ns-auth-sdk 1.7.0 → 1.8.0

package/dist/index.cjs

@@ -25,7 +25,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 }) : target, mod));
 
 //#endregion
-const require_utils = require('./utils-f_bV5svh.cjs');
+const require_utils = require('./utils-Cu7K7sft.cjs');
 let react = require("react");
 let react_jsx_runtime = require("react/jsx-runtime");
 let isomorphic_dompurify = require("isomorphic-dompurify");
@@ -146,7 +146,7 @@ var AuthService = class {
 	* Check if PRF is supported
 	*/
 	async isPrfSupported() {
-		const { isPrfSupported } = await Promise.resolve().then(() => require("./utils-DlRwlNxK.cjs"));
+		const { isPrfSupported } = await Promise.resolve().then(() => require("./utils-CD_Ibg98.cjs"));
 		return await isPrfSupported();
 	}
 };

package/dist/index.mjs

@@ -1,4 +1,4 @@
-import { t as NosskeyManager } from "./utils-HZ1CkHN-.mjs";
+import { t as NosskeyManager } from "./utils-DoinrauJ.mjs";
 import { useEffect, useState } from "react";
 import { Fragment, jsx, jsxs } from "react/jsx-runtime";
 import DOMPurify from "isomorphic-dompurify";
@@ -118,7 +118,7 @@ var AuthService = class {
 	* Check if PRF is supported
 	*/
 	async isPrfSupported() {
-		const { isPrfSupported } = await import("./utils-B6mbFG4c.mjs");
+		const { isPrfSupported } = await import("./utils-SydXBP7f.mjs");
 		return await isPrfSupported();
 	}
 };

package/dist/utils-CD_Ibg98.cjs

@@ -0,0 +1,3 @@
+const require_utils = require('./utils-Cu7K7sft.cjs');
+
+exports.isPrfSupported = require_utils.isPrfSupported;

package/dist/{utils-f_bV5svh.cjs → utils-Cu7K7sft.cjs}

@@ -396,6 +396,9 @@ var NosskeyManager = class {
 	getCacheOptions() {
 		return this.#keyCache.getCacheOptions();
 	}
+	getCachedSecretKey(credentialId) {
+		return this.#keyCache.getKey(credentialId);
+	}
 	/**
 	* @param credentialId
 	*/
@@ -533,4 +536,4 @@ Object.defineProperty(exports, 'isPrfSupported', {
     return isPrfSupported;
   }
 });
-//# sourceMappingURL=utils-f_bV5svh.cjs.map
+//# sourceMappingURL=utils-Cu7K7sft.cjs.map

