';
+const STORE = 'keys';
+function openDb(dbName) {
+    return new Promise((resolve, reject) => {
+        const request = globalThis.indexedDB.open(dbName, 1);
+        request.onupgradeneeded = () => {
+            if (!request.result.objectStoreNames.contains(STORE)) {
+                request.result.createObjectStore(STORE);
+            }
+        };
+        request.onsuccess = () => resolve(request.result);
+        request.onerror = () => reject(request.error);
+    });
+}
+async function withStore(dbName, mode, run) {
+    const db = await openDb(dbName);
+    try {
+        return await new Promise((resolve, reject) => {
+            const tx = db.transaction(STORE, mode);
+            const request = run(tx.objectStore(STORE));
+            request.onsuccess = () => resolve(request.result);
+            request.onerror = () => reject(request.error);
+        });
+    }
+    finally {
+        db.close();
+    }
+}
+/**
+ * Makes a key for this device and remembers it.
+ *
+ * Non-extractable on purpose: a CryptoKey survives being stored and fetched
+ * from IndexedDB, and staying non-extractable the whole time means no code
+ * path — ours or anyone's — can turn it back into bytes.
+ *
+ * @param dbName Overridable for tests
+ * @returns The key, and the id a wrap should record
+ */
+export async function createDeviceKey(dbName = DB_NAME) {
+    const key = await globalThis.crypto.subtle.generateKey({ name: 'AES-GCM', length: 256 }, false, ['encrypt', 'decrypt']);
+    const id = base64UrlEncode(globalThis.crypto.getRandomValues(new Uint8Array(12)));
+    await withStore(dbName, 'readwrite', (store) => store.put(key, id));
+    return { id, key };
+}
+/**
+ * Finds a device key by id.
+ *
+ * Absent is a normal answer, not a failure: it means this wrap was made in
+ * another browser, or storage has been cleared since. The account is still
+ * openable by its password.
+ *
+ * @param id The id recorded in the wrap
+ * @param dbName Overridable for tests
+ * @returns The key, or null when this device does not have it
+ */
+export async function getDeviceKey(id, dbName = DB_NAME) {
+    try {
+        return (await withStore(dbName, 'readonly', (store) => store.get(id))) ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Forgets a device key, which makes its wrap permanently unopenable.
+ * @param id The id recorded in the wrap
+ * @param dbName Overridable for tests
+ */
+export async function deleteDeviceKey(id, dbName = DB_NAME) {
+    try {
+        await withStore(dbName, 'readwrite', (store) => store.delete(id));
+    }
+    catch {
+        // Already gone.
+    }
+}
+//# sourceMappingURL=device-key.js.map

package/dist/identity/device-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"device-key.js","sourceRoot":"","sources":["../../src/identity/device-key.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEvD,MAAM,OAAO,GAAG,mBAAmB,CAAC;AACpC,MAAM,KAAK,GAAG,MAAM,CAAC;AAQrB,SAAS,MAAM,CAAC,MAAc;IAC5B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACrD,OAAO,CAAC,eAAe,GAAG,GAAG,EAAE;YAC7B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACrD,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAC1C,CAAC;QACH,CAAC,CAAC;QACF,OAAO,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAClD,OAAO,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,MAAc,EACd,IAAwB,EACxB,GAA0C;IAE1C,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC9C,MAAM,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YACvC,MAAM,OAAO,GAAG,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3C,OAAO,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAW,CAAC,CAAC;YACvD,OAAO,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,EAAE,CAAC,KAAK,EAAE,CAAC;IACb,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAAiB,OAAO;IAC5D,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,WAAW,CACpD,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAChC,KAAK,EACL,CAAC,SAAS,EAAE,SAAS,CAAC,CACvB,CAAC;IAEF,MAAM,EAAE,GAAG,eAAe,CAAC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAClF,MAAM,SAAS,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;IAEpE,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;AACrB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,EAAU,EACV,SAAiB,OAAO;IAExB,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,SAAS,CAAwB,MAAM,EAAE,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACxG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EAAU,EAAE,SAAiB,OAAO;IACxE,IAAI,CAAC;QACH,MAAM,SAAS,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,gBAAgB;IAClB,CAAC;AACH,CAAC"}

package/dist/identity/did.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Multicodec `p256-pub` (0x1200) as a varint. Per the did:key spec the key that
+ * follows is the 33-byte compressed point, which is why P-256 DIDs start `zDn`.
+ */
+export declare const P256_MULTICODEC: Uint8Array<ArrayBuffer>;
+/**
+ * Converts a public key to a did:key string.
+ * @param {Uint8Array} publicKeyBytes The public key bytes.
+ * @param {Uint8Array} multicodecPrefix The multicodec prefix for the key type.
+ * @returns {string} The formatted did:key string.
+ */
+export declare function publicKeyToDid(publicKeyBytes: Uint8Array, multicodecPrefix: Uint8Array): string;
+/**
+ * Parses a did:key string into its public key and multicodec prefix.
+ * @param {string} did The did:key string.
+ * @returns {{ publicKeyBytes: Uint8Array; multicodecPrefix: Uint8Array }} The parsed components.
+ */
+export declare function didToPublicKey(did: string): {
+    publicKeyBytes: Uint8Array;
+    multicodecPrefix: Uint8Array;
+};
+//# sourceMappingURL=did.d.ts.map

package/dist/identity/did.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"did.d.ts","sourceRoot":"","sources":["../../src/identity/did.ts"],"names":[],"mappings":"AAGA;;;GAGG;AACH,eAAO,MAAM,eAAe,yBAA+B,CAAC;AAE5D;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,cAAc,EAAE,UAAU,EAAE,gBAAgB,EAAE,UAAU,GAAG,MAAM,CAG/F;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG;IAAE,cAAc,EAAE,UAAU,CAAC;IAAC,gBAAgB,EAAE,UAAU,CAAA;CAAE,CAiBxG"}