owlmem 0.4.0 → 0.4.1

package/owlmem.mjs

@@ -27,8 +27,8 @@ import { homedir } from "node:os";
 import { join, dirname } from "node:path";
 import { spawn } from "node:child_process";
 
-export const VERSION = "0.4.0";
-const BASE = (process.env.OWLMEM_URL || "https://app.owlmem.com").replace(/\/$/, "");
+export const VERSION = "0.4.1";
+const BASE = (process.env.OWLMEM_URL || "https://owlmem.com").replace(/\/$/, "");
 const DIR = process.env.OWLMEM_HOME || join(process.env.XDG_CONFIG_HOME || join(homedir(), ".config"), "owlmem");
 const enc = new TextEncoder(), dec = new TextDecoder();
 const say = (...a) => process.stderr.write(a.join(" ") + "\n");
@@ -111,6 +111,43 @@ export async function sealForMachine(pubkey, rawKey, space) {
   const ct = await crypto.subtle.encrypt({ name: "AES-GCM", iv, additionalData: enc.encode(space) }, await unlockAesKey(eph.privateKey, pub, space, "encrypt"), rawKey);
   return { epk: b64(new Uint8Array(await crypto.subtle.exportKey("raw", eph.publicKey))), nonce: b64(iv), ct: b64(new Uint8Array(ct)) };
 }
+// ── passkey unlock (browser only: navigator.credentials) ──
+// A passkey's PRF extension returns 32 bytes only that passkey can compute (the server never sees them). They're stretched (HKDF) into a
+// wrapping key that seals the vault key; OwlMem stores only the sealed box (vault_key_wraps). The page that calls these runs on owlmem.com.
+const b64url = (u8) => b64(u8).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+const unb64url = (s) => { s = String(s).replace(/-/g, "+").replace(/_/g, "/"); while (s.length % 4) s += "="; return unb64(s); };
+async function prfWrapKey(prf) {
+  const k = await crypto.subtle.importKey("raw", prf, "HKDF", false, ["deriveKey"]);
+  return crypto.subtle.deriveKey({ name: "HKDF", hash: "SHA-256", salt: new Uint8Array(32), info: enc.encode("owlmem-vault-wrap-v1") }, k, { name: "AES-GCM", length: 256 }, false, ["encrypt", "decrypt"]);
+}
+const wrapAad = (space, user, credId) => enc.encode(space + "\n" + user + "\n" + credId);
+// challenge（可选）：服务器发的先验挑战。给了的话这一次刷 Passkey 同时就是「验明正身」——返回的 credential 交给服务器验签（10-24：导出要一步到位）
+export async function passkeyPrf(creds, challenge) {    // creds: [{cred_id, salt}] → {cred_id, prf, credential}
+  if (!globalThis.PublicKeyCredential) throw new Fail("This browser doesn't support passkeys.");
+  const map = Object.fromEntries(creds.map((c) => [c.cred_id, { first: unb64(c.salt) }]));
+  const prf = creds.length === 1 ? { eval: { first: unb64(creds[0].salt) } } : { evalByCredential: map };
+  const cred = await navigator.credentials.get({ publicKey: { challenge: challenge ? unb64url(challenge) : crypto.getRandomValues(new Uint8Array(32)), rpId: location.hostname, userVerification: "required",
+    timeout: 60000, allowCredentials: creds.map((c) => ({ type: "public-key", id: unb64url(c.cred_id) })), extensions: { prf } } });
+  const out = cred.getClientExtensionResults()?.prf?.results?.first;
+  if (!out) throw new Fail("This passkey can't unlock the vault (its device doesn't support the PRF feature). Use another passkey or the recovery code.");
+  const u = (b) => b64url(new Uint8Array(b));
+  return { cred_id: u(cred.rawId), prf: out, credential: { id: cred.id, type: cred.type, response: { clientDataJSON: u(cred.response.clientDataJSON),
+           authenticatorData: u(cred.response.authenticatorData), signature: u(cred.response.signature) } } };
+}
+export async function wrapVaultKey(prf, rawKey, space, user, credId) {
+  const iv = crypto.getRandomValues(new Uint8Array(12));
+  const ct = await crypto.subtle.encrypt({ name: "AES-GCM", iv, additionalData: wrapAad(space, user, credId) }, await prfWrapKey(prf), rawKey);
+  return { nonce: b64(iv), wrapped: b64(new Uint8Array(ct)) };
+}
+export async function unlockWithPasskey(wraps, space, user, keyCheck, challenge) {   // → {raw, cred_id, credential}
+  const r = await passkeyPrf(wraps, challenge);
+  const w = wraps.find((x) => x.cred_id === r.cred_id);
+  const raw = new Uint8Array(await crypto.subtle.decrypt({ name: "AES-GCM", iv: unb64(w.nonce), additionalData: wrapAad(space, user, w.cred_id) }, await prfWrapKey(r.prf), unb64(w.wrapped)));
+  if (!(await verifyKeyCheck(raw, space, keyCheck))) throw new Fail("Passkey unlock is out of date (the vault was reset). Use the recovery code and set the passkey up again.");
+  return { raw, cred_id: w.cred_id, credential: r.credential };
+}
+export function newSalt() { return b64(crypto.getRandomValues(new Uint8Array(32))); }
+
 export async function openFromBrowser(privateKey, space, box) {
   const epk = await crypto.subtle.importKey("raw", unb64(box.epk), ECDH, false, []);
   const pt = await crypto.subtle.decrypt({ name: "AES-GCM", iv: unb64(box.nonce), additionalData: enc.encode(space) }, await unlockAesKey(privateKey, epk, space, "decrypt"), unb64(box.ct));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "owlmem",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "description": "OwlMem command line: end-to-end encrypted vault for your AI agents, and a local MCP server.",
   "type": "module",
   "bin": { "owlmem": "owlmem.mjs" },