package/dist/{utils-HZ1CkHN-.mjs.map → utils-Cu7K7sft.cjs.map}

@@ -1 +1 @@
-{"version":3,"file":"utils-HZ1CkHN-.mjs","names":["#cacheOptions","#cachedEntry","#clearCachedEntry","#scheduleExpiry","#getCachedKeyIfValid","#clearKey","#expiryTimer","#keyCache","#storageOptions","#prfOptions","#loadKeyInfoFromStorage","#currentKeyInfo","#saveKeyInfoToStorage","#clearKey"],"sources":["../src/utils/utils.ts","../src/utils/key-cache.ts","../src/utils/prf-handler.ts","../src/utils/nosskey.ts","../src/utils/crypto-utils.ts"],"sourcesContent":["/**\n * @packageDocumentation\n */\n\n/**\n * @param bytes\n * @returns\n */\nexport function bytesToHex(bytes: Uint8Array): string {\n  const key = '0123456789abcdef';\n  let hex = '';\n  for (let i = 0; i < bytes.length; i++) {\n    const firstNibble = bytes[i] >> 4;\n    const secondNibble = bytes[i] & 15;\n    hex += key[firstNibble] + key[secondNibble];\n  }\n  return hex;\n}\n\n/**\n * @param hex\n * @returns\n */\nexport function hexToBytes(hex: string): Uint8Array {\n  const key = '0123456789abcdef';\n  const bytes = [];\n  let currentByte = 0;\n  let highNibble = true;\n\n  for (let i = 0; i < hex.length; i++) {\n    const charValue = key.indexOf(hex[i].toLowerCase());\n    if (charValue === -1) continue;\n\n    if (highNibble) {\n      currentByte = charValue << 4;\n      highNibble = false;\n    } else {\n      currentByte += charValue;\n      bytes.push(currentByte);\n      highNibble = true;\n    }\n  }\n\n  return new Uint8Array(bytes);\n}\n","/**\n * Key cache management for Nosskey\n * @packageDocumentation\n */\n\nimport type { KeyCacheOptions } from './types.js';\nimport { bytesToHex } from './utils.js';\n\n/**\n * Key cache entry with expiration time\n */\ninterface CacheEntry {\n  id: string;\n  sk: Uint8Array;\n  expireAt: number;\n}\n\n/**\n * Key cache manager for managing temporary secret keys\n */\nexport class KeyCache {\n  #cachedEntry: CacheEntry | null = null;\n\n  #expiryTimer: NodeJS.Timeout | null = null;\n\n  #cacheOptions: KeyCacheOptions = {\n    enabled: false,\n    timeoutMs: 5 * 60 * 1000,\n  };\n\n  /**\n   * KeyCache\n   * @param options\n   */\n  constructor(options?: Partial<KeyCacheOptions>) {\n    if (options) {\n      this.#cacheOptions = { ...this.#cacheOptions, ...options };\n    }\n  }\n\n  /**\n   * @param options\n   */\n  setCacheOptions(options: Partial<KeyCacheOptions>): void {\n    if (Object.keys(options).length > 0 && this.#cachedEntry !== null) {\n      this.clearAllCachedKeys();\n    }\n\n    this.#cacheOptions = { ...this.#cacheOptions, ...options };\n  }\n\n  getCacheOptions(): KeyCacheOptions {\n    return { ...this.#cacheOptions };\n  }\n\n  isEnabled(): boolean {\n    return this.#cacheOptions.enabled;\n  }\n\n  /**\n   * @param credentialId\n   * @param sk\n   */\n  setKey(credentialId: Uint8Array | string, sk: Uint8Array): void {\n    if (!this.#cacheOptions.enabled) return;\n\n    const id = typeof credentialId === 'string' ? credentialId : bytesToHex(credentialId);\n    const timeout =\n      this.#cacheOptions.timeoutMs !== undefined ? this.#cacheOptions.timeoutMs : 5 * 60 * 1000;\n    const expireAt = Date.now() + timeout;\n\n    this.#clearCachedEntry();\n\n    this.#cachedEntry = {\n      id,\n      sk: new Uint8Array(sk),\n      expireAt,\n    };\n\n    try {\n      this.#scheduleExpiry();\n    } catch (error) {\n      this.#clearCachedEntry();\n      throw error;\n    }\n  }\n\n  /**\n   * @param credentialId\n   * @returns undefined\n   */\n  getKey(credentialId: Uint8Array | string): Uint8Array | undefined {\n    if (!this.#cacheOptions.enabled) return undefined;\n\n    const id = typeof credentialId === 'string' ? credentialId : bytesToHex(credentialId);\n    return this.#getCachedKeyIfValid(id);\n  }\n\n  /**\n   * @param credentialId\n   */\n  clearCachedKey(credentialId: Uint8Array | string): void {\n    const id = typeof credentialId === 'string' ? credentialId : bytesToHex(credentialId);\n\n    if (this.#cachedEntry && this.#cachedEntry.id === id) {\n      this.#clearCachedEntry();\n    }\n  }\n\n  clearAllCachedKeys(): void {\n    this.#clearCachedEntry();\n  }\n\n  /**\n   * @param credentialId\n   * @returns undefined\n   */\n  #getCachedKeyIfValid(credentialId: string): Uint8Array | undefined {\n    if (!this.#cachedEntry || this.#cachedEntry.id !== credentialId) {\n      return undefined;\n    }\n\n    if (Date.now() < this.#cachedEntry.expireAt) {\n      return this.#cachedEntry.sk;\n    }\n\n    this.#clearCachedEntry();\n    return undefined;\n  }\n\n  #clearCachedEntry(): void {\n    if (this.#cachedEntry) {\n      this.#clearKey(this.#cachedEntry.sk);\n      this.#cachedEntry = null;\n    }\n\n    if (this.#expiryTimer) {\n      clearTimeout(this.#expiryTimer);\n      this.#expiryTimer = null;\n    }\n  }\n\n  #scheduleExpiry(): void {\n    if (!this.#cachedEntry) return;\n\n    const now = Date.now();\n    const timeToExpiry = this.#cachedEntry.expireAt - now;\n\n    if (timeToExpiry <= 0) {\n      this.#clearCachedEntry();\n      return;\n    }\n\n    this.#expiryTimer = setTimeout(() => {\n      this.#clearCachedEntry();\n    }, timeToExpiry + 1);\n  }\n\n  /**\n   * @param key\n   */\n  #clearKey(key: Uint8Array): void {\n    key?.fill?.(0);\n  }\n}\n","/**\n * PRF (Pseudo-Random Function) handler for WebAuthn\n * @packageDocumentation\n */\n\nimport type { GetPrfSecretOptions, PasskeyCreationOptions } from './types.js';\n\nconst PRF_EVAL_INPUT = new TextEncoder().encode('nostr-pwk');\n\n/**\n * @returns PRF\n */\nexport async function isPrfSupported(): Promise<boolean> {\n  try {\n    const response = await navigator.credentials.get({\n      publicKey: {\n        challenge: crypto.getRandomValues(new Uint8Array(32)),\n        allowCredentials: [],\n        userVerification: 'required',\n        extensions: { prf: { eval: { first: PRF_EVAL_INPUT } } },\n      } as PublicKeyCredentialRequestOptions,\n    });\n\n    if (!response) return false;\n\n    const assertion = response as unknown as {\n      getClientExtensionResults: () => {\n        prf?: {\n          results?: {\n            first?: ArrayBuffer;\n          };\n        };\n      };\n    };\n\n    const res = assertion.getClientExtensionResults()?.prf?.results?.first;\n    return !!res;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * @param options\n * @returns Credential\n */\nexport async function createPasskey(options: PasskeyCreationOptions = {}): Promise<Uint8Array> {\n  // Node\n  const rpName = options.rp?.name || (typeof location !== 'undefined' ? location.host : 'Nosskey');\n  const rpId = options.rp?.id;\n  const userName = options.user?.name || 'user@example.com';\n  const userDisplayName = options.user?.displayName || 'Nosskey user';\n\n  const credentialCreationOptions: CredentialCreationOptions = {\n    publicKey: {\n      rp: {\n        name: rpName,\n        id: rpId,\n      },\n      user: {\n        id: crypto.getRandomValues(new Uint8Array(16)),\n        name: userName,\n        displayName: userDisplayName,\n      },\n      pubKeyCredParams: options.pubKeyCredParams || [{ type: 'public-key', alg: -7 }], // ES256\n      authenticatorSelection: options.authenticatorSelection || {\n        residentKey: 'required',\n        userVerification: 'required',\n      },\n      challenge: crypto.getRandomValues(new Uint8Array(32)),\n      extensions: options.extensions || { prf: {} }, // PRF拡張を要求\n    } as PublicKeyCredentialCreationOptions,\n  };\n  const cred = (await navigator.credentials.create(\n    credentialCreationOptions\n  )) as PublicKeyCredential;\n\n  return new Uint8Array(cred.rawId);\n}\n\n/**\n * ID\n * @param credentialId \n * @param options PRF（rpId、timeout、userVerification）\n * @returns PRF credentialID\n */\nexport async function getPrfSecret(\n  credentialId?: Uint8Array,\n  options?: GetPrfSecretOptions\n): Promise<{ secret: Uint8Array; id: Uint8Array }> {\n  const allowCredentials = credentialId ? [{ type: 'public-key' as const, id: credentialId }] : [];\n\n  const requestOptions: PublicKeyCredentialRequestOptions = {\n    challenge: crypto.getRandomValues(new Uint8Array(32)),\n    allowCredentials,\n    userVerification: options?.userVerification || 'required',\n    extensions: {\n      prf: { eval: { first: PRF_EVAL_INPUT } },\n    } as AuthenticationExtensionsClientInputs,\n  };\n\n  if (options?.rpId) {\n    requestOptions.rpId = options.rpId;\n  }\n  if (options?.timeout) {\n    requestOptions.timeout = options.timeout;\n  }\n\n  const response = await navigator.credentials.get({\n    publicKey: requestOptions,\n  });\n\n  if (!response) {\n    throw new Error('Authentication failed');\n  }\n\n  const assertion = response as unknown as {\n    getClientExtensionResults: () => {\n      prf?: {\n        results?: {\n          first?: ArrayBuffer;\n        };\n      };\n    };\n  };\n\n  const secret = assertion.getClientExtensionResults()?.prf?.results?.first;\n  if (!secret) {\n    throw new Error('PRF secret not available');\n  }\n\n  // response credentialId\n  const responseId = new Uint8Array((response as PublicKeyCredential).rawId);\n\n  return {\n    secret: new Uint8Array(secret),\n    id: responseId,\n  };\n}\n","import { finalizeEvent, getPublicKey } from 'applesauce-core/helpers';\nimport { KeyCache } from './key-cache.js';\nimport { createPasskey, getPrfSecret, isPrfSupported } from './prf-handler.js';\nimport type {\n  GetPrfSecretOptions,\n  KeyCacheOptions,\n  KeyOptions,\n  NosskeyManagerLike,\n  NosskeyManagerOptions,\n  NostrEvent,\n  NostrKeyInfo,\n  NostrKeyStorageOptions,\n  PasskeyCreationOptions,\n  SignOptions,\n} from './types.js';\n/**\n * Nosskey class for Passkey-Derived Nostr Identity\n * @packageDocumentation\n */\nimport { bytesToHex, hexToBytes } from './utils.js';\n\n// salt（\"nostr-key\" UTF-8）\nconst STANDARD_SALT = '6e6f7374722d6b6579';\n\n/**\n * Nosskey - Passkey-Derived Nostr Keys\n */\nexport class NosskeyManager implements NosskeyManagerLike {\n  #keyCache: KeyCache;\n\n  // NostrKeyInfo\n  #currentKeyInfo: NostrKeyInfo | null = null;\n\n  // NostrKeyInfo\n  #storageOptions: NostrKeyStorageOptions = {\n    enabled: true,\n    storageKey: 'nosskey_keyinfo',\n  };\n\n  // PRF\n  #prfOptions: GetPrfSecretOptions = {};\n\n  /**\n   * NosskeyManager\n   * @param options\n   */\n  constructor(options?: NosskeyManagerOptions) {\n    // KeyCache\n    this.#keyCache = new KeyCache(options?.cacheOptions);\n\n    if (options?.storageOptions) {\n      this.#storageOptions = { ...this.#storageOptions, ...options.storageOptions };\n    }\n\n    // option\n    const userVerification = options?.prfOptions?.userVerification ?? 'required';\n    if (options?.prfOptions) {\n      this.#prfOptions = { ...options.prfOptions, userVerification };\n    } else {\n      this.#prfOptions = { userVerification };\n    }\n\n    // NostrKeyInfo\n    if (this.#storageOptions.enabled) {\n      const loadedKeyInfo = this.#loadKeyInfoFromStorage();\n      if (loadedKeyInfo) {\n        this.#currentKeyInfo = loadedKeyInfo;\n      }\n    }\n  }\n\n  /**\n   * NostrKeyInfo\n   * @param options\n   */\n  setStorageOptions(options: Partial<NostrKeyStorageOptions>): void {\n    this.#storageOptions = { ...this.#storageOptions, ...options };\n\n    if (options.enabled === false) {\n      this.clearStoredKeyInfo();\n    }\n  }\n\n  /**\n   * NostrKeyInfo\n   */\n  getStorageOptions(): NostrKeyStorageOptions {\n    return { ...this.#storageOptions };\n  }\n\n  /**\n   * NostrKeyInfo\n   * @param keyInfo NostrKeyInfo\n   */\n  setCurrentKeyInfo(keyInfo: NostrKeyInfo): void {\n    this.#currentKeyInfo = keyInfo;\n\n    if (this.#storageOptions.enabled) {\n      void this.#saveKeyInfoToStorage(keyInfo);\n    }\n  }\n\n  /**\n   * NostrKeyInfo\n   */\n  getCurrentKeyInfo(): NostrKeyInfo | null {\n    // NostrKeyInfo\n    if (!this.#currentKeyInfo && this.#storageOptions.enabled) {\n      this.#currentKeyInfo = this.#loadKeyInfoFromStorage();\n    }\n    return this.#currentKeyInfo;\n  }\n\n  /**\n   * NostrKeyInfo\n   * @returns NostrKeyInfo\n   */\n  hasKeyInfo(): boolean {\n    if (this.#currentKeyInfo) {\n      return true;\n    }\n\n    if (this.#storageOptions.enabled) {\n      const loadedKeyInfo = this.#loadKeyInfoFromStorage();\n      if (loadedKeyInfo) {\n        this.#currentKeyInfo = loadedKeyInfo;\n        return true;\n      }\n    }\n\n    return false;\n  }\n\n  /**\n   * NostrKeyInfo\n   * @param keyInfo NostrKeyInfo\n   */\n  async #saveKeyInfoToStorage(keyInfo: NostrKeyInfo): Promise<void> {\n    if (!this.#storageOptions.enabled) return;\n\n    const storage =\n      this.#storageOptions.storage || (typeof localStorage !== 'undefined' ? localStorage : null);\n\n    if (!storage) return;\n\n    const key = this.#storageOptions.storageKey || 'nosskey_keyinfo';\n    storage.setItem(key, JSON.stringify(keyInfo));\n  }\n\n  /**\n   * NostrKeyInfo\n   */\n  #loadKeyInfoFromStorage(): NostrKeyInfo | null {\n    if (!this.#storageOptions.enabled) return null;\n\n    const storage =\n      this.#storageOptions.storage || (typeof localStorage !== 'undefined' ? localStorage : null);\n\n    if (!storage) return null;\n\n    const key = this.#storageOptions.storageKey || 'nosskey_keyinfo';\n    const data = storage.getItem(key);\n\n    if (!data) return null;\n\n    try {\n      return JSON.parse(data) as NostrKeyInfo;\n    } catch (e) {\n      console.error('Failed to parse stored NostrKeyInfo', e);\n      return null;\n    }\n  }\n\n  /**\n   * NostrKeyInfo\n   */\n  clearStoredKeyInfo(): void {\n    const storage =\n      this.#storageOptions.storage || (typeof localStorage !== 'undefined' ? localStorage : null);\n\n    if (!storage) return;\n\n    const key = this.#storageOptions.storageKey || 'nosskey_keyinfo';\n    storage.removeItem(key);\n\n    // NostrKeyInfo\n    this.#currentKeyInfo = null;\n  }\n\n  /**\n   * NIP-07\n   * NostrKeyInfo\n   */\n  async getPublicKey(): Promise<string> {\n    const keyInfo = this.getCurrentKeyInfo();\n    if (!keyInfo) {\n      throw new Error('No current NostrKeyInfo set');\n    }\n    return keyInfo.pubkey;\n  }\n\n  /**\n   * NIP-07\n   * NostrKeyInfo\n   * @param event Nostr\n   */\n  async signEvent(event: NostrEvent): Promise<NostrEvent> {\n    const keyInfo = this.getCurrentKeyInfo();\n    if (!keyInfo) {\n      throw new Error('No current NostrKeyInfo set');\n    }\n    return this.signEventWithKeyInfo(event, keyInfo);\n  }\n\n  /**\n   * @param options\n   */\n  setCacheOptions(options: Partial<KeyCacheOptions>): void {\n    this.#keyCache.setCacheOptions(options);\n  }\n\n  getCacheOptions(): KeyCacheOptions {\n    return this.#keyCache.getCacheOptions();\n  }\n\n  /**\n   * @param credentialId\n   */\n  clearCachedKey(credentialId: Uint8Array | string): void {\n    this.#keyCache.clearCachedKey(credentialId);\n  }\n\n  clearAllCachedKeys(): void {\n    this.#keyCache.clearAllCachedKeys();\n  }\n\n  /**\n   * @param options\n   * @returns Credential\n   */\n  async createPasskey(options: PasskeyCreationOptions = {}): Promise<Uint8Array> {\n    return createPasskey({\n      rp: {\n        id: this.#prfOptions.rpId,\n        name: this.#prfOptions.rpId,\n      },\n      authenticatorSelection: {\n        userVerification: this.#prfOptions.userVerification,\n      },\n      ...options,\n    });\n  }\n\n  /**\n   * PRF NostrKeyInfo\n   * @param credentialId\n   * @param options\n   */\n  async createNostrKey(credentialId?: Uint8Array, options: KeyOptions = {}): Promise<NostrKeyInfo> {\n    const { secret: sk, id: responseId } = await getPrfSecret(credentialId, this.#prfOptions);\n\n    // secp256k1\n    if (sk.every((byte) => byte === 0)) {\n      throw new Error('Invalid PRF output: all zeros');\n    }\n\n    // HEX\n    const skHex = bytesToHex(sk);\n\n    const publicKey = getPublicKey(sk);\n\n    // NostrKeyInfo\n    const keyInfo: NostrKeyInfo = {\n      credentialId: bytesToHex(credentialId || responseId),\n      pubkey: publicKey,\n      salt: STANDARD_SALT, // salt\n      ...(options.username && { username: options.username }), // username\n    };\n\n    // Optional early caching based on cacheOnCreation setting\n    if (this.#keyCache.isEnabled() && this.#keyCache.getCacheOptions().cacheOnCreation) {\n      this.#keyCache.setKey(keyInfo.credentialId, sk);\n    }\n\n    return keyInfo;\n  }\n\n  /**\n   * @param event Nostr\n   * @param keyInfo NostrKeyInfo\n   * @param options\n   */\n  async signEventWithKeyInfo(\n    event: NostrEvent,\n    keyInfo: NostrKeyInfo,\n    options: SignOptions = {}\n  ): Promise<NostrEvent> {\n    const { clearMemory = true, tags } = options;\n\n    const shouldUseCache = this.#keyCache.isEnabled();\n\n    let sk: Uint8Array | undefined;\n\n    if (shouldUseCache) {\n      sk = this.#keyCache.getKey(keyInfo.credentialId);\n    }\n\n    if (!sk) {\n      const { secret: prfSecret } = await getPrfSecret(\n        hexToBytes(keyInfo.credentialId),\n        this.#prfOptions\n      );\n      sk = prfSecret;\n\n      if (shouldUseCache) {\n        this.#keyCache.setKey(keyInfo.credentialId, sk);\n      }\n    }\n\n    const eventToSign = {\n      kind: event.kind,\n      content: event.content,\n      created_at: event.created_at || Math.floor(Date.now() / 1000),\n      tags: tags ? [...(event.tags || []), ...tags] : event.tags || [],\n    };\n\n    const signedEvent = finalizeEvent(eventToSign, sk);\n\n    if (!shouldUseCache && clearMemory) {\n      this.#clearKey(sk);\n    }\n\n    return signedEvent;\n  }\n\n  /**\n   * @param keyInfo NostrKeyInfo\n   * @param credentialId NostrKeyInfoのcredentialId\n   * @param options\n   * @returns \n   */\n  async exportNostrKey(keyInfo: NostrKeyInfo, credentialId?: Uint8Array): Promise<string> {\n    // NostrKeyInfo credentialId\n    let usedCredentialId = credentialId;\n\n    // credentialId NostrKeyInfo\n    if (!usedCredentialId && keyInfo.credentialId) {\n      usedCredentialId = hexToBytes(keyInfo.credentialId);\n    }\n\n    // PRF\n    const { secret: sk } = await getPrfSecret(usedCredentialId, this.