@cavos/kit 0.0.1

package/dist/index.js

@@ -0,0 +1,1103 @@
+'use strict';
+
+var starknet = require('starknet');
+var sha256 = require('@noble/hashes/sha256');
+var p256 = require('@noble/curves/p256');
+var hkdf = require('@noble/hashes/hkdf');
+var pbkdf2 = require('@noble/hashes/pbkdf2');
+var utils = require('@noble/hashes/utils');
+
+// src/Cavos.ts
+
+// src/crypto/encoding.ts
+var U128_MASK = (1n << 128n) - 1n;
+function u256ToFelts(value) {
+  return [value & U128_MASK, value >> 128n];
+}
+function bytesToBigInt(bytes) {
+  let out = 0n;
+  for (const b of bytes) out = out << 8n | BigInt(b);
+  return out;
+}
+function bytesToHex(bytes) {
+  let s = "0x";
+  for (const b of bytes) s += b.toString(16).padStart(2, "0");
+  return s;
+}
+function hexToBytes(hex) {
+  const clean = hex.startsWith("0x") ? hex.slice(2) : hex;
+  const padded = clean.length % 2 ? "0" + clean : clean;
+  const out = new Uint8Array(padded.length / 2);
+  for (let i = 0; i < out.length; i++) out[i] = parseInt(padded.slice(i * 2, i * 2 + 2), 16);
+  return out;
+}
+function bigIntTo32Bytes(value) {
+  const out = new Uint8Array(32);
+  let v = value;
+  for (let i = 31; i >= 0; i--) {
+    out[i] = Number(v & 0xffn);
+    v >>= 8n;
+  }
+  return out;
+}
+function signatureToFelts(sig) {
+  const [rLow, rHigh] = u256ToFelts(sig.r);
+  const [sLow, sHigh] = u256ToFelts(sig.s);
+  return [rLow, rHigh, sLow, sHigh, sig.yParity ? 1n : 0n];
+}
+function recoverYParity(r, s, digest, pubkey) {
+  for (const bit of [0, 1]) {
+    try {
+      const candidate = new p256.p256.Signature(r, s).addRecoveryBit(bit);
+      const point = candidate.recoverPublicKey(digest).toAffine();
+      if (point.x === pubkey.x && point.y === pubkey.y) {
+        return bit === 1;
+      }
+    } catch {
+    }
+  }
+  throw new Error("kit/signature: could not recover parity for the given pubkey");
+}
+
+// src/signer/WebCryptoSigner.ts
+var IDB_NAME = "cavos-kit";
+var IDB_STORE = "device-keys";
+var WebCryptoSigner = class _WebCryptoSigner {
+  constructor(privateKey, publicKey, keyId) {
+    this.privateKey = privateKey;
+    this.publicKey = publicKey;
+    this.keyId = keyId;
+  }
+  /** Create a fresh device key (first run on this device) and persist it. */
+  static async create(opts) {
+    assertSecureContext();
+    const pair = await crypto.subtle.generateKey(
+      { name: "ECDSA", namedCurve: "P-256" },
+      false,
+      // private key is NON-extractable
+      ["sign", "verify"]
+    );
+    const publicKey = await exportPublicKey(pair.publicKey);
+    await idbPut(opts.keyId, { privateKey: pair.privateKey, x: publicKey.x, y: publicKey.y });
+    return new _WebCryptoSigner(pair.privateKey, publicKey, opts.keyId);
+  }
+  /** Load an existing device key from storage, or null if none exists yet. */
+  static async load(opts) {
+    const rec = await idbGet(opts.keyId);
+    if (!rec) return null;
+    return new _WebCryptoSigner(rec.privateKey, { x: rec.x, y: rec.y }, opts.keyId);
+  }
+  /** Load the device key, creating one on first use. */
+  static async loadOrCreate(opts) {
+    return await _WebCryptoSigner.load(opts) ?? await _WebCryptoSigner.create(opts);
+  }
+  async getPublicKey() {
+    return this.publicKey;
+  }
+  async sign(txHash) {
+    const raw = new Uint8Array(
+      await crypto.subtle.sign(
+        { name: "ECDSA", hash: "SHA-256" },
+        this.privateKey,
+        txHash
+      )
+    );
+    const r = bytesToBigInt(raw.subarray(0, 32));
+    const s = bytesToBigInt(raw.subarray(32, 64));
+    const digest = sha256.sha256(txHash);
+    const yParity = recoverYParity(r, s, digest, this.publicKey);
+    return { r, s, yParity };
+  }
+};
+async function exportPublicKey(publicKey) {
+  const raw = new Uint8Array(await crypto.subtle.exportKey("raw", publicKey));
+  return { x: bytesToBigInt(raw.subarray(1, 33)), y: bytesToBigInt(raw.subarray(33, 65)) };
+}
+function assertSecureContext() {
+  const ok = typeof crypto !== "undefined" && typeof crypto.subtle !== "undefined" && (typeof window === "undefined" || window.isSecureContext);
+  if (!ok) {
+    throw new Error(
+      "Cavos: WebCrypto is unavailable. Device keys require a secure context \u2014 use HTTPS, or http://localhost. (For LAN/mobile dev testing, run `next dev --experimental-https`.)"
