@aptos-labs/ts-sdk 1.27.1-zeta.0 → 1.28.0-zeta.0

package/dist/esm/chunk-KWX2PWAP.mjs

@@ -1,349 +0,0 @@
-// src/cli/move.ts
-import { spawn } from "child_process";
-import { platform } from "os";
-var Move = class {
-  /**
-   * Function to initialize current directory for Aptos
-   *
-   * Configuration will be pushed into .aptos/config.yaml
-   * @param args.network optional Network type argument to use for default settings, default is local
-   * @param args.profile optional Profile to use from the config file, default is 'default'
-   * This will be used to override associated settings such as the REST URL, the Faucet URL, and the private key arguments.
-   * @param args.extraArguments (optional) Any extra arguments to include in the form of an array of strings
-   * @example
-   * ["--assume-yes","--gas-unit-price=10"]
-   *
-   * @returns stdout
-   */
-  async init(args) {
-    const { network, profile, extraArguments } = args;
-    const cliArgs = ["aptos", "init", `--network=${network ?? "local"}`, `--profile=${profile ?? "default"}`];
-    if (extraArguments) {
-      cliArgs.push(...extraArguments);
-    }
-    return this.runCommand(cliArgs);
-  }
-  /**
-   * Function to compile a package
-   *
-   * @param args.packageDirectoryPath Path to a move package (the folder with a Move.toml file)
-   * @param args.namedAddresses  Named addresses for the move binary
-   * @param args.extraArguments (optional) Any extra arguments to include in the form of an array of strings
-   * @example
-   * ["--assume-yes","--gas-unit-price=10"]
-   * @example
-   * {
-   *  alice:0x1234, bob:0x5678
-   * }
-   *
-   * @returns stdout
-   */
-  async compile(args) {
-    const { packageDirectoryPath, namedAddresses, extraArguments } = args;
-    const cliArgs = ["aptos", "move", "compile", "--package-dir", packageDirectoryPath];
-    const addressesMap = this.parseNamedAddresses(namedAddresses);
-    cliArgs.push(...this.prepareNamedAddresses(addressesMap));
-    if (extraArguments) {
-      cliArgs.push(...extraArguments);
-    }
-    return this.runCommand(cliArgs);
-  }
-  /**
-   * Function to run Move unit tests for a package
-   *
-   * @param args.packageDirectoryPath Path to a move package (the folder with a Move.toml file)
-   * @param args.namedAddresses  Named addresses for the move binary
-   * @example
-   * {
-   *  alice:0x1234, bob:0x5678
-   * }
-   * @param args.extraArguments (optional) Any extra arguments to include in the form of an array of strings
-   * @example
-   * ["--assume-yes","--gas-unit-price=10"]
-   *
-   * @returns stdout
-   */
-  async test(args) {
-    const { packageDirectoryPath, namedAddresses, extraArguments } = args;
-    const cliArgs = ["aptos", "move", "test", "--package-dir", packageDirectoryPath];
-    const addressesMap = this.parseNamedAddresses(namedAddresses);
-    cliArgs.push(...this.prepareNamedAddresses(addressesMap));
-    if (extraArguments) {
-      cliArgs.push(...extraArguments);
-    }
-    return this.runCommand(cliArgs);
-  }
-  /**
-   * Function to publish the modules to the publisher account on the Aptos blockchain
-   *
-   * @param args.packageDirectoryPath Path to a move package (the folder with a Move.toml file)
-   * @param args.namedAddresses  Named addresses for the move binary
-   * @example
-   * {
-   *  alice:0x1234, bob:0x5678
-   * }
-   * @param args.profile optional Profile to use from the config file.
-   * @param args.extraArguments (optional) Any extra arguments to include in the form of an array of strings
-   * @example
-   * ["--assume-yes","--gas-unit-price=10"]
-   *
-   * @returns stdout
-   */
-  async publish(args) {
-    const { packageDirectoryPath, namedAddresses, profile, extraArguments } = args;
-    const cliArgs = [
-      "aptos",
-      "move",
-      "publish",
-      "--package-dir",
-      packageDirectoryPath,
-      `--profile=${profile ?? "default"}`
-    ];
-    const addressesMap = this.parseNamedAddresses(namedAddresses);
-    cliArgs.push(...this.prepareNamedAddresses(addressesMap));
-    if (extraArguments) {
-      cliArgs.push(...extraArguments);
-    }
-    return this.runCommand(cliArgs);
-  }
-  /**
-   * Function to create a new object and publish the Move package to it on the Aptos blockchain
-   *
-   * @param args.packageDirectoryPath Path to a move package (the folder with a Move.toml file)
-   * @param args.addressName Address name for the Move package
-   * @example
-   * MoonCoin, please find the actual address name in Move.toml
-   * @param args.namedAddresses  Named addresses for the move binary
-   * @example
-   * {
-   *  alice:0x1234, bob:0x5678
-   * }
-   * @param args.profile optional Profile to use from the config file.