#prfOptions);\n\n    // HEX\n    const skHex = bytesToHex(sk);\n\n    return skHex;\n  }\n\n  /**\n   * PRF\n   */\n  async isPrfSupported(): Promise<boolean> {\n    return isPrfSupported();\n  }\n\n  /**\n   * @param key\n   */\n  #clearKey(key: Uint8Array): void {\n    key?.fill?.(0);\n  }\n}\n","/**\n * Cryptographic utilities for Nosskey\n * @packageDocumentation\n */\n\nconst INFO_BYTES = new TextEncoder().encode('nostr-pwk');\nconst AES_LENGTH = 256; // bits\n\n/**\n * PRF AES-GCM\n * @param secret PRF\n * @param salt\n * @returns AES-GCM\n */\nexport async function deriveAesGcmKey(secret: Uint8Array, salt: Uint8Array): Promise<CryptoKey> {\n  const keyMaterial = await crypto.subtle.importKey('raw', secret, 'HKDF', false, ['deriveKey']);\n\n  return crypto.subtle.deriveKey(\n    { name: 'HKDF', hash: 'SHA-256', salt, info: INFO_BYTES },\n    keyMaterial,\n    { name: 'AES-GCM', length: AES_LENGTH },\n    false,\n    ['encrypt', 'decrypt']\n  );\n}\n\n/**\n * AES-GCM\n * @param key\n * @param iv\n * @param plaintext\n * @returns\n */\nexport async function aesGcmEncrypt(key: CryptoKey, iv: Uint8Array, plaintext: Uint8Array) {\n  const buf = await crypto.subtle.encrypt({ name: 'AES-GCM', iv }, key, plaintext);\n\n  const bytes = new Uint8Array(buf);\n  return {\n    ciphertext: bytes.slice(0, -16),\n    tag: bytes.slice(-16),\n  };\n}\n\n/**\n * AES-GCM\n * @param key\n * @param iv\n * @param ct\n * @param tag\n * @returns\n */\nexport async function aesGcmDecrypt(\n  key: CryptoKey,\n  iv: Uint8Array,\n  ct: Uint8Array,\n  tag: Uint8Array\n): Promise<Uint8Array> {\n  const buf = await crypto.subtle.decrypt(\n    { name: 'AES-GCM', iv },\n    key,\n    new Uint8Array([...ct, ...tag])\n  );\n  return new Uint8Array(buf);\n}\n"],"mappings":";;;;;;;;;;AAQA,SAAgB,WAAW,OAA2B;CACpD,MAAM,MAAM;CACZ,IAAI,MAAM;AACV,MAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;EACrC,MAAM,cAAc,MAAM,MAAM;EAChC,MAAM,eAAe,MAAM,KAAK;AAChC,SAAO,IAAI,eAAe,IAAI;;AAEhC,QAAO;;;;;;AAOT,SAAgB,WAAW,KAAyB;CAClD,MAAM,MAAM;CACZ,MAAM,QAAQ,EAAE;CAChB,IAAI,cAAc;CAClB,IAAI,aAAa;AAEjB,MAAK,IAAI,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK;EACnC,MAAM,YAAY,IAAI,QAAQ,IAAI,GAAG,aAAa,CAAC;AACnD,MAAI,cAAc,GAAI;AAEtB,MAAI,YAAY;AACd,iBAAc,aAAa;AAC3B,gBAAa;SACR;AACL,kBAAe;AACf,SAAM,KAAK,YAAY;AACvB,gBAAa;;;AAIjB,QAAO,IAAI,WAAW,MAAM;;;;;;;;ACvB9B,IAAa,WAAb,MAAsB;CACpB,eAAkC;CAElC,eAAsC;CAEtC,gBAAiC;EAC/B,SAAS;EACT,WAAW,MAAS;EACrB;;;;;CAMD,YAAY,SAAoC;AAC9C,MAAI,QACF,OAAKA,eAAgB;GAAE,GAAG,MAAKA;GAAe,GAAG;GAAS;;;;;CAO9D,gBAAgB,SAAyC;AACvD,MAAI,OAAO,KAAK,QAAQ,CAAC,SAAS,KAAK,MAAKC,gBAAiB,KAC3D,MAAK,oBAAoB;AAG3B,QAAKD,eAAgB;GAAE,GAAG,MAAKA;GAAe,GAAG;GAAS;;CAG5D,kBAAmC;AACjC,SAAO,EAAE,GAAG,MAAKA,cAAe;;CAGlC,YAAqB;AACnB,SAAO,MAAKA,aAAc;;;;;;CAO5B,OAAO,cAAmC,IAAsB;AAC9D,MAAI,CAAC,MAAKA,aAAc,QAAS;EAEjC,MAAM,KAAK,OAAO,iBAAiB,WAAW,eAAe,WAAW,aAAa;EACrF,MAAM,UACJ,MAAKA,aAAc,cAAc,SAAY,MAAKA,aAAc,YAAY,MAAS;EACvF,MAAM,WAAW,KAAK,KAAK,GAAG;AAE9B,QAAKE,kBAAmB;AAExB,QAAKD,cAAe;GAClB;GACA,IAAI,IAAI,WAAW,GAAG;GACtB;GACD;AAED,MAAI;AACF,SAAKE,gBAAiB;WACf,OAAO;AACd,SAAKD,kBAAmB;AACxB,SAAM;;;;;;;CAQV,OAAO,cAA2D;AAChE,MAAI,CAAC,MAAKF,aAAc,QAAS,QAAO;EAExC,MAAM,KAAK,OAAO,iBAAiB,WAAW,eAAe,WAAW,aAAa;AACrF,SAAO,MAAKI,oBAAqB,GAAG;;;;;CAMtC,eAAe,cAAyC;EACtD,MAAM,KAAK,OAAO,iBAAiB,WAAW,eAAe,WAAW,aAAa;AAErF,MAAI,MAAKH,eAAgB,MAAKA,YAAa,OAAO,GAChD,OAAKC,kBAAmB;;CAI5B,qBAA2B;AACzB,QAAKA,kBAAmB;;;;;;CAO1B,qBAAqB,cAA8C;AACjE,MAAI,CAAC,MAAKD,eAAgB,MAAKA,YAAa,OAAO,aACjD;AAGF,MAAI,KAAK,KAAK,GAAG,MAAKA,YAAa,SACjC,QAAO,MAAKA,YAAa;AAG3B,QAAKC,kBAAmB;;CAI1B,oBAA0B;AACxB,MAAI,MAAKD,aAAc;AACrB,SAAKI,SAAU,MAAKJ,YAAa,GAAG;AACpC,SAAKA,cAAe;;AAGtB,MAAI,MAAKK,aAAc;AACrB,gBAAa,MAAKA,YAAa;AAC/B,SAAKA,cAAe;;;CAIxB,kBAAwB;AACtB,MAAI,CAAC,MAAKL,YAAc;EAExB,MAAM,MAAM,KAAK,KAAK;EACtB,MAAM,eAAe,MAAKA,YAAa,WAAW;AAElD,MAAI,gBAAgB,GAAG;AACrB,SAAKC,kBAAmB;AACxB;;AAGF,QAAKI,cAAe,iBAAiB;AACnC,SAAKJ,kBAAmB;KACvB,eAAe,EAAE;;;;;CAMtB,UAAU,KAAuB;AAC/B,OAAK,OAAO,EAAE;;;;;;AC3JlB,MAAM,iBAAiB,IAAI,aAAa,CAAC,OAAO,YAAY;;;;AAK5D,eAAsB,iBAAmC;AACvD,KAAI;EACF,MAAM,WAAW,MAAM,UAAU,YAAY,IAAI,EAC/C,WAAW;GACT,WAAW,OAAO,gBAAgB,IAAI,WAAW,GAAG,CAAC;GACrD,kBAAkB,EAAE;GACpB,kBAAkB;GAClB,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,gBAAgB,EAAE,EAAE;GACzD,EACF,CAAC;AAEF,MAAI,CAAC,SAAU,QAAO;AAatB,SAAO,CAAC,CAXU,SAUI,2BAA2B,EAAE,KAAK,SAAS;SAE3D;AACN,SAAO;;;;;;;AAQX,eAAsB,cAAc,UAAkC,EAAE,EAAuB;CAE7F,MAAM,SAAS,QAAQ,IAAI,SAAS,OAAO,aAAa,cAAc,SAAS,OAAO;CACtF,MAAM,OAAO,QAAQ,IAAI;CACzB,MAAM,WAAW,QAAQ,MAAM,QAAQ;CACvC,MAAM,kBAAkB,QAAQ,MAAM,eAAe;CAErD,MAAM,4BAAuD,EAC3D,WAAW;EACT,IAAI;GACF,MAAM;GACN,IAAI;GACL;EACD,MAAM;GACJ,IAAI,OAAO,gBAAgB,IAAI,WAAW,GAAG,CAAC;GAC9C,MAAM;GACN,aAAa;GACd;EACD,kBAAkB,QAAQ,oBAAoB,CAAC;GAAE,MAAM;GAAc,KAAK;GAAI,CAAC;EAC/E,wBAAwB,QAAQ,0BAA0B;GACxD,aAAa;GACb,kBAAkB;GACnB;EACD,WAAW,OAAO,gBAAgB,IAAI,WAAW,GAAG,CAAC;EACrD,YAAY,QAAQ,cAAc,EAAE,KAAK,EAAE,EAAE;EAC9C,EACF;CACD,MAAM,OAAQ,MAAM,UAAU,YAAY,OACxC,0BACD;AAED,QAAO,IAAI,WAAW,KAAK,MAAM;;;;;;;;AASnC,eAAsB,aACpB,cACA,SACiD;CACjD,MAAM,mBAAmB,eAAe,CAAC;EAAE,MAAM;EAAuB,IAAI;EAAc,CAAC,GAAG,EAAE;CAEhG,MAAM,iBAAoD;EACxD,WAAW,OAAO,gBAAgB,IAAI,WAAW,GAAG,CAAC;EACrD;EACA,kBAAkB,SAAS,oBAAoB;EAC/C,YAAY,EACV,KAAK,EAAE,MAAM,EAAE,OAAO,gBAAgB,EAAE,EACzC;EACF;AAED,KAAI,SAAS,KACX,gBAAe,OAAO,QAAQ;AAEhC,KAAI,SAAS,QACX,gBAAe,UAAU,QAAQ;CAGnC,MAAM,WAAW,MAAM,UAAU,YAAY,IAAI,EAC/C,WAAW,gBACZ,CAAC;AAEF,KAAI,CAAC,SACH,OAAM,IAAI,MAAM,wBAAwB;CAa1C,MAAM,SAVY,SAUO,2BAA2B,EAAE,KAAK,SAAS;AACpE,KAAI,CAAC,OACH,OAAM,IAAI,MAAM,2BAA2B;CAI7C,MAAM,aAAa,IAAI,WAAY,SAAiC,MAAM;AAE1E,QAAO;EACL,QAAQ,IAAI,WAAW,OAAO;EAC9B,IAAI;EACL;;;;;;;;;ACnHH,MAAM,gBAAgB;;;;AAKtB,IAAa,iBAAb,MAA0D;CACxD;CAGA,kBAAuC;CAGvC,kBAA0C;EACxC,SAAS;EACT,YAAY;EACb;CAGD,cAAmC,EAAE;;;;;CAMrC,YAAY,SAAiC;AAE3C,QAAKK,WAAY,IAAI,SAAS,SAAS,aAAa;AAEpD,MAAI,SAAS,eACX,OAAKC,iBAAkB;GAAE,GAAG,MAAKA;GAAiB,GAAG,QAAQ;GAAgB;EAI/E,MAAM,mBAAmB,SAAS,YAAY,oBAAoB;AAClE,MAAI,SAAS,WACX,OAAKC,aAAc;GAAE,GAAG,QAAQ;GAAY;GAAkB;MAE9D,OAAKA,aAAc,EAAE,kBAAkB;AAIzC,MAAI,MAAKD,eAAgB,SAAS;GAChC,MAAM,gBAAgB,MAAKE,wBAAyB;AACpD,OAAI,cACF,OAAKC,iBAAkB;;;;;;;CAS7B,kBAAkB,SAAgD;AAChE,QAAKH,iBAAkB;GAAE,GAAG,MAAKA;GAAiB,GAAG;GAAS;AAE9D,MAAI,QAAQ,YAAY,MACtB,MAAK,oBAAoB;;;;;CAO7B,oBAA4C;AAC1C,SAAO,EAAE,GAAG,MAAKA,gBAAiB;;;;;;CAOpC,kBAAkB,SAA6B;AAC7C,QAAKG,iBAAkB;AAEvB,MAAI,MAAKH,eAAgB,QACvB,CAAK,MAAKI,qBAAsB,QAAQ;;;;;CAO5C,oBAAyC;AAEvC,MAAI,CAAC,MAAKD,kBAAmB,MAAKH,eAAgB,QAChD,OAAKG,iBAAkB,MAAKD,wBAAyB;AAEvD,SAAO,MAAKC;;;;;;CAOd,aAAsB;AACpB,MAAI,MAAKA,eACP,QAAO;AAGT,MAAI,MAAKH,eAAgB,SAAS;GAChC,MAAM,gBAAgB,MAAKE,wBAAyB;AACpD,OAAI,eAAe;AACjB,UAAKC,iBAAkB;AACvB,WAAO;;;AAIX,SAAO;;;;;;CAOT,OAAMC,qBAAsB,SAAsC;AAChE,MAAI,CAAC,MAAKJ,eAAgB,QAAS;EAEnC,MAAM,UACJ,MAAKA,eAAgB,YAAY,OAAO,iBAAiB,cAAc,eAAe;AAExF,MAAI,CAAC,QAAS;EAEd,MAAM,MAAM,MAAKA,eAAgB,cAAc;AAC/C,UAAQ,QAAQ,KAAK,KAAK,UAAU,QAAQ,CAAC;;;;;CAM/C,0BAA+C;AAC7C,MAAI,CAAC,MAAKA,eAAgB,QAAS,QAAO;EAE1C,MAAM,UACJ,MAAKA,eAAgB,YAAY,OAAO,iBAAiB,cAAc,eAAe;AAExF,MAAI,CAAC,QAAS,QAAO;EAErB,MAAM,MAAM,MAAKA,eAAgB,cAAc;EAC/C,MAAM,OAAO,QAAQ,QAAQ,IAAI;AAEjC,MAAI,CAAC,KAAM,QAAO;AAElB,MAAI;AACF,UAAO,KAAK,MAAM,KAAK;WAChB,GAAG;AACV,WAAQ,MAAM,uCAAuC,EAAE;AACvD,UAAO;;;;;;CAOX,qBAA2B;EACzB,MAAM,UACJ,MAAKA,eAAgB,YAAY,OAAO,iBAAiB,cAAc,eAAe;AAExF,MAAI,CAAC,QAAS;EAEd,MAAM,MAAM,MAAKA,eAAgB,cAAc;AAC/C,UAAQ,WAAW,IAAI;AAGvB,QAAKG,iBAAkB;;;;;;CAOzB,MAAM,eAAgC;EACpC,MAAM,UAAU,KAAK,mBAAmB;AACxC,MAAI,CAAC,QACH,OAAM,IAAI,MAAM,8BAA8B;AAEhD,SAAO,QAAQ;;;;;;;CAQjB,MAAM,UAAU,OAAwC;EACtD,MAAM,UAAU,KAAK,mBAAmB;AACxC,MAAI,CAAC,QACH,OAAM,IAAI,MAAM,8BAA8B;AAEhD,SAAO,KAAK,qBAAqB,OAAO,QAAQ;;;;;CAMlD,gBAAgB,SAAyC;AACvD,QAAKJ,SAAU,gBAAgB,QAAQ;;CAGzC,kBAAmC;AACjC,SAAO,MAAKA,SAAU,iBAAiB;;;;;CAMzC,eAAe,cAAyC;AACtD,QAAKA,SAAU,eAAe,aAAa;;CAG7C,qBAA2B;AACzB,QAAKA,SAAU,oBAAoB;;;;;;CAOrC,MAAM,cAAc,UAAkC,EAAE,EAAuB;AAC7E,SAAO,cAAc;GACnB,IAAI;IACF,IAAI,MAAKE,WAAY;IACrB,MAAM,MAAKA,WAAY;IACxB;GACD,wBAAwB,EACtB,kBAAkB,MAAKA,WAAY,kBACpC;GACD,GAAG;GACJ,CAAC;;;;;;;CAQJ,MAAM,eAAe,cAA2B,UAAsB,EAAE,EAAyB;EAC/F,MAAM,EAAE,QAAQ,IAAI,IAAI,eAAe,MAAM,aAAa,cAAc,MAAKA,WAAY;AAGzF,MAAI,GAAG,OAAO,SAAS,SAAS,EAAE,CAChC,OAAM,IAAI,MAAM,gCAAgC;AAIpC,aAAW,GAAG;EAE5B,MAAM,YAAY,aAAa,GAAG;EAGlC,MAAM,UAAwB;GAC5B,cAAc,WAAW,gBAAgB,WAAW;GACpD,QAAQ;GACR,MAAM;GACN,GAAI,QAAQ,YAAY,EAAE,UAAU,QAAQ,UAAU;GACvD;AAGD,MAAI,MAAKF,SAAU,WAAW,IAAI,MAAKA,SAAU,iBAAiB,CAAC,gBACjE,OAAKA,SAAU,OAAO,QAAQ,cAAc,GAAG;AAGjD,SAAO;;;;;;;CAQT,MAAM,qBACJ,OACA,SACA,UAAuB,EAAE,EACJ;EACrB,MAAM,EAAE,cAAc,MAAM,SAAS;EAErC,MAAM,iBAAiB,MAAKA,SAAU,WAAW;EAEjD,IAAI;AAEJ,MAAI,eACF,MAAK,MAAKA,SAAU,OAAO,QAAQ,aAAa;AAGlD,MAAI,CAAC,IAAI;GACP,MAAM,EAAE,QAAQ,cAAc,MAAM,aAClC,WAAW,QAAQ,aAAa,EAChC,MAAKE,WACN;AACD,QAAK;AAEL,OAAI,eACF,OAAKF,SAAU,OAAO,QAAQ,cAAc,GAAG;;EAWnD,MAAM,cAAc,cAPA;GAClB,MAAM,MAAM;GACZ,SAAS,MAAM;GACf,YAAY,MAAM,cAAc,KAAK,MAAM,KAAK,KAAK,GAAG,IAAK;GAC7D,MAAM,OAAO,CAAC,GAAI,MAAM,QAAQ,EAAE,EAAG,GAAG,KAAK,GAAG,MAAM,QAAQ,EAAE;GACjE,EAE8C,GAAG;AAElD,MAAI,CAAC,kBAAkB,YACrB,OAAKM,SAAU,GAAG;AAGpB,SAAO;;;;;;;;CAST,MAAM,eAAe,SAAuB,cAA4C;EAEtF,IAAI,mBAAmB;AAGvB,MAAI,CAAC,oBAAoB,QAAQ,aAC/B,oBAAmB,WAAW,QAAQ,aAAa;EAIrD,MAAM,EAAE,QAAQ,OAAO,MAAM,aAAa,kBAAkB,MAAKJ,WAAY;AAK7E,SAFc,WAAW,GAAG;;;;;CAQ9B,MAAM,iBAAmC;AACvC,SAAO,gBAAgB;;;;;CAMzB,UAAU,KAAuB;AAC/B,OAAK,OAAO,EAAE;;;;;;;;;;AC7WlB,MAAM,aAAa,IAAI,aAAa,CAAC,OAAO,YAAY"}
+{"version":3,"file":"utils-Cu7K7sft.cjs","names":["#cacheOptions","#cachedEntry","#clearCachedEntry","#scheduleExpiry","#getCachedKeyIfValid","#clearKey","#expiryTimer","#keyCache","#storageOptions","#prfOptions","#loadKeyInfoFromStorage","#currentKeyInfo","#saveKeyInfoToStorage","#clearKey"],"sources":["../src/utils/utils.ts","../src/utils/key-cache.ts","../src/utils/prf-handler.ts","../src/utils/nosskey.ts","../src/utils/crypto-utils.ts"],"sourcesContent":["/**\n * @packageDocumentation\n */\n\n/**\n * @param bytes\n * @returns\n */\nexport function bytesToHex(bytes: Uint8Array): string {\n  const key = '0123456789abcdef';\n  let hex = '';\n  for (let i = 0; i < bytes.length; i++) {\n    const firstNibble = bytes[i] >> 4;\n    const secondNibble = bytes[i] & 15;\n    hex += key[firstNibble] + key[secondNibble];\n  }\n  return hex;\n}\n\n/**\n * @param hex\n * @returns\n */\nexport function hexToBytes(hex: string): Uint8Array {\n  const key = '0123456789abcdef';\n  const bytes = [];\n  let currentByte = 0;\n  let highNibble = true;\n\n  for (let i = 0; i < hex.length; i++) {\n    const charValue = key.indexOf(hex[i].toLowerCase());\n    if (charValue === -1) continue;\n\n    if (highNibble) {\n      currentByte = charValue << 4;\n      highNibble = false;\n    } else {\n      currentByte += charValue;\n      bytes.push(currentByte);\n      highNibble = true;\n    }\n  }\n\n  return new Uint8Array(bytes);\n}\n","/**\n * Key cache management for Nosskey\n * @packageDocumentation\n */\n\nimport type { KeyCacheOptions } from './types.js';\nimport { bytesToHex } from './utils.js';\n\n/**\n * Key cache entry with expiration time\n */\ninterface CacheEntry {\n  id: string;\n  sk: Uint8Array;\n  expireAt: number;\n}\n\n/**\n * Key cache manager for managing temporary secret keys\n */\nexport class KeyCache {\n  #cachedEntry: CacheEntry | null = null;\n\n  #expiryTimer: NodeJS.Timeout | null = null;\n\n  #cacheOptions: KeyCacheOptions = {\n    enabled: false,\n    timeoutMs: 5 * 60 * 1000,\n  };\n\n  /**\n   * KeyCache\n   * @param options\n   */\n  constructor(options?: Partial<KeyCacheOptions>) {\n    if (options) {\n      this.#cacheOptions = { ...this.#cacheOptions, ...options };\n    }\n  }\n\n  /**\n   * @param options\n   */\n  setCacheOptions(options: Partial<KeyCacheOptions>): void {\n    if (Object.keys(options).length > 0 && this.#cachedEntry !== null) {\n      this.clearAllCachedKeys();\n    }\n\n    this.#cacheOptions = { ...this.#cacheOptions, ...options };\n  }\n\n  getCacheOptions(): KeyCacheOptions {\n    return { ...this.#cacheOptions };\n  }\n\n  isEnabled(): boolean {\n    return this.#cacheOptions.enabled;\n  }\n\n  /**\n   * @param credentialId\n   * @param sk\n   */\n  setKey(credentialId: Uint8Array | string, sk: Uint8Array): void {\n    if (!this.#cacheOptions.enabled) return;\n\n    const id = typeof credentialId === 'string' ? credentialId : bytesToHex(credentialId);\n    const timeout =\n      this.#cacheOptions.timeoutMs !== undefined ? this.#cacheOptions.timeoutMs : 5 * 60 * 1000;\n    const expireAt = Date.now() + timeout;\n\n    this.#clearCachedEntry();\n\n    this.#cachedEntry = {\n      id,\n      sk: new Uint8Array(sk),\n      expireAt,\n    };\n\n    try {\n      this.#scheduleExpiry();\n    } catch (error) {\n      this.#clearCachedEntry();\n      throw error;\n    }\n  }\n\n  /**\n   * @param credentialId\n   * @returns undefined\n   */\n  getKey(credentialId: Uint8Array | string): Uint8Array | undefined {\n    if (!this.#cacheOptions.enabled) return undefined;\n\n    const id = typeof credentialId === 'string' ? credentialId : bytesToHex(credentialId);\n    return this.#getCachedKeyIfValid(id);\n  }\n\n  /**\n   * @param credentialId\n   */\n  clearCachedKey(credentialId: Uint8Array | string): void {\n    const id = typeof credentialId === 'string' ? credentialId : bytesToHex(credentialId);\n\n    if (this.#cachedEntry && this.#cachedEntry.id === id) {\n      this.#clearCachedEntry();\n    }\n  }\n\n  clearAllCachedKeys(): void {\n    this.#clearCachedEntry();\n  }\n\n  /**\n   * @param credentialId\n   * @returns undefined\n   */\n  #getCachedKeyIfValid(credentialId: string): Uint8Array | undefined {\n    if (!this.#cachedEntry || this.#cachedEntry.id !== credentialId) {\n      return undefined;\n    }\n\n    if (Date.now() < this.#cachedEntry.expireAt) {\n      return this.#cachedEntry.sk;\n    }\n\n    this.#clearCachedEntry();\n    return undefined;\n  }\n\n  #clearCachedEntry(): void {\n    if (this.#cachedEntry) {\n      this.#clearKey(this.#cachedEntry.sk);\n      this.#cachedEntry = null;\n    }\n\n    if (this.#expiryTimer) {\n      clearTimeout(this.#expiryTimer);\n      this.#expiryTimer = null;\n    }\n  }\n\n  #scheduleExpiry(): void {\n    if (!this.#cachedEntry) return;\n\n    const now = Date.now();\n    const timeToExpiry = this.#cachedEntry.expireAt - now;\n\n    if (timeToExpiry <= 0) {\n      this.#clearCachedEntry();\n      return;\n    }\n\n    this.#expiryTimer = setTimeout(() => {\n      this.#clearCachedEntry();\n    }, timeToExpiry + 1);\n  }\n\n  /**\n   * @param key\n   */\n  #clearKey(key: Uint8Array): void {\n    key?.fill?.(0);\n  }\n}\n","/**\n * PRF (Pseudo-Random Function) handler for WebAuthn\n * @packageDocumentation\n */\n\nimport type { GetPrfSecretOptions, PasskeyCreationOptions } from './types.js';\n\nconst PRF_EVAL_INPUT = new TextEncoder().encode('nostr-pwk');\n\n/**\n * @returns PRF\n */\nexport async function isPrfSupported(): Promise<boolean> {\n  try {\n    const response = await navigator.credentials.get({\n      publicKey: {\n        challenge: crypto.getRandomValues(new Uint8Array(32)),\n        allowCredentials: [],\n        userVerification: 'required',\n        extensions: { prf: { eval: { first: PRF_EVAL_INPUT } } },\n      } as PublicKeyCredentialRequestOptions,\n    });\n\n    if (!response) return false;\n\n    const assertion = response as unknown as {\n      getClientExtensionResults: () => {\n        prf?: {\n          results?: {\n            first?: ArrayBuffer;\n          };\n        };\n      };\n    };\n\n    const res = assertion.getClientExtensionResults()?.prf?.results?.first;\n    return !!res;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * @param options\n * @returns Credential\n */\nexport async function createPasskey(options: PasskeyCreationOptions = {}): Promise<Uint8Array> {\n  // Node\n  const rpName = options.rp?.name || (typeof location !== 'undefined' ? location.host : 'Nosskey');\n  const rpId = options.rp?.id;\n  const userName = options.user?.name || 'user@example.com';\n  const userDisplayName = options.user?.displayName || 'Nosskey user';\n\n  const credentialCreationOptions: CredentialCreationOptions = {\n    publicKey: {\n      rp: {\n        name: rpName,\n        id: rpId,\n      },\n      user: {\n        id: crypto.getRandomValues(new Uint8Array(16)),\n        name: userName,\n        displayName: userDisplayName,\n      },\n      pubKeyCredParams: options.pubKeyCredParams || [{ type: 'public-key', alg: -7 }], // ES256\n      authenticatorSelection: options.authenticatorSelection || {\n        residentKey: 'required',\n        userVerification: 'required',\n      },\n      challenge: crypto.getRandomValues(new Uint8Array(32)),\n      extensions: options.extensions || { prf: {} }, // PRF拡張を要求\n    } as PublicKeyCredentialCreationOptions,\n  };\n  const cred = (await navigator.credentials.create(\n    credentialCreationOptions\n  )) as PublicKeyCredential;\n\n  return new Uint8Array(cred.rawId);\n}\n\n/**\n * ID\n * @param credentialId \n * @param options PRF（rpId、timeout、userVerification）\n * @returns PRF credentialID\n */\nexport async function getPrfSecret(\n  credentialId?: Uint8Array,\n  options?: GetPrfSecretOptions\n): Promise<{ secret: Uint8Array; id: Uint8Array }> {\n  const allowCredentials = credentialId ? [{ type: 'public-key' as const, id: credentialId }] : [];\n\n  const requestOptions: PublicKeyCredentialRequestOptions = {\n    challenge: crypto.getRandomValues(new Uint8Array(32)),\n    allowCredentials,\n    userVerification: options?.userVerification || 'required',\n    extensions: {\n      prf: { eval: { first: PRF_EVAL_INPUT } },\n    } as AuthenticationExtensionsClientInputs,\n  };\n\n  if (options?.rpId) {\n    requestOptions.rpId = options.rpId;\n  }\n  if (options?.timeout) {\n    requestOptions.timeout = options.timeout;\n  }\n\n  const response = await navigator.credentials.get({\n    publicKey: requestOptions,\n  });\n\n  if (!response) {\n    throw new Error('Authentication failed');\n  }\n\n  const assertion = response as unknown as {\n    getClientExtensionResults: () => {\n      prf?: {\n        results?: {\n          first?: ArrayBuffer;\n        };\n      };\n    };\n  };\n\n  const secret = assertion.getClientExtensionResults()?.prf?.results?.first;\n  if (!secret) {\n    throw new Error('PRF secret not available');\n  }\n\n  // response credentialId\n  const responseId = new Uint8Array((response as PublicKeyCredential).rawId);\n\n  return {\n    secret: new Uint8Array(secret),\n    id: responseId,\n  };\n}\n","import { finalizeEvent, getPublicKey } from 'applesauce-core/helpers';\nimport { KeyCache } from './key-cache.js';\nimport { createPasskey, getPrfSecret, isPrfSupported } from './prf-handler.js';\nimport type {\n  GetPrfSecretOptions,\n  KeyCacheOptions,\n  KeyOptions,\n  NosskeyManagerLike,\n  NosskeyManagerOptions,\n  NostrEvent,\n  NostrKeyInfo,\n  NostrKeyStorageOptions,\n  PasskeyCreationOptions,\n  SignOptions,\n} from './types.js';\n/**\n * Nosskey class for Passkey-Derived Nostr Identity\n * @packageDocumentation\n */\nimport { bytesToHex, hexToBytes } from './utils.js';\n\n// salt（\"nostr-key\" UTF-8）\nconst STANDARD_SALT = '6e6f7374722d6b6579';\n\n/**\n * Nosskey - Passkey-Derived Nostr Keys\n */\nexport class NosskeyManager implements NosskeyManagerLike {\n  #keyCache: KeyCache;\n\n  // NostrKeyInfo\n  #currentKeyInfo: NostrKeyInfo | null = null;\n\n  // NostrKeyInfo\n  #storageOptions: NostrKeyStorageOptions = {\n    enabled: true,\n    storageKey: 'nosskey_keyinfo',\n  };\n\n  // PRF\n  #prfOptions: GetPrfSecretOptions = {};\n\n  /**\n   * NosskeyManager\n   * @param options\n   */\n  constructor(options?: NosskeyManagerOptions) {\n    // KeyCache\n    this.