ftown 0.20.9 → 0.21.0

package/dist/security/ledger/pairing.d.ts

@@ -0,0 +1,81 @@
+import type { EndpointIdentity } from '../protocol.js';
+import type { Ledger, LedgerBridge, LedgerCheckpoint } from './protocol.js';
+export interface BridgePairRequest {
+    version: 2;
+    /** 32 random bytes, base64url. */
+    requestId: string;
+    bridgeId: string;
+    /** Raw uncompressed ECDH P-256 point, 65 bytes, base64url. */
+    endpointPublicKey: string;
+    /** Raw uncompressed ECDSA P-256 point, 65 bytes, base64url. */
+    authPublicKey: string;
+    label: string;
+    expiresAt: number;
+}
+export interface BridgePairLink {
+    request: BridgePairRequest;
+    /** 32 random bytes, base64url. Fragment only: it never reaches the server. */
+    secret: string;
+}
+export interface BridgePairRequestInput {
+    bridgeId: string;
+    endpointPublicKey: string;
+    authPublicKey: string;
+    label: string;
+    now?: number;
+    lifetimeMs?: number;
+}
+/** What the secret holder approved: the account and the ledger head at approval time. */
+export interface PairApproval {
+    accountId: string;
+    head: string;
+}
+/** Revocations a replica has seen in any verified chain of the account (see ledgerRevocations / applyRevocations). */
+export interface PairStickyRevocations {
+    deviceIds: string[];
+    bridgeIds: string[];
+}
+/** Default and maximum lifetime of a pairing request. */
+export declare const PAIR_LIFETIME_MS = 600000;
+/** Fragment prefix of the pairing URL; parsePairLink accepts the value with or without it. */
+export declare const PAIR_FRAGMENT_PREFIX = "#req=";
+/** A fresh request for this bridge, with a random requestId and secret. Throws Error('invalid_pair_link') on invalid input. */
+export declare function createBridgePairRequest(input: BridgePairRequestInput): BridgePairLink;
+/** The approving browser's add_bridge payload. Throws Error('secure_context_required') without WebCrypto, Error('invalid_pair_link') on invalid input. */
+export declare function bridgeFromPairRequest(request: BridgePairRequest, accountId: string, approvedAt: number): Promise<LedgerBridge>;
+/** Compact base64url JSON of the link: the fragment value after PAIR_FRAGMENT_PREFIX. Throws Error('invalid_pair_link'). */
+export declare function encodePairLink(link: BridgePairLink): string;
+/** Strict parse of the fragment, with or without the leading '#req='. Does not check expiry. Throws Error('invalid_pair_link'). */
+export declare function parsePairLink(fragment: string): BridgePairLink;
+/**
+ * Six decimal digits, shown by the bridge and by the approving page: SHA-256(UTF-8('ftown-pair-code-v2\n' + canonical(request))),
+ * first 4 bytes as a big-endian uint32, mod 10^6, zero-padded. Bias: 2^32 = 4294 * 10^6 + 967296, so codes below 967296 occur with
+ * probability 4295/2^32 and the rest 4294/2^32, a relative skew of 1/4294 (about 0.02%), negligible for a human comparison.
+ * Throws Error('secure_context_required') without WebCrypto, Error('invalid_pair_link') on a malformed request.
+ */
+export declare function pairComparisonCode(request: BridgePairRequest): Promise<string>;
+/**
+ * Browser side. Verifies the ledger and runs the same checks as confirmPairedLedger at its last head, then seals
+ * {version:2, requestId, accountId, head, proof} (no ledger) to the bridge's endpoint key, authenticated by `sender`.
+ * Returns the opaque string stored in the pair mailbox. Throws Error('secure_context_required') without WebCrypto,
+ * Error('invalid_pair_link') for a malformed or expired link, SecurityError from crypto.ts as is, else Error('invalid_pair_approval').
+ */
+export declare function sealPairApproval(link: BridgePairLink, ledger: Ledger, sender: EndpointIdentity, now?: number): Promise<string>;
+/**
+ * Bridge side, step 1. `identity` is the bridge's own endpoint identity (any pre-pairing ownerId; it is rebound to the account here).
+ * Never trusts the sender endpoint for authorization: it only authenticates the HPKE envelope. The authority is the HMAC proof of the
+ * link secret, which the server never sees, binding {accountId, head} to this request; step 2 (confirmPairedLedger) then requires a
+ * passkey-signed ledger of that account and head. A server can therefore not bind this bridge to another account.
+ * Throws Error('secure_context_required') without WebCrypto; every other failure throws Error('invalid_pair_approval').
+ */
+export declare function openPairApproval(sealed: string, link: BridgePairLink, identity: EndpointIdentity, now?: number): Promise<PairApproval>;
+/**
+ * Bridge side, step 2, on the ledger fetched from the server after openPairApproval. Verifies it from genesis and requires: its
+ * accountId equals approval.accountId; the chain contains approval.head (it may have grown since); this request's bridge
+ * (bridgeId, endpoint id, authPublicKey) is a member of applyRevocations(checkpoint, sticky).bridges, with its add_bridge at or before
+ * approval.head. `sticky` is every revocation this replica has seen for the account (default: the chain's own, ledgerRevocations).
