react-native-nitro-passkeys 0.1.0

package/ios/PasskeyJSON.swift

@@ -0,0 +1,195 @@
+import Foundation
+import NitroModules
+
+/// The WebAuthn JSON shapes iOS reads and writes. Decoders only declare the fields iOS uses;
+/// unknown keys (`timeout`, `hints`, `extensions`, …) are ignored.
+enum PasskeyJSON {
+  // MARK: Options (JS → native)
+
+  struct CreationOptions: Decodable {
+    // swiftlint:disable:next identifier_name
+    let rp: RelyingParty
+    let user: User
+    let challenge: String
+    let excludeCredentials: [Descriptor]?
+    let authenticatorSelection: Selection?
+    let attestation: String?
+  }
+
+  struct RelyingParty: Decodable {
+    let id: String?
+  }
+
+  struct User: Decodable {
+    let id: String
+    let name: String
+    let displayName: String?
+  }
+
+  struct Descriptor: Decodable {
+    let id: String
+  }
+
+  struct Selection: Decodable {
+    let userVerification: String?
+  }
+
+  struct RequestOptions: Decodable {
+    let challenge: String
+    let rpId: String?
+    let allowCredentials: [Descriptor]?
+    let userVerification: String?
+  }
+
+  // MARK: Responses (native → JS)
+
+  struct RegistrationResponseBody: Encodable {
+    let clientDataJSON: String
+    let attestationObject: String
+    let transports: [String]
+  }
+
+  struct RegistrationResponse: Encodable {
+    let id: String
+    let rawId: String
+    let type: String
+    let authenticatorAttachment: String
+    let clientExtensionResults: [String: String]
+    let response: RegistrationResponseBody
+
+    init(credentialID: Data, clientDataJSON: Data, attestationObject: Data, attachment: String) {
+      let encodedID = Base64URL.encode(credentialID)
+      id = encodedID
+      rawId = encodedID
+      type = "public-key"
+      authenticatorAttachment = attachment
+      clientExtensionResults = [:]
+      response = RegistrationResponseBody(
+        clientDataJSON: Base64URL.encode(clientDataJSON),
+        attestationObject: Base64URL.encode(attestationObject),
+        transports: ["internal", "hybrid"]
+      )
+    }
+  }
+
+  struct AssertionResponseBody: Encodable {
+    let clientDataJSON: String
+    let authenticatorData: String
+    let signature: String
+    /// `nil` is omitted from the output by the synthesized `encodeIfPresent`.
+    let userHandle: String?
+  }
+
+  struct AssertionResponse: Encodable {
+    let id: String
+    let rawId: String
+    let type: String
+    let authenticatorAttachment: String
+    let clientExtensionResults: [String: String]
+    let response: AssertionResponseBody
+
+    init(
+      credentialID: Data,
+      clientDataJSON: Data,
+      authenticatorData: Data,
+      signature: Data,
+      userID: Data?,
+      attachment: String
+    ) {
+      let encodedID = Base64URL.encode(credentialID)
+      id = encodedID
+      rawId = encodedID
+      type = "public-key"
+      authenticatorAttachment = attachment
+      clientExtensionResults = [:]
+      let userHandle = userID.flatMap { $0.isEmpty ? nil : Base64URL.encode($0) }
+      response = AssertionResponseBody(
+        clientDataJSON: Base64URL.encode(clientDataJSON),
+        authenticatorData: Base64URL.encode(authenticatorData),
+        signature: Base64URL.encode(signature),
+        userHandle: userHandle
+      )
+    }
+  }
+
+  static func encode<T: Encodable>(_ value: T) throws -> String {
+    let encoder = JSONEncoder()
+    encoder.outputFormatting = [.withoutEscapingSlashes]
+    guard let json = String(bytes: try encoder.encode(value), encoding: .utf8) else {
+      let message = PasskeyErrorToken.message(token: "unknown", "Could not encode the response")
+      throw RuntimeError.error(withMessage: message)
+    }
+    return json
+  }
+}
+
+// MARK: - Validated parameters
+
+/// Decoded, validated `create` inputs. Plain values only, so they can cross to the main thread.
+struct RegistrationParameters: Sendable {
+  let rpID: String
+  let challenge: Data
+  let userName: String
+  let userID: Data
+  let displayName: String?
+  let userVerification: String?
+  let attestation: String
+  let excludedCredentialIDs: [Data]
+
+  init(json: String) throws {
+    let options = try decodeOptions(PasskeyJSON.CreationOptions.self, from: json, label: "creation")
+    guard let rpID = options.rp.id, !rpID.isEmpty else {
+      throw invalidOptions("rp.id is required")
+    }
+    self.rpID = rpID
+    challenge = try decodeField(options.challenge, "challenge")
+    userName = options.user.name
+    userID = try decodeField(options.user.id, "user.id")
+    displayName = options.user.displayName
+    userVerification = options.authenticatorSelection?.userVerification
+    attestation = options.attestation ?? "none"
+    excludedCredentialIDs = try (options.excludeCredentials ?? []).enumerated().map { index, descriptor in
+      try decodeField(descriptor.id, "excludeCredentials[\(index)].id")
+    }
+  }
+}
+
+/// Decoded, validated `get` inputs.
+struct AssertionParameters: Sendable {
+  let rpID: String
+  let challenge: Data
+  let userVerification: String?
+  let allowedCredentialIDs: [Data]
+
+  init(json: String) throws {
+    let options = try decodeOptions(PasskeyJSON.RequestOptions.self, from: json, label: "request")
+    guard let rpID = options.rpId, !rpID.isEmpty else {
+      throw invalidOptions("rpId is required")
+    }
+    self.rpID = rpID
+    challenge = try decodeField(options.challenge, "challenge")
+    userVerification = options.userVerification
+    allowedCredentialIDs = try (options.allowCredentials ?? []).enumerated().map { index, descriptor in
+      try decodeField(descriptor.id, "allowCredentials[\(index)].id")
+    }
+  }
+}
+
+private func invalidOptions(_ text: String) -> Error {
+  RuntimeError.error(withMessage: PasskeyErrorToken.message(token: "invalidOptions", text))
+}
+
+private func decodeOptions<T: Decodable>(_ type: T.Type, from json: String, label: String) throws -> T {
+  do {
+    return try JSONDecoder().decode(type, from: Data(json.utf8))
+  } catch {
+    throw invalidOptions("Invalid \(label) options JSON: \(error.localizedDescription)")
+  }
+}
+
+private func decodeField(_ value: String, _ name: String) throws -> Data {
+  guard let data = Base64URL.decode(value) else {
+    throw invalidOptions("\(name) is not valid base64url")
+  }
+  return data
+}

