@yielded/auth 0.1.0-beta.1

package/dist/testing/crypto.mjs

@@ -0,0 +1,41 @@
+import { Crypto, Effect, Layer } from "effect";
+//#region src/testing/crypto.ts
+/**
+* Seeded, reproducible `Crypto.Crypto` for tests. The digest is deterministic
+* and collision-poor but NOT cryptographic; never use this layer outside
+* tests.
+*/
+const layerCryptoDeterministic = (seed = 1) => Layer.sync(Crypto.Crypto)(() => {
+	let state = seed >>> 0;
+	const next = () => {
+		state = state + 1831565813 | 0;
+		let t = Math.imul(state ^ state >>> 15, 1 | state);
+		t = t + Math.imul(t ^ t >>> 7, 61 | t) ^ t;
+		return (t ^ t >>> 14) >>> 0;
+	};
+	return Crypto.make({
+		randomBytes: (size) => {
+			const bytes = new Uint8Array(size);
+			for (let index = 0; index < size; index++) bytes[index] = next() & 255;
+			return bytes;
+		},
+		digest: (algorithm, data) => Effect.sync(() => fnvDigest(algorithm, data))
+	});
+});
+const fnvDigest = (algorithm, data) => {
+	const output = /* @__PURE__ */ new Uint8Array(32);
+	for (let word = 0; word < 8; word++) {
+		let hash = (2166136261 ^ Math.imul(word + 1, 2654435761)) >>> 0;
+		for (let index = 0; index < algorithm.length; index++) hash = Math.imul(hash ^ algorithm.charCodeAt(index), 16777619) >>> 0;
+		for (let index = 0; index < data.length; index++) hash = Math.imul(hash ^ (data[index] ?? 0), 16777619) >>> 0;
+		output[word * 4] = hash & 255;
+		output[word * 4 + 1] = hash >>> 8 & 255;
+		output[word * 4 + 2] = hash >>> 16 & 255;
+		output[word * 4 + 3] = hash >>> 24 & 255;
+	}
+	return output;
+};
+//#endregion
+export { layerCryptoDeterministic };
+
+//# sourceMappingURL=crypto.mjs.map

package/dist/testing/crypto.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.mjs","names":[],"sources":["../../src/testing/crypto.ts"],"sourcesContent":["import { Crypto, Effect, Layer } from \"effect\";\n\n/**\n * Seeded, reproducible `Crypto.Crypto` for tests. The digest is deterministic\n * and collision-poor but NOT cryptographic; never use this layer outside\n * tests.\n */\nexport const layerCryptoDeterministic = (seed = 1): Layer.Layer<Crypto.Crypto> =>\n  Layer.sync(Crypto.Crypto)(() => {\n    let state = seed >>> 0;\n\n    // mulberry32\n    const next = () => {\n      state = (state + 0x6d2b79f5) | 0;\n      let t = Math.imul(state ^ (state >>> 15), 1 | state);\n\n      t = (t + Math.imul(t ^ (t >>> 7), 61 | t)) ^ t;\n\n      return (t ^ (t >>> 14)) >>> 0;\n    };\n\n    return Crypto.make({\n      randomBytes: (size) => {\n        const bytes = new Uint8Array(size);\n\n        for (let index = 0; index < size; index++) {\n          bytes[index] = next() & 0xff;\n        }\n\n        return bytes;\n      },\n      digest: (algorithm, data) => Effect.sync(() => fnvDigest(algorithm, data)),\n    });\n  });\n\nconst fnvDigest = (algorithm: string, data: Uint8Array): Uint8Array => {\n  const output = new Uint8Array(32);\n\n  for (let word = 0; word < 8; word++) {\n    let hash = (0x811c9dc5 ^ Math.imul(word + 1, 0x9e3779b1)) >>> 0;\n\n    for (let index = 0; index < algorithm.length; index++) {\n      hash = Math.imul(hash ^ algorithm.charCodeAt(index), 0x01000193) >>> 0;\n    }\n    for (let index = 0; index < data.length; index++) {\n      hash = Math.imul(hash ^ (data[index] ?? 0), 0x01000193) >>> 0;\n    }\n    output[word * 4] = hash & 0xff;\n    output[word * 4 + 1] = (hash >>> 8) & 0xff;\n    output[word * 4 + 2] = (hash >>> 16) & 0xff;\n    output[word * 4 + 3] = (hash >>> 24) & 0xff;\n  }\n\n  return output;\n};\n"],"mappings":";;;;;;;AAOA,MAAa,4BAA4B,OAAO,MAC9C,MAAM,KAAK,OAAO,MAAM,CAAC,OAAO;CAC9B,IAAI,QAAQ,SAAS;CAGrB,MAAM,aAAa;EACjB,QAAS,QAAQ,aAAc;EAC/B,IAAI,IAAI,KAAK,KAAK,QAAS,UAAU,IAAK,IAAI,KAAK;EAEnD,IAAK,IAAI,KAAK,KAAK,IAAK,MAAM,GAAI,KAAK,CAAC,IAAK;EAE7C,QAAQ,IAAK,MAAM,QAAS;CAC9B;CAEA,OAAO,OAAO,KAAK;EACjB,cAAc,SAAS;GACrB,MAAM,QAAQ,IAAI,WAAW,IAAI;GAEjC,KAAK,IAAI,QAAQ,GAAG,QAAQ,MAAM,SAChC,MAAM,SAAS,KAAK,IAAI;GAG1B,OAAO;EACT;EACA,SAAS,WAAW,SAAS,OAAO,WAAW,UAAU,WAAW,IAAI,CAAC;CAC3E,CAAC;AACH,CAAC;AAEH,MAAM,aAAa,WAAmB,SAAiC;CACrE,MAAM,yBAAS,IAAI,WAAW,EAAE;CAEhC,KAAK,IAAI,OAAO,GAAG,OAAO,GAAG,QAAQ;EACnC,IAAI,QAAQ,aAAa,KAAK,KAAK,OAAO,GAAG,UAAU,OAAO;EAE9D,KAAK,IAAI,QAAQ,GAAG,QAAQ,UAAU,QAAQ,SAC5C,OAAO,KAAK,KAAK,OAAO,UAAU,WAAW,KAAK,GAAG,QAAU,MAAM;EAEvE,KAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,QAAQ,SACvC,OAAO,KAAK,KAAK,QAAQ,KAAK,UAAU,IAAI,QAAU,MAAM;EAE9D,OAAO,OAAO,KAAK,OAAO;EAC1B,OAAO,OAAO,IAAI,KAAM,SAAS,IAAK;EACtC,OAAO,OAAO,IAAI,KAAM,SAAS,KAAM;EACvC,OAAO,OAAO,IAAI,KAAM,SAAS,KAAM;CACzC;CAEA,OAAO;AACT"}