+ * Returns the RAW checkpoint of the chain (never the sticky-applied one, which must not be used as a chooseLedger cache).
+ * The link's expiry is not rechecked: openPairApproval already enforced it.
+ * Throws Error('secure_context_required') without WebCrypto; every other failure throws Error('invalid_pair_approval').
+ */
+export declare function confirmPairedLedger(link: BridgePairLink, approval: PairApproval, ledger: Ledger, now?: number, sticky?: PairStickyRevocations): Promise<LedgerCheckpoint>;

package/dist/security/ledger/pairing.js

@@ -0,0 +1,414 @@
+/*
+ * Bridge pairing by link (DESIGN 3.3; contract "Decision 2026-11-09"). The bridge prints `https://<origin>/pair#req=<encodePairLink(link)>`;
+ * the secret lives only in the fragment. A passkey holder opens it, compares the 6-digit code, signs an add_bridge built by
+ * bridgeFromPairRequest, and seals {requestId, accountId, head, proof} to the bridge's endpoint key, where proof is an HMAC of the
+ * secret over accountId, head and requestId. The bridge opens it (openPairApproval), fetches the ledger from the server, and accepts
+ * it only through confirmPairedLedger: verified from genesis, of exactly that account, containing the approved head, and adding this
+ * request's bridge at or before that head, never revoked since.
+ * ES2017 and WebCrypto only: this file is also compiled by the UI.
+ */
+import { open, parseSecureEnvelope, seal, SecurityError } from '../crypto.js';
+import { accountIdOf, applyRevocations, ledgerHead, ledgerRevocations, parseLedger, verifyLedger } from './ledger.js';
+import { LEDGER_LIMITS } from './protocol.js';
+/** Default and maximum lifetime of a pairing request. */
+export const PAIR_LIFETIME_MS = 600000;
+/** Fragment prefix of the pairing URL; parsePairLink accepts the value with or without it. */
+export const PAIR_FRAGMENT_PREFIX = '#req=';
+const LINK_ERROR = 'invalid_pair_link';
+const APPROVAL_ERROR = 'invalid_pair_approval';
+const SECURE_CONTEXT_ERROR = 'secure_context_required';
+const CODE_DOMAIN = 'ftown-pair-code-v2\n';
+const PROOF_DOMAIN = 'ftown-pair-proof-v2\n';
+const CHANNEL_PREFIX = 'ftown-pair:';
+const MAX_TIME = 253402300799999;
+const MAX_LINK_BYTES = 2048;
+const MAX_LINK_CHARS = Math.ceil(MAX_LINK_BYTES * 4 / 3);
+/** The sealed bundle is a few hundred bytes; the HPKE envelope and sender endpoint stay far below this bound. */
+const MAX_SEALED_CHARS = 8192;
+const REQUEST_KEYS = ['version', 'requestId', 'bridgeId', 'endpointPublicKey', 'authPublicKey', 'label', 'expiresAt'];
+const BUNDLE_KEYS = ['version', 'requestId', 'accountId', 'head', 'proof'];
+const ENDPOINT_KINDS = ['bridge', 'browser', 'local-cli'];
+const encoder = new TextEncoder();
+/** Internal only: every public function catches it and throws its own stable Error message instead. */
+function malformed() {
+    throw new Error('malformed');
+}
+function linkError() {
+    return new Error(LINK_ERROR);
+}
+function approvalError() {
+    return new Error(APPROVAL_ERROR);
+}
+/** WebCrypto's subtle API exists only in secure contexts (HTTPS or localhost); http LAN pages must say so, not "invalid link". */
+function requireSecureContext() {
+    if (typeof crypto === 'undefined' || !crypto || !crypto.subtle)
+        throw new Error(SECURE_CONTEXT_ERROR);
+}
+function isPlain(value) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value))
+        return false;
+    const prototype = Object.getPrototypeOf(value);
+    return prototype === null || Object.getPrototypeOf(prototype) === null;
+}
+function exact(value, keys) {
+    if (!isPlain(value))
+        return malformed();
+    const own = Object.keys(value);
+    if (own.length !== keys.length || own.some(key => keys.indexOf(key) === -1))
+        return malformed();
+    return value;
+}
+function b64url(data) {
+    let binary = '';
+    for (let index = 0; index < data.length; index += 1)
+        binary += String.fromCharCode(data[index]);
+    return btoa(binary).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/, '');
+}
+/** Canonical unpadded base64url only; the length bound is checked before decoding. */
+function decode(value, min, max) {
+    if (typeof value !== 'string' || value.length > Math.ceil(max * 4 / 3) || !/^[A-Za-z0-9_-]+$/.test(value))
+        return malformed();
+    let binary;
+    try {
+        binary = atob(value.replace(/-/g, '+').replace(/_/g, '/'));
+    }
+    catch {
+        return malformed();
+    }
+    if (binary.length < min || binary.length > max)
+        return malformed();
+    const result = new Uint8Array(binary.length);
+    for (let index = 0; index < binary.length; index += 1)
+        result[index] = binary.charCodeAt(index);
+    if (b64url(result) !== value)
