@bananalink-sdk/protocol 1.2.8 → 1.4.0

package/dist/validation-export.d.cts

@@ -1,3 +1,3 @@
-export { DAppMetadata, DisplayInfo, EncryptedPayload, QRPayload, RelayMessage, SIWEFields, SecurityPolicy, SessionInfo, authenticateConnectionPayloadSchema, authenticationDataSchema, bananaLinkErrorSchema, base64Schema, claimSessionPayloadSchema, clientMessageEnvelopeSchema, clientMessagePayloadSchema, clientReconnectPayloadSchema, clientSessionClaimSchema, closeSessionPayloadSchema, connectionAuthenticatedMessageSchema, connectionRejectedMessageSchema, connectionRejectedPayloadSchema, coreDAppMetadataSchema, coreSecurityPolicySchema, createSessionRequestSchema, createSessionResponseSchema, dAppMetadataSchema, displayInfoSchema, encryptedPayloadSchema, errorCodeSchema, frutiLinkSchema, originProofSchema, prefetchMetadataPayloadSchema, prefetchMetadataResponseSchema, publicKeySchema, qrPayloadSchema, reconnectedMessageSchema, rejectionDataSchema, relayMessageSchema, relayMessageTypeSchema, relayNotificationMessageSchema, relayToDAppMessageSchema, safeValidateClientMessage, safeValidateClientSessionClaim, safeValidateFrutiLink, safeValidateQRPayload, safeValidateRelayMessage, safeValidateRelayNotificationMessage, safeValidateRelayToDAppMessage, safeValidateSessionInfo, safeValidateWalletMessage, safeValidateWalletSessionClaim, securityPolicySchema, sessionClosedAckSchema, sessionClosedNotificationSchema, sessionConfigSchema, sessionIdSchema, sessionInfoSchema, sessionMetadataSchema, sessionOptionsSchema, sessionStateSchema, siweFieldsSchema, supportedChainIdSchema, validateClientMessage, validateClientSessionClaim, validateFrutiLink, validateQRPayload, validateRelayMessage, validateRelayNotificationMessage, validateRelayToDAppMessage, validateSessionInfo, validateTimestamp, validateWalletMessage, validateWalletSessionClaim, walletHandshakeMessageSchema, walletMessageEnvelopeSchema, walletMessagePayloadSchema, walletMetadataSchema, walletReconnectPayloadSchema, walletSessionClaimSchema } from './schemas-export.cjs';
+export { DAppMetadata, DisplayInfo, EncryptedPayload, QRPayload, RelayMessage, SIWEFields, SecurityPolicy, SessionInfo, authenticateConnectionPayloadSchema, authenticationDataSchema, bananaLinkErrorSchema, base64Schema, claimSessionPayloadSchema, clientHandshakeMessageSchema, clientMessageEnvelopeSchema, clientMessagePayloadSchema, clientReconnectPayloadSchema, clientSessionClaimSchema, closeSessionPayloadSchema, connectionAuthenticatedMessageSchema, connectionRejectedMessageSchema, connectionRejectedPayloadSchema, coreDAppMetadataSchema, coreSecurityPolicySchema, createSessionRequestSchema, createSessionResponseSchema, dAppMetadataSchema, displayInfoSchema, encryptedPayloadSchema, errorCodeSchema, frutiLinkSchema, originProofSchema, prefetchMetadataPayloadSchema, prefetchMetadataResponseSchema, publicKeySchema, qrPayloadSchema, reconnectedMessageSchema, rejectionDataSchema, relayMessageSchema, relayMessageTypeSchema, relayNotificationMessageSchema, relayToDAppMessageSchema, safeValidateClientMessage, safeValidateClientSessionClaim, safeValidateFrutiLink, safeValidateQRPayload, safeValidateRelayMessage, safeValidateRelayNotificationMessage, safeValidateRelayToDAppMessage, safeValidateSessionInfo, safeValidateWalletMessage, safeValidateWalletSessionClaim, securityPolicySchema, sessionClosedAckSchema, sessionClosedNotificationSchema, sessionConfigSchema, sessionIdSchema, sessionInfoSchema, sessionMetadataSchema, sessionOptionsSchema, sessionStateSchema, siweFieldsSchema, supportedChainIdSchema, validateClientMessage, validateClientSessionClaim, validateFrutiLink, validateQRPayload, validateRelayMessage, validateRelayNotificationMessage, validateRelayToDAppMessage, validateSessionInfo, validateTimestamp, validateWalletMessage, validateWalletSessionClaim, walletHandshakeMessageSchema, walletMessageEnvelopeSchema, walletMessagePayloadSchema, walletMetadataSchema, walletReconnectPayloadSchema, walletSessionClaimSchema } from './schemas-export.cjs';
 export { SIWEMessage, ValidationResult, createValidationResult, hasRequiredFields, isValidAddress, isValidBase64, isValidChainId, isValidDomain, isValidEncryptedPayload, isValidEncryptionAlgorithm, isValidHex, isValidMessageType, isValidNonce, isValidPublicKey, isValidSIWEMessage, isValidSessionId, isValidTimestamp, isValidUrl } from './validators-export.cjs';
 import 'zod';