+    );
+  }
+}
+function openDb() {
+  return new Promise((resolve, reject) => {
+    const req = indexedDB.open(IDB_NAME, 1);
+    req.onupgradeneeded = () => req.result.createObjectStore(IDB_STORE);
+    req.onsuccess = () => resolve(req.result);
+    req.onerror = () => reject(req.error);
+  });
+}
+async function idbPut(keyId, value) {
+  const db = await openDb();
+  await tx(db, "readwrite", (store) => store.put(value, keyId));
+  db.close();
+}
+async function idbGet(keyId) {
+  const db = await openDb();
+  const result = await tx(db, "readonly", (store) => store.get(keyId));
+  db.close();
+  return result ?? null;
+}
+function tx(db, mode, run) {
+  return new Promise((resolve, reject) => {
+    const store = db.transaction(IDB_STORE, mode).objectStore(IDB_STORE);
+    const req = run(store);
+    req.onsuccess = () => resolve(req.result);
+    req.onerror = () => reject(req.error);
+  });
+}
+
+// src/chains/starknet/constants.ts
+var STARKNET_NETWORKS = {
+  sepolia: {
+    chainId: "0x534e5f5345504f4c4941",
+    // SN_SEPOLIA
+    rpcUrl: "https://api.cartridge.gg/x/starknet/sepolia"
+  },
+  mainnet: {
+    chainId: "0x534e5f4d41494e",
+    // SN_MAIN
+    rpcUrl: "https://api.cartridge.gg/x/starknet/mainnet"
+  }
+};
+var UDC_ADDRESS = "0x041a78e741e5af2fec34b695679bc6891742439f7afb8484ecd7766661ad02bf";
+var CAVOS_PAYMASTER_URL = {
+  sepolia: "https://sepolia-paymaster.cavos.xyz",
+  mainnet: "https://paymaster.cavos.xyz"
+};
+var DEVICE_ACCOUNT_CLASS_HASH = {
+  sepolia: "0x6c3c3426667b6d4adda18a0b8d8cc34c495a1ace7276c4470068ad4c324876d",
+  mainnet: ""
+};
+
+// src/chains/starknet/StarknetAdapter.ts
+var StarknetAdapter = class {
+  constructor(opts) {
+    this.opts = opts;
+    this.chain = "starknet";
+  }
+  computeAddress({ addressSeed, initialSigner, salt }) {
+    return starknet.hash.calculateContractAddressFromHash(
+      starknet.num.toHex(salt ?? addressSeed),
+      this.opts.classHash,
+      this.constructorCalldata(addressSeed, initialSigner),
+      0
+      // deployerAddress 0 => deterministic counterfactual address
+    );
+  }
+  /** Single UDC deploy; the constructor registers the first device signer, so
+   * the account is ready the moment it is deployed (fits the paymaster's
+   * deploy + execute_from_outside bundle). */
+  buildDeploy(params) {
+    const salt = params.salt ?? params.addressSeed;
+    const calldata = this.constructorCalldata(params.addressSeed, params.initialSigner);
+    return [
+      {
+        contractAddress: UDC_ADDRESS,
+        entrypoint: "deployContract",
+        calldata: [
+          this.opts.classHash,
+          starknet.num.toHex(salt),
+          "0x0",
+          // unique = false -> deployer-independent address
+          starknet.num.toHex(calldata.length),
+          ...calldata
+        ]
+      }
+    ];
+  }
+  /** Constructor calldata: [address_seed, pub_x_low, pub_x_high, pub_y_low, pub_y_high]. */
+  constructorCalldata(addressSeed, initialSigner) {
+    return [starknet.num.toHex(addressSeed), ...pubkeyCalldata(initialSigner)];
+  }
+  buildAddSigner(accountAddress, signer) {
+    return { contractAddress: accountAddress, entrypoint: "add_signer", calldata: pubkeyCalldata(signer) };
+  }
+  buildRemoveSigner(accountAddress, signer) {
+    return { contractAddress: accountAddress, entrypoint: "remove_signer", calldata: pubkeyCalldata(signer) };
+  }
+  async isAuthorizedSigner(accountAddress, signer) {
+    if (!this.opts.provider) throw new Error("kit/starknet: provider required for reads");
+    const res = await this.opts.provider.callContract({
+      contractAddress: accountAddress,
+      entrypoint: "is_authorized_signer",
+      calldata: pubkeyCalldata(signer)
+    });
+    return BigInt(res[0] ?? 0) !== 0n;
+  }
+  async buildSignature(txHash) {
+    if (!this.opts.signer) throw new Error("kit/starknet: signer required to sign");
+    const sig = await this.opts.signer.sign(bigIntTo32Bytes(txHash));
+    return signatureToFelts(sig).map((f) => starknet.num.toHex(f));
+  }
+};
+function pubkeyCalldata(pk) {
+  const [xl, xh] = u256ToFelts(pk.x);
+  const [yl, yh] = u256ToFelts(pk.y);
+  return [starknet.num.toHex(xl), starknet.num.toHex(xh), starknet.num.toHex(yl), starknet.num.toHex(yh)];
+}
+var StarknetDeviceSigner = class extends starknet.Signer {