+        return malformed();
+    return result;
+}
+const fingerprint = (value) => b64url(decode(value, 32, 32));
+function point(value) {
+    const raw = decode(value, 65, 65);
+    return raw[0] === 4 ? b64url(raw) : malformed();
+}
+function token(value) {
+    return typeof value === 'string' && /^[A-Za-z0-9_-]{1,200}$/.test(value) ? value : malformed();
+}
+/** Same rule as the ledger's labels: at most 200 UTF-16 units; no C0/C1 controls, zero-width or bidi controls, BOM, unpaired surrogates. */
+function label(value) {
+    if (typeof value !== 'string' || value.length > LEDGER_LIMITS.maxLabelLength)
+        return malformed();
+    return /[\u0000-\u001f\u007f-\u009f\u200b-\u200f\u202a-\u202e\u2066-\u2069\ufeff\ud800-\udfff]/u.test(value) ? malformed() : value;
+}
+function time(value) {
+    return typeof value === 'number' && Number.isSafeInteger(value) && value >= 0 && value <= MAX_TIME ? value : malformed();
+}
+function random() {
+    return b64url(crypto.getRandomValues(new Uint8Array(32)));
+}
+function canonical(value) {
+    if (value === null || typeof value === 'boolean' || typeof value === 'string')
+        return JSON.stringify(value);
+    if (typeof value === 'number')
+        return Number.isFinite(value) ? JSON.stringify(value) : malformed();
+    if (Array.isArray(value)) {
+        const items = value;
+        return `[${items.map(canonical).join(',')}]`;
+    }
+    if (!isPlain(value))
+        return malformed();
+    const record = value;
+    return `{${Object.keys(record).sort().map(key => `${JSON.stringify(key)}:${canonical(record[key])}`).join(',')}}`;
+}
+async function sha256(data) {
+    return new Uint8Array(await crypto.subtle.digest('SHA-256', data));
+}
+function sameBytes(left, right) {
+    if (left.length !== right.length)
+        return false;
+    let difference = 0;
+    for (let index = 0; index < left.length; index += 1)
+        difference |= left[index] ^ right[index];
+    return difference === 0;
+}
+/** Strict request shape; returns a rebuilt copy that shares nothing with the input. */
+function requestShape(value) {
+    const record = exact(value, REQUEST_KEYS);
+    if (record.version !== 2)
+        return malformed();
+    const request = {
+        version: 2, requestId: fingerprint(record.requestId), bridgeId: token(record.bridgeId),
+        endpointPublicKey: point(record.endpointPublicKey), authPublicKey: point(record.authPublicKey),
+        label: label(record.label), expiresAt: time(record.expiresAt),
+    };
+    // The ledger refuses a member whose two keys are equal; such a request could never be approved.
+    return request.endpointPublicKey === request.authPublicKey ? malformed() : request;
+}
+function linkShape(value) {
+    const record = exact(value, ['request', 'secret']);
+    return { request: requestShape(record.request), secret: fingerprint(record.secret) };
+}
+function approvalShape(value) {
+    const record = exact(value, ['accountId', 'head']);
+    return { accountId: fingerprint(record.accountId), head: fingerprint(record.head) };
+}
+/** The bridge's endpoint once it belongs to `accountId`: the exact value the add_bridge must carry. */
+async function bridgeEndpoint(request, accountId) {
+    const id = b64url(await sha256(decode(request.endpointPublicKey, 65, 65)));
+    return { version: 1, id, ownerId: fingerprint(accountId), kind: 'bridge', publicKey: request.endpointPublicKey };
+}
+function channelOf(request) {
+    return CHANNEL_PREFIX + request.requestId;
+}
+/** HMAC-SHA256(secret, PROOF_DOMAIN + accountId + '\n' + head + '\n' + requestId). */
+async function secretProof(secret, accountId, head, requestId) {
+    const key = await crypto.subtle.importKey('raw', decode(secret, 32, 32), { name: 'HMAC', hash: 'SHA-256' }, false, ['sign']);
+    const message = encoder.encode(PROOF_DOMAIN + accountId + '\n' + head + '\n' + requestId);
+    return new Uint8Array(await crypto.subtle.sign('HMAC', key, message));
+}
+/**
+ * The ledger checks shared by both sides, on a ledger that already verified into `checkpoint`. Returns the endpoint to seal to.
+ * - The ledger is the approved account's (genesis hash equals approval.accountId).
+ * - The chain contains approval.head (genesis or any transition); it may have grown since.
+ * - This request's bridge (bridgeId, endpoint id = SHA-256(endpointPublicKey), authPublicKey) is a POSITIVE member of the trusted
+ *   roster: the final checkpoint minus every sticky revocation, so a bridge revoked in any chain this replica saw never pairs.
+ *   (verifyLedger already bound endpoint id to its key, owner to the account and kind to 'bridge'.)
+ * - Its add_bridge does not come after approval.head.
