@aspect-wallet/sdk 0.1.0

package/dist/session-keys/templates.d.ts

@@ -0,0 +1,49 @@
+/**
+ * Pre-built session key permission templates.
+ * Corresponds to SPEC-013 Section 9.2.
+ */
+import type { Address, SessionKeyPermissions } from '../types.js';
+/**
+ * Pre-built permission templates for common session key use cases.
+ */
+export declare class SessionKeyTemplates {
+    /**
+     * Gaming session: allow specific game contract functions, no ETH transfers, sponsored gas.
+     */
+    static gaming(params: {
+        gameContract: Address;
+        duration: number;
+        paymaster?: Address;
+    }): SessionKeyPermissions;
+    /**
+     * DeFi session: allow DEX and lending pool interactions with spend limits.
+     */
+    static defi(params: {
+        dexRouter: Address;
+        lendingPool?: Address;
+        spendLimit: bigint;
+        duration: number;
+    }): SessionKeyPermissions;
+    /**
+     * Subscription session: allow periodic token transfers to a merchant.
+     * ERC-20 transfer selector: 0xa9059cbb
+     * ERC-20 approve selector: 0x095ea7b3
+     */
+    static subscription(params: {
+        token: Address;
+        merchant: Address;
+        monthlyLimit: bigint;
+        duration: number;
+    }): SessionKeyPermissions;
+    /**
+     * NFT minting session: allow minting on a specific contract with no ETH limits.
+     */
+    static nftMint(params: {
+        nftContract: Address;
+        mintSelector: `0x${string}`;
+        maxMintCost: bigint;
+        duration: number;
+        paymaster?: Address;
+    }): SessionKeyPermissions;
+}
+//# sourceMappingURL=templates.d.ts.map

package/dist/session-keys/templates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.d.ts","sourceRoot":"","sources":["../../src/session-keys/templates.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAGlE;;GAEG;AACH,qBAAa,mBAAmB;IAC9B;;OAEG;IACH,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE;QACpB,YAAY,EAAE,OAAO,CAAC;QACtB,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,CAAC,EAAE,OAAO,CAAC;KACrB,GAAG,qBAAqB;IAazB;;OAEG;IACH,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE;QAClB,SAAS,EAAE,OAAO,CAAC;QACnB,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB,UAAU,EAAE,MAAM,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC;KAClB,GAAG,qBAAqB;IAazB;;;;OAIG;IACH,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE;QAC1B,KAAK,EAAE,OAAO,CAAC;QACf,QAAQ,EAAE,OAAO,CAAC;QAClB,YAAY,EAAE,MAAM,CAAC;QACrB,QAAQ,EAAE,MAAM,CAAC;KAClB,GAAG,qBAAqB;IAWzB;;OAEG;IACH,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE;QACrB,WAAW,EAAE,OAAO,CAAC;QACrB,YAAY,EAAE,KAAK,MAAM,EAAE,CAAC;QAC5B,WAAW,EAAE,MAAM,CAAC;QACpB,QAAQ,EAAE,MAAM,CAAC;QACjB,SAAS,CAAC,EAAE,OAAO,CAAC;KACrB,GAAG,qBAAqB;CAY1B"}

package/dist/session-keys/templates.js

@@ -0,0 +1,65 @@
+/**
+ * Pre-built session key permission templates.
+ * Corresponds to SPEC-013 Section 9.2.
+ */
+import { PermissionBuilder } from './permissions.js';
+/**
+ * Pre-built permission templates for common session key use cases.
+ */
+export class SessionKeyTemplates {
+    /**
+     * Gaming session: allow specific game contract functions, no ETH transfers, sponsored gas.
+     */
+    static gaming(params) {
+        const builder = new PermissionBuilder()
+            .allowContractWildcard(params.gameContract)
+            .setSpendLimit({ perTx: 0n, cumulative: 0n })
+            .setTimeRange({ duration: params.duration });
+        if (params.paymaster) {
+            builder.requirePaymaster(params.paymaster);
+        }
+        return builder.build();
+    }
+    /**
+     * DeFi session: allow DEX and lending pool interactions with spend limits.
+     */
+    static defi(params) {
+        const builder = new PermissionBuilder()
+            .allowContractWildcard(params.dexRouter)
+            .setSpendLimit({ perTx: params.spendLimit, cumulative: params.spendLimit })
+            .setTimeRange({ duration: params.duration });
+        if (params.lendingPool) {
+            builder.allowContractWildcard(params.lendingPool);
+        }
+        return builder.build();
+    }
+    /**
+     * Subscription session: allow periodic token transfers to a merchant.
+     * ERC-20 transfer selector: 0xa9059cbb
+     * ERC-20 approve selector: 0x095ea7b3
+     */
+    static subscription(params) {
+        return new PermissionBuilder()
+            .allowContract(params.token, [
+            '0xa9059cbb', // transfer(address,uint256)
+            '0x095ea7b3', // approve(address,uint256)
+        ])
+            .setSpendLimit({ perTx: params.monthlyLimit, cumulative: params.monthlyLimit })
+            .setTimeRange({ duration: params.duration })
+            .build();
+    }
+    /**
+     * NFT minting session: allow minting on a specific contract with no ETH limits.
+     */
+    static nftMint(params) {
+        const builder = new PermissionBuilder()
+            .allowContract(params.nftContract, [params.mintSelector])
+            .setSpendLimit({ perTx: params.maxMintCost, cumulative: params.maxMintCost })
+            .setTimeRange({ duration: params.duration });
+        if (params.paymaster) {
+            builder.requirePaymaster(params.paymaster);
+        }
+        return builder.build();
+    }
+}
+//# sourceMappingURL=templates.js.map

