@chipi-stack/backend 14.6.0 → 14.7.0

package/dist/index.d.mts

@@ -481,7 +481,7 @@ declare class ChipiSDK {
      * });
      * ```
      */
-    signTypedData({ params, }: {
+    signTypedData({ params }: {
         params: SignTypedDataParams;
     }): Promise<SignTypedDataResult>;
     /**
@@ -1142,6 +1142,51 @@ declare function buildEd25519Envelope(params: {
      */
     ownerIndex?: bigint;
 }): Promise<bigint[]>;
+/**
+ * Build a V2_SNIP12 Ed25519 envelope from an **externally-produced**
+ * signature — the Phantom / Solana flow. Phantom (and every external
+ * Ed25519 wallet) never exposes the private key: the user signs via
+ * `window.solana.signMessage(...)`, which returns a 64-byte signature
+ * (R‖s). This is the from-signature counterpart of
+ * `buildEd25519Envelope`, mirroring `buildEip191EnvelopeFromSignature`
+ * for MetaMask.
+ *
+ * IMPORTANT — what the wallet MUST sign:
+ *   The wallet must sign the EXACT bytes returned by
+ *   `ed25519SignedBytes(messageHash)` — the 64-byte hex-ASCII encoding
+ *   of the SNIP-12 OE hash — NOT the raw 32-byte `messageHash`. The
+ *   Cairo verifier reconstructs those same bytes from `messageHash`, so
+ *   a mismatch fails on chain. The dashboard adapter does:
+ *     await window.solana.connect();
+ *     // Phantom returns the 32-byte Ed25519 pubkey as a Solana PublicKey;
+ *     // `.toBytes()` is the Uint8Array this API expects.
+ *     const publicKey = window.solana.publicKey.toBytes();
+ *     const msg = ed25519SignedBytes(messageHash);
+ *     // Phantom's signMessage returns { signature: Uint8Array (64B), publicKey }.
+ *     const { signature } = await window.solana.signMessage(msg);
+ *     const env = await buildEd25519EnvelopeFromSignature({
+ *       signature, publicKey, messageHash,
+ *     });
+ *
+ * Async (unlike the synchronous EIP-191 from-signature path): the
+ * Garaga WASM hint builder must be initialized to produce the EC hints
+ * the Cairo Ed25519 verifier needs. The issue sketch (#311) showed a
+ * sync return; Ed25519 cannot avoid the WASM init that secp256k1 does.
+ */
+declare function buildEd25519EnvelopeFromSignature(params: {
+    /** 64-byte Ed25519 signature R(32)‖s(32) from the wallet's signMessage. */
+    signature: Uint8Array;
+    /** 32-byte Ed25519 public key (as Phantom returns it). */
+    publicKey: Uint8Array;
+    /** SNIP-12 hash of the OutsideExecution — see oe.ts::computeOeHash. */
+    messageHash: bigint;
+    /**
+     * Owner index in the wallet's owner_set. **Defaults to 0n (primary).**
+     * MUST fit in u32. Same semantics + footgun as `buildEd25519Envelope`:
+     * pass the INDEX, never an `ed25519OwnerId` commitment.
+     */
+    ownerIndex?: bigint;
+}): Promise<bigint[]>;
 
 /**
  * EIP-191 secp256k1 signer for SHHH V8.4 ShhhAccount.