+ */
+async function confirmVerified(request, approval, ledger, checkpoint, sticky) {
+    const accountId = await accountIdOf(ledger.genesis.payload);
+    if (accountId !== approval.accountId)
+        return malformed();
+    // heads[0] is the genesis head; heads[i + 1] is the head of transitions[i]. Heads are unique within one chain.
+    const heads = [accountId];
+    for (const record of ledger.transitions)
+        heads.push(await ledgerHead(record.payload));
+    if (heads.indexOf(approval.head) === -1)
+        return malformed();
+    const expected = await bridgeEndpoint(request, accountId);
+    const trusted = applyRevocations(checkpoint, sticky).bridges;
+    if (!trusted.some(item => item.bridgeId === request.bridgeId && item.endpoint.id === expected.id
+        && item.authPublicKey === request.authPublicKey))
+        return malformed();
+    // Index of the add_bridge; a roster member always has one (an absent one would count as after every head).
+    let addedAt = ledger.transitions.length;
+    for (let index = ledger.transitions.length - 1; index >= 0; index -= 1) {
+        const operation = ledger.transitions[index].payload.operation;
+        if (operation.type === 'add_bridge' && operation.bridge.bridgeId === request.bridgeId)
+            addedAt = index;
+    }
+    // The approval must not predate the add_bridge: approval.head is not among the heads up to the record before it.
+    if (heads.slice(0, addedAt + 1).indexOf(approval.head) !== -1)
+        return malformed();
+    return expected;
+}
+function senderShape(value) {
+    const record = exact(value, ['version', 'id', 'ownerId', 'kind', 'publicKey']);
+    const kind = ENDPOINT_KINDS.filter(item => item === record.kind)[0];
+    if (record.version !== 1 || kind === undefined || typeof record.ownerId !== 'string')
+        return malformed();
+    // seal/open re-check the owner syntax and id = SHA-256(publicKey).
+    return { version: 1, id: fingerprint(record.id), ownerId: record.ownerId, kind, publicKey: point(record.publicKey) };
+}
+function sealedShape(value) {
+    if (typeof value !== 'string' || value.length > MAX_SEALED_CHARS)
+        return malformed();
+    let parsed;
+    try {
+        parsed = JSON.parse(value);
+    }
+    catch {
+        return malformed();
+    }
+    const record = exact(parsed, ['version', 'sender', 'envelope']);
+    if (record.version !== 2)
+        return malformed();
+    return { sender: senderShape(record.sender), envelope: parseSecureEnvelope(record.envelope) };
+}
+/** A fresh request for this bridge, with a random requestId and secret. Throws Error('invalid_pair_link') on invalid input. */
+export function createBridgePairRequest(input) {
+    try {
+        const now = input.now === undefined ? Date.now() : time(input.now);
+        const lifetime = input.lifetimeMs === undefined ? PAIR_LIFETIME_MS : input.lifetimeMs;
+        if (!Number.isSafeInteger(lifetime) || lifetime <= 0 || lifetime > PAIR_LIFETIME_MS)
+            return malformed();
+        return linkShape({
+            request: {
+                version: 2, requestId: random(), bridgeId: input.bridgeId, endpointPublicKey: input.endpointPublicKey,
+                authPublicKey: input.authPublicKey, label: input.label, expiresAt: now + lifetime,
+            },
+            secret: random(),
+        });
+    }
+    catch {
+        throw linkError();
+    }
+}
+/** The approving browser's add_bridge payload. Throws Error('secure_context_required') without WebCrypto, Error('invalid_pair_link') on invalid input. */
+export async function bridgeFromPairRequest(request, accountId, approvedAt) {
+    requireSecureContext();
+    try {
+        const parsed = requestShape(request);
+        return {
+            bridgeId: parsed.bridgeId, endpoint: await bridgeEndpoint(parsed, accountId), authPublicKey: parsed.authPublicKey,
+            label: parsed.label, approvedAt: time(approvedAt),
+        };
+    }
+    catch {
+        throw linkError();
+    }
+}
+/** Compact base64url JSON of the link: the fragment value after PAIR_FRAGMENT_PREFIX. Throws Error('invalid_pair_link'). */
+export function encodePairLink(link) {
+    try {
+        const data = encoder.encode(JSON.stringify(linkShape(link)));
+        return data.byteLength > MAX_LINK_BYTES ? malformed() : b64url(data);
+    }
+    catch {
+        throw linkError();
+    }
+}
+/** Strict parse of the fragment, with or without the leading '#req='. Does not check expiry. Throws Error('invalid_pair_link'). */
+export function parsePairLink(fragment) {
+    try {
+        if (typeof fragment !== 'string')
+            return malformed();
+        const text = fragment.indexOf(PAIR_FRAGMENT_PREFIX) === 0 ? fragment.slice(PAIR_FRAGMENT_PREFIX.length) : fragment;
+        if (text.length > MAX_LINK_CHARS)
+            return malformed();
+        const data = decode(text, 1, MAX_LINK_BYTES);
+        return linkShape(JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(data)));
+    }
+    catch {
+        throw linkError();
+    }
+}
+/**
+ * Six decimal digits, shown by the bridge and by the approving page: SHA-256(UTF-8('ftown-pair-code-v2\n' + canonical(request))),
+ * first 4 bytes as a big-endian uint32, mod 10^6, zero-padded. Bias: 2^32 = 4294 * 10^6 + 967296, so codes below 967296 occur with
+ * probability 4295/2^32 and the rest 4294/2^32, a relative skew of 1/4294 (about 0.02%), negligible for a human comparison.