package/dist/testing/keyring.d.mts

@@ -0,0 +1,9 @@
+import { AuthKeyring } from "../AuthTokenCodec.mjs";
+import { Layer } from "effect";
+//#region src/testing/keyring.d.ts
+declare const testKeyId: string & import("effect/Brand").Brand<"effect-auth/KeyId">;
+/** Static single-key keyring for tests; the secret is intentionally well known. */
+declare const layerKeyringTest: Layer.Layer<AuthKeyring, never, never>;
+//#endregion
+export { layerKeyringTest, testKeyId };
+//# sourceMappingURL=keyring.d.mts.map

package/dist/testing/keyring.mjs

@@ -0,0 +1,17 @@
+import { KeyId } from "../Schema.mjs";
+import { AuthKeyring } from "../AuthTokenCodec.mjs";
+import { Layer, Redacted, Schema } from "effect";
+//#region src/testing/keyring.ts
+const testKeyId = Schema.decodeSync(KeyId)("test-key-1");
+/** Static single-key keyring for tests; the secret is intentionally well known. */
+const layerKeyringTest = Layer.succeed(AuthKeyring)({
+	activeKeyId: testKeyId,
+	keys: [{
+		keyId: testKeyId,
+		secret: Redacted.make("effect-auth-test-secret-0123456789abcdef0123456789abcdef")
+	}]
+});
+//#endregion
+export { layerKeyringTest, testKeyId };
+
+//# sourceMappingURL=keyring.mjs.map

package/dist/testing/keyring.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyring.mjs","names":[],"sources":["../../src/testing/keyring.ts"],"sourcesContent":["import { Layer, Redacted, Schema } from \"effect\";\n\nimport { AuthKeyring } from \"../AuthTokenCodec\";\nimport { KeyId } from \"../Schema\";\n\nexport const testKeyId = Schema.decodeSync(KeyId)(\"test-key-1\");\n\n/** Static single-key keyring for tests; the secret is intentionally well known. */\nexport const layerKeyringTest = Layer.succeed(AuthKeyring)({\n  activeKeyId: testKeyId,\n  keys: [\n    {\n      keyId: testKeyId,\n      secret: Redacted.make(\"effect-auth-test-secret-0123456789abcdef0123456789abcdef\"),\n    },\n  ],\n});\n"],"mappings":";;;;AAKA,MAAa,YAAY,OAAO,WAAW,KAAK,CAAC,CAAC,YAAY;;AAG9D,MAAa,mBAAmB,MAAM,QAAQ,WAAW,CAAC,CAAC;CACzD,aAAa;CACb,MAAM,CACJ;EACE,OAAO;EACP,QAAQ,SAAS,KAAK,0DAA0D;CAClF,CACF;AACF,CAAC"}

