@authon/react-native-wallet 0.0.0-stage → 0.4.0

package/android/src/vendor/kotlin/dev/authon/sdk/wallet/Xrp.kt

@@ -0,0 +1,193 @@
+// GENERATED by scripts/sync-native-wallet.mjs from kotlin/authon/src/main/kotlin/dev/authon/sdk/wallet/Xrp.kt. Do not edit: change the source and run the script.
+package dev.authon.sdk.wallet
+
+import org.web3j.crypto.ECKeyPair
+import org.web3j.crypto.Sign
+import java.math.BigInteger
+import java.security.MessageDigest
+
+/**
+ * XRP Ledger signing (NATIVE.md section 12, `apps/wallet/src/xrp.ts`). The app sends the
+ * encodeForSigning output (prefix STX\0); the SDK decodes it only to describe it and signs
+ * SHA-512Half(blob) with secp256k1, DER, low S, uppercase hex like ripple-keypairs.
+ */
+internal object Xrp {
+    const val MAX_BLOB = 4096
+    private val PREFIX = byteArrayOf(0x53, 0x54, 0x58, 0x00)
+    private val MASK: BigInteger = BigInteger("3fffffffffffffff", 16)
+
+    private fun invalid(why: String = "not a valid XRP signing blob") = walletError(WalletErrorCode.INVALID_REQUEST, why)
+
+    class Tx {
+        var transactionType: Int? = null
+        var account: String? = null
+        var destination: String? = null
+        /** Drops; null for an issued-token amount (only meaningful when [amountSet]). */
+        var amount: BigInteger? = null
+        var amountSet = false
+        var fee: BigInteger? = null
+        var feeSet = false
+        var sequence: Long? = null
+        var destinationTag: Long? = null
+        var lastLedgerSequence: Long? = null
+        var signingPubKey: ByteArray? = null
+        val memos = mutableListOf<String>()
+    }
+
+    fun address(accountId: ByteArray): String {
+        if (accountId.size != 20) throw invalid()
+        return Base58.encodeCheck(byteArrayOf(0) + accountId, Base58.XRP)
+    }
+
+    fun addressOfPublicKey(compressed: ByteArray) = address(Chains.hash160Of(compressed))
+
+    private class Reader(val b: ByteArray) {
+        var pos = 0
+        val done get() = pos >= b.size
+
+        fun u8(): Int {
+            if (pos >= b.size) throw invalid()
+            return b[pos++].toInt() and 0xff
+        }
+
+        fun take(n: Int): ByteArray {
+            if (pos + n > b.size) throw invalid()
+            return b.copyOfRange(pos, pos + n).also { pos += n }
+        }
+
+        fun uint(n: Int): Long = take(n).fold(0L) { v, x -> v * 256 + (x.toLong() and 0xff) }
+
+        fun vl(): ByteArray {
+            val b1 = u8()
+            return when {
+                b1 <= 192 -> take(b1)
+                b1 <= 240 -> take(193 + (b1 - 193) * 256 + u8())
+                b1 <= 254 -> take(12481 + (b1 - 241) * 65536 + u8() * 256 + u8())
+                else -> throw invalid()
+            }
+        }
+
+        fun field(): Pair<Int, Int> {
+            val x = u8()
+            var type = x shr 4
+            var code = x and 0x0f
+            if (type == 0) type = u8()
+            if (code == 0) code = u8()
+            return type to code
+        }
+    }
+
+    private fun amount(r: Reader): BigInteger? {
+        val head = r.b.getOrNull(r.pos)?.toInt()?.and(0xff) ?: throw invalid()
+        if (head and 0x80 != 0) {
+            r.take(48)
+            return null
+        }
+        return BigInteger(1, r.take(8)).and(MASK)
+    }
+
+    private class Parser(val r: Reader) {
+        var memoTarget: MutableList<String>? = null
+
+        fun readObject(tx: Tx?, depth: Int) {
+            if (depth > 4) throw invalid()
+            while (!r.done) {
+                val (type, code) = r.field()
+                if (type == 14 && code == 1) return
+                if (type == 15 && code == 1) return
+                when (type) {
+                    1 -> { val v = r.uint(2); if (tx != null && code == 2) tx.transactionType = v.toInt() }
+                    2 -> {
+                        val v = r.uint(4)
+                        if (tx != null) when (code) {
+                            4 -> tx.sequence = v
+                            14 -> tx.destinationTag = v
+                            27 -> tx.lastLedgerSequence = v
+                        }
+                    }
+                    3 -> r.take(8)
+                    4 -> r.take(16)
+                    5 -> r.take(32)
+                    16 -> r.take(1)