package/dist/session-keys/templates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"templates.js","sourceRoot":"","sources":["../../src/session-keys/templates.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD;;GAEG;AACH,MAAM,OAAO,mBAAmB;IAC9B;;OAEG;IACH,MAAM,CAAC,MAAM,CAAC,MAIb;QACC,MAAM,OAAO,GAAG,IAAI,iBAAiB,EAAE;aACpC,qBAAqB,CAAC,MAAM,CAAC,YAAY,CAAC;aAC1C,aAAa,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;aAC5C,YAAY,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAE/C,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7C,CAAC;QAED,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,IAAI,CAAC,MAKX;QACC,MAAM,OAAO,GAAG,IAAI,iBAAiB,EAAE;aACpC,qBAAqB,CAAC,MAAM,CAAC,SAAS,CAAC;aACvC,aAAa,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;aAC1E,YAAY,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAE/C,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,OAAO,CAAC,qBAAqB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QACpD,CAAC;QAED,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,YAAY,CAAC,MAKnB;QACC,OAAO,IAAI,iBAAiB,EAAE;aAC3B,aAAa,CAAC,MAAM,CAAC,KAAK,EAAE;YAC3B,YAAY,EAAE,4BAA4B;YAC1C,YAAY,EAAE,2BAA2B;SAC1C,CAAC;aACD,aAAa,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE,UAAU,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;aAC9E,YAAY,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;aAC3C,KAAK,EAAE,CAAC;IACb,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,OAAO,CAAC,MAMd;QACC,MAAM,OAAO,GAAG,IAAI,iBAAiB,EAAE;aACpC,aAAa,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;aACxD,aAAa,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC;aAC5E,YAAY,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;QAE/C,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;YACrB,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7C,CAAC;QAED,OAAO,OAAO,CAAC,KAAK,EAAE,CAAC;IACzB,CAAC;CACF"}

package/dist/signer/eoa.d.ts

@@ -0,0 +1,24 @@
+/**
+ * EOA (secp256k1 ECDSA) signer implementation.
+ * Corresponds to SPEC-013 Section 5.4 -- moduleId=0, 69 bytes.
+ */
+import type { Address, Hex } from '../types.js';
+import { type ISigner } from './interface.js';
+/**
+ * Signs UserOperations with a secp256k1 private key (standard EOA).
+ * Produces ECDSA signatures: r(32) + s(32) + v(1) = 65 bytes.
+ * Prefixed with moduleId(4) = 69 bytes total.
+ */
+export declare class EoaSigner implements ISigner {
+    readonly type: "eoa";
+    readonly address: Address;
+    readonly moduleId: 0;
+    private readonly account;
+    constructor(privateKey: Hex);
+    /**
+     * Sign a UserOperation hash with ECDSA.
+     * Returns the full prefixed signature: moduleId(4) + ecdsaSig(65) = 69 bytes.
+     */
+    sign(userOpHash: Hex): Promise<Hex>;
+}
+//# sourceMappingURL=eoa.d.ts.map

package/dist/signer/eoa.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"eoa.d.ts","sourceRoot":"","sources":["../../src/signer/eoa.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,KAAK,OAAO,EAAqC,MAAM,gBAAgB,CAAC;AAEjF;;;;GAIG;AACH,qBAAa,SAAU,YAAW,OAAO;IACvC,QAAQ,CAAC,IAAI,EAAG,KAAK,CAAU;IAC/B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,IAA4B;IAE7C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAe;gBAE3B,UAAU,EAAE,GAAG;IAK3B;;;OAGG;IACG,IAAI,CAAC,UAAU,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;CAO1C"}

package/dist/signer/eoa.js

@@ -0,0 +1,32 @@
+/**
+ * EOA (secp256k1 ECDSA) signer implementation.
+ * Corresponds to SPEC-013 Section 5.4 -- moduleId=0, 69 bytes.
+ */
+import { privateKeyToAccount } from 'viem/accounts';
+import { MODULE_IDS, encodeModuleSignature } from './interface.js';
+/**
+ * Signs UserOperations with a secp256k1 private key (standard EOA).
+ * Produces ECDSA signatures: r(32) + s(32) + v(1) = 65 bytes.
+ * Prefixed with moduleId(4) = 69 bytes total.
+ */
+export class EoaSigner {
+    type = 'eoa';
+    address;
+    moduleId = MODULE_IDS.SINGLE_SIGNER;
+    account;
+    constructor(privateKey) {
+        this.account = privateKeyToAccount(privateKey);
+        this.address = this.account.address;
+    }
+    /**
+     * Sign a UserOperation hash with ECDSA.
+     * Returns the full prefixed signature: moduleId(4) + ecdsaSig(65) = 69 bytes.
+     */
+    async sign(userOpHash) {
+        const rawSignature = await this.account.signMessage({
+            message: { raw: userOpHash },
+        });
+        return encodeModuleSignature(this.moduleId, rawSignature);
+    }
+}
+//# sourceMappingURL=eoa.js.map