package/dist/totp/TotpActionEvidence.d.mts

@@ -0,0 +1,18 @@
+import { AuthInvocation } from "../operations/context.mjs";
+import { AuthenticationEvidence } from "../sessions/models.mjs";
+import { TotpActionChallenge } from "./models.mjs";
+import { TotpActionRequired, TotpUnavailable } from "./errors.mjs";
+import { Context, Effect, Redacted } from "effect";
+//#region src/totp/TotpActionEvidence.d.ts
+declare const TotpActionEvidence_base: Context.ServiceClass<TotpActionEvidence, "effect-auth/TotpActionEvidence", {
+  readonly verify: (input: {
+    readonly invocation: AuthInvocation;
+    readonly challenge: TotpActionChallenge;
+    readonly proof?: Redacted.Redacted<string>;
+  }) => Effect.Effect<AuthenticationEvidence, TotpActionRequired | TotpUnavailable>;
+}>;
+/** Fresh independent action proof, bound to the exact command. No weaker default exists. */
+declare class TotpActionEvidence extends TotpActionEvidence_base {}
+//#endregion
+export { TotpActionEvidence };
+//# sourceMappingURL=TotpActionEvidence.d.mts.map

package/dist/totp/TotpActionEvidence.mjs

@@ -0,0 +1,8 @@
+import { Context } from "effect";
+//#region src/totp/TotpActionEvidence.ts
+/** Fresh independent action proof, bound to the exact command. No weaker default exists. */
+var TotpActionEvidence = class extends Context.Service()("effect-auth/TotpActionEvidence") {};
+//#endregion
+export { TotpActionEvidence };
+
+//# sourceMappingURL=TotpActionEvidence.mjs.map

package/dist/totp/TotpActionEvidence.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"TotpActionEvidence.mjs","names":[],"sources":["../../src/totp/TotpActionEvidence.ts"],"sourcesContent":["import { Context, type Effect, type Redacted } from \"effect\";\n\nimport type { AuthInvocation } from \"../operations/context\";\nimport type { AuthenticationEvidence } from \"../sessions/models\";\nimport type { TotpActionRequired, TotpUnavailable } from \"./errors\";\nimport type { TotpActionChallenge } from \"./models\";\n\n/** Fresh independent action proof, bound to the exact command. No weaker default exists. */\nexport class TotpActionEvidence extends Context.Service<\n  TotpActionEvidence,\n  {\n    readonly verify: (input: {\n      readonly invocation: AuthInvocation;\n      readonly challenge: TotpActionChallenge;\n      readonly proof?: Redacted.Redacted<string>;\n    }) => Effect.Effect<AuthenticationEvidence, TotpActionRequired | TotpUnavailable>;\n  }\n>()(\"effect-auth/TotpActionEvidence\") {}\n"],"mappings":";;;AAQA,IAAa,qBAAb,cAAwC,QAAQ,QAS9C,CAAC,CAAC,gCAAgC,CAAC,CAAC,CAAC"}

package/dist/totp/TotpPersistence.d.mts

@@ -0,0 +1,19 @@
+import { SubjectId } from "../Schema.mjs";
+import { CommitJournal, PreparedCommit } from "../hooks/commit.mjs";
+import { TotpDecision, TotpMutation, TotpSnapshot } from "./models.mjs";
+import { TotpUnavailable } from "./errors.mjs";
+import { Context, Effect } from "effect";
+//#region src/totp/TotpPersistence.d.ts
+type PrepareTotpCommit<A> = (value: TotpDecision, journal: CommitJournal) => PreparedCommit<A>;
+declare const TotpPersistence_base: Context.ServiceClass<TotpPersistence, "effect-auth/TotpPersistence", {
+  readonly snapshot: (input: {
+    readonly moduleId: string;
+    readonly subjectId: SubjectId;
+  }) => Effect.Effect<TotpSnapshot | undefined, TotpUnavailable>;
+  readonly mutate: <A>(input: TotpMutation, prepare: PrepareTotpCommit<A>) => Effect.Effect<PreparedCommit<A>, TotpUnavailable>;
+}>;
+/** Owns subject policy/revision, factor state and digest consumption in one native commit. */
+declare class TotpPersistence extends TotpPersistence_base {}
+//#endregion
+export { PrepareTotpCommit, TotpPersistence };
+//# sourceMappingURL=TotpPersistence.d.mts.map