+                    17 -> r.take(20)
+                    6 -> {
+                        val v = amount(r)
+                        if (tx != null && code == 1) { tx.amount = v; tx.amountSet = true }
+                        else if (tx != null && code == 8) { tx.fee = v; tx.feeSet = true }
+                    }
+                    7 -> {
+                        val v = r.vl()
+                        if (tx != null && code == 3) tx.signingPubKey = v
+                        else if (tx == null && code == 13) memoTarget?.add(String(v, Charsets.UTF_8))
+                    }
+                    8 -> {
+                        val v = r.vl()
+                        if (tx != null && code == 1) tx.account = address(v)
+                        else if (tx != null && code == 3) tx.destination = address(v)
+                    }
+                    14 -> readObject(null, depth + 1)
+                    15 -> {
+                        val prev = memoTarget
+                        if (tx != null && code == 9) memoTarget = tx.memos
+                        readObject(null, depth + 1)
+                        memoTarget = prev
+                    }
+                    else -> throw invalid("XRP field type $type is not supported")
+                }
+            }
+        }
+    }
+
+    fun parse(blob: ByteArray): Tx {
+        if (blob.size < 5 || blob.size > MAX_BLOB || !blob.copyOf(4).contentEquals(PREFIX)) throw invalid()
+        val tx = Tx()
+        Parser(Reader(blob.copyOfRange(4, blob.size))).readObject(tx, 0)
+        if (tx.transactionType == null || tx.account.isNullOrEmpty() || tx.signingPubKey == null) throw invalid()
+        return tx
+    }
+
+    private fun xrp(drops: BigInteger): String {
+        val (whole, rem) = drops.divideAndRemainder(BigInteger.valueOf(1_000_000))
+        val frac = rem.toString().padStart(6, '0').trimEnd('0')
+        return "$whole${if (frac.isEmpty()) "" else ".$frac"} XRP"
+    }
+
+    private val TYPES = mapOf(0 to "Payment", 3 to "AccountSet", 7 to "OfferCreate", 8 to "OfferCancel", 12 to "SetRegularKey", 20 to "TrustSet")
+
+    fun summarize(tx: Tx, signer: String, signerPublicKey: ByteArray): SignSummary {
+        if (tx.account != signer) throw walletError(WalletErrorCode.ADDRESS_MISMATCH, "the transaction account is not the signing account")
+        if (tx.signingPubKey?.contentEquals(signerPublicKey) != true) {
+            throw walletError(WalletErrorCode.INVALID_REQUEST, "SigningPubKey must be the signing account public key")
+        }
+        val type = tx.transactionType!!
+        val rows = mutableListOf(
+            SignRow("Network", "XRP Ledger"),
+            SignRow("Account", signer, mono = true),
+            SignRow("Type", TYPES[type] ?: "Type $type"),
+        )
+        val warnings = mutableListOf<String>()
+        if (type == 0) {
+            if (tx.amountSet && tx.amount == null) {
+                rows += SignRow("Send", "Issued token amount")
+                warnings += "Issued-token payments cannot be described in detail."
+            } else if (tx.amountSet) {
+                rows += SignRow("Send", xrp(tx.amount!!))
+            }
+            tx.destination?.takeIf { it.isNotEmpty() }?.let { rows += SignRow("To", it, mono = true) }
+            tx.destinationTag?.let { rows += SignRow("Destination tag", it.toString()) }
+        } else {
+            warnings += "${TYPES[type] ?: "This"} transaction cannot be described in detail. Approve only if you trust the app."
+        }
+        for (m in tx.memos) rows += SignRow("Memo", m)
+        if (tx.feeSet && tx.fee != null) rows += SignRow("Network fee", xrp(tx.fee!!))
+        tx.sequence?.let { rows += SignRow("Sequence", it.toString()) }
+        tx.lastLedgerSequence?.let { rows += SignRow("Valid until ledger", it.toString()) }
+        return SignSummary(SignSummary.Kind.TRANSACTION, "XRP Ledger transaction", rows, null, warnings, SignRisk.HIGH)
+    }
+
+    fun sign(blob: ByteArray, privateKey: ByteArray): Map<String, String> {
+        val hash = MessageDigest.getInstance("SHA-512").digest(blob).copyOf(32)
+        val sig = Sign.signMessage(hash, ECKeyPair.create(privateKey), false)
+        return mapOf("signature" to Bytes.toHex(Der.encode(sig.r, sig.s)).uppercase())
+    }
+}

