@yume-chan/adb-credential-web 2.1.0 → 3.0.0-beta.0

package/esm/storage/password.js

@@ -0,0 +1,129 @@
+import { encodeUtf8, toLocalUint8Array } from "@yume-chan/adb";
+import { buffer, struct, u16, u32, u8, Uint8ArrayExactReadable, } from "@yume-chan/struct";
+const DefaultPbkdf2SaltLength = 16; // Recommended
+const MinimalPbkdf2SaltLength = 8; // Not recommended but still could be considered secure
+const MaximalPbkdf2SaltLength = 255; // Max length can be stored in `Bundle`
+const DefaultPbkdf2Iterations = 1_000_000; // Very secure according to OWASP Cheat Sheet
+const MinimalPbkdf2Iterations = 10_000; // Not recommended but still could be considered secure
+const MaximalPbkdf2Iterations = 4294967295; // 2^32 - 1, max value can be stored in `Bundle`
+const DefaultAesIvLength = 12; // 12 bytes (96 bits) is the native IV length
+const MinimalAesIvLength = 1; // Any value except 12 is not recommended, but could work
+const MaximalAesIvLength = 255; // Max length can be stored in `Bundle`
+const Bundle = struct({
+    pbkdf2Salt: buffer(u8),
+    pbkdf2Iterations: u32,
+    aesIv: buffer(u8),
+    encrypted: buffer(u16),
+}, { littleEndian: true });
+async function deriveAesKey(password, saltOrLength, iterations) {
+    const baseKey = await crypto.subtle.importKey("raw", encodeUtf8(password), "PBKDF2", false, ["deriveKey"]);
+    let salt;
+    if (typeof saltOrLength === "number") {
+        salt = new Uint8Array(saltOrLength);
+        crypto.getRandomValues(salt);
+    }
+    else {
+        salt = saltOrLength;
+    }
+    const aesKey = await crypto.subtle.deriveKey({
+        name: "PBKDF2",
+        salt,
+        iterations,
+        hash: "SHA-256",
+    }, baseKey, { name: "AES-GCM", length: 256 }, false, ["encrypt", "decrypt"]);
+    return { salt, aesKey };
+}
+class PasswordIncorrectError extends Error {
+    #keyName;
+    get keyName() {
+        return this.#keyName;
+    }
+    constructor(keyName) {
+        super("Password incorrect");
+        this.#keyName = keyName;
+    }
+}
+// eslint-disable-next-line @typescript-eslint/max-params
+function checkIntegerRange(name, value, defaultValue, min, max) {
+    if (value === undefined) {
+        return defaultValue;
+    }
+    if (!Number.isInteger(value) || value < min || value > max) {
+        throw new Error(`${name} must be an integer between ${min} and ${max}`);
+    }
+    return value;
+}
+export class TangoPasswordProtectedStorage {
+    static PasswordIncorrectError = PasswordIncorrectError;
+    #storage;
+    #requestPassword;
+    #pbkdf2SaltLength;
+    #pbkdf2Iterations;
+    #aesIvLength;
+    constructor(options) {
+        this.#storage = options.storage;
+        this.#requestPassword = options.requestPassword;
+        this.#pbkdf2SaltLength = checkIntegerRange("pbkdf2SaltLength", options.pbkdf2SaltLength, DefaultPbkdf2SaltLength, MinimalPbkdf2SaltLength, MaximalPbkdf2SaltLength);
+        this.#pbkdf2Iterations = checkIntegerRange("pbkdf2Iterations", options.pbkdf2Iterations, DefaultPbkdf2Iterations, MinimalPbkdf2Iterations, MaximalPbkdf2Iterations);
+        this.#aesIvLength = checkIntegerRange("aesIvLength", options.aesIvLength, DefaultAesIvLength, MinimalAesIvLength, MaximalAesIvLength);
+    }
+    async save(privateKey, name) {
+        const password = await this.#requestPassword("save", name);
+        const { salt, aesKey } = await deriveAesKey(password, this.#pbkdf2SaltLength, this.#pbkdf2Iterations);
+        const iv = new Uint8Array(this.#aesIvLength);
+        crypto.getRandomValues(iv);
+        const encrypted = await crypto.subtle.encrypt({ name: "AES-GCM", iv }, aesKey, toLocalUint8Array(privateKey));
+        const bundle = Bundle.serialize({
+            pbkdf2Salt: salt,
+            pbkdf2Iterations: this.#pbkdf2Iterations,
+            aesIv: iv,
+            encrypted: new Uint8Array(encrypted),
+        });
+        await this.#storage.save(bundle, name);
+        // Clear secret memory
+        //   * No way to clear `password` and `aesKey`
+        //   * `salt`, `iv`, `encrypted` and `bundle` are not secrets
+        //   * `privateKey` is owned by caller and will be cleared by caller
+    }
+    async *load() {
+        for await (const result of this.#storage.load()) {
+            if (result instanceof Error) {
+                yield result;
+                continue;
+            }
+            const { privateKey: serialized, name } = result;
+            try {
+                const bundle = Bundle.deserialize(new Uint8ArrayExactReadable(serialized));
+                const password = await this.#requestPassword("load", name);
+                const { aesKey } = await deriveAesKey(password, bundle.pbkdf2Salt, bundle.pbkdf2Iterations);
+                const decrypted = await crypto.subtle.decrypt({
+                    name: "AES-GCM",
+                    iv: bundle.aesIv,
+                }, aesKey, bundle.encrypted);
+                try {
+                    yield {
+                        privateKey: new Uint8Array(decrypted),
+                        name,
+                    };
+                }
+                finally {
+                    // Clear secret memory
+                    //   * No way to clear `password` and `aesKey`
+                    //   * all values in `bundle` are not secrets
+                    //   * Caller is not allowed to use `decrypted` after `yield` returns
+                    new Uint8Array(decrypted).fill(0);
+                }
+            }
+            catch (e) {
+                if (e instanceof DOMException && e.name === "OperationError") {
+                    yield new PasswordIncorrectError(name);
+                    continue;
+                }
+                yield e instanceof Error
+                    ? e
+                    : new Error(String(e), { cause: e });
+            }
+        }
+    }
+}
+//# sourceMappingURL=password.js.map