package/dist/validation-export.d.ts

@@ -1,3 +1,3 @@
-export { DAppMetadata, DisplayInfo, EncryptedPayload, QRPayload, RelayMessage, SIWEFields, SecurityPolicy, SessionInfo, authenticateConnectionPayloadSchema, authenticationDataSchema, bananaLinkErrorSchema, base64Schema, claimSessionPayloadSchema, clientMessageEnvelopeSchema, clientMessagePayloadSchema, clientReconnectPayloadSchema, clientSessionClaimSchema, closeSessionPayloadSchema, connectionAuthenticatedMessageSchema, connectionRejectedMessageSchema, connectionRejectedPayloadSchema, coreDAppMetadataSchema, coreSecurityPolicySchema, createSessionRequestSchema, createSessionResponseSchema, dAppMetadataSchema, displayInfoSchema, encryptedPayloadSchema, errorCodeSchema, frutiLinkSchema, originProofSchema, prefetchMetadataPayloadSchema, prefetchMetadataResponseSchema, publicKeySchema, qrPayloadSchema, reconnectedMessageSchema, rejectionDataSchema, relayMessageSchema, relayMessageTypeSchema, relayNotificationMessageSchema, relayToDAppMessageSchema, safeValidateClientMessage, safeValidateClientSessionClaim, safeValidateFrutiLink, safeValidateQRPayload, safeValidateRelayMessage, safeValidateRelayNotificationMessage, safeValidateRelayToDAppMessage, safeValidateSessionInfo, safeValidateWalletMessage, safeValidateWalletSessionClaim, securityPolicySchema, sessionClosedAckSchema, sessionClosedNotificationSchema, sessionConfigSchema, sessionIdSchema, sessionInfoSchema, sessionMetadataSchema, sessionOptionsSchema, sessionStateSchema, siweFieldsSchema, supportedChainIdSchema, validateClientMessage, validateClientSessionClaim, validateFrutiLink, validateQRPayload, validateRelayMessage, validateRelayNotificationMessage, validateRelayToDAppMessage, validateSessionInfo, validateTimestamp, validateWalletMessage, validateWalletSessionClaim, walletHandshakeMessageSchema, walletMessageEnvelopeSchema, walletMessagePayloadSchema, walletMetadataSchema, walletReconnectPayloadSchema, walletSessionClaimSchema } from './schemas-export.js';
+export { DAppMetadata, DisplayInfo, EncryptedPayload, QRPayload, RelayMessage, SIWEFields, SecurityPolicy, SessionInfo, authenticateConnectionPayloadSchema, authenticationDataSchema, bananaLinkErrorSchema, base64Schema, claimSessionPayloadSchema, clientHandshakeMessageSchema, clientMessageEnvelopeSchema, clientMessagePayloadSchema, clientReconnectPayloadSchema, clientSessionClaimSchema, closeSessionPayloadSchema, connectionAuthenticatedMessageSchema, connectionRejectedMessageSchema, connectionRejectedPayloadSchema, coreDAppMetadataSchema, coreSecurityPolicySchema, createSessionRequestSchema, createSessionResponseSchema, dAppMetadataSchema, displayInfoSchema, encryptedPayloadSchema, errorCodeSchema, frutiLinkSchema, originProofSchema, prefetchMetadataPayloadSchema, prefetchMetadataResponseSchema, publicKeySchema, qrPayloadSchema, reconnectedMessageSchema, rejectionDataSchema, relayMessageSchema, relayMessageTypeSchema, relayNotificationMessageSchema, relayToDAppMessageSchema, safeValidateClientMessage, safeValidateClientSessionClaim, safeValidateFrutiLink, safeValidateQRPayload, safeValidateRelayMessage, safeValidateRelayNotificationMessage, safeValidateRelayToDAppMessage, safeValidateSessionInfo, safeValidateWalletMessage, safeValidateWalletSessionClaim, securityPolicySchema, sessionClosedAckSchema, sessionClosedNotificationSchema, sessionConfigSchema, sessionIdSchema, sessionInfoSchema, sessionMetadataSchema, sessionOptionsSchema, sessionStateSchema, siweFieldsSchema, supportedChainIdSchema, validateClientMessage, validateClientSessionClaim, validateFrutiLink, validateQRPayload, validateRelayMessage, validateRelayNotificationMessage, validateRelayToDAppMessage, validateSessionInfo, validateTimestamp, validateWalletMessage, validateWalletSessionClaim, walletHandshakeMessageSchema, walletMessageEnvelopeSchema, walletMessagePayloadSchema, walletMetadataSchema, walletReconnectPayloadSchema, walletSessionClaimSchema } from './schemas-export.js';
 export { SIWEMessage, ValidationResult, createValidationResult, hasRequiredFields, isValidAddress, isValidBase64, isValidChainId, isValidDomain, isValidEncryptedPayload, isValidEncryptionAlgorithm, isValidHex, isValidMessageType, isValidNonce, isValidPublicKey, isValidSIWEMessage, isValidSessionId, isValidTimestamp, isValidUrl } from './validators-export.js';
 import 'zod';