@@ -2203,4 +2248,4 @@ declare function executeShhhSponsoredRaw(params: {
     chainId?: bigint | string;
 }): Promise<string>;
 
-export { ANY_CALLER_FELT, APPLE_ISSUER, type AppleTokenResponse, BOOTSTRAP_DOMAIN_SEPARATOR, type BootstrapMessageParams, type BuildBootstrapSignedCallParams, type BuildMigrationCallsParams, ChipiBrowserSDK, ChipiClient, ChipiPaymasterAdapter, ChipiSDK, ChipiServerSDK, ChipiSessions, ChipiSkuPurchases, ChipiSkus, ChipiTransactions, ChipiWallets, type ComputeAddressInput, DEFAULT_OP_EXPIRY_SECONDS, type Eip191Pubkey, ISIGNER_CANONICAL_LABEL, ISIGNER_ID, ISRC9_V2_ID, type JwtAppleSubPubkey, MAX_OE_VALIDITY_WINDOW_SECONDS, MIN_THRESHOLD_OWNERS, type NewOwnerInput, OE_DOMAIN_NAME, OE_DOMAIN_REVISION, OE_DOMAIN_VERSION, OP_ADD_OWNER, OP_REMOVE_OWNER, OP_ROTATE_OWNER, OP_SET_THRESHOLD, type OutsideExecution, type OwnerRole, ROLE_GUARDIAN, ROLE_OWNER, SIG_VERSION_V1_HEX_ASCII, SIG_VERSION_V2_SNIP12, SIG_VERSION_V2_THRESHOLD, STARKNET_MESSAGE_PREFIX, type ShhhX402Wallet, TIMELOCK_SECONDS, VIEW_SELECTORS, type WebAuthnPubkey, X402Facilitator, type X402FacilitatorCreateOptions, type X402MiddlewareConfig, type X402MiddlewareFlatConfig, X402ShhhClient, type X402ShhhClientConfig, assertValidV2Snip12Envelope, buildBootstrapSignedCall, buildCancelPendingOpCall, buildCancelRecoveryCall, buildEd25519Envelope, buildEip191EnvelopeFromPrivateKey, buildEip191EnvelopeFromSignature, buildExecuteAddOwnerCall, buildExecuteRemoveOwnerCall, buildExecuteRotateOwnerCall, buildExecuteSetThresholdCall, buildFinalizeRecoveryCall, buildInitiateRecoveryCall, buildJwtAppleSubEnvelopeFromTestKey, buildJwtAppleSubEnvelopeFromTokenResponse, buildMigrationCalls, buildOutsideExecution, buildProposeAddOwnerCall, buildProposeRemoveOwnerCall, buildProposeRotateOwnerCall, buildProposeSetThresholdCall, buildStarkEnvelope, buildThresholdEnvelope, buildWebAuthnEnvelopeFromAssertion, buildWebAuthnEnvelopeFromPrivateKey, byteArrayToFelts, computeAddressSalt, computeBootstrapMessage, computeISignerId, computeOeHash, computeShhhAddress, computeSnip12Hash, decryptPrivateKey, ed25519OwnerId, ed25519PubkeyFelts, ed25519SignedBytes, eip191OwnerId, eip191PubkeyFelts, encryptPrivateKey, estimateThresholdGasOverhead, executeShhhSponsoredRaw, hashCall, hashCalls, hashOutsideExecutionStruct, hashStarknetDomain, isReadyToExecute, jwtAppleSubHash, jwtAppleSubOwnerId, jwtAppleSubPubkeyFelts, labelToFelt, locateSubClaim, messageHashToNonceB64url, ownerCommitment, parseAppleIdToken, parseDerEcdsaSignature, parseEip191Signature, parseThresholdEnvelope, resolveShhhChainId, secondsUntilExecutable, serializeExecuteFromOutsideV2Calldata, signBootstrapMessage, signTypedData, snip12HashToHexAsciiBytes, starkOwnerId, starkPubkeyFelts, webauthnOwnerId, webauthnPubkeyFelts, wrapV2Snip12Envelope, wrapV2ThresholdEnvelope, x402Middleware };