#keyCache = new KeyCache(options?.cacheOptions);\n\n    if (options?.storageOptions) {\n      this.#storageOptions = { ...this.#storageOptions, ...options.storageOptions };\n    }\n\n    // option\n    const userVerification = options?.prfOptions?.userVerification ?? 'required';\n    if (options?.prfOptions) {\n      this.#prfOptions = { ...options.prfOptions, userVerification };\n    } else {\n      this.#prfOptions = { userVerification };\n    }\n\n    // NostrKeyInfo\n    if (this.#storageOptions.enabled) {\n      const loadedKeyInfo = this.#loadKeyInfoFromStorage();\n      if (loadedKeyInfo) {\n        this.#currentKeyInfo = loadedKeyInfo;\n      }\n    }\n  }\n\n  /**\n   * NostrKeyInfo\n   * @param options\n   */\n  setStorageOptions(options: Partial<NostrKeyStorageOptions>): void {\n    this.#storageOptions = { ...this.#storageOptions, ...options };\n\n    if (options.enabled === false) {\n      this.clearStoredKeyInfo();\n    }\n  }\n\n  /**\n   * NostrKeyInfo\n   */\n  getStorageOptions(): NostrKeyStorageOptions {\n    return { ...this.#storageOptions };\n  }\n\n  /**\n   * NostrKeyInfo\n   * @param keyInfo NostrKeyInfo\n   */\n  setCurrentKeyInfo(keyInfo: NostrKeyInfo): void {\n    this.#currentKeyInfo = keyInfo;\n\n    if (this.#storageOptions.enabled) {\n      void this.#saveKeyInfoToStorage(keyInfo);\n    }\n  }\n\n  /**\n   * NostrKeyInfo\n   */\n  getCurrentKeyInfo(): NostrKeyInfo | null {\n    // NostrKeyInfo\n    if (!this.#currentKeyInfo && this.#storageOptions.enabled) {\n      this.#currentKeyInfo = this.#loadKeyInfoFromStorage();\n    }\n    return this.#currentKeyInfo;\n  }\n\n  /**\n   * NostrKeyInfo\n   * @returns NostrKeyInfo\n   */\n  hasKeyInfo(): boolean {\n    if (this.#currentKeyInfo) {\n      return true;\n    }\n\n    if (this.#storageOptions.enabled) {\n      const loadedKeyInfo = this.#loadKeyInfoFromStorage();\n      if (loadedKeyInfo) {\n        this.#currentKeyInfo = loadedKeyInfo;\n        return true;\n      }\n    }\n\n    return false;\n  }\n\n  /**\n   * NostrKeyInfo\n   * @param keyInfo NostrKeyInfo\n   */\n  async #saveKeyInfoToStorage(keyInfo: NostrKeyInfo): Promise<void> {\n    if (!this.#storageOptions.enabled) return;\n\n    const storage =\n      this.#storageOptions.storage || (typeof localStorage !== 'undefined' ? localStorage : null);\n\n    if (!storage) return;\n\n    const key = this.#storageOptions.storageKey || 'nosskey_keyinfo';\n    storage.setItem(key, JSON.stringify(keyInfo));\n  }\n\n  /**\n   * NostrKeyInfo\n   */\n  #loadKeyInfoFromStorage(): NostrKeyInfo | null {\n    if (!this.#storageOptions.enabled) return null;\n\n    const storage =\n      this.#storageOptions.storage || (typeof localStorage !== 'undefined' ? localStorage : null);\n\n    if (!storage) return null;\n\n    const key = this.#storageOptions.storageKey || 'nosskey_keyinfo';\n    const data = storage.getItem(key);\n\n    if (!data) return null;\n\n    try {\n      return JSON.parse(data) as NostrKeyInfo;\n    } catch (e) {\n      console.error('Failed to parse stored NostrKeyInfo', e);\n      return null;\n    }\n  }\n\n  /**\n   * NostrKeyInfo\n   */\n  clearStoredKeyInfo(): void {\n    const storage =\n      this.#storageOptions.storage || (typeof localStorage !== 'undefined' ? localStorage : null);\n\n    if (!storage) return;\n\n    const key = this.#storageOptions.storageKey || 'nosskey_keyinfo';\n    storage.removeItem(key);\n\n    // NostrKeyInfo\n    this.#currentKeyInfo = null;\n  }\n\n  /**\n   * NIP-07\n   * NostrKeyInfo\n   */\n  async getPublicKey(): Promise<string> {\n    const keyInfo = this.getCurrentKeyInfo();\n    if (!keyInfo) {\n      throw new Error('No current NostrKeyInfo set');\n    }\n    return keyInfo.pubkey;\n  }\n\n  /**\n   * NIP-07\n   * NostrKeyInfo\n   * @param event Nostr\n   */\n  async signEvent(event: NostrEvent): Promise<NostrEvent> {\n    const keyInfo = this.getCurrentKeyInfo();\n    if (!keyInfo) {\n      throw new Error('No current NostrKeyInfo set');\n    }\n    return this.signEventWithKeyInfo(event, keyInfo);\n  }\n\n  /**\n   * @param options\n   */\n  setCacheOptions(options: Partial<KeyCacheOptions>): void {\n    this.#keyCache.setCacheOptions(options);\n  }\n\n  getCacheOptions(): KeyCacheOptions {\n    return this.#keyCache.getCacheOptions();\n  }\n\n  getCachedSecretKey(credentialId: Uint8Array | string): Uint8Array | undefined {\n    return this.#keyCache.getKey(credentialId);\n  }\n\n  /**\n   * @param credentialId\n   */\n  clearCachedKey(credentialId: Uint8Array | string): void {\n    this.#keyCache.clearCachedKey(credentialId);\n  }\n\n  clearAllCachedKeys(): void {\n    this.#keyCache.clearAllCachedKeys();\n  }\n\n  /**\n   * @param options\n   * @returns Credential\n   */\n  async createPasskey(options: PasskeyCreationOptions = {}): Promise<Uint8Array> {\n    return createPasskey({\n      rp: {\n        id: this.#prfOptions.rpId,\n        name: this.#prfOptions.rpId,\n      },\n      authenticatorSelection: {\n        userVerification: this.#prfOptions.userVerification,\n      },\n      ...options,\n    });\n  }\n\n  /**\n   * PRF NostrKeyInfo\n   * @param credentialId\n   * @param options\n   */\n  async createNostrKey(credentialId?: Uint8Array, options: KeyOptions = {}): Promise<NostrKeyInfo> {\n    const { secret: sk, id: responseId } = await getPrfSecret(credentialId, this.#prfOptions);\n\n    // secp256k1\n    if (sk.every((byte) => byte === 0)) {\n      throw new Error('Invalid PRF output: all zeros');\n    }\n\n    // HEX\n    const skHex = bytesToHex(sk);\n\n    const publicKey = getPublicKey(sk);\n\n    // NostrKeyInfo\n    const keyInfo: NostrKeyInfo = {\n      credentialId: bytesToHex(credentialId || responseId),\n      pubkey: publicKey,\n      salt: STANDARD_SALT, // salt\n      ...(options.username && { username: options.username }), // username\n    };\n\n    // Optional early caching based on cacheOnCreation setting\n    if (this.#keyCache.isEnabled() && this.#keyCache.getCacheOptions().cacheOnCreation) {\n      this.#keyCache.setKey(keyInfo.credentialId, sk);\n    }\n\n    return keyInfo;\n  }\n\n  /**\n   * @param event Nostr\n   * @param keyInfo NostrKeyInfo\n   * @param options\n   */\n  async signEventWithKeyInfo(\n    event: NostrEvent,\n    keyInfo: NostrKeyInfo,\n    options: SignOptions = {}\n  ): Promise<NostrEvent> {\n    const { clearMemory = true, tags } = options;\n\n    const shouldUseCache = this.#keyCache.isEnabled();\n\n    let sk: Uint8Array | undefined;\n\n    if (shouldUseCache) {\n      sk = this.#keyCache.getKey(keyInfo.credentialId);\n    }\n\n    if (!sk) {\n      const { secret: prfSecret } = await getPrfSecret(\n        hexToBytes(keyInfo.credentialId),\n        this.#prfOptions\n      );\n      sk = prfSecret;\n\n      if (shouldUseCache) {\n        this.#keyCache.setKey(keyInfo.credentialId, sk);\n      }\n    }\n\n    const eventToSign = {\n      kind: event.kind,\n      content: event.content,\n      created_at: event.created_at || Math.floor(Date.now() / 1000),\n      tags: tags ? [...(event.tags || []), ...tags] : event.tags || [],\n    };\n\n    const signedEvent = finalizeEvent(eventToSign, sk);\n\n    if (!shouldUseCache && clearMemory) {\n      this.#clearKey(sk);\n    }\n\n    return signedEvent;\n  }\n\n  /**\n   * @param keyInfo NostrKeyInfo\n   * @param credentialId NostrKeyInfoのcredentialId\n   * @param options\n   * @returns \n   */\n  async exportNostrKey(keyInfo: NostrKeyInfo, credentialId?: Uint8Array): Promise<string> {\n    // NostrKeyInfo credentialId\n    let usedCredentialId = credentialId;\n\n    // credentialId NostrKeyInfo\n    if (!usedCredentialId && keyInfo.credentialId) {\n      usedCredentialId = hexToBytes(keyInfo.credentialId);\n    }\n\n    // PRF\n    const { secret: sk } = await getPrfSecret(usedCredentialId, this.#prfOptions);\n\n    // HEX\n    const skHex = bytesToHex(sk);\n\n    return skHex;\n  }\n\n  /**\n   * PRF\n   */\n  async isPrfSupported(): Promise<boolean> {\n    return isPrfSupported();\n  }\n\n  /**\n   * @param key\n   */\n  #clearKey(key: Uint8Array): void {\n    key?.fill?.(0);\n  }\n}\n","/**\n * Cryptographic utilities for Nosskey\n * @packageDocumentation\n */\n\nconst INFO_BYTES = new TextEncoder().encode('nostr-pwk');\nconst AES_LENGTH = 256; // bits\n\n/**\n * PRF AES-GCM\n * @param secret PRF\n * @param salt\n * @returns AES-GCM\n */\nexport async function deriveAesGcmKey(secret: Uint8Array, salt: Uint8Array): Promise<CryptoKey> {\n  const keyMaterial = await crypto.subtle.importKey('raw', secret, 'HKDF', false, ['deriveKey']);\n\n  return crypto.subtle.deriveKey(\n    { name: 'HKDF', hash: 'SHA-256', salt, info: INFO_BYTES },\n    keyMaterial,\n    { name: 'AES-GCM', length: AES_LENGTH },\n    false,\n    ['encrypt', 'decrypt']\n  );\n}\n\n/**\n * AES-GCM\n * @param key\n * @param iv\n * @param plaintext\n * @returns\n */\nexport async function aesGcmEncrypt(key: CryptoKey, iv: Uint8Array, plaintext: Uint8Array) {\n  const buf = await crypto.subtle.encrypt({ name: 'AES-GCM', iv }, key, plaintext);\n\n  const bytes = new Uint8Array(buf);\n  return {\n    ciphertext: bytes.slice(0, -16),\n    tag: bytes.slice(-16),\n  };\n}\n\n/**\n * AES-GCM\n * @param key\n * @param iv\n * @param ct\n * @param tag\n * @returns\n */\nexport async function aesGcmDecrypt(\n  key: CryptoKey,\n  iv: Uint8Array,\n  ct: Uint8Array,\n  tag: Uint8Array\n): Promise<Uint8Array> {\n  const buf = await crypto.subtle.decrypt(\n    { name: 'AES-GCM', iv },\n    key,\n    new Uint8Array([...ct, ...tag])\n  );\n  return new Uint8Array(buf);\n}\n"],"mappings":";;;;;;;;;;;AAQA,SAAgB,WAAW,OAA2B;CACpD,MAAM,MAAM;CACZ,IAAI,MAAM;AACV,MAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;EACrC,MAAM,cAAc,MAAM,MAAM;EAChC,MAAM,eAAe,MAAM,KAAK;AAChC,SAAO,IAAI,eAAe,IAAI;;AAEhC,QAAO;;;;;;AAOT,SAAgB,WAAW,KAAyB;CAClD,MAAM,MAAM;CACZ,MAAM,QAAQ,EAAE;CAChB,IAAI,cAAc;CAClB,IAAI,aAAa;AAEjB,MAAK,IAAI,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK;EACnC,MAAM,YAAY,IAAI,QAAQ,IAAI,GAAG,aAAa,CAAC;AACnD,MAAI,cAAc,GAAI;AAEtB,MAAI,YAAY;AACd,iBAAc,aAAa;AAC3B,gBAAa;SACR;AACL,kBAAe;AACf,SAAM,KAAK,YAAY;AACvB,gBAAa;;;AAIjB,QAAO,IAAI,WAAW,MAAM;;;;;;;;ACvB9B,IAAa,WAAb,MAAsB;CACpB,eAAkC;CAElC,eAAsC;CAEtC,gBAAiC;EAC/B,SAAS;EACT,WAAW,MAAS;EACrB;;;;;CAMD,YAAY,SAAoC;AAC9C,MAAI,QACF,OAAKA,eAAgB;GAAE,GAAG,MAAKA;GAAe,GAAG;GAAS;;;;;CAO9D,gBAAgB,SAAyC;AACvD,MAAI,OAAO,KAAK,QAAQ,CAAC,SAAS,KAAK,MAAKC,gBAAiB,KAC3D,MAAK,oBAAoB;AAG3B,QAAKD,eAAgB;GAAE,GAAG,MAAKA;GAAe,GAAG;GAAS;;CAG5D,kBAAmC;AACjC,SAAO,EAAE,GAAG,MAAKA,cAAe;;CAGlC,YAAqB;AACnB,SAAO,MAAKA,aAAc;;;;;;CAO5B,OAAO,cAAmC,IAAsB;AAC9D,MAAI,CAAC,MAAKA,aAAc,QAAS;EAEjC,MAAM,KAAK,OAAO,iBAAiB,WAAW,eAAe,WAAW,aAAa;EACrF,MAAM,UACJ,MAAKA,aAAc,cAAc,SAAY,MAAKA,aAAc,YAAY,MAAS;EACvF,MAAM,WAAW,KAAK,KAAK,GAAG;AAE9B,QAAKE,kBAAmB;AAExB,QAAKD,cAAe;GAClB;GACA,IAAI,IAAI,WAAW,GAAG;GACtB;GACD;AAED,MAAI;AACF,SAAKE,gBAAiB;WACf,OAAO;AACd,SAAKD,kBAAmB;AACxB,SAAM;;;;;;;CAQV,OAAO,cAA2D;AAChE,MAAI,CAAC,MAAKF,aAAc,QAAS,QAAO;EAExC,MAAM,KAAK,OAAO,iBAAiB,WAAW,eAAe,WAAW,aAAa;AACrF,SAAO,MAAKI,oBAAqB,GAAG;;;;;CAMtC,eAAe,cAAyC;EACtD,MAAM,KAAK,OAAO,iBAAiB,WAAW,eAAe,WAAW,aAAa;AAErF,MAAI,MAAKH,eAAgB,MAAKA,YAAa,OAAO,GAChD,OAAKC,kBAAmB;;CAI5B,qBAA2B;AACzB,QAAKA,kBAAmB;;;;;;CAO1B,qBAAqB,cAA8C;AACjE,MAAI,CAAC,MAAKD,eAAgB,MAAKA,YAAa,OAAO,aACjD;AAGF,MAAI,KAAK,KAAK,GAAG,MAAKA,YAAa,SACjC,QAAO,MAAKA,YAAa;AAG3B,QAAKC,kBAAmB;;CAI1B,oBAA0B;AACxB,MAAI,MAAKD,aAAc;AACrB,SAAKI,SAAU,MAAKJ,YAAa,GAAG;AACpC,SAAKA,cAAe;;AAGtB,MAAI,MAAKK,aAAc;AACrB,gBAAa,MAAKA,YAAa;AAC/B,SAAKA,cAAe;;;CAIxB,kBAAwB;AACtB,MAAI,CAAC,MAAKL,YAAc;EAExB,MAAM,MAAM,KAAK,KAAK;EACtB,MAAM,eAAe,MAAKA,YAAa,WAAW;AAElD,MAAI,gBAAgB,GAAG;AACrB,SAAKC,kBAAmB;AACxB;;AAGF,QAAKI,cAAe,iBAAiB;AACnC,SAAKJ,kBAAmB;KACvB,eAAe,EAAE;;;;;CAMtB,UAAU,KAAuB;AAC/B,OAAK,OAAO,EAAE;;;;;;AC3JlB,MAAM,iBAAiB,IAAI,aAAa,CAAC,OAAO,YAAY;;;;AAK5D,eAAsB,iBAAmC;AACvD,KAAI;EACF,MAAM,WAAW,MAAM,UAAU,YAAY,IAAI,EAC/C,WAAW;GACT,WAAW,OAAO,gBAAgB,IAAI,WAAW,GAAG,CAAC;GACrD,kBAAkB,EAAE;GACpB,kBAAkB;GAClB,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,gBAAgB,EAAE,EAAE;GACzD,EACF,CAAC;AAEF,MAAI,CAAC,SAAU,QAAO;AAatB,SAAO,CAAC,CAXU,SAUI,2BAA2B,EAAE,KAAK,SAAS;SAE3D;AACN,SAAO;;;;;;;AAQX,eAAsB,cAAc,UAAkC,EAAE,EAAuB;CAE7F,MAAM,SAAS,QAAQ,IAAI,SAAS,OAAO,aAAa,cAAc,SAAS,OAAO;CACtF,MAAM,OAAO,QAAQ,IAAI;CACzB,MAAM,WAAW,QAAQ,MAAM,QAAQ;CACvC,MAAM,kBAAkB,QAAQ,MAAM,eAAe;CAErD,MAAM,4BAAuD,EAC3D,WAAW;EACT,IAAI;GACF,MAAM;GACN,IAAI;GACL;EACD,MAAM;GACJ,IAAI,OAAO,gBAAgB,IAAI,WAAW,GAAG,CAAC;GAC9C,MAAM;GACN,aAAa;GACd;EACD,kBAAkB,QAAQ,oBAAoB,CAAC;GAAE,MAAM;GAAc,KAAK;GAAI,CAAC;EAC/E,wBAAwB,QAAQ,0BAA0B;GACxD,aAAa;GACb,kBAAkB;GACnB;EACD,WAAW,OAAO,gBAAgB,IAAI,WAAW,GAAG,CAAC;EACrD,YAAY,QAAQ,cAAc,EAAE,KAAK,EAAE,EAAE;EAC9C,EACF;CACD,MAAM,OAAQ,MAAM,UAAU,YAAY,OACxC,0BACD;AAED,QAAO,IAAI,WAAW,KAAK,MAAM;;;;;;;;AASnC,eAAsB,aACpB,cACA,SACiD;CACjD,MAAM,mBAAmB,eAAe,CAAC;EAAE,MAAM;EAAuB,IAAI;EAAc,CAAC,GAAG,EAAE;CAEhG,MAAM,iBAAoD;EACxD,WAAW,OAAO,gBAAgB,IAAI,WAAW,GAAG,CAAC;EACrD;EACA,kBAAkB,SAAS,oBAAoB;EAC/C,YAAY,EACV,KAAK,EAAE,MAAM,EAAE,OAAO,gBAAgB,EAAE,EACzC;EACF;AAED,KAAI,SAAS,KACX,gBAAe,OAAO,QAAQ;AAEhC,KAAI,SAAS,QACX,gBAAe,UAAU,QAAQ;CAGnC,MAAM,WAAW,MAAM,UAAU,YAAY,IAAI,EAC/C,WAAW,gBACZ,CAAC;AAEF,KAAI,CAAC,SACH,OAAM,IAAI,MAAM,wBAAwB;CAa1C,MAAM,SAVY,SAUO,2BAA2B,EAAE,KAAK,SAAS;AACpE,KAAI,CAAC,OACH,OAAM,IAAI,MAAM,2BAA2B;CAI7C,MAAM,aAAa,IAAI,WAAY,SAAiC,MAAM;AAE1E,QAAO;EACL,QAAQ,IAAI,WAAW,OAAO;EAC9B,IAAI;EACL;;;;;;;;;ACnHH,MAAM,gBAAgB;;;;AAKtB,IAAa,iBAAb,MAA0D;CACxD;CAGA,kBAAuC;CAGvC,kBAA0C;EACxC,SAAS;EACT,YAAY;EACb;CAGD,cAAmC,EAAE;;;;;CAMrC,YAAY,SAAiC;AAE3C,QAAKK,WAAY,IAAI,SAAS,SAAS,aAAa;AAEpD,MAAI,SAAS,eACX,OAAKC,iBAAkB;GAAE,GAAG,MAAKA;GAAiB,GAAG,QAAQ;GAAgB;EAI/E,MAAM,mBAAmB,SAAS,YAAY,oBAAoB;AAClE,MAAI,SAAS,WACX,OAAKC,aAAc;GAAE,GAAG,QAAQ;GAAY;GAAkB;MAE9D,OAAKA,aAAc,EAAE,kBAAkB;AAIzC,MAAI,MAAKD,eAAgB,SAAS;GAChC,MAAM,gBAAgB,MAAKE,wBAAyB;AACpD,OAAI,cACF,OAAKC,iBAAkB;;;;;;;CAS7B,kBAAkB,SAAgD;AAChE,QAAKH,iBAAkB;GAAE,GAAG,MAAKA;GAAiB,GAAG;GAAS;AAE9D,MAAI,QAAQ,YAAY,MACtB,MAAK,oBAAoB;;;;;CAO7B,oBAA4C;AAC1C,SAAO,EAAE,GAAG,MAAKA,gBAAiB;;;;;;CAOpC,kBAAkB,SAA6B;AAC7C,QAAKG,iBAAkB;AAEvB,MAAI,MAAKH,eAAgB,QACvB,CAAK,MAAKI,qBAAsB,QAAQ;;;;;CAO5C,oBAAyC;AAEvC,MAAI,CAAC,MAAKD,kBAAmB,MAAKH,eAAgB,QAChD,OAAKG,iBAAkB,MAAKD,wBAAyB;AAEvD,SAAO,MAAKC;;;;;;CAOd,aAAsB;AACpB,MAAI,MAAKA,eACP,QAAO;AAGT,MAAI,MAAKH,eAAgB,SAAS;GAChC,MAAM,gBAAgB,MAAKE,wBAAyB;AACpD,OAAI,eAAe;AACjB,UAAKC,iBAAkB;AACvB,WAAO;;;AAIX,SAAO;;;;;;CAOT,OAAMC,qBAAsB,SAAsC;AAChE,MAAI,CAAC,MAAKJ,eAAgB,QAAS;EAEnC,MAAM,UACJ,MAAKA,eAAgB,YAAY,OAAO,iBAAiB,cAAc,eAAe;AAExF,MAAI,CAAC,QAAS;EAEd,MAAM,MAAM,MAAKA,eAAgB,cAAc;AAC/C,UAAQ,QAAQ,KAAK,KAAK,UAAU,QAAQ,CAAC;;;;;CAM/C,0BAA+C;AAC7C,MAAI,CAAC,MAAKA,eAAgB,QAAS,QAAO;EAE1C,MAAM,UACJ,MAAKA,eAAgB,YAAY,OAAO,iBAAiB,cAAc,eAAe;AAExF,MAAI,CAAC,QAAS,QAAO;EAErB,MAAM,MAAM,MAAKA,eAAgB,cAAc;EAC/C,MAAM,OAAO,QAAQ,QAAQ,IAAI;AAEjC,MAAI,CAAC,KAAM,QAAO;AAElB,MAAI;AACF,UAAO,KAAK,MAAM,KAAK;WAChB,GAAG;AACV,WAAQ,MAAM,uCAAuC,EAAE;AACvD,UAAO;;;;;;CAOX,qBAA2B;EACzB,MAAM,UACJ,MAAKA,eAAgB,YAAY,OAAO,iBAAiB,cAAc,eAAe;AAExF,MAAI,CAAC,QAAS;EAEd,MAAM,MAAM,MAAKA,eAAgB,cAAc;AAC/C,UAAQ,WAAW,IAAI;AAGvB,QAAKG,iBAAkB;;;;;;CAOzB,MAAM,eAAgC;EACpC,MAAM,UAAU,KAAK,mBAAmB;AACxC,MAAI,CAAC,QACH,OAAM,IAAI,MAAM,8BAA8B;AAEhD,SAAO,QAAQ;;;;;;;CAQjB,MAAM,UAAU,OAAwC;EACtD,MAAM,UAAU,KAAK,mBAAmB;AACxC,MAAI,CAAC,QACH,OAAM,IAAI,MAAM,8BAA8B;AAEhD,SAAO,KAAK,qBAAqB,OAAO,QAAQ;;;;;CAMlD,gBAAgB,SAAyC;AACvD,QAAKJ,SAAU,gBAAgB,QAAQ;;CAGzC,kBAAmC;AACjC,SAAO,MAAKA,SAAU,iBAAiB;;CAGzC,mBAAmB,cAA2D;AAC5E,SAAO,MAAKA,SAAU,OAAO,aAAa;;;;;CAM5C,eAAe,cAAyC;AACtD,QAAKA,SAAU,eAAe,aAAa;;CAG7C,qBAA2B;AACzB,QAAKA,SAAU,oBAAoB;;;;;;CAOrC,MAAM,cAAc,UAAkC,EAAE,EAAuB;AAC7E,SAAO,cAAc;GACnB,IAAI;IACF,IAAI,MAAKE,WAAY;IACrB,MAAM,MAAKA,WAAY;IACxB;GACD,wBAAwB,EACtB,kBAAkB,MAAKA,WAAY,kBACpC;GACD,GAAG;GACJ,CAAC;;;;;;;CAQJ,MAAM,eAAe,cAA2B,UAAsB,EAAE,EAAyB;EAC/F,MAAM,EAAE,QAAQ,IAAI,IAAI,eAAe,MAAM,aAAa,cAAc,MAAKA,WAAY;AAGzF,MAAI,GAAG,OAAO,SAAS,SAAS,EAAE,CAChC,OAAM,IAAI,MAAM,gCAAgC;AAIpC,aAAW,GAAG;EAE5B,MAAM,sDAAyB,GAAG;EAGlC,MAAM,UAAwB;GAC5B,cAAc,WAAW,gBAAgB,WAAW;GACpD,QAAQ;GACR,MAAM;GACN,GAAI,QAAQ,YAAY,EAAE,UAAU,QAAQ,UAAU;GACvD;AAGD,MAAI,MAAKF,SAAU,WAAW,IAAI,MAAKA,SAAU,iBAAiB,CAAC,gBACjE,OAAKA,SAAU,OAAO,QAAQ,cAAc,GAAG;AAGjD,SAAO;;;;;;;CAQT,MAAM,qBACJ,OACA,SACA,UAAuB,EAAE,EACJ;EACrB,MAAM,EAAE,cAAc,MAAM,SAAS;EAErC,MAAM,iBAAiB,MAAKA,SAAU,WAAW;EAEjD,IAAI;AAEJ,MAAI,eACF,MAAK,MAAKA,SAAU,OAAO,QAAQ,aAAa;AAGlD,MAAI,CAAC,IAAI;GACP,MAAM,EAAE,QAAQ,cAAc,MAAM,aAClC,WAAW,QAAQ,aAAa,EAChC,MAAKE,WACN;AACD,QAAK;AAEL,OAAI,eACF,OAAKF,SAAU,OAAO,QAAQ,cAAc,GAAG;;EAWnD,MAAM,yDAPc;GAClB,MAAM,MAAM;GACZ,SAAS,MAAM;GACf,YAAY,MAAM,cAAc,KAAK,MAAM,KAAK,KAAK,GAAG,IAAK;GAC7D,MAAM,OAAO,CAAC,GAAI,MAAM,QAAQ,EAAE,EAAG,GAAG,KAAK,GAAG,MAAM,QAAQ,EAAE;GACjE,EAE8C,GAAG;AAElD,MAAI,CAAC,kBAAkB,YACrB,OAAKM,SAAU,GAAG;AAGpB,SAAO;;;;;;;;CAST,MAAM,eAAe,SAAuB,cAA4C;EAEtF,IAAI,mBAAmB;AAGvB,MAAI,CAAC,oBAAoB,QAAQ,aAC/B,oBAAmB,WAAW,QAAQ,aAAa;EAIrD,MAAM,EAAE,QAAQ,OAAO,MAAM,aAAa,kBAAkB,MAAKJ,WAAY;AAK7E,SAFc,WAAW,GAAG;;;;;CAQ9B,MAAM,iBAAmC;AACvC,SAAO,gBAAgB;;;;;CAMzB,UAAU,KAAuB;AAC/B,OAAK,OAAO,EAAE;;;;;;;;;;ACjXlB,MAAM,aAAa,IAAI,aAAa,CAAC,OAAO,YAAY"}