+  constructor(device) {
+    super("0x1");
+    this.device = device;
+  }
+  /** Device accounts are not controlled by a single Stark pubkey. */
+  async getPubKey() {
+    return "0x0";
+  }
+  /** Sign the computed tx hash silently with the device signer. */
+  async signRaw(msgHash) {
+    const sig = await this.device.sign(bigIntTo32Bytes(BigInt(msgHash)));
+    return signatureToFelts(sig).map((f) => starknet.num.toHex(f));
+  }
+};
+
+// src/registry/WalletRegistry.ts
+var InMemoryWalletRegistry = class {
+  constructor() {
+    this.wallets = /* @__PURE__ */ new Map();
+  }
+  async lookup(userId) {
+    return this.wallets.get(userId) ?? null;
+  }
+  async register(params) {
+    this.wallets.set(params.userId, { address: params.address, devices: [params.initialSigner] });
+  }
+  async addDevice(params) {
+    const w = this.wallets.get(params.userId);
+    if (w) w.devices = [...w.devices ?? [], params.signer];
+  }
+};
+
+// src/registry/HttpWalletRegistry.ts
+function toHex(n) {
+  return "0x" + n.toString(16);
+}
+function fromHex(s) {
+  return BigInt(s);
+}
+var HttpWalletRegistry = class {
+  constructor(opts) {
+    this.opts = opts;
+  }
+  async lookup(userId) {
+    const url = new URL("/api/wallets", this.opts.baseUrl);
+    url.searchParams.set("app_id", this.opts.appId);
+    url.searchParams.set("user_social_id", userId);
+    url.searchParams.set("network", this.opts.network);
+    const res = await fetch(url, { headers: { "Content-Type": "application/json" } });
+    if (!res.ok) throw new Error(`registry lookup failed: ${res.status}`);
+    const data = await res.json();
+    if (!data.found || !data.address) return null;
+    const devices = Array.isArray(data.devices) ? data.devices.map((d) => ({
+      x: fromHex(d.pub_x),
+      y: fromHex(d.pub_y)
+    })) : void 0;
+    return { address: data.address, devices };
+  }
+  async register(params) {
+    const res = await fetch(new URL("/api/wallets", this.opts.baseUrl), {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({
+        app_id: this.opts.appId,
+        user_social_id: params.userId,
+        network: this.opts.network,
+        address: params.address,
+        // Device-signer wallets send their initial signer (no encrypted blob).
+        devices: [{ x: toHex(params.initialSigner.x), y: toHex(params.initialSigner.y) }]
+      })
+    });
+    if (!res.ok) {
+      const t = await res.text().catch(() => "");
+      throw new Error(`registry register failed: ${res.status} ${t}`);
+    }
+  }
+  async addDevice(params) {
+  }
+};
+
+// src/recovery/HttpRecoveryClient.ts
+function toHex2(n) {
+  return "0x" + n.toString(16);
+}
+function fromHex2(s) {
+  return BigInt(s);
+}
+function deviceLabel() {
+  if (typeof navigator !== "undefined") {
+    return navigator.userAgent || "a new device";
+  }
+  return "a new device";
+}
+var HttpRecoveryClient = class {
+  constructor(opts) {
+    this.opts = opts;
+  }
+  async requestDeviceAddition(params) {
+    const res = await fetch(new URL("/api/devices/request", this.opts.baseUrl), {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({
+        app_id: this.opts.appId,
+        wallet_address: params.accountAddress,
+        new_pub_x: toHex2(params.newSigner.x),
+        new_pub_y: toHex2(params.newSigner.y),
+        device_label: params.deviceLabel ?? deviceLabel(),
+        ...params.email ? { email: params.email } : {}
+      })
+    });
+    if (!res.ok) {
+      const t = await res.text().catch(() => "");
+      throw new Error(`requestDeviceAddition failed: ${res.status} ${t}`);
+    }
+    const data = await res.json();
+    return { requestId: data.request_id };
+  }
+  async getPendingRequest(requestId) {
+    const url = new URL("/api/devices/request", this.opts.baseUrl);
+    url.searchParams.set("id", requestId);
+    const res = await fetch(url, { headers: { "Content-Type": "application/json" } });
+    if (!res.ok) throw new Error(`getPendingRequest failed: ${res.status}`);
+    const data = await res.json();
+    if (!data.found) return null;
+    const status = data.status;
+    return {
+      requestId: data.request_id,
+      appId: data.app_id,
+      userId: "",
+      // the approving device already knows its own identity
+      accountAddress: data.wallet_address,