-   * @param args.extraArguments (optional) Any extra arguments to include in the form of an array of strings
-   * @example
-   * ["--assume-yes","--gas-unit-price=10"]
-   *
-   * A complete example in cli
-   * aptos move create-object-and-publish-package \
-   * --package-dir path_to_directory_that_has_move.toml \
-   * --address-name launchpad_addr \
-   * --named-addresses "launchpad_addr=0x123,initial_creator_addr=0x456"\
-   * --profile my_profile \
-   * --assume-yes
-   * @returns object address
-   */
-  async createObjectAndPublishPackage(args) {
-    const { packageDirectoryPath, addressName, namedAddresses, profile, extraArguments } = args;
-    const cliArgs = [
-      "aptos",
-      "move",
-      "create-object-and-publish-package",
-      "--package-dir",
-      packageDirectoryPath,
-      "--address-name",
-      addressName,
-      `--profile=${profile ?? "default"}`
-    ];
-    const addressesMap = this.parseNamedAddresses(namedAddresses);
-    cliArgs.push(...this.prepareNamedAddresses(addressesMap));
-    if (extraArguments) {
-      cliArgs.push(...extraArguments);
-    }
-    const result = await this.runCommand(cliArgs);
-    return { objectAddress: this.extractAddressFromOutput(result.output) };
-  }
-  /**
-   * Function to upgrade a Move package previously published to an object on the Aptos blockchain
-   * Caller must be the object owner to call this function
-   *
-   * @param args.packageDirectoryPath Path to a move package (the folder with a Move.toml file)
-   * @param args.objectAddress Address of the object that the Move package published to
-   * @example
-   * 0x1000
-   * @param args.namedAddresses  Named addresses for the move binary
-   * @example
-   * {
-   *  alice:0x1234, bob:0x5678
-   * }
-   * @param args.profile optional Profile to use from the config file.
-   * @param args.extraArguments (optional) Any extra arguments to include in the form of an array of strings
-   * @example
-   * ["--assume-yes","--gas-unit-price=10"]
-   *
-   * @returns stdout
-   */
-  async upgradeObjectPackage(args) {
-    const { packageDirectoryPath, objectAddress, namedAddresses, profile, extraArguments } = args;
-    const cliArgs = [
-      "aptos",
-      "move",
-      "upgrade-object-package",
-      "--package-dir",
-      packageDirectoryPath,
-      "--object-address",
-      objectAddress,
-      `--profile=${profile ?? "default"}`
-    ];
-    const addressesMap = this.parseNamedAddresses(namedAddresses);
-    cliArgs.push(...this.prepareNamedAddresses(addressesMap));
-    if (extraArguments) {
-      cliArgs.push(...extraArguments);
-    }
-    return this.runCommand(cliArgs);
-  }
-  /**
-   * Build a publication transaction payload and store it in a JSON output file
-   *
-   * @param args.packageDirectoryPath Path to a move package (the folder with a Move.toml file)
-   * @param args.outputFile Output file to write publication transaction to
-   * @param args.namedAddresses  Named addresses for the move binary
-   * @example
-   * {
-   *  alice:0x1234, bob:0x5678
-   * }
-   * @param args.extraArguments (optional) Any extra arguments to include in the form of an array of strings
-   * @example
-   * ["--assume-yes","--gas-unit-price=10"]
-   *
-   * @returns stdout
-   */
-  async buildPublishPayload(args) {
-    const { outputFile, packageDirectoryPath, namedAddresses, extraArguments } = args;
-    const cliArgs = [
-      "aptos",
-      "move",
-      "build-publish-payload",
-      "--json-output-file",
-      outputFile,
-      "--package-dir",
-      packageDirectoryPath
-    ];
-    const addressesMap = this.parseNamedAddresses(namedAddresses);
-    cliArgs.push(...this.prepareNamedAddresses(addressesMap));
-    if (extraArguments) {
-      cliArgs.push(...extraArguments);
-    }
-    return this.runCommand(cliArgs);
-  }
-  /**
-   * Function to run a Move script, please run compile before running this
-   *
-   * @param args.compiledScriptPath Path to a compiled Move script bytecode file
-   * @param args.namedAddresses  Named addresses for the move binary
-   * @example
-   * build/my_package/bytecode_scripts/my_move_script.mv
-   * @param args.profile optional Profile to use from the config file.
-   * @param args.extraArguments (optional) Any extra arguments to include in the form of an array of strings
-   * @example
-   * ["--assume-yes","--gas-unit-price=10"]
-   *
-   * @returns stdout
-   */
-  async runScript(args) {
-    const { compiledScriptPath, profile, extraArguments } = args;
-    const cliArgs = [
-      "aptos",
-      "move",
-      "run-script",
-      "--compiled-script-path",
-      compiledScriptPath,
-      `--profile=${profile ?? "default"}`
-    ];
-    if (extraArguments) {
-      cliArgs.push(...extraArguments);
-    }
-    return this.runCommand(cliArgs);
-  }
-  /**
-   * Run a move command
-   *
-   * @param args
-   * @returns stdout
-   */
-  // eslint-disable-next-line class-methods-use-this
-  async runCommand(args) {
-    return new Promise((resolve, reject) => {
-      const currentPlatform = platform();
-      let childProcess;
-      let stdout = "";
-      if (currentPlatform === "win32") {
-        childProcess = spawn("npx", args, { shell: true });
-      } else {
-        childProcess = spawn("npx", args);
-      }
-      childProcess.stdout.on("data", (data) => {
-        stdout += data.toString();
-      });
-      childProcess.stdout.pipe(process.stdout);
-      childProcess.stderr.pipe(process.stderr);
-      process.stdin.pipe(childProcess.stdin);
-      childProcess.on("close", (code) => {
-        if (code === 0) {
-          resolve({ output: stdout });
-        } else {
-          reject(new Error(`Child process exited with code ${code}`));
-        }
-      });
-    });
-  }
-  /**
-   * Convert named addresses from a Map into an array seperated by a comma
-   *
-   * @example
-   * input: {'alice' => '0x123', 'bob' => '0x456'}