package/lib/commonjs/PasskeyError.js

@@ -0,0 +1,39 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.PasskeyError = void 0;
+const CODES = new Set(['canceled', 'noCredentials', 'alreadyRegistered', 'domainNotAssociated', 'unsupported', 'invalidOptions', 'unknown']);
+const TOKEN_RE = /\[Passkeys:([A-Za-z0-9-]+)\]\s?/;
+const ASAUTH_RE = /^asauth-\d+$/;
+function codeForToken(token) {
+  if (token === undefined) return 'unknown';
+  if (token === 'asauth-1001') return 'canceled';
+  if (token === 'asauth-1006') return 'alreadyRegistered';
+  if (ASAUTH_RE.test(token)) return 'unknown';
+  return CODES.has(token) ? token : 'unknown';
+}
+class PasskeyError extends Error {
+  constructor(code, message) {
+    super(message);
+    this.name = 'PasskeyError';
+    this.code = code;
+  }
+
+  /** Normalises any thrown value into a `PasskeyError`. Never throws. */
+  static from(error) {
+    try {
+      if (error instanceof PasskeyError) return error;
+      const original = error instanceof Error ? error.message : typeof error === 'string' ? error : 'Unknown error';
+      const match = TOKEN_RE.exec(original);
+      const code = codeForToken(match?.[1]);
+      const stripped = match ? original.replace(TOKEN_RE, '') : original;
+      return new PasskeyError(code, stripped.length > 0 ? stripped : original);
+    } catch {
+      return new PasskeyError('unknown', 'Unknown error');
+    }
+  }
+}
+exports.PasskeyError = PasskeyError;
+//# sourceMappingURL=PasskeyError.js.map

package/lib/commonjs/PasskeyError.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["CODES","Set","TOKEN_RE","ASAUTH_RE","codeForToken","token","undefined","test","has","PasskeyError","Error","constructor","code","message","name","from","error","original","match","exec","stripped","replace","length","exports"],"sourceRoot":"../../src","sources":["PasskeyError.ts"],"mappings":";;;;;;AASA,MAAMA,KAA0B,GAAG,IAAIC,GAAG,CAAmB,CAC3D,UAAU,EACV,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,aAAa,EACb,gBAAgB,EAChB,SAAS,CACV,CAAC;AAEF,MAAMC,QAAQ,GAAG,iCAAiC;AAClD,MAAMC,SAAS,GAAG,cAAc;AAEhC,SAASC,YAAYA,CAACC,KAAyB,EAAoB;EACjE,IAAIA,KAAK,KAAKC,SAAS,EAAE,OAAO,SAAS;EACzC,IAAID,KAAK,KAAK,aAAa,EAAE,OAAO,UAAU;EAC9C,IAAIA,KAAK,KAAK,aAAa,EAAE,OAAO,mBAAmB;EACvD,IAAIF,SAAS,CAACI,IAAI,CAACF,KAAK,CAAC,EAAE,OAAO,SAAS;EAC3C,OAAOL,KAAK,CAACQ,GAAG,CAACH,KAAK,CAAC,GAAIA,KAAK,GAAwB,SAAS;AACnE;AAEO,MAAMI,YAAY,SAASC,KAAK,CAAC;EAGtCC,WAAWA,CAACC,IAAsB,EAAEC,OAAe,EAAE;IACnD,KAAK,CAACA,OAAO,CAAC;IACd,IAAI,CAACC,IAAI,GAAG,cAAc;IAC1B,IAAI,CAACF,IAAI,GAAGA,IAAI;EAClB;;EAEA;EACA,OAAOG,IAAIA,CAACC,KAAc,EAAgB;IACxC,IAAI;MACF,IAAIA,KAAK,YAAYP,YAAY,EAAE,OAAOO,KAAK;MAC/C,MAAMC,QAAQ,GACZD,KAAK,YAAYN,KAAK,GAClBM,KAAK,CAACH,OAAO,GACb,OAAOG,KAAK,KAAK,QAAQ,GACvBA,KAAK,GACL,eAAe;MACvB,MAAME,KAAK,GAAGhB,QAAQ,CAACiB,IAAI,CAACF,QAAQ,CAAC;MACrC,MAAML,IAAI,GAAGR,YAAY,CAACc,KAAK,GAAG,CAAC,CAAC,CAAC;MACrC,MAAME,QAAQ,GAAGF,KAAK,GAAGD,QAAQ,CAACI,OAAO,CAACnB,QAAQ,EAAE,EAAE,CAAC,GAAGe,QAAQ;MAClE,OAAO,IAAIR,YAAY,CAACG,IAAI,EAAEQ,QAAQ,CAACE,MAAM,GAAG,CAAC,GAAGF,QAAQ,GAAGH,QAAQ,CAAC;IAC1E,CAAC,CAAC,MAAM;MACN,OAAO,IAAIR,YAAY,CAAC,SAAS,EAAE,eAAe,CAAC;IACrD;EACF;AACF;AAACc,OAAA,CAAAd,YAAA,GAAAA,YAAA","ignoreList":[]}