package/dist/validation-export.js

@@ -1,4 +1,4 @@
-export { authenticateConnectionPayloadSchema, authenticationDataSchema, bananaLinkErrorSchema, base64Schema, claimSessionPayloadSchema, clientMessageEnvelopeSchema, clientMessagePayloadSchema, clientReconnectPayloadSchema, clientSessionClaimSchema, closeSessionPayloadSchema, connectionAuthenticatedMessageSchema, connectionRejectedMessageSchema, connectionRejectedPayloadSchema, dAppMetadataSchema as coreDAppMetadataSchema, securityPolicySchema as coreSecurityPolicySchema, createSessionRequestSchema, createSessionResponseSchema, dAppMetadataSchema2 as dAppMetadataSchema, displayInfoSchema, encryptedPayloadSchema, errorCodeSchema, frutiLinkSchema, originProofSchema, prefetchMetadataPayloadSchema, prefetchMetadataResponseSchema, publicKeySchema, qrPayloadSchema, reconnectedMessageSchema, rejectionDataSchema, relayMessageSchema, relayMessageTypeSchema, relayNotificationMessageSchema, relayToDAppMessageSchema, safeValidateClientMessage, safeValidateClientSessionClaim, safeValidateFrutiLink, safeValidateQRPayload, safeValidateRelayMessage, safeValidateRelayNotificationMessage, safeValidateRelayToDAppMessage, safeValidateSessionInfo, safeValidateWalletMessage, safeValidateWalletSessionClaim, securityPolicySchema2 as securityPolicySchema, sessionClosedAckSchema, sessionClosedNotificationSchema, sessionConfigSchema, sessionIdSchema, sessionInfoSchema, sessionMetadataSchema, sessionOptionsSchema, sessionStateSchema, siweFieldsSchema, supportedChainIdSchema, validateClientMessage, validateClientSessionClaim, validateFrutiLink, validateQRPayload, validateRelayMessage, validateRelayNotificationMessage, validateRelayToDAppMessage, validateSessionInfo, validateTimestamp, validateWalletMessage, validateWalletSessionClaim, walletHandshakeMessageSchema, walletMessageEnvelopeSchema, walletMessagePayloadSchema, walletMetadataSchema, walletReconnectPayloadSchema, walletSessionClaimSchema } from './chunk-7KYDLL3B.js';
+export { authenticateConnectionPayloadSchema, authenticationDataSchema, bananaLinkErrorSchema, base64Schema, claimSessionPayloadSchema, clientHandshakeMessageSchema, clientMessageEnvelopeSchema, clientMessagePayloadSchema, clientReconnectPayloadSchema, clientSessionClaimSchema, closeSessionPayloadSchema, connectionAuthenticatedMessageSchema, connectionRejectedMessageSchema, connectionRejectedPayloadSchema, dAppMetadataSchema as coreDAppMetadataSchema, securityPolicySchema as coreSecurityPolicySchema, createSessionRequestSchema, createSessionResponseSchema, dAppMetadataSchema2 as dAppMetadataSchema, displayInfoSchema, encryptedPayloadSchema, errorCodeSchema, frutiLinkSchema, originProofSchema, prefetchMetadataPayloadSchema, prefetchMetadataResponseSchema, publicKeySchema, qrPayloadSchema, reconnectedMessageSchema, rejectionDataSchema, relayMessageSchema, relayMessageTypeSchema, relayNotificationMessageSchema, relayToDAppMessageSchema, safeValidateClientMessage, safeValidateClientSessionClaim, safeValidateFrutiLink, safeValidateQRPayload, safeValidateRelayMessage, safeValidateRelayNotificationMessage, safeValidateRelayToDAppMessage, safeValidateSessionInfo, safeValidateWalletMessage, safeValidateWalletSessionClaim, securityPolicySchema2 as securityPolicySchema, sessionClosedAckSchema, sessionClosedNotificationSchema, sessionConfigSchema, sessionIdSchema, sessionInfoSchema, sessionMetadataSchema, sessionOptionsSchema, sessionStateSchema, siweFieldsSchema, supportedChainIdSchema, validateClientMessage, validateClientSessionClaim, validateFrutiLink, validateQRPayload, validateRelayMessage, validateRelayNotificationMessage, validateRelayToDAppMessage, validateSessionInfo, validateTimestamp, validateWalletMessage, validateWalletSessionClaim, walletHandshakeMessageSchema, walletMessageEnvelopeSchema, walletMessagePayloadSchema, walletMetadataSchema, walletReconnectPayloadSchema, walletSessionClaimSchema } from './chunk-XCMAKN3P.js';
 import './chunk-CUJK7ZTS.js';
 export { createValidationResult, hasRequiredFields, isValidAddress, isValidBase64, isValidChainId, isValidDomain, isValidEncryptedPayload, isValidEncryptionAlgorithm, isValidHex, isValidMessageType, isValidNonce, isValidPublicKey, isValidSIWEMessage, isValidSessionId, isValidTimestamp, isValidUrl } from './chunk-JXHV66Q4.js';
 import './chunk-WCQVDF3K.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bananalink-sdk/protocol",
-  "version": "1.2.8",
+  "version": "1.4.0",
   "description": "Core protocol definitions for BananaLink. Provides TypeScript types, Zod validation schemas, cryptographic utilities, and shared constants for wallet connections.",
   "type": "module",
   "keywords": [