package/esm/storage/password.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"password.js","sourceRoot":"","sources":["../../src/storage/password.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAE/D,OAAO,EACH,MAAM,EACN,MAAM,EACN,GAAG,EACH,GAAG,EACH,EAAE,EACF,uBAAuB,GAC1B,MAAM,mBAAmB,CAAC;AAI3B,MAAM,uBAAuB,GAAG,EAAE,CAAC,CAAC,cAAc;AAClD,MAAM,uBAAuB,GAAG,CAAC,CAAC,CAAC,uDAAuD;AAC1F,MAAM,uBAAuB,GAAG,GAAG,CAAC,CAAC,uCAAuC;AAE5E,MAAM,uBAAuB,GAAG,SAAS,CAAC,CAAC,6CAA6C;AACxF,MAAM,uBAAuB,GAAG,MAAM,CAAC,CAAC,uDAAuD;AAC/F,MAAM,uBAAuB,GAAG,UAAU,CAAC,CAAC,gDAAgD;AAE5F,MAAM,kBAAkB,GAAG,EAAE,CAAC,CAAC,6CAA6C;AAC5E,MAAM,kBAAkB,GAAG,CAAC,CAAC,CAAC,yDAAyD;AACvF,MAAM,kBAAkB,GAAG,GAAG,CAAC,CAAC,uCAAuC;AAEvE,MAAM,MAAM,GAAG,MAAM,CACjB;IACI,UAAU,EAAE,MAAM,CAAC,EAAE,CAAC;IACtB,gBAAgB,EAAE,GAAG;IACrB,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC;CACzB,EACD,EAAE,YAAY,EAAE,IAAI,EAAE,CACzB,CAAC;AAEF,KAAK,UAAU,YAAY,CACvB,QAAgB,EAChB,YAA8C,EAC9C,UAAkB;IAElB,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACzC,KAAK,EACL,UAAU,CAAC,QAAQ,CAAC,EACpB,QAAQ,EACR,KAAK,EACL,CAAC,WAAW,CAAC,CAChB,CAAC;IAEF,IAAI,IAA6B,CAAC;IAClC,IAAI,OAAO,YAAY,KAAK,QAAQ,EAAE,CAAC;QACnC,IAAI,GAAG,IAAI,UAAU,CAAC,YAAY,CAAC,CAAC;QACpC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;SAAM,CAAC;QACJ,IAAI,GAAG,YAAY,CAAC;IACxB,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACxC;QACI,IAAI,EAAE,QAAQ;QACd,IAAI;QACJ,UAAU;QACV,IAAI,EAAE,SAAS;KAClB,EACD,OAAO,EACP,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAChC,KAAK,EACL,CAAC,SAAS,EAAE,SAAS,CAAC,CACzB,CAAC;IAEF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC;AAED,MAAM,sBAAuB,SAAQ,KAAK;IACtC,QAAQ,CAAqB;IAC7B,IAAI,OAAO;QACP,OAAO,IAAI,CAAC,QAAQ,CAAC;IACzB,CAAC;IAED,YAAY,OAA2B;QACnC,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAC5B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;IAC5B,CAAC;CACJ;AAED,yDAAyD;AACzD,SAAS,iBAAiB,CACtB,IAAY,EACZ,KAAyB,EACzB,YAAoB,EACpB,GAAW,EACX,GAAW;IAEX,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,YAAY,CAAC;IACxB,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,GAAG,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,+BAA+B,GAAG,QAAQ,GAAG,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,KAAK,CAAC;AACjB,CAAC;AAED,MAAM,OAAO,6BAA6B;IACtC,MAAM,CAAC,sBAAsB,GAAG,sBAAsB,CAAC;IAE9C,QAAQ,CAAkB;IAC1B,gBAAgB,CAAgD;IAChE,iBAAiB,CAAS;IAC1B,iBAAiB,CAAS;IAC1B,YAAY,CAAS;IAE9B,YAAY,OAMX;QACG,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,CAAC,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC;QAEhD,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CACtC,kBAAkB,EAClB,OAAO,CAAC,gBAAgB,EACxB,uBAAuB,EACvB,uBAAuB,EACvB,uBAAuB,CAC1B,CAAC;QAEF,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CACtC,kBAAkB,EAClB,OAAO,CAAC,gBAAgB,EACxB,uBAAuB,EACvB,uBAAuB,EACvB,uBAAuB,CAC1B,CAAC;QAEF,IAAI,CAAC,YAAY,GAAG,iBAAiB,CACjC,aAAa,EACb,OAAO,CAAC,WAAW,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,CACrB,CAAC;IACN,CAAC;IAED,KAAK,CAAC,IAAI,CACN,UAAsB,EACtB,IAAwB;QAExB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC3D,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,YAAY,CACvC,QAAQ,EACR,IAAI,CAAC,iBAAiB,EACtB,IAAI,CAAC,iBAAiB,CACzB,CAAC;QAEF,MAAM,EAAE,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC7C,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QAE3B,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACzC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EACvB,MAAM,EACN,iBAAiB,CAAC,UAAU,CAAC,CAChC,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC;YAC5B,UAAU,EAAE,IAAI;YAChB,gBAAgB,EAAE,IAAI,CAAC,iBAAiB;YACxC,KAAK,EAAE,EAAE;YACT,SAAS,EAAE,IAAI,UAAU,CAAC,SAAS,CAAC;SACvC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAEvC,sBAAsB;QACtB,8CAA8C;QAC9C,6DAA6D;QAC7D,oEAAoE;IACxE,CAAC;IAED,KAAK,CAAC,CAAC,IAAI;QACP,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;YAC9C,IAAI,MAAM,YAAY,KAAK,EAAE,CAAC;gBAC1B,MAAM,MAAM,CAAC;gBACb,SAAS;YACb,CAAC;YAED,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;YAEhD,IAAI,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAC7B,IAAI,uBAAuB,CAAC,UAAU,CAAC,CAC1C,CAAC;gBAEF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBAC3D,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,YAAY,CACjC,QAAQ,EACR,MAAM,CAAC,UAAqC,EAC5C,MAAM,CAAC,gBAAgB,CAC1B,CAAC;gBAEF,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACzC;oBACI,IAAI,EAAE,SAAS;oBACf,EAAE,EAAE,MAAM,CAAC,KAAgC;iBAC9C,EACD,MAAM,EACN,MAAM,CAAC,SAAoC,CAC9C,CAAC;gBAEF,IAAI,CAAC;oBACD,MAAM;wBACF,UAAU,EAAE,IAAI,UAAU,CAAC,SAAS,CAAC;wBACrC,IAAI;qBACP,CAAC;gBACN,CAAC;wBAAS,CAAC;oBACP,sBAAsB;oBACtB,8CAA8C;oBAC9C,6CAA6C;oBAC7C,qEAAqE;oBACrE,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACtC,CAAC;YACL,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACT,IAAI,CAAC,YAAY,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;oBAC3D,MAAM,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC;oBACvC,SAAS;gBACb,CAAC;gBAED,MAAM,CAAC,YAAY,KAAK;oBACpB,CAAC,CAAC,CAAC;oBACH,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YAC7C,CAAC;QACL,CAAC;IACL,CAAC"}