package/lib/commonjs/index.js

@@ -0,0 +1,52 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+Object.defineProperty(exports, "PasskeyError", {
+  enumerable: true,
+  get: function () {
+    return _PasskeyError.PasskeyError;
+  }
+});
+exports.createPasskey = createPasskey;
+exports.getPasskey = getPasskey;
+exports.isPasskeySupported = isPasskeySupported;
+var _reactNativeNitroModules = require("react-native-nitro-modules");
+var _PasskeyError = require("./PasskeyError");
+var _response = require("./response");
+var _validate = require("./validate");
+// Deliberately not exported: every caller goes through the helpers and gets typed errors.
+const native = _reactNativeNitroModules.NitroModules.createHybridObject('NitroPasskeys');
+function isPasskeySupported() {
+  return native.isSupported;
+}
+async function createPasskey(options) {
+  if (!isPasskeySupported()) {
+    throw new _PasskeyError.PasskeyError('unsupported', 'Passkeys are not supported on this device');
+  }
+  const reason = (0, _validate.validateCreationOptions)(options);
+  if (reason) throw new _PasskeyError.PasskeyError('invalidOptions', reason);
+  let raw;
+  try {
+    raw = await native.create(JSON.stringify(options));
+  } catch (error) {
+    throw _PasskeyError.PasskeyError.from(error);
+  }
+  return (0, _response.parseRegistrationResponse)(raw);
+}
+async function getPasskey(options) {
+  if (!isPasskeySupported()) {
+    throw new _PasskeyError.PasskeyError('unsupported', 'Passkeys are not supported on this device');
+  }
+  const reason = (0, _validate.validateRequestOptions)(options);
+  if (reason) throw new _PasskeyError.PasskeyError('invalidOptions', reason);
+  let raw;
+  try {
+    raw = await native.get(JSON.stringify(options));
+  } catch (error) {
+    throw _PasskeyError.PasskeyError.from(error);
+  }
+  return (0, _response.parseAuthenticationResponse)(raw);
+}
+//# sourceMappingURL=index.js.map

package/lib/commonjs/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_reactNativeNitroModules","require","_PasskeyError","_response","_validate","native","NitroModules","createHybridObject","isPasskeySupported","isSupported","createPasskey","options","PasskeyError","reason","validateCreationOptions","raw","create","JSON","stringify","error","from","parseRegistrationResponse","getPasskey","validateRequestOptions","get","parseAuthenticationResponse"],"sourceRoot":"../../src","sources":["index.ts"],"mappings":";;;;;;;;;;;;;;AAAA,IAAAA,wBAAA,GAAAC,OAAA;AAEA,IAAAC,aAAA,GAAAD,OAAA;AACA,IAAAE,SAAA,GAAAF,OAAA;AAWA,IAAAG,SAAA,GAAAH,OAAA;AAEA;AACA,MAAMI,MAAM,GAAGC,qCAAY,CAACC,kBAAkB,CAAgB,eAAe,CAAC;AAEvE,SAASC,kBAAkBA,CAAA,EAAY;EAC5C,OAAOH,MAAM,CAACI,WAAW;AAC3B;AAEO,eAAeC,aAAaA,CACjCC,OAA+C,EACZ;EACnC,IAAI,CAACH,kBAAkB,CAAC,CAAC,EAAE;IACzB,MAAM,IAAII,0BAAY,CACpB,aAAa,EACb,2CACF,CAAC;EACH;EACA,MAAMC,MAAM,GAAG,IAAAC,iCAAuB,EAACH,OAAO,CAAC;EAC/C,IAAIE,MAAM,EAAE,MAAM,IAAID,0BAAY,CAAC,gBAAgB,EAAEC,MAAM,CAAC;EAC5D,IAAIE,GAAW;EACf,IAAI;IACFA,GAAG,GAAG,MAAMV,MAAM,CAACW,MAAM,CAACC,IAAI,CAACC,SAAS,CAACP,OAAO,CAAC,CAAC;EACpD,CAAC,CAAC,OAAOQ,KAAK,EAAE;IACd,MAAMP,0BAAY,CAACQ,IAAI,CAACD,KAAK,CAAC;EAChC;EACA,OAAO,IAAAE,mCAAyB,EAACN,GAAG,CAAC;AACvC;AAEO,eAAeO,UAAUA,CAC9BX,OAA8C,EACT;EACrC,IAAI,CAACH,kBAAkB,CAAC,CAAC,EAAE;IACzB,MAAM,IAAII,0BAAY,CACpB,aAAa,EACb,2CACF,CAAC;EACH;EACA,MAAMC,MAAM,GAAG,IAAAU,gCAAsB,EAACZ,OAAO,CAAC;EAC9C,IAAIE,MAAM,EAAE,MAAM,IAAID,0BAAY,CAAC,gBAAgB,EAAEC,MAAM,CAAC;EAC5D,IAAIE,GAAW;EACf,IAAI;IACFA,GAAG,GAAG,MAAMV,MAAM,CAACmB,GAAG,CAACP,IAAI,CAACC,SAAS,CAACP,OAAO,CAAC,CAAC;EACjD,CAAC,CAAC,OAAOQ,KAAK,EAAE;IACd,MAAMP,0BAAY,CAACQ,IAAI,CAACD,KAAK,CAAC;EAChC;EACA,OAAO,IAAAM,qCAA2B,EAACV,GAAG,CAAC;AACzC","ignoreList":[]}

package/lib/commonjs/package.json

@@ -0,0 +1 @@
+{"type":"commonjs"}

package/lib/commonjs/response.js

@@ -0,0 +1,30 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.parseAuthenticationResponse = parseAuthenticationResponse;
+exports.parseRegistrationResponse = parseRegistrationResponse;
+var _PasskeyError = require("./PasskeyError");
+var _validate = require("./validate");
+function parse(raw, label, validate) {
+  let value;
+  try {
+    value = JSON.parse(raw);
+  } catch {
+    throw new _PasskeyError.PasskeyError('unknown', `Malformed ${label} response: not JSON`);
+  }
+  const reason = validate(value);
+  if (reason) throw new _PasskeyError.PasskeyError('unknown', `Malformed ${label} response: ${reason}`);
+  const result = value;
+  // The only normalisation: nothing else is added, removed or re-encoded.
+  result.clientExtensionResults ??= {};
+  return result;
+}
+function parseRegistrationResponse(raw) {
+  return parse(raw, 'registration', _validate.validateRegistrationResponse);
+}
+function parseAuthenticationResponse(raw) {
+  return parse(raw, 'authentication', _validate.validateAuthenticationResponse);
+}
+//# sourceMappingURL=response.js.map