package/src/crypto/providers/noble-provider.ts

@@ -6,7 +6,6 @@ import { hmac } from '@noble/hashes/hmac.js';
 import { sha256 } from '@noble/hashes/sha2.js';
 import type { Logger } from '@bananalink-sdk/logger';
 import type { CryptoProvider, CryptoKeyLike, ProviderKeyPair } from '../../types/crypto-provider';
-import { registerCryptoProvider } from './registry';
 
 /**
  * Noble library implementation of CryptoKeyLike
@@ -17,7 +16,7 @@ class NobleKey implements CryptoKeyLike {
     public readonly type: 'public' | 'private' | 'secret',
     public readonly algorithm: string,
     public readonly extractable: boolean = true,
-    public readonly usages: readonly string[] = []
+    public readonly usages: readonly string[] = [],
   ) {}
 }
 
@@ -46,7 +45,7 @@ export class NobleCryptoProvider implements CryptoProvider {
       const publicKeyUncompressed = p256.getPublicKey(privateKeyBytes, false); // false = uncompressed
 
       this.logger?.debug('Key pair generation completed', {
-        publicKeyLength: publicKeyUncompressed.length
+        publicKeyLength: publicKeyUncompressed.length,
       });
 
       return Promise.resolve({
@@ -57,8 +56,8 @@ export class NobleCryptoProvider implements CryptoProvider {
       this.logger?.error('Key pair generation failed', {
         error: {
           message: error instanceof Error ? error.message : String(error),
-          stack: error instanceof Error ? error.stack : undefined
-        }
+          stack: error instanceof Error ? error.stack : undefined,
+        },
       });
       throw error;
     }
@@ -72,7 +71,9 @@ export class NobleCryptoProvider implements CryptoProvider {
     if (nobleKey.type !== 'public') {
       throw new Error('Expected public key');
     }
-    return Promise.resolve(nobleKey.data.buffer.slice(nobleKey.data.byteOffset, nobleKey.data.byteOffset + nobleKey.data.byteLength));
+    return Promise.resolve(
+      nobleKey.data.buffer.slice(nobleKey.data.byteOffset, nobleKey.data.byteOffset + nobleKey.data.byteLength),
+    );
   }
 
