@cavos/kit 0.0.2 → 0.0.3

package/dist/index.js

@@ -7,6 +7,7 @@ var web3_js = require('@solana/web3.js');
 var hkdf = require('@noble/hashes/hkdf');
 var pbkdf2 = require('@noble/hashes/pbkdf2');
 var utils = require('@noble/hashes/utils');
+var stellarSdk = require('@stellar/stellar-sdk');
 
 // src/Cavos.ts
 
@@ -32,6 +33,18 @@ function hexToBytes(hex) {
   for (let i = 0; i < out.length; i++) out[i] = parseInt(padded.slice(i * 2, i * 2 + 2), 16);
   return out;
 }
+function bytesToByteArrayCalldata(bytes) {
+  const CHUNK = 31;
+  const fullCount = Math.floor(bytes.length / CHUNK);
+  const out = [String(fullCount)];
+  for (let i = 0; i < fullCount; i++) {
+    out.push("0x" + bytesToBigInt(bytes.subarray(i * CHUNK, i * CHUNK + CHUNK)).toString(16));
+  }
+  const rem = bytes.subarray(fullCount * CHUNK);
+  out.push("0x" + (rem.length ? bytesToBigInt(rem).toString(16) : "0"));
+  out.push(String(rem.length));
+  return out;
+}
 function bigIntTo32Bytes(value) {
   const out = new Uint8Array(32);
   let v = value;
@@ -169,7 +182,7 @@ var CAVOS_PAYMASTER_URL = {
   mainnet: "https://paymaster.cavos.xyz"
 };
 var DEVICE_ACCOUNT_CLASS_HASH = {
-  sepolia: "0x1840aded59e8a0d2b440a134cb9079a7fc11b06c77f58ed189ab436a034ca6a",
+  sepolia: "0x25cbc5423e8ee895febb0ef2c3945b408da44d0039d915fbdd681fe6b6ba66b",
   mainnet: "0x1840aded59e8a0d2b440a134cb9079a7fc11b06c77f58ed189ab436a034ca6a"
 };
 
@@ -233,6 +246,73 @@ var StarknetAdapter = class {
     const sig = await this.opts.signer.sign(bigIntTo32Bytes(txHash));
     return signatureToFelts(sig).map((f) => starknet.num.toHex(f));
   }
+  // --- passkey approvers ---
+  buildAddApprover(accountAddress, passkey) {
+    return { contractAddress: accountAddress, entrypoint: "add_approver", calldata: pubkeyCalldata(passkey) };
+  }
+  buildRemoveApprover(accountAddress, passkey) {
+    return { contractAddress: accountAddress, entrypoint: "remove_approver", calldata: pubkeyCalldata(passkey) };
+  }
+  async isApprover(accountAddress, passkey) {
+    if (!this.opts.provider) throw new Error("kit/starknet: provider required for reads");
+    const res = await this.opts.provider.callContract({
+      contractAddress: accountAddress,
+      entrypoint: "is_approver",
+      calldata: pubkeyCalldata(passkey)
+    });
+    return BigInt(res[0] ?? 0) !== 0n;
+  }
+  async getPasskeyNonce(accountAddress) {
+    if (!this.opts.provider) throw new Error("kit/starknet: provider required for reads");
+    const res = await this.opts.provider.callContract({
+      contractAddress: accountAddress,
+      entrypoint: "get_passkey_nonce",
+      calldata: []
+    });
+    return BigInt(res[0] ?? 0);
+  }
+  /** This chain's leaf for approving `add_signer(newSigner)` at `nonce`:
+   * `sha256(new_x || new_y || nonce)` (coords 32B BE, nonce 16B BE). The batch
+   * challenge the passkey signs is `sha256(concat(leaves))` across chains. */
+  passkeyLeaf(newSigner, nonce) {
+    const msg = new Uint8Array(32 + 32 + 16);
+    msg.set(bigIntTo32Bytes(newSigner.x), 0);
+    msg.set(bigIntTo32Bytes(newSigner.y), 32);
+    msg.set(bigIntTo32Bytes(nonce).subarray(16), 64);
+    return sha256.sha256(msg);
+  }
+  /** Passkey-authorized `add_signer` call. `leaves`/`leafIndex` place this chain's
+   * leaf in the multi-chain batch (single chain → `[leaf]`, index 0). `yParity`
+   * matches the raw `(r, s)` — the contract normalizes high-S internally. */
+  buildAddSignerViaPasskey(accountAddress, newSigner, nonce, leaves, leafIndex, assertion, yParity) {
+    const [rl, rh] = u256ToFelts(assertion.r);
+    const [sl, sh] = u256ToFelts(assertion.s);
+    const leavesCalldata = [String(leaves.length)];
+    for (const leaf of leaves) {
+      const [lo, hi] = u256ToFelts(bytesToBigInt(leaf));
+      leavesCalldata.push(starknet.num.toHex(lo), starknet.num.toHex(hi));
+    }
+    return {
+      contractAddress: accountAddress,
+      entrypoint: "add_signer_via_passkey",
+      calldata: [
+        ...pubkeyCalldata(newSigner),
+        // new_x, new_y (u256 pairs)
+        starknet.num.toHex(nonce),
+        ...leavesCalldata,
+        // Array<u256> leaves
+        String(leafIndex),
+        ...bytesToByteArrayCalldata(assertion.authenticatorData),
+        ...bytesToByteArrayCalldata(assertion.clientDataJSON),
+        String(assertion.challengeOffset),
+        starknet.num.toHex(rl),
+        starknet.num.toHex(rh),
+        starknet.num.toHex(sl),
+        starknet.num.toHex(sh),
+        yParity ? "0x1" : "0x0"
+      ]
+    };
+  }
 };
 function pubkeyCalldata(pk) {
   const [xl, xh] = u256ToFelts(pk.x);
@@ -326,6 +406,9 @@ function deriveAddressSeed({ userId, appSalt }) {
 function deriveAddressSeedSolana({ userId, appSalt }) {
   return sha256.sha256(new TextEncoder().encode(`cavos:solana:v1:${userId}:${appSalt}`));
 }
+function deriveAddressSeedStellar({ userId, appSalt }) {
+  return sha256.sha256(new TextEncoder().encode(`cavos:stellar:v1:${userId}:${appSalt}`));
+}
 function feltFromString(s) {
   const bytes = new TextEncoder().encode(s);
   const chunks = [];
@@ -347,6 +430,8 @@ var DOMAIN_ADD = "cavos:add_signer:v1";
 var DOMAIN_REMOVE = "cavos:remove_signer:v1";
 var DOMAIN_TRANSFER = "cavos:transfer:v1";
 var DOMAIN_EXECUTE = "cavos:execute:v1";
+var DOMAIN_ADD_APPROVER = "cavos:add_approver:v1";
+var DOMAIN_REMOVE_APPROVER = "cavos:remove_approver:v1";
 var SECP256R1_N = 0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551n;
 var SOLANA_NETWORKS = {
   "solana-devnet": "https://api.devnet.solana.com",
@@ -439,6 +524,99 @@ var SolanaAdapter = class {
     });
     return [precompileIx, ix];
   }
+  /** `[precompile, add_approver]` bundle enrolling a passkey approver (device-signed). */
+  async buildAddApprover(account, passkey) {
+    const accountPk = new web3_js.PublicKey(account);
+    const compressed = compressedPubkey(passkey);
+    const nonce = await this.fetchNonce(accountPk);
+    const message = concatBytes(
+      Buffer.from(DOMAIN_ADD_APPROVER),
+      accountPk.toBuffer(),
+      compressed,
+      u64le(nonce)
+    );
+    const { precompileIx } = await this.signToPrecompile(message);
+    const ix = new web3_js.TransactionInstruction({
+      programId: this.programId,
+      keys: this.guardedKeys(accountPk),
+      data: Buffer.concat([anchorDiscriminator("add_approver"), Buffer.from(compressed)])
+    });
+    return [precompileIx, ix];
+  }
+  /** `[precompile, remove_approver]` bundle (device-signed). */
+  async buildRemoveApprover(account, passkey) {
+    const accountPk = new web3_js.PublicKey(account);
+    const compressed = compressedPubkey(passkey);
+    const nonce = await this.fetchNonce(accountPk);
+    const message = concatBytes(
+      Buffer.from(DOMAIN_REMOVE_APPROVER),
+      accountPk.toBuffer(),
+      compressed,
+      u64le(nonce)
+    );
+    const { precompileIx } = await this.signToPrecompile(message);
+    const ix = new web3_js.TransactionInstruction({
+      programId: this.programId,
+      keys: this.guardedKeys(accountPk),
+      data: Buffer.concat([anchorDiscriminator("remove_approver"), Buffer.from(compressed)])
+    });
+    return [precompileIx, ix];
+  }
+  /** This chain's leaf for approving `add_signer(newSigner)` at `nonce`:
+   * `sha256(compressed(new_signer) || passkey_nonce_le8)`. The batch challenge the
+   * passkey signs is `sha256(concat(leaves))` across chains. */
+  passkeyLeaf(newSigner, nonce) {
+    return sha256.sha256(concatBytes(compressedPubkey(newSigner), u64le(nonce)));
+  }
+  /**
+   * `[precompile(passkey), add_signer_via_passkey]` bundle. The precompile ix
+   * verifies the PASSKEY's WebAuthn assertion over `authData || sha256(clientDataJSON)`;
+   * the program ix binds the challenge to `newSigner` + the passkey nonce and adds
+   * the signer. No device signature — a gasless relayer can submit it.