package/lib/commonjs/response.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_PasskeyError","require","_validate","parse","raw","label","validate","value","JSON","PasskeyError","reason","result","clientExtensionResults","parseRegistrationResponse","validateRegistrationResponse","parseAuthenticationResponse","validateAuthenticationResponse"],"sourceRoot":"../../src","sources":["response.ts"],"mappings":";;;;;;;AAAA,IAAAA,aAAA,GAAAC,OAAA;AAKA,IAAAC,SAAA,GAAAD,OAAA;AAKA,SAASE,KAAKA,CACZC,GAAW,EACXC,KAAwC,EACxCC,QAAgD,EAC7C;EACH,IAAIC,KAAc;EAClB,IAAI;IACFA,KAAK,GAAGC,IAAI,CAACL,KAAK,CAACC,GAAG,CAAC;EACzB,CAAC,CAAC,MAAM;IACN,MAAM,IAAIK,0BAAY,CAAC,SAAS,EAAE,aAAaJ,KAAK,qBAAqB,CAAC;EAC5E;EACA,MAAMK,MAAM,GAAGJ,QAAQ,CAACC,KAAK,CAAC;EAC9B,IAAIG,MAAM,EACR,MAAM,IAAID,0BAAY,CAAC,SAAS,EAAE,aAAaJ,KAAK,cAAcK,MAAM,EAAE,CAAC;EAC7E,MAAMC,MAAM,GAAGJ,KAAU;EACzB;EACAI,MAAM,CAACC,sBAAsB,KAAK,CAAC,CAAC;EACpC,OAAOD,MAAM;AACf;AAEO,SAASE,yBAAyBA,CACvCT,GAAW,EACe;EAC1B,OAAOD,KAAK,CACVC,GAAG,EACH,cAAc,EACdU,sCACF,CAAC;AACH;AAEO,SAASC,2BAA2BA,CACzCX,GAAW,EACiB;EAC5B,OAAOD,KAAK,CACVC,GAAG,EACH,gBAAgB,EAChBY,wCACF,CAAC;AACH","ignoreList":[]}

package/lib/commonjs/specs/nitro-passkeys.nitro.js

@@ -0,0 +1,6 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+//# sourceMappingURL=nitro-passkeys.nitro.js.map

package/lib/commonjs/specs/nitro-passkeys.nitro.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sourceRoot":"../../../src","sources":["specs/nitro-passkeys.nitro.ts"],"mappings":"","ignoreList":[]}

package/lib/commonjs/types.js

@@ -0,0 +1,2 @@
+"use strict";
+//# sourceMappingURL=types.js.map

package/lib/commonjs/types.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sourceRoot":"../../src","sources":["types.ts"],"mappings":"","ignoreList":[]}

package/lib/commonjs/validate.js

@@ -0,0 +1,118 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.base64URLByteLength = base64URLByteLength;
+exports.isBase64URL = isBase64URL;
+exports.validateAuthenticationResponse = validateAuthenticationResponse;
+exports.validateCreationOptions = validateCreationOptions;
+exports.validateRegistrationResponse = validateRegistrationResponse;
+exports.validateRequestOptions = validateRequestOptions;
+const BASE64URL_RE = /^[A-Za-z0-9_-]+={0,2}$/;
+function unpaddedLength(value) {
+  let end = value.length;
+  while (end > 0 && value[end - 1] === '=') end--;
+  return end;
+}
+
+/**
+ * True for a non-empty base64url string with optional `=` padding. Rejects `+`, `/`, whitespace,
+ * impossible lengths (unpadded length % 4 === 1) and padding that does not complete a 4-char group.
+ */
+function isBase64URL(value) {
+  if (typeof value !== 'string' || !BASE64URL_RE.test(value)) return false;
+  const unpadded = unpaddedLength(value);
+  if (unpadded === 0 || unpadded % 4 === 1) return false;
+  if (unpadded !== value.length && value.length % 4 !== 0) return false;
+  return true;
+}
+
+/** Number of bytes a valid base64url string decodes to. */
+function base64URLByteLength(value) {
+  return Math.floor(unpaddedLength(value) * 3 / 4);
+}
+function isRecord(value) {
+  return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function isNonEmptyString(value) {
+  return typeof value === 'string' && value.length > 0;
+}
+function validateDescriptors(value, field) {
+  if (value === undefined) return undefined;
+  if (!Array.isArray(value)) return `${field} must be an array`;
+  for (const [index, entry] of value.entries()) {
+    if (!isRecord(entry) || !isBase64URL(entry['id'])) {
+      return `${field}[${index}].id is not valid base64url`;
+    }
+  }
+  return undefined;
+}
+
+/** Returns a reason for the first failing rule, or `undefined` when the options are valid. */
+function validateCreationOptions(options) {
+  if (!isRecord(options)) return 'options must be an object';
+  const {
+    rp,
+    user,
+    challenge,
+    excludeCredentials,
+    pubKeyCredParams
+  } = options;
+  if (!isRecord(rp)) return 'rp must be an object';
+  if (!isNonEmptyString(rp['id'])) return 'rp.id is required';
+  if (!isNonEmptyString(challenge)) return 'challenge is required';
+  if (!isBase64URL(challenge)) return 'challenge is not valid base64url';
+  if (!isRecord(user)) return 'user must be an object';
+  if (!isNonEmptyString(user['id'])) return 'user.id is required';
+  if (!isNonEmptyString(user['name'])) return 'user.name is required';
+  if (!isBase64URL(user['id'])) return 'user.id is not valid base64url';
+  const userIdBytes = base64URLByteLength(user['id']);
+  if (userIdBytes < 1 || userIdBytes > 64) return 'user.id must decode to 1-64 bytes';
+  const excludeReason = validateDescriptors(excludeCredentials, 'excludeCredentials');
+  if (excludeReason) return excludeReason;
+  if (pubKeyCredParams !== undefined) {
+    if (!Array.isArray(pubKeyCredParams)) return 'pubKeyCredParams must be an array';
+    if (pubKeyCredParams.length > 0 && !pubKeyCredParams.some(param => isRecord(param) && param['alg'] === -7)) {
+      return 'pubKeyCredParams must include ES256 (alg -7)';
+    }
+  }
+  return undefined;
+}
+
+/** Returns a reason for the first failing rule, or `undefined` when the options are valid. */
+function validateRequestOptions(options) {
+  if (!isRecord(options)) return 'options must be an object';
+  if (!isNonEmptyString(options['rpId'])) return 'rpId is required';
+  if (!isNonEmptyString(options['challenge'])) return 'challenge is required';
+  if (!isBase64URL(options['challenge'])) return 'challenge is not valid base64url';
+  return validateDescriptors(options['allowCredentials'], 'allowCredentials');
+}
+function validateCommonResponse(value) {
+  if (!isRecord(value)) return 'response must be an object';
+  if (!isNonEmptyString(value['id'])) return 'id is missing';
+  if (!isNonEmptyString(value['rawId'])) return 'rawId is missing';
+  if (value['id'] !== value['rawId']) return 'id does not equal rawId';
+  if (value['type'] !== 'public-key') return "type must be 'public-key'";
+  if (!isRecord(value['response'])) return 'response.response is missing';
+  return undefined;
+}
+function missingFields(response, fields) {
+  for (const field of fields) {
+    if (!isNonEmptyString(response[field])) return `response.${field} is missing`;
+  }
+  return undefined;
+}
+function validateRegistrationResponse(value) {
+  const common = validateCommonResponse(value);
+  if (common) return common;
+  const response = value.response;
+  return missingFields(response, ['clientDataJSON', 'attestationObject']);
+}
+function validateAuthenticationResponse(value) {
+  const common = validateCommonResponse(value);
+  if (common) return common;
+  const response = value.response;
+  return missingFields(response, ['clientDataJSON', 'authenticatorData', 'signature']);
+}
+//# sourceMappingURL=validate.js.map