+      newSigner: { x: fromHex2(data.new_pub_x), y: fromHex2(data.new_pub_y) },
+      createdAt: data.created_at,
+      status
+    };
+  }
+  async confirmDeviceAddition(params) {
+    const res = await fetch(
+      new URL(`/api/devices/request/${params.requestId}/confirm`, this.opts.baseUrl),
+      {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({ tx_hash: params.txHash })
+      }
+    );
+    if (!res.ok) {
+      const t = await res.text().catch(() => "");
+      throw new Error(`confirmDeviceAddition failed: ${res.status} ${t}`);
+    }
+  }
+};
+var BACKUP_KDF_SALT = "cavos-recovery-v1";
+var BACKUP_PBKDF2_ITERATIONS = 21e4;
+var BACKUP_HKDF_INFO = "cavos-backup-signer";
+var CODE_WORDS = 16;
+function generateRecoveryCode() {
+  const bytes = utils.randomBytes(CODE_WORDS);
+  const words = [];
+  for (const b of bytes) words.push(WORDLIST[b]);
+  return words.join(" ");
+}
+function deriveBackupKey(code) {
+  const normalised = code.trim().replace(/\s+/g, " ").toLowerCase();
+  if (!normalised) throw new Error("kit: recovery code is empty");
+  const stretched = pbkdf2.pbkdf2(
+    sha256.sha256,
+    new TextEncoder().encode(normalised),
+    new TextEncoder().encode(BACKUP_KDF_SALT),
+    { c: BACKUP_PBKDF2_ITERATIONS, dkLen: 32 }
+  );
+  const seed = hkdf.hkdf(sha256.sha256, stretched, void 0, BACKUP_HKDF_INFO, 32);
+  const d = bytesToBigInt(seed) % p256.p256.CURVE.n;
+  if (d === 0n) throw new Error("kit: derived backup key is zero (retry with a new code)");
+  const priv = bigIntTo32Bytes(d);
+  const pub = p256.p256.getPublicKey(priv, false);
+  return {
+    privateKey: priv,
+    publicKey: { x: bytesToBigInt(pub.subarray(1, 33)), y: bytesToBigInt(pub.subarray(33, 65)) }
+  };
+}
+var BackupSigner = class _BackupSigner {
+  constructor(privateKey, publicKey) {
+    this.privateKey = privateKey;
+    this.publicKeyValue = publicKey;
+  }
+  /** Build a signer from a recovery code (derive + wrap in one step). */
+  static fromCode(code) {
+    const { privateKey, publicKey } = deriveBackupKey(code);
+    return new _BackupSigner(privateKey, publicKey);
+  }
+  async getPublicKey() {
+    return this.publicKeyValue;
+  }
+  async sign(txHash) {
+    const digest = sha256.sha256(txHash);
+    const sig = p256.p256.sign(digest, this.privateKey);
+    const yParity = recoverYParity(sig.r, sig.s, digest, this.publicKeyValue);
+    return { r: sig.r, s: sig.s, yParity };
+  }
+};
+var WORDLIST = [
+  "able",
+  "acid",
+  "amber",
+  "apple",
+  "arch",
+  "arrow",
+  "ashen",
+  "atlas",
+  "axis",
+  "badge",
+  "baker",
+  "balm",
+  "banner",
+  "basin",
+  "beacon",
+  "bench",
+  "beryl",
+  "birch",
+  "blade",
+  "bloom",
+  "bluer",
+  "border",
+  "brave",
+  "brick",
+  "brook",
+  "cabin",
+  "candle",
+  "carbon",
+  "cargo",
+  "cedar",
+  "chalk",
+  "charm",
+  "chrome",
+  "cipher",
+  "clam",
+  "clasp",
+  "cliff",
+  "clock",
+  "cobia",
+  "comet",
+  "coral",
+  "cotton",
+  "coves",
+  "crane",
+  "crest",
+  "crow",
+  "crystal",
+  "curio",
+  "dawn",
+  "delta",
+  "denim",
+  "depth",
+  "dewy",
+  "digger",
+  "docks",
+  "dover",
+  "drift",
+  "dunes",
+  "eagle",
+  "ember",
+  "echo",
+  "eden",
+  "elite",
+  "ethic",
+  "fable",
+  "falcon",
+  "fawn",
+  "feather",
+  "fern",
+  "fjord",
+  "flame",
+  "flint",
+  "forest",
+  "forge",
+  "frost",
+  "garnet",
+  "gemini",
+  "glade",
+  "glider",
+  "glow",
+  "granite",
+  "grove",
+  "guppy",
+  "harbor",
+  "haven",
+  "hazel",
+  "helio",
+  "heron",
+  "hickory",
+  "honey",
+  "horizon",
+  "ivory",
+  "jade",
+  "jasper",
+  "kestrel",
+  "knot",
+  "lagoon",
+  "lattice",
+  "laurel",
+  "lavender",
+  "lemon",
+  "linden",
+  "loon",
+  "luger",
+  "lumen",
+  "lunar",
+  "mango",
+  "maple",
+  "marble",
+  "marsh",
+  "meadow",
+  "mercy",
+  "mistle",
+  "monsoon",
+  "morning",
+  "moss",
+  "nacre",
+  "nectar",
+  "needle",
+  "nimbus",
+  "nova",
+  "ocean",
+  "onyx",
+  "orbit",
+  "otter",
+  "palm",
+  "panda",
+  "pansy",
+  "papaya",
+  "passage",
+  "pebble",
+  "pelican",
+  "pepper",
+  "petal",
+  "piano",
+  "pierce",
+  "pilot",
+  "pioneer",
+  "platinum",
+  "plume",
+  "poplar",
+  "porpoise",
+  "prairie",
+  "prism",
+  "pulsar",
+  "quartz",
+  "quasar",
+  "quill",
+  "quiver",
+  "raven",
