@anywalletkit/extension-kit 0.4.0 → 0.5.1

package/README.md

@@ -41,7 +41,7 @@ pnpm add @anywalletkit/extension-kit @anywalletkit/core @anywalletkit/keyring
 | Permissions | `PermissionStore`, `CHAIN_ACCOUNT_KEYS` | per-origin accounts (EVM, Solana, TON, Tron, Bitcoin, NEAR) and chain; `grant` adds accounts to one origin |
 | Approvals | `ApprovalQueue`, `ReviewDeclined`, `QueueLimitError`, `APPROVALS_MAX_PENDING_PER_ORIGIN`, `APPROVALS_MAX_PENDING_PER_SITE`, `APPROVALS_MAX_PENDING_TOTAL` | one approval window at a time; at most 3 pending requests per origin, 5 per site (registrable domain), 20 in all, one pending `connect`; a per-site sheet rate with a doubling cooldown; `declineOrigin` / `declineSite`; `exempt` for the wallet's own pages; transport notes (`setVia`) for WalletConnect peers |
 | Limits | `siteOf`, `MULTI_LABEL_SUFFIXES`, `TokenBucket` | a conservative registrable domain (eTLD+1, no full Public Suffix List: the last two labels, three under known multi-label and hosting suffixes) and a keyed token bucket, for per-site limits |
-| Signing | `classifySignRequest`, `prepareTransaction`, `createSignHandler`, `messageText`, `revealHidden`, `gasLimitExcessive` | connected-address and chain checks, EIP-7702 delegations from sites refused, nonce / gas / fees from the wallet's RPC, a site's gas limit checked against the estimate (`gasCheck`), invisible / bidi characters escaped as `⟨U+XXXX⟩` (`hiddenChars`), a personal_sign of a raw 32-byte hash refused unless `allowBlindHash` (then `blindHash`) |
+| Signing | `classifySignRequest`, `prepareTransaction`, `createSignHandler`, `messageText`, `revealHidden`, `gasLimitExcessive` | connected-address and chain checks, EIP-7702 delegations from sites refused, nonce / gas / fees from the wallet's RPC, a site's gas limit checked against the estimate (`gasCheck`), invisible / bidi characters escaped as `⟨U+XXXX⟩` (`hiddenChars`), a personal_sign of exactly 32 signed bytes marked `blindHash` for a danger screen: the hex form (`0x` + 64 hex) refused unless `allowBlindHash`, text whose UTF-8 is 32 bytes always shown, never refused (`blindHashForm: 'hex' \| 'text'`) |
 | Networks | `NetworksTable`, `DEFAULT_NETWORKS`, `parseAddChainParams`, Solana / TON / Tron endpoints | EVM networks with public RPC failover lists; `wallet_addEthereumChain` only for catalog chains, https only, `eth_chainId` verified, site-supplied RPCs stamped `custom` |
 | Review gate | `ReviewGate`, `evmCallMatcher`, `chainTxMatcher` | after one sheet reviewed a whole plan, exactly those operations pass once within a TTL |
 | Swaps | `quoteRoutes`, `reviewSwapPlan`, `executionFloor`, `SwapsStore`, `SwapTracker`, `parseSwapId` | progressive quotes over swap2 providers, one review sheet per plan (a gasless order is shown and matched by its EIP-712 hash), pre-approvals bound to the reviewing account (`meta.account`), pending swaps resumed across worker restarts |

package/dist/index.cjs

@@ -2049,6 +2049,58 @@ var permissionDescriptor = (origin, accounts) => ({
   date: Date.now()
 });
 