package/build/authonContext.d.ts

@@ -0,0 +1,19 @@
+import { type Context } from 'react';
+/** The part of @authon/react-native's AuthonContext value the wallet uses. */
+export interface AuthonSession {
+    isLoaded?: boolean;
+    isSignedIn?: boolean;
+    userId?: string | null;
+    getToken?: () => string | null;
+    client?: {
+        refreshToken?: () => Promise<{
+            accessToken?: string;
+        } | null>;
+    };
+}
+/**
+ * @authon/react-native is an optional peer: Metro resolves this require when the package is
+ * installed, and the catch keeps apps without it working (they pass getToken instead).
+ */
+export declare function getAuthonContext(): Context<AuthonSession | null>;
+//# sourceMappingURL=authonContext.d.ts.map

package/build/authonContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authonContext.d.ts","sourceRoot":"","sources":["../src/authonContext.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiB,KAAK,OAAO,EAAE,MAAM,OAAO,CAAC;AAIpD,8EAA8E;AAC9E,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAC/B,MAAM,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,OAAO,CAAC;YAAE,WAAW,CAAC,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC,CAAA;KAAE,CAAC;CAC5E;AAKD;;;GAGG;AACH,wBAAgB,gBAAgB,IAAI,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAShE"}

package/build/authonContext.js

@@ -0,0 +1,20 @@
+import { createContext } from 'react';
+const missing = createContext(null);
+let cached;
+/**
+ * @authon/react-native is an optional peer: Metro resolves this require when the package is
+ * installed, and the catch keeps apps without it working (they pass getToken instead).
+ */
+export function getAuthonContext() {
+    if (cached)
+        return cached;
+    try {
+        const mod = require('@authon/react-native');
+        cached = mod?.AuthonContext ?? missing;
+    }
+    catch {
+        cached = missing;
+    }
+    return cached;
+}
+//# sourceMappingURL=authonContext.js.map

package/build/authonContext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authonContext.js","sourceRoot":"","sources":["../src/authonContext.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAgB,MAAM,OAAO,CAAC;AAapD,MAAM,OAAO,GAAG,aAAa,CAAuB,IAAI,CAAC,CAAC;AAC1D,IAAI,MAAiD,CAAC;AAEtD;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC9B,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,OAAO,CAAC,sBAAsB,CAAkE,CAAC;QAC7G,MAAM,GAAG,GAAG,EAAE,aAAa,IAAI,OAAO,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,GAAG,OAAO,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/build/client.d.ts