package/dist/signer/eoa.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eoa.js","sourceRoot":"","sources":["../../src/signer/eoa.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAEpD,OAAO,EAAgB,UAAU,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAEjF;;;;GAIG;AACH,MAAM,OAAO,SAAS;IACX,IAAI,GAAG,KAAc,CAAC;IACtB,OAAO,CAAU;IACjB,QAAQ,GAAG,UAAU,CAAC,aAAa,CAAC;IAE5B,OAAO,CAAe;IAEvC,YAAY,UAAe;QACzB,IAAI,CAAC,OAAO,GAAG,mBAAmB,CAAC,UAAqB,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAkB,CAAC;IACjD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,IAAI,CAAC,UAAe;QACxB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;YAClD,OAAO,EAAE,EAAE,GAAG,EAAE,UAAqB,EAAE;SACxC,CAAC,CAAC;QAEH,OAAO,qBAAqB,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAmB,CAAC,CAAC;IACnE,CAAC;CACF"}

package/dist/signer/interface.d.ts

@@ -0,0 +1,60 @@
+/**
+ * ISigner abstraction and signature encoding.
+ * Corresponds to SPEC-013 Section 5.4.
+ *
+ * Signature format: abi.encodePacked(uint32(moduleId), moduleSpecificSignature)
+ *
+ * | Signer           | moduleId | Signature Format                                  | Size       |
+ * |------------------|----------|---------------------------------------------------|------------|
+ * | EOA              | 0        | moduleId(4) + ecdsaSig(65)                        | 69 bytes   |
+ * | Session Key      | 1        | moduleId(4) + ecdsaSig(65)                        | 69 bytes   |
+ * | Device+Guardian  | 2        | moduleId(4) + deviceSig(65) + guardianSig(65)     | 134 bytes  |
+ * | Multi-Sig (2/3)  | 3        | moduleId(4) + abi.encode(sig1, sig2)              | ~200 bytes |
+ * | Passkey (WebAuthn)| 4       | moduleId(4) + abi.encode(authData, clientJSON, r, s) | ~300-500   |
+ */
+import type { Address, Hex } from '../types.js';
+/** Signer type identifiers */
+export type SignerType = 'eoa' | 'passkey' | 'turnkey' | 'session-key' | 'multi-sig';
+/** Module ID constants */
+export declare const MODULE_IDS: {
+    readonly SINGLE_SIGNER: 0;
+    readonly SESSION_KEY: 1;
+    readonly DEVICE_GUARDIAN: 2;
+    readonly MULTI_SIG: 3;
+    readonly WEBAUTHN: 4;
+};
+/**
+ * Universal signer interface.
+ * All signer implementations must conform to this interface.
+ */
+export interface ISigner {
+    /** Signer type identifier */
+    readonly type: SignerType;
+    /** Signer's public address */
+    readonly address: Address;
+    /** On-chain validation module ID */
+    readonly moduleId: number;
+    /**
+     * Sign a UserOperation hash.
+     * Returns the raw module-specific signature (without moduleId prefix).
+     * Use encodeModuleSignature() to prepend the moduleId.
+     */
+    sign(userOpHash: Hex): Promise<Hex>;
+}
+/**
+ * Encode a signature with the module ID prefix.
+ * Format: abi.encodePacked(uint32(moduleId), moduleSpecificSignature)
+ *
+ * @param moduleId - The validation module ID (0-4)
+ * @param signature - The raw module-specific signature
+ * @returns The prefixed signature ready for UserOperation.signature
+ */
+export declare function encodeModuleSignature(moduleId: number, signature: Hex): Hex;
+/**
+ * Decode a prefixed signature into moduleId and raw signature.
+ */
+export declare function decodeModuleSignature(prefixedSignature: Hex): {
+    moduleId: number;
+    signature: Hex;
+};
+//# sourceMappingURL=interface.d.ts.map

package/dist/signer/interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"interface.d.ts","sourceRoot":"","sources":["../../src/signer/interface.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAEhD,8BAA8B;AAC9B,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,SAAS,GAAG,SAAS,GAAG,aAAa,GAAG,WAAW,CAAC;AAErF,0BAA0B;AAC1B,eAAO,MAAM,UAAU;;;;;;CAMb,CAAC;AAEX;;;GAGG;AACH,MAAM,WAAW,OAAO;IACtB,6BAA6B;IAC7B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAE1B,8BAA8B;IAC9B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAE1B,oCAAoC;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B;;;;OAIG;IACH,IAAI,CAAC,UAAU,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;CACrC;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,GAAG,GAAG,CAM3E;AAED;;GAEG;AACH,wBAAgB,qBAAqB,CAAC,iBAAiB,EAAE,GAAG,GAAG;IAC7D,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,GAAG,CAAC;CAChB,CAKA"}