-   * output: "alice=0x123,bob=0x456"
-   *
-   * @param namedAddresses
-   * @returns An array of names addresses seperated by a comma
-   */
-  // eslint-disable-next-line class-methods-use-this
-  prepareNamedAddresses(namedAddresses) {
-    const totalNames = namedAddresses.size;
-    const newArgs = [];
-    if (totalNames === 0) {
-      return newArgs;
-    }
-    newArgs.push("--named-addresses");
-    const names = [];
-    namedAddresses.forEach((value, key) => {
-      const toAppend = `${key}=${value.toString()}`;
-      names.push(toAppend);
-    });
-    newArgs.push(names.join(","));
-    return newArgs;
-  }
-  /**
-   * Parse named addresses from a Record type into a Map
-   *
-   * @param namedAddresses
-   * @returns Map<name,address>
-   */
-  // eslint-disable-next-line class-methods-use-this
-  parseNamedAddresses(namedAddresses) {
-    const addressesMap = /* @__PURE__ */ new Map();
-    Object.keys(namedAddresses).forEach((key) => {
-      const address = namedAddresses[key];
-      addressesMap.set(key, address);
-    });
-    return addressesMap;
-  }
-  /**
-   * Extract object address from the output
-   *
-   * @param output
-   * @returns object address
-   */
-  // eslint-disable-next-line class-methods-use-this
-  extractAddressFromOutput(output) {
-    const match = output.match("Code was successfully deployed to object address (0x[0-9a-fA-F]+)\\.");
-    if (match) {
-      return match[1];
-    }
-    throw new Error("Failed to extract object address from output");
-  }
-};
-
-export {
-  Move
-};
-//# sourceMappingURL=chunk-KWX2PWAP.mjs.map

package/dist/esm/chunk-L3E7YJBM.mjs

@@ -1,25 +0,0 @@
-import {
-  Serializable
-} from "./chunk-UZXDD3QH.mjs";
-import {
-  Hex
-} from "./chunk-YV7M4CFP.mjs";
-
-// src/core/crypto/publicKey.ts
-var PublicKey = class extends Serializable {
-  /**
-   * Get the public key as a hex string with a 0x prefix e.g. 0x123456...
-   */
-  toString() {
-    const bytes = this.toUint8Array();
-    return Hex.fromHexInput(bytes).toString();
-  }
-};
-var AccountPublicKey = class extends PublicKey {
-};
-
-export {
-  PublicKey,
-  AccountPublicKey
-};
-//# sourceMappingURL=chunk-L3E7YJBM.mjs.map

package/dist/esm/chunk-LD2CRNA2.mjs

@@ -1,265 +0,0 @@
-import {
-  deriveTransactionType,
-  generateSigningMessage
-} from "./chunk-LMUNGBGS.mjs";
-import {
-  AccountAuthenticatorSingleKey
-} from "./chunk-MQALTYRJ.mjs";
-import {
-  EphemeralKeyPair
-} from "./chunk-3V5WGOZH.mjs";
-import {
-  AnyPublicKey,
-  AnySignature
-} from "./chunk-NYELBSVO.mjs";
-import {
-  EphemeralCertificate,
-  KeylessPublicKey,
-  KeylessSignature,
-  ZeroKnowledgeSig
-} from "./chunk-BMXV6WQK.mjs";
-import {
-  AccountAddress
-} from "./chunk-IUC6XUYA.mjs";
-import {
-  base64UrlDecode
-} from "./chunk-YPHGPN2P.mjs";
-import {
-  Deserializer
-} from "./chunk-6J7C4S3H.mjs";
-import {
-  Serializable
-} from "./chunk-UZXDD3QH.mjs";
-import {
-  Hex
-} from "./chunk-YV7M4CFP.mjs";
-
-// src/account/KeylessAccount.ts
-import { jwtDecode } from "jwt-decode";
-import EventEmitter from "eventemitter3";
-var _KeylessAccount = class _KeylessAccount extends Serializable {
-  // Use the static constructor 'create' instead.
-  constructor(args) {
-    super();
-    const { address, ephemeralKeyPair, uidKey, uidVal, aud, pepper, proof, proofFetchCallback, jwt } = args;
-    this.ephemeralKeyPair = ephemeralKeyPair;
-    this.publicKey = KeylessPublicKey.create(args);
-    this.accountAddress = address ? AccountAddress.from(address) : this.publicKey.authKey().derivedAddress();
-    this.uidKey = uidKey;
-    this.uidVal = uidVal;
-    this.aud = aud;
-    this.jwt = jwt;
-    this.emitter = new EventEmitter();
-    this.proofOrPromise = proof;
-    if (proof instanceof ZeroKnowledgeSig) {
-      this.proof = proof;
-    } else {
-      if (proofFetchCallback === void 0) {
-        throw new Error("Must provide callback for async proof fetch");
-      }
-      this.emitter.on("proofFetchFinish", async (status) => {
-        await proofFetchCallback(status);
-        this.emitter.removeAllListeners();
-      });
-      this.init(proof);
-    }
-    this.signingScheme = 2 /* SingleKey */;
-    const pepperBytes = Hex.fromHexInput(pepper).toUint8Array();
-    if (pepperBytes.length !== _KeylessAccount.PEPPER_LENGTH) {
-      throw new Error(`Pepper length in bytes should be ${_KeylessAccount.PEPPER_LENGTH}`);
-    }
-    this.pepper = pepperBytes;
-  }
-  /**
-   * This initializes the asyncronous proof fetch
-   * @return
-   */
-  async init(promise) {
-    try {
-      this.proof = await promise;
-      this.emitter.emit("proofFetchFinish", { status: "Success" });
-    } catch (error) {
-      if (error instanceof Error) {
-        this.emitter.emit("proofFetchFinish", { status: "Failed", error: error.toString() });
-      } else {
-        this.emitter.emit("proofFetchFinish", { status: "Failed", error: "Unknown" });
-      }
-    }
-  }
-  serialize(serializer) {
-    serializer.serializeStr(this.jwt);
-    serializer.serializeStr(this.uidKey);
-    serializer.serializeFixedBytes(this.pepper);
-    this.ephemeralKeyPair.serialize(serializer);
-    if (this.proof === void 0) {
-      throw new Error("Connot serialize - proof undefined");
-    }
-    this.proof.serialize(serializer);
-  }
-  static deserialize(deserializer) {
-    const jwt = deserializer.deserializeStr();
-    const uidKey = deserializer.deserializeStr();
-    const pepper = deserializer.deserializeFixedBytes(31);
-    const ephemeralKeyPair = EphemeralKeyPair.deserialize(deserializer);
-    const proof = ZeroKnowledgeSig.deserialize(deserializer);
-    return _KeylessAccount.create({
-      proof,
-      pepper,
-      uidKey,
-      jwt,
-      ephemeralKeyPair
-    });
-  }
-  /**
-   * Checks if the proof is expired.  If so the account must be rederived with a new EphemeralKeyPair
-   * and JWT token.