@@ -0,0 +1,92 @@
+import type { AuthonWalletOptions, EIP1193Provider, EmbeddedWallet, Hex, TypedDataPayload, WalletAccount, WalletAppConfig, WalletCapabilities, WalletChain, WalletChainSignRequest, WalletChangeListener, WalletMessage, WalletSignOptions, WalletTransactionRequest } from './types';
+/**
+ * The Authon embedded wallet in a React Native app. Signing runs in the native Swift / Kotlin
+ * wallet; JS only sees addresses, signatures, status and devices.
+ */
+export declare class AuthonWalletClient {
+    private readonly id;
+    private readonly options;
+    private readonly listeners;
+    private readonly accountAddresses;
+    private configured;
+    private ensuring;
+    /** Bumped by dispose(); results of calls started before it are dropped (DISPOSED). */
+    private generation;
+    constructor(options: AuthonWalletOptions);
+    /** App registration and wallet settings (does not need a session). */
+    appConfig(): Promise<WalletAppConfig>;
+    /**
+     * Whether this device and app can use the wallet, before sign-in (no session, creates nothing,
+     * opens no UI). `ready === 'unavailable'`: tell the user before signing in; `unknown`: continue
+     * but expect that feature to fail. Answers for release builds (test options are ignored).
+     */
+    capabilities(): Promise<WalletCapabilities>;
+    /** The signed-in user's wallet, or null when there is none yet. */
+    get(): Promise<EmbeddedWallet | null>;
+    /** Same as `get()` (the frame method is `wallet.status`). */
+    status(): Promise<EmbeddedWallet | null>;
+    /** Creates the wallet (two-phase on the server), or returns the existing one. */
+    create(): Promise<EmbeddedWallet>;
+    /** Returns the wallet, creating it first when the user has none. Concurrent calls share one request. */
+    ensure(): Promise<EmbeddedWallet>;
+    /** True when the wallet exists and has a passkey backup. */
+    isProtected(): Promise<boolean>;
+    /**
+     * Addresses of accounts `start`..`start + count - 1` (public, no approval) on `chain` (default
+     * `evm`). Signing is EVM only for now; other chains are for receiving and display.
+     */
+    getAccounts(options?: {
+        start?: number;
+        count?: number;
+        chain?: WalletChain;
+    }): Promise<WalletAccount[]>;
+    /**
+     * EIP-191 personal_sign. The native approval sheet / dialog shows the full text first when the
+     * project requires confirmation (default); rejecting gives USER_CANCELLED and nothing is signed.
+     */
+    signMessage(message: WalletMessage, options?: WalletSignOptions): Promise<Hex>;
+    /** EIP-712 v4 typed data. */
+    signTypedData(typedData: TypedDataPayload, options?: WalletSignOptions): Promise<Hex>;
+    /** Signs a legacy, EIP-2930 or EIP-1559 transaction and returns the serialized signed transaction. */
+    signTransaction(tx: WalletTransactionRequest, options?: WalletSignOptions): Promise<Hex>;
+    /**
+     * Signs an app-built transaction on another chain (NATIVE.md section 12): Solana `{ signature }`,
+     * TRON `{ signature, txID }`, Bitcoin `{ psbt, txHex? }`, XRP `{ signature }`. The native approval
+     * UI shows what the transaction does (unknown programs / contracts are shown as high risk).
+     */
+    signChainTransaction(request: WalletChainSignRequest): Promise<Record<string, string>>;
+    /** Creates the passkey backup (iOS 18+ / Android with PRF support). Needs an approved app registration. */
+    protect(): Promise<void>;
+    /** Replaces a legacy backup with a verifiable one, on a device that holds the wallet. */
+    upgradeBackup(): Promise<void>;
+    /**
+     * Restores the wallet on this install with the backup passkey. By default this install is added
+     * as another device; `resetOtherDevices: true` re-splits the key and revokes every other device.
+     */
+    restore(options?: {
+        resetOtherDevices?: boolean;
+    }): Promise<void>;
+    /** Revokes a device (signed with this install's device key). */
+    revokeDevice(deviceId: string): Promise<void>;
+    onChange(listener: WalletChangeListener): () => void;
+    /** A minimal EIP-1193 provider (same methods as @authon/js). */
+    provider(chainId: number): EIP1193Provider;
+    /**
+     * Call on sign-out: releases the native instance, rejects calls in flight with DISPOSED and
+     * forgets cached account addresses. The device share stays on the device. Like @authon/js, the
+     * client can be used again afterwards (it reconnects on the next call).
+     */
+    dispose(): void;
+    private native;
+    private token;
+    private call;
+    private unwrap;
+    /** For accounts other than 0 the native wallet needs the expected address and refuses on mismatch. */
+    private account;
+    /** A different wallet (another user) invalidates the cached account addresses. */
+    private remember;
+    private refresh;
+    private notify;
+}
+export declare function createAuthonWallet(options: AuthonWalletOptions): AuthonWalletClient;
+//# sourceMappingURL=client.d.ts.map