+export { ANY_CALLER_FELT, APPLE_ISSUER, type AppleTokenResponse, BOOTSTRAP_DOMAIN_SEPARATOR, type BootstrapMessageParams, type BuildBootstrapSignedCallParams, type BuildMigrationCallsParams, ChipiBrowserSDK, ChipiClient, ChipiPaymasterAdapter, ChipiSDK, ChipiServerSDK, ChipiSessions, ChipiSkuPurchases, ChipiSkus, ChipiTransactions, ChipiWallets, type ComputeAddressInput, DEFAULT_OP_EXPIRY_SECONDS, type Eip191Pubkey, ISIGNER_CANONICAL_LABEL, ISIGNER_ID, ISRC9_V2_ID, type JwtAppleSubPubkey, MAX_OE_VALIDITY_WINDOW_SECONDS, MIN_THRESHOLD_OWNERS, type NewOwnerInput, OE_DOMAIN_NAME, OE_DOMAIN_REVISION, OE_DOMAIN_VERSION, OP_ADD_OWNER, OP_REMOVE_OWNER, OP_ROTATE_OWNER, OP_SET_THRESHOLD, type OutsideExecution, type OwnerRole, ROLE_GUARDIAN, ROLE_OWNER, SIG_VERSION_V1_HEX_ASCII, SIG_VERSION_V2_SNIP12, SIG_VERSION_V2_THRESHOLD, STARKNET_MESSAGE_PREFIX, type ShhhX402Wallet, TIMELOCK_SECONDS, VIEW_SELECTORS, type WebAuthnPubkey, X402Facilitator, type X402FacilitatorCreateOptions, type X402MiddlewareConfig, type X402MiddlewareFlatConfig, X402ShhhClient, type X402ShhhClientConfig, assertValidV2Snip12Envelope, buildBootstrapSignedCall, buildCancelPendingOpCall, buildCancelRecoveryCall, buildEd25519Envelope, buildEd25519EnvelopeFromSignature, buildEip191EnvelopeFromPrivateKey, buildEip191EnvelopeFromSignature, buildExecuteAddOwnerCall, buildExecuteRemoveOwnerCall, buildExecuteRotateOwnerCall, buildExecuteSetThresholdCall, buildFinalizeRecoveryCall, buildInitiateRecoveryCall, buildJwtAppleSubEnvelopeFromTestKey, buildJwtAppleSubEnvelopeFromTokenResponse, buildMigrationCalls, buildOutsideExecution, buildProposeAddOwnerCall, buildProposeRemoveOwnerCall, buildProposeRotateOwnerCall, buildProposeSetThresholdCall, buildStarkEnvelope, buildThresholdEnvelope, buildWebAuthnEnvelopeFromAssertion, buildWebAuthnEnvelopeFromPrivateKey, byteArrayToFelts, computeAddressSalt, computeBootstrapMessage, computeISignerId, computeOeHash, computeShhhAddress, computeSnip12Hash, decryptPrivateKey, ed25519OwnerId, ed25519PubkeyFelts, ed25519SignedBytes, eip191OwnerId, eip191PubkeyFelts, encryptPrivateKey, estimateThresholdGasOverhead, executeShhhSponsoredRaw, hashCall, hashCalls, hashOutsideExecutionStruct, hashStarknetDomain, isReadyToExecute, jwtAppleSubHash, jwtAppleSubOwnerId, jwtAppleSubPubkeyFelts, labelToFelt, locateSubClaim, messageHashToNonceB64url, ownerCommitment, parseAppleIdToken, parseDerEcdsaSignature, parseEip191Signature, parseThresholdEnvelope, resolveShhhChainId, secondsUntilExecutable, serializeExecuteFromOutsideV2Calldata, signBootstrapMessage, signTypedData, snip12HashToHexAsciiBytes, starkOwnerId, starkPubkeyFelts, webauthnOwnerId, webauthnPubkeyFelts, wrapV2Snip12Envelope, wrapV2ThresholdEnvelope, x402Middleware };

package/dist/index.d.ts

@@ -481,7 +481,7 @@ declare class ChipiSDK {
      * });
      * ```
      */
-    signTypedData({ params, }: {
+    signTypedData({ params }: {
         params: SignTypedDataParams;
     }): Promise<SignTypedDataResult>;
     /**
@@ -1142,6 +1142,51 @@ declare function buildEd25519Envelope(params: {
      */
     ownerIndex?: bigint;
 }): Promise<bigint[]>;
+/**
+ * Build a V2_SNIP12 Ed25519 envelope from an **externally-produced**
+ * signature — the Phantom / Solana flow. Phantom (and every external
+ * Ed25519 wallet) never exposes the private key: the user signs via
+ * `window.solana.signMessage(...)`, which returns a 64-byte signature
+ * (R‖s). This is the from-signature counterpart of
+ * `buildEd25519Envelope`, mirroring `buildEip191EnvelopeFromSignature`
+ * for MetaMask.