+  "reef",
+  "relic",
+  "ridge",
+  "ripple",
+  "robin",
+  "rocket",
+  "rouge",
+  "ruby",
+  "saffron",
+  "sage",
+  "sail",
+  "salmon",
+  "sapphire",
+  "scarab",
+  "shadow",
+  "shale",
+  "sienna",
+  "silica",
+  "silver",
+  "skyline",
+  "slate",
+  "sonar",
+  "spruce",
+  "starling",
+  "stone",
+  "sugar",
+  "summit",
+  "sunset",
+  "swan",
+  "tangent",
+  "tarragon",
+  "temple",
+  "thistle",
+  "thrush",
+  "tiger",
+  "topaz",
+  "tundra",
+  "turtle",
+  "umber",
+  "union",
+  "valley",
+  "vapor",
+  "vector",
+  "velvet",
+  "violet",
+  "vortex",
+  "walnut",
+  "whale",
+  "winter",
+  "wisp",
+  "wisteria",
+  "xenon",
+  "yarrow",
+  "zephyr",
+  "zinc",
+  "zodiac",
+  "anchor",
+  "basil",
+  "cider",
+  "daisy",
+  "elfin",
+  "ferry",
+  "gimlet",
+  "halcyon",
+  "indigo",
+  "juniper",
+  "kindle",
+  "lilac",
+  "mantis",
+  "nylon",
+  "oracle",
+  "parch",
+  "quokka",
+  "ramble",
+  "thatch",
+  "ultra",
+  "vivid",
+  "xylo",
+  "yodel",
+  "zesty",
+  "arbor",
+  "bliss",
+  "calyx",
+  "dwindle",
+  "folio",
+  "globe",
+  "hymn",
+  "ionic",
+  "jolly",
+  "knack",
+  "lyric",
+  "myrtle",
+  "noble",
+  "plumb",
+  "quaint",
+  "rustic",
+  "satin",
+  "timber",
+  "urge",
+  "vault",
+  "whimsy",
+  "yearn",
+  "zenith",
+  "ash",
+  "beach",
+  "dusk"
+];
+function deriveAddressSeed({ userId, appSalt }) {
+  const h = starknet.hash.computePoseidonHashOnElements([feltFromString(userId), feltFromString(appSalt)]);
+  return BigInt(h);
+}
+function feltFromString(s) {
+  const bytes = new TextEncoder().encode(s);
+  const chunks = [];
+  for (let i = 0; i < bytes.length; i += 31) {
+    let w = 0n;
+    for (const b of bytes.subarray(i, i + 31)) w = w << 8n | BigInt(b);
+    chunks.push(w);
+  }
+  if (chunks.length === 0) return 0n;
+  if (chunks.length === 1) return chunks[0];
+  return BigInt(starknet.hash.computePoseidonHashOnElements(chunks));
+}
+
+// src/Cavos.ts
+var Cavos = class _Cavos {
+  constructor(identity, address, status, account, adapter, devicePubkey) {
+    this.identity = identity;
+    this.address = address;
+    this.status = status;
+    this.account = account;
+    this.adapter = adapter;
+    this.devicePubkey = devicePubkey;
+    /** Request id of the pending device-addition, when status is needs-device-approval. */
+    this.pendingRequestId = null;
+  }
+  static async connect(opts) {
+    const identity = opts.identity ?? await opts.auth?.authenticate();
+    if (!identity) throw new Error("kit: connect requires `identity` or `auth`");
+    const classHash = opts.classHash ?? DEVICE_ACCOUNT_CLASS_HASH[opts.network];
+    if (!classHash) throw new Error(`kit: no DeviceAccount class hash for ${opts.network}`);
+    const provider = new starknet.RpcProvider({
+      nodeUrl: opts.rpcUrl ?? STARKNET_NETWORKS[opts.network].rpcUrl
+    });
+    const paymaster = new starknet.PaymasterRpc({
+      nodeUrl: opts.paymasterUrl ?? CAVOS_PAYMASTER_URL[opts.network],
+      headers: { "x-paymaster-api-key": opts.paymasterApiKey }
+    });
+    const addressSeed = deriveAddressSeed({ userId: identity.userId, appSalt: opts.appSalt });
+    const signer = opts.createSigner ? await opts.createSigner(`${identity.userId}:${opts.appSalt}`) : await WebCryptoSigner.loadOrCreate({ keyId: `${identity.userId}:${opts.appSalt}` });
+    const devicePubkey = await signer.getPublicKey();
+    const adapter = new StarknetAdapter({ classHash, signer, provider });
+    const makeAccount = (address2) => new starknet.Account({
+      provider,
+      address: address2,
+      signer: new StarknetDeviceSigner(signer),
+      paymaster,
+      cairoVersion: "1"
+    });
+    const backendUrl = opts.backendUrl ?? "https://cavos.xyz";
+    const registry = opts.registry ?? (opts.appId ? new HttpWalletRegistry({ baseUrl: backendUrl, appId: opts.appId, network: opts.network }) : defaultRegistry);
+    const recovery = opts.recovery ?? (opts.appId ? new HttpRecoveryClient({ baseUrl: backendUrl, appId: opts.appId }) : null);
+    const existing = await registry.lookup(identity.userId);
+    if (existing) {
+      const account2 = makeAccount(existing.address);
+      const isSigner2 = await adapter.isAuthorizedSigner(existing.address, devicePubkey);
+      const cavos = new _Cavos(
+        identity,