package/dist/signer/interface.js

@@ -0,0 +1,47 @@
+/**
+ * ISigner abstraction and signature encoding.
+ * Corresponds to SPEC-013 Section 5.4.
+ *
+ * Signature format: abi.encodePacked(uint32(moduleId), moduleSpecificSignature)
+ *
+ * | Signer           | moduleId | Signature Format                                  | Size       |
+ * |------------------|----------|---------------------------------------------------|------------|
+ * | EOA              | 0        | moduleId(4) + ecdsaSig(65)                        | 69 bytes   |
+ * | Session Key      | 1        | moduleId(4) + ecdsaSig(65)                        | 69 bytes   |
+ * | Device+Guardian  | 2        | moduleId(4) + deviceSig(65) + guardianSig(65)     | 134 bytes  |
+ * | Multi-Sig (2/3)  | 3        | moduleId(4) + abi.encode(sig1, sig2)              | ~200 bytes |
+ * | Passkey (WebAuthn)| 4       | moduleId(4) + abi.encode(authData, clientJSON, r, s) | ~300-500   |
+ */
+import { concat } from 'viem';
+/** Module ID constants */
+export const MODULE_IDS = {
+    SINGLE_SIGNER: 0,
+    SESSION_KEY: 1,
+    DEVICE_GUARDIAN: 2,
+    MULTI_SIG: 3,
+    WEBAUTHN: 4,
+};
+/**
+ * Encode a signature with the module ID prefix.
+ * Format: abi.encodePacked(uint32(moduleId), moduleSpecificSignature)
+ *
+ * @param moduleId - The validation module ID (0-4)
+ * @param signature - The raw module-specific signature
+ * @returns The prefixed signature ready for UserOperation.signature
+ */
+export function encodeModuleSignature(moduleId, signature) {
+    // uint32 moduleId = 4 bytes big-endian
+    const moduleIdHex = moduleId.toString(16).padStart(8, '0');
+    const moduleIdBytes = `0x${moduleIdHex}`;
+    return concat([moduleIdBytes, signature]);
+}
+/**
+ * Decode a prefixed signature into moduleId and raw signature.
+ */
+export function decodeModuleSignature(prefixedSignature) {
+    // First 4 bytes = moduleId
+    const moduleId = parseInt(prefixedSignature.slice(2, 10), 16);
+    const signature = `0x${prefixedSignature.slice(10)}`;
+    return { moduleId, signature };
+}
+//# sourceMappingURL=interface.js.map

package/dist/signer/interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interface.js","sourceRoot":"","sources":["../../src/signer/interface.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAgB,MAAM,EAAE,MAAM,MAAM,CAAC;AAM5C,0BAA0B;AAC1B,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,aAAa,EAAE,CAAC;IAChB,WAAW,EAAE,CAAC;IACd,eAAe,EAAE,CAAC;IAClB,SAAS,EAAE,CAAC;IACZ,QAAQ,EAAE,CAAC;CACH,CAAC;AAwBX;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,QAAgB,EAAE,SAAc;IACpE,uCAAuC;IACvC,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3D,MAAM,aAAa,GAAG,KAAK,WAAW,EAAS,CAAC;IAEhD,OAAO,MAAM,CAAC,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,iBAAsB;IAI1D,2BAA2B;IAC3B,MAAM,QAAQ,GAAG,QAAQ,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,KAAK,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC,EAAS,CAAC;IAC5D,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AACjC,CAAC"}

package/dist/signer/multisig.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Multi-sig signature collector.
+ * Corresponds to SPEC-013 Section 5.4 -- moduleId=3, ~200 bytes.
+ *
+ * Signature format: moduleId(4) + abi.encode(sig1, sig2, ...)
+ */
+import type { Address, Hex } from '../types.js';
+import { type ISigner } from './interface.js';
+/**
+ * Collects multiple signatures for K-of-N multi-sig validation.
+ * Does not hold private keys -- instead collects raw signatures from other signers.
+ */
+export declare class MultiSigCollector implements ISigner {
+    readonly address: Address;
+    private readonly threshold;
+    readonly type: "multi-sig";
+    readonly moduleId: 3;
+    private signatures;
+    constructor(address: Address, threshold: number);
+    /**
+     * Add a raw signature from one of the K-of-N signers.
+     */
+    addSignature(signature: Hex): void;
+    /** Check if enough signatures have been collected */
+    get isComplete(): boolean;
+    /** Number of signatures collected */
+    get count(): number;
+    /**
+     * Encode all collected signatures.
+     * Returns: moduleId(4) + abi.encode(bytes[] signatures)
+     *
+     * @throws If threshold not met
+     */
+    sign(_userOpHash: Hex): Promise<Hex>;
+    /** Reset collected signatures */
+    reset(): void;
+}
+//# sourceMappingURL=multisig.d.ts.map