package/dist/totp/TotpPersistence.mjs

@@ -0,0 +1,8 @@
+import { Context } from "effect";
+//#region src/totp/TotpPersistence.ts
+/** Owns subject policy/revision, factor state and digest consumption in one native commit. */
+var TotpPersistence = class extends Context.Service()("effect-auth/TotpPersistence") {};
+//#endregion
+export { TotpPersistence };
+
+//# sourceMappingURL=TotpPersistence.mjs.map

package/dist/totp/TotpPersistence.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"TotpPersistence.mjs","names":[],"sources":["../../src/totp/TotpPersistence.ts"],"sourcesContent":["import { Context, type Effect } from \"effect\";\n\nimport type { CommitJournal, PreparedCommit } from \"../hooks/commit\";\nimport type { SubjectId } from \"../Schema\";\nimport type { TotpUnavailable } from \"./errors\";\nimport type { TotpDecision, TotpMutation, TotpSnapshot } from \"./models\";\n\nexport type PrepareTotpCommit<A> = (\n  value: TotpDecision,\n  journal: CommitJournal,\n) => PreparedCommit<A>;\n\n/** Owns subject policy/revision, factor state and digest consumption in one native commit. */\nexport class TotpPersistence extends Context.Service<\n  TotpPersistence,\n  {\n    readonly snapshot: (input: {\n      readonly moduleId: string;\n      readonly subjectId: SubjectId;\n    }) => Effect.Effect<TotpSnapshot | undefined, TotpUnavailable>;\n    readonly mutate: <A>(\n      input: TotpMutation,\n      prepare: PrepareTotpCommit<A>,\n    ) => Effect.Effect<PreparedCommit<A>, TotpUnavailable>;\n  }\n>()(\"effect-auth/TotpPersistence\") {}\n"],"mappings":";;;AAaA,IAAa,kBAAb,cAAqC,QAAQ,QAY3C,CAAC,CAAC,6BAA6B,CAAC,CAAC,CAAC"}

package/dist/totp/TotpSecretKeys.d.mts

@@ -0,0 +1,15 @@
+import { TotpUnavailable } from "./errors.mjs";
+import { Context, Effect, Redacted } from "effect";
+//#region src/totp/TotpSecretKeys.d.ts
+declare const TotpSecretKeys_base: Context.ServiceClass<TotpSecretKeys, "effect-auth/TotpSecretKeys", {
+  readonly current: Effect.Effect<{
+    readonly keyId: string;
+    readonly key: Redacted.Redacted<Uint8Array>;
+  }, TotpUnavailable>;
+  readonly get: (keyId: string) => Effect.Effect<Redacted.Redacted<Uint8Array>, TotpUnavailable>;
+}>;
+/** Consumer-owned AES-256 keys. Retain old key IDs until stored envelopes are replaced. */
+declare class TotpSecretKeys extends TotpSecretKeys_base {}
+//#endregion
+export { TotpSecretKeys };
+//# sourceMappingURL=TotpSecretKeys.d.mts.map

package/dist/totp/TotpSecretKeys.mjs

@@ -0,0 +1,8 @@
+import { Context } from "effect";
+//#region src/totp/TotpSecretKeys.ts
+/** Consumer-owned AES-256 keys. Retain old key IDs until stored envelopes are replaced. */
+var TotpSecretKeys = class extends Context.Service()("effect-auth/TotpSecretKeys") {};
+//#endregion
+export { TotpSecretKeys };
+
+//# sourceMappingURL=TotpSecretKeys.mjs.map

package/dist/totp/TotpSecretKeys.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"TotpSecretKeys.mjs","names":[],"sources":["../../src/totp/TotpSecretKeys.ts"],"sourcesContent":["import { Context, type Effect, type Redacted } from \"effect\";\n\nimport type { TotpUnavailable } from \"./errors\";\n\n/** Consumer-owned AES-256 keys. Retain old key IDs until stored envelopes are replaced. */\nexport class TotpSecretKeys extends Context.Service<\n  TotpSecretKeys,\n  {\n    readonly current: Effect.Effect<\n      { readonly keyId: string; readonly key: Redacted.Redacted<Uint8Array> },\n      TotpUnavailable\n    >;\n    readonly get: (keyId: string) => Effect.Effect<Redacted.Redacted<Uint8Array>, TotpUnavailable>;\n  }\n>()(\"effect-auth/TotpSecretKeys\") {}\n"],"mappings":";;;AAKA,IAAa,iBAAb,cAAoC,QAAQ,QAS1C,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC"}

