feat: add cli, library, upgrade extension to manifest v3 and new design

Author: vitalygashkov

.gitignore

@@ -1,3 +1,31 @@
+# Logs
+logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+pnpm-debug.log*
+lerna-debug.log*
+
+node_modules
+.output
+stats.html
+stats-*.json
+.wxt
+web-ext.config.ts
+dist
+
+# Editor directories and files
+.vscode/*
+!.vscode/extensions.json
+.idea
 .DS_Store
-streamyx-extension.crx
-streamyx-extension.pem
+*.suo
+*.ntvs*
+*.njsproj
+*.sln
+*.sw?
+
+device_client_id_blob
+device_private_key
+*.wvd

LICENSE

@@ -1,16 +1,48 @@
-# Streamyx Chrome Extension
+# azot
 
-Intercept [DRM](https://www.widevine.com/) requests, view logs from [EME](https://w3c.github.io/encrypted-media/) session and copy ready commands for [Streamyx CLI](https://github.com/vitalygashkov/streamyx)
+Azot (Russian word for "nitrogen", pronounced `/azо́t/`) is a set of tools (JavaScript library, command-line utility and browser extension) for diagnosing, researching, and pentesting [Google's](https://about.google/) [Widevine](https://www.widevine.com/about) [DRM](https://www.urbandictionary.com/define.php?term=DRM).
+
+## Features
+
+- **Network-independent interception**: everything works even with one-time tokens and custom request body/response format.
+- **Custom client support**: WVD v2, device_client_id_blob + device_private_key, client_id.bin + private_key.pem
+- **Logging** details from EME events in Developer Tools console of current page
+- **Manifest V3** compliant browser extension
+- **Converting clients** between formats via CLI
+- **Encrypted Media Extensions API** compatibility via `requestMediaKeySystemAccess()` method
+- **Runtime agnostic** core: works in Node.js, Bun, Deno, browsers and more
+- **Minimal** dependencies
 
 ## Installation
 
-1. Enable **Developer Mode** in [Chrome Extensions](chrome://extensions/)
+> JavaScript library and command-line tool installation requires pre-installed JavaScript runtime (e.g. Node.js).
+
+### JavaScript library
+
+```bash
+npm install azot
+```
+
+### Command-line tool
+
+```bash
+npm install -g azot
+```
+
+### Browser extension
+
+1. Enable **Developer Mode** in [Chrome Extensions](chrome://extensions/) page
 2. Click on **Load Unpacked**
-3. Select folder where you extracted zip downloaded from [Releases](https://github.com/vitalygashkov/streamyx-extension/releases) page
+3. Select folder where you extracted zip downloaded from [Releases](https://github.com/vitalygashkov/azot/releases) page
 4. Done!
 
-## Features
+## Usage
+
+### Example with Encrypted Media Extensions API
+
+Source code for example available [here](https://github.com/vitalygashkov/orlan/blob/main/examples/demo/eme.js). It's a minimal example of using `azot` to get a license for Bitmovin's Art of Motion Demo. This example similar to [example from EME](https://www.w3.org/TR/encrypted-media-2/#example-8).
+
+There are some differences from the native EME implementation:
 
-- **Notifications** about intercepted request with button to **copy Streamyx command** for your shell (run it using [Streamyx](https://github.com/vitalygashkov/streamyx) >= v4.0.0-beta.46 to extract content decryption keys)
-- [Encrypted Media Extensions (EME)](https://w3c.github.io/encrypted-media/) logging in Developer Tools console (**session ID, key ID, PSSH**, etc.)
-- Request **blocking** to catch license requests with disposable / one time tokens (you can add your own list of servers to block in `./src/worker.js`)
+1. You must import your Widevine client to obtain a license.
+2. In the `keyStatuses` field, Map's key is not just the key ID (like in EME), but pair with ID and value. For example, if key ID in HEX is `35e7eff366b24121a261832f3368146f` and content key itself is `f01471043a064e039a602346845b690f` then Map's key will be `35e7eff366b24121a261832f3368146f:f01471043a064e039a602346845b690f` (but as binary with `BufferSource` type) instead of just `35e7eff366b24121a261832f3368146f`.