   /**
@@ -83,7 +84,9 @@ export class NobleCryptoProvider implements CryptoProvider {
     if (nobleKey.type !== 'private') {
       throw new Error('Expected private key');
     }
-    return Promise.resolve(nobleKey.data.buffer.slice(nobleKey.data.byteOffset, nobleKey.data.byteOffset + nobleKey.data.byteLength));
+    return Promise.resolve(
+      nobleKey.data.buffer.slice(nobleKey.data.byteOffset, nobleKey.data.byteOffset + nobleKey.data.byteLength),
+    );
   }
 
   /**
@@ -95,8 +98,12 @@ export class NobleCryptoProvider implements CryptoProvider {
     // Debug logging
     this.logger?.debug('importPublicKey called', {
       keyLength: keyBytes.length,
-      keyBytesFirst20: Array.from(keyBytes.slice(0, 20)).map(b => b.toString(16).padStart(2, '0')).join(' '),
-      keyBytesHex: Array.from(keyBytes).map(b => b.toString(16).padStart(2, '0')).join('')
+      keyBytesFirst20: Array.from(keyBytes.slice(0, 20))
+        .map((b) => b.toString(16).padStart(2, '0'))
+        .join(' '),
+      keyBytesHex: Array.from(keyBytes)
+        .map((b) => b.toString(16).padStart(2, '0'))
+        .join(''),
     });
 
     // Validate public key using Noble's validation
@@ -107,7 +114,7 @@ export class NobleCryptoProvider implements CryptoProvider {
       if (keyBytes.length === 65) {
         // Already in uncompressed format (0x04 + 32 + 32)
         this.logger?.debug('Processing 65-byte key', {
-          firstByte: `0x${keyBytes[0].toString(16)}`
+          firstByte: `0x${keyBytes[0].toString(16)}`,
         });
         if (keyBytes[0] !== 0x04) {
           throw new Error(`Expected uncompressed key (0x04 prefix), got 0x${keyBytes[0].toString(16)}`);
@@ -117,7 +124,7 @@ export class NobleCryptoProvider implements CryptoProvider {
         // Raw format (32 + 32) - needs 0x04 prefix for Noble
         // This is the WebCrypto export format
         this.logger?.debug('Processing 64-byte key', {
-          action: 'adding 0x04 prefix'
+          action: 'adding 0x04 prefix',
         });
         processedKeyBytes = new Uint8Array(65);
         processedKeyBytes[0] = 0x04; // Uncompressed point indicator
@@ -128,25 +135,27 @@ export class NobleCryptoProvider implements CryptoProvider {
 
       this.logger?.debug('Key processing completed', {
         processedLength: processedKeyBytes.length,
-        processedFirst20: Array.from(processedKeyBytes.slice(0, 20)).map(b => b.toString(16).padStart(2, '0')).join(' ')
+        processedFirst20: Array.from(processedKeyBytes.slice(0, 20))
+          .map((b) => b.toString(16).padStart(2, '0'))
+          .join(' '),
       });
 
       // Validate using Noble's validation
       const isValid = p256.utils.isValidPublicKey(processedKeyBytes, false); // false = allow uncompressed
       this.logger?.debug('Noble key validation completed', {
-        isValid
+        isValid,
       });
 
       if (!isValid) {
         // Try additional debugging
         this.logger?.debug('Key validation failed, trying alternative approaches', {
-          originalValidation: false
+          originalValidation: false,
         });
 
         // Try with compressed format check
         const isValidCompressed = p256.utils.isValidPublicKey(processedKeyBytes, true);
         this.logger?.debug('Alternative validation attempted', {
-          compressedFormatValid: isValidCompressed
+          compressedFormatValid: isValidCompressed,
         });
 
         throw new Error('Key failed Noble validation');
@@ -157,8 +166,8 @@ export class NobleCryptoProvider implements CryptoProvider {
       this.logger?.error('Public key import failed', {
         error: {
           message: error instanceof Error ? error.message : String(error),
-          stack: error instanceof Error ? error.stack : undefined
-        }
+          stack: error instanceof Error ? error.stack : undefined,
+        },
       });
       throw new Error(`Invalid P-256 public key: ${String(error)}`);
     }
@@ -194,14 +203,14 @@ export class NobleCryptoProvider implements CryptoProvider {
     if (privKey.type !== 'private') {
       const error = new Error('Expected private key');
       this.logger?.error('Shared secret derivation failed - invalid private key type', {
-        actualType: privKey.type
+        actualType: privKey.type,
       });
       throw error;
     }
     if (pubKey.type !== 'public') {
       const error = new Error('Expected public key');
       this.logger?.error('Shared secret derivation failed - invalid public key type', {
-        actualType: pubKey.type
+        actualType: pubKey.type,
       });
       throw error;
     }
@@ -213,7 +222,7 @@ export class NobleCryptoProvider implements CryptoProvider {
       const xCoordinate = sharedSecret.slice(1, 33); // Skip 0x04 prefix, take next 32 bytes
 