package/dist/totp/crypto.mjs

@@ -0,0 +1,96 @@
+import { TokenDigest } from "../Schema.mjs";
+import { TotpUnavailable } from "./errors.mjs";
+import { TotpSecretBinding, TotpSecretEnvelope } from "./models.mjs";
+import { TotpSecretKeys } from "./TotpSecretKeys.mjs";
+import { Effect, Encoding, Redacted, Schema } from "effect";
+import { sha256 } from "@noble/hashes/sha2.js";
+import { randomBytes } from "@noble/hashes/utils.js";
+import { gcm } from "@noble/ciphers/aes.js";
+import { equalBytes } from "@noble/ciphers/utils.js";
+import { hmac } from "@noble/hashes/hmac.js";
+import { sha1 } from "@noble/hashes/legacy.js";
+//#region src/totp/crypto.ts
+const encoder = new TextEncoder();
+const bindingCodec = Schema.fromJsonString(TotpSecretBinding);
+const randomId = () => Encoding.encodeBase64Url(randomBytes(32));
+const digest = (value) => TokenDigest.make(Encoding.encodeBase64Url(sha256(encoder.encode(value))));
+const recoveryDigest = (moduleId, subjectId, value) => digest(`effect-auth/totp/recovery/v1/${moduleId.length}:${moduleId}/${subjectId.length}:${subjectId}/${value}`);
+const base32 = (bytes) => {
+	const alphabet = "ABCDEFGHIJKLMNOPQRSTUVWXYZ234567";
+	let bits = 0, value = 0, output = "";
+	for (const byte of bytes) {
+		value = value << 8 | byte;
+		bits += 8;
+		while (bits >= 5) {
+			bits -= 5;
+			output += alphabet[value >>> bits & 31];
+		}
+	}
+	if (bits > 0) output += alphabet[value << 5 - bits & 31];
+	return output;
+};
+/** RFC 6238 counter uses big endian unsigned 64 bits and six displayed digits. */
+const codeAt = (secret, step, digits = 6) => {
+	const counter = /* @__PURE__ */ new Uint8Array(8);
+	new DataView(counter.buffer).setBigUint64(0, BigInt(step), false);
+	const mac = hmac(sha1, secret, counter), offset = mac[mac.length - 1] & 15;
+	const binary = (mac[offset] & 127) << 24 | mac[offset + 1] << 16 | mac[offset + 2] << 8 | mac[offset + 3];
+	return String(binary % 10 ** digits).padStart(digits, "0");
+};
+const matchCode = (secret, code, nowMillis, skew) => {
+	const current = Math.floor(nowMillis / 3e4);
+	let matched = null;
+	for (let delta = -skew; delta <= skew; delta++) {
+		const step = current + delta;
+		if (step >= 0 && equalBytes(encoder.encode(codeAt(secret, step)), encoder.encode(code))) matched = step;
+	}
+	return matched;
+};
+const newRecoveryCodes = (moduleId, subjectId) => {
+	const codes = Array.from({ length: 10 }, () => {
+		const hex = Array.from(randomBytes(16), (byte) => byte.toString(16).padStart(2, "0")).join("").toUpperCase();
+		return `rc1-${hex.slice(0, 8)}-${hex.slice(8, 16)}-${hex.slice(16, 24)}-${hex.slice(24, 32)}`;
+	});
+	return {
+		codes,
+		digests: codes.map((code) => recoveryDigest(moduleId, subjectId, code))
+	};
+};
+const fail = () => TotpUnavailable.make({});
+const encryptSecret = Effect.fn("Totp.encryptSecret")(function* (binding, secret) {
+	const selected = yield* (yield* TotpSecretKeys).current;
+	return yield* Effect.try({
+		try: () => {
+			const key = Redacted.value(selected.key);
+			if (key.length !== 32 || secret.length !== 20) throw fail();
+			const nonce = randomBytes(12), aad = encoder.encode(Schema.encodeSync(bindingCodec)(binding));
+			return TotpSecretEnvelope.make({
+				keyId: selected.keyId,
+				revision: binding.revision,
+				nonce: Encoding.encodeBase64Url(nonce),
+				ciphertext: Encoding.encodeBase64Url(gcm(key, nonce, aad).encrypt(secret))
+			});
+		},
+		catch: fail
+	});
+});
+const decryptSecret = Effect.fn("Totp.decryptSecret")(function* (binding, envelope) {
+	const wrapped = yield* (yield* TotpSecretKeys).get(envelope.keyId);
+	const nonce = yield* Effect.fromResult(Encoding.decodeBase64Url(envelope.nonce)).pipe(Effect.mapError(fail));
+	const ciphertext = yield* Effect.fromResult(Encoding.decodeBase64Url(envelope.ciphertext)).pipe(Effect.mapError(fail));
+	return yield* Effect.try({
+		try: () => {
+			const key = Redacted.value(wrapped);
+			if (key.length !== 32 || envelope.revision !== binding.revision) throw fail();
+			const secret = gcm(key, nonce, encoder.encode(Schema.encodeSync(bindingCodec)(binding))).decrypt(ciphertext);
+			if (secret.length !== 20) throw fail();
+			return secret;
+		},
+		catch: fail
+	});
+});
+const generateSecret = () => randomBytes(20);
+//#endregion
+export { base32, codeAt, decryptSecret, digest, encryptSecret, generateSecret, matchCode, newRecoveryCodes, randomId, recoveryDigest };
+
+//# sourceMappingURL=crypto.mjs.map