package/esm/storage/prf/index.d.ts

@@ -0,0 +1,4 @@
+export * from "./source.js";
+export * from "./storage.js";
+export * from "./web-authn.js";
+//# sourceMappingURL=index.d.ts.map

package/esm/storage/prf/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/storage/prf/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC"}

package/esm/storage/prf/index.js

@@ -0,0 +1,4 @@
+export * from "./source.js";
+export * from "./storage.js";
+export * from "./web-authn.js";
+//# sourceMappingURL=index.js.map

package/esm/storage/prf/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/storage/prf/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,gBAAgB,CAAC"}

package/esm/storage/prf/source.d.ts

@@ -0,0 +1,27 @@
+import type { MaybePromiseLike } from "@yume-chan/async";
+export interface TangoPrfCreationResult {
+    /**
+     * The generated PRF output
+     */
+    output: BufferSource;
+    /**
+     * ID of the created secret key
+     */
+    id: Uint8Array<ArrayBuffer>;
+}
+export interface TangoPrfSource {
+    /**
+     * Creates a new secret key and generate PRF output using the key and input data.
+     *
+     * @param input The input data
+     */
+    create(input: Uint8Array<ArrayBuffer>): MaybePromiseLike<TangoPrfCreationResult>;
+    /**
+     * Generates PRF output using the secret key and input data.
+     *
+     * @param id ID of the secret key
+     * @param input The input data
+     */
+    get(id: BufferSource, input: Uint8Array<ArrayBuffer>): MaybePromiseLike<BufferSource>;
+}
+//# sourceMappingURL=source.d.ts.map

package/esm/storage/prf/source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"source.d.ts","sourceRoot":"","sources":["../../../src/storage/prf/source.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEzD,MAAM,WAAW,sBAAsB;IACnC;;OAEG;IACH,MAAM,EAAE,YAAY,CAAC;IAErB;;OAEG;IACH,EAAE,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,cAAc;IAC3B;;;;OAIG;IACH,MAAM,CACF,KAAK,EAAE,UAAU,CAAC,WAAW,CAAC,GAC/B,gBAAgB,CAAC,sBAAsB,CAAC,CAAC;IAE5C;;;;;OAKG;IACH,GAAG,CACC,EAAE,EAAE,YAAY,EAChB,KAAK,EAAE,UAAU,CAAC,WAAW,CAAC,GAC/B,gBAAgB,CAAC,YAAY,CAAC,CAAC;CACrC"}