-   * @return boolean
-   */
-  isExpired() {
-    return this.ephemeralKeyPair.isExpired();
-  }
-  /**
-   * Sign a message using Keyless.
-   * @param message the message to sign, as binary input
-   * @return the AccountAuthenticator containing the signature, together with the account's public key
-   */
-  signWithAuthenticator(message) {
-    const signature = new AnySignature(this.sign(message));
-    const publicKey = new AnyPublicKey(this.publicKey);
-    return new AccountAuthenticatorSingleKey(publicKey, signature);
-  }
-  /**
-   * Sign a transaction using Keyless.
-   * @param transaction the raw transaction
-   * @return the AccountAuthenticator containing the signature of the transaction, together with the account's public key
-   */
-  signTransactionWithAuthenticator(transaction) {
-    const signature = new AnySignature(this.signTransaction(transaction));
-    const publicKey = new AnyPublicKey(this.publicKey);
-    return new AccountAuthenticatorSingleKey(publicKey, signature);
-  }
-  /**
-   * Waits for asyncronous proof fetching to finish.
-   * @return
-   */
-  async waitForProofFetch() {
-    if (this.proofOrPromise instanceof Promise) {
-      await this.proofOrPromise;
-    }
-  }
-  /**
-   * Sign the given message using Keyless.
-   * @param message in HexInput format
-   * @returns Signature
-   */
-  sign(data) {
-    const { expiryDateSecs } = this.ephemeralKeyPair;
-    if (this.isExpired()) {
-      throw new Error("EphemeralKeyPair is expired");
-    }
-    if (this.proof === void 0) {
-      throw new Error("Proof not defined");
-    }
-    const ephemeralPublicKey = this.ephemeralKeyPair.getPublicKey();
-    const ephemeralSignature = this.ephemeralKeyPair.sign(data);
-    return new KeylessSignature({
-      jwtHeader: base64UrlDecode(this.jwt.split(".")[0]),
-      ephemeralCertificate: new EphemeralCertificate(this.proof, 0 /* ZkProof */),
-      expiryDateSecs,
-      ephemeralPublicKey,
-      ephemeralSignature
-    });
-  }
-  /**
-   * Sign the given transaction with Keyless.
-   * Signs the transaction and proof to guard against proof malleability.
-   * @param transaction the transaction to be signed
-   * @returns KeylessSignature
-   */
-  signTransaction(transaction) {
-    if (this.proof === void 0) {
-      throw new Error("Proof not found");
-    }
-    const raw = deriveTransactionType(transaction);
-    const txnAndProof = new TransactionAndProof(raw, this.proof.proof);
-    const signMess = txnAndProof.hash();
-    return this.sign(signMess);
-  }
-  /**
-   * Note - This function is currently incomplete and should only be used to verify ownership of the KeylessAccount
-   *
-   * Verifies a signature given the message.
-   *
-   * TODO: Groth16 proof verification
-   *
-   * @param args.message the message that was signed.
-   * @param args.signature the KeylessSignature to verify
-   * @returns boolean
-   */
-  verifySignature(args) {
-    const { message, signature } = args;
-    if (this.isExpired()) {
-      return false;
-    }
-    if (!this.ephemeralKeyPair.getPublicKey().verifySignature({ message, signature: signature.ephemeralSignature })) {
-      return false;
-    }
-    return true;
-  }
-  static fromBytes(bytes) {
-    return _KeylessAccount.deserialize(new Deserializer(bytes));
-  }
-  static create(args) {
-    const { address, proof, jwt, ephemeralKeyPair, pepper, uidKey = "sub", proofFetchCallback } = args;
-    const jwtPayload = jwtDecode(jwt);
-    const iss = jwtPayload.iss;
-    if (typeof jwtPayload.aud !== "string") {
-      throw new Error("aud was not found or an array of values");
-    }
-    const aud = jwtPayload.aud;
-    const uidVal = jwtPayload[uidKey];
-    return new _KeylessAccount({
-      address,
-      proof,
-      ephemeralKeyPair,
-      iss,
-      uidKey,
-      uidVal,
-      aud,
-      pepper,
-      jwt,
-      proofFetchCallback
-    });
-  }
-};
-_KeylessAccount.PEPPER_LENGTH = 31;
-var KeylessAccount = _KeylessAccount;
-var TransactionAndProof = class extends Serializable {
-  constructor(transaction, proof) {
-    super();
-    /**
-     * The domain separator prefix used when hashing.
-     */
-    this.domainSeparator = "APTOS::TransactionAndProof";
-    this.transaction = transaction;
-    this.proof = proof;
-  }
-  serialize(serializer) {
-    serializer.serializeFixedBytes(this.transaction.bcsToBytes());
-    serializer.serializeOption(this.proof);
-  }
-  /**
-   * Hashes the bcs serialized from of the class. This is the typescript corollary to the BCSCryptoHash macro in aptos-core.