+        existing.address,
+        isSigner2 ? "ready" : "needs-device-approval",
+        account2,
+        adapter,
+        devicePubkey
+      );
+      if (!isSigner2 && recovery) {
+        const dedup = lastDeviceRequest.get(identity.userId);
+        const fresh = dedup && Date.now() - dedup.requestedAt < DEVICE_REQUEST_DEDUP_MS;
+        try {
+          if (fresh) {
+            cavos.pendingRequestId = dedup.requestId;
+          } else {
+            const { requestId } = await recovery.requestDeviceAddition({
+              userId: identity.userId,
+              accountAddress: existing.address,
+              newSigner: devicePubkey,
+              ...identity.email ? { email: identity.email } : {}
+            });
+            cavos.pendingRequestId = requestId;
+            lastDeviceRequest.set(identity.userId, { requestId, requestedAt: Date.now() });
+          }
+        } catch (e) {
+          console.warn("[Cavos] requestDeviceAddition failed:", e);
+        }
+      }
+      return cavos;
+    }
+    const address = adapter.computeAddress({ addressSeed, initialSigner: devicePubkey });
+    const account = makeAccount(address);
+    const alreadyDeployed = await isDeployed(provider, address);
+    if (!alreadyDeployed) {
+      const deploymentData = {
+        address,
+        class_hash: classHash,
+        salt: starknet.num.toHex(addressSeed),
+        calldata: adapter.constructorCalldata(addressSeed, devicePubkey),
+        version: 1
+      };
+      const deployRes = await account.executePaymasterTransaction([], {
+        feeMode: { mode: "sponsored" },
+        deploymentData
+      });
+      try {
+        await provider.waitForTransaction(deployRes.transaction_hash);
+      } catch (e) {
+        console.warn("[Cavos] deploy receipt wait failed:", e);
+      }
+    }
+    await registry.register({ userId: identity.userId, address, initialSigner: devicePubkey });
+    let isSigner;
+    try {
+      isSigner = await adapter.isAuthorizedSigner(address, devicePubkey);
+    } catch (e) {
+      console.warn("[Cavos] isAuthorizedSigner read failed:", e);
+      isSigner = !alreadyDeployed;
+    }
+    return new _Cavos(
+      identity,
+      address,
+      isSigner ? "ready" : "needs-device-approval",
+      account,
+      adapter,
+      devicePubkey
+    );
+  }
+  /** This device's public key (e.g. to request addition to an existing wallet). */
+  get publicKey() {
+    return this.devicePubkey;
+  }
+  /** Execute a sponsored (gasless) multicall, signed silently by the device. */
+  async execute(calls) {
+    if (this.status !== "ready") {
+      throw new Error("kit: this device is not yet an authorized signer of the wallet");
+    }
+    const res = await this.account.executePaymasterTransaction(calls, {
+      feeMode: { mode: "sponsored" }
+    });
+    return { transactionHash: res.transaction_hash };
+  }
+  /** Authorize an additional device signer (sponsored). Self-submitted. */
+  async addSigner(pubkey) {
+    return this.execute([this.adapter.buildAddSigner(this.address, pubkey)]);
+  }
+  /**
+   * Register a self-custodial backup signer derived from `code`, so the account
+   * can be recovered after the user loses every device. Idempotent: if the
+   * derived backup key is already an authorised signer, this is a no-op.
+   *
+   * The code never leaves the device — only its deterministic public key is
+   * added on-chain as an ordinary signer. Sponsor this like any other
+   * add_signer (gasless). Returns the transaction hash (or undefined when the
+   * backup was already set up).
+   */
+  async setupRecovery(code) {
+    const { publicKey: backupPubkey } = deriveBackupKey(code);
+    const already = await this.adapter.isAuthorizedSigner(this.address, backupPubkey);
+    if (already) return void 0;
+    return this.addSigner(backupPubkey);
+  }
+  /**
+   * Recover an account after losing every device signer. Derives the backup key
+   * from `code`, uses it (not the new device key) to sign an `add_signer` for
+   * the new device, and returns a ready Cavos bound to the new device. The
+   * account address is unchanged.
+   *
+   * Self-custodial: only someone holding the code (i.e. the rightful owner) can
+   * re-derive the backup key. The backend never sees the code.