package/dist/{utils-HZ1CkHN-.mjs → utils-DoinrauJ.mjs}

@@ -395,6 +395,9 @@ var NosskeyManager = class {
 	getCacheOptions() {
 		return this.#keyCache.getCacheOptions();
 	}
+	getCachedSecretKey(credentialId) {
+		return this.#keyCache.getKey(credentialId);
+	}
 	/**
 	* @param credentialId
 	*/
@@ -497,4 +500,4 @@ const INFO_BYTES = new TextEncoder().encode("nostr-pwk");
 
 //#endregion
 export { bytesToHex as a, isPrfSupported as i, createPasskey as n, hexToBytes as o, getPrfSecret as r, NosskeyManager as t };
-//# sourceMappingURL=utils-HZ1CkHN-.mjs.map
+//# sourceMappingURL=utils-DoinrauJ.mjs.map

package/dist/{utils-f_bV5svh.cjs.map → utils-DoinrauJ.mjs.map}

@@ -1 +1 @@
-{"version":3,"file":"utils-f_bV5svh.cjs","names":["#cacheOptions","#cachedEntry","#clearCachedEntry","#scheduleExpiry","#getCachedKeyIfValid","#clearKey","#expiryTimer","#keyCache","#storageOptions","#prfOptions","#loadKeyInfoFromStorage","#currentKeyInfo","#saveKeyInfoToStorage","#clearKey"],"sources":["../src/utils/utils.ts","../src/utils/key-cache.ts","../src/utils/prf-handler.ts","../src/utils/nosskey.ts","../src/utils/crypto-utils.ts"],"sourcesContent":["/**\n * @packageDocumentation\n */\n\n/**\n * @param bytes\n * @returns\n */\nexport function bytesToHex(bytes: Uint8Array): string {\n  const key = '0123456789abcdef';\n  let hex = '';\n  for (let i = 0; i < bytes.length; i++) {\n    const firstNibble = bytes[i] >> 4;\n    const secondNibble = bytes[i] & 15;\n    hex += key[firstNibble] + key[secondNibble];\n  }\n  return hex;\n}\n\n/**\n * @param hex\n * @returns\n */\nexport function hexToBytes(hex: string): Uint8Array {\n  const key = '0123456789abcdef';\n  const bytes = [];\n  let currentByte = 0;\n  let highNibble = true;\n\n  for (let i = 0; i < hex.length; i++) {\n    const charValue = key.indexOf(hex[i].toLowerCase());\n    if (charValue === -1) continue;\n\n    if (highNibble) {\n      currentByte = charValue << 4;\n      highNibble = false;\n    } else {\n      currentByte += charValue;\n      bytes.push(currentByte);\n      highNibble = true;\n    }\n  }\n\n  return new Uint8Array(bytes);\n}\n","/**\n * Key cache management for Nosskey\n * @packageDocumentation\n */\n\nimport type { KeyCacheOptions } from './types.js';\nimport { bytesToHex } from './utils.js';\n\n/**\n * Key cache entry with expiration time\n */\ninterface CacheEntry {\n  id: string;\n  sk: Uint8Array;\n  expireAt: number;\n}\n\n/**\n * Key cache manager for managing temporary secret keys\n */\nexport class KeyCache {\n  #cachedEntry: CacheEntry | null = null;\n\n  #expiryTimer: NodeJS.Timeout | null = null;\n\n  #cacheOptions: KeyCacheOptions = {\n    enabled: false,\n    timeoutMs: 5 * 60 * 1000,\n  };\n\n  /**\n   * KeyCache\n   * @param options\n   */\n  constructor(options?: Partial<KeyCacheOptions>) {\n    if (options) {\n      this.#cacheOptions = { ...this.#cacheOptions, ...options };\n    }\n  }\n\n  /**\n   * @param options\n   */\n  setCacheOptions(options: Partial<KeyCacheOptions>): void {\n    if (Object.keys(options).length > 0 && this.#cachedEntry !== null) {\n      this.clearAllCachedKeys();\n    }\n\n    this.#cacheOptions = { ...this.#cacheOptions, ...options };\n  }\n\n  getCacheOptions(): KeyCacheOptions {\n    return { ...this.#cacheOptions };\n  }\n\n  isEnabled(): boolean {\n    return this.#cacheOptions.enabled;\n  }\n\n  /**\n   * @param credentialId\n   * @param sk\n   */\n  setKey(credentialId: Uint8Array | string, sk: Uint8Array): void {\n    if (!this.#cacheOptions.enabled) return;\n\n    const id = typeof credentialId === 'string' ? credentialId : bytesToHex(credentialId);\n    const timeout =\n      this.#cacheOptions.timeoutMs !== undefined ? this.#cacheOptions.timeoutMs : 5 * 60 * 1000;\n    const expireAt = Date.now() + timeout;\n\n    this.#clearCachedEntry();\n\n    this.#cachedEntry = {\n      id,\n      sk: new Uint8Array(sk),\n      expireAt,\n    };\n\n    try {\n      this.#scheduleExpiry();\n    } catch (error) {\n      this.#clearCachedEntry();\n      throw error;\n    }\n  }\n\n  /**\n   * @param credentialId\n   * @returns undefined\n   */\n  getKey(credentialId: Uint8Array | string): Uint8Array | undefined {\n    if (!this.#cacheOptions.enabled) return undefined;\n\n    const id = typeof credentialId === 'string' ? credentialId : bytesToHex(credentialId);\n    return this.#getCachedKeyIfValid(id);\n  }\n\n  /**\n   * @param credentialId\n   */\n  clearCachedKey(credentialId: Uint8Array | string): void {\n    const id = typeof credentialId === 'string' ? credentialId : bytesToHex(credentialId);\n\n    if (this.#cachedEntry && this.#cachedEntry.id === id) {\n      this.#clearCachedEntry();\n    }\n  }\n\n  clearAllCachedKeys(): void {\n    this.#clearCachedEntry();\n  }\n\n  /**\n   * @param credentialId\n   * @returns undefined\n   */\n  #getCachedKeyIfValid(credentialId: string): Uint8Array | undefined {\n    if (!this.#cachedEntry || this.#cachedEntry.id !== credentialId) {\n      return undefined;\n    }\n\n    if (Date.now() < this.#cachedEntry.expireAt) {\n      return this.#cachedEntry.sk;\n    }\n\n    this.#clearCachedEntry();\n    return undefined;\n  }\n\n  #clearCachedEntry(): void {\n    if (this.#cachedEntry) {\n      this.#clearKey(this.#cachedEntry.sk);\n      this.#cachedEntry = null;\n    }\n\n    if (this.#expiryTimer) {\n      clearTimeout(this.#expiryTimer);\n      this.#expiryTimer = null;\n    }\n  }\n\n  #scheduleExpiry(): void {\n    if (!this.#cachedEntry) return;\n\n    const now = Date.now();\n    const timeToExpiry = this.#cachedEntry.expireAt - now;\n\n    if (timeToExpiry <= 0) {\n      this.#clearCachedEntry();\n      return;\n    }\n\n    this.#expiryTimer = setTimeout(() => {\n      this.#clearCachedEntry();\n    }, timeToExpiry + 1);\n  }\n\n  /**\n   * @param key\n   */\n  #clearKey(key: Uint8Array): void {\n    key?.fill?.(0);\n  }\n}\n","/**\n * PRF (Pseudo-Random Function) handler for WebAuthn\n * @packageDocumentation\n */\n\nimport type { GetPrfSecretOptions, PasskeyCreationOptions } from './types.js';\n\nconst PRF_EVAL_INPUT = new TextEncoder().encode('nostr-pwk');\n\n/**\n * @returns PRF\n */\nexport async function isPrfSupported(): Promise<boolean> {\n  try {\n    const response = await navigator.credentials.get({\n      publicKey: {\n        challenge: crypto.getRandomValues(new Uint8Array(32)),\n        allowCredentials: [],\n        userVerification: 'required',\n        extensions: { prf: { eval: { first: PRF_EVAL_INPUT } } },\n      } as PublicKeyCredentialRequestOptions,\n    });\n\n    if (!response) return false;\n\n    const assertion = response as unknown as {\n      getClientExtensionResults: () => {\n        prf?: {\n          results?: {\n            first?: ArrayBuffer;\n          };\n        };\n      };\n    };\n\n    const res = assertion.getClientExtensionResults()?.prf?.results?.first;\n    return !!res;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * @param options\n * @returns Credential\n */\nexport async function createPasskey(options: PasskeyCreationOptions = {}): Promise<Uint8Array> {\n  // Node\n  const rpName = options.rp?.name || (typeof location !== 'undefined' ? location.host : 'Nosskey');\n  const rpId = options.rp?.id;\n  const userName = options.user?.name || 'user@example.com';\n  const userDisplayName = options.user?.displayName || 'Nosskey user';\n\n  const credentialCreationOptions: CredentialCreationOptions = {\n    publicKey: {\n      rp: {\n        name: rpName,\n        id: rpId,\n      },\n      user: {\n        id: crypto.getRandomValues(new Uint8Array(16)),\n        name: userName,\n        displayName: userDisplayName,\n      },\n      pubKeyCredParams: options.pubKeyCredParams || [{ type: 'public-key', alg: -7 }], // ES256\n      authenticatorSelection: options.authenticatorSelection || {\n        residentKey: 'required',\n        userVerification: 'required',\n      },\n      challenge: crypto.getRandomValues(new Uint8Array(32)),\n      extensions: options.extensions || { prf: {} }, // PRF拡張を要求\n    } as PublicKeyCredentialCreationOptions,\n  };\n  const cred = (await navigator.credentials.create(\n    credentialCreationOptions\n  )) as PublicKeyCredential;\n\n  return new Uint8Array(cred.rawId);\n}\n\n/**\n * ID\n * @param credentialId \n * @param options PRF（rpId、timeout、userVerification）\n * @returns PRF credentialID\n */\nexport async function getPrfSecret(\n  credentialId?: Uint8Array,\n  options?: GetPrfSecretOptions\n): Promise<{ secret: Uint8Array; id: Uint8Array }> {\n  const allowCredentials = credentialId ? [{ type: 'public-key' as const, id: credentialId }] : [];\n\n  const requestOptions: PublicKeyCredentialRequestOptions = {\n    challenge: crypto.getRandomValues(new Uint8Array(32)),\n    allowCredentials,\n    userVerification: options?.userVerification || 'required',\n    extensions: {\n      prf: { eval: { first: PRF_EVAL_INPUT } },\n    } as AuthenticationExtensionsClientInputs,\n  };\n\n  if (options?.rpId) {\n    requestOptions.rpId = options.rpId;\n  }\n  if (options?.timeout) {\n    requestOptions.timeout = options.timeout;\n  }\n\n  const response = await navigator.credentials.get({\n    publicKey: requestOptions,\n  });\n\n  if (!response) {\n    throw new Error('Authentication failed');\n  }\n\n  const assertion = response as unknown as {\n    getClientExtensionResults: () => {\n      prf?: {\n        results?: {\n          first?: ArrayBuffer;\n        };\n      };\n    };\n  };\n\n  const secret = assertion.getClientExtensionResults()?.prf?.results?.first;\n  if (!secret) {\n    throw new Error('PRF secret not available');\n  }\n\n  // response credentialId\n  const responseId = new Uint8Array((response as PublicKeyCredential).rawId);\n\n  return {\n    secret: new Uint8Array(secret),\n    id: responseId,\n  };\n}\n","import { finalizeEvent, getPublicKey } from 'applesauce-core/helpers';\nimport { KeyCache } from './key-cache.js';\nimport { createPasskey, getPrfSecret, isPrfSupported } from './prf-handler.js';\nimport type {\n  GetPrfSecretOptions,\n  KeyCacheOptions,\n  KeyOptions,\n  NosskeyManagerLike,\n  NosskeyManagerOptions,\n  NostrEvent,\n  NostrKeyInfo,\n  NostrKeyStorageOptions,\n  PasskeyCreationOptions,\n  SignOptions,\n} from './types.js';\n/**\n * Nosskey class for Passkey-Derived Nostr Identity\n * @packageDocumentation\n */\nimport { bytesToHex, hexToBytes } from './utils.js';\n\n// salt（\"nostr-key\" UTF-8）\nconst STANDARD_SALT = '6e6f7374722d6b6579';\n\n/**\n * Nosskey - Passkey-Derived Nostr Keys\n */\nexport class NosskeyManager implements NosskeyManagerLike {\n  #keyCache: KeyCache;\n\n  // NostrKeyInfo\n  #currentKeyInfo: NostrKeyInfo | null = null;\n\n  // NostrKeyInfo\n  #storageOptions: NostrKeyStorageOptions = {\n    enabled: true,\n    storageKey: 'nosskey_keyinfo',\n  };\n\n  // PRF\n  #prfOptions: GetPrfSecretOptions = {};\n\n  /**\n   * NosskeyManager\n   * @param options\n   */\n  constructor(options?: NosskeyManagerOptions) {\n    // KeyCache\n    this.#keyCache = new KeyCache(options?.cacheOptions);\n\n    if (options?.storageOptions) {\n      this.#storageOptions = { ...this.#storageOptions, ...options.storageOptions };\n    }\n\n    // option\n    const userVerification = options?.prfOptions?.userVerification ?? 'required';\n    if (options?.prfOptions) {\n      this.#prfOptions = { ...options.prfOptions, userVerification };\n    } else {\n      this.#prfOptions = { userVerification };\n    }\n\n    // NostrKeyInfo\n    if (this.#storageOptions.enabled) {\n      const loadedKeyInfo = this.#loadKeyInfoFromStorage();\n      if (loadedKeyInfo) {\n        this.#currentKeyInfo = loadedKeyInfo;\n      }\n    }\n  }\n\n  /**\n   * NostrKeyInfo\n   * @param options\n   */\n  setStorageOptions(options: Partial<NostrKeyStorageOptions>): void {\n    this.#storageOptions = { ...this.#storageOptions, ...options };\n\n    if (options.enabled === false) {\n      this.clearStoredKeyInfo();\n    }\n  }\n\n  /**\n   * NostrKeyInfo\n   */\n  getStorageOptions(): NostrKeyStorageOptions {\n    return { ...this.#storageOptions };\n  }\n\n  /**\n   * NostrKeyInfo\n   * @param keyInfo NostrKeyInfo\n   */\n  setCurrentKeyInfo(keyInfo: NostrKeyInfo): void {\n    this.#currentKeyInfo = keyInfo;\n\n    if (this.#storageOptions.enabled) {\n      void this.#saveKeyInfoToStorage(keyInfo);\n    }\n  }\n\n  /**\n   * NostrKeyInfo\n   */\n  getCurrentKeyInfo(): NostrKeyInfo | null {\n    // NostrKeyInfo\n    if (!this.#currentKeyInfo && this.#storageOptions.enabled) {\n      this.#currentKeyInfo = this.#loadKeyInfoFromStorage();\n    }\n    return this.#currentKeyInfo;\n  }\n\n  /**\n   * NostrKeyInfo\n   * @returns NostrKeyInfo\n   */\n  hasKeyInfo(): boolean {\n    if (this.#currentKeyInfo) {\n      return true;\n    }\n\n    if (this.#storageOptions.enabled) {\n      const loadedKeyInfo = this.#loadKeyInfoFromStorage();\n      if (loadedKeyInfo) {\n        this.#currentKeyInfo = loadedKeyInfo;\n        return true;\n      }\n    }\n\n    return false;\n  }\n\n  /**\n   * NostrKeyInfo\n   * @param keyInfo NostrKeyInfo\n   */\n  async #saveKeyInfoToStorage(keyInfo: NostrKeyInfo): Promise<void> {\n    if (!this.#storageOptions.enabled) return;\n\n    const storage =\n      this.#storageOptions.storage || (typeof localStorage !== 'undefined' ? localStorage : null);\n\n    if (!storage) return;\n\n    const key = this.#storageOptions.storageKey || 'nosskey_keyinfo';\n    storage.setItem(key, JSON.stringify(keyInfo));\n  }\n\n  /**\n   * NostrKeyInfo\n   */\n  #loadKeyInfoFromStorage(): NostrKeyInfo | null {\n    if (!this.#storageOptions.enabled) return null;\n\n    const storage =\n      this.#storageOptions.storage || (typeof localStorage !== 'undefined' ? localStorage : null);\n\n    if (!storage) return null;\n\n    const key = this.