package/dist/totp/crypto.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"crypto.mjs","names":[],"sources":["../../src/totp/crypto.ts"],"sourcesContent":["// oxlint-disable-next-line import/extensions -- Noble public ESM entrypoint.\nimport { gcm } from \"@noble/ciphers/aes.js\";\n// oxlint-disable-next-line import/extensions -- Noble constant-time comparison.\nimport { equalBytes } from \"@noble/ciphers/utils.js\";\n// oxlint-disable-next-line import/extensions -- Noble public ESM entrypoint.\nimport { hmac } from \"@noble/hashes/hmac.js\";\n// oxlint-disable-next-line import/extensions -- RFC 6238 interoperable SHA-1 HMAC, not password hashing.\nimport { sha1 } from \"@noble/hashes/legacy.js\";\n// oxlint-disable-next-line import/extensions -- Noble public ESM entrypoint.\nimport { sha256 } from \"@noble/hashes/sha2.js\";\n// oxlint-disable-next-line import/extensions -- Constant-time comparison and secure entropy.\nimport { randomBytes } from \"@noble/hashes/utils.js\";\nimport { Effect, Encoding, Redacted, Schema } from \"effect\";\n\nimport { TokenDigest } from \"../Schema\";\nimport { TotpUnavailable } from \"./errors\";\nimport { TotpSecretBinding, TotpSecretEnvelope } from \"./models\";\nimport { TotpSecretKeys } from \"./TotpSecretKeys\";\nconst encoder = new TextEncoder();\nconst bindingCodec = Schema.fromJsonString(TotpSecretBinding);\n\nexport const randomId = () => Encoding.encodeBase64Url(randomBytes(32));\n\nexport const digest = (value: string) =>\n  TokenDigest.make(Encoding.encodeBase64Url(sha256(encoder.encode(value))));\n\nexport const recoveryDigest = (moduleId: string, subjectId: string, value: string) =>\n  digest(\n    `effect-auth/totp/recovery/v1/${moduleId.length}:${moduleId}/${subjectId.length}:${subjectId}/${value}`,\n  );\n\nexport const base32 = (bytes: Uint8Array): string => {\n  const alphabet = \"ABCDEFGHIJKLMNOPQRSTUVWXYZ234567\";\n\n  let bits = 0,\n    value = 0,\n    output = \"\";\n\n  for (const byte of bytes) {\n    value = (value << 8) | byte;\n    bits += 8;\n    while (bits >= 5) {\n      bits -= 5;\n      output += alphabet[(value >>> bits) & 31];\n    }\n  }\n  if (bits > 0) output += alphabet[(value << (5 - bits)) & 31];\n\n  return output;\n};\n\n/** RFC 6238 counter uses big endian unsigned 64 bits and six displayed digits. */\nexport const codeAt = (secret: Uint8Array, step: number, digits = 6): string => {\n  const counter = new Uint8Array(8);\n\n  new DataView(counter.buffer).setBigUint64(0, BigInt(step), false);\n\n  const mac = hmac(sha1, secret, counter),\n    offset = mac[mac.length - 1]! & 15;\n\n  const binary =\n    ((mac[offset]! & 127) << 24) |\n    (mac[offset + 1]! << 16) |\n    (mac[offset + 2]! << 8) |\n    mac[offset + 3]!;\n\n  return String(binary % 10 ** digits).padStart(digits, \"0\");\n};\n\nexport const matchCode = (secret: Uint8Array, code: string, nowMillis: number, skew: number) => {\n  const current = Math.floor(nowMillis / 30000);\n  let matched: number | null = null;\n\n  for (let delta = -skew; delta <= skew; delta++) {\n    const step = current + delta;\n\n    if (step >= 0 && equalBytes(encoder.encode(codeAt(secret, step)), encoder.encode(code)))\n      matched = step;\n  }\n\n  return matched;\n};\n\nexport const newRecoveryCodes = (moduleId: string, subjectId: string) => {\n  const codes = Array.from({ length: 10 }, () => {\n    const hex = Array.from(randomBytes(16), (byte) => byte.toString(16).padStart(2, \"0\"))\n      .join(\"\")\n      .toUpperCase();\n\n    return `rc1-${hex.slice(0, 8)}-${hex.slice(8, 16)}-${hex.slice(16, 24)}-${hex.slice(24, 32)}`;\n  });\n\n  return { codes, digests: codes.map((code) => recoveryDigest(moduleId, subjectId, code)) };\n};\n\nconst fail = () => TotpUnavailable.make({});\n\nexport const encryptSecret = Effect.fn(\"Totp.encryptSecret\")(function* (\n  binding: TotpSecretBinding,\n  secret: Uint8Array,\n) {\n  const keys = yield* TotpSecretKeys,\n    selected = yield* keys.current;\n\n  return yield* Effect.try({\n    try: () => {\n      const key = Redacted.value(selected.key);\n\n      if (key.length !== 32 || secret.length !== 20) throw fail();\n\n      const nonce = randomBytes(12),\n        aad = encoder.encode(Schema.encodeSync(bindingCodec)(binding));\n\n      return TotpSecretEnvelope.make({\n        keyId: selected.keyId,\n        revision: binding.revision,\n        nonce: Encoding.encodeBase64Url(nonce),\n        ciphertext: Encoding.encodeBase64Url(gcm(key, nonce, aad).encrypt(secret)),\n      });\n    },\n    catch: fail,\n  });\n});\n\nexport const decryptSecret = Effect.fn(\"Totp.decryptSecret\")(function* (\n  binding: TotpSecretBinding,\n  envelope: TotpSecretEnvelope,\n) {\n  const keys = yield* TotpSecretKeys,\n    wrapped = yield* keys.get(envelope.keyId);\n\n  const nonce = yield* Effect.fromResult(Encoding.decodeBase64Url(envelope.nonce)).pipe(\n    Effect.mapError(fail),\n  );\n\n  const ciphertext = yield* Effect.fromResult(Encoding.decodeBase64Url(envelope.ciphertext)).pipe(\n    Effect.mapError(fail),\n  );\n\n  return yield* Effect.try({\n    try: () => {\n      const key = Redacted.value(wrapped);\n\n      if (key.length !== 32 || envelope.revision !== binding.revision) throw fail();\n\n      const secret = gcm(\n        key,\n        nonce,\n        encoder.encode(Schema.encodeSync(bindingCodec)(binding)),\n      ).decrypt(ciphertext);\n\n      if (secret.length !