       this.logger?.debug('Shared secret derivation completed', {
-        sharedSecretLength: xCoordinate.length
+        sharedSecretLength: xCoordinate.length,
       });
 
       return Promise.resolve(new NobleKey(xCoordinate, 'secret', 'AES-GCM', true, ['encrypt', 'decrypt']));
@@ -221,8 +230,8 @@ export class NobleCryptoProvider implements CryptoProvider {
       this.logger?.error('Shared secret derivation failed', {
         error: {
           message: error instanceof Error ? error.message : String(error),
-          stack: error instanceof Error ? error.stack : undefined
-        }
+          stack: error instanceof Error ? error.stack : undefined,
+        },
       });
       throw error;
     }
@@ -258,7 +267,7 @@ export class NobleCryptoProvider implements CryptoProvider {
   encrypt(key: CryptoKeyLike, data: ArrayBuffer, iv: ArrayBuffer): Promise<ArrayBuffer> {
     this.logger?.debug('Encrypting data with AES-GCM using Noble', {
       dataSize: data.byteLength,
-      ivSize: iv.byteLength
+      ivSize: iv.byteLength,
     });
 
     const secretKey = key as NobleKey;
@@ -266,7 +275,7 @@ export class NobleCryptoProvider implements CryptoProvider {
     if (secretKey.type !== 'secret') {
       const error = new Error('Expected secret key');
       this.logger?.error('Encryption failed - invalid key type', {
-        actualType: secretKey.type
+        actualType: secretKey.type,
       });
       throw error;
     }
@@ -276,16 +285,18 @@ export class NobleCryptoProvider implements CryptoProvider {
       const ciphertext = aesGcm.encrypt(new Uint8Array(data));
 
       this.logger?.debug('Encryption completed', {
-        ciphertextSize: ciphertext.byteLength
+        ciphertextSize: ciphertext.byteLength,
       });
 
-      return Promise.resolve(ciphertext.buffer.slice(ciphertext.byteOffset, ciphertext.byteOffset + ciphertext.byteLength));
+      return Promise.resolve(
+        ciphertext.buffer.slice(ciphertext.byteOffset, ciphertext.byteOffset + ciphertext.byteLength),
+      );
     } catch (error) {
       this.logger?.error('Encryption failed', {
         error: {
           message: error instanceof Error ? error.message : String(error),
-          stack: error instanceof Error ? error.stack : undefined
-        }
+          stack: error instanceof Error ? error.stack : undefined,
+        },
       });
       throw error;
     }
@@ -297,7 +308,7 @@ export class NobleCryptoProvider implements CryptoProvider {
   decrypt(key: CryptoKeyLike, data: ArrayBuffer, iv: ArrayBuffer): Promise<ArrayBuffer> {
     this.logger?.debug('Decrypting data with AES-GCM using Noble', {
       dataSize: data.byteLength,
-      ivSize: iv.byteLength
+      ivSize: iv.byteLength,
     });
 
     const secretKey = key as NobleKey;
@@ -305,7 +316,7 @@ export class NobleCryptoProvider implements CryptoProvider {
     if (secretKey.type !== 'secret') {
       const error = new Error('Expected secret key');
       this.logger?.error('Decryption failed - invalid key type', {
-        actualType: secretKey.type
+        actualType: secretKey.type,
       });
       throw error;
     }
@@ -315,7 +326,7 @@ export class NobleCryptoProvider implements CryptoProvider {
       const plaintext = aesGcm.decrypt(new Uint8Array(data));
 
       this.logger?.debug('Decryption completed', {
-        plaintextSize: plaintext.byteLength
+        plaintextSize: plaintext.byteLength,
       });
 