package/lib/commonjs/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["BASE64URL_RE","unpaddedLength","value","end","length","isBase64URL","test","unpadded","base64URLByteLength","Math","floor","isRecord","Array","isArray","isNonEmptyString","validateDescriptors","field","undefined","index","entry","entries","validateCreationOptions","options","rp","user","challenge","excludeCredentials","pubKeyCredParams","userIdBytes","excludeReason","some","param","validateRequestOptions","validateCommonResponse","missingFields","response","fields","validateRegistrationResponse","common","validateAuthenticationResponse"],"sourceRoot":"../../src","sources":["validate.ts"],"mappings":";;;;;;;;;;;AAAA,MAAMA,YAAY,GAAG,wBAAwB;AAE7C,SAASC,cAAcA,CAACC,KAAa,EAAU;EAC7C,IAAIC,GAAG,GAAGD,KAAK,CAACE,MAAM;EACtB,OAAOD,GAAG,GAAG,CAAC,IAAID,KAAK,CAACC,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG,EAAEA,GAAG,EAAE;EAC/C,OAAOA,GAAG;AACZ;;AAEA;AACA;AACA;AACA;AACO,SAASE,WAAWA,CAACH,KAAc,EAAmB;EAC3D,IAAI,OAAOA,KAAK,KAAK,QAAQ,IAAI,CAACF,YAAY,CAACM,IAAI,CAACJ,KAAK,CAAC,EAAE,OAAO,KAAK;EACxE,MAAMK,QAAQ,GAAGN,cAAc,CAACC,KAAK,CAAC;EACtC,IAAIK,QAAQ,KAAK,CAAC,IAAIA,QAAQ,GAAG,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK;EACtD,IAAIA,QAAQ,KAAKL,KAAK,CAACE,MAAM,IAAIF,KAAK,CAACE,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK;EACrE,OAAO,IAAI;AACb;;AAEA;AACO,SAASI,mBAAmBA,CAACN,KAAa,EAAU;EACzD,OAAOO,IAAI,CAACC,KAAK,CAAET,cAAc,CAACC,KAAK,CAAC,GAAG,CAAC,GAAI,CAAC,CAAC;AACpD;AAEA,SAASS,QAAQA,CAACT,KAAc,EAAoC;EAClE,OAAO,OAAOA,KAAK,KAAK,QAAQ,IAAIA,KAAK,KAAK,IAAI,IAAI,CAACU,KAAK,CAACC,OAAO,CAACX,KAAK,CAAC;AAC7E;AAEA,SAASY,gBAAgBA,CAACZ,KAAc,EAAmB;EACzD,OAAO,OAAOA,KAAK,KAAK,QAAQ,IAAIA,KAAK,CAACE,MAAM,GAAG,CAAC;AACtD;AAEA,SAASW,mBAAmBA,CAC1Bb,KAAc,EACdc,KAAa,EACO;EACpB,IAAId,KAAK,KAAKe,SAAS,EAAE,OAAOA,SAAS;EACzC,IAAI,CAACL,KAAK,CAACC,OAAO,CAACX,KAAK,CAAC,EAAE,OAAO,GAAGc,KAAK,mBAAmB;EAC7D,KAAK,MAAM,CAACE,KAAK,EAAEC,KAAK,CAAC,IAAIjB,KAAK,CAACkB,OAAO,CAAC,CAAC,EAAE;IAC5C,IAAI,CAACT,QAAQ,CAACQ,KAAK,CAAC,IAAI,CAACd,WAAW,CAACc,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE;MACjD,OAAO,GAAGH,KAAK,IAAIE,KAAK,6BAA6B;IACvD;EACF;EACA,OAAOD,SAAS;AAClB;;AAEA;AACO,SAASI,uBAAuBA,CAACC,OAAgB,EAAsB;EAC5E,IAAI,CAACX,QAAQ,CAACW,OAAO,CAAC,EAAE,OAAO,2BAA2B;EAC1D,MAAM;IAAEC,EAAE;IAAEC,IAAI;IAAEC,SAAS;IAAEC,kBAAkB;IAAEC;EAAiB,CAAC,GAAGL,OAAO;EAC7E,IAAI,CAACX,QAAQ,CAACY,EAAE,CAAC,EAAE,OAAO,sBAAsB;EAChD,IAAI,CAACT,gBAAgB,CAACS,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,mBAAmB;EAC3D,IAAI,CAACT,gBAAgB,CAACW,SAAS,CAAC,EAAE,OAAO,uBAAuB;EAChE,IAAI,CAACpB,WAAW,CAACoB,SAAS,CAAC,EAAE,OAAO,kCAAkC;EACtE,IAAI,CAACd,QAAQ,CAACa,IAAI,CAAC,EAAE,OAAO,wBAAwB;EACpD,IAAI,CAACV,gBAAgB,CAACU,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,qBAAqB;EAC/D,IAAI,CAACV,gBAAgB,CAACU,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,uBAAuB;EACnE,IAAI,CAACnB,WAAW,CAACmB,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,gCAAgC;EACrE,MAAMI,WAAW,GAAGpB,mBAAmB,CAACgB,IAAI,CAAC,IAAI,CAAC,CAAC;EACnD,IAAII,WAAW,GAAG,CAAC,IAAIA,WAAW,GAAG,EAAE,EACrC,OAAO,mCAAmC;EAC5C,MAAMC,aAAa,GAAGd,mBAAmB,CACvCW,kBAAkB,EAClB,oBACF,CAAC;EACD,IAAIG,aAAa,EAAE,OAAOA,aAAa;EACvC,IAAIF,gBAAgB,KAAKV,SAAS,EAAE;IAClC,IAAI,CAACL,KAAK,CAACC,OAAO,CAACc,gBAAgB,CAAC,EAClC,OAAO,mCAAmC;IAC5C,IACEA,gBAAgB,CAACvB,MAAM,GAAG,CAAC,IAC3B,CAACuB,gBAAgB,CAACG,IAAI,CAAEC,KAAK,IAAKpB,QAAQ,CAACoB,KAAK,CAAC,IAAIA,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EACzE;MACA,OAAO,8CAA8C;IACvD;EACF;EACA,OAAOd,SAAS;AAClB;;AAEA;AACO,SAASe,sBAAsBA,CAACV,OAAgB,EAAsB;EAC3E,IAAI,CAACX,QAAQ,CAACW,OAAO,CAAC,EAAE,OAAO,2BAA2B;EAC1D,IAAI,CAACR,gBAAgB,CAACQ,OAAO,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,kBAAkB;EACjE,IAAI,CAACR,gBAAgB,CAACQ,OAAO,CAAC,WAAW,CAAC,CAAC,EAAE,OAAO,uBAAuB;EAC3E,IAAI,CAACjB,WAAW,CAACiB,OAAO,CAAC,WAAW,CAAC,CAAC,EACpC,OAAO,kCAAkC;EAC3C,OAAOP,mBAAmB,CAACO,OAAO,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;AAC7E;AAEA,SAASW,sBAAsBA,CAAC/B,KAAc,EAAsB;EAClE,IAAI,CAACS,QAAQ,CAACT,KAAK,CAAC,EAAE,OAAO,4BAA4B;EACzD,IAAI,CAACY,gBAAgB,CAACZ,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,OAAO,eAAe;EAC1D,IAAI,CAACY,gBAAgB,CAACZ,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,kBAAkB;EAChE,IAAIA,KAAK,CAAC,IAAI,CAAC,KAAKA,KAAK,CAAC,OAAO,CAAC,EAAE,OAAO,yBAAyB;EACpE,IAAIA,KAAK,CAAC,MAAM,CAAC,KAAK,YAAY,EAAE,OAAO,2BAA2B;EACtE,IAAI,CAACS,QAAQ,CAACT,KAAK,CAAC,UAAU,CAAC,CAAC,EAAE,OAAO,8BAA8B;EACvE,OAAOe,SAAS;AAClB;AAEA,SAASiB,aAAaA,CACpBC,QAAiC,EACjCC,MAAgB,EACI;EACpB,KAAK,MAAMpB,KAAK,IAAIoB,MAAM,EAAE;IAC1B,IAAI,CAACtB,gBAAgB,CAACqB,QAAQ,CAACnB,KAAK,CAAC,CAAC,EACpC,OAAO,YAAYA,KAAK,aAAa;EACzC;EACA,OAAOC,SAAS;AAClB;AAEO,SAASoB,4BAA4BA,CAC1CnC,KAAc,EACM;EACpB,MAAMoC,MAAM,GAAGL,sBAAsB,CAAC/B,KAAK,CAAC;EAC5C,IAAIoC,MAAM,EAAE,OAAOA,MAAM;EACzB,MAAMH,QAAQ,GAAIjC,KAAK,CAA2CiC,QAAQ;EAC1E,OAAOD,aAAa,CAACC,QAAQ,EAAE,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC;AACzE;AAEO,SAASI,8BAA8BA,CAC5CrC,KAAc,EACM;EACpB,MAAMoC,MAAM,GAAGL,sBAAsB,CAAC/B,KAAK,CAAC;EAC5C,IAAIoC,MAAM,EAAE,OAAOA,MAAM;EACzB,MAAMH,QAAQ,GAAIjC,KAAK,CAA2CiC,QAAQ;EAC1E,OAAOD,aAAa,CAACC,QAAQ,EAAE,CAC7B,gBAAgB,EAChB,mBAAmB,EACnB,WAAW,CACZ,CAAC;AACJ","ignoreList":[]}