#storageOptions.storageKey || 'nosskey_keyinfo';\n    const data = storage.getItem(key);\n\n    if (!data) return null;\n\n    try {\n      return JSON.parse(data) as NostrKeyInfo;\n    } catch (e) {\n      console.error('Failed to parse stored NostrKeyInfo', e);\n      return null;\n    }\n  }\n\n  /**\n   * NostrKeyInfo\n   */\n  clearStoredKeyInfo(): void {\n    const storage =\n      this.#storageOptions.storage || (typeof localStorage !== 'undefined' ? localStorage : null);\n\n    if (!storage) return;\n\n    const key = this.#storageOptions.storageKey || 'nosskey_keyinfo';\n    storage.removeItem(key);\n\n    // NostrKeyInfo\n    this.#currentKeyInfo = null;\n  }\n\n  /**\n   * NIP-07\n   * NostrKeyInfo\n   */\n  async getPublicKey(): Promise<string> {\n    const keyInfo = this.getCurrentKeyInfo();\n    if (!keyInfo) {\n      throw new Error('No current NostrKeyInfo set');\n    }\n    return keyInfo.pubkey;\n  }\n\n  /**\n   * NIP-07\n   * NostrKeyInfo\n   * @param event Nostr\n   */\n  async signEvent(event: NostrEvent): Promise<NostrEvent> {\n    const keyInfo = this.getCurrentKeyInfo();\n    if (!keyInfo) {\n      throw new Error('No current NostrKeyInfo set');\n    }\n    return this.signEventWithKeyInfo(event, keyInfo);\n  }\n\n  /**\n   * @param options\n   */\n  setCacheOptions(options: Partial<KeyCacheOptions>): void {\n    this.#keyCache.setCacheOptions(options);\n  }\n\n  getCacheOptions(): KeyCacheOptions {\n    return this.#keyCache.getCacheOptions();\n  }\n\n  /**\n   * @param credentialId\n   */\n  clearCachedKey(credentialId: Uint8Array | string): void {\n    this.#keyCache.clearCachedKey(credentialId);\n  }\n\n  clearAllCachedKeys(): void {\n    this.#keyCache.clearAllCachedKeys();\n  }\n\n  /**\n   * @param options\n   * @returns Credential\n   */\n  async createPasskey(options: PasskeyCreationOptions = {}): Promise<Uint8Array> {\n    return createPasskey({\n      rp: {\n        id: this.#prfOptions.rpId,\n        name: this.#prfOptions.rpId,\n      },\n      authenticatorSelection: {\n        userVerification: this.#prfOptions.userVerification,\n      },\n      ...options,\n    });\n  }\n\n  /**\n   * PRF NostrKeyInfo\n   * @param credentialId\n   * @param options\n   */\n  async createNostrKey(credentialId?: Uint8Array, options: KeyOptions = {}): Promise<NostrKeyInfo> {\n    const { secret: sk, id: responseId } = await getPrfSecret(credentialId, this.#prfOptions);\n\n    // secp256k1\n    if (sk.every((byte) => byte === 0)) {\n      throw new Error('Invalid PRF output: all zeros');\n    }\n\n    // HEX\n    const skHex = bytesToHex(sk);\n\n    const publicKey = getPublicKey(sk);\n\n    // NostrKeyInfo\n    const keyInfo: NostrKeyInfo = {\n      credentialId: bytesToHex(credentialId || responseId),\n      pubkey: publicKey,\n      salt: STANDARD_SALT, // salt\n      ...(options.username && { username: options.username }), // username\n    };\n\n    // Optional early caching based on cacheOnCreation setting\n    if (this.#keyCache.isEnabled() && this.#keyCache.getCacheOptions().cacheOnCreation) {\n      this.#keyCache.setKey(keyInfo.credentialId, sk);\n    }\n\n    return keyInfo;\n  }\n\n  /**\n   * @param event Nostr\n   * @param keyInfo NostrKeyInfo\n   * @param options\n   */\n  async signEventWithKeyInfo(\n    event: NostrEvent,\n    keyInfo: NostrKeyInfo,\n    options: SignOptions = {}\n  ): Promise<NostrEvent> {\n    const { clearMemory = true, tags } = options;\n\n    const shouldUseCache = this.#keyCache.isEnabled();\n\n    let sk: Uint8Array | undefined;\n\n    if (shouldUseCache) {\n      sk = this.#keyCache.getKey(keyInfo.credentialId);\n    }\n\n    if (!sk) {\n      const { secret: prfSecret } = await getPrfSecret(\n        hexToBytes(keyInfo.credentialId),\n        this.#prfOptions\n      );\n      sk = prfSecret;\n\n      if (shouldUseCache) {\n        this.#keyCache.setKey(keyInfo.credentialId, sk);\n      }\n    }\n\n    const eventToSign = {\n      kind: event.kind,\n      content: event.content,\n      created_at: event.created_at || Math.floor(Date.now() / 1000),\n      tags: tags ? [...(event.tags || []), ...tags] : event.tags || [],\n    };\n\n    const signedEvent = finalizeEvent(eventToSign, sk);\n\n    if (!shouldUseCache && clearMemory) {\n      this.#clearKey(sk);\n    }\n\n    return signedEvent;\n  }\n\n  /**\n   * @param keyInfo NostrKeyInfo\n   * @param credentialId NostrKeyInfoのcredentialId\n   * @param options\n   * @returns \n   */\n  async exportNostrKey(keyInfo: NostrKeyInfo, credentialId?: Uint8Array): Promise<string> {\n    // NostrKeyInfo credentialId\n    let usedCredentialId = credentialId;\n\n    // credentialId NostrKeyInfo\n    if (!usedCredentialId && keyInfo.credentialId) {\n      usedCredentialId = hexToBytes(keyInfo.credentialId);\n    }\n\n    // PRF\n    const { secret: sk } = await getPrfSecret(usedCredentialId, this.#prfOptions);\n\n    // HEX\n    const skHex = bytesToHex(sk);\n\n    return skHex;\n  }\n\n  /**\n   * PRF\n   */\n  async isPrfSupported(): Promise<boolean> {\n    return isPrfSupported();\n  }\n\n  /**\n   * @param key\n   */\n  #clearKey(key: Uint8Array): void {\n    key?.fill?.(0);\n  }\n}\n","/**\n * Cryptographic utilities for Nosskey\n * @packageDocumentation\n */\n\nconst INFO_BYTES = new TextEncoder().encode('nostr-pwk');\nconst AES_LENGTH = 256; // bits\n\n/**\n * PRF AES-GCM\n * @param secret PRF\n * @param salt\n * @returns AES-GCM\n */\nexport async function deriveAesGcmKey(secret: Uint8Array, salt: Uint8Array): Promise<CryptoKey> {\n  const keyMaterial = await crypto.subtle.importKey('raw', secret, 'HKDF', false, ['deriveKey']);\n\n  return crypto.subtle.deriveKey(\n    { name: 'HKDF', hash: 'SHA-256', salt, info: INFO_BYTES },\n    keyMaterial,\n    { name: 'AES-GCM', length: AES_LENGTH },\n    false,\n    ['encrypt', 'decrypt']\n  );\n}\n\n/**\n * AES-GCM\n * @param key\n * @param iv\n * @param plaintext\n * @returns\n */\nexport async function aesGcmEncrypt(key: CryptoKey, iv: Uint8Array, plaintext: Uint8Array) {\n  const buf = await crypto.subtle.encrypt({ name: 'AES-GCM', iv }, key, plaintext);\n\n  const bytes = new Uint8Array(buf);\n  return {\n    ciphertext: bytes.slice(0, -16),\n    tag: bytes.slice(-16),\n  };\n}\n\n/**\n * AES-GCM\n * @param key\n * @param iv\n * @param ct\n * @param tag\n * @returns\n */\nexport async function aesGcmDecrypt(\n  key: CryptoKey,\n  iv: Uint8Array,\n  ct: Uint8Array,\n  tag: Uint8Array\n): Promise<Uint8Array> {\n  const buf = await crypto.subtle.decrypt(\n    { name: 'AES-GCM', iv },\n    key,\n    new Uint8Array([...ct, ...tag])\n  );\n  return new Uint8Array(buf);\n}\n"],"mappings":";;;;;;;;;;;AAQA,SAAgB,WAAW,OAA2B;CACpD,MAAM,MAAM;CACZ,IAAI,MAAM;AACV,MAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;EACrC,MAAM,cAAc,MAAM,MAAM;EAChC,MAAM,eAAe,MAAM,KAAK;AAChC,SAAO,IAAI,eAAe,IAAI;;AAEhC,QAAO;;;;;;AAOT,SAAgB,WAAW,KAAyB;CAClD,MAAM,MAAM;CACZ,MAAM,QAAQ,EAAE;CAChB,IAAI,cAAc;CAClB,IAAI,aAAa;AAEjB,MAAK,IAAI,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK;EACnC,MAAM,YAAY,IAAI,QAAQ,IAAI,GAAG,aAAa,CAAC;AACnD,MAAI,cAAc,GAAI;AAEtB,MAAI,YAAY;AACd,iBAAc,aAAa;AAC3B,gBAAa;SACR;AACL,kBAAe;AACf,SAAM,KAAK,YAAY;AACvB,gBAAa;;;AAIjB,QAAO,IAAI,WAAW,MAAM;;;;;;;;ACvB9B,IAAa,WAAb,MAAsB;CACpB,eAAkC;CAElC,eAAsC;CAEtC,gBAAiC;EAC/B,SAAS;EACT,WAAW,MAAS;EACrB;;;;;CAMD,YAAY,SAAoC;AAC9C,MAAI,QACF,OAAKA,eAAgB;GAAE,GAAG,MAAKA;GAAe,GAAG;GAAS;;;;;CAO9D,gBAAgB,SAAyC;AACvD,MAAI,OAAO,KAAK,QAAQ,CAAC,SAAS,KAAK,MAAKC,gBAAiB,KAC3D,MAAK,oBAAoB;AAG3B,QAAKD,eAAgB;GAAE,GAAG,MAAKA;GAAe,GAAG;GAAS;;CAG5D,kBAAmC;AACjC,SAAO,EAAE,GAAG,MAAKA,cAAe;;CAGlC,YAAqB;AACnB,SAAO,MAAKA,aAAc;;;;;;CAO5B,OAAO,cAAmC,IAAsB;AAC9D,MAAI,CAAC,MAAKA,aAAc,QAAS;EAEjC,MAAM,KAAK,OAAO,iBAAiB,WAAW,eAAe,WAAW,aAAa;EACrF,MAAM,UACJ,MAAKA,aAAc,cAAc,SAAY,MAAKA,aAAc,YAAY,MAAS;EACvF,MAAM,WAAW,KAAK,KAAK,GAAG;AAE9B,QAAKE,kBAAmB;AAExB,QAAKD,cAAe;GAClB;GACA,IAAI,IAAI,WAAW,GAAG;GACtB;GACD;AAED,MAAI;AACF,SAAKE,gBAAiB;WACf,OAAO;AACd,SAAKD,kBAAmB;AACxB,SAAM;;;;;;;CAQV,OAAO,cAA2D;AAChE,MAAI,CAAC,MAAKF,aAAc,QAAS,QAAO;EAExC,MAAM,KAAK,OAAO,iBAAiB,WAAW,eAAe,WAAW,aAAa;AACrF,SAAO,MAAKI,oBAAqB,GAAG;;;;;CAMtC,eAAe,cAAyC;EACtD,MAAM,KAAK,OAAO,iBAAiB,WAAW,eAAe,WAAW,aAAa;AAErF,MAAI,MAAKH,eAAgB,MAAKA,YAAa,OAAO,GAChD,OAAKC,kBAAmB;;CAI5B,qBAA2B;AACzB,QAAKA,kBAAmB;;;;;;CAO1B,qBAAqB,cAA8C;AACjE,MAAI,CAAC,MAAKD,eAAgB,MAAKA,YAAa,OAAO,aACjD;AAGF,MAAI,KAAK,KAAK,GAAG,MAAKA,YAAa,SACjC,QAAO,MAAKA,YAAa;AAG3B,QAAKC,kBAAmB;;CAI1B,oBAA0B;AACxB,MAAI,MAAKD,aAAc;AACrB,SAAKI,SAAU,MAAKJ,YAAa,GAAG;AACpC,SAAKA,cAAe;;AAGtB,MAAI,MAAKK,aAAc;AACrB,gBAAa,MAAKA,YAAa;AAC/B,SAAKA,cAAe;;;CAIxB,kBAAwB;AACtB,MAAI,CAAC,MAAKL,YAAc;EAExB,MAAM,MAAM,KAAK,KAAK;EACtB,MAAM,eAAe,MAAKA,YAAa,WAAW;AAElD,MAAI,gBAAgB,GAAG;AACrB,SAAKC,kBAAmB;AACxB;;AAGF,QAAKI,cAAe,iBAAiB;AACnC,SAAKJ,kBAAmB;KACvB,eAAe,EAAE;;;;;CAMtB,UAAU,KAAuB;AAC/B,OAAK,OAAO,EAAE;;;;;;AC3JlB,MAAM,iBAAiB,IAAI,aAAa,CAAC,OAAO,YAAY;;;;AAK5D,eAAsB,iBAAmC;AACvD,KAAI;EACF,MAAM,WAAW,MAAM,UAAU,YAAY,IAAI,EAC/C,WAAW;GACT,WAAW,OAAO,gBAAgB,IAAI,WAAW,GAAG,CAAC;GACrD,kBAAkB,EAAE;GACpB,kBAAkB;GAClB,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,gBAAgB,EAAE,EAAE;GACzD,EACF,CAAC;AAEF,MAAI,CAAC,SAAU,QAAO;AAatB,SAAO,CAAC,CAXU,SAUI,2BAA2B,EAAE,KAAK,SAAS;SAE3D;AACN,SAAO;;;;;;;AAQX,eAAsB,cAAc,UAAkC,EAAE,EAAuB;CAE7F,MAAM,SAAS,QAAQ,IAAI,SAAS,OAAO,aAAa,cAAc,SAAS,OAAO;CACtF,MAAM,OAAO,QAAQ,IAAI;CACzB,MAAM,WAAW,QAAQ,MAAM,QAAQ;CACvC,MAAM,kBAAkB,QAAQ,MAAM,eAAe;CAErD,MAAM,4BAAuD,EAC3D,WAAW;EACT,IAAI;GACF,MAAM;GACN,IAAI;GACL;EACD,MAAM;GACJ,IAAI,OAAO,gBAAgB,IAAI,WAAW,GAAG,CAAC;GAC9C,MAAM;GACN,aAAa;GACd;EACD,kBAAkB,QAAQ,oBAAoB,CAAC;GAAE,MAAM;GAAc,KAAK;GAAI,CAAC;EAC/E,wBAAwB,QAAQ,0BAA0B;GACxD,aAAa;GACb,kBAAkB;GACnB;EACD,WAAW,OAAO,gBAAgB,IAAI,WAAW,GAAG,CAAC;EACrD,YAAY,QAAQ,cAAc,EAAE,KAAK,EAAE,EAAE;EAC9C,EACF;CACD,MAAM,OAAQ,MAAM,UAAU,YAAY,OACxC,0BACD;AAED,QAAO,IAAI,WAAW,KAAK,MAAM;;;;;;;;AASnC,eAAsB,aACpB,cACA,SACiD;CACjD,MAAM,mBAAmB,eAAe,CAAC;EAAE,MAAM;EAAuB,IAAI;EAAc,CAAC,GAAG,EAAE;CAEhG,MAAM,iBAAoD;EACxD,WAAW,OAAO,gBAAgB,IAAI,WAAW,GAAG,CAAC;EACrD;EACA,kBAAkB,SAAS,oBAAoB;EAC/C,YAAY,EACV,KAAK,EAAE,MAAM,EAAE,OAAO,gBAAgB,EAAE,EACzC;EACF;AAED,KAAI,SAAS,KACX,gBAAe,OAAO,QAAQ;AAEhC,KAAI,SAAS,QACX,gBAAe,UAAU,QAAQ;CAGnC,MAAM,WAAW,MAAM,UAAU,YAAY,IAAI,EAC/C,WAAW,gBACZ,CAAC;AAEF,KAAI,CAAC,SACH,OAAM,IAAI,MAAM,wBAAwB;CAa1C,MAAM,SAVY,SAUO,2BAA2B,EAAE,KAAK,SAAS;AACpE,KAAI,CAAC,OACH,OAAM,IAAI,MAAM,2BAA2B;CAI7C,MAAM,aAAa,IAAI,WAAY,SAAiC,MAAM;AAE1E,QAAO;EACL,QAAQ,IAAI,WAAW,OAAO;EAC9B,IAAI;EACL;;;;;;;;;ACnHH,MAAM,gBAAgB;;;;AAKtB,IAAa,iBAAb,MAA0D;CACxD;CAGA,kBAAuC;CAGvC,kBAA0C;EACxC,SAAS;EACT,YAAY;EACb;CAGD,cAAmC,EAAE;;;;;CAMrC,YAAY,SAAiC;AAE3C,QAAKK,WAAY,IAAI,SAAS,SAAS,aAAa;AAEpD,MAAI,SAAS,eACX,OAAKC,iBAAkB;GAAE,GAAG,MAAKA;GAAiB,GAAG,QAAQ;GAAgB;EAI/E,MAAM,mBAAmB,SAAS,YAAY,oBAAoB;AAClE,MAAI,SAAS,WACX,OAAKC,aAAc;GAAE,GAAG,QAAQ;GAAY;GAAkB;MAE9D,OAAKA,aAAc,EAAE,kBAAkB;AAIzC,MAAI,MAAKD,eAAgB,SAAS;GAChC,MAAM,gBAAgB,MAAKE,wBAAyB;AACpD,OAAI,cACF,OAAKC,iBAAkB;;;;;;;CAS7B,kBAAkB,SAAgD;AAChE,QAAKH,iBAAkB;GAAE,GAAG,MAAKA;GAAiB,GAAG;GAAS;AAE9D,MAAI,QAAQ,YAAY,MACtB,MAAK,oBAAoB;;;;;CAO7B,oBAA4C;AAC1C,SAAO,EAAE,GAAG,MAAKA,gBAAiB;;;;;;CAOpC,kBAAkB,SAA6B;AAC7C,QAAKG,iBAAkB;AAEvB,MAAI,MAAKH,eAAgB,QACvB,CAAK,MAAKI,qBAAsB,QAAQ;;;;;CAO5C,oBAAyC;AAEvC,MAAI,CAAC,MAAKD,kBAAmB,MAAKH,eAAgB,QAChD,OAAKG,iBAAkB,MAAKD,wBAAyB;AAEvD,SAAO,MAAKC;;;;;;CAOd,aAAsB;AACpB,MAAI,MAAKA,eACP,QAAO;AAGT,MAAI,MAAKH,eAAgB,SAAS;GAChC,MAAM,gBAAgB,MAAKE,wBAAyB;AACpD,OAAI,eAAe;AACjB,UAAKC,iBAAkB;AACvB,WAAO;;;AAIX,SAAO;;;;;;CAOT,OAAMC,qBAAsB,SAAsC;AAChE,MAAI,CAAC,MAAKJ,eAAgB,QAAS;EAEnC,MAAM,UACJ,MAAKA,eAAgB,YAAY,OAAO,iBAAiB,cAAc,eAAe;AAExF,MAAI,CAAC,QAAS;EAEd,MAAM,MAAM,MAAKA,eAAgB,cAAc;AAC/C,UAAQ,QAAQ,KAAK,KAAK,UAAU,QAAQ,CAAC;;;;;CAM/C,0BAA+C;AAC7C,MAAI,CAAC,MAAKA,eAAgB,QAAS,QAAO;EAE1C,MAAM,UACJ,MAAKA,eAAgB,YAAY,OAAO,iBAAiB,cAAc,eAAe;AAExF,MAAI,CAAC,QAAS,QAAO;EAErB,MAAM,MAAM,MAAKA,eAAgB,cAAc;EAC/C,MAAM,OAAO,QAAQ,QAAQ,IAAI;AAEjC,MAAI,CAAC,KAAM,QAAO;AAElB,MAAI;AACF,UAAO,KAAK,MAAM,KAAK;WAChB,GAAG;AACV,WAAQ,MAAM,uCAAuC,EAAE;AACvD,UAAO;;;;;;CAOX,qBAA2B;EACzB,MAAM,UACJ,MAAKA,eAAgB,YAAY,OAAO,iBAAiB,cAAc,eAAe;AAExF,MAAI,CAAC,QAAS;EAEd,MAAM,MAAM,MAAKA,eAAgB,cAAc;AAC/C,UAAQ,WAAW,IAAI;AAGvB,QAAKG,iBAAkB;;;;;;CAOzB,MAAM,eAAgC;EACpC,MAAM,UAAU,KAAK,mBAAmB;AACxC,MAAI,CAAC,QACH,OAAM,IAAI,MAAM,8BAA8B;AAEhD,SAAO,QAAQ;;;;;;;CAQjB,MAAM,UAAU,OAAwC;EACtD,MAAM,UAAU,KAAK,mBAAmB;AACxC,MAAI,CAAC,QACH,OAAM,IAAI,MAAM,8BAA8B;AAEhD,SAAO,KAAK,qBAAqB,OAAO,QAAQ;;;;;CAMlD,gBAAgB,SAAyC;AACvD,QAAKJ,SAAU,gBAAgB,QAAQ;;CAGzC,kBAAmC;AACjC,SAAO,MAAKA,SAAU,iBAAiB;;;;;CAMzC,eAAe,cAAyC;AACtD,QAAKA,SAAU,eAAe,aAAa;;CAG7C,qBAA2B;AACzB,QAAKA,SAAU,oBAAoB;;;;;;CAOrC,MAAM,cAAc,UAAkC,EAAE,EAAuB;AAC7E,SAAO,cAAc;GACnB,IAAI;IACF,IAAI,MAAKE,WAAY;IACrB,MAAM,MAAKA,WAAY;IACxB;GACD,wBAAwB,EACtB,kBAAkB,MAAKA,WAAY,kBACpC;GACD,GAAG;GACJ,CAAC;;;;;;;CAQJ,MAAM,eAAe,cAA2B,UAAsB,EAAE,EAAyB;EAC/F,MAAM,EAAE,QAAQ,IAAI,IAAI,eAAe,MAAM,aAAa,cAAc,MAAKA,WAAY;AAGzF,MAAI,GAAG,OAAO,SAAS,SAAS,EAAE,CAChC,OAAM,IAAI,MAAM,gCAAgC;AAIpC,aAAW,GAAG;EAE5B,MAAM,sDAAyB,GAAG;EAGlC,MAAM,UAAwB;GAC5B,cAAc,WAAW,gBAAgB,WAAW;GACpD,QAAQ;GACR,MAAM;GACN,GAAI,QAAQ,YAAY,EAAE,UAAU,QAAQ,UAAU;GACvD;AAGD,MAAI,MAAKF,SAAU,WAAW,IAAI,MAAKA,SAAU,iBAAiB,CAAC,gBACjE,OAAKA,SAAU,OAAO,QAAQ,cAAc,GAAG;AAGjD,SAAO;;;;;;;CAQT,MAAM,qBACJ,OACA,SACA,UAAuB,EAAE,EACJ;EACrB,MAAM,EAAE,cAAc,MAAM,SAAS;EAErC,MAAM,iBAAiB,MAAKA,SAAU,WAAW;EAEjD,IAAI;AAEJ,MAAI,eACF,MAAK,MAAKA,SAAU,OAAO,QAAQ,aAAa;AAGlD,MAAI,CAAC,IAAI;GACP,MAAM,EAAE,QAAQ,cAAc,MAAM,aAClC,WAAW,QAAQ,aAAa,EAChC,MAAKE,WACN;AACD,QAAK;AAEL,OAAI,eACF,OAAKF,SAAU,OAAO,QAAQ,cAAc,GAAG;;EAWnD,MAAM,yDAPc;GAClB,MAAM,MAAM;GACZ,SAAS,MAAM;GACf,YAAY,MAAM,cAAc,KAAK,MAAM,KAAK,KAAK,GAAG,IAAK;GAC7D,MAAM,OAAO,CAAC,GAAI,MAAM,QAAQ,EAAE,EAAG,GAAG,KAAK,GAAG,MAAM,QAAQ,EAAE;GACjE,EAE8C,GAAG;AAElD,MAAI,CAAC,kBAAkB,YACrB,OAAKM,SAAU,GAAG;AAGpB,SAAO;;;;;;;;CAST,MAAM,eAAe,SAAuB,cAA4C;EAEtF,IAAI,mBAAmB;AAGvB,MAAI,CAAC,oBAAoB,QAAQ,aAC/B,oBAAmB,WAAW,QAAQ,aAAa;EAIrD,MAAM,EAAE,QAAQ,OAAO,MAAM,aAAa,kBAAkB,MAAKJ,WAAY;AAK7E,SAFc,WAAW,GAAG;;;;;CAQ9B,MAAM,iBAAmC;AACvC,SAAO,gBAAgB;;;;;CAMzB,UAAU,KAAuB;AAC/B,OAAK,OAAO,EAAE;;;;;;;;;;AC7WlB,MAAM,aAAa,IAAI,aAAa,CAAC,OAAO,YAAY"}