README.md

@@ -0,0 +1,22 @@
+import { col } from '../../utils';
+
+export const help = () => {
+  console.log(`azot client: Widevine client utilities\n`);
+  console.log(`Usage: azot client <subcommand> [...flags]\n`);
+  console.log(`Commands:`);
+  console.log(
+    col(`info <input>`) +
+      'print info about client that is on <input> path (*.wvd filepath or directory with id and private key)',
+  );
+  console.log(
+    col(`pack <input> <output>`) +
+      'pack client id and private key from <input> directory into single *.wvd file with <output> path',
+  );
+  console.log(
+    col(`unpack <input> <output>`) +
+      'unpack *.wvd from <input> path to separate client id and private key placed in <output> directory',
+  );
+  console.log('');
+  console.log(`Flags:`);
+  console.log(col(`-h, --help`) + 'Display this menu and exit');
+};

cli/commands/client/help.ts

@@ -0,0 +1,6 @@
+import { help } from './help';
+import { info } from './info';
+import { pack } from './pack';
+import { unpack } from './unpack';
+
+export const client = { info, pack, unpack, help };

cli/commands/client/index.ts

@@ -0,0 +1,8 @@
+import { importClient } from '../../utils';
+
+export const info = async (input: string) => {
+  const client = await importClient(input);
+  for (const [key, value] of client.info.entries()) {
+    console.log(`${key}: ${value}`);
+  }
+};

cli/commands/client/info.ts

@@ -0,0 +1,12 @@
+import { writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { importClient } from '../../utils';
+
+export const pack = async (input = process.cwd(), output?: string) => {
+  const client = await importClient(input);
+  const wvd = await client.toWvd();
+  const wvdName = `${client.info.get('company_name')}_${client.info.get('model_name')}`;
+  const wvdOutput = output || join(process.cwd(), `${wvdName}.wvd`);
+  await writeFile(wvdOutput, wvd);
+  console.log(`Client packed: ${wvdOutput}`);
+};

cli/commands/client/pack.ts

@@ -0,0 +1,13 @@
+import { writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { importClient } from '../../utils';
+
+export const unpack = async (input = process.cwd(), output?: string) => {
+  const client = await importClient(input);
+  const [id, key] = await client.toPair();
+  const idOutput = join(output || process.cwd(), `device_client_id_blob`);
+  const keyOutput = join(output || process.cwd(), `device_private_key`);
+  await writeFile(idOutput, id);
+  await writeFile(keyOutput, key);
+  console.log(`Client unpacked: ${idOutput}, ${keyOutput}`);
+};

cli/commands/client/unpack.ts

@@ -0,0 +1,24 @@
+import { col } from '../../utils';
+
+export const help = () => {
+  console.log(`azot license: Make license request\n`);
+  console.log(`Usage: azot license <url> [...flags]\n`);
+  console.log(`Commands:`);
+  console.log(
+    col(`<url>`) +
+      'URL of license server (e.g. https://cwip-shaka-proxy.appspot.com/no_auth)',
+  );
+  console.log('');
+  console.log(`Flags:`);
+  console.log(col(`-H, --header`) + 'headers to send with license request');
+  console.log(col(`-p, --pssh`) + 'widevine PSSH data in Base64');
+  console.log(
+    col(`-c, --client`) +
+      'path to client (directory with id and private key or path to *.wvd file)',
+  );
+  console.log(
+    col(`-e, --encrypt`) +
+      'enable client encryption with service certificate, disabled by default',
+  );
+  console.log(col(`-h, --help`) + 'display this menu and exit');
+};

cli/commands/license/help.ts

@@ -0,0 +1 @@
+export * from './license';