package/lib/module/PasskeyError.js

@@ -0,0 +1,34 @@
+"use strict";
+
+const CODES = new Set(['canceled', 'noCredentials', 'alreadyRegistered', 'domainNotAssociated', 'unsupported', 'invalidOptions', 'unknown']);
+const TOKEN_RE = /\[Passkeys:([A-Za-z0-9-]+)\]\s?/;
+const ASAUTH_RE = /^asauth-\d+$/;
+function codeForToken(token) {
+  if (token === undefined) return 'unknown';
+  if (token === 'asauth-1001') return 'canceled';
+  if (token === 'asauth-1006') return 'alreadyRegistered';
+  if (ASAUTH_RE.test(token)) return 'unknown';
+  return CODES.has(token) ? token : 'unknown';
+}
+export class PasskeyError extends Error {
+  constructor(code, message) {
+    super(message);
+    this.name = 'PasskeyError';
+    this.code = code;
+  }
+
+  /** Normalises any thrown value into a `PasskeyError`. Never throws. */
+  static from(error) {
+    try {
+      if (error instanceof PasskeyError) return error;
+      const original = error instanceof Error ? error.message : typeof error === 'string' ? error : 'Unknown error';
+      const match = TOKEN_RE.exec(original);
+      const code = codeForToken(match?.[1]);
+      const stripped = match ? original.replace(TOKEN_RE, '') : original;
+      return new PasskeyError(code, stripped.length > 0 ? stripped : original);
+    } catch {
+      return new PasskeyError('unknown', 'Unknown error');
+    }
+  }
+}
+//# sourceMappingURL=PasskeyError.js.map