+ * Throws Error('secure_context_required') without WebCrypto, Error('invalid_pair_link') on a malformed request.
+ */
+export async function pairComparisonCode(request) {
+    requireSecureContext();
+    let message;
+    try {
+        message = encoder.encode(CODE_DOMAIN + canonical(requestShape(request)));
+    }
+    catch {
+        throw linkError();
+    }
+    const digest = await sha256(message);
+    const value = digest[0] * 16777216 + digest[1] * 65536 + digest[2] * 256 + digest[3];
+    const code = String(value % 1000000);
+    return '000000'.slice(code.length) + code;
+}
+/**
+ * Browser side. Verifies the ledger and runs the same checks as confirmPairedLedger at its last head, then seals
+ * {version:2, requestId, accountId, head, proof} (no ledger) to the bridge's endpoint key, authenticated by `sender`.
+ * Returns the opaque string stored in the pair mailbox. Throws Error('secure_context_required') without WebCrypto,
+ * Error('invalid_pair_link') for a malformed or expired link, SecurityError from crypto.ts as is, else Error('invalid_pair_approval').
+ */
+export async function sealPairApproval(link, ledger, sender, now = Date.now()) {
+    requireSecureContext();
+    let parsed;
+    let at;
+    try {
+        parsed = linkShape(link);
+        at = time(now);
+        // The envelope expires with the request; a request that is already due cannot be sealed.
+        if (at >= parsed.request.expiresAt)
+            return malformed();
+    }
+    catch {
+        throw linkError();
+    }
+    try {
+        const request = parsed.request;
+        const verifiedLedger = parseLedger(ledger);
+        const checkpoint = await verifyLedger(verifiedLedger, at);
+        const approval = { accountId: checkpoint.accountId, head: checkpoint.head };
+        const recipient = await confirmVerified(request, approval, verifiedLedger, checkpoint, ledgerRevocations(verifiedLedger));
+        const proof = b64url(await secretProof(parsed.secret, approval.accountId, approval.head, request.requestId));
+        // The sender only authenticates the HPKE envelope; it is rebound to the account like the recipient.
+        const from = { endpoint: { ...sender.endpoint, ownerId: approval.accountId }, keyPair: sender.keyPair };
+        const header = {
+            type: 'ftown_encrypted', version: 1, senderId: from.endpoint.id, recipientId: recipient.id, ownerId: approval.accountId,
+            bridgeId: request.bridgeId, channel: channelOf(request), purpose: 'enrolled', messageId: request.requestId,
+            createdAt: at, expiresAt: request.expiresAt, receiverEpoch: null,
+        };
+        const bundle = { version: 2, requestId: request.requestId, accountId: approval.accountId, head: approval.head, proof };
+        const envelope = await seal(from, recipient, header, encoder.encode(JSON.stringify(bundle)));
+        return JSON.stringify({ version: 2, sender: from.endpoint, envelope });
+    }
+    catch (error) {
+        if (error instanceof SecurityError)
+            throw error;
+        throw approvalError();
+    }
+}
+/**
+ * Bridge side, step 1. `identity` is the bridge's own endpoint identity (any pre-pairing ownerId; it is rebound to the account here).
+ * Never trusts the sender endpoint for authorization: it only authenticates the HPKE envelope. The authority is the HMAC proof of the
+ * link secret, which the server never sees, binding {accountId, head} to this request; step 2 (confirmPairedLedger) then requires a
+ * passkey-signed ledger of that account and head. A server can therefore not bind this bridge to another account.
+ * Throws Error('secure_context_required') without WebCrypto; every other failure throws Error('invalid_pair_approval').
+ */
+export async function openPairApproval(sealed, link, identity, now = Date.now()) {
+    requireSecureContext();
+    try {
+        const { request, secret } = linkShape(link);
+        const at = time(now);
+        if (at > request.expiresAt)
+            return malformed();
+        if (identity.endpoint.publicKey !== request.endpointPublicKey)
+            return malformed();
+        const wire = sealedShape(sealed);
+        const envelope = wire.envelope;
+        if (envelope.messageId !== request.requestId || envelope.receiverEpoch !== null)
+            return malformed();
+        const recipient = await bridgeEndpoint(request, envelope.ownerId);
+        const data = await open({ endpoint: recipient, keyPair: identity.keyPair }, wire.sender, envelope, {
+            ownerId: envelope.ownerId, bridgeId: request.bridgeId, channel: channelOf(request), recipientId: recipient.id, purpose: 'enrolled',
+        });
+        const bundle = exact(JSON.parse(new TextDecoder('utf-8', { fatal: true }).decode(data)), BUNDLE_KEYS);
+        if (bundle.version !== 2)
+            return malformed();
+        if (bundle.requestId !== request.requestId)
+            return malformed();
+        const accountId = fingerprint(bundle.accountId);
+        const head = fingerprint(bundle.head);
+        if (accountId !== envelope.ownerId)
+            return malformed();
+        const proof = decode(bundle.proof, 32, 32);
+        const expected = await secretProof(secret, accountId, head, request.requestId);
+        if (!sameBytes(expected, proof))
+            return malformed();
+        return { accountId, head };
+    }
+    catch {
+        throw approvalError();
+    }
+}
+/**
+ * Bridge side, step 2, on the ledger fetched from the server after openPairApproval. Verifies it from genesis and requires: its
+ * accountId equals approval.accountId; the chain contains approval.head (it may have grown since); this request's bridge
+ * (bridgeId, endpoint id, authPublicKey) is a member of applyRevocations(checkpoint, sticky).bridges, with its add_bridge at or before
+ * approval.head. `sticky` is every revocation this replica has seen for the account (default: the chain's own, ledgerRevocations).