+   */
+  static async recover(opts) {
+    const classHash = opts.classHash ?? DEVICE_ACCOUNT_CLASS_HASH[opts.network];
+    if (!classHash) throw new Error(`kit: no DeviceAccount class hash for ${opts.network}`);
+    const provider = new starknet.RpcProvider({
+      nodeUrl: opts.rpcUrl ?? STARKNET_NETWORKS[opts.network].rpcUrl
+    });
+    const paymaster = new starknet.PaymasterRpc({
+      nodeUrl: opts.paymasterUrl ?? CAVOS_PAYMASTER_URL[opts.network],
+      headers: { "x-paymaster-api-key": opts.paymasterApiKey }
+    });
+    const signer = opts.createSigner ? await opts.createSigner(`${opts.identity.userId}:${opts.appSalt}`) : await WebCryptoSigner.loadOrCreate({ keyId: `${opts.identity.userId}:${opts.appSalt}` });
+    const devicePubkey = await signer.getPublicKey();
+    const backup = BackupSigner.fromCode(opts.code);
+    const backupAdapter = new StarknetAdapter({ classHash, signer: backup, provider });
+    const backendUrl = opts.backendUrl ?? "https://cavos.xyz";
+    const registry = opts.registry ?? (opts.appId ? new HttpWalletRegistry({ baseUrl: backendUrl, appId: opts.appId, network: opts.network }) : defaultRegistry);
+    const existing = await registry.lookup(opts.identity.userId);
+    if (!existing) {
+      throw new Error("kit: no account found for this identity \u2014 nothing to recover");
+    }
+    const backupAccount = new starknet.Account({
+      provider,
+      address: existing.address,
+      signer: new StarknetDeviceSigner(backup),
+      paymaster,
+      cairoVersion: "1"
+    });
+    const alreadyAuthed = await backupAdapter.isAuthorizedSigner(existing.address, devicePubkey);
+    if (!alreadyAuthed) {
+      const res = await backupAccount.executePaymasterTransaction(
+        [backupAdapter.buildAddSigner(existing.address, devicePubkey)],
+        { feeMode: { mode: "sponsored" } }
+      );
+      try {
+        await provider.waitForTransaction(res.transaction_hash);
+      } catch (e) {
+        console.warn("[Cavos] recovery add_signer receipt wait failed:", e);
+      }
+    }
+    const adapter = new StarknetAdapter({ classHash, signer, provider });
+    const account = new starknet.Account({
+      provider,
+      address: existing.address,
+      signer: new StarknetDeviceSigner(signer),
+      paymaster,
+      cairoVersion: "1"
+    });
+    return new _Cavos(opts.identity, existing.address, "ready", account, adapter, devicePubkey);
+  }
+};
+var defaultRegistry = new InMemoryWalletRegistry();
+var DEVICE_REQUEST_DEDUP_MS = 5 * 60 * 1e3;
+var lastDeviceRequest = /* @__PURE__ */ new Map();
+async function isDeployed(provider, address) {
+  try {
+    const classHash = await provider.getClassHashAt(address);
+    return !!classHash && classHash !== "0x0";
+  } catch {
+    return false;
+  }
+}
+
+// src/auth/AuthProvider.ts
+var StaticIdentity = class {
+  constructor(identity) {
+    this.identity = identity;
+  }
+  async authenticate() {
+    return this.identity;
+  }
+};
+var CavosAuth = class {
+  constructor(opts = {}) {
+    this.opts = opts;
+    /** Most recent nonce sent to the backend (for the pending OAuth/OTP request). */
+    this.pendingNonce = null;
+    this.last = null;
+    this.backendUrl = opts.backendUrl ?? "https://cavos.xyz";
+  }
+  /** Redirect URL for Google login (open it; user returns to your redirectUri). */
+  async getGoogleOAuthUrl(redirectUri) {
+    return this.oauthUrl("google", redirectUri);
+  }
+  /** Redirect URL for Apple login. */
+  async getAppleOAuthUrl(redirectUri) {
+    return this.oauthUrl("apple", redirectUri);
+  }
+  async oauthUrl(provider, redirectUri) {
+    if (typeof window === "undefined") throw new Error("kit/auth: OAuth requires a browser");
+    const params = new URLSearchParams({
+      nonce: this.freshNonce(),
+      redirect_uri: redirectUri ?? window.location.href,
+      ...this.opts.appId ? { app_id: this.opts.appId } : {}
+    });
+    const { url } = await this.get(`/api/oauth/${provider}?${params}`);
+    return url;
+  }
+  /**
+   * Resolve the identity from an OAuth callback. The auth data is carried in the
+   * `auth_data` (or `zk_auth_data`) query param on return. We only extract `sub`.