+// src/personal-sign.ts
+var HEX = /^0x([0-9a-fA-F]{2})*$/;
+var BLIND_HASH_MAX_CHARS = 66;
+var hexBytes = (value) => Uint8Array.from(value.slice(2).match(/../g) ?? [], (b) => Number.parseInt(b, 16));
+function codePoint(s, i) {
+  const c = s.charCodeAt(i);
+  if (c < 55296 || c > 57343) return c;
+  const lo = c <= 56319 && i + 1 < s.length ? s.charCodeAt(i + 1) : 0;
+  return lo >= 56320 && lo <= 57343 ? 65536 + (c - 55296 << 10) + (lo - 56320) : 65533;
+}
+function utf8Length(s) {
+  let n = 0;
+  for (let i = 0; i < s.length; i++) {
+    const c = codePoint(s, i);
+    if (c > 65535) {
+      n += 4;
+      i++;
+    } else n += c < 128 ? 1 : c < 2048 ? 2 : 3;
+  }
+  return n;
+}
+function utf8Bytes(s) {
+  const out = new Uint8Array(utf8Length(s));
+  let o = 0;
+  for (let i = 0; i < s.length; i++) {
+    const c = codePoint(s, i);
+    if (c < 128) out[o++] = c;
+    else if (c < 2048) {
+      out[o++] = 192 | c >> 6;
+      out[o++] = 128 | c & 63;
+    } else if (c < 65536) {
+      out[o++] = 224 | c >> 12;
+      out[o++] = 128 | c >> 6 & 63;
+      out[o++] = 128 | c & 63;
+    } else {
+      out[o++] = 240 | c >> 18;
+      out[o++] = 128 | c >> 12 & 63;
+      out[o++] = 128 | c >> 6 & 63;
+      out[o++] = 128 | c & 63;
+      i++;
+    }
+  }
+  return out;
+}
+function personalSignInput(message) {
+  return HEX.test(message) ? hexBytes(message) : message;
+}
+function personalSignBytes(message) {
+  const input = personalSignInput(message);
+  return typeof input === "string" ? utf8Bytes(input) : input;
+}
+
 // src/siwe.ts
 var SIWE_FORBIDDEN_CHARS = /[\u061c\u200b-\u200f\u202a-\u202e\u2060-\u2064\u2066-\u2069\ufeff]/;
 var HEADER_LINE = /^(?<domain>[^\n]+?) wants you to sign in with your Ethereum account:(?:\n|$)/;
@@ -2177,7 +2229,6 @@ var safeNonce = (n) => {
 };
 var MAX_FEE_REASKS = 3;
 var ADDRESS = /^0x[0-9a-fA-F]{40}$/;
-var HEX = /^0x([0-9a-fA-F]{2})*$/;
 var lc = (s) => s.toLowerCase();
 var INVISIBLE = /[\p{Cf}\u2028\u2029\u115f\u1160\u3164\uffa0\x00-\x08\x0b\x0c\x0e-\x1f\x7f-\x9f]/gu;
 function revealHidden(text) {
@@ -2213,7 +2264,6 @@ function decodedMessage(value) {
 }
 var HIDDEN_CONTROL = /[\x00-\x08\x0b\x0c\x0e-\x1f\x7f-\x9f]/;
 var err = (code, message) => ({ code, message });
-var BLIND_HASH = /^0x[0-9a-fA-F]{64}$/;
 function classifySignRequest(input) {
   const { method, params } = input;
   const owned = new Set(input.accounts.map(lc));
@@ -2224,15 +2274,16 @@ function classifySignRequest(input) {
     if (ours(msg) && !ours(addr)) [msg, addr] = [addr, msg];
     if (!ours(addr)) return err(RELAY_ERRORS.unauthorized, "personal_sign for an address this wallet does not hold.");
     if (typeof msg !== "string") return err(RELAY_ERRORS.invalidParams, "personal_sign expects a message string.");
-    const blindHash = BLIND_HASH.test(msg);
-    if (blindHash && !input.allowBlindHash) return err(RELAY_ERRORS.unsupportedMethod, 'This site asks you to sign a raw 32-byte hash (blind signing). It can be a swap order or a transfer (e.g. CoW Protocol) paying someone else, so this wallet refuses it. "Allow blind hash signatures" in Options turns on a review for such requests.');
+    const thirtyTwo = msg.length <= BLIND_HASH_MAX_CHARS && personalSignBytes(msg).length === 32;
+    const blindHashForm = !thirtyTwo ? void 0 : HEX.test(msg) ? "hex" : "text";
+    if (blindHashForm === "hex" && !input.allowBlindHash) return err(RELAY_ERRORS.unsupportedMethod, 'This site asks you to sign a raw 32-byte hash (blind signing). It can be a swap order or a transfer (e.g. CoW Protocol) paying someone else, so this wallet refuses it. "Allow blind hash signatures" in Options turns on a review for such requests.');
     const shown = shownMessage(msg);
     const text = shown.text;
     const signed = decodedMessage(msg) ?? text;
     const siwe = input.origin ? describeSiwe(signed, { origin: input.origin, account: checksum(addr), chainId: input.network.chainId, ...input.via ? { via: input.via } : {}, ...input.now !== void 0 ? { now: input.now } : {} }) : null;
     if (siwe && HIDDEN_CONTROL.test(signed)) return err(RELAY_ERRORS.invalidParams, "This sign-in message contains hidden control characters \u2014 refused.");
     if (siwe && SIWE_FORBIDDEN_CHARS.test(signed)) return err(RELAY_ERRORS.invalidParams, "This sign-in message contains invisible or text-direction characters \u2014 refused.");
-    return { kind: "sign-message", method, account: checksum(addr), text, raw: msg, ...siwe ? { siwe } : {}, ...shown.hidden ? { hiddenChars: true } : {}, ...blindHash ? { blindHash: true } : {} };
+    return { kind: "sign-message", method, account: checksum(addr), text, raw: msg, ...siwe ? { siwe } : {}, ...shown.hidden ? { hiddenChars: true } : {}, ...blindHashForm ? { blindHash: true, blindHashForm } : {} };
   }
   if (method === "eth_signTypedData_v4" || method === "eth_signTypedData_v3" || method === "eth_signTypedData") {
     const [addr, data] = params;
@@ -2396,7 +2447,7 @@ function createSignHandler(deps) {
     try {
       switch (info.kind) {
         case "sign-message":
-          return await handle.signer.signMessage(HEX.test(info.raw) ? Uint8Array.from(info.raw.slice(2).match(/../g) ?? [], (b) => Number.parseInt(b, 16)) : info.raw);
+          return await handle.signer.signMessage(personalSignInput(info.raw));
         case "sign-typed-data":
           return await handle.signer.signTypedData(info.typedData);
       }