package/dist/signer/multisig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"multisig.d.ts","sourceRoot":"","sources":["../../src/signer/multisig.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,KAAK,OAAO,EAAqC,MAAM,gBAAgB,CAAC;AAEjF;;;GAGG;AACH,qBAAa,iBAAkB,YAAW,OAAO;IAO7C,QAAQ,CAAC,OAAO,EAAE,OAAO;IACzB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAP5B,QAAQ,CAAC,IAAI,EAAG,WAAW,CAAU;IACrC,QAAQ,CAAC,QAAQ,IAAwB;IAEzC,OAAO,CAAC,UAAU,CAAa;gBAGpB,OAAO,EAAE,OAAO,EACR,SAAS,EAAE,MAAM;IAGpC;;OAEG;IACH,YAAY,CAAC,SAAS,EAAE,GAAG,GAAG,IAAI;IAIlC,qDAAqD;IACrD,IAAI,UAAU,IAAI,OAAO,CAExB;IAED,qCAAqC;IACrC,IAAI,KAAK,IAAI,MAAM,CAElB;IAED;;;;;OAKG;IACG,IAAI,CAAC,WAAW,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;IAa1C,iCAAiC;IACjC,KAAK,IAAI,IAAI;CAGd"}

package/dist/signer/multisig.js

@@ -0,0 +1,56 @@
+/**
+ * Multi-sig signature collector.
+ * Corresponds to SPEC-013 Section 5.4 -- moduleId=3, ~200 bytes.
+ *
+ * Signature format: moduleId(4) + abi.encode(sig1, sig2, ...)
+ */
+import { encodeAbiParameters, parseAbiParameters } from 'viem';
+import { MODULE_IDS, encodeModuleSignature } from './interface.js';
+/**
+ * Collects multiple signatures for K-of-N multi-sig validation.
+ * Does not hold private keys -- instead collects raw signatures from other signers.
+ */
+export class MultiSigCollector {
+    address;
+    threshold;
+    type = 'multi-sig';
+    moduleId = MODULE_IDS.MULTI_SIG;
+    signatures = [];
+    constructor(address, threshold) {
+        this.address = address;
+        this.threshold = threshold;
+    }
+    /**
+     * Add a raw signature from one of the K-of-N signers.
+     */
+    addSignature(signature) {
+        this.signatures.push(signature);
+    }
+    /** Check if enough signatures have been collected */
+    get isComplete() {
+        return this.signatures.length >= this.threshold;
+    }
+    /** Number of signatures collected */
+    get count() {
+        return this.signatures.length;
+    }
+    /**
+     * Encode all collected signatures.
+     * Returns: moduleId(4) + abi.encode(bytes[] signatures)
+     *
+     * @throws If threshold not met
+     */
+    async sign(_userOpHash) {
+        if (!this.isComplete) {
+            throw new Error(`Multi-sig threshold not met: ${this.signatures.length}/${this.threshold}`);
+        }
+        // ABI-encode the array of signatures
+        const encoded = encodeAbiParameters(parseAbiParameters('bytes[]'), [this.signatures]);
+        return encodeModuleSignature(this.moduleId, encoded);
+    }
+    /** Reset collected signatures */
+    reset() {
+        this.signatures = [];
+    }
+}
+//# sourceMappingURL=multisig.js.map

package/dist/signer/multisig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"multisig.js","sourceRoot":"","sources":["../../src/signer/multisig.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,MAAM,CAAC;AAE/D,OAAO,EAAgB,UAAU,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAEjF;;;GAGG;AACH,MAAM,OAAO,iBAAiB;IAOjB;IACQ;IAPV,IAAI,GAAG,WAAoB,CAAC;IAC5B,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC;IAEjC,UAAU,GAAU,EAAE,CAAC;IAE/B,YACW,OAAgB,EACR,SAAiB;QADzB,YAAO,GAAP,OAAO,CAAS;QACR,cAAS,GAAT,SAAS,CAAQ;IACjC,CAAC;IAEJ;;OAEG;IACH,YAAY,CAAC,SAAc;QACzB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC;IAED,qDAAqD;IACrD,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC;IAClD,CAAC;IAED,qCAAqC;IACrC,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;IAChC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CAAC,WAAgB;QACzB,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CACb,gCAAgC,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,CAC3E,CAAC;QACJ,CAAC;QAED,qCAAqC;QACrC,MAAM,OAAO,GAAG,mBAAmB,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAEtF,OAAO,qBAAqB,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAc,CAAC,CAAC;IAC9D,CAAC;IAED,iCAAiC;IACjC,KAAK;QACH,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC;IACvB,CAAC;CACF"}