+   */
+  async handleCallback(authDataOrSearch) {
+    const authData = extractAuthData(authDataOrSearch);
+    return this.identityFromAuthData(authData, "oauth");
+  }
+  /** Send a one-time code to an email (Firebase OTP). */
+  async sendOtp(email) {
+    await this.post("/api/oauth/firebase/otp/request", {
+      email,
+      nonce: this.freshNonce(),
+      ...this.opts.appId ? { app_id: this.opts.appId } : {}
+    });
+  }
+  /** Send a passwordless magic-link sign-in email (Firebase). */
+  async sendMagicLink(email) {
+    await this.post("/api/oauth/firebase/magic-link", {
+      email,
+      nonce: this.freshNonce(),
+      ...this.opts.appId ? { app_id: this.opts.appId } : {},
+      ...typeof window !== "undefined" ? { redirect_uri: window.location.href } : {}
+    });
+  }
+  /** Verify the OTP and resolve the identity. */
+  async verifyOtp(email, code) {
+    const res = await this.post("/api/oauth/firebase/otp/verify", {
+      email,
+      code,
+      nonce: this.consumeNonce(),
+      ...this.opts.appId ? { app_id: this.opts.appId } : {}
+    });
+    return this.identityFromAuthData(res.id_token ?? res.jwt ?? res.token ?? JSON.stringify(res), "otp", email);
+  }
+  /** AuthProvider: returns the identity resolved by the last login step. */
+  async authenticate() {
+    if (!this.last) throw new Error("kit/auth: no identity yet \u2014 complete a login first");
+    return this.last;
+  }
+  // ── internals ──────────────────────────────────────────────────────────────
+  /**
+   * Build an `Identity` from whatever the backend returned. The Cavos backend
+   * wraps the user id in a JWT (its `sub` claim); for the device model we only
+   * need that stable id — the signature is never checked on-chain.
+   */
+  async identityFromAuthData(authData, provider, emailOverride) {
+    let token = authData;
+    try {
+      const parsed = JSON.parse(authData);
+      token = parsed.id_token ?? parsed.jwt ?? parsed.token ?? authData;
+    } catch {
+    }
+    const claims = parseJwt(token);
+    return this.remember({
+      userId: String(claims.sub ?? claims.user_id ?? claims.uid),
+      email: claims.email ?? emailOverride,
+      provider: claims.firebase?.sign_in_provider ?? claims.provider ?? provider
+    });
+  }
+  /** Generate (and remember) the nonce the Cavos backend expects on requests. */
+  freshNonce() {
+    const bytes = crypto.getRandomValues(new Uint8Array(31));
+    const h = starknet.hash.computePoseidonHashOnElements([bytesToChunks(bytes)]);
+    this.pendingNonce = starknet.num.toHex(h);
+    return this.pendingNonce;
+  }
+  /** Return the pending nonce (for the verify step), clearing it. */
+  consumeNonce() {
+    if (!this.pendingNonce) return this.freshNonce();
+    const n = this.pendingNonce;
+    this.pendingNonce = null;
+    return n;
+  }
+  remember(id) {
+    this.last = id;
+    return id;
+  }
+  async get(path) {
+    const r = await fetch(`${this.backendUrl}${path}`);
+    if (!r.ok) throw new Error(`kit/auth: ${path} -> ${r.status} ${await r.text()}`);
+    return r.json();
+  }
+  async post(path, body) {
+    const r = await fetch(`${this.backendUrl}${path}`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(body)
+    });
+    if (!r.ok) throw new Error(`kit/auth: ${path} -> ${r.status} ${await r.text()}`);
+    return r.json();
+  }
+};
+function extractAuthData(input) {
+  if (input.includes("auth_data=") || input.includes("zk_auth_data=")) {
+    const params = new URLSearchParams(input.startsWith("?") ? input : `?${input}`);
+    return params.get("auth_data") ?? params.get("zk_auth_data") ?? input;
+  }
+  return input;
+}
+function parseJwt(jwt) {
+  const part = jwt.split(".")[1];
+  if (!part) throw new Error("kit/auth: malformed JWT");
+  const json = atob(part.replace(/-/g, "+").replace(/_/g, "/"));
+  return JSON.parse(json);
+}
+function bytesToChunks(bytes) {
+  let w = 0n;
+  for (const b of bytes.subarray(0, 31)) w = w << 8n | BigInt(b);
+  return w;
+}
+
+exports.BackupSigner = BackupSigner;
+exports.Cavos = Cavos;
+exports.CavosAuth = CavosAuth;
+exports.DEVICE_ACCOUNT_CLASS_HASH = DEVICE_ACCOUNT_CLASS_HASH;
+exports.HttpRecoveryClient = HttpRecoveryClient;
+exports.HttpWalletRegistry = HttpWalletRegistry;
+exports.InMemoryWalletRegistry = InMemoryWalletRegistry;
+exports.STARKNET_NETWORKS = STARKNET_NETWORKS;
+exports.StarknetAdapter = StarknetAdapter;
+exports.StarknetDeviceSigner = StarknetDeviceSigner;
+exports.StaticIdentity = StaticIdentity;
+exports.UDC_ADDRESS = UDC_ADDRESS;
+exports.WebCryptoSigner = WebCryptoSigner;
+exports.bigIntTo32Bytes = bigIntTo32Bytes;
+exports.bytesToBigInt = bytesToBigInt;
+exports.bytesToHex = bytesToHex;
+exports.deriveAddressSeed = deriveAddressSeed;
+exports.deriveBackupKey = deriveBackupKey;
+exports.generateRecoveryCode = generateRecoveryCode;
+exports.hexToBytes = hexToBytes;
+exports.recoverYParity = recoverYParity;
+exports.signatureToFelts = signatureToFelts;
+exports.u256ToFelts = u256ToFelts;
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map