+   */
+  buildAddSignerViaPasskey(account, newSigner, passkey, leaves, leafIndex, assertion) {
+    const accountPk = new web3_js.PublicKey(account);
+    const newCompressed = compressedPubkey(newSigner);
+    const passkeyCompressed = compressedPubkey(passkey);
+    const clientHash = sha256.sha256(assertion.clientDataJSON);
+    const message = concatBytes(assertion.authenticatorData, clientHash);
+    const signature = encodeLowSSignature(assertion.r, assertion.s);
+    const precompileIx = buildSecp256r1Instruction(passkeyCompressed, signature, message);
+    const leavesBlob = Buffer.concat([u32le(leaves.length), ...leaves.map((l) => Buffer.from(l))]);
+    const data = Buffer.concat([
+      anchorDiscriminator("add_signer_via_passkey"),
+      Buffer.from(newCompressed),
+      leavesBlob,
+      u32le(leafIndex),
+      serializeVecU8(assertion.authenticatorData),
+      serializeVecU8(assertion.clientDataJSON),
+      u32le(assertion.challengeOffset)
+    ]);
+    const ix = new web3_js.TransactionInstruction({
+      programId: this.programId,
+      keys: this.guardedKeys(accountPk),
+      data
+    });
+    return [precompileIx, ix];
+  }
+  /** Read whether `passkey` is a registered approver. */
+  async isApprover(account, passkey) {
+    const approvers = await this.fetchApprovers(new web3_js.PublicKey(account));
+    const target = Buffer.from(compressedPubkey(passkey)).toString("hex");
+    return approvers.some((a) => Buffer.from(a).toString("hex") === target);
+  }
+  /** Read the current passkey-approval nonce. */
+  async passkeyNonce(account) {
+    const info = await this.requireConnection().getAccountInfo(new web3_js.PublicKey(account));
+    if (!info) return 0n;
+    const d = info.data;
+    const signersLenOff = 8 + 32 + 1 + 8 + COMPRESSED_PUBKEY_SIZE;
+    const signerCount = d.readUInt32LE(signersLenOff);
+    const approversLenOff = signersLenOff + 4 + signerCount * COMPRESSED_PUBKEY_SIZE;
+    const approverCount = d.readUInt32LE(approversLenOff);
+    const passkeyNonceOff = approversLenOff + 4 + approverCount * COMPRESSED_PUBKEY_SIZE;
+    return readU64le(d, passkeyNonceOff);
+  }
   /** `[precompile, execute_transfer]` bundle moving lamports out of the account. */
   async buildExecuteTransfer(account, destination, amount) {
     const accountPk = new web3_js.PublicKey(account);
@@ -560,6 +738,22 @@ var SolanaAdapter = class {
     }
     return out;
   }
+  async fetchApprovers(account) {
+    const info = await this.requireConnection().getAccountInfo(account);
+    if (!info) return [];
+    const d = info.data;
+    const signersLenOff = 8 + 32 + 1 + 8 + COMPRESSED_PUBKEY_SIZE;
+    const signerCount = d.readUInt32LE(signersLenOff);
+    const approversLenOff = signersLenOff + 4 + signerCount * COMPRESSED_PUBKEY_SIZE;
+    const count = d.readUInt32LE(approversLenOff);
+    const out = [];
+    let off = approversLenOff + 4;
+    for (let i = 0; i < count; i++) {
+      out.push(Uint8Array.from(d.subarray(off, off + COMPRESSED_PUBKEY_SIZE)));
+      off += COMPRESSED_PUBKEY_SIZE;
+    }
+    return out;
+  }
   requireConnection() {
     if (!this.opts.connection) throw new Error("kit/solana: connection required for reads");
     return this.opts.connection;
@@ -572,10 +766,10 @@ function compressedPubkey(pk) {
   return out;
 }
 function encodeLowSSignature(r, s) {
-  const lowS = s > SECP256R1_N / 2n ? SECP256R1_N - s : s;
+  const lowS2 = s > SECP256R1_N / 2n ? SECP256R1_N - s : s;
   const out = new Uint8Array(SIGNATURE_SIZE);
   out.set(bigIntTo32Bytes(r), 0);
-  out.set(bigIntTo32Bytes(lowS), 32);
+  out.set(bigIntTo32Bytes(lowS2), 32);
   return out;
 }
 function buildSecp256r1Instruction(compressed, signature, message) {
@@ -614,13 +808,18 @@ function buildSecp256r1Instruction(compressed, signature, message) {
 function anchorDiscriminator(name) {
   return Buffer.from(sha256.sha256(`global:${name}`).slice(0, 8));
 }
+function u32le(n) {
+  const b = Buffer.alloc(4);
+  b.writeUInt32LE(n);
+  return b;
+}
 function u64le(n) {
   const b = Buffer.alloc(8);
   new DataView(b.buffer, b.byteOffset, 8).setBigUint64(0, BigInt(n), true);
   return b;
 }
-function readU64le(buf, offset) {
-  return new DataView(buf.buffer, buf.byteOffset, buf.length).getBigUint64(
+function readU64le(buf2, offset) {
+  return new DataView(buf2.buffer, buf2.byteOffset, buf2.length).getBigUint64(
     offset,
     true
   );
@@ -1008,6 +1207,77 @@ var WORDLIST = [
   "beach",
   "dusk"
 ];
+function base64urlEncode(bytes) {
+  let bin = "";
+  for (const b of bytes) bin += String.fromCharCode(b);
+  const b64 = typeof btoa !== "undefined" ? btoa(bin) : Buffer.from(bytes).toString("base64");
+  return b64.replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
+}
+function derToRs(der) {
+  let i = 0;
+  if (der[i++] !== 48) throw new Error("kit/webauthn: bad DER (no SEQUENCE)");
+  if (der[i] & 128) i += 1 + (der[i] & 127);
+  else i += 1;
+  if (der[i++] !== 2) throw new Error("kit/webauthn: bad DER (no r INTEGER)");
+  const rlen = der[i++];
+  const r = bytesToBigInt(der.subarray(i, i + rlen));
+  i += rlen;
+  if (der[i++] !== 2) throw new Error("kit/webauthn: bad DER (no s INTEGER)");
+  const slen = der[i++];
+  const s = bytesToBigInt(der.subarray(i, i + slen));
+  return { r, s };
+}
+function spkiToPublicKey(spki) {
+  const idx = spki.lastIndexOf(4, spki.length - 65);
+  const start = spki.length - 65;
+  const prefix = spki[start];
+  if (prefix !== 4) {
+    if (idx < 0) throw new Error("kit/webauthn: no uncompressed EC point in SPKI");
+    return { x: bytesToBigInt(spki.subarray(idx + 1, idx + 33)), y: bytesToBigInt(spki.subarray(idx + 33, idx + 65)) };
+  }
+  return {
+    x: bytesToBigInt(spki.subarray(start + 1, start + 33)),
+    y: bytesToBigInt(spki.subarray(start + 33, start + 65))
+  };
+}
+function batchChallenge(leaves) {
+  const total = leaves.reduce((n, l) => n + l.length, 0);
+  const cat = new Uint8Array(total);
+  let o = 0;
+  for (const l of leaves) {
+    cat.set(l, o);
+    o += l.length;
+  }
+  return sha256.sha256(cat);
+}
+function webauthnDigest(authenticatorData, clientDataJSON) {
+  const clientHash = sha256.sha256(clientDataJSON);
+  const msg = new Uint8Array(authenticatorData.length + clientHash.length);
+  msg.set(authenticatorData, 0);
+  msg.set(clientHash, authenticatorData.length);
+  return sha256.sha256(msg);
+}
+function recoverCandidatePublicKeys(r, s, digest) {
+  const out = [];
+  for (const bit of [0, 1]) {
+    try {
+      const point = new p256.p256.Signature(r, s).addRecoveryBit(bit).recoverPublicKey(digest).toAffine();
+      out.push({ publicKey: { x: point.x, y: point.y }, yParity: bit === 1 });
+    } catch {
+    }
+  }
+  return out;
+}
+function lowS(s) {
+  const n = p256.p256.CURVE.n;
+  return s > n / 2n ? n - s : s;
+}
+function challengeOffsetOf(clientDataJSON, challengeB64) {
+  const text = new TextDecoder().decode(clientDataJSON);
+  const idx = text.indexOf(challengeB64);
+  if (idx < 0) throw new Error("kit/webauthn: challenge not found in clientDataJSON");
+  return idx;
+}
 
 // src/chains/solana/CavosSolana.ts
 var CavosSolana = class _CavosSolana {
@@ -1088,6 +1358,69 @@ var CavosSolana = class _CavosSolana {
     const ixs = await this.adapter.buildAddSigner(this.address, pubkey);
     return this.send(ixs);
   }
+  /**
+   * Enroll a passkey as an approver (2FA-style step-up). Device-signed + gasless;
+   * requires a ready device. Idempotent. Returns the passkey pubkey + tx hash.