package/dist/signer/passkey.d.ts

@@ -0,0 +1,35 @@
+/**
+ * WebAuthn/Passkey P256 signer implementation.
+ * Corresponds to SPEC-013 Section 5.4 -- moduleId=4, ~300-500 bytes.
+ *
+ * Signature format: moduleId(4) + abi.encode(authenticatorData, clientDataJSON, r, s)
+ */
+import type { Address, Hex } from '../types.js';
+import { type ISigner } from './interface.js';
+interface WebAuthnSignResult {
+    authenticatorData: Hex;
+    clientDataJSON: string;
+    r: bigint;
+    s: bigint;
+}
+/**
+ * Signs UserOperations using WebAuthn/Passkey (P256/secp256r1).
+ * Uses the device secure enclave for key storage.
+ * On-chain verification via RIP-7212 precompile or daimo-eth/p256-verifier fallback.
+ */
+export declare class PasskeySigner implements ISigner {
+    readonly address: Address;
+    private readonly credentialId;
+    private readonly signFn?;
+    readonly type: "passkey";
+    readonly moduleId: 4;
+    constructor(address: Address, credentialId: string, signFn?: ((challenge: Hex) => Promise<WebAuthnSignResult>) | undefined);
+    /**
+     * Sign a UserOperation hash with WebAuthn P256.
+     * Returns: moduleId(4) + abi.encode(authenticatorData, clientDataJSON, r, s)
+     */
+    sign(userOpHash: Hex): Promise<Hex>;
+    private webauthnSign;
+}
+export {};
+//# sourceMappingURL=passkey.d.ts.map

package/dist/signer/passkey.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkey.d.ts","sourceRoot":"","sources":["../../src/signer/passkey.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,KAAK,OAAO,EAAqC,MAAM,gBAAgB,CAAC;AAEjF,UAAU,kBAAkB;IAC1B,iBAAiB,EAAE,GAAG,CAAC;IACvB,cAAc,EAAE,MAAM,CAAC;IACvB,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;CACX;AAED;;;;GAIG;AACH,qBAAa,aAAc,YAAW,OAAO;IAKzC,QAAQ,CAAC,OAAO,EAAE,OAAO;IACzB,OAAO,CAAC,QAAQ,CAAC,YAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;IAN1B,QAAQ,CAAC,IAAI,EAAG,SAAS,CAAU;IACnC,QAAQ,CAAC,QAAQ,IAAuB;gBAG7B,OAAO,EAAE,OAAO,EACR,YAAY,EAAE,MAAM,EACpB,MAAM,CAAC,GAAE,CAAC,SAAS,EAAE,GAAG,KAAK,OAAO,CAAC,kBAAkB,CAAC,aAAA;IAG3E;;;OAGG;IACG,IAAI,CAAC,UAAU,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;YAkB3B,YAAY;CA6B3B"}