+ *
+ * IMPORTANT — what the wallet MUST sign:
+ *   The wallet must sign the EXACT bytes returned by
+ *   `ed25519SignedBytes(messageHash)` — the 64-byte hex-ASCII encoding
+ *   of the SNIP-12 OE hash — NOT the raw 32-byte `messageHash`. The
+ *   Cairo verifier reconstructs those same bytes from `messageHash`, so
+ *   a mismatch fails on chain. The dashboard adapter does:
+ *     await window.solana.connect();
+ *     // Phantom returns the 32-byte Ed25519 pubkey as a Solana PublicKey;
+ *     // `.toBytes()` is the Uint8Array this API expects.
+ *     const publicKey = window.solana.publicKey.toBytes();
+ *     const msg = ed25519SignedBytes(messageHash);
+ *     // Phantom's signMessage returns { signature: Uint8Array (64B), publicKey }.
+ *     const { signature } = await window.solana.signMessage(msg);
+ *     const env = await buildEd25519EnvelopeFromSignature({
+ *       signature, publicKey, messageHash,
+ *     });
+ *
+ * Async (unlike the synchronous EIP-191 from-signature path): the
+ * Garaga WASM hint builder must be initialized to produce the EC hints
+ * the Cairo Ed25519 verifier needs. The issue sketch (#311) showed a
+ * sync return; Ed25519 cannot avoid the WASM init that secp256k1 does.
+ */
+declare function buildEd25519EnvelopeFromSignature(params: {
+    /** 64-byte Ed25519 signature R(32)‖s(32) from the wallet's signMessage. */
+    signature: Uint8Array;
+    /** 32-byte Ed25519 public key (as Phantom returns it). */
+    publicKey: Uint8Array;
+    /** SNIP-12 hash of the OutsideExecution — see oe.ts::computeOeHash. */
+    messageHash: bigint;
+    /**
+     * Owner index in the wallet's owner_set. **Defaults to 0n (primary).**
+     * MUST fit in u32. Same semantics + footgun as `buildEd25519Envelope`:
+     * pass the INDEX, never an `ed25519OwnerId` commitment.
+     */
+    ownerIndex?: bigint;
+}): Promise<bigint[]>;
 
 /**
  * EIP-191 secp256k1 signer for SHHH V8.4 ShhhAccount.
@@ -2203,4 +2248,4 @@ declare function executeShhhSponsoredRaw(params: {
     chainId?: bigint | string;
 }): Promise<string>;
 
-export { ANY_CALLER_FELT, APPLE_ISSUER, type AppleTokenResponse, BOOTSTRAP_DOMAIN_SEPARATOR, type BootstrapMessageParams, type BuildBootstrapSignedCallParams, type BuildMigrationCallsParams, ChipiBrowserSDK, ChipiClient, ChipiPaymasterAdapter, ChipiSDK, ChipiServerSDK, ChipiSessions, ChipiSkuPurchases, ChipiSkus, ChipiTransactions, ChipiWallets, type ComputeAddressInput, DEFAULT_OP_EXPIRY_SECONDS, type Eip191Pubkey, ISIGNER_CANONICAL_LABEL, ISIGNER_ID, ISRC9_V2_ID, type JwtAppleSubPubkey, MAX_OE_VALIDITY_WINDOW_SECONDS, MIN_THRESHOLD_OWNERS, type NewOwnerInput, OE_DOMAIN_NAME, OE_DOMAIN_REVISION, OE_DOMAIN_VERSION, OP_ADD_OWNER, OP_REMOVE_OWNER, OP_ROTATE_OWNER, OP_SET_THRESHOLD, type OutsideExecution, type OwnerRole, ROLE_GUARDIAN, ROLE_OWNER, SIG_VERSION_V1_HEX_ASCII, SIG_VERSION_V2_SNIP12, SIG_VERSION_V2_THRESHOLD, STARKNET_MESSAGE_PREFIX, type ShhhX402Wallet, TIMELOCK_SECONDS, VIEW_SELECTORS, type WebAuthnPubkey, X402Facilitator, type X402FacilitatorCreateOptions, type X402MiddlewareConfig, type X402MiddlewareFlatConfig, X402ShhhClient, type