package/lib/module/PasskeyError.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["CODES","Set","TOKEN_RE","ASAUTH_RE","codeForToken","token","undefined","test","has","PasskeyError","Error","constructor","code","message","name","from","error","original","match","exec","stripped","replace","length"],"sourceRoot":"../../src","sources":["PasskeyError.ts"],"mappings":";;AASA,MAAMA,KAA0B,GAAG,IAAIC,GAAG,CAAmB,CAC3D,UAAU,EACV,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,aAAa,EACb,gBAAgB,EAChB,SAAS,CACV,CAAC;AAEF,MAAMC,QAAQ,GAAG,iCAAiC;AAClD,MAAMC,SAAS,GAAG,cAAc;AAEhC,SAASC,YAAYA,CAACC,KAAyB,EAAoB;EACjE,IAAIA,KAAK,KAAKC,SAAS,EAAE,OAAO,SAAS;EACzC,IAAID,KAAK,KAAK,aAAa,EAAE,OAAO,UAAU;EAC9C,IAAIA,KAAK,KAAK,aAAa,EAAE,OAAO,mBAAmB;EACvD,IAAIF,SAAS,CAACI,IAAI,CAACF,KAAK,CAAC,EAAE,OAAO,SAAS;EAC3C,OAAOL,KAAK,CAACQ,GAAG,CAACH,KAAK,CAAC,GAAIA,KAAK,GAAwB,SAAS;AACnE;AAEA,OAAO,MAAMI,YAAY,SAASC,KAAK,CAAC;EAGtCC,WAAWA,CAACC,IAAsB,EAAEC,OAAe,EAAE;IACnD,KAAK,CAACA,OAAO,CAAC;IACd,IAAI,CAACC,IAAI,GAAG,cAAc;IAC1B,IAAI,CAACF,IAAI,GAAGA,IAAI;EAClB;;EAEA;EACA,OAAOG,IAAIA,CAACC,KAAc,EAAgB;IACxC,IAAI;MACF,IAAIA,KAAK,YAAYP,YAAY,EAAE,OAAOO,KAAK;MAC/C,MAAMC,QAAQ,GACZD,KAAK,YAAYN,KAAK,GAClBM,KAAK,CAACH,OAAO,GACb,OAAOG,KAAK,KAAK,QAAQ,GACvBA,KAAK,GACL,eAAe;MACvB,MAAME,KAAK,GAAGhB,QAAQ,CAACiB,IAAI,CAACF,QAAQ,CAAC;MACrC,MAAML,IAAI,GAAGR,YAAY,CAACc,KAAK,GAAG,CAAC,CAAC,CAAC;MACrC,MAAME,QAAQ,GAAGF,KAAK,GAAGD,QAAQ,CAACI,OAAO,CAACnB,QAAQ,EAAE,EAAE,CAAC,GAAGe,QAAQ;MAClE,OAAO,IAAIR,YAAY,CAACG,IAAI,EAAEQ,QAAQ,CAACE,MAAM,GAAG,CAAC,GAAGF,QAAQ,GAAGH,QAAQ,CAAC;IAC1E,CAAC,CAAC,MAAM;MACN,OAAO,IAAIR,YAAY,CAAC,SAAS,EAAE,eAAe,CAAC;IACrD;EACF;AACF","ignoreList":[]}

package/lib/module/index.js

@@ -0,0 +1,42 @@
+"use strict";
+
+import { NitroModules } from 'react-native-nitro-modules';
+import { PasskeyError } from './PasskeyError';
+import { parseAuthenticationResponse, parseRegistrationResponse } from './response';
+import { validateCreationOptions, validateRequestOptions } from './validate';
+
+// Deliberately not exported: every caller goes through the helpers and gets typed errors.
+const native = NitroModules.createHybridObject('NitroPasskeys');
+export function isPasskeySupported() {
+  return native.isSupported;
+}
+export async function createPasskey(options) {
+  if (!isPasskeySupported()) {
+    throw new PasskeyError('unsupported', 'Passkeys are not supported on this device');
+  }
+  const reason = validateCreationOptions(options);
+  if (reason) throw new PasskeyError('invalidOptions', reason);
+  let raw;
+  try {
+    raw = await native.create(JSON.stringify(options));
+  } catch (error) {
+    throw PasskeyError.from(error);
+  }
+  return parseRegistrationResponse(raw);
+}
+export async function getPasskey(options) {
+  if (!isPasskeySupported()) {
+    throw new PasskeyError('unsupported', 'Passkeys are not supported on this device');
+  }
+  const reason = validateRequestOptions(options);
+  if (reason) throw new PasskeyError('invalidOptions', reason);
+  let raw;
+  try {
+    raw = await native.get(JSON.stringify(options));
+  } catch (error) {
+    throw PasskeyError.from(error);
+  }
+  return parseAuthenticationResponse(raw);
+}
+export { PasskeyError } from './PasskeyError';
+//# sourceMappingURL=index.js.map