-   *
-   * @returns Uint8Array
-   */
-  hash() {
-    return generateSigningMessage(this.bcsToBytes(), this.domainSeparator);
-  }
-};
-
-export {
-  KeylessAccount,
-  TransactionAndProof
-};
-//# sourceMappingURL=chunk-LD2CRNA2.mjs.map

package/dist/esm/chunk-LD2CRNA2.mjs.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/account/KeylessAccount.ts"],"sourcesContent":["// Copyright © Aptos Foundation\n// SPDX-License-Identifier: Apache-2.0\n\nimport { JwtPayload, jwtDecode } from \"jwt-decode\";\nimport EventEmitter from \"eventemitter3\";\nimport { EphemeralCertificateVariant, HexInput, SigningScheme } from \"../types\";\nimport { AccountAddress } from \"../core/accountAddress\";\nimport {\n  AnyPublicKey,\n  AnySignature,\n  KeylessPublicKey,\n  KeylessSignature,\n  EphemeralCertificate,\n  ZeroKnowledgeSig,\n  ZkProof,\n} from \"../core/crypto\";\n\nimport { Account } from \"./Account\";\nimport { EphemeralKeyPair } from \"./EphemeralKeyPair\";\nimport { Hex } from \"../core/hex\";\nimport { AccountAuthenticatorSingleKey } from \"../transactions/authenticator/account\";\nimport { Deserializer, Serializable, Serializer } from \"../bcs\";\nimport { deriveTransactionType, generateSigningMessage } from \"../transactions/transactionBuilder/signingMessage\";\nimport { AnyRawTransaction, AnyRawTransactionInstance } from \"../transactions/types\";\nimport { base64UrlDecode } from \"../utils/helpers\";\n\n/**\n * Account implementation for the Keyless authentication scheme.\n *\n * Used to represent a Keyless based account and sign transactions with it.\n *\n * Use KeylessAccount.fromJWTAndProof to instantiate a KeylessAccount with a JWT, proof and EphemeralKeyPair.\n *\n * When the proof expires or the JWT becomes invalid, the KeylessAccount must be instantiated again with a new JWT,\n * EphemeralKeyPair, and corresponding proof.\n */\nexport class KeylessAccount extends Serializable implements Account {\n  static readonly PEPPER_LENGTH: number = 31;\n\n  /**\n   * The KeylessPublicKey associated with the account\n   */\n  readonly publicKey: KeylessPublicKey;\n\n  /**\n   * The EphemeralKeyPair used to generate sign.\n   */\n  readonly ephemeralKeyPair: EphemeralKeyPair;\n\n  /**\n   * The claim on the JWT to identify a user.  This is typically 'sub' or 'email'.\n   */\n  readonly uidKey: string;\n\n  /**\n   * The value of the uidKey claim on the JWT.  This intended to be a stable user identifier.\n   */\n  readonly uidVal: string;\n\n  /**\n   * The value of the 'aud' claim on the JWT, also known as client ID.  This is the identifier for the dApp's\n   * OIDC registration with the identity provider.\n   */\n  readonly aud: string;\n\n  /**\n   * A value contains 31 bytes of entropy that preserves privacy of the account. Typically fetched from a pepper provider.\n   */\n  readonly pepper: Uint8Array;\n\n  /**\n   * Account address associated with the account\n   */\n  readonly accountAddress: AccountAddress;\n\n  /**\n   * The zero knowledge signature (if ready) which contains the proof used to validate the EphemeralKeyPair.\n   */\n  proof: ZeroKnowledgeSig | undefined;\n\n  /**\n   * The proof of the EphemeralKeyPair or a promise that provides the proof.  This is used to allow for awaiting on\n   * fetching the proof.\n   */\n  readonly proofOrPromise: ZeroKnowledgeSig | Promise<ZeroKnowledgeSig>;\n\n  /**\n   * Signing scheme used to sign transactions\n   */\n  readonly signingScheme: SigningScheme;\n\n  /**\n   * The JWT token used to derive the account\n   */\n  readonly jwt: string;\n\n  /**\n   * An event emitter used to assist in handling asycronous proof fetching.\n   */\n  private readonly emitter: EventEmitter<ProofFetchEvents>;\n\n  // Use the static constructor 'create' instead.