+   */
+  async enrollPasskey(passkey, params) {
+    const enrolled = await passkey.enroll(params);
+    const { transactionHash } = await this.addApprover(enrolled.publicKey);
+    return { publicKey: enrolled.publicKey, transactionHash };
+  }
+  /** Register an already-enrolled passkey pubkey as an approver (gasless).
+   * Idempotent. Lets one passkey be registered across chains without re-prompting. */
+  async addApprover(pubkey) {
+    if (this.status !== "ready") {
+      throw new Error("kit/solana: addApprover requires a ready, authorized device");
+    }
+    if (await this.adapter.isApprover(this.address, pubkey)) return {};
+    const ixs = await this.adapter.buildAddApprover(this.address, pubkey);
+    const transactionHash = await this.send(ixs);
+    return { transactionHash };
+  }
+  /**
+   * From a fresh browser (status `needs-device-approval`), approve adding THIS
+   * device with the user's synced passkey. Gasless via the relayer — the bundle
+   * carries the passkey's WebAuthn assertion, so no device signature is needed.
+   */
+  async approveThisDeviceWithPasskey(passkey) {
+    if (this.status === "ready") {
+      throw new Error("kit/solana: this device is already an authorized signer");
+    }
+    const { leaf, nonce } = await this.passkeyLeafForThisDevice();
+    const leaves = [leaf];
+    const assertion = await passkey.assert(batchChallenge(leaves));
+    const { transactionHash } = await this.submitPasskeyApproval(assertion, leaves, 0, nonce);
+    return transactionHash;
+  }
+  /** This device's leaf + passkey nonce for a (possibly multi-chain) batch. */
+  async passkeyLeafForThisDevice() {
+    const nonce = await this.adapter.passkeyNonce(this.address);
+    return { leaf: this.adapter.passkeyLeaf(this.devicePubkey, nonce), nonce };
+  }
+  /** Submit `add_signer_via_passkey` given a shared assertion + batch position.
+   * Used by `approveThisDeviceWithPasskey` and `approveDeviceEverywhere`. */
+  async submitPasskeyApproval(assertion, leaves, leafIndex, _nonce) {
+    const digest = webauthnDigest(assertion.authenticatorData, assertion.clientDataJSON);
+    const candidates = recoverCandidatePublicKeys(assertion.r, assertion.s, digest);
+    let approver = null;
+    for (const cand of candidates) {
+      if (await this.adapter.isApprover(this.address, cand.publicKey)) {
+        approver = cand.publicKey;
+        break;
+      }
+    }
+    if (!approver) throw new Error("kit/solana: this passkey is not a registered approver");
+    const ixs = this.adapter.buildAddSignerViaPasskey(
+      this.address,
+      this.devicePubkey,
+      approver,
+      leaves,
+      leafIndex,
+      assertion
+    );
+    return { transactionHash: await this.send(ixs) };
+  }
   /** Move `amount` lamports out of the account to `destination` (device-signed). */
   async execute(amount, destination) {
     if (this.status !== "ready") {
@@ -1200,6 +1533,619 @@ var CavosSolana = class _CavosSolana {
 };
 var defaultRegistry = new InMemoryWalletRegistry();
 
+// src/chains/stellar/constants.ts
+var FACTORY_CONTRACT_ID = {
+  // Re-deployed 2026-07-01 with the passkey-approval device-account wasm (batched
+  // multi-chain challenge). The factory pins the wasm hash immutably, so a new
+  // wasm needs a new factory → new account addresses; testnet has no prod wallets.
+  "stellar-testnet": "CBCJIODXIEBOXXD66KCUCF7ZDYJARKI4ZIVQOVWPULOBH5XGNCDP6W3I",
+  // Set once the factory is deployed to mainnet (its address differs — network id
+  // is part of contract-address derivation).
+  "stellar-mainnet": ""
+};
+var DEVICE_ACCOUNT_WASM_HASH = {
+  "stellar-testnet": "2671b085578e59a385ef5a5664e42f0450322fe3249539f588e1263ed5a31dce",
+  "stellar-mainnet": ""
+};
+var STELLAR_NETWORKS = {
+  "stellar-testnet": {
+    rpcUrl: "https://soroban-testnet.stellar.org",
+    passphrase: "Test SDF Network ; September 2015"
+  },
+  "stellar-mainnet": {
+    rpcUrl: "https://soroban-rpc.mainnet.stellar.gateway.fm",
+    passphrase: "Public Global Stellar Network ; September 2015"
+  }
+};
+var NATIVE_SAC_ID = {
+  "stellar-testnet": "CDLZFC3SYJYDZT7K67VZ75HPJVIEUVNIXF47ZG2FB2RMQQVU2HHGCYSC",
+  "stellar-mainnet": "CAS3J7GYLGXMF6TDJBBYYSE3HQ6BBSMLNUQ34T6TZMYMW2EVH34XOWMA"
+};
+
+// src/chains/stellar/StellarAdapter.ts
+var SECP256R1_N2 = 0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551n;
+var StellarAdapter = class {
+  constructor(opts) {
+    this.chain = "stellar";
+    this.network = opts.network;
+    this.passphrase = STELLAR_NETWORKS[opts.network].passphrase;
+    this.rpcUrl = opts.rpcUrl ?? STELLAR_NETWORKS[opts.network].rpcUrl;
+    this.factoryId = opts.factoryId ?? FACTORY_CONTRACT_ID[opts.network];
+    if (!this.factoryId) {
+      throw new Error(`kit/stellar: no factory contract id configured for ${opts.network}`);
+    }
+    this.signer = opts.signer;
+  }
+  server() {
+    if (!this._server) {
+      this._server = new stellarSdk.rpc.Server(this.rpcUrl, {
+        allowHttp: this.rpcUrl.startsWith("http://")
+      });
+    }
+    return this._server;
+  }
+  networkId() {
+    return stellarSdk.hash(Buffer.from(this.passphrase));
+  }
+  /**
+   * Deterministic account address for `(addressSeed, initialSigner)` — computed
+   * off-chain, byte-identical to the factory's on-chain `account_address`.
+   * `contractId = sha256(HashIdPreimage(networkId, factory, salt))` with
+   * `salt = sha256(addressSeed || sec1(initialSigner))`.
+   */
+  computeAddress(addressSeed, initialSigner) {
+    const salt = this.accountSalt(addressSeed, initialSigner);
+    const preimage = stellarSdk.xdr.HashIdPreimage.envelopeTypeContractId(
+      new stellarSdk.xdr.HashIdPreimageContractId({
+        networkId: this.networkId(),
+        contractIdPreimage: stellarSdk.xdr.ContractIdPreimage.contractIdPreimageFromAddress(
+          new stellarSdk.xdr.ContractIdPreimageFromAddress({
+            address: new stellarSdk.Address(this.factoryId).toScAddress(),
+            salt
+          })
+        )
+      })
+    );
+    return stellarSdk.StrKey.encodeContract(stellarSdk.hash(preimage.toXDR()));
+  }
+  /** `salt = sha256(addressSeed(32) || sec1(initialSigner)(65))` — matches the factory. */
+  accountSalt(addressSeed, initialSigner) {
+    return stellarSdk.hash(Buffer.concat([Buffer.from(addressSeed), Buffer.from(sec1Pubkey(initialSigner))]));
+  }
+  /** Host function: `factory.deploy(address_seed, initial_signer)`. */
+  buildDeploy(addressSeed, initialSigner) {
+    return invokeFunc(this.factoryId, "deploy", [
+      bytesScVal(addressSeed),
+      bytesScVal(sec1Pubkey(initialSigner))
+    ]);
+  }
+  /** Host function: `account.add_signer(new_signer)` (requires device auth). */
+  buildAddSigner(accountAddress, signer) {
+    return invokeFunc(accountAddress, "add_signer", [bytesScVal(sec1Pubkey(signer))]);
+  }
+  /** Host function: `account.remove_signer(signer)` (requires device auth). */
+  buildRemoveSigner(accountAddress, signer) {
+    return invokeFunc(accountAddress, "remove_signer", [bytesScVal(sec1Pubkey(signer))]);
+  }
+  /** Host function: `account.add_approver(passkey)` (requires device auth). */
+  buildAddApprover(accountAddress, passkey) {
+    return invokeFunc(accountAddress, "add_approver", [bytesScVal(sec1Pubkey(passkey))]);
+  }
+  /** Host function: `account.remove_approver(passkey)` (requires device auth). */
+  buildRemoveApprover(accountAddress, passkey) {
+    return invokeFunc(accountAddress, "remove_approver", [bytesScVal(sec1Pubkey(passkey))]);
+  }
+  /** This chain's leaf for approving `add_signer(newSigner)` at `nonce`:
+   * `sha256(sec1(new_signer) || nonce_be8)`. The batch challenge the passkey signs
+   * is `sha256(concat(leaves))` across chains. */
+  passkeyLeaf(newSigner, nonce) {
+    const msg = new Uint8Array(65 + 8);
+    msg.set(sec1Pubkey(newSigner), 0);
+    const n = new Uint8Array(8);
+    let v = nonce;
+    for (let i = 7; i >= 0; i--) {
+      n[i] = Number(v & 0xffn);
+      v >>= 8n;
+    }
+    msg.set(n, 65);
+    return sha256.sha256(msg);
+  }
+  /** Host function: passkey-authorized `add_signer_via_passkey` (no device auth —
+   * authorized by the embedded WebAuthn assertion, so any relayer can submit).