package/esm/storage/prf/source.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=source.js.map

package/esm/storage/prf/source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"source.js","sourceRoot":"","sources":["../../../src/storage/prf/source.ts"],"names":[],"mappings":""}

package/esm/storage/prf/storage.d.ts

@@ -0,0 +1,19 @@
+import type { MaybeError } from "@yume-chan/adb";
+import type { TangoKey, TangoKeyStorage } from "../type.js";
+import type { TangoPrfSource } from "./source.js";
+/**
+ * A `TangoDataStorage` that encrypts and decrypts data using PRF
+ */
+export declare class TangoPrfStorage implements TangoKeyStorage {
+    #private;
+    /**
+     * Creates a new instance of `TangoPrfStorage`
+     *
+     * @param storage Another `TangoDataStorage` to store and retrieve the encrypted data
+     * @param source The `TangoPrfSource` to generate PRF output
+     */
+    constructor(storage: TangoKeyStorage, source: TangoPrfSource);
+    save(privateKey: Uint8Array, name: string | undefined): Promise<undefined>;
+    load(): AsyncGenerator<MaybeError<TangoKey>, void, void>;
+}
+//# sourceMappingURL=storage.d.ts.map

package/esm/storage/prf/storage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.d.ts","sourceRoot":"","sources":["../../../src/storage/prf/storage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAUjD,OAAO,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAkDlD;;GAEG;AACH,qBAAa,eAAgB,YAAW,eAAe;;IAKnD;;;;;OAKG;gBACS,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,cAAc;IAKtD,IAAI,CACN,UAAU,EAAE,UAAU,EACtB,IAAI,EAAE,MAAM,GAAG,SAAS,GACzB,OAAO,CAAC,SAAS,CAAC;IAkDd,IAAI,IAAI,cAAc,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC;CAwDlE"}

package/esm/storage/prf/storage.js

@@ -0,0 +1,125 @@
+import { toLocalUint8Array } from "@yume-chan/adb";
+import { toUint8Array } from "@yume-chan/stream-extra";
+import { buffer, struct, u16, Uint8ArrayExactReadable, } from "@yume-chan/struct";
+// PRF generally uses FIDO HMAC secret extension, which uses HMAC with SHA-256,
+// and this input is used as salt, so should be 32 bytes
+const PrfInputLength = 32;
+const HkdfInfoLength = 32;
+// We use HMAC with SHA-512, so should be 64 bytes
+const HkdfSaltLength = 64;
+// AES-GCM recommends 12-byte (96-bit) IV for performance and interoperability
+const AesIvLength = 12;
+async function deriveAesKey(source, info, salt) {
+    const baseKey = await crypto.subtle.importKey("raw", source, "HKDF", false, ["deriveKey"]);
+    return await crypto.subtle.deriveKey({
+        name: "HKDF",
+        hash: "SHA-512",
+        info,
+        salt,
+    }, baseKey, { name: "AES-GCM", length: 256 }, false, ["encrypt", "decrypt"]);
+}
+const Bundle = struct({
+    id: buffer(u16),
+    prfInput: buffer(PrfInputLength),
+    hkdfInfo: buffer(HkdfInfoLength),
+    hkdfSalt: buffer(HkdfSaltLength),
+    aesIv: buffer(AesIvLength),
+    encrypted: buffer(u16),
+}, { littleEndian: true });
+/**
+ * A `TangoDataStorage` that encrypts and decrypts data using PRF
+ */
+export class TangoPrfStorage {
+    #storage;
+    #source;
+    #prevId;
+    /**
+     * Creates a new instance of `TangoPrfStorage`
+     *
+     * @param storage Another `TangoDataStorage` to store and retrieve the encrypted data
+     * @param source The `TangoPrfSource` to generate PRF output
+     */
+    constructor(storage, source) {
+        this.#storage = storage;
+        this.#source = source;
+    }
+    async save(privateKey, name) {
+        const prfInput = new Uint8Array(PrfInputLength);
+        crypto.getRandomValues(prfInput);
+        // Maybe reuse the credential, but use different PRF input and HKDF params
+        let id;
+        let prfOutput;
+        if (this.#prevId) {
+            prfOutput = await this.#source.get(this.#prevId, prfInput);
+            id = this.#prevId;
+        }
+        else {
+            ({ output: prfOutput, id } = await this.#source.create(prfInput));
+            this.#prevId = id;
+        }
+        const info = new Uint8Array(HkdfInfoLength);
+        crypto.getRandomValues(info);
+        const salt = new Uint8Array(HkdfSaltLength);
+        crypto.getRandomValues(salt);
+        let aesKey;
+        try {
+            aesKey = await deriveAesKey(prfOutput, info, salt);
+        }
+        finally {
+            // Clear secret memory
+            toUint8Array(prfOutput).fill(0);
+        }
+        const iv = new Uint8Array(AesIvLength);
+        crypto.getRandomValues(iv);
+        const encrypted = await crypto.subtle.encrypt({ name: "AES-GCM", iv }, aesKey, toLocalUint8Array(privateKey));
+        const bundle = Bundle.serialize({
+            id,
+            prfInput,
+            hkdfInfo: info,
+            hkdfSalt: salt,
+            aesIv: iv,
+            encrypted: new Uint8Array(encrypted),
+        });
+        await this.#storage.save(bundle, name);
+    }
+    async *load() {
+        for await (const result of this.#storage.load()) {
+            if (result instanceof Error) {
+                yield result;
+                continue;
+            }
+            const { privateKey: serialized, name } = result;
+            try {
+                const bundle = Bundle.deserialize(new Uint8ArrayExactReadable(serialized));
+                const prfOutput = await this.#source.get(bundle.id, bundle.prfInput);
+                this.#prevId = bundle.id;
+                let aesKey;
+                try {
+                    aesKey = await deriveAesKey(prfOutput, bundle.hkdfInfo, bundle.hkdfSalt);
+                }
+                finally {
+                    // Clear secret memory
+                    toUint8Array(prfOutput).fill(0);
+                }
+                const decrypted = await crypto.subtle.decrypt({
+                    name: "AES-GCM",
+                    iv: bundle.aesIv,
+                }, aesKey, bundle.encrypted);
+                try {
+                    yield { privateKey: new Uint8Array(decrypted), name };
+                }
+                finally {
+                    // Clear secret memory
+                    // Caller is not allowed to use `decrypted` after `yield` returns
+                    new Uint8Array(decrypted).fill(0);
+                }
+            }
+            catch (e) {
+                yield e instanceof Error
+                    ? e
+                    : new Error(String(e), { cause: e });
+            }
+        }
+    }
+}
+//# sourceMappingURL=storage.js.map