== 20) throw fail();\n\n      return secret;\n    },\n    catch: fail,\n  });\n});\n\nexport const generateSecret = () => randomBytes(20);\n"],"mappings":";;;;;;;;;;;;AAkBA,MAAM,UAAU,IAAI,YAAY;AAChC,MAAM,eAAe,OAAO,eAAe,iBAAiB;AAE5D,MAAa,iBAAiB,SAAS,gBAAgB,YAAY,EAAE,CAAC;AAEtE,MAAa,UAAU,UACrB,YAAY,KAAK,SAAS,gBAAgB,OAAO,QAAQ,OAAO,KAAK,CAAC,CAAC,CAAC;AAE1E,MAAa,kBAAkB,UAAkB,WAAmB,UAClE,OACE,gCAAgC,SAAS,OAAO,GAAG,SAAS,GAAG,UAAU,OAAO,GAAG,UAAU,GAAG,OAClG;AAEF,MAAa,UAAU,UAA8B;CACnD,MAAM,WAAW;CAEjB,IAAI,OAAO,GACT,QAAQ,GACR,SAAS;CAEX,KAAK,MAAM,QAAQ,OAAO;EACxB,QAAS,SAAS,IAAK;EACvB,QAAQ;EACR,OAAO,QAAQ,GAAG;GAChB,QAAQ;GACR,UAAU,SAAU,UAAU,OAAQ;EACxC;CACF;CACA,IAAI,OAAO,GAAG,UAAU,SAAU,SAAU,IAAI,OAAS;CAEzD,OAAO;AACT;;AAGA,MAAa,UAAU,QAAoB,MAAc,SAAS,MAAc;CAC9E,MAAM,0BAAU,IAAI,WAAW,CAAC;CAEhC,IAAI,SAAS,QAAQ,MAAM,CAAC,CAAC,aAAa,GAAG,OAAO,IAAI,GAAG,KAAK;CAEhE,MAAM,MAAM,KAAK,MAAM,QAAQ,OAAO,GACpC,SAAS,IAAI,IAAI,SAAS,KAAM;CAElC,MAAM,UACF,IAAI,UAAW,QAAQ,KACxB,IAAI,SAAS,MAAO,KACpB,IAAI,SAAS,MAAO,IACrB,IAAI,SAAS;CAEf,OAAO,OAAO,SAAS,MAAM,MAAM,CAAC,CAAC,SAAS,QAAQ,GAAG;AAC3D;AAEA,MAAa,aAAa,QAAoB,MAAc,WAAmB,SAAiB;CAC9F,MAAM,UAAU,KAAK,MAAM,YAAY,GAAK;CAC5C,IAAI,UAAyB;CAE7B,KAAK,IAAI,QAAQ,CAAC,MAAM,SAAS,MAAM,SAAS;EAC9C,MAAM,OAAO,UAAU;EAEvB,IAAI,QAAQ,KAAK,WAAW,QAAQ,OAAO,OAAO,QAAQ,IAAI,CAAC,GAAG,QAAQ,OAAO,IAAI,CAAC,GACpF,UAAU;CACd;CAEA,OAAO;AACT;AAEA,MAAa,oBAAoB,UAAkB,cAAsB;CACvE,MAAM,QAAQ,MAAM,KAAK,EAAE,QAAQ,GAAG,SAAS;EAC7C,MAAM,MAAM,MAAM,KAAK,YAAY,EAAE,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC,CAClF,KAAK,EAAE,CAAC,CACR,YAAY;EAEf,OAAO,OAAO,IAAI,MAAM,GAAG,CAAC,EAAE,GAAG,IAAI,MAAM,GAAG,EAAE,EAAE,GAAG,IAAI,MAAM,IAAI,EAAE,EAAE,GAAG,IAAI,MAAM,IAAI,EAAE;CAC5F,CAAC;CAED,OAAO;EAAE;EAAO,SAAS,MAAM,KAAK,SAAS,eAAe,UAAU,WAAW,IAAI,CAAC;CAAE;AAC1F;AAEA,MAAM,aAAa,gBAAgB,KAAK,CAAC,CAAC;AAE1C,MAAa,gBAAgB,OAAO,GAAG,oBAAoB,CAAC,CAAC,WAC3D,SACA,QACA;CACA,MACE,WAAW,QAAO,OADA,eAAA,CACK;CAEzB,OAAO,OAAO,OAAO,IAAI;EACvB,WAAW;GACT,MAAM,MAAM,SAAS,MAAM,SAAS,GAAG;GAEvC,IAAI,IAAI,WAAW,MAAM,OAAO,WAAW,IAAI,MAAM,KAAK;GAE1D,MAAM,QAAQ,YAAY,EAAE,GAC1B,MAAM,QAAQ,OAAO,OAAO,WAAW,YAAY,CAAC,CAAC,OAAO,CAAC;GAE/D,OAAO,mBAAmB,KAAK;IAC7B,OAAO,SAAS;IAChB,UAAU,QAAQ;IAClB,OAAO,SAAS,gBAAgB,KAAK;IACrC,YAAY,SAAS,gBAAgB,IAAI,KAAK,OAAO,GAAG,CAAC,CAAC,QAAQ,MAAM,CAAC;GAC3E,CAAC;EACH;EACA,OAAO;CACT,CAAC;AACH,CAAC;AAED,MAAa,gBAAgB,OAAO,GAAG,oBAAoB,CAAC,CAAC,WAC3D,SACA,UACA;CACA,MACE,UAAU,QAAO,OADC,eAAA,CACI,IAAI,SAAS,KAAK;CAE1C,MAAM,QAAQ,OAAO,OAAO,WAAW,SAAS,gBAAgB,SAAS,KAAK,CAAC,CAAC,CAAC,KAC/E,OAAO,SAAS,IAAI,CACtB;CAEA,MAAM,aAAa,OAAO,OAAO,WAAW,SAAS,gBAAgB,SAAS,UAAU,CAAC,CAAC,CAAC,KACzF,OAAO,SAAS,IAAI,CACtB;CAEA,OAAO,OAAO,OAAO,IAAI;EACvB,WAAW;GACT,MAAM,MAAM,SAAS,MAAM,OAAO;GAElC,IAAI,IAAI,WAAW,MAAM,SAAS,aAAa,QAAQ,UAAU,MAAM,KAAK;GAE5E,MAAM,SAAS,IACb,KACA,OACA,QAAQ,OAAO,OAAO,WAAW,YAAY,CAAC,CAAC,OAAO,CAAC,CACzD,CAAC,CAAC,QAAQ,UAAU;GAEpB,IAAI,OAAO,WAAW,IAAI,MAAM,KAAK;GAErC,OAAO;EACT;EACA,OAAO;CACT,CAAC;AACH,CAAC;AAED,MAAa,uBAAuB,YAAY,EAAE"}