+{"version":3,"file":"utils-DoinrauJ.mjs","names":["#cacheOptions","#cachedEntry","#clearCachedEntry","#scheduleExpiry","#getCachedKeyIfValid","#clearKey","#expiryTimer","#keyCache","#storageOptions","#prfOptions","#loadKeyInfoFromStorage","#currentKeyInfo","#saveKeyInfoToStorage","#clearKey"],"sources":["../src/utils/utils.ts","../src/utils/key-cache.ts","../src/utils/prf-handler.ts","../src/utils/nosskey.ts","../src/utils/crypto-utils.ts"],"sourcesContent":["/**\n * @packageDocumentation\n */\n\n/**\n * @param bytes\n * @returns\n */\nexport function bytesToHex(bytes: Uint8Array): string {\n  const key = '0123456789abcdef';\n  let hex = '';\n  for (let i = 0; i < bytes.length; i++) {\n    const firstNibble = bytes[i] >> 4;\n    const secondNibble = bytes[i] & 15;\n    hex += key[firstNibble] + key[secondNibble];\n  }\n  return hex;\n}\n\n/**\n * @param hex\n * @returns\n */\nexport function hexToBytes(hex: string): Uint8Array {\n  const key = '0123456789abcdef';\n  const bytes = [];\n  let currentByte = 0;\n  let highNibble = true;\n\n  for (let i = 0; i < hex.length; i++) {\n    const charValue = key.indexOf(hex[i].toLowerCase());\n    if (charValue === -1) continue;\n\n    if (highNibble) {\n      currentByte = charValue << 4;\n      highNibble = false;\n    } else {\n      currentByte += charValue;\n      bytes.push(currentByte);\n      highNibble = true;\n    }\n  }\n\n  return new Uint8Array(bytes);\n}\n","/**\n * Key cache management for Nosskey\n * @packageDocumentation\n */\n\nimport type { KeyCacheOptions } from './types.js';\nimport { bytesToHex } from './utils.js';\n\n/**\n * Key cache entry with expiration time\n */\ninterface CacheEntry {\n  id: string;\n  sk: Uint8Array;\n  expireAt: number;\n}\n\n/**\n * Key cache manager for managing temporary secret keys\n */\nexport class KeyCache {\n  #cachedEntry: CacheEntry | null = null;\n\n  #expiryTimer: NodeJS.Timeout | null = null;\n\n  #cacheOptions: KeyCacheOptions = {\n    enabled: false,\n    timeoutMs: 5 * 60 * 1000,\n  };\n\n  /**\n   * KeyCache\n   * @param options\n   */\n  constructor(options?: Partial<KeyCacheOptions>) {\n    if (options) {\n      this.#cacheOptions = { ...this.#cacheOptions, ...options };\n    }\n  }\n\n  /**\n   * @param options\n   */\n  setCacheOptions(options: Partial<KeyCacheOptions>): void {\n    if (Object.keys(options).length > 0 && this.#cachedEntry !== null) {\n      this.clearAllCachedKeys();\n    }\n\n    this.#cacheOptions = { ...this.#cacheOptions, ...options };\n  }\n\n  getCacheOptions(): KeyCacheOptions {\n    return { ...this.#cacheOptions };\n  }\n\n  isEnabled(): boolean {\n    return this.#cacheOptions.enabled;\n  }\n\n  /**\n   * @param credentialId\n   * @param sk\n   */\n  setKey(credentialId: Uint8Array | string, sk: Uint8Array): void {\n    if (!this.#cacheOptions.enabled) return;\n\n    const id = typeof credentialId === 'string' ? credentialId : bytesToHex(credentialId);\n    const timeout =\n      this.#cacheOptions.timeoutMs !== undefined ? this.#cacheOptions.timeoutMs : 5 * 60 * 1000;\n    const expireAt = Date.now() + timeout;\n\n    this.#clearCachedEntry();\n\n    this.#cachedEntry = {\n      id,\n      sk: new Uint8Array(sk),\n      expireAt,\n    };\n\n    try {\n      this.#scheduleExpiry();\n    } catch (error) {\n      this.#clearCachedEntry();\n      throw error;\n    }\n  }\n\n  /**\n   * @param credentialId\n   * @returns undefined\n   */\n  getKey(credentialId: Uint8Array | string): Uint8Array | undefined {\n    if (!this.#cacheOptions.enabled) return undefined;\n\n    const id = typeof credentialId === 'string' ? credentialId : bytesToHex(credentialId);\n    return this.#getCachedKeyIfValid(id);\n  }\n\n  /**\n   * @param credentialId\n   */\n  clearCachedKey(credentialId: Uint8Array | string): void {\n    const id = typeof credentialId === 'string' ? credentialId : bytesToHex(credentialId);\n\n    if (this.#cachedEntry && this.#cachedEntry.id === id) {\n      this.#clearCachedEntry();\n    }\n  }\n\n  clearAllCachedKeys(): void {\n    this.#clearCachedEntry();\n  }\n\n  /**\n   * @param credentialId\n   * @returns undefined\n   */\n  #getCachedKeyIfValid(credentialId: string): Uint8Array | undefined {\n    if (!this.#cachedEntry || this.#cachedEntry.id !== credentialId) {\n      return undefined;\n    }\n\n    if (Date.now() < this.#cachedEntry.expireAt) {\n      return this.#cachedEntry.sk;\n    }\n\n    this.#clearCachedEntry();\n    return undefined;\n  }\n\n  #clearCachedEntry(): void {\n    if (this.#cachedEntry) {\n      this.#clearKey(this.#cachedEntry.sk);\n      this.#cachedEntry = null;\n    }\n\n    if (this.#expiryTimer) {\n      clearTimeout(this.#expiryTimer);\n      this.#expiryTimer = null;\n    }\n  }\n\n  #scheduleExpiry(): void {\n    if (!this.#cachedEntry) return;\n\n    const now = Date.now();\n    const timeToExpiry = this.#cachedEntry.expireAt - now;\n\n    if (timeToExpiry <= 0) {\n      this.#clearCachedEntry();\n      return;\n    }\n\n    this.#expiryTimer = setTimeout(() => {\n      this.#clearCachedEntry();\n    }, timeToExpiry + 1);\n  }\n\n  /**\n   * @param key\n   */\n  #clearKey(key: Uint8Array): void {\n    key?.fill?.(0);\n  }\n}\n","/**\n * PRF (Pseudo-Random Function) handler for WebAuthn\n * @packageDocumentation\n */\n\nimport type { GetPrfSecretOptions, PasskeyCreationOptions } from './types.js';\n\nconst PRF_EVAL_INPUT = new TextEncoder().encode('nostr-pwk');\n\n/**\n * @returns PRF\n */\nexport async function isPrfSupported(): Promise<boolean> {\n  try {\n    const response = await navigator.credentials.get({\n      publicKey: {\n        challenge: crypto.getRandomValues(new Uint8Array(32)),\n        allowCredentials: [],\n        userVerification: 'required',\n        extensions: { prf: { eval: { first: PRF_EVAL_INPUT } } },\n      } as PublicKeyCredentialRequestOptions,\n    });\n\n    if (!response) return false;\n\n    const assertion = response as unknown as {\n      getClientExtensionResults: () => {\n        prf?: {\n          results?: {\n            first?: ArrayBuffer;\n          };\n        };\n      };\n    };\n\n    const res = assertion.getClientExtensionResults()?.prf?.results?.first;\n    return !!res;\n  } catch {\n    return false;\n  }\n}\n\n/**\n * @param options\n * @returns Credential\n */\nexport async function createPasskey(options: PasskeyCreationOptions = {}): Promise<Uint8Array> {\n  // Node\n  const rpName = options.rp?.name || (typeof location !== 'undefined' ? location.host : 'Nosskey');\n  const rpId = options.rp?.id;\n  const userName = options.user?.name || 'user@example.com';\n  const userDisplayName = options.user?.displayName || 'Nosskey user';\n\n  const credentialCreationOptions: CredentialCreationOptions = {\n    publicKey: {\n      rp: {\n        name: rpName,\n        id: rpId,\n      },\n      user: {\n        id: crypto.getRandomValues(new Uint8Array(16)),\n        name: userName,\n        displayName: userDisplayName,\n      },\n      pubKeyCredParams: options.pubKeyCredParams || [{ type: 'public-key', alg: -7 }], // ES256\n      authenticatorSelection: options.authenticatorSelection || {\n        residentKey: 'required',\n        userVerification: 'required',\n      },\n      challenge: crypto.getRandomValues(new Uint8Array(32)),\n      extensions: options.extensions || { prf: {} }, // PRF拡張を要求\n    } as PublicKeyCredentialCreationOptions,\n  };\n  const cred = (await navigator.credentials.create(\n    credentialCreationOptions\n  )) as PublicKeyCredential;\n\n  return new Uint8Array(cred.rawId);\n}\n\n/**\n * ID\n * @param credentialId \n * @param options PRF（rpId、timeout、userVerification）\n * @returns PRF credentialID\n */\nexport async function getPrfSecret(\n  credentialId?: Uint8Array,\n  options?: GetPrfSecretOptions\n): Promise<{ secret: Uint8Array; id: Uint8Array }> {\n  const allowCredentials = credentialId ? [{ type: 'public-key' as const, id: credentialId }] : [];\n\n  const requestOptions: PublicKeyCredentialRequestOptions = {\n    challenge: crypto.getRandomValues(new Uint8Array(32)),\n    allowCredentials,\n    userVerification: options?.userVerification || 'required',\n    extensions: {\n      prf: { eval: { first: PRF_EVAL_INPUT } },\n    } as AuthenticationExtensionsClientInputs,\n  };\n\n  if (options?.rpId) {\n    requestOptions.rpId = options.rpId;\n  }\n  if (options?.timeout) {\n    requestOptions.timeout = options.timeout;\n  }\n\n  const response = await navigator.credentials.get({\n    publicKey: requestOptions,\n  });\n\n  if (!response) {\n    throw new Error('Authentication failed');\n  }\n\n  const assertion = response as unknown as {\n    getClientExtensionResults: () => {\n      prf?: {\n        results?: {\n          first?: ArrayBuffer;\n        };\n      };\n    };\n  };\n\n  const secret = assertion.getClientExtensionResults()?.prf?.results?.first;\n  if (!secret) {\n    throw new Error('PRF secret not available');\n  }\n\n  // response credentialId\n  const responseId = new Uint8Array((response as PublicKeyCredential).rawId);\n\n  return {\n    secret: new Uint8Array(secret),\n    id: responseId,\n  };\n}\n","import { finalizeEvent, getPublicKey } from 'applesauce-core/helpers';\nimport { KeyCache } from './key-cache.js';\nimport { createPasskey, getPrfSecret, isPrfSupported } from './prf-handler.js';\nimport type {\n  GetPrfSecretOptions,\n  KeyCacheOptions,\n  KeyOptions,\n  NosskeyManagerLike,\n  NosskeyManagerOptions,\n  NostrEvent,\n  NostrKeyInfo,\n  NostrKeyStorageOptions,\n  PasskeyCreationOptions,\n  SignOptions,\n} from './types.js';\n/**\n * Nosskey class for Passkey-Derived Nostr Identity\n * @packageDocumentation\n */\nimport { bytesToHex, hexToBytes } from './utils.js';\n\n// salt（\"nostr-key\" UTF-8）\nconst STANDARD_SALT = '6e6f7374722d6b6579';\n\n/**\n * Nosskey - Passkey-Derived Nostr Keys\n */\nexport class NosskeyManager implements NosskeyManagerLike {\n  #keyCache: KeyCache;\n\n  // NostrKeyInfo\n  #currentKeyInfo: NostrKeyInfo | null = null;\n\n  // NostrKeyInfo\n  #storageOptions: NostrKeyStorageOptions = {\n    enabled: true,\n    storageKey: 'nosskey_keyinfo',\n  };\n\n  // PRF\n  #prfOptions: GetPrfSecretOptions = {};\n\n  /**\n   * NosskeyManager\n   * @param options\n   */\n  constructor(options?: NosskeyManagerOptions) {\n    // KeyCache\n    this.#keyCache = new KeyCache(options?.cacheOptions);\n\n    if (options?.storageOptions) {\n      this.#storageOptions = { ...this.#storageOptions, ...options.storageOptions };\n    }\n\n    // option\n    const userVerification = options?.prfOptions?.userVerification ?? 'required';\n    if (options?.prfOptions) {\n      this.#prfOptions = { ...options.prfOptions, userVerification };\n    } else {\n      this.#prfOptions = { userVerification };\n    }\n\n    // NostrKeyInfo\n    if (this.#storageOptions.enabled) {\n      const loadedKeyInfo = this.#loadKeyInfoFromStorage();\n      if (loadedKeyInfo) {\n        this.#currentKeyInfo = loadedKeyInfo;\n      }\n    }\n  }\n\n  /**\n   * NostrKeyInfo\n   * @param options\n   */\n  setStorageOptions(options: Partial<NostrKeyStorageOptions>): void {\n    this.#storageOptions = { ...this.#storageOptions, ...options };\n\n    if (options.enabled === false) {\n      this.clearStoredKeyInfo();\n    }\n  }\n\n  /**\n   * NostrKeyInfo\n   */\n  getStorageOptions(): NostrKeyStorageOptions {\n    return { ...this.#storageOptions };\n  }\n\n  /**\n   * NostrKeyInfo\n   * @param keyInfo NostrKeyInfo\n   */\n  setCurrentKeyInfo(keyInfo: NostrKeyInfo): void {\n    this.#currentKeyInfo = keyInfo;\n\n    if (this.#storageOptions.enabled) {\n      void this.#saveKeyInfoToStorage(keyInfo);\n    }\n  }\n\n  /**\n   * NostrKeyInfo\n   */\n  getCurrentKeyInfo(): NostrKeyInfo | null {\n    // NostrKeyInfo\n    if (!this.#currentKeyInfo && this.#storageOptions.enabled) {\n      this.#currentKeyInfo = this.#loadKeyInfoFromStorage();\n    }\n    return this.#currentKeyInfo;\n  }\n\n  /**\n   * NostrKeyInfo\n   * @returns NostrKeyInfo\n   */\n  hasKeyInfo(): boolean {\n    if (this.#currentKeyInfo) {\n      return true;\n    }\n\n    if (this.#storageOptions.enabled) {\n      const loadedKeyInfo = this.#loadKeyInfoFromStorage();\n      if (loadedKeyInfo) {\n        this.#currentKeyInfo = loadedKeyInfo;\n        return true;\n      }\n    }\n\n    return false;\n  }\n\n  /**\n   * NostrKeyInfo\n   * @param keyInfo NostrKeyInfo\n   */\n  async #saveKeyInfoToStorage(keyInfo: NostrKeyInfo): Promise<void> {\n    if (!this.#storageOptions.enabled) return;\n\n    const storage =\n      this.#storageOptions.storage || (typeof localStorage !== 'undefined' ? localStorage : null);\n\n    if (!storage) return;\n\n    const key = this.#storageOptions.storageKey || 'nosskey_keyinfo';\n    storage.setItem(key, JSON.stringify(keyInfo));\n  }\n\n  /**\n   * NostrKeyInfo\n   */\n  #loadKeyInfoFromStorage(): NostrKeyInfo | null {\n    if (!this.#storageOptions.enabled) return null;\n\n    const storage =\n      this.#storageOptions.storage || (typeof localStorage !== 'undefined' ? localStorage : null);\n\n    if (!storage) return null;\n\n    const key = this.#storageOptions.storageKey || 'nosskey_keyinfo';\n    const data = storage.getItem(key);\n\n    if (!data) return null;\n\n    try {\n      return JSON.parse(data) as NostrKeyInfo;\n    } catch (e) {\n      console.error('Failed to parse stored NostrKeyInfo', e);\n      return null;\n    }\n  }\n\n  /**\n   * NostrKeyInfo\n   */\n  clearStoredKeyInfo(): void {\n    const storage =\n      this.#storageOptions.storage || (typeof localStorage !== 'undefined' ? localStorage : null);\n\n    if (!storage) return;\n\n    const key = this.#storageOptions.storageKey || 'nosskey_keyinfo';\n    storage.removeItem(key);\n\n    // NostrKeyInfo\n    this.#currentKeyInfo = null;\n  }\n\n  /**\n   * NIP-07\n   * NostrKeyInfo\n   */\n  async getPublicKey(): Promise<string> {\n    const keyInfo = this.getCurrentKeyInfo();\n    if (!keyInfo) {\n      throw new Error('No current NostrKeyInfo set');\n    }\n    return keyInfo.pubkey;\n  }\n\n  /**\n   * NIP-07\n   * NostrKeyInfo\n   * @param event Nostr\n   */\n  async signEvent(event: NostrEvent): Promise<NostrEvent> {\n    const keyInfo = this.getCurrentKeyInfo();\n    if (!keyInfo) {\n      throw new Error('No current NostrKeyInfo set');\n    }\n    return this.signEventWithKeyInfo(event, keyInfo);\n  }\n\n  /**\n   * @param options\n   */\n  setCacheOptions(options: Partial<KeyCacheOptions>): void {\n    this.