+   * `leaves`/`leafIndex` place this chain's leaf in the multi-chain batch. */
+  buildAddSignerViaPasskey(accountAddress, newSigner, passkey, nonce, leaves, leafIndex, assertion) {
+    const sig = encodeLowSSignature2({ r: assertion.r, s: assertion.s});
+    const leavesScVal = stellarSdk.xdr.ScVal.scvVec(leaves.map((l) => bytesScVal(l)));
+    return invokeFunc(accountAddress, "add_signer_via_passkey", [
+      bytesScVal(sec1Pubkey(newSigner)),
+      bytesScVal(sec1Pubkey(passkey)),
+      stellarSdk.nativeToScVal(nonce, { type: "u64" }),
+      leavesScVal,
+      stellarSdk.nativeToScVal(leafIndex, { type: "u32" }),
+      bytesScVal(assertion.authenticatorData),
+      bytesScVal(assertion.clientDataJSON),
+      stellarSdk.nativeToScVal(assertion.challengeOffset, { type: "u32" }),
+      bytesScVal(sig)
+    ]);
+  }
+  /** Read whether `passkey` is a registered approver (read-only simulation). */
+  async isApprover(accountAddress, passkey, readSource) {
+    if (!await this.isDeployed(accountAddress)) return false;
+    const { Account: Account3, TransactionBuilder: TransactionBuilder2, BASE_FEE: BASE_FEE2 } = await import('@stellar/stellar-sdk');
+    const src = new Account3(readSource, "0");
+    const op = stellarSdk.Operation.invokeHostFunction({
+      func: invokeFunc(accountAddress, "is_approver", [bytesScVal(sec1Pubkey(passkey))]),
+      auth: []
+    });
+    const tx2 = new TransactionBuilder2(src, { fee: BASE_FEE2, networkPassphrase: this.passphrase }).addOperation(op).setTimeout(30).build();
+    const sim = await this.server().simulateTransaction(tx2);
+    if (stellarSdk.rpc.Api.isSimulationError(sim)) {
+      throw new Error(`kit/stellar: is_approver simulation failed: ${sim.error}`);
+    }
+    if (!sim.result?.retval) return false;
+    return stellarSdk.scValToNative(sim.result.retval) === true;
+  }
+  /** Read the current passkey-approval nonce (read-only simulation). */
+  async passkeyNonce(accountAddress, readSource) {
+    if (!await this.isDeployed(accountAddress)) return 0n;
+    const { Account: Account3, TransactionBuilder: TransactionBuilder2, BASE_FEE: BASE_FEE2 } = await import('@stellar/stellar-sdk');
+    const src = new Account3(readSource, "0");
+    const op = stellarSdk.Operation.invokeHostFunction({
+      func: invokeFunc(accountAddress, "passkey_nonce", []),
+      auth: []
+    });
+    const tx2 = new TransactionBuilder2(src, { fee: BASE_FEE2, networkPassphrase: this.passphrase }).addOperation(op).setTimeout(30).build();
+    const sim = await this.server().simulateTransaction(tx2);
+    if (stellarSdk.rpc.Api.isSimulationError(sim)) {
+      throw new Error(`kit/stellar: passkey_nonce simulation failed: ${sim.error}`);
+    }
+    if (!sim.result?.retval) return 0n;
+    return BigInt(stellarSdk.scValToNative(sim.result.retval));
+  }
+  /** Host function: SEP-41 `token.transfer(from=account, to, amount)` (device auth). */
+  buildTransfer(tokenId, accountAddress, destination, amount) {
+    return invokeFunc(tokenId, "transfer", [
+      new stellarSdk.Address(accountAddress).toScVal(),
+      new stellarSdk.Address(destination).toScVal(),
+      stellarSdk.nativeToScVal(amount, { type: "i128" })
+    ]);
+  }
+  /**
+   * Sign a Soroban authorization entry with the silent device key, producing the
+   * `Vec<DeviceSignature>` the account's `__check_auth` verifies. The device
+   * signs `sha256(preimage)` (WebCrypto hashes once more internally), which is
+   * exactly what the contract recomputes. Mutates + returns the entry.
+   */
+  async signAuthEntry(entry, validUntilLedger) {
+    const addrCreds = entry.credentials().address();
+    addrCreds.signatureExpirationLedger(validUntilLedger);
+    const preimage = stellarSdk.xdr.HashIdPreimage.envelopeTypeSorobanAuthorization(
+      new stellarSdk.xdr.HashIdPreimageSorobanAuthorization({
+        networkId: this.networkId(),
+        nonce: addrCreds.nonce(),
+        signatureExpirationLedger: validUntilLedger,
+        invocation: entry.rootInvocation()
+      })
+    );
+    const payload = stellarSdk.hash(preimage.toXDR());
+    const sig = await this.signer.sign(new Uint8Array(payload));
+    const pubkey = await this.signer.getPublicKey();
+    addrCreds.signature(deviceSignatureScVal(pubkey, sig));
+    return entry;
+  }
+  /**
+   * Read a SEP-41 token balance of `account` via a read-only simulation of
+   * `token.balance(account)`. Returns 0 when the account isn't deployed or holds
+   * none. `readSource` is any funded G-account (used only for the simulation).
+   */
+  async readBalance(tokenId, account, readSource) {
+    if (!await this.isDeployed(account)) return 0n;
+    const { Account: Account3, TransactionBuilder: TransactionBuilder2, BASE_FEE: BASE_FEE2 } = await import('@stellar/stellar-sdk');
+    const src = new Account3(readSource, "0");
+    const op = stellarSdk.Operation.invokeHostFunction({
+      func: invokeFunc(tokenId, "balance", [new stellarSdk.Address(account).toScVal()]),
+      auth: []
+    });
+    const tx2 = new TransactionBuilder2(src, { fee: BASE_FEE2, networkPassphrase: this.passphrase }).addOperation(op).setTimeout(30).build();
+    const sim = await this.server().simulateTransaction(tx2);
+    if (stellarSdk.rpc.Api.isSimulationError(sim) || !sim.result?.retval) return 0n;
+    return BigInt(stellarSdk.scValToNative(sim.result.retval));
+  }
+  /** Whether the account contract instance exists on-chain (is deployed). */
+  async isDeployed(accountAddress) {
+    try {
+      const res = await this.server().getContractData(
+        accountAddress,
+        stellarSdk.xdr.ScVal.scvLedgerKeyContractInstance(),
+        stellarSdk.rpc.Durability.Persistent
+      );
+      return !!res;
+    } catch {
+      return false;
+    }
+  }
+  /**
+   * Read whether `signer` is a currently-authorized signer of the account, via a
+   * read-only simulation of `account.is_authorized(signer)`. `readSource` is any
+   * funded G-account (used only for the simulation's source/sequence).