package/esm/storage/prf/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../../src/storage/prf/storage.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EACH,MAAM,EACN,MAAM,EACN,GAAG,EACH,uBAAuB,GAC1B,MAAM,mBAAmB,CAAC;AAM3B,+EAA+E;AAC/E,wDAAwD;AACxD,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,kDAAkD;AAClD,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,8EAA8E;AAC9E,MAAM,WAAW,GAAG,EAAE,CAAC;AAEvB,KAAK,UAAU,YAAY,CACvB,MAAoB,EACpB,IAA6B,EAC7B,IAA6B;IAE7B,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACzC,KAAK,EACL,MAAM,EACN,MAAM,EACN,KAAK,EACL,CAAC,WAAW,CAAC,CAChB,CAAC;IAEF,OAAO,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAChC;QACI,IAAI,EAAE,MAAM;QACZ,IAAI,EAAE,SAAS;QACf,IAAI;QACJ,IAAI;KACyB,EACjC,OAAO,EACP,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAChC,KAAK,EACL,CAAC,SAAS,EAAE,SAAS,CAAC,CACzB,CAAC;AACN,CAAC;AAED,MAAM,MAAM,GAAG,MAAM,CACjB;IACI,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC,cAAc,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC,cAAc,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC,cAAc,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC;CACzB,EACD,EAAE,YAAY,EAAE,IAAI,EAAE,CACzB,CAAC;AAEF;;GAEG;AACH,MAAM,OAAO,eAAe;IACf,QAAQ,CAAkB;IAC1B,OAAO,CAAiB;IACjC,OAAO,CAAsC;IAE7C;;;;;OAKG;IACH,YAAY,OAAwB,EAAE,MAAsB;QACxD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,IAAI,CACN,UAAsB,EACtB,IAAwB;QAExB,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,cAAc,CAAC,CAAC;QAChD,MAAM,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC;QAEjC,0EAA0E;QAC1E,IAAI,EAA2B,CAAC;QAChC,IAAI,SAAuB,CAAC;QAC5B,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;YAC3D,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QACtB,CAAC;aAAM,CAAC;YACJ,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAClE,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;QACtB,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,cAAc,CAAC,CAAC;QAC5C,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAE7B,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,cAAc,CAAC,CAAC;QAC5C,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QAE7B,IAAI,MAAiB,CAAC;QACtB,IAAI,CAAC;YACD,MAAM,GAAG,MAAM,YAAY,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACvD,CAAC;gBAAS,CAAC;YACP,sBAAsB;YACtB,YAAY,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpC,CAAC;QAED,MAAM,EAAE,GAAG,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC;QACvC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;QAE3B,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACzC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EACvB,MAAM,EACN,iBAAiB,CAAC,UAAU,CAAC,CAChC,CAAC;QAEF,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC;YAC5B,EAAE;YACF,QAAQ;YACR,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,EAAE;YACT,SAAS,EAAE,IAAI,UAAU,CAAC,SAAS,CAAC;SACvC,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,CAAC,IAAI;QACP,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;YAC9C,IAAI,MAAM,YAAY,KAAK,EAAE,CAAC;gBAC1B,MAAM,MAAM,CAAC;gBACb,SAAS;YACb,CAAC;YAED,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;YAEhD,IAAI,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAC7B,IAAI,uBAAuB,CAAC,UAAU,CAAC,CAC1C,CAAC;gBAEF,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CACpC,MAAM,CAAC,EAA6B,EACpC,MAAM,CAAC,QAAmC,CAC7C,CAAC;gBAEF,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,EAA6B,CAAC;gBAEpD,IAAI,MAAiB,CAAC;gBACtB,IAAI,CAAC;oBACD,MAAM,GAAG,MAAM,YAAY,CACvB,SAAS,EACT,MAAM,CAAC,QAAmC,EAC1C,MAAM,CAAC,QAAmC,CAC7C,CAAC;gBACN,CAAC;wBAAS,CAAC;oBACP,sBAAsB;oBACtB,YAAY,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACpC,CAAC;gBAED,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACzC;oBACI,IAAI,EAAE,SAAS;oBACf,EAAE,EAAE,MAAM,CAAC,KAAgC;iBAC9C,EACD,MAAM,EACN,MAAM,CAAC,SAAoC,CAC9C,CAAC;gBAEF,IAAI,CAAC;oBACD,MAAM,EAAE,UAAU,EAAE,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;gBAC1D,CAAC;wBAAS,CAAC;oBACP,sBAAsB;oBACtB,iEAAiE;oBACjE,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACtC,CAAC;YACL,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACT,MAAM,CAAC,YAAY,KAAK;oBACpB,CAAC,CAAC,CAAC;oBACH,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YAC7C,CAAC;QACL,CAAC;IACL,CAAC;CACJ"}