#keyCache.setCacheOptions(options);\n  }\n\n  getCacheOptions(): KeyCacheOptions {\n    return this.#keyCache.getCacheOptions();\n  }\n\n  getCachedSecretKey(credentialId: Uint8Array | string): Uint8Array | undefined {\n    return this.#keyCache.getKey(credentialId);\n  }\n\n  /**\n   * @param credentialId\n   */\n  clearCachedKey(credentialId: Uint8Array | string): void {\n    this.#keyCache.clearCachedKey(credentialId);\n  }\n\n  clearAllCachedKeys(): void {\n    this.#keyCache.clearAllCachedKeys();\n  }\n\n  /**\n   * @param options\n   * @returns Credential\n   */\n  async createPasskey(options: PasskeyCreationOptions = {}): Promise<Uint8Array> {\n    return createPasskey({\n      rp: {\n        id: this.#prfOptions.rpId,\n        name: this.#prfOptions.rpId,\n      },\n      authenticatorSelection: {\n        userVerification: this.#prfOptions.userVerification,\n      },\n      ...options,\n    });\n  }\n\n  /**\n   * PRF NostrKeyInfo\n   * @param credentialId\n   * @param options\n   */\n  async createNostrKey(credentialId?: Uint8Array, options: KeyOptions = {}): Promise<NostrKeyInfo> {\n    const { secret: sk, id: responseId } = await getPrfSecret(credentialId, this.#prfOptions);\n\n    // secp256k1\n    if (sk.every((byte) => byte === 0)) {\n      throw new Error('Invalid PRF output: all zeros');\n    }\n\n    // HEX\n    const skHex = bytesToHex(sk);\n\n    const publicKey = getPublicKey(sk);\n\n    // NostrKeyInfo\n    const keyInfo: NostrKeyInfo = {\n      credentialId: bytesToHex(credentialId || responseId),\n      pubkey: publicKey,\n      salt: STANDARD_SALT, // salt\n      ...(options.username && { username: options.username }), // username\n    };\n\n    // Optional early caching based on cacheOnCreation setting\n    if (this.#keyCache.isEnabled() && this.#keyCache.getCacheOptions().cacheOnCreation) {\n      this.#keyCache.setKey(keyInfo.credentialId, sk);\n    }\n\n    return keyInfo;\n  }\n\n  /**\n   * @param event Nostr\n   * @param keyInfo NostrKeyInfo\n   * @param options\n   */\n  async signEventWithKeyInfo(\n    event: NostrEvent,\n    keyInfo: NostrKeyInfo,\n    options: SignOptions = {}\n  ): Promise<NostrEvent> {\n    const { clearMemory = true, tags } = options;\n\n    const shouldUseCache = this.#keyCache.isEnabled();\n\n    let sk: Uint8Array | undefined;\n\n    if (shouldUseCache) {\n      sk = this.#keyCache.getKey(keyInfo.credentialId);\n    }\n\n    if (!sk) {\n      const { secret: prfSecret } = await getPrfSecret(\n        hexToBytes(keyInfo.credentialId),\n        this.#prfOptions\n      );\n      sk = prfSecret;\n\n      if (shouldUseCache) {\n        this.#keyCache.setKey(keyInfo.credentialId, sk);\n      }\n    }\n\n    const eventToSign = {\n      kind: event.kind,\n      content: event.content,\n      created_at: event.created_at || Math.floor(Date.now() / 1000),\n      tags: tags ? [...(event.tags || []), ...tags] : event.tags || [],\n    };\n\n    const signedEvent = finalizeEvent(eventToSign, sk);\n\n    if (!shouldUseCache && clearMemory) {\n      this.#clearKey(sk);\n    }\n\n    return signedEvent;\n  }\n\n  /**\n   * @param keyInfo NostrKeyInfo\n   * @param credentialId NostrKeyInfoのcredentialId\n   * @param options\n   * @returns \n   */\n  async exportNostrKey(keyInfo: NostrKeyInfo, credentialId?: Uint8Array): Promise<string> {\n    // NostrKeyInfo credentialId\n    let usedCredentialId = credentialId;\n\n    // credentialId NostrKeyInfo\n    if (!usedCredentialId && keyInfo.credentialId) {\n      usedCredentialId = hexToBytes(keyInfo.credentialId);\n    }\n\n    // PRF\n    const { secret: sk } = await getPrfSecret(usedCredentialId, this.#prfOptions);\n\n    // HEX\n    const skHex = bytesToHex(sk);\n\n    return skHex;\n  }\n\n  /**\n   * PRF\n   */\n  async isPrfSupported(): Promise<boolean> {\n    return isPrfSupported();\n  }\n\n  /**\n   * @param key\n   */\n  #clearKey(key: Uint8Array): void {\n    key?.fill?.(0);\n  }\n}\n","/**\n * Cryptographic utilities for Nosskey\n * @packageDocumentation\n */\n\nconst INFO_BYTES = new TextEncoder().encode('nostr-pwk');\nconst AES_LENGTH = 256; // bits\n\n/**\n * PRF AES-GCM\n * @param secret PRF\n * @param salt\n * @returns AES-GCM\n */\nexport async function deriveAesGcmKey(secret: Uint8Array, salt: Uint8Array): Promise<CryptoKey> {\n  const keyMaterial = await crypto.subtle.importKey('raw', secret, 'HKDF', false, ['deriveKey']);\n\n  return crypto.subtle.deriveKey(\n    { name: 'HKDF', hash: 'SHA-256', salt, info: INFO_BYTES },\n    keyMaterial,\n    { name: 'AES-GCM', length: AES_LENGTH },\n    false,\n    ['encrypt', 'decrypt']\n  );\n}\n\n/**\n * AES-GCM\n * @param key\n * @param iv\n * @param plaintext\n * @returns\n */\nexport async function aesGcmEncrypt(key: CryptoKey, iv: Uint8Array, plaintext: Uint8Array) {\n  const buf = await crypto.subtle.encrypt({ name: 'AES-GCM', iv }, key, plaintext);\n\n  const bytes = new Uint8Array(buf);\n  return {\n    ciphertext: bytes.slice(0, -16),\n    tag: bytes.slice(-16),\n  };\n}\n\n/**\n * AES-GCM\n * @param key\n * @param iv\n * @param ct\n * @param tag\n * @returns\n */\nexport async function aesGcmDecrypt(\n  key: CryptoKey,\n  iv: Uint8Array,\n  ct: Uint8Array,\n  tag: Uint8Array\n): Promise<Uint8Array> {\n  const buf = await crypto.subtle.decrypt(\n    { name: 'AES-GCM', iv },\n    key,\n    new Uint8Array([...ct, ...tag])\n  );\n  return new Uint8Array(buf);\n}\n"],"mappings":";;;;;;;;;;AAQA,SAAgB,WAAW,OAA2B;CACpD,MAAM,MAAM;CACZ,IAAI,MAAM;AACV,MAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;EACrC,MAAM,cAAc,MAAM,MAAM;EAChC,MAAM,eAAe,MAAM,KAAK;AAChC,SAAO,IAAI,eAAe,IAAI;;AAEhC,QAAO;;;;;;AAOT,SAAgB,WAAW,KAAyB;CAClD,MAAM,MAAM;CACZ,MAAM,QAAQ,EAAE;CAChB,IAAI,cAAc;CAClB,IAAI,aAAa;AAEjB,MAAK,IAAI,IAAI,GAAG,IAAI,IAAI,QAAQ,KAAK;EACnC,MAAM,YAAY,IAAI,QAAQ,IAAI,GAAG,aAAa,CAAC;AACnD,MAAI,cAAc,GAAI;AAEtB,MAAI,YAAY;AACd,iBAAc,aAAa;AAC3B,gBAAa;SACR;AACL,kBAAe;AACf,SAAM,KAAK,YAAY;AACvB,gBAAa;;;AAIjB,QAAO,IAAI,WAAW,MAAM;;;;;;;;ACvB9B,IAAa,WAAb,MAAsB;CACpB,eAAkC;CAElC,eAAsC;CAEtC,gBAAiC;EAC/B,SAAS;EACT,WAAW,MAAS;EACrB;;;;;CAMD,YAAY,SAAoC;AAC9C,MAAI,QACF,OAAKA,eAAgB;GAAE,GAAG,MAAKA;GAAe,GAAG;GAAS;;;;;CAO9D,gBAAgB,SAAyC;AACvD,MAAI,OAAO,KAAK,QAAQ,CAAC,SAAS,KAAK,MAAKC,gBAAiB,KAC3D,MAAK,oBAAoB;AAG3B,QAAKD,eAAgB;GAAE,GAAG,MAAKA;GAAe,GAAG;GAAS;;CAG5D,kBAAmC;AACjC,SAAO,EAAE,GAAG,MAAKA,cAAe;;CAGlC,YAAqB;AACnB,SAAO,MAAKA,aAAc;;;;;;CAO5B,OAAO,cAAmC,IAAsB;AAC9D,MAAI,CAAC,MAAKA,aAAc,QAAS;EAEjC,MAAM,KAAK,OAAO,iBAAiB,WAAW,eAAe,WAAW,aAAa;EACrF,MAAM,UACJ,MAAKA,aAAc,cAAc,SAAY,MAAKA,aAAc,YAAY,MAAS;EACvF,MAAM,WAAW,KAAK,KAAK,GAAG;AAE9B,QAAKE,kBAAmB;AAExB,QAAKD,cAAe;GAClB;GACA,IAAI,IAAI,WAAW,GAAG;GACtB;GACD;AAED,MAAI;AACF,SAAKE,gBAAiB;WACf,OAAO;AACd,SAAKD,kBAAmB;AACxB,SAAM;;;;;;;CAQV,OAAO,cAA2D;AAChE,MAAI,CAAC,MAAKF,aAAc,QAAS,QAAO;EAExC,MAAM,KAAK,OAAO,iBAAiB,WAAW,eAAe,WAAW,aAAa;AACrF,SAAO,MAAKI,oBAAqB,GAAG;;;;;CAMtC,eAAe,cAAyC;EACtD,MAAM,KAAK,OAAO,iBAAiB,WAAW,eAAe,WAAW,aAAa;AAErF,MAAI,MAAKH,eAAgB,MAAKA,YAAa,OAAO,GAChD,OAAKC,kBAAmB;;CAI5B,qBAA2B;AACzB,QAAKA,kBAAmB;;;;;;CAO1B,qBAAqB,cAA8C;AACjE,MAAI,CAAC,MAAKD,eAAgB,MAAKA,YAAa,OAAO,aACjD;AAGF,MAAI,KAAK,KAAK,GAAG,MAAKA,YAAa,SACjC,QAAO,MAAKA,YAAa;AAG3B,QAAKC,kBAAmB;;CAI1B,oBAA0B;AACxB,MAAI,MAAKD,aAAc;AACrB,SAAKI,SAAU,MAAKJ,YAAa,GAAG;AACpC,SAAKA,cAAe;;AAGtB,MAAI,MAAKK,aAAc;AACrB,gBAAa,MAAKA,YAAa;AAC/B,SAAKA,cAAe;;;CAIxB,kBAAwB;AACtB,MAAI,CAAC,MAAKL,YAAc;EAExB,MAAM,MAAM,KAAK,KAAK;EACtB,MAAM,eAAe,MAAKA,YAAa,WAAW;AAElD,MAAI,gBAAgB,GAAG;AACrB,SAAKC,kBAAmB;AACxB;;AAGF,QAAKI,cAAe,iBAAiB;AACnC,SAAKJ,kBAAmB;KACvB,eAAe,EAAE;;;;;CAMtB,UAAU,KAAuB;AAC/B,OAAK,OAAO,EAAE;;;;;;AC3JlB,MAAM,iBAAiB,IAAI,aAAa,CAAC,OAAO,YAAY;;;;AAK5D,eAAsB,iBAAmC;AACvD,KAAI;EACF,MAAM,WAAW,MAAM,UAAU,YAAY,IAAI,EAC/C,WAAW;GACT,WAAW,OAAO,gBAAgB,IAAI,WAAW,GAAG,CAAC;GACrD,kBAAkB,EAAE;GACpB,kBAAkB;GAClB,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,gBAAgB,EAAE,EAAE;GACzD,EACF,CAAC;AAEF,MAAI,CAAC,SAAU,QAAO;AAatB,SAAO,CAAC,CAXU,SAUI,2BAA2B,EAAE,KAAK,SAAS;SAE3D;AACN,SAAO;;;;;;;AAQX,eAAsB,cAAc,UAAkC,EAAE,EAAuB;CAE7F,MAAM,SAAS,QAAQ,IAAI,SAAS,OAAO,aAAa,cAAc,SAAS,OAAO;CACtF,MAAM,OAAO,QAAQ,IAAI;CACzB,MAAM,WAAW,QAAQ,MAAM,QAAQ;CACvC,MAAM,kBAAkB,QAAQ,MAAM,eAAe;CAErD,MAAM,4BAAuD,EAC3D,WAAW;EACT,IAAI;GACF,MAAM;GACN,IAAI;GACL;EACD,MAAM;GACJ,IAAI,OAAO,gBAAgB,IAAI,WAAW,GAAG,CAAC;GAC9C,MAAM;GACN,aAAa;GACd;EACD,kBAAkB,QAAQ,oBAAoB,CAAC;GAAE,MAAM;GAAc,KAAK;GAAI,CAAC;EAC/E,wBAAwB,QAAQ,0BAA0B;GACxD,aAAa;GACb,kBAAkB;GACnB;EACD,WAAW,OAAO,gBAAgB,IAAI,WAAW,GAAG,CAAC;EACrD,YAAY,QAAQ,cAAc,EAAE,KAAK,EAAE,EAAE;EAC9C,EACF;CACD,MAAM,OAAQ,MAAM,UAAU,YAAY,OACxC,0BACD;AAED,QAAO,IAAI,WAAW,KAAK,MAAM;;;;;;;;AASnC,eAAsB,aACpB,cACA,SACiD;CACjD,MAAM,mBAAmB,eAAe,CAAC;EAAE,MAAM;EAAuB,IAAI;EAAc,CAAC,GAAG,EAAE;CAEhG,MAAM,iBAAoD;EACxD,WAAW,OAAO,gBAAgB,IAAI,WAAW,GAAG,CAAC;EACrD;EACA,kBAAkB,SAAS,oBAAoB;EAC/C,YAAY,EACV,KAAK,EAAE,MAAM,EAAE,OAAO,gBAAgB,EAAE,EACzC;EACF;AAED,KAAI,SAAS,KACX,gBAAe,OAAO,QAAQ;AAEhC,KAAI,SAAS,QACX,gBAAe,UAAU,QAAQ;CAGnC,MAAM,WAAW,MAAM,UAAU,YAAY,IAAI,EAC/C,WAAW,gBACZ,CAAC;AAEF,KAAI,CAAC,SACH,OAAM,IAAI,MAAM,wBAAwB;CAa1C,MAAM,SAVY,SAUO,2BAA2B,EAAE,KAAK,SAAS;AACpE,KAAI,CAAC,OACH,OAAM,IAAI,MAAM,2BAA2B;CAI7C,MAAM,aAAa,IAAI,WAAY,SAAiC,MAAM;AAE1E,QAAO;EACL,QAAQ,IAAI,WAAW,OAAO;EAC9B,IAAI;EACL;;;;;;;;;ACnHH,MAAM,gBAAgB;;;;AAKtB,IAAa,iBAAb,MAA0D;CACxD;CAGA,kBAAuC;CAGvC,kBAA0C;EACxC,SAAS;EACT,YAAY;EACb;CAGD,cAAmC,EAAE;;;;;CAMrC,YAAY,SAAiC;AAE3C,QAAKK,WAAY,IAAI,SAAS,SAAS,aAAa;AAEpD,MAAI,SAAS,eACX,OAAKC,iBAAkB;GAAE,GAAG,MAAKA;GAAiB,GAAG,QAAQ;GAAgB;EAI/E,MAAM,mBAAmB,SAAS,YAAY,oBAAoB;AAClE,MAAI,SAAS,WACX,OAAKC,aAAc;GAAE,GAAG,QAAQ;GAAY;GAAkB;MAE9D,OAAKA,aAAc,EAAE,kBAAkB;AAIzC,MAAI,MAAKD,eAAgB,SAAS;GAChC,MAAM,gBAAgB,MAAKE,wBAAyB;AACpD,OAAI,cACF,OAAKC,iBAAkB;;;;;;;CAS7B,kBAAkB,SAAgD;AAChE,QAAKH,iBAAkB;GAAE,GAAG,MAAKA;GAAiB,GAAG;GAAS;AAE9D,MAAI,QAAQ,YAAY,MACtB,MAAK,oBAAoB;;;;;CAO7B,oBAA4C;AAC1C,SAAO,EAAE,GAAG,MAAKA,gBAAiB;;;;;;CAOpC,kBAAkB,SAA6B;AAC7C,QAAKG,iBAAkB;AAEvB,MAAI,MAAKH,eAAgB,QACvB,CAAK,MAAKI,qBAAsB,QAAQ;;;;;CAO5C,oBAAyC;AAEvC,MAAI,CAAC,MAAKD,kBAAmB,MAAKH,eAAgB,QAChD,OAAKG,iBAAkB,MAAKD,wBAAyB;AAEvD,SAAO,MAAKC;;;;;;CAOd,aAAsB;AACpB,MAAI,MAAKA,eACP,QAAO;AAGT,MAAI,MAAKH,eAAgB,SAAS;GAChC,MAAM,gBAAgB,MAAKE,wBAAyB;AACpD,OAAI,eAAe;AACjB,UAAKC,iBAAkB;AACvB,WAAO;;;AAIX,SAAO;;;;;;CAOT,OAAMC,qBAAsB,SAAsC;AAChE,MAAI,CAAC,MAAKJ,eAAgB,QAAS;EAEnC,MAAM,UACJ,MAAKA,eAAgB,YAAY,OAAO,iBAAiB,cAAc,eAAe;AAExF,MAAI,CAAC,QAAS;EAEd,MAAM,MAAM,MAAKA,eAAgB,cAAc;AAC/C,UAAQ,QAAQ,KAAK,KAAK,UAAU,QAAQ,CAAC;;;;;CAM/C,0BAA+C;AAC7C,MAAI,CAAC,MAAKA,eAAgB,QAAS,QAAO;EAE1C,MAAM,UACJ,MAAKA,eAAgB,YAAY,OAAO,iBAAiB,cAAc,eAAe;AAExF,MAAI,CAAC,QAAS,QAAO;EAErB,MAAM,MAAM,MAAKA,eAAgB,cAAc;EAC/C,MAAM,OAAO,QAAQ,QAAQ,IAAI;AAEjC,MAAI,CAAC,KAAM,QAAO;AAElB,MAAI;AACF,UAAO,KAAK,MAAM,KAAK;WAChB,GAAG;AACV,WAAQ,MAAM,uCAAuC,EAAE;AACvD,UAAO;;;;;;CAOX,qBAA2B;EACzB,MAAM,UACJ,MAAKA,eAAgB,YAAY,OAAO,iBAAiB,cAAc,eAAe;AAExF,MAAI,CAAC,QAAS;EAEd,MAAM,MAAM,MAAKA,eAAgB,cAAc;AAC/C,UAAQ,WAAW,IAAI;AAGvB,QAAKG,iBAAkB;;;;;;CAOzB,MAAM,eAAgC;EACpC,MAAM,UAAU,KAAK,mBAAmB;AACxC,MAAI,CAAC,QACH,OAAM,IAAI,MAAM,8BAA8B;AAEhD,SAAO,QAAQ;;;;;;;CAQjB,MAAM,UAAU,OAAwC;EACtD,MAAM,UAAU,KAAK,mBAAmB;AACxC,MAAI,CAAC,QACH,OAAM,IAAI,MAAM,8BAA8B;AAEhD,SAAO,KAAK,qBAAqB,OAAO,QAAQ;;;;;CAMlD,gBAAgB,SAAyC;AACvD,QAAKJ,SAAU,gBAAgB,QAAQ;;CAGzC,kBAAmC;AACjC,SAAO,MAAKA,SAAU,iBAAiB;;CAGzC,mBAAmB,cAA2D;AAC5E,SAAO,MAAKA,SAAU,OAAO,aAAa;;;;;CAM5C,eAAe,cAAyC;AACtD,QAAKA,SAAU,eAAe,aAAa;;CAG7C,qBAA2B;AACzB,QAAKA,SAAU,oBAAoB;;;;;;CAOrC,MAAM,cAAc,UAAkC,EAAE,EAAuB;AAC7E,SAAO,cAAc;GACnB,IAAI;IACF,IAAI,MAAKE,WAAY;IACrB,MAAM,MAAKA,WAAY;IACxB;GACD,wBAAwB,EACtB,kBAAkB,MAAKA,WAAY,kBACpC;GACD,GAAG;GACJ,CAAC;;;;;;;CAQJ,MAAM,eAAe,cAA2B,UAAsB,EAAE,EAAyB;EAC/F,MAAM,EAAE,QAAQ,IAAI,IAAI,eAAe,MAAM,aAAa,cAAc,MAAKA,WAAY;AAGzF,MAAI,GAAG,OAAO,SAAS,SAAS,EAAE,CAChC,OAAM,IAAI,MAAM,gCAAgC;AAIpC,aAAW,GAAG;EAE5B,MAAM,YAAY,aAAa,GAAG;EAGlC,MAAM,UAAwB;GAC5B,cAAc,WAAW,gBAAgB,WAAW;GACpD,QAAQ;GACR,MAAM;GACN,GAAI,QAAQ,YAAY,EAAE,UAAU,QAAQ,UAAU;GACvD;AAGD,MAAI,MAAKF,SAAU,WAAW,IAAI,MAAKA,SAAU,iBAAiB,CAAC,gBACjE,OAAKA,SAAU,OAAO,QAAQ,cAAc,GAAG;AAGjD,SAAO;;;;;;;CAQT,MAAM,qBACJ,OACA,SACA,UAAuB,EAAE,EACJ;EACrB,MAAM,EAAE,cAAc,MAAM,SAAS;EAErC,MAAM,iBAAiB,MAAKA,SAAU,WAAW;EAEjD,IAAI;AAEJ,MAAI,eACF,MAAK,MAAKA,SAAU,OAAO,QAAQ,aAAa;AAGlD,MAAI,CAAC,IAAI;GACP,MAAM,EAAE,QAAQ,cAAc,MAAM,aAClC,WAAW,QAAQ,aAAa,EAChC,MAAKE,WACN;AACD,QAAK;AAEL,OAAI,eACF,OAAKF,SAAU,OAAO,QAAQ,cAAc,GAAG;;EAWnD,MAAM,cAAc,cAPA;GAClB,MAAM,MAAM;GACZ,SAAS,MAAM;GACf,YAAY,MAAM,cAAc,KAAK,MAAM,KAAK,KAAK,GAAG,IAAK;GAC7D,MAAM,OAAO,CAAC,GAAI,MAAM,QAAQ,EAAE,EAAG,GAAG,KAAK,GAAG,MAAM,QAAQ,EAAE;GACjE,EAE8C,GAAG;AAElD,MAAI,CAAC,kBAAkB,YACrB,OAAKM,SAAU,GAAG;AAGpB,SAAO;;;;;;;;CAST,MAAM,eAAe,SAAuB,cAA4C;EAEtF,IAAI,mBAAmB;AAGvB,MAAI,CAAC,oBAAoB,QAAQ,aAC/B,oBAAmB,WAAW,QAAQ,aAAa;EAIrD,MAAM,EAAE,QAAQ,OAAO,MAAM,aAAa,kBAAkB,MAAKJ,WAAY;AAK7E,SAFc,WAAW,GAAG;;;;;CAQ9B,MAAM,iBAAmC;AACvC,SAAO,gBAAgB;;;;;CAMzB,UAAU,KAAuB;AAC/B,OAAK,OAAO,EAAE;;;;;;;;;;ACjXlB,MAAM,aAAa,IAAI,aAAa,CAAC,OAAO,YAAY"}

package/dist/{utils-B6mbFG4c.mjs → utils-SydXBP7f.mjs}

@@ -1,3 +1,3 @@
-import { a as bytesToHex, i as isPrfSupported, n as createPasskey, o as hexToBytes, r as getPrfSecret, t as NosskeyManager } from "./utils-HZ1CkHN-.mjs";
+import { a as bytesToHex, i as isPrfSupported, n as createPasskey, o as hexToBytes, r as getPrfSecret, t as NosskeyManager } from "./utils-DoinrauJ.mjs";
 
 export { isPrfSupported };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ns-auth-sdk",
-  "version": "1.7.0",
+  "version": "1.8.0",
   "description": "Decentralized SSO library - Authentication, membership, and profile management",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",

package/dist/utils-DlRwlNxK.cjs

@@ -1,3 +0,0 @@
-const require_utils = require('./utils-f_bV5svh.cjs');
-
-exports.isPrfSupported = require_utils.isPrfSupported;