+ * Returns the RAW checkpoint of the chain (never the sticky-applied one, which must not be used as a chooseLedger cache).
+ * The link's expiry is not rechecked: openPairApproval already enforced it.
+ * Throws Error('secure_context_required') without WebCrypto; every other failure throws Error('invalid_pair_approval').
+ */
+export async function confirmPairedLedger(link, approval, ledger, now = Date.now(), sticky) {
+    requireSecureContext();
+    try {
+        const { request } = linkShape(link);
+        const approved = approvalShape(approval);
+        const verifiedLedger = parseLedger(ledger);
+        const checkpoint = await verifyLedger(verifiedLedger, time(now));
+        await confirmVerified(request, approved, verifiedLedger, checkpoint, sticky === undefined ? ledgerRevocations(verifiedLedger) : sticky);
+        return checkpoint;
+    }
+    catch {
+        throw approvalError();
+    }
+}
+//# sourceMappingURL=pairing.js.map

package/dist/security/ledger/pairing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairing.js","sourceRoot":"","sources":["../../../src/security/ledger/pairing.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE9E,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,UAAU,EAAE,iBAAiB,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACtH,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAuC9C,yDAAyD;AACzD,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AACvC,8FAA8F;AAC9F,MAAM,CAAC,MAAM,oBAAoB,GAAG,OAAO,CAAC;AAE5C,MAAM,UAAU,GAAG,mBAAmB,CAAC;AACvC,MAAM,cAAc,GAAG,uBAAuB,CAAC;AAC/C,MAAM,oBAAoB,GAAG,yBAAyB,CAAC;AACvD,MAAM,WAAW,GAAG,sBAAsB,CAAC;AAC3C,MAAM,YAAY,GAAG,uBAAuB,CAAC;AAC7C,MAAM,cAAc,GAAG,aAAa,CAAC;AACrC,MAAM,QAAQ,GAAG,eAAe,CAAC;AACjC,MAAM,cAAc,GAAG,IAAI,CAAC;AAC5B,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,cAAc,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AACzD,iHAAiH;AACjH,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,YAAY,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,mBAAmB,EAAE,eAAe,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;AACtH,MAAM,WAAW,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AAC3E,MAAM,cAAc,GAA4B,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;AACnF,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAElC,uGAAuG;AACvG,SAAS,SAAS;IAChB,MAAM,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;AAC/B,CAAC;AACD,SAAS,SAAS;IAChB,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;AAC/B,CAAC;AACD,SAAS,aAAa;IACpB,OAAO,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;AACnC,CAAC;AACD,kIAAkI;AAClI,SAAS,oBAAoB;IAC3B,IAAI,OAAO,MAAM,KAAK,WAAW,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;AACxG,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,SAAS,GAAY,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IACxD,OAAO,SAAS,KAAK,IAAI,IAAI,MAAM,CAAC,cAAc,CAAC,SAAS,CAAC,KAAK,IAAI,CAAC;AACzE,CAAC;AACD,SAAS,KAAK,CAAC,KAAc,EAAE,IAAuB;IACpD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,EAAE,CAAC;IACxC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,EAAE,CAAC;IAChG,OAAO,KAAK,CAAC;AACf,CAAC;AACD,SAAS,MAAM,CAAC,IAAgB;IAC9B,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAChG,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AACjF,CAAC;AACD,sFAAsF;AACtF,SAAS,MAAM,CAAC,KAAc,EAAE,GAAW,EAAE,GAAW;IACtD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,EAAE,CAAC;IAC9H,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,EAAE,CAAC;IAAC,CAAC;IACjG,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG;QAAE,OAAO,SAAS,EAAE,CAAC;IACnE,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC;QAAE,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IAChG,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,KAAK;QAAE,OAAO,SAAS,EAAE,CAAC;IACjD,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,MAAM,WAAW,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AAC9E,SAAS,KAAK,CAAC,KAAc;IAC3B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAClC,OAAO,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;AAClD,CAAC;AACD,SAAS,KAAK,CAAC,KAAc;IAC3B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;AACjG,CAAC;AACD,4IAA4I;AAC5I,SAAS,KAAK,CAAC,KAAc;IAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,aAAa,CAAC,cAAc;QAAE,OAAO,SAAS,EAAE,CAAC;IACjG,OAAO,yFAAyF,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AACrI,CAAC;AACD,SAAS,IAAI,CAAC,KAAc;IAC1B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;AAC3H,CAAC;AACD,SAAS,MAAM;IACb,OAAO,MAAM,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAC5D,CAAC;AACD,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC5G,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IACnG,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,KAAK,GAAuB,KAAK,CAAC;QACxC,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC/C,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,KAAK,CAAC;IACrB,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AACpH,CAAC;AACD,KAAK,UAAU,MAAM,CAAC,IAA6B;IACjD,OAAO,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC;AACrE,CAAC;AACD,SAAS,SAAS,CAAC,IAAgB,EAAE,KAAiB;IACpD,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC;QAAE,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IAC9F,OAAO,UAAU,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED,uFAAuF;AACvF,SAAS,YAAY,CAAC,KAAc;IAClC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC;QAAE,OAAO,SAAS,EAAE,CAAC;IAC7C,MAAM,OAAO,GAAsB;QACjC,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;QACtF,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC;QAC9F,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;KAC9D,CAAC;IACF,gGAAgG;IAChG,OAAO,OAAO,CAAC,iBAAiB,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;AACrF,CAAC;AACD,SAAS,SAAS,CAAC,KAAc;IAC/B,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;IACnD,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;AACvF,CAAC;AACD,SAAS,aAAa,CAAC,KAAc;IACnC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;AACtF,CAAC;AAED,uGAAuG;AACvG,KAAK,UAAU,cAAc,CAAC,OAA0B,EAAE,SAAiB;IACzE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3E,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,WAAW,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,iBAAiB,EAAE,CAAC;AACnH,CAAC;AACD,SAAS,SAAS,CAAC,OAA0B;IAC3C,OAAO,cAAc,GAAG,OAAO,CAAC,SAAS,CAAC;AAC5C,CAAC;AACD,sFAAsF;AACtF,KAAK,UAAU,WAAW,CAAC,MAAc,EAAE,SAAiB,EAAE,IAAY,EAAE,SAAiB;IAC3F,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7H,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,GAAG,SAAS,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IAC1F,OAAO,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;AACxE,CAAC;AACD;;;;;;;;GAQG;AACH,KAAK,UAAU,eAAe,CAC5B,OAA0B,EAAE,QAAsB,EAAE,MAAc,EAAE,UAA4B,EAAE,MAA6B;IAE/H,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC5D,IAAI,SAAS,KAAK,QAAQ,CAAC,SAAS;QAAE,OAAO,SAAS,EAAE,CAAC;IACzD,+GAA+G;IAC/G,MAAM,KAAK,GAAG,CAAC,SAAS,CAAC,CAAC;IAC1B,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,WAAW;QAAE,KAAK,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;IACtF,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,SAAS,EAAE,CAAC;IAC5D,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC;IAC7D,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE;WAC3F,IAAI,CAAC,aAAa,KAAK,OAAO,CAAC,aAAa,CAAC;QAAE,OAAO,SAAS,EAAE,CAAC;IACvE,2GAA2G;IAC3G,IAAI,OAAO,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC;IACxC,KAAK,IAAI,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACvE,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QAC9D,IAAI,SAAS,CAAC,IAAI,KAAK,YAAY,IAAI,SAAS,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ;YAAE,OAAO,GAAG,KAAK,CAAC;IACzG,CAAC;IACD,iHAAiH;IACjH,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAE,OAAO,SAAS,EAAE,CAAC;IAClF,OAAO,QAAQ,CAAC;AAClB,CAAC;AACD,SAAS,WAAW,CAAC,KAAc;IACjC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,SAAS,EAAE,CAAC;IACzG,mEAAmE;IACnE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;AACvH,CAAC;AACD,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,gBAAgB;QAAE,OAAO,SAAS,EAAE,CAAC;IACrF,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,EAAE,CAAC;IAAC,CAAC;IACjE,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;IAChE,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC;QAAE,OAAO,SAAS,EAAE,CAAC;IAC7C,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;AAChG,CAAC;AAED,+HAA+H;AAC/H,MAAM,UAAU,uBAAuB,CAAC,KAA6B;IACnE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnE,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC;QACtF,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,QAAQ,IAAI,CAAC,IAAI,QAAQ,GAAG,gBAAgB;YAAE,OAAO,SAAS,EAAE,CAAC;QACxG,OAAO,SAAS,CAAC;YACf,OAAO,EAAE;gBACP,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;gBACrG,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,GAAG,GAAG,QAAQ;aAClF;YACD,MAAM,EAAE,MAAM,EAAE;SACjB,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,SAAS,EAAE,CAAC;IACpB,CAAC;AACH,CAAC;AAED,0JAA0J;AAC1J,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAA0B,EAAE,SAAiB,EAAE,UAAkB;IAC3G,oBAAoB,EAAE,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACrC,OAAO;YACL,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,aAAa;YACjH,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC;SAClD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,SAAS,EAAE,CAAC;IACpB,CAAC;AACH,CAAC;AAED,4HAA4H;AAC5H,MAAM,UAAU,cAAc,CAAC,IAAoB;IACjD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7D,OAAO,IAAI,CAAC,UAAU,GAAG,cAAc,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,SAAS,EAAE,CAAC;IACpB,CAAC;AACH,CAAC;AAED,mIAAmI;AACnI,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,IAAI,CAAC;QACH,IAAI,OAAO,QAAQ,KAAK,QAAQ;YAAE,OAAO,SAAS,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;QACnH,IAAI,IAAI,CAAC,MAAM,GAAG,cAAc;YAAE,OAAO,SAAS,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,cAAc,CAAC,CAAC;QAC7C,OAAO,