package/build/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,mBAAmB,EACnB,eAAe,EACf,cAAc,EAEd,GAAG,EACH,gBAAgB,EAChB,aAAa,EAGb,eAAe,EACf,kBAAkB,EAClB,WAAW,EACX,sBAAsB,EACtB,oBAAoB,EACpB,aAAa,EACb,iBAAiB,EACjB,wBAAwB,EACzB,MAAM,SAAS,CAAC;AAuFjB;;;GAGG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAgC;IACnD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAsB;IAC9C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmC;IAC7D,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA6B;IAC9D,OAAO,CAAC,UAAU,CAAkD;IACpE,OAAO,CAAC,QAAQ,CAAwC;IACxD,sFAAsF;IACtF,OAAO,CAAC,UAAU,CAAK;gBAEX,OAAO,EAAE,mBAAmB;IAMxC,sEAAsE;IAChE,SAAS,IAAI,OAAO,CAAC,eAAe,CAAC;IAM3C;;;;OAIG;IACG,YAAY,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAMjD,mEAAmE;IAC7D,GAAG,IAAI,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAS3C,6DAA6D;IAC7D,MAAM,IAAI,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAIxC,iFAAiF;IAC3E,MAAM,IAAI,OAAO,CAAC,cAAc,CAAC;IAMvC,wGAAwG;IACxG,MAAM,IAAI,OAAO,CAAC,cAAc,CAAC;IAWjC,4DAA4D;IACtD,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC;IAIrC;;;OAGG;IACG,WAAW,CAAC,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,WAAW,CAAA;KAAO,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC;IAoBlH;;;OAGG;IACG,WAAW,CAAC,OAAO,EAAE,aAAa,EAAE,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,GAAG,CAAC;IAgBxF,6BAA6B;IACvB,aAAa,CAAC,SAAS,EAAE,gBAAgB,EAAE,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,GAAG,CAAC;IAO/F,sGAAsG;IAChG,eAAe,CAAC,EAAE,EAAE,wBAAwB,EAAE,OAAO,GAAE,iBAAsB,GAAG,OAAO,CAAC,GAAG,CAAC;IAOlG;;;;OAIG;IACG,oBAAoB,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAmB5F,2GAA2G;IACrG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAK9B,yFAAyF;IACnF,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IAKpC;;;OAGG;IACG,OAAO,CAAC,OAAO,GAAE;QAAE,iBAAiB,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAM3E,gEAAgE;IAC1D,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMnD,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,GAAG,MAAM,IAAI;IAOpD,gEAAgE;IAChE,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe;IAqC1C;;;;OAIG;IACH,OAAO,IAAI,IAAI;YAYD,MAAM;YAkCN,KAAK;YAML,IAAI;IAOlB,OAAO,CAAC,MAAM;IAWd,sGAAsG;YACxF,OAAO;IAcrB,kFAAkF;IAClF,OAAO,CAAC,QAAQ;YAOF,OAAO;IAIrB,OAAO,CAAC,MAAM;CASf;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,kBAAkB,CAEnF"}