\n  private constructor(args: {\n    address?: AccountAddress;\n    ephemeralKeyPair: EphemeralKeyPair;\n    iss: string;\n    uidKey: string;\n    uidVal: string;\n    aud: string;\n    pepper: HexInput;\n    proof: ZeroKnowledgeSig | Promise<ZeroKnowledgeSig>;\n    proofFetchCallback?: ProofFetchCallback;\n    jwt: string;\n  }) {\n    super();\n    const { address, ephemeralKeyPair, uidKey, uidVal, aud, pepper, proof, proofFetchCallback, jwt } = args;\n    this.ephemeralKeyPair = ephemeralKeyPair;\n    this.publicKey = KeylessPublicKey.create(args);\n    this.accountAddress = address ? AccountAddress.from(address) : this.publicKey.authKey().derivedAddress();\n    this.uidKey = uidKey;\n    this.uidVal = uidVal;\n    this.aud = aud;\n    this.jwt = jwt;\n    this.emitter = new EventEmitter<ProofFetchEvents>();\n    this.proofOrPromise = proof;\n    if (proof instanceof ZeroKnowledgeSig) {\n      this.proof = proof;\n    } else {\n      if (proofFetchCallback === undefined) {\n        throw new Error(\"Must provide callback for async proof fetch\");\n      }\n      this.emitter.on(\"proofFetchFinish\", async (status) => {\n        await proofFetchCallback(status);\n        this.emitter.removeAllListeners();\n      });\n      this.init(proof);\n    }\n    this.signingScheme = SigningScheme.SingleKey;\n    const pepperBytes = Hex.fromHexInput(pepper).toUint8Array();\n    if (pepperBytes.length !== KeylessAccount.PEPPER_LENGTH) {\n      throw new Error(`Pepper length in bytes should be ${KeylessAccount.PEPPER_LENGTH}`);\n    }\n    this.pepper = pepperBytes;\n  }\n\n  /**\n   * This initializes the asyncronous proof fetch\n   * @return\n   */\n  async init(promise: Promise<ZeroKnowledgeSig>) {\n    try {\n      this.proof = await promise;\n      this.emitter.emit(\"proofFetchFinish\", { status: \"Success\" });\n    } catch (error) {\n      if (error instanceof Error) {\n        this.emitter.emit(\"proofFetchFinish\", { status: \"Failed\", error: error.toString() });\n      } else {\n        this.emitter.emit(\"proofFetchFinish\", { status: \"Failed\", error: \"Unknown\" });\n      }\n    }\n  }\n\n  serialize(serializer: Serializer): void {\n    serializer.serializeStr(this.jwt);\n    serializer.serializeStr(this.uidKey);\n    serializer.serializeFixedBytes(this.pepper);\n    this.ephemeralKeyPair.serialize(serializer);\n    if (this.proof === undefined) {\n      throw new Error(\"Connot serialize - proof undefined\");\n    }\n    this.proof.serialize(serializer);\n  }\n\n  static deserialize(deserializer: Deserializer): KeylessAccount {\n    const jwt = deserializer.deserializeStr();\n    const uidKey = deserializer.deserializeStr();\n    const pepper = deserializer.deserializeFixedBytes(31);\n    const ephemeralKeyPair = EphemeralKeyPair.deserialize(deserializer);\n    const proof = ZeroKnowledgeSig.deserialize(deserializer);\n    return KeylessAccount.create({\n      proof,\n      pepper,\n      uidKey,\n      jwt,\n      ephemeralKeyPair,\n    });\n  }\n\n  /**\n   * Checks if the proof is expired.  If so the account must be rederived with a new EphemeralKeyPair\n   * and JWT token.\n   * @return boolean\n   */\n  isExpired(): boolean {\n    return this.ephemeralKeyPair.isExpired();\n  }\n\n  /**\n   * Sign a message using Keyless.\n   * @param message the message to sign, as binary input\n   * @return the AccountAuthenticator containing the signature, together with the account's public key\n   */\n  signWithAuthenticator(message: HexInput): AccountAuthenticatorSingleKey {\n    const signature = new AnySignature(this.sign(message));\n    const publicKey = new AnyPublicKey(this.publicKey);\n    return new AccountAuthenticatorSingleKey(publicKey, signature);\n  }\n\n  /**\n   * Sign a transaction using Keyless.\n   * @param transaction the raw transaction\n   * @return the AccountAuthenticator containing the signature of the transaction, together with the account's public key\n   */\n  signTransactionWithAuthenticator(transaction: AnyRawTransaction): AccountAuthenticatorSingleKey {\n    const signature = new AnySignature(this.signTransaction(transaction));\n    const publicKey = new AnyPublicKey(this.publicKey);\n    return new AccountAuthenticatorSingleKey(publicKey, signature);\n  }\n\n  /**\n   * Waits for asyncronous proof fetching to finish.\n   * @return\n   */\n  async waitForProofFetch() {\n    if (this.proofOrPromise instanceof Promise) {\n      await this.proofOrPromise;\n    }\n  }\n\n  /**\n   * Sign the given message using Keyless.