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvF,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,SAAS,EAAE,CAAC;IACpB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,OAA0B;IACjE,oBAAoB,EAAE,CAAC;IACvB,IAAI,OAAgC,CAAC;IACrC,IAAI,CAAC;QACH,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,WAAW,GAAG,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,SAAS,EAAE,CAAC;IACpB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACrF,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,CAAC;IACrC,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC;AAC5C,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAoB,EAAE,MAAc,EAAE,MAAwB,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IAC7H,oBAAoB,EAAE,CAAC;IACvB,IAAI,MAAsB,CAAC;IAC3B,IAAI,EAAU,CAAC;IACf,IAAI,CAAC;QACH,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QACzB,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACf,yFAAyF;QACzF,IAAI,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS;YAAE,OAAO,SAAS,EAAE,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,SAAS,EAAE,CAAC;IACpB,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC/B,MAAM,cAAc,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QAC1D,MAAM,QAAQ,GAAiB,EAAE,SAAS,EAAE,UAAU,CAAC,SAAS,EAAE,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC;QAC1F,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,UAAU,EAAE,iBAAiB,CAAC,cAAc,CAAC,CAAC,CAAC;QAC1H,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;QAC7G,oGAAoG;QACpG,MAAM,IAAI,GAAqB,EAAE,QAAQ,EAAE,EAAE,GAAG,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QAC1H,MAAM,MAAM,GAAmB;YAC7B,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,SAAS;YACvH,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS;YAC1G,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,aAAa,EAAE,IAAI;SACjE,CAAC;QACF,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC;QACvH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC7F,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IACzE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,aAAa;YAAE,MAAM,KAAK,CAAC;QAChD,MAAM,aAAa,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAc,EAAE,IAAoB,EAAE,QAA0B,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IAE1F,oBAAoB,EAAE,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACrB,IAAI,EAAE,GAAG,OAAO,CAAC,SAAS;YAAE,OAAO,SAAS,EAAE,CAAC;QAC/C,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,KAAK,OAAO,CAAC,iBAAiB;YAAE,OAAO,SAAS,EAAE,CAAC;QAClF,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC/B,IAAI,QAAQ,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS,IAAI,QAAQ,CAAC,aAAa,KAAK,IAAI;YAAE,OAAO,SAAS,EAAE,CAAC;QACpG,MAAM,SAAS,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE;YACjG,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,EAAE,OAAO,EAAE,UAAU;SACnI,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;QACtG,IAAI,MAAM,CAAC,OAAO,KAAK,CAAC;YAAE,OAAO,SAAS,EAAE,CAAC;QAC7C,IAAI,MAAM,CAAC,SAAS,KAAK,OAAO,CAAC,SAAS;YAAE,OAAO,SAAS,EAAE,CAAC;QAC/D,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAChD,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACtC,IAAI,SAAS,KAAK,QAAQ,CAAC,OAAO;YAAE,OAAO,SAAS,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3C,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QAC/E,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC;YAAE,OAAO,SAAS,EAAE,CAAC;QACpD,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,aAAa,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAoB,EAAE,QAAsB,EAAE,MAAc,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE,EAAE,MAA8B;IAEtH,oBAAoB,EAAE,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,cAAc,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,cAAc,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACjE,MAAM,eAAe,CAAC,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACxI,OAAO,UAAU,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,aAAa,EAAE,CAAC;IACxB,CAAC;AACH,CAAC"}

package/dist/security/ledger/proof.d.ts

@@ -0,0 +1,24 @@
+import type { LedgerCheckpoint } from './protocol.js';
+export interface AuthProof {
+    accountId: string;
+    kind: 'device' | 'bridge';
+    /** endpoint.id for a device, bridgeId for a bridge. */
+    keyId: string;
+    nonce: string;
+    purpose: 'session' | 'relay';
+    /** Exact server origin. */
+    audience: string;
+    /** Raw r||s, base64url. */
+    signature: string;
+}
+export type AuthProofFields = Omit<AuthProof, 'signature'>;
+export declare function generateAuthKey(extractable: boolean): Promise<{
+    publicKey: string;
+    privateKey: CryptoKey;
+}>;
+export declare function signAuthProof(privateKey: CryptoKey, fields: AuthProofFields): Promise<AuthProof>;
+export declare function parseAuthProof(value: unknown): AuthProof | null;
+export declare function verifyAuthProof(checkpoint: LedgerCheckpoint, proof: AuthProof, expect: {
+    audience: string;
+    purpose: 'session' | 'relay';
+}): Promise<boolean>;