package/dist/signer/passkey.js

@@ -0,0 +1,112 @@
+/**
+ * WebAuthn/Passkey P256 signer implementation.
+ * Corresponds to SPEC-013 Section 5.4 -- moduleId=4, ~300-500 bytes.
+ *
+ * Signature format: moduleId(4) + abi.encode(authenticatorData, clientDataJSON, r, s)
+ */
+import { encodeAbiParameters, parseAbiParameters } from 'viem';
+import { MODULE_IDS, encodeModuleSignature } from './interface.js';
+/**
+ * Signs UserOperations using WebAuthn/Passkey (P256/secp256r1).
+ * Uses the device secure enclave for key storage.
+ * On-chain verification via RIP-7212 precompile or daimo-eth/p256-verifier fallback.
+ */
+export class PasskeySigner {
+    address;
+    credentialId;
+    signFn;
+    type = 'passkey';
+    moduleId = MODULE_IDS.WEBAUTHN;
+    constructor(address, credentialId, signFn) {
+        this.address = address;
+        this.credentialId = credentialId;
+        this.signFn = signFn;
+    }
+    /**
+     * Sign a UserOperation hash with WebAuthn P256.
+     * Returns: moduleId(4) + abi.encode(authenticatorData, clientDataJSON, r, s)
+     */
+    async sign(userOpHash) {
+        let result;
+        if (this.signFn) {
+            result = await this.signFn(userOpHash);
+        }
+        else {
+            result = await this.webauthnSign(userOpHash);
+        }
+        // ABI-encode the WebAuthn assertion data
+        const moduleSignature = encodeAbiParameters(parseAbiParameters('bytes, string, uint256, uint256'), [result.authenticatorData, result.clientDataJSON, result.r, result.s]);
+        return encodeModuleSignature(this.moduleId, moduleSignature);
+    }
+    async webauthnSign(challenge) {
+        if (typeof navigator === 'undefined' || !navigator.credentials) {
+            throw new Error('WebAuthn not available in this environment');
+        }
+        // Convert hex challenge to ArrayBuffer
+        const challengeBytes = hexToBytes(challenge).buffer;
+        const assertion = (await navigator.credentials.get({
+            publicKey: {
+                challenge: challengeBytes,
+                allowCredentials: [
+                    {
+                        type: 'public-key',
+                        id: base64UrlToBuffer(this.credentialId),
+                    },
+                ],
+                userVerification: 'required',
+                timeout: 60000,
+            },
+        }));
+        const response = assertion.response;
+        const authenticatorData = bytesToHex(new Uint8Array(response.authenticatorData));
+        const clientDataJSON = new TextDecoder().decode(response.clientDataJSON);
+        const { r, s } = extractP256Signature(new Uint8Array(response.signature));
+        return { authenticatorData, clientDataJSON, r, s };
+    }
+}
+/** Extract r, s from a DER-encoded P256 signature */
+function extractP256Signature(derSig) {
+    // DER: 0x30 <len> 0x02 <rlen> <r> 0x02 <slen> <s>
+    let offset = 2; // skip 0x30 and total length
+    offset += 1; // skip 0x02
+    const rLen = derSig[offset];
+    offset += 1;
+    const rBytes = derSig.slice(offset, offset + rLen);
+    offset += rLen;
+    offset += 1; // skip 0x02
+    const sLen = derSig[offset];
+    offset += 1;
+    const sBytes = derSig.slice(offset, offset + sLen);
+    const r = bytesToBigInt(rBytes);
+    const s = bytesToBigInt(sBytes);
+    // Normalize s to low-s form (s <= n/2) per P256
+    const P256_N = 0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551n;
+    const normalizedS = s > P256_N / 2n ? P256_N - s : s;
+    return { r, s: normalizedS };
+}
+function hexToBytes(hex) {
+    const bytes = new Uint8Array((hex.length - 2) / 2);
+    for (let i = 0; i < bytes.length; i++) {
+        bytes[i] = parseInt(hex.slice(2 + i * 2, 4 + i * 2), 16);
+    }
+    return bytes;
+}
+function bytesToHex(bytes) {
+    return `0x${Array.from(bytes)
+        .map((b) => b.toString(16).padStart(2, '0'))
+        .join('')}`;
+}
+function bytesToBigInt(bytes) {
+    return BigInt(bytesToHex(bytes));
+}
+function base64UrlToBuffer(base64url) {
+    const base64 = base64url.replace(/-/g, '+').replace(/_/g, '/');
+    const padding = '='.repeat((4 - (base64.length % 4)) % 4);
+    const binary = atob(base64 + padding);
+    const bytes = new Uint8Array(binary.length);
+    for (let i = 0; i < binary.length; i++) {
+        bytes[i] = binary.charCodeAt(i);
+    }
+    return bytes.buffer;
+}
+//# sourceMappingURL=passkey.js.map

package/dist/signer/passkey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkey.js","sourceRoot":"","sources":["../../src/signer/passkey.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,MAAM,CAAC;AAE/D,OAAO,EAAgB,UAAU,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AASjF;;;;GAIG;AACH,MAAM,OAAO,aAAa;IAKb;IACQ;IACA;IANV,IAAI,GAAG,SAAkB,CAAC;IAC1B,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;IAExC,YACW,OAAgB,EACR,YAAoB,EACpB,MAAwD;QAFhE,YAAO,GAAP,OAAO,CAAS;QACR,iBAAY,GAAZ,YAAY,CAAQ;QACpB,WAAM,GAAN,MAAM,CAAkD;IACxE,CAAC;IAEJ;;;OAGG;IACH,KAAK,CAAC,IAAI,CAAC,UAAe;QACxB,IAAI,MAA0B,CAAC;QAE/B,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACzC,CAAC;aAAM,CAAC;YACN,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QAC/C,CAAC;QAED,yCAAyC;QACzC,MAAM,eAAe,GAAG,mBAAmB,CACzC,kBAAkB,CAAC,iCAAiC,CAAC,EACrD,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CACtE,CAAC;QAEF,OAAO,qBAAqB,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAsB,CAAC,CAAC;IACtE,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,SAAc;QACvC,IAAI,OAAO,SAAS,KAAK,WAAW,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;YAC/D,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;QAChE,CAAC;QAED,uCAAuC;QACvC,MAAM,cAAc,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,MAAqB,CAAC;QAEnE,MAAM,SAAS,GAAG,CAAC,MAAM,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC;YACjD,SAAS,EAAE;gBACT,SAAS,EAAE,cAAc;gBACzB,gBAAgB,EAAE;oBAChB;wBACE,IAAI,EAAE,YAAY;wBAClB,EAAE,EAAE,iBAAiB,CAAC,IAAI,CAAC,YAAY,CAAC;qBACzC;iBACF;gBACD,gBAAgB,EAAE,UAAU;gBAC5B,OAAO,EAAE,KAAK;aACf;SACF,CAAC,CAAwB,CAAC;QAE3B,MAAM,QAAQ,GAAG,SAAS,CAAC,QAA0C,CAAC;QACtE,MAAM,iBAAiB,GAAG,UAAU,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACjF,MAAM,cAAc,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QACzE,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,oBAAoB,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;QAE1E,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC;IACrD,CAAC;CACF;AAED,qDAAqD;AACrD,SAAS,oBAAoB,CAAC,MAAkB;IAC9C,kDAAkD;IAClD,IAAI,MAAM,GAAG,CAAC,CAAC,CAAC,6BAA6B;IAC7C,MAAM,IAAI,CAAC,CAAC,CAAC,YAAY;IACzB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAE,CAAC;IAC7B,MAAM,IAAI,CAAC,CAAC;IACZ,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;IACnD,MAAM,IAAI,IAAI,CAAC;IACf,MAAM,IAAI,CAAC,CAAC,CAAC,YAAY;IACzB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAE,CAAC;IAC7B,MAAM,IAAI,CAAC,CAAC;IACZ,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC;IAEnD,MAAM,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC;IAEhC,gDAAgD;IAChD,MAAM,MAAM,GAAG,mEAAmE,CAAC;IACnF,MAAM,WAAW,GAAG,CAAC,GAAG,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAErD,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,UAAU,CAAC,GAAQ;IAC1B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACnD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,KAAK,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,KAAiB;IACnC,OAAO,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;SAC1B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SAC3C,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,KAAiB;IACtC,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,iBAAiB,CAAC,SAAiB;IAC1C,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC;AACtB,CAAC"}