\n   * @param message in HexInput format\n   * @returns Signature\n   */\n  sign(data: HexInput): KeylessSignature {\n    const { expiryDateSecs } = this.ephemeralKeyPair;\n    if (this.isExpired()) {\n      throw new Error(\"EphemeralKeyPair is expired\");\n    }\n    if (this.proof === undefined) {\n      throw new Error(\"Proof not defined\");\n    }\n    const ephemeralPublicKey = this.ephemeralKeyPair.getPublicKey();\n    const ephemeralSignature = this.ephemeralKeyPair.sign(data);\n\n    return new KeylessSignature({\n      jwtHeader: base64UrlDecode(this.jwt.split(\".\")[0]),\n      ephemeralCertificate: new EphemeralCertificate(this.proof, EphemeralCertificateVariant.ZkProof),\n      expiryDateSecs,\n      ephemeralPublicKey,\n      ephemeralSignature,\n    });\n  }\n\n  /**\n   * Sign the given transaction with Keyless.\n   * Signs the transaction and proof to guard against proof malleability.\n   * @param transaction the transaction to be signed\n   * @returns KeylessSignature\n   */\n  signTransaction(transaction: AnyRawTransaction): KeylessSignature {\n    if (this.proof === undefined) {\n      throw new Error(\"Proof not found\");\n    }\n    const raw = deriveTransactionType(transaction);\n    const txnAndProof = new TransactionAndProof(raw, this.proof.proof);\n    const signMess = txnAndProof.hash();\n    return this.sign(signMess);\n  }\n\n  /**\n   * Note - This function is currently incomplete and should only be used to verify ownership of the KeylessAccount\n   *\n   * Verifies a signature given the message.\n   *\n   * TODO: Groth16 proof verification\n   *\n   * @param args.message the message that was signed.\n   * @param args.signature the KeylessSignature to verify\n   * @returns boolean\n   */\n  verifySignature(args: { message: HexInput; signature: KeylessSignature }): boolean {\n    const { message, signature } = args;\n    if (this.isExpired()) {\n      return false;\n    }\n    if (!this.ephemeralKeyPair.getPublicKey().verifySignature({ message, signature: signature.ephemeralSignature })) {\n      return false;\n    }\n    return true;\n  }\n\n  static fromBytes(bytes: Uint8Array): KeylessAccount {\n    return KeylessAccount.deserialize(new Deserializer(bytes));\n  }\n\n  static create(args: {\n    address?: AccountAddress;\n    proof: ZeroKnowledgeSig | Promise<ZeroKnowledgeSig>;\n    jwt: string;\n    ephemeralKeyPair: EphemeralKeyPair;\n    pepper: HexInput;\n    uidKey?: string;\n    proofFetchCallback?: ProofFetchCallback;\n  }): KeylessAccount {\n    const { address, proof, jwt, ephemeralKeyPair, pepper, uidKey = \"sub\", proofFetchCallback } = args;\n\n    const jwtPayload = jwtDecode<JwtPayload & { [key: string]: string }>(jwt);\n    const iss = jwtPayload.iss!;\n    if (typeof jwtPayload.aud !== \"string\") {\n      throw new Error(\"aud was not found or an array of values\");\n    }\n    const aud = jwtPayload.aud!;\n    const uidVal = jwtPayload[uidKey];\n    return new KeylessAccount({\n      address,\n      proof,\n      ephemeralKeyPair,\n      iss,\n      uidKey,\n      uidVal,\n      aud,\n      pepper,\n      jwt,\n      proofFetchCallback,\n    });\n  }\n}\n\n/**\n * A container class to hold a transaction and a proof.  It implements CryptoHashable which is used to create\n * the signing message for Keyless transactions.  We sign over the proof to ensure non-malleability.\n */\nexport class TransactionAndProof extends Serializable {\n  /**\n   * The transaction to sign.\n   */\n  transaction: AnyRawTransactionInstance;\n\n  /**\n   * The zero knowledge proof used in signing the transaction.\n   */\n  proof?: ZkProof;\n\n  /**\n   * The domain separator prefix used when hashing.\n   */\n  readonly domainSeparator = \"APTOS::TransactionAndProof\";\n\n  constructor(transaction: AnyRawTransactionInstance, proof?: ZkProof) {\n    super();\n    this.transaction = transaction;\n    this.proof = proof;\n  }\n\n  serialize(serializer: Serializer): void {\n    serializer.serializeFixedBytes(this.transaction.bcsToBytes());\n    serializer.serializeOption(this.proof);\n  }\n\n  /**\n   * Hashes the bcs serialized from of the class. This is the typescript corollary to the BCSCryptoHash macro in aptos-core.