openrtc-trust-play-integrity 2.0.0-rc.15

package/LICENSE

@@ -0,0 +1,3 @@
+Copyright (c) OpenRTC contributors. All rights reserved.
+
+Use is governed by the OpenRTC license distributed with this package.

package/README.md

@@ -0,0 +1,14 @@
+# openrtc-trust-play-integrity
+
+This package adapts an application-owned native Play Integrity implementation
+to OpenRTC's provider-neutral enrollment interface. The native host must bind
+the returned standard token to `base64url(SHA-256(challenge))` as the Play
+Integrity `requestHash`. Package/signing identity, freshness, request hash,
+app recognition, licensing policy, and device-integrity verdicts are validated
+by the managed server adapter. Request tokens only for enrollment, key
+rotation, recovery, or an explicit risk escalation—not as a connection timer.
+
+The adapter declares `request-challenge` binding. OpenRTC still verifies the
+install-key signature and nonce independently, and the server derives the
+authoritative trust policy from the registered provider rather than trusting a
+client-declared strength.

package/dist/index.d.ts

@@ -0,0 +1,22 @@
+import type { OpenRTCAttestationProvider } from 'openrtc';
+export interface PlayIntegrityHost {
+    attest(input: {
+        challenge: string;
+        apiKey: string;
+    }): Promise<{
+        token: string;
+    }>;
+}
+export declare class PlayIntegrityProvider implements OpenRTCAttestationProvider {
+    private readonly host;
+    readonly kind: "play-integrity";
+    readonly evidenceBinding: "request-challenge";
+    constructor(host: PlayIntegrityHost);
+    getEvidence(input: {
+        challenge: string;
+        apiKey: string;
+    }): Promise<{
+        token: string;
+    }>;
+}
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,SAAS,CAAC;AAE1D,MAAM,WAAW,iBAAiB;IAC9B,MAAM,CAAC,KAAK,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpF;AAED,qBAAa,qBAAsB,YAAW,0BAA0B;IAGxD,OAAO,CAAC,QAAQ,CAAC,IAAI;IAFjC,QAAQ,CAAC,IAAI,EAAG,gBAAgB,CAAU;IAC1C,QAAQ,CAAC,eAAe,EAAG,mBAAmB,CAAU;gBAC3B,IAAI,EAAE,iBAAiB;IAE9C,WAAW,CAAC,KAAK,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CAK9F"}

package/dist/index.js

@@ -0,0 +1,14 @@
+export class PlayIntegrityProvider {
+    constructor(host) {
+        this.host = host;
+        this.kind = 'play-integrity';
+        this.evidenceBinding = 'request-challenge';
+    }
+    async getEvidence(input) {
+        const evidence = await this.host.attest(input);
+        if (!evidence.token)
+            throw new Error('Play Integrity returned empty evidence.');
+        return evidence;
+    }
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAMA,MAAM,OAAO,qBAAqB;IAG9B,YAA6B,IAAuB;QAAvB,SAAI,GAAJ,IAAI,CAAmB;QAF3C,SAAI,GAAG,gBAAyB,CAAC;QACjC,oBAAe,GAAG,mBAA4B,CAAC;IACD,CAAC;IAExD,KAAK,CAAC,WAAW,CAAC,KAA4C;QAC1D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QAChF,OAAO,QAAQ,CAAC;IACpB,CAAC;CACJ"}

package/package.json

@@ -0,0 +1,16 @@
+{
+  "name": "openrtc-trust-play-integrity",
+  "version": "2.0.0-rc.15",
+  "private": false,
+  "type": "module",
+  "sideEffects": false,
+  "description": "Optional Google Play Integrity host adapter for OpenRTC 2.0 device enrollment.",
+  "license": "SEE LICENSE IN LICENSE",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "files": ["dist", "LICENSE", "README.md"],
+  "exports": { ".": { "types": "./dist/index.d.ts", "import": "./dist/index.js" }, "./package.json": "./package.json" },
+  "scripts": { "build": "rm -rf dist && tsc", "test": "vitest run", "test:deterministic": "vitest run", "prepublishOnly": "pnpm run build && pnpm run test" },
+  "peerDependencies": { "openrtc": "2.0.0-rc.15" },
+  "devDependencies": { "openrtc": "workspace:*", "typescript": "^5.8.3", "vitest": "^4.0.18" }
+}