package/dist/signer/session.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Session key signer implementation.
+ * Corresponds to SPEC-013 Section 5.4 -- moduleId=1, 69 bytes.
+ */
+import type { Address, Hex } from '../types.js';
+import { type ISigner } from './interface.js';
+/**
+ * Signs UserOperations with a session key (ephemeral ECDSA key).
+ * Session keys have scoped permissions enforced on-chain via permission hooks.
+ * Signature format is identical to EOA but uses moduleId=1.
+ */
+export declare class SessionKeySigner implements ISigner {
+    readonly type: "session-key";
+    readonly address: Address;
+    readonly moduleId: 1;
+    private readonly account;
+    constructor(privateKey: Hex);
+    /**
+     * Sign a UserOperation hash with the session key.
+     * Returns: moduleId(4) + ecdsaSig(65) = 69 bytes.
+     */
+    sign(userOpHash: Hex): Promise<Hex>;
+}
+//# sourceMappingURL=session.d.ts.map

package/dist/signer/session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.d.ts","sourceRoot":"","sources":["../../src/signer/session.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,KAAK,OAAO,EAAqC,MAAM,gBAAgB,CAAC;AAEjF;;;;GAIG;AACH,qBAAa,gBAAiB,YAAW,OAAO;IAC9C,QAAQ,CAAC,IAAI,EAAG,aAAa,CAAU;IACvC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,IAA0B;IAE3C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAe;gBAE3B,UAAU,EAAE,GAAG;IAK3B;;;OAGG;IACG,IAAI,CAAC,UAAU,EAAE,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC;CAO1C"}

package/dist/signer/session.js

@@ -0,0 +1,32 @@
+/**
+ * Session key signer implementation.
+ * Corresponds to SPEC-013 Section 5.4 -- moduleId=1, 69 bytes.
+ */
+import { privateKeyToAccount } from 'viem/accounts';
+import { MODULE_IDS, encodeModuleSignature } from './interface.js';
+/**
+ * Signs UserOperations with a session key (ephemeral ECDSA key).
+ * Session keys have scoped permissions enforced on-chain via permission hooks.
+ * Signature format is identical to EOA but uses moduleId=1.
+ */
+export class SessionKeySigner {
+    type = 'session-key';
+    address;
+    moduleId = MODULE_IDS.SESSION_KEY;
+    account;
+    constructor(privateKey) {
+        this.account = privateKeyToAccount(privateKey);
+        this.address = this.account.address;
+    }
+    /**
+     * Sign a UserOperation hash with the session key.
+     * Returns: moduleId(4) + ecdsaSig(65) = 69 bytes.
+     */
+    async sign(userOpHash) {
+        const rawSignature = await this.account.signMessage({
+            message: { raw: userOpHash },
+        });
+        return encodeModuleSignature(this.moduleId, rawSignature);
+    }
+}
+//# sourceMappingURL=session.js.map

package/dist/signer/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../src/signer/session.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAEpD,OAAO,EAAgB,UAAU,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAEjF;;;;GAIG;AACH,MAAM,OAAO,gBAAgB;IAClB,IAAI,GAAG,aAAsB,CAAC;IAC9B,OAAO,CAAU;IACjB,QAAQ,GAAG,UAAU,CAAC,WAAW,CAAC;IAE1B,OAAO,CAAe;IAEvC,YAAY,UAAe;QACzB,IAAI,CAAC,OAAO,GAAG,mBAAmB,CAAC,UAAqB,CAAC,CAAC;QAC1D,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAkB,CAAC;IACjD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,IAAI,CAAC,UAAe;QACxB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC;YAClD,OAAO,EAAE,EAAE,GAAG,EAAE,UAAqB,EAAE;SACxC,CAAC,CAAC;QAEH,OAAO,qBAAqB,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAmB,CAAC,CAAC;IACnE,CAAC;CACF"}