\n   *\n   * @returns Uint8Array\n   */\n  hash(): Uint8Array {\n    return generateSigningMessage(this.bcsToBytes(), this.domainSeparator);\n  }\n}\n\nexport type ProofFetchSuccess = {\n  status: \"Success\";\n};\n\nexport type ProofFetchFailure = {\n  status: \"Failed\";\n  error: string;\n};\n\nexport type ProofFetchStatus = ProofFetchSuccess | ProofFetchFailure;\n\nexport type ProofFetchCallback = (status: ProofFetchStatus) => Promise<void>;\n\nexport interface ProofFetchEvents {\n  proofFetchFinish: (status: ProofFetchStatus) => void;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAGA,SAAqB,iBAAiB;AACtC,OAAO,kBAAkB;AAgClB,IAAM,kBAAN,MAAM,wBAAuB,aAAgC;AAAA;AAAA,EAkE1D,YAAY,MAWjB;AACD,UAAM;AACN,UAAM,EAAE,SAAS,kBAAkB,QAAQ,QAAQ,KAAK,QAAQ,OAAO,oBAAoB,IAAI,IAAI;AACnG,SAAK,mBAAmB;AACxB,SAAK,YAAY,iBAAiB,OAAO,IAAI;AAC7C,SAAK,iBAAiB,UAAU,eAAe,KAAK,OAAO,IAAI,KAAK,UAAU,QAAQ,EAAE,eAAe;AACvG,SAAK,SAAS;AACd,SAAK,SAAS;AACd,SAAK,MAAM;AACX,SAAK,MAAM;AACX,SAAK,UAAU,IAAI,aAA+B;AAClD,SAAK,iBAAiB;AACtB,QAAI,iBAAiB,kBAAkB;AACrC,WAAK,QAAQ;AAAA,IACf,OAAO;AACL,UAAI,uBAAuB,QAAW;AACpC,cAAM,IAAI,MAAM,6CAA6C;AAAA,MAC/D;AACA,WAAK,QAAQ,GAAG,oBAAoB,OAAO,WAAW;AACpD,cAAM,mBAAmB,MAAM;AAC/B,aAAK,QAAQ,mBAAmB;AAAA,MAClC,CAAC;AACD,WAAK,KAAK,KAAK;AAAA,IACjB;AACA,SAAK;AACL,UAAM,cAAc,IAAI,aAAa,MAAM,EAAE,aAAa;AAC1D,QAAI,YAAY,WAAW,gBAAe,eAAe;AACvD,YAAM,IAAI,MAAM,oCAAoC,gBAAe,aAAa,EAAE;AAAA,IACpF;AACA,SAAK,SAAS;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,KAAK,SAAoC;AAC7C,QAAI;AACF,WAAK,QAAQ,MAAM;AACnB,WAAK,QAAQ,KAAK,oBAAoB,EAAE,QAAQ,UAAU,CAAC;AAAA,IAC7D,SAAS,OAAO;AACd,UAAI,iBAAiB,OAAO;AAC1B,aAAK,QAAQ,KAAK,oBAAoB,EAAE,QAAQ,UAAU,OAAO,MAAM,SAAS,EAAE,CAAC;AAAA,MACrF,OAAO;AACL,aAAK,QAAQ,KAAK,oBAAoB,EAAE,QAAQ,UAAU,OAAO,UAAU,CAAC;AAAA,MAC9E;AAAA,IACF;AAAA,EACF;AAAA,EAEA,UAAU,YAA8B;AACtC,eAAW,aAAa,KAAK,GAAG;AAChC,eAAW,aAAa,KAAK,MAAM;AACnC,eAAW,oBAAoB,KAAK,MAAM;AAC1C,SAAK,iBAAiB,UAAU,UAAU;AAC1C,QAAI,KAAK,UAAU,QAAW;AAC5B,YAAM,IAAI,MAAM,oCAAoC;AAAA,IACtD;AACA,SAAK,MAAM,UAAU,UAAU;AAAA,EACjC;AAAA,EAEA,OAAO,YAAY,cAA4C;AAC7D,UAAM,MAAM,aAAa,eAAe;AACxC,UAAM,SAAS,aAAa,eAAe;AAC3C,UAAM,SAAS,aAAa,sBAAsB,EAAE;AACpD,UAAM,mBAAmB,iBAAiB,YAAY,YAAY;AAClE,UAAM,QAAQ,iBAAiB,YAAY,YAAY;AACvD,WAAO,gBAAe,OAAO;AAAA,MAC3B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,YAAqB;AACnB,WAAO,KAAK,iBAAiB,UAAU;AAAA,EACzC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,sBAAsB,SAAkD;AACtE,UAAM,YAAY,IAAI,aAAa,KAAK,KAAK,OAAO,CAAC;AACrD,UAAM,YAAY,IAAI,aAAa,KAAK,SAAS;AACjD,WAAO,IAAI,8BAA8B,WAAW,SAAS;AAAA,EAC/D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,iCAAiC,aAA+D;AAC9F,UAAM,YAAY,IAAI,aAAa,KAAK,gBAAgB,WAAW,CAAC;AACpE,UAAM,YAAY,IAAI,aAAa,KAAK,SAAS;AACjD,WAAO,IAAI,8BAA8B,WAAW,SAAS;AAAA,EAC/D;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,oBAAoB;AACxB,QAAI,KAAK,0BAA0B,SAAS;AAC1C,YAAM,KAAK;AAAA,IACb;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,KAAK,MAAkC;AACrC,UAAM,EAAE,eAAe,IAAI,KAAK;AAChC,QAAI,KAAK,UAAU,GAAG;AACpB,YAAM,IAAI,MAAM,6BAA6B;AAAA,IAC/C;AACA,QAAI,KAAK,UAAU,QAAW;AAC5B,YAAM,IAAI,MAAM,mBAAmB;AAAA,IACrC;AACA,UAAM,qBAAqB,KAAK,iBAAiB,aAAa;AAC9D,UAAM,qBAAqB,KAAK,iBAAiB,KAAK,IAAI;AAE1D,WAAO,IAAI,iBAAiB;AAAA,MAC1B,WAAW,gBAAgB,KAAK,IAAI,MAAM,GAAG,EAAE,CAAC,CAAC;AAAA,MACjD,sBAAsB,IAAI,qBAAqB,KAAK,sBAA0C;AAAA,MAC9F;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,gBAAgB,aAAkD;AAChE,QAAI,KAAK,UAAU,QAAW;AAC5B,YAAM,IAAI,MAAM,iBAAiB;AAAA,IACnC;AACA,UAAM,MAAM,sBAAsB,WAAW;AAC7C,UAAM,cAAc,IAAI,oBAAoB,KAAK,KAAK,MAAM,KAAK;AACjE,UAAM,WAAW,YAAY,KAAK;AAClC,WAAO,KAAK,KAAK,QAAQ;AAAA,EAC3B;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,gBAAgB,MAAmE;AACjF,UAAM,EAAE,SAAS,UAAU,IAAI;AAC/B,QAAI,KAAK,UAAU,GAAG;AACpB,aAAO;AAAA,IACT;AACA,QAAI,CAAC,KAAK,iBAAiB,aAAa,EAAE,gBAAgB,EAAE,SAAS,WAAW,UAAU,mBAAmB,CAAC,GAAG;AAC/G,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA,EAEA,OAAO,UAAU,OAAmC;AAClD,WAAO,gBAAe,YAAY,IAAI,aAAa,KAAK,CAAC;AAAA,EAC3D;AAAA,EAEA,OAAO,OAAO,MAQK;AACjB,UAAM,EAAE,SAAS,OAAO,KAAK,kBAAkB,QAAQ,SAAS,OAAO,mBAAmB,IAAI;AAE9F,UAAM,aAAa,UAAkD,GAAG;AACxE,UAAM,MAAM,WAAW;AACvB,QAAI,OAAO,WAAW,QAAQ,UAAU;AACtC,YAAM,IAAI,MAAM,yCAAyC;AAAA,IAC3D;AACA,UAAM,MAAM,WAAW;AACvB,UAAM,SAAS,WAAW,MAAM;AAChC,WAAO,IAAI,gBAAe;AAAA,MACxB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,EACH;AACF;AAnSa,gBACK,gBAAwB;AADnC,IAAM,iBAAN;AAySA,IAAM,sBAAN,cAAkC,aAAa;AAAA,EAgBpD,YAAY,aAAwC,OAAiB;AACnE,UAAM;AAHR;AAAA;AAAA;AAAA,SAAS,kBAAkB;AAIzB,SAAK,cAAc;AACnB,SAAK,QAAQ;AAAA,EACf;AAAA,EAEA,UAAU,YAA8B;AACtC,eAAW,oBAAoB,KAAK,YAAY,WAAW,CAAC;AAC5D,eAAW,gBAAgB,KAAK,KAAK;AAAA,EACvC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAmB;AACjB,WAAO,uBAAuB,KAAK,WAAW,GAAG,KAAK,eAAe;AAAA,EACvE;AACF;","names":[]}