package/esm/storage/prf/web-authn.d.ts

@@ -0,0 +1,55 @@
+import type { TangoPrfSource } from "./source.js";
+declare class NotSupportedError extends Error {
+    constructor();
+}
+declare class OperationCancelledError extends Error {
+    constructor();
+}
+export declare class TangoWebAuthnPrfSource implements TangoPrfSource {
+    #private;
+    static NotSupportedError: typeof NotSupportedError;
+    static OperationCancelledError: typeof OperationCancelledError;
+    /**
+     * Checks if the runtime supports WebAuthn PRF extension.
+     *
+     * Note that using the extension also requires a supported authenticator.
+     * Whether an authenticator supports the extension can only be checked
+     * during the `create` process.
+     * @returns `true` if the runtime supports WebAuthn PRF extension
+     */
+    static isSupported(): Promise<boolean>;
+    /**
+     * Creates a new instance of `TangoWebAuthnPrfSource`
+     *
+     * @param appName Name of your website shows in Passkey manager
+     * @param userName Display name of the credential shows in Passkey manager
+     */
+    constructor(appName: string, userName: string);
+    /**
+     * Creates a new credential and generate PRF output using the credential and input data.
+     *
+     * @param input The input data
+     * @returns The credential ID and PRF output
+     * @throws `NotSupportedError` if the runtime or authenticator doesn't support PRF extension
+     * @throws `OperationCancelledError` if the attestation is either cancelled by user or timed out
+     */
+    create(input: Uint8Array<ArrayBuffer>): Promise<{
+        output: BufferSource;
+        id: Uint8Array<ArrayBuffer>;
+    }>;
+    /**
+     * Generates PRF output using a credential and input data.
+     *
+     * @param id ID of a previously created credential
+     * @param input The input data
+     * @returns PRF output
+     * @throws `OperationCancelledError` if the attestation is either cancelled by user or timed out
+     */
+    get(id: BufferSource, input: Uint8Array<ArrayBuffer>): Promise<BufferSource>;
+}
+export declare namespace TangoWebAuthnPrfSource {
+    type NotSupportedError = typeof NotSupportedError;
+    type OperationCancelledError = typeof OperationCancelledError;
+}
+export {};
+//# sourceMappingURL=web-authn.d.ts.map

package/esm/storage/prf/web-authn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-authn.d.ts","sourceRoot":"","sources":["../../../src/storage/prf/web-authn.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAqBlD,cAAM,iBAAkB,SAAQ,KAAK;;CAIpC;AAED,cAAM,uBAAwB,SAAQ,KAAK;;CAI1C;AAED,qBAAa,sBAAuB,YAAW,cAAc;;IACzD,MAAM,CAAC,iBAAiB,2BAAqB;IAC7C,MAAM,CAAC,uBAAuB,iCAA2B;IAEzD;;;;;;;OAOG;WACU,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAqB5C;;;;;OAKG;gBACS,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;IAK7C;;;;;;;OAOG;IACG,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,WAAW,CAAC,GAAG,OAAO,CAAC;QAClD,MAAM,EAAE,YAAY,CAAC;QACrB,EAAE,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC;KAC/B,CAAC;IA4CF;;;;;;;OAOG;IACG,GAAG,CACL,EAAE,EAAE,YAAY,EAChB,KAAK,EAAE,UAAU,CAAC,WAAW,CAAC,GAC/B,OAAO,CAAC,YAAY,CAAC;CA0B3B;AAED,yBAAiB,sBAAsB,CAAC;IACpC,KAAY,iBAAiB,GAAG,OAAO,iBAAiB,CAAC;IACzD,KAAY,uBAAuB,GAAG,OAAO,uBAAuB,CAAC;CACxE"}