+   */
+  async isAuthorizedSigner(accountAddress, signer, readSource) {
+    if (!await this.isDeployed(accountAddress)) return false;
+    const { Account: Account3, TransactionBuilder: TransactionBuilder2, BASE_FEE: BASE_FEE2 } = await import('@stellar/stellar-sdk');
+    const src = new Account3(readSource, "0");
+    const op = stellarSdk.Operation.invokeHostFunction({
+      func: invokeFunc(accountAddress, "is_authorized", [bytesScVal(sec1Pubkey(signer))]),
+      auth: []
+    });
+    const tx2 = new TransactionBuilder2(src, { fee: BASE_FEE2, networkPassphrase: this.passphrase }).addOperation(op).setTimeout(30).build();
+    const sim = await this.server().simulateTransaction(tx2);
+    if (stellarSdk.rpc.Api.isSimulationError(sim)) {
+      throw new Error(`kit/stellar: is_authorized simulation failed: ${sim.error}`);
+    }
+    if (!sim.result?.retval) return false;
+    return stellarSdk.scValToNative(sim.result.retval) === true;
+  }
+};
+function sec1Pubkey(pk) {
+  const out = new Uint8Array(65);
+  out[0] = 4;
+  out.set(bigIntTo32Bytes(pk.x), 1);
+  out.set(bigIntTo32Bytes(pk.y), 33);
+  return out;
+}
+function encodeLowSSignature2(sig) {
+  const lowS2 = sig.s > SECP256R1_N2 / 2n ? SECP256R1_N2 - sig.s : sig.s;
+  const out = new Uint8Array(64);
+  out.set(bigIntTo32Bytes(sig.r), 0);
+  out.set(bigIntTo32Bytes(lowS2), 32);
+  return out;
+}
+function deviceSignatureScVal(pubkey, sig) {
+  const element = stellarSdk.nativeToScVal(
+    {
+      public_key: Buffer.from(sec1Pubkey(pubkey)),
+      signature: Buffer.from(encodeLowSSignature2(sig))
+    },
+    { type: { public_key: ["symbol", "bytes"], signature: ["symbol", "bytes"] } }
+  );
+  return stellarSdk.xdr.ScVal.scvVec([element]);
+}
+function invokeFunc(contractId, method, args) {
+  return stellarSdk.xdr.HostFunction.hostFunctionTypeInvokeContract(
+    new stellarSdk.xdr.InvokeContractArgs({
+      contractAddress: new stellarSdk.Address(contractId).toScAddress(),
+      functionName: method,
+      args
+    })
+  );
+}
+function bytesScVal(bytes) {
+  return stellarSdk.xdr.ScVal.scvBytes(Buffer.from(bytes));
+}
+
+// src/chains/stellar/StellarRelayer.ts
+var StellarRelayer = class {
+  constructor(opts) {
+    this.opts = opts;
+  }
+  /** The relayer's source/fee-payer G-account (fetched + cached from the backend). */
+  async getSource() {
+    if (this.source) return this.source;
+    const res = await fetch(`${this.opts.baseUrl}/api/stellar/relay?network=${this.opts.network}`);
+    if (!res.ok) throw new Error(`kit/stellar: relayer source lookup failed (${res.status})`);
+    const { fee_payer } = await res.json();
+    this.source = fee_payer;
+    return this.source;
+  }
+  /**
+   * POST the assembled, device-authorized transaction XDR to the relayer to sign
+   * the envelope + submit. Returns the confirmed transaction hash.
+   */
+  async submit(transactionXdr) {
+    const res = await fetch(`${this.opts.baseUrl}/api/stellar/relay`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({
+        app_id: this.opts.appId,
+        network: this.opts.network,
+        transaction: transactionXdr
+      })
+    });
+    if (!res.ok) {
+      const detail = await res.text().catch(() => "");
+      throw new Error(`kit/stellar: relay failed (${res.status}) ${detail}`);
+    }
+    const { hash: hash6 } = await res.json();
+    return hash6;
+  }
+};
+
+// src/chains/stellar/CavosStellar.ts
+var CavosStellar = class _CavosStellar {
+  constructor(identity, address, status, network, adapter, devicePubkey, relayer, sourceKeypair) {
+    this.identity = identity;
+    this.address = address;
+    this.status = status;
+    this.network = network;
+    this.adapter = adapter;
+    this.devicePubkey = devicePubkey;
+    this.relayer = relayer;
+    this.sourceKeypair = sourceKeypair;
+    /** Discriminant for the `CavosWallet` union — narrows `execute()` per chain. */
+    this.chain = "stellar";
+  }
+  get publicKey() {
+    return this.devicePubkey;
+  }
+  static async connect(opts) {
+    const identity = opts.identity ?? await opts.auth?.authenticate();
+    if (!identity) throw new Error("kit/stellar: connect requires `identity` or `auth`");
+    const signer = opts.createSigner ? await opts.createSigner(`${identity.userId}:${opts.appSalt}`) : await WebCryptoSigner.loadOrCreate({ keyId: `${identity.userId}:${opts.appSalt}` });
+    const devicePubkey = await signer.getPublicKey();
+    const adapter = new StellarAdapter({
+      network: opts.network,
+      rpcUrl: opts.rpcUrl,
+      factoryId: opts.factoryId,
+      signer
+    });
+    const addressSeed = deriveAddressSeedStellar({ userId: identity.userId, appSalt: opts.appSalt });
+    const backendUrl = opts.backendUrl ?? "https://cavos.xyz";
+    const registry = opts.registry ?? (opts.appId ? new HttpWalletRegistry({ baseUrl: backendUrl, appId: opts.appId, network: opts.network }) : defaultRegistry2);
+    const relayer = opts.relayer ?? (opts.appId ? new StellarRelayer({ baseUrl: backendUrl, appId: opts.appId, network: opts.network }) : void 0);
+    const build = (address2, status) => new _CavosStellar(identity, address2, status, opts.network, adapter, devicePubkey, relayer, opts.sourceKeypair);
+    const self = build("", "needs-device-approval");
+    const readSource = await self.resolveSource();
+    const existing = await registry.lookup(identity.userId);
+    if (existing) {
+      const isSigner2 = await adapter.isAuthorizedSigner(existing.address, devicePubkey, readSource);
+      return build(existing.address, isSigner2 ? "ready" : "needs-device-approval");
+    }
+    const address = adapter.computeAddress(addressSeed, devicePubkey);
+    if (!await adapter.isDeployed(address)) {
+      const func = adapter.buildDeploy(addressSeed, devicePubkey);
+      await self.submitHostFunction(func, void 0);
+    }
+    await registry.register({ userId: identity.userId, address, initialSigner: devicePubkey });
+    const isSigner = await adapter.isAuthorizedSigner(address, devicePubkey, readSource);
+    return build(address, isSigner ? "ready" : "needs-device-approval");
+  }
+  /** Authorize an additional device signer (device-signed via `__check_auth`). */
+  async addSigner(pubkey) {
+    const func = this.adapter.buildAddSigner(this.address, pubkey);
+    return this.submitHostFunction(func, this.address);
+  }
+  /**
+   * Enroll a passkey as an approver (2FA-style step-up). Device-signed + gasless;
+   * requires a ready device. Idempotent. Returns the passkey pubkey + tx hash.
+   */
+  async enrollPasskey(passkey, params) {
+    const enrolled = await passkey.enroll(params);
+    const { transactionHash } = await this.addApprover(enrolled.publicKey);
+    return { publicKey: enrolled.publicKey, transactionHash };
+  }
+  /** Register an already-enrolled passkey pubkey as an approver (gasless).
+   * Idempotent. Lets one passkey be registered across chains without re-prompting. */
+  async addApprover(pubkey) {
+    if (this.status !== "ready") {
+      throw new Error("kit/stellar: addApprover requires a ready, authorized device");
+    }
+    const readSource = await this.resolveSource();
+    if (await this.adapter.isApprover(this.address, pubkey, readSource)) return {};
+    const func = this.adapter.buildAddApprover(this.address, pubkey);
+    const transactionHash = await this.submitHostFunction(func, this.address);
+    return { transactionHash };
+  }
+  /**
+   * From a fresh browser (status `needs-device-approval`), approve adding THIS
+   * device using the user's synced passkey. Gasless via the relayer — the call
+   * carries the WebAuthn assertion, so no device signature is needed. Returns the
+   * tx hash. No trip back to an already-authorized device.
+   */
+  async approveThisDeviceWithPasskey(passkey) {
+    if (this.status === "ready") {
+      throw new Error("kit/stellar: this device is already an authorized signer");
+    }
+    const { leaf, nonce } = await this.passkeyLeafForThisDevice();
+    const leaves = [leaf];
+    const assertion = await passkey.assert(batchChallenge(leaves));
+    const { transactionHash } = await this.submitPasskeyApproval(assertion, leaves, 0, nonce);
+    return transactionHash;
+  }
+  /** This device's leaf + passkey nonce for a (possibly multi-chain) batch. */
+  async passkeyLeafForThisDevice() {
+    const readSource = await this.resolveSource();
+    const nonce = await this.adapter.passkeyNonce(this.address, readSource);
+    return { leaf: this.adapter.passkeyLeaf(this.devicePubkey, nonce), nonce };
+  }
+  /** Submit `add_signer_via_passkey` given a shared assertion + batch position.
+   * No device auth entry — authorized purely by the passkey assertion. */
+  async submitPasskeyApproval(assertion, leaves, leafIndex, nonce) {
+    const readSource = await this.resolveSource();
+    const digest = webauthnDigest(assertion.authenticatorData, assertion.clientDataJSON);
+    const candidates = recoverCandidatePublicKeys(assertion.r, assertion.s, digest);
+    let approver = null;
+    for (const cand of candidates) {
+      if (await this.adapter.isApprover(this.address, cand.publicKey, readSource)) {
+        approver = cand.publicKey;
+        break;
+      }
+    }
+    if (!approver) throw new Error("kit/stellar: this passkey is not a registered approver");
+    const func = this.adapter.buildAddSignerViaPasskey(
+      this.address,
+      this.devicePubkey,
+      approver,
+      nonce,
+      leaves,
+      leafIndex,
+      assertion
+    );
+    return { transactionHash: await this.submitHostFunction(func, void 0) };
+  }
+  /** Move `amount` stroops of native XLM to `destination` (device-signed). */
+  async execute(amount, destination) {
+    return this.executeTransfer(NATIVE_SAC_ID[this.network], amount, destination);
+  }
+  /** Read this account's balance of `tokenId` (defaults to native XLM), in stroops. */
+  async balance(tokenId = NATIVE_SAC_ID[this.network]) {
+    const readSource = await this.resolveSource();
+    return this.adapter.readBalance(tokenId, this.address, readSource);
+  }
+  /** Transfer `amount` of any SEP-41 token out of the account (device-signed). */
+  async executeTransfer(tokenId, amount, destination) {
+    if (this.status !== "ready") {
+      throw new Error("kit/stellar: this device is not yet an authorized signer of the wallet");
+    }
+    const func = this.adapter.buildTransfer(tokenId, this.address, destination, amount);
+    return this.submitHostFunction(func, this.address);
+  }
+  /**
+   * Register the backup signer derived from `code` as an authorized signer of
+   * this account (device-signed). Idempotent. The code never leaves the device —
+   * only the derived public key travels on-chain. Mirrors the other chains.