       return Promise.resolve(plaintext.buffer.slice(plaintext.byteOffset, plaintext.byteOffset + plaintext.byteLength));
@@ -323,8 +334,8 @@ export class NobleCryptoProvider implements CryptoProvider {
       this.logger?.error('Decryption failed', {
         error: {
           message: error instanceof Error ? error.message : String(error),
-          stack: error instanceof Error ? error.stack : undefined
-        }
+          stack: error instanceof Error ? error.stack : undefined,
+        },
       });
       throw error;
     }
@@ -374,19 +385,3 @@ export class NobleCryptoProvider implements CryptoProvider {
     }
   }
 }
-
-/**
- * Self-register Noble provider on import
- * This allows the provider to be available when explicitly imported
- */
-registerCryptoProvider('noble', (logger) => new NobleCryptoProvider(logger));
-
-// TypeScript module augmentation to track this provider is available
-declare global {
-  // eslint-disable-next-line @typescript-eslint/no-namespace
-  namespace BananaLink {
-    interface RegisteredCryptoProviders {
-      noble: true;
-    }
-  }
-}

package/src/crypto/providers/node-provider.ts

@@ -1,6 +1,5 @@
 import type { Logger } from '@bananalink-sdk/logger';
 import type { CryptoProvider, CryptoKeyLike, ProviderKeyPair } from '../../types/crypto-provider';
-import { registerCryptoProvider } from './registry';
 
 /**
  * Type definition for Node.js crypto module (loaded dynamically to prevent Metro bundling)
@@ -14,7 +13,7 @@ type NodeCrypto = typeof import('crypto');
 class NodeCryptoKeyWrapper implements CryptoKeyLike {
   constructor(
     private readonly keyObject: unknown, // crypto.KeyObject | Buffer at runtime
-    private readonly keyType: 'public' | 'private' | 'secret'
+    private readonly keyType: 'public' | 'private' | 'secret',
   ) {}
 
   get type(): 'public' | 'private' | 'secret' {
@@ -101,10 +100,7 @@ export class NodeCryptoProvider implements CryptoProvider {
         // Dynamic import prevents static analysis by bundlers
         this.cryptoModule = await import('crypto');
       } catch {
-        throw new Error(
-          'Failed to load Node.js crypto module. ' +
-          'This provider requires a Node.js environment.'
-        );
+        throw new Error('Failed to load Node.js crypto module. ' + 'This provider requires a Node.js environment.');
       }
     }
     return this.cryptoModule;
@@ -138,7 +134,7 @@ export class NodeCryptoProvider implements CryptoProvider {
             publicKey: new NodeCryptoKeyWrapper(publicKey, 'public'),
             privateKey: new NodeCryptoKeyWrapper(privateKey, 'private'),
           });
-        }
+        },
       );
     });
   }
@@ -152,9 +148,10 @@ export class NodeCryptoProvider implements CryptoProvider {
     const keyObject = unwrapKeyObject(publicKey);
 
     // If it's a Buffer (DER format from generateKeyPair), convert to KeyObject first
-    const keyObj = keyObject instanceof Buffer
-      ? cryptoModule.createPublicKey({ key: keyObject, format: 'der', type: 'spki' })
-      : keyObject;
+    const keyObj =
+      keyObject instanceof Buffer
+        ? cryptoModule.createPublicKey({ key: keyObject, format: 'der', type: 'spki' })
+        : keyObject;
 
     // Export as JWK to get X/Y coordinates
     // eslint-disable-next-line @typescript-eslint/no-unsafe-assignment, @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access, @typescript-eslint/no-explicit-any
@@ -168,10 +165,7 @@ export class NodeCryptoProvider implements CryptoProvider {
     const uncompressed = Buffer.concat([Buffer.from([0x04]), x, y]);
 
     return await Promise.resolve(
-      uncompressed.buffer.slice(
-        uncompressed.byteOffset,
-        uncompressed.byteOffset + uncompressed.byteLength
-      )
+      uncompressed.buffer.slice(uncompressed.byteOffset, uncompressed.byteOffset + uncompressed.byteLength),
     );
   }
 
@@ -195,9 +189,7 @@ export class NodeCryptoProvider implements CryptoProvider {
     const jwk = keyObj.export({ format: 'jwk' });
     const dValue = Buffer.from(jwk.d as string, 'base64url');
 
-    return await Promise.resolve(
-      dValue.buffer.slice(dValue.byteOffset, dValue.byteOffset + dValue.byteLength)
-    );
+    return await Promise.resolve(dValue.buffer.slice(dValue.byteOffset, dValue.byteOffset + dValue.byteLength));
   }
 