package/esm/storage/prf/web-authn.js

@@ -0,0 +1,138 @@
+function checkCredential(credential) {
+    if (!credential || !(credential instanceof PublicKeyCredential)) {
+        throw new Error("Can't create credential");
+    }
+}
+function getPrfOutput(credential) {
+    const extensions = credential.getClientExtensionResults();
+    const prf = extensions["prf"];
+    if (!prf) {
+        throw new NotSupportedError();
+    }
+    return prf;
+}
+class NotSupportedError extends Error {
+    constructor() {
+        super("PRF extension is not supported");
+    }
+}
+class OperationCancelledError extends Error {
+    constructor() {
+        super("The operation is either cancelled by user or timed out");
+    }
+}
+export class TangoWebAuthnPrfSource {
+    static NotSupportedError = NotSupportedError;
+    static OperationCancelledError = OperationCancelledError;
+    /**
+     * Checks if the runtime supports WebAuthn PRF extension.
+     *
+     * Note that using the extension also requires a supported authenticator.
+     * Whether an authenticator supports the extension can only be checked
+     * during the `create` process.
+     * @returns `true` if the runtime supports WebAuthn PRF extension
+     */
+    static async isSupported() {
+        if (typeof PublicKeyCredential === "undefined") {
+            return false;
+        }
+        if (!PublicKeyCredential.getClientCapabilities) {
+            return false;
+        }
+        const clientCapabilities = await PublicKeyCredential.getClientCapabilities();
+        if (!clientCapabilities["extension:prf"]) {
+            return false;
+        }
+        return true;
+    }
+    #appName;
+    #userName;
+    /**
+     * Creates a new instance of `TangoWebAuthnPrfSource`
+     *
+     * @param appName Name of your website shows in Passkey manager
+     * @param userName Display name of the credential shows in Passkey manager
+     */
+    constructor(appName, userName) {
+        this.#appName = appName;
+        this.#userName = userName;
+    }
+    /**
+     * Creates a new credential and generate PRF output using the credential and input data.
+     *
+     * @param input The input data
+     * @returns The credential ID and PRF output
+     * @throws `NotSupportedError` if the runtime or authenticator doesn't support PRF extension
+     * @throws `OperationCancelledError` if the attestation is either cancelled by user or timed out
+     */
+    async create(input) {
+        const challenge = new Uint8Array(32);
+        crypto.getRandomValues(challenge);
+        let attestation;
+        try {
+            attestation = await navigator.credentials.create({
+                publicKey: {
+                    challenge,
+                    extensions: { prf: { eval: { first: input } } },
+                    pubKeyCredParams: [
+                        { type: "public-key", alg: -7 },
+                        { type: "public-key", alg: -257 },
+                    ],
+                    rp: { name: this.#appName },
+                    user: {
+                        id: challenge,
+                        name: this.#userName,
+                        displayName: this.#userName,
+                    },
+                },
+            });
+        }
+        catch {
+            throw new OperationCancelledError();
+        }
+        checkCredential(attestation);
+        const prf = getPrfOutput(attestation);
+        if (prf.enabled === undefined) {
+            throw new NotSupportedError();
+        }
+        const id = new Uint8Array(attestation.rawId);
+        if (prf.results) {
+            return { output: prf.results.first, id };
+        }
+        // Some authenticators only support getting PRF in assertion
+        const output = await this.get(id, input);
+        return { output, id };
+    }
+    /**
+     * Generates PRF output using a credential and input data.
+     *
+     * @param id ID of a previously created credential
+     * @param input The input data
+     * @returns PRF output
+     * @throws `OperationCancelledError` if the attestation is either cancelled by user or timed out
+     */
+    async get(id, input) {
+        const challenge = new Uint8Array(32);
+        crypto.getRandomValues(challenge);
+        let assertion;
+        try {
+            assertion = await navigator.credentials.get({
+                publicKey: {
+                    allowCredentials: [{ type: "public-key", id }],
+                    challenge,
+                    extensions: { prf: { eval: { first: input } } },
+                },
+            });
+        }
+        catch {
+            throw new OperationCancelledError();
+        }
+        checkCredential(assertion);
+        const prfOutput = getPrfOutput(assertion);
+        if (!prfOutput.results) {
+            throw new NotSupportedError();
+        }
+        return prfOutput.results.first;
+    }
+}
+//# sourceMappingURL=web-authn.js.map