+   */
+  async setupRecovery(code) {
+    if (this.status !== "ready") {
+      throw new Error("kit/stellar: setupRecovery requires a ready, registered device");
+    }
+    const { publicKey: backupPubkey } = deriveBackupKey(code);
+    const readSource = await this.resolveSource();
+    if (await this.adapter.isAuthorizedSigner(this.address, backupPubkey, readSource)) return void 0;
+    return this.addSigner(backupPubkey);
+  }
+  /**
+   * Recover an account after losing every device signer: derive the backup key
+   * from `code`, use it (not the new device) to authorize `add_signer(newDevice)`,
+   * and return a ready handle bound to the new device. The address is unchanged.
+   */
+  static async recover(opts) {
+    const signer = opts.createSigner ? await opts.createSigner(`${opts.identity.userId}:${opts.appSalt}`) : await WebCryptoSigner.loadOrCreate({ keyId: `${opts.identity.userId}:${opts.appSalt}` });
+    const devicePubkey = await signer.getPublicKey();
+    const backup = BackupSigner.fromCode(opts.code);
+    const backupAdapter = new StellarAdapter({
+      network: opts.network,
+      rpcUrl: opts.rpcUrl,
+      factoryId: opts.factoryId,
+      signer: backup
+    });
+    const backendUrl = opts.backendUrl ?? "https://cavos.xyz";
+    const registry = opts.registry ?? (opts.appId ? new HttpWalletRegistry({ baseUrl: backendUrl, appId: opts.appId, network: opts.network }) : defaultRegistry2);
+    const existing = await registry.lookup(opts.identity.userId);
+    if (!existing) {
+      throw new Error("kit/stellar: no account found for this identity \u2014 nothing to recover");
+    }
+    const relayer = opts.relayer ?? (opts.appId ? new StellarRelayer({ baseUrl: backendUrl, appId: opts.appId, network: opts.network }) : void 0);
+    const backupHandle = new _CavosStellar(
+      opts.identity,
+      existing.address,
+      "ready",
+      opts.network,
+      backupAdapter,
+      devicePubkey,
+      relayer,
+      opts.sourceKeypair
+    );
+    const readSource = await backupHandle.resolveSource();
+    if (!await backupAdapter.isAuthorizedSigner(existing.address, devicePubkey, readSource)) {
+      await backupHandle.addSigner(devicePubkey);
+    }
+    const adapter = new StellarAdapter({
+      network: opts.network,
+      rpcUrl: opts.rpcUrl,
+      factoryId: opts.factoryId,
+      signer
+    });
+    return new _CavosStellar(
+      opts.identity,
+      existing.address,
+      "ready",
+      opts.network,
+      adapter,
+      devicePubkey,
+      relayer,
+      opts.sourceKeypair
+    );
+  }
+  /** The transaction source/fee-payer G-address (relayer or self-funded). */
+  async resolveSource() {
+    if (this.relayer) return this.relayer.getSource();
+    if (this.sourceKeypair) return this.sourceKeypair.publicKey();
+    throw new Error("kit/stellar: a relayer (appId) or sourceKeypair is required");
+  }
+  /**
+   * Build → simulate → device-sign auth → assemble → submit an invoke-contract
+   * host function. `authAccount` is the account whose `__check_auth` must sign the
+   * operation's Soroban auth entry (undefined for a plain factory deploy).
+   */
+  async submitHostFunction(func, authAccount) {
+    const server = this.adapter.server();
+    const sourceAddr = await this.resolveSource();
+    const simSource = new stellarSdk.Account(sourceAddr, "0");
+    const unsignedOp = stellarSdk.Operation.invokeHostFunction({ func, auth: [] });
+    const simTx = new stellarSdk.TransactionBuilder(simSource, {
+      fee: stellarSdk.BASE_FEE,
+      networkPassphrase: this.adapter.passphrase
+    }).addOperation(unsignedOp).setTimeout(180).build();
+    const sim = await server.simulateTransaction(simTx);
+    if (stellarSdk.rpc.Api.isSimulationError(sim)) {
+      throw new Error(`kit/stellar: simulation failed: ${sim.error}`);
+    }
+    const validUntil = (await server.getLatestLedger()).sequence + 100;
+    const entries = sim.result?.auth ?? [];
+    const signedAuth = [];
+    for (const entry of entries) {
+      if (authAccount && isAddressCredentialFor(entry, authAccount)) {
+        signedAuth.push(await this.adapter.signAuthEntry(entry, validUntil));
+      } else {
+        signedAuth.push(entry);
+      }
+    }
+    const account = await server.getAccount(sourceAddr);
+    const finalOp = stellarSdk.Operation.invokeHostFunction({ func, auth: signedAuth });
+    const built = new stellarSdk.TransactionBuilder(account, {
+      fee: stellarSdk.BASE_FEE,
+      networkPassphrase: this.adapter.passphrase
+    }).addOperation(finalOp).setTimeout(180).build();
+    const authSim = await server.simulateTransaction(built);
+    if (stellarSdk.rpc.Api.isSimulationError(authSim)) {
+      throw new Error(`kit/stellar: auth simulation failed: ${authSim.error}`);
+    }
+    const assembled = stellarSdk.rpc.assembleTransaction(built, authSim).build();
+    if (this.relayer) {
+      return this.relayer.submit(assembled.toXDR());
+    }
+    if (this.sourceKeypair) {
+      assembled.sign(this.sourceKeypair);
+      return this.sendAndConfirm(assembled);
+    }
+    throw new Error("kit/stellar: no relayer or sourceKeypair configured to submit");
+  }
+  /** Submit a signed tx via RPC and poll to confirmation. Returns the hash. */
+  async sendAndConfirm(tx2) {
+    const server = this.adapter.server();
+    const sent = await server.sendTransaction(tx2);
+    if (sent.status === "ERROR") {
+      throw new Error(`kit/stellar: submit rejected: ${JSON.stringify(sent.errorResult)}`);
+    }
+    const hash6 = sent.hash;
+    for (let i = 0; i < 30; i++) {
+      const got = await server.getTransaction(hash6);
+      if (got.status === stellarSdk.rpc.Api.GetTransactionStatus.SUCCESS) return hash6;
+      if (got.status === stellarSdk.rpc.Api.GetTransactionStatus.FAILED) {
+        throw new Error(`kit/stellar: tx ${hash6} failed`);
+      }
+      await new Promise((r) => setTimeout(r, 1e3));
+    }
+    throw new Error(`kit/stellar: tx ${hash6} not confirmed in time`);
+  }
+};
+function isAddressCredentialFor(entry, accountAddress) {
+  const creds = entry.credentials();
+  if (creds.switch() !== stellarSdk.xdr.SorobanCredentialsType.sorobanCredentialsAddress()) return false;
+  return stellarSdk.Address.fromScAddress(creds.address().address()).toString() === accountAddress;
+}
+var defaultRegistry2 = new InMemoryWalletRegistry();
+
 // src/recovery/HttpRecoveryClient.ts
 function toHex2(n) {
   return "0x" + n.toString(16);
@@ -1281,14 +2227,19 @@ var SOLANA_ENV = {
   mainnet: "solana-mainnet",
   testnet: "solana-devnet"
 };
+var STELLAR_ENV = {
+  mainnet: "stellar-mainnet",
+  testnet: "stellar-testnet"
+};
 var Cavos = class _Cavos {
-  constructor(identity, address, status, account, adapter, devicePubkey) {
+  constructor(identity, address, status, account, adapter, devicePubkey, paymaster) {
     this.identity = identity;
     this.address = address;
     this.status = status;
     this.account = account;
     this.adapter = adapter;
     this.devicePubkey = devicePubkey;
+    this.paymaster = paymaster;
     /** Discriminant for the `CavosWallet` union — narrows `execute()` per chain. */
     this.chain = "starknet";
     /** Request id of the pending device-addition, when status is needs-device-approval. */
@@ -1321,6 +2272,22 @@ var Cavos = class _Cavos {
         ...opts.feePayer ? { feePayer: opts.feePayer } : {}
       });
     }
+    if (opts.chain === "stellar") {
+      return CavosStellar.connect({
+        network: STELLAR_ENV[opts.network],
+        ...opts.auth ? { auth: opts.auth } : {},
+        ...opts.identity ? { identity: opts.identity } : {},
+        appSalt: opts.appSalt,
+        ...opts.appId ? { appId: opts.appId } : {},
+        ...opts.backendUrl ? { backendUrl: opts.backendUrl } : {},
+        ...opts.registry ? { registry: opts.registry } : {},
+        ...opts.rpcUrl ? { rpcUrl: opts.rpcUrl } : {},
+        ...opts.factoryId ? { factoryId: opts.factoryId } : {},