   /**
@@ -279,11 +271,7 @@ export class NodeCryptoProvider implements CryptoProvider {
   /**
    * Derive AES-GCM encryption key using HKDF-SHA256
    */
-  async deriveEncryptionKey(
-    sharedSecret: CryptoKeyLike,
-    salt: ArrayBuffer,
-    info: ArrayBuffer
-  ): Promise<CryptoKeyLike> {
+  async deriveEncryptionKey(sharedSecret: CryptoKeyLike, salt: ArrayBuffer, info: ArrayBuffer): Promise<CryptoKeyLike> {
     this.logger?.debug('Deriving AES-GCM encryption key');
     const cryptoModule = await this.getCrypto();
 
@@ -298,7 +286,7 @@ export class NodeCryptoProvider implements CryptoProvider {
       Buffer.isBuffer(sharedSecretRaw) ? sharedSecretRaw : Buffer.from(sharedSecretRaw),
       Buffer.from(salt),
       Buffer.from(info),
-      32 // 256 bits
+      32, // 256 bits
     ) as Buffer;
 
     // Create secret key object
@@ -318,20 +306,13 @@ export class NodeCryptoProvider implements CryptoProvider {
       'aes-256-gcm',
       // eslint-disable-next-line @typescript-eslint/no-unsafe-argument, @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access, @typescript-eslint/no-explicit-any
       (keyObject as any).export(),
-      Buffer.from(iv)
+      Buffer.from(iv),
     );
 
-    const encrypted = Buffer.concat([
-      cipher.update(Buffer.from(data)),
-      cipher.final(),
-      cipher.getAuthTag(),
-    ]);
+    const encrypted = Buffer.concat([cipher.update(Buffer.from(data)), cipher.final(), cipher.getAuthTag()]);
 
     return await Promise.resolve(
-      encrypted.buffer.slice(
-        encrypted.byteOffset,
-        encrypted.byteOffset + encrypted.byteLength
-      )
+      encrypted.buffer.slice(encrypted.byteOffset, encrypted.byteOffset + encrypted.byteLength),
     );
   }
 
@@ -352,17 +333,14 @@ export class NodeCryptoProvider implements CryptoProvider {
       'aes-256-gcm',
       // eslint-disable-next-line @typescript-eslint/no-unsafe-argument, @typescript-eslint/no-unsafe-call, @typescript-eslint/no-unsafe-member-access, @typescript-eslint/no-explicit-any
       (keyObject as any).export(),
-      Buffer.from(iv)
+      Buffer.from(iv),
     );
     decipher.setAuthTag(authTag);
 
     const decrypted = Buffer.concat([decipher.update(ciphertext), decipher.final()]);
 
     return await Promise.resolve(
-      decrypted.buffer.slice(
-        decrypted.byteOffset,
-        decrypted.byteOffset + decrypted.byteLength
-      )
+      decrypted.buffer.slice(decrypted.byteOffset, decrypted.byteOffset + decrypted.byteLength),
     );
   }
 
@@ -397,10 +375,7 @@ export class NodeCryptoProvider implements CryptoProvider {
     }
 
     // Constant-time comparison
-    return cryptoModule.timingSafeEqual(
-      Buffer.from(expected),
-      Buffer.from(actual)
-    );
+    return cryptoModule.timingSafeEqual(Buffer.from(expected), Buffer.from(actual));
   }
 
   /**
@@ -410,24 +385,8 @@ export class NodeCryptoProvider implements CryptoProvider {
   randomBytes(length: number): ArrayBuffer {
     // Use cached module if available, otherwise use synchronous require
     // eslint-disable-next-line @typescript-eslint/no-require-imports
-    const cryptoModule = this.cryptoModule ?? require('crypto') as NodeCrypto;
+    const cryptoModule = this.cryptoModule ?? (require('crypto') as NodeCrypto);
     const buffer = cryptoModule.randomBytes(length);
     return buffer.buffer.slice(buffer.byteOffset, buffer.byteOffset + buffer.byteLength);
   }
 }
-
-/**
- * Self-register Node provider on import
- * This allows the provider to be available when explicitly imported
- */
-registerCryptoProvider('node', (logger) => new NodeCryptoProvider(logger));
-
-// TypeScript module augmentation to track this provider is available
-declare global {
-  // eslint-disable-next-line @typescript-eslint/no-namespace
-  namespace BananaLink {
-    interface RegisteredCryptoProviders {
-      node: true;
-    }
-  }
-}