package/esm/storage/prf/web-authn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-authn.js","sourceRoot":"","sources":["../../../src/storage/prf/web-authn.ts"],"names":[],"mappings":"AAEA,SAAS,eAAe,CACpB,UAA6B;IAE7B,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,UAAU,YAAY,mBAAmB,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAC/C,CAAC;AACL,CAAC;AAED,SAAS,YAAY,CAAC,UAA+B;IACjD,MAAM,UAAU,GAAG,UAAU,CAAC,yBAAyB,EAAE,CAAC;IAE1D,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,CAAC,GAAG,EAAE,CAAC;QACP,MAAM,IAAI,iBAAiB,EAAE,CAAC;IAClC,CAAC;IAED,OAAO,GAAG,CAAC;AACf,CAAC;AAED,MAAM,iBAAkB,SAAQ,KAAK;IACjC;QACI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC5C,CAAC;CACJ;AAED,MAAM,uBAAwB,SAAQ,KAAK;IACvC;QACI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IACpE,CAAC;CACJ;AAED,MAAM,OAAO,sBAAsB;IAC/B,MAAM,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;IAC7C,MAAM,CAAC,uBAAuB,GAAG,uBAAuB,CAAC;IAEzD;;;;;;;OAOG;IACH,MAAM,CAAC,KAAK,CAAC,WAAW;QACpB,IAAI,OAAO,mBAAmB,KAAK,WAAW,EAAE,CAAC;YAC7C,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,IAAI,CAAC,mBAAmB,CAAC,qBAAqB,EAAE,CAAC;YAC7C,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,MAAM,kBAAkB,GACpB,MAAM,mBAAmB,CAAC,qBAAqB,EAAE,CAAC;QACtD,IAAI,CAAC,kBAAkB,CAAC,eAAe,CAAC,EAAE,CAAC;YACvC,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC;IAEQ,QAAQ,CAAS;IACjB,SAAS,CAAS;IAE3B;;;;;OAKG;IACH,YAAY,OAAe,EAAE,QAAgB;QACzC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC;IAC9B,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,MAAM,CAAC,KAA8B;QAIvC,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QACrC,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAElC,IAAI,WAAW,CAAC;QAChB,IAAI,CAAC;YACD,WAAW,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC;gBAC7C,SAAS,EAAE;oBACP,SAAS;oBACT,UAAU,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE;oBAC/C,gBAAgB,EAAE;wBACd,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE;wBAC/B,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE;qBACpC;oBACD,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;oBAC3B,IAAI,EAAE;wBACF,EAAE,EAAE,SAAS;wBACb,IAAI,EAAE,IAAI,CAAC,SAAS;wBACpB,WAAW,EAAE,IAAI,CAAC,SAAS;qBAC9B;iBACJ;aACJ,CAAC,CAAC;QACP,CAAC;QAAC,MAAM,CAAC;YACL,MAAM,IAAI,uBAAuB,EAAE,CAAC;QACxC,CAAC;QAED,eAAe,CAAC,WAAW,CAAC,CAAC;QAE7B,MAAM,GAAG,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;QACtC,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAClC,CAAC;QAED,MAAM,EAAE,GAAG,IAAI,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QAE7C,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YACd,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC;QAC7C,CAAC;QAED,4DAA4D;QAC5D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACzC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC1B,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,GAAG,CACL,EAAgB,EAChB,KAA8B;QAE9B,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QACrC,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC;QAElC,IAAI,SAAS,CAAC;QACd,IAAI,CAAC;YACD,SAAS,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC;gBACxC,SAAS,EAAE;oBACP,gBAAgB,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;oBAC9C,SAAS;oBACT,UAAU,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE;iBAClD;aACJ,CAAC,CAAC;QACP,CAAC;QAAC,MAAM,CAAC;YACL,MAAM,IAAI,uBAAuB,EAAE,CAAC;QACxC,CAAC;QAED,eAAe,CAAC,SAAS,CAAC,CAAC;QAE3B,MAAM,SAAS,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QAC1C,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,IAAI,iBAAiB,EAAE,CAAC;QAClC,CAAC;QAED,OAAO,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,CAAC"}

package/esm/storage/type.d.ts

@@ -0,0 +1,11 @@
+import type { MaybeError } from "@yume-chan/adb";
+import type { MaybePromiseLike } from "@yume-chan/async";
+export interface TangoKey {
+    privateKey: Uint8Array;
+    name: string | undefined;
+}
+export interface TangoKeyStorage {
+    save(privateKey: Uint8Array, name: string | undefined): MaybePromiseLike<undefined>;
+    load(): Iterable<MaybeError<TangoKey>> | AsyncIterable<MaybeError<TangoKey>>;
+}
+//# sourceMappingURL=type.d.ts.map

package/esm/storage/type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"type.d.ts","sourceRoot":"","sources":["../../src/storage/type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEzD,MAAM,WAAW,QAAQ;IACrB,UAAU,EAAE,UAAU,CAAC;IACvB,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;CAC5B;AAED,MAAM,WAAW,eAAe;IAC5B,IAAI,CACA,UAAU,EAAE,UAAU,EACtB,IAAI,EAAE,MAAM,GAAG,SAAS,GACzB,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAE/B,IAAI,IACE,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,GAC9B,aAAa,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC;CAC7C"}

package/esm/storage/type.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=type.js.map

package/esm/storage/type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"type.js","sourceRoot":"","sources":["../../src/storage/type.ts"],"names":[],"mappings":""}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yume-chan/adb-credential-web",
-  "version": "2.1.0",
+  "version": "3.0.0-beta.0",
   "description": "Credential Store for `@yume-chan/adb` using WebCrypto and IndexedDB APIs.",
   "keywords": [
     "adb"
@@ -25,16 +25,19 @@
   "types": "esm/index.d.ts",
   "sideEffects": false,
   "dependencies": {
-    "@yume-chan/adb": "^2.1.0"
+    "@yume-chan/async": "^4.1.3",
+    "@yume-chan/adb": "3.0.0-beta.0",
+    "@yume-chan/stream-extra": "3.0.0-beta.0",
+    "@yume-chan/struct": "3.0.0-beta.0"
   },
   "devDependencies": {
-    "prettier": "^3.5.3",
-    "typescript": "^5.8.3",
+    "prettier": "^3.8.4",
+    "typescript": "^6.0.3",
     "@yume-chan/eslint-config": "^1.0.0",
     "@yume-chan/tsconfig": "^1.0.0"
   },
   "scripts": {
-    "build": "tsc -b tsconfig.build.json",
+    "build": "tsc -p tsconfig.build.json",
     "lint": "run-eslint && prettier src/**/*.ts --write --tab-width 4"
   }
 }