+        ...opts.createSigner ? { createSigner: opts.createSigner } : {},
+        ...opts.stellarRelayer ? { relayer: opts.stellarRelayer } : {},
+        ...opts.stellarSourceKeypair ? { sourceKeypair: opts.stellarSourceKeypair } : {}
+      });
+    }
     if (!opts.paymasterApiKey) {
       throw new Error("kit: `paymasterApiKey` is required for Starknet connections");
     }
@@ -1348,8 +2315,10 @@ var Cavos = class _Cavos {
     const provider = new starknet.RpcProvider({
       nodeUrl: opts.rpcUrl ?? STARKNET_NETWORKS[opts.network].rpcUrl
     });
+    const paymasterUrl = opts.paymasterUrl ?? CAVOS_PAYMASTER_URL[opts.network];
+    const paymasterConfig = { url: paymasterUrl, apiKey: opts.paymasterApiKey };
     const paymaster = new starknet.PaymasterRpc({
-      nodeUrl: opts.paymasterUrl ?? CAVOS_PAYMASTER_URL[opts.network],
+      nodeUrl: paymasterUrl,
       headers: { "x-paymaster-api-key": opts.paymasterApiKey }
     });
     const addressSeed = deriveAddressSeed({ userId: identity.userId, appSalt: opts.appSalt });
@@ -1364,7 +2333,7 @@ var Cavos = class _Cavos {
       cairoVersion: "1"
     });
     const backendUrl = opts.backendUrl ?? "https://cavos.xyz";
-    const registry = opts.registry ?? (opts.appId ? new HttpWalletRegistry({ baseUrl: backendUrl, appId: opts.appId, network: opts.network }) : defaultRegistry2);
+    const registry = opts.registry ?? (opts.appId ? new HttpWalletRegistry({ baseUrl: backendUrl, appId: opts.appId, network: opts.network }) : defaultRegistry3);
     const recovery = opts.recovery ?? (opts.appId ? new HttpRecoveryClient({ baseUrl: backendUrl, appId: opts.appId }) : null);
     const existing = await registry.lookup(identity.userId);
     if (existing) {
@@ -1376,7 +2345,8 @@ var Cavos = class _Cavos {
         isSigner2 ? "ready" : "needs-device-approval",
         account2,
         adapter,
-        devicePubkey
+        devicePubkey,
+        paymasterConfig
       );
       if (!isSigner2 && recovery) {
         const dedup = lastDeviceRequest.get(identity.userId);
@@ -1435,7 +2405,8 @@ var Cavos = class _Cavos {
       isSigner ? "ready" : "needs-device-approval",
       account,
       adapter,
-      devicePubkey
+      devicePubkey,
+      paymasterConfig
     );
   }
   /** This device's public key (e.g. to request addition to an existing wallet). */
@@ -1456,6 +2427,92 @@ var Cavos = class _Cavos {
   async addSigner(pubkey) {
     return this.execute([this.adapter.buildAddSigner(this.address, pubkey)]);
   }
+  /**
+   * Enroll a passkey as an APPROVER so the user can later add devices from any
+   * browser (2FA-style step-up). Requires a ready device (the enrollment call is
+   * device-signed and gasless). Idempotent: a no-op if the passkey is already an
+   * approver. Call this whenever the app decides to prompt "turn on device
+   * approvals". Returns the passkey's public key + the enrollment tx hash.
+   */
+  async enrollPasskey(passkey, params) {
+    const enrolled = await passkey.enroll(params);
+    const { transactionHash } = await this.addApprover(enrolled.publicKey);
+    return { publicKey: enrolled.publicKey, transactionHash };
+  }
+  /**
+   * Register an ALREADY-enrolled passkey public key as an approver (gasless,
+   * device-signed). Idempotent. Use this to register ONE passkey across multiple
+   * chains without re-prompting `passkey.enroll()` on each: enroll once, then
+   * call `addApprover(pubkey)` on each chain's wallet.
+   */
+  async addApprover(pubkey) {
+    if (this.status !== "ready") {
+      throw new Error("kit: addApprover requires a ready, authorized device");
+    }
+    if (await this.adapter.isApprover(this.address, pubkey)) return {};
+    const { transactionHash } = await this.execute([
+      this.adapter.buildAddApprover(this.address, pubkey)
+    ]);
+    return { transactionHash };
+  }
+  /**
+   * From a brand-new browser (status `needs-device-approval`), use the user's
+   * synced passkey to authorize adding THIS device — no trip back to an already-
+   * authorized device.
+   *
+   * `add_signer_via_passkey` is a public external authorized by the embedded
+   * WebAuthn assertion (no device signature), so by default we sponsor it through
+   * the Cavos paymaster's `paymaster_executeDirectTransaction` (the forwarder's
+   * `execute_sponsored` runs a generic call — it does NOT require SNIP-9). Pass a
+   * custom `submit` to route it through your own relayer instead. Returns the tx.
+   */
+  async approveThisDeviceWithPasskey(opts) {
+    if (this.status === "ready") {
+      throw new Error("kit: this device is already an authorized signer");
+    }
+    const { leaf, nonce } = await this.passkeyLeafForThisDevice();
+    const leaves = [leaf];
+    const assertion = await opts.passkey.assert(batchChallenge(leaves));
+    return this.submitPasskeyApproval(assertion, leaves, 0, nonce, opts.submit);
+  }
+  /** This device's leaf + the current passkey nonce, for a (possibly multi-chain)
+   * passkey approval batch. See `approveDeviceEverywhere`. */
+  async passkeyLeafForThisDevice() {
+    const nonce = await this.adapter.getPasskeyNonce(this.address);
+    return { leaf: this.adapter.passkeyLeaf(this.devicePubkey, nonce), nonce };
+  }
+  /** Submit `add_signer_via_passkey` given a (shared) assertion + this chain's
+   * position in the batch. The assertion doesn't carry the passkey pubkey, so we
+   * recover both candidates and pick the enrolled approver via the on-chain view
+   * (no backend). Defaults to sponsoring through the paymaster. */
+  async submitPasskeyApproval(assertion, leaves, leafIndex, nonce, submit) {
+    const digest = webauthnDigest(assertion.authenticatorData, assertion.clientDataJSON);
+    const candidates = recoverCandidatePublicKeys(assertion.r, assertion.s, digest);
+    let yParity = null;
+    for (const cand of candidates) {
+      if (await this.adapter.isApprover(this.address, cand.publicKey)) {
+        yParity = cand.yParity;
+        break;
+      }
+    }
+    if (yParity === null) {
+      throw new Error("kit: this passkey is not a registered approver of the wallet");
+    }
+    const call = this.adapter.buildAddSignerViaPasskey(
+      this.address,
+      this.devicePubkey,
+      nonce,
+      leaves,
+      leafIndex,
+      assertion,
+      yParity
+    );
+    if (submit) return submit(call);
+    if (!this.paymaster) {
+      throw new Error("kit: no paymaster configured \u2014 pass a `submit` relayer to approveThisDeviceWithPasskey");
+    }
+    return paymasterExecuteDirect(this.paymaster, this.address, call);
+  }
   /**
    * Register a self-custodial backup signer derived from `code`, so the account
    * can be recovered after the user loses every device. Idempotent: if the
@@ -1497,7 +2554,7 @@ var Cavos = class _Cavos {
     const backup = BackupSigner.fromCode(opts.code);
     const backupAdapter = new StarknetAdapter({ classHash, signer: backup, provider });
     const backendUrl = opts.backendUrl ?? "https://cavos.xyz";
-    const registry = opts.registry ?? (opts.appId ? new HttpWalletRegistry({ baseUrl: backendUrl, appId: opts.appId, network }) : defaultRegistry2);
+    const registry = opts.registry ?? (opts.appId ? new HttpWalletRegistry({ baseUrl: backendUrl, appId: opts.appId, network }) : defaultRegistry3);
     const existing = await registry.lookup(opts.identity.userId);
     if (!existing) {
       throw new Error("kit: no account found for this identity \u2014 nothing to recover");
@@ -1532,7 +2589,7 @@ var Cavos = class _Cavos {
     return new _Cavos(opts.identity, existing.address, "ready", account, adapter, devicePubkey);
   }
 };
-var defaultRegistry2 = new InMemoryWalletRegistry();
+var defaultRegistry3 = new InMemoryWalletRegistry();
 var DEVICE_REQUEST_DEDUP_MS = 5 * 60 * 1e3;
 var lastDeviceRequest = /* @__PURE__ */ new Map();
 async function isDeployed(provider, address) {
@@ -1543,6 +2600,58 @@ async function isDeployed(provider, address) {