package/lib/module/index.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["NitroModules","PasskeyError","parseAuthenticationResponse","parseRegistrationResponse","validateCreationOptions","validateRequestOptions","native","createHybridObject","isPasskeySupported","isSupported","createPasskey","options","reason","raw","create","JSON","stringify","error","from","getPasskey","get"],"sourceRoot":"../../src","sources":["index.ts"],"mappings":";;AAAA,SAASA,YAAY,QAAQ,4BAA4B;AAEzD,SAASC,YAAY,QAAQ,gBAAgB;AAC7C,SACEC,2BAA2B,EAC3BC,yBAAyB,QACpB,YAAY;AAQnB,SAASC,uBAAuB,EAAEC,sBAAsB,QAAQ,YAAY;;AAE5E;AACA,MAAMC,MAAM,GAAGN,YAAY,CAACO,kBAAkB,CAAgB,eAAe,CAAC;AAE9E,OAAO,SAASC,kBAAkBA,CAAA,EAAY;EAC5C,OAAOF,MAAM,CAACG,WAAW;AAC3B;AAEA,OAAO,eAAeC,aAAaA,CACjCC,OAA+C,EACZ;EACnC,IAAI,CAACH,kBAAkB,CAAC,CAAC,EAAE;IACzB,MAAM,IAAIP,YAAY,CACpB,aAAa,EACb,2CACF,CAAC;EACH;EACA,MAAMW,MAAM,GAAGR,uBAAuB,CAACO,OAAO,CAAC;EAC/C,IAAIC,MAAM,EAAE,MAAM,IAAIX,YAAY,CAAC,gBAAgB,EAAEW,MAAM,CAAC;EAC5D,IAAIC,GAAW;EACf,IAAI;IACFA,GAAG,GAAG,MAAMP,MAAM,CAACQ,MAAM,CAACC,IAAI,CAACC,SAAS,CAACL,OAAO,CAAC,CAAC;EACpD,CAAC,CAAC,OAAOM,KAAK,EAAE;IACd,MAAMhB,YAAY,CAACiB,IAAI,CAACD,KAAK,CAAC;EAChC;EACA,OAAOd,yBAAyB,CAACU,GAAG,CAAC;AACvC;AAEA,OAAO,eAAeM,UAAUA,CAC9BR,OAA8C,EACT;EACrC,IAAI,CAACH,kBAAkB,CAAC,CAAC,EAAE;IACzB,MAAM,IAAIP,YAAY,CACpB,aAAa,EACb,2CACF,CAAC;EACH;EACA,MAAMW,MAAM,GAAGP,sBAAsB,CAACM,OAAO,CAAC;EAC9C,IAAIC,MAAM,EAAE,MAAM,IAAIX,YAAY,CAAC,gBAAgB,EAAEW,MAAM,CAAC;EAC5D,IAAIC,GAAW;EACf,IAAI;IACFA,GAAG,GAAG,MAAMP,MAAM,CAACc,GAAG,CAACL,IAAI,CAACC,SAAS,CAACL,OAAO,CAAC,CAAC;EACjD,CAAC,CAAC,OAAOM,KAAK,EAAE;IACd,MAAMhB,YAAY,CAACiB,IAAI,CAACD,KAAK,CAAC;EAChC;EACA,OAAOf,2BAA2B,CAACW,GAAG,CAAC;AACzC;AAEA,SAASZ,YAAY,QAAQ,gBAAgB","ignoreList":[]}

package/lib/module/response.js

@@ -0,0 +1,25 @@
+"use strict";
+
+import { PasskeyError } from './PasskeyError';
+import { validateAuthenticationResponse, validateRegistrationResponse } from './validate';
+function parse(raw, label, validate) {
+  let value;
+  try {
+    value = JSON.parse(raw);
+  } catch {
+    throw new PasskeyError('unknown', `Malformed ${label} response: not JSON`);
+  }
+  const reason = validate(value);
+  if (reason) throw new PasskeyError('unknown', `Malformed ${label} response: ${reason}`);
+  const result = value;
+  // The only normalisation: nothing else is added, removed or re-encoded.
+  result.clientExtensionResults ??= {};
+  return result;
+}
+export function parseRegistrationResponse(raw) {
+  return parse(raw, 'registration', validateRegistrationResponse);
+}
+export function parseAuthenticationResponse(raw) {
+  return parse(raw, 'authentication', validateAuthenticationResponse);
+}
+//# sourceMappingURL=response.js.map

package/lib/module/response.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["PasskeyError","validateAuthenticationResponse","validateRegistrationResponse","parse","raw","label","validate","value","JSON","reason","result","clientExtensionResults","parseRegistrationResponse","parseAuthenticationResponse"],"sourceRoot":"../../src","sources":["response.ts"],"mappings":";;AAAA,SAASA,YAAY,QAAQ,gBAAgB;AAK7C,SACEC,8BAA8B,EAC9BC,4BAA4B,QACvB,YAAY;AAEnB,SAASC,KAAKA,CACZC,GAAW,EACXC,KAAwC,EACxCC,QAAgD,EAC7C;EACH,IAAIC,KAAc;EAClB,IAAI;IACFA,KAAK,GAAGC,IAAI,CAACL,KAAK,CAACC,GAAG,CAAC;EACzB,CAAC,CAAC,MAAM;IACN,MAAM,IAAIJ,YAAY,CAAC,SAAS,EAAE,aAAaK,KAAK,qBAAqB,CAAC;EAC5E;EACA,MAAMI,MAAM,GAAGH,QAAQ,CAACC,KAAK,CAAC;EAC9B,IAAIE,MAAM,EACR,MAAM,IAAIT,YAAY,CAAC,SAAS,EAAE,aAAaK,KAAK,cAAcI,MAAM,EAAE,CAAC;EAC7E,MAAMC,MAAM,GAAGH,KAAU;EACzB;EACAG,MAAM,CAACC,sBAAsB,KAAK,CAAC,CAAC;EACpC,OAAOD,MAAM;AACf;AAEA,OAAO,SAASE,yBAAyBA,CACvCR,GAAW,EACe;EAC1B,OAAOD,KAAK,CACVC,GAAG,EACH,cAAc,EACdF,4BACF,CAAC;AACH;AAEA,OAAO,SAASW,2BAA2BA,CACzCT,GAAW,EACiB;EAC5B,OAAOD,KAAK,CACVC,GAAG,EACH,gBAAgB,EAChBH,8BACF,CAAC;AACH","ignoreList":[]}

package/lib/module/specs/nitro-passkeys.nitro.js

@@ -0,0 +1,4 @@
+"use strict";
+
+export {};
+//# sourceMappingURL=nitro-passkeys.nitro.js.map

package/lib/module/specs/nitro-passkeys.nitro.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sourceRoot":"../../../src","sources":["specs/nitro-passkeys.nitro.ts"],"mappings":"","ignoreList":[]}

package/lib/module/types.js

@@ -0,0 +1,2 @@
+"use strict";
+//# sourceMappingURL=types.js.map

package/lib/module/types.js.map

@@ -0,0 +1 @@
+{"version":3,"names":[],"sourceRoot":"../../src","sources":["types.ts"],"mappings":"","ignoreList":[]}