     return false;
   }
 }
+async function approveDeviceEverywhere(wallets, passkey) {
+  const targets = wallets.filter((w) => w.status === "needs-device-approval");
+  if (targets.length === 0) return [];
+  const infos = await Promise.all(targets.map((w) => w.passkeyLeafForThisDevice()));
+  const leaves = infos.map((i) => i.leaf);
+  const assertion = await passkey.assert(batchChallenge(leaves));
+  const out = [];
+  for (let i = 0; i < targets.length; i++) {
+    const { transactionHash } = await targets[i].submitPasskeyApproval(
+      assertion,
+      leaves,
+      i,
+      infos[i].nonce
+    );
+    out.push({ chain: targets[i].chain, transactionHash });
+  }
+  return out;
+}
+async function paymasterExecuteDirect(paymaster, userAddress, call) {
+  const body = {
+    jsonrpc: "2.0",
+    id: 1,
+    method: "paymaster_executeDirectTransaction",
+    params: {
+      transaction: {
+        type: "invoke",
+        invoke: {
+          user_address: userAddress,
+          execute_from_outside_call: {
+            to: call.contractAddress,
+            selector: starknet.hash.getSelectorFromName(call.entrypoint),
+            calldata: call.calldata.map((c) => starknet.num.toHex(c))
+          }
+        }
+      },
+      parameters: { version: "0x1", fee_mode: { mode: "sponsored" } }
+    }
+  };
+  const res = await fetch(paymaster.url, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      ...paymaster.apiKey ? { "x-paymaster-api-key": paymaster.apiKey } : {}
+    },
+    body: JSON.stringify(body)
+  });
+  const json = await res.json();
+  if (json.error) {
+    throw new Error(`kit: paymaster passkey approval failed: ${JSON.stringify(json.error)}`);
+  }
+  return { transactionHash: json.result?.transaction_hash ?? json.result?.tracking_id };
+}
 
 // src/auth/AuthProvider.ts
 var StaticIdentity = class {
@@ -1690,27 +2799,122 @@ function bytesToChunks(bytes) {
   for (const b of bytes.subarray(0, 31)) w = w << 8n | BigInt(b);
   return w;
 }
+var PasskeySigner = class {
+  constructor(opts = {}) {
+    if (typeof window === "undefined" || !navigator.credentials) {
+      throw new Error("kit/passkey: WebAuthn is only available in a browser");
+    }
+    this.rpId = opts.rpId ?? window.location.hostname;
+    this.rpName = opts.rpName ?? this.rpId;
+    if (isIpAddress(this.rpId)) {
+      throw new Error(
+        `kit/passkey: passkeys can't use an IP address as the domain ("${this.rpId}"). Use http://localhost, a real HTTPS domain, or a tunnel (cloudflared/ngrok) \u2014 or pass an explicit \`rpId\`. (The silent device key works over an IP; passkeys don't.)`
+      );
+    }
+  }
+  /** True if this platform advertises a usable passkey (platform authenticator). */
+  static async isSupported() {
+    if (typeof window === "undefined" || !window.PublicKeyCredential) return false;
+    try {
+      return await window.PublicKeyCredential.isUserVerifyingPlatformAuthenticatorAvailable();
+    } catch {
+      return false;
+    }
+  }
+  /** Create a new synced passkey and return its P-256 public key. */
+  async enroll(params) {
+    const challenge = crypto.getRandomValues(new Uint8Array(32));
+    const cred = await navigator.credentials.create({
+      publicKey: {
+        challenge: buf(challenge),
+        rp: { id: this.rpId, name: this.rpName },
+        user: {
+          id: buf(userHandle(params.userId)),
+          name: params.userName,
+          displayName: params.displayName ?? params.userName
+        },
+        pubKeyCredParams: [{ type: "public-key", alg: -7 }],
+        // ES256 (P-256)
+        authenticatorSelection: {
+          residentKey: "required",
+          requireResidentKey: true,
+          userVerification: "preferred"
+        },
+        attestation: "none"
+      }
+    });
+    if (!cred) throw new Error("kit/passkey: enrollment cancelled");
+    const response = cred.response;
+    const spki = new Uint8Array(response.getPublicKey());
+    return { publicKey: spkiToPublicKey(spki), credentialId: new Uint8Array(cred.rawId) };
+  }
+  /**
+   * Produce a WebAuthn assertion over `challenge` (a 32-byte value the caller
+   * derives from the signer being added + the on-chain nonce). Uses discoverable
+   * credentials — no `allowCredentials` — so it works on a brand-new browser.
+   */
+  async assert(challenge) {
+    const cred = await navigator.credentials.get({
+      publicKey: {
+        challenge: buf(challenge),
+        rpId: this.rpId,
+        allowCredentials: [],
+        userVerification: "preferred"
+      }
+    });
+    if (!cred) throw new Error("kit/passkey: assertion cancelled");
+    const response = cred.response;
+    const authenticatorData = new Uint8Array(response.authenticatorData);
+    const clientDataJSON = new Uint8Array(response.clientDataJSON);
+    const { r, s } = derToRs(new Uint8Array(response.signature));
+    const challengeOffset = challengeOffsetOf(clientDataJSON, base64urlEncode(challenge));
+    return { authenticatorData, clientDataJSON, r, s, challengeOffset };
+  }
+};
+function isIpAddress(host) {
+  if (/^\d{1,3}(\.\d{1,3}){3}$/.test(host)) return true;
+  if (host.includes(":")) return true;
+  return false;
+}
+function userHandle(userId) {
+  const bytes = new TextEncoder().encode(userId);
+  return bytes.length <= 64 ? bytes : sha256.sha256(bytes);
+}
+function buf(bytes) {
+  return bytes.slice();
+}
 
 exports.BackupSigner = BackupSigner;
 exports.Cavos = Cavos;
 exports.CavosAuth = CavosAuth;
 exports.CavosSolana = CavosSolana;
+exports.CavosStellar = CavosStellar;
 exports.DEVICE_ACCOUNT_CLASS_HASH = DEVICE_ACCOUNT_CLASS_HASH;
 exports.DEVICE_ACCOUNT_PROGRAM_ID = DEVICE_ACCOUNT_PROGRAM_ID;
+exports.DEVICE_ACCOUNT_WASM_HASH = DEVICE_ACCOUNT_WASM_HASH;
+exports.FACTORY_CONTRACT_ID = FACTORY_CONTRACT_ID;
 exports.HttpRecoveryClient = HttpRecoveryClient;
 exports.HttpWalletRegistry = HttpWalletRegistry;
 exports.InMemoryWalletRegistry = InMemoryWalletRegistry;
+exports.NATIVE_SAC_ID = NATIVE_SAC_ID;
+exports.PasskeySigner = PasskeySigner;
 exports.SECP256R1_PROGRAM_ID = SECP256R1_PROGRAM_ID;
 exports.SOLANA_NETWORKS = SOLANA_NETWORKS;
 exports.STARKNET_NETWORKS = STARKNET_NETWORKS;
+exports.STELLAR_NETWORKS = STELLAR_NETWORKS;
 exports.SolanaAdapter = SolanaAdapter;
 exports.SolanaRelayer = SolanaRelayer;
 exports.StarknetAdapter = StarknetAdapter;
 exports.StarknetDeviceSigner = StarknetDeviceSigner;
 exports.StaticIdentity = StaticIdentity;
+exports.StellarAdapter = StellarAdapter;
+exports.StellarRelayer = StellarRelayer;
 exports.UDC_ADDRESS = UDC_ADDRESS;
 exports.WebCryptoSigner = WebCryptoSigner;
 exports.anchorDiscriminator = anchorDiscriminator;
+exports.approveDeviceEverywhere = approveDeviceEverywhere;
+exports.base64urlEncode = base64urlEncode;
+exports.batchChallenge = batchChallenge;
 exports.bigIntTo32Bytes = bigIntTo32Bytes;
 exports.buildSecp256r1Instruction = buildSecp256r1Instruction;
 exports.bytesToBigInt = bytesToBigInt;
@@ -1718,13 +2922,20 @@ exports.bytesToHex = bytesToHex;
 exports.compressedPubkey = compressedPubkey;
 exports.deriveAddressSeed = deriveAddressSeed;
 exports.deriveAddressSeedSolana = deriveAddressSeedSolana;
+exports.deriveAddressSeedStellar = deriveAddressSeedStellar;
 exports.deriveBackupKey = deriveBackupKey;
+exports.deviceSignatureScVal = deviceSignatureScVal;
 exports.encodeLowSSignature = encodeLowSSignature;
+exports.encodeStellarLowSSignature = encodeLowSSignature2;
 exports.generateRecoveryCode = generateRecoveryCode;
 exports.hexToBytes = hexToBytes;
+exports.lowS = lowS;
+exports.recoverCandidatePublicKeys = recoverCandidatePublicKeys;
 exports.recoverYParity = recoverYParity;
+exports.sec1Pubkey = sec1Pubkey;
 exports.serializeInstructions = serializeInstructions;
 exports.signatureToFelts = signatureToFelts;
 exports.u256ToFelts = u256ToFelts;
+exports.webauthnDigest = webauthnDigest;
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map