X402ShhhClientConfig, assertValidV2Snip12Envelope, buildBootstrapSignedCall, buildCancelPendingOpCall, buildCancelRecoveryCall, buildEd25519Envelope, buildEip191EnvelopeFromPrivateKey, buildEip191EnvelopeFromSignature, buildExecuteAddOwnerCall, buildExecuteRemoveOwnerCall, buildExecuteRotateOwnerCall, buildExecuteSetThresholdCall, buildFinalizeRecoveryCall, buildInitiateRecoveryCall, buildJwtAppleSubEnvelopeFromTestKey, buildJwtAppleSubEnvelopeFromTokenResponse, buildMigrationCalls, buildOutsideExecution, buildProposeAddOwnerCall, buildProposeRemoveOwnerCall, buildProposeRotateOwnerCall, buildProposeSetThresholdCall, buildStarkEnvelope, buildThresholdEnvelope, buildWebAuthnEnvelopeFromAssertion, buildWebAuthnEnvelopeFromPrivateKey, byteArrayToFelts, computeAddressSalt, computeBootstrapMessage, computeISignerId, computeOeHash, computeShhhAddress, computeSnip12Hash, decryptPrivateKey, ed25519OwnerId, ed25519PubkeyFelts, ed25519SignedBytes, eip191OwnerId, eip191PubkeyFelts, encryptPrivateKey, estimateThresholdGasOverhead, executeShhhSponsoredRaw, hashCall, hashCalls, hashOutsideExecutionStruct, hashStarknetDomain, isReadyToExecute, jwtAppleSubHash, jwtAppleSubOwnerId, jwtAppleSubPubkeyFelts, labelToFelt, locateSubClaim, messageHashToNonceB64url, ownerCommitment, parseAppleIdToken, parseDerEcdsaSignature, parseEip191Signature, parseThresholdEnvelope, resolveShhhChainId, secondsUntilExecutable, serializeExecuteFromOutsideV2Calldata, signBootstrapMessage, signTypedData, snip12HashToHexAsciiBytes, starkOwnerId, starkPubkeyFelts, webauthnOwnerId, webauthnPubkeyFelts, wrapV2Snip12Envelope, wrapV2ThresholdEnvelope, x402Middleware };
+export { ANY_CALLER_FELT, APPLE_ISSUER, type AppleTokenResponse, BOOTSTRAP_DOMAIN_SEPARATOR, type BootstrapMessageParams, type BuildBootstrapSignedCallParams, type BuildMigrationCallsParams, ChipiBrowserSDK, ChipiClient, ChipiPaymasterAdapter, ChipiSDK, ChipiServerSDK, ChipiSessions, ChipiSkuPurchases, ChipiSkus, ChipiTransactions, ChipiWallets, type ComputeAddressInput, DEFAULT_OP_EXPIRY_SECONDS, type Eip191Pubkey, ISIGNER_CANONICAL_LABEL, ISIGNER_ID, ISRC9_V2_ID, type JwtAppleSubPubkey, MAX_OE_VALIDITY_WINDOW_SECONDS, MIN_THRESHOLD_OWNERS, type NewOwnerInput, OE_DOMAIN_NAME, OE_DOMAIN_REVISION, OE_DOMAIN_VERSION, OP_ADD_OWNER, OP_REMOVE_OWNER, OP_ROTATE_OWNER, OP_SET_THRESHOLD, type OutsideExecution, type OwnerRole, ROLE_GUARDIAN, ROLE_OWNER, SIG_VERSION_V1_HEX_ASCII, SIG_VERSION_V2_SNIP12, SIG_VERSION_V2_THRESHOLD, STARKNET_MESSAGE_PREFIX, type ShhhX402Wallet, TIMELOCK_SECONDS, VIEW_SELECTORS, type WebAuthnPubkey, X402Facilitator, type X402FacilitatorCreateOptions, type X402MiddlewareConfig, type X402MiddlewareFlatConfig, X402ShhhClient, type X402ShhhClientConfig, assertValidV2Snip12Envelope, buildBootstrapSignedCall, buildCancelPendingOpCall, buildCancelRecoveryCall, buildEd25519Envelope, buildEd25519EnvelopeFromSignature, buildEip191EnvelopeFromPrivateKey, buildEip191EnvelopeFromSignature, buildExecuteAddOwnerCall, buildExecuteRemoveOwnerCall, buildExecuteRotateOwnerCall, buildExecuteSetThresholdCall, buildFinalizeRecoveryCall, buildInitiateRecoveryCall, buildJwtAppleSubEnvelopeFromTestKey, buildJwtAppleSubEnvelopeFromTokenResponse, buildMigrationCalls, buildOutsideExecution, buildProposeAddOwnerCall, buildProposeRemoveOwnerCall, buildProposeRotateOwnerCall, buildProposeSetThresholdCall, buildStarkEnvelope, buildThresholdEnvelope, buildWebAuthnEnvelopeFromAssertion, buildWebAuthnEnvelopeFromPrivateKey, byteArrayToFelts, computeAddressSalt, computeBootstrapMessage, computeISignerId, computeOeHash, computeShhhAddress, computeSnip12Hash, decryptPrivateKey, ed25519OwnerId, ed25519PubkeyFelts, ed25519SignedBytes, eip191OwnerId, eip191PubkeyFelts, encryptPrivateKey, estimateThresholdGasOverhead, executeShhhSponsoredRaw, hashCall, hashCalls, hashOutsideExecutionStruct, hashStarknetDomain, isReadyToExecute, jwtAppleSubHash, jwtAppleSubOwnerId, jwtAppleSubPubkeyFelts, labelToFelt, locateSubClaim, messageHashToNonceB64url, ownerCommitment, parseAppleIdToken, parseDerEcdsaSignature, parseEip191Signature, parseThresholdEnvelope, resolveShhhChainId, secondsUntilExecutable, serializeExecuteFromOutsideV2Calldata, signBootstrapMessage, signTypedData, snip12HashToHexAsciiBytes, starkOwnerId, starkPubkeyFelts, webauthnOwnerId, webauthnPubkeyFelts, wrapV2Snip12Envelope, wrapV2ThresholdEnvelope, x402Middleware };

package/dist/index.js

@@ -405,21 +405,52 @@ async function buildEd25519Envelope(params) {
     );
   }
   const ed = await import('@noble/ed25519');
-  const garaga = await ensureGaragaInit();
   const publicKey = await ed.getPublicKeyAsync(params.privateKey);
   const signedBytes = ed25519SignedBytes(params.messageHash);
   const signature = await ed.signAsync(signedBytes, params.privateKey);
-  const R = signature.slice(0, 32);
-  const s = signature.slice(32, 64);
-  const payload = garaga.eddsaCalldataBuilder(
-    bytesToLeBigInt(R),
-    bytesToLeBigInt(s),
-    bytesToLeBigInt(publicKey),
+  return assembleEd25519Envelope({
+    R: signature.slice(0, 32),
+    s: signature.slice(32, 64),
+    publicKey,
     signedBytes,
+    ownerIndex
+  });
+}
+async function buildEd25519EnvelopeFromSignature(params) {
+  const ownerIndex = params.ownerIndex ?? 0n;
+  if (ownerIndex < 0n || ownerIndex >= 0x100000000n) {
+    throw new Error(
+      `buildEd25519EnvelopeFromSignature: ownerIndex ${ownerIndex} is out of u32 range [0, 2^32). owner_id is the u32 INDEX into the wallet's owner_set (0 for primary); do NOT pass an owner_commitment or pubkey here.`
+    );
+  }
+  if (params.signature.length !== 64) {
+    throw new Error(
+      `Ed25519 signature must be exactly 64 bytes (R\u2016s); got ${params.signature.length}.`
+    );
+  }
+  if (params.publicKey.length !== 32) {
+    throw new Error(`Ed25519 public key must be exactly 32 bytes; got ${params.publicKey.length}.`);
+  }
+  const signedBytes = ed25519SignedBytes(params.messageHash);
+  return assembleEd25519Envelope({
+    R: params.signature.slice(0, 32),
+    s: params.signature.slice(32, 64),
+    publicKey: params.publicKey,
+    signedBytes,
+    ownerIndex
+  });
+}
+async function assembleEd25519Envelope(parts) {
+  const garaga = await ensureGaragaInit();
+  const payload = garaga.eddsaCalldataBuilder(
+    bytesToLeBigInt(parts.R),
+    bytesToLeBigInt(parts.s),
+    bytesToLeBigInt(parts.publicKey),
+    parts.signedBytes,
     false
   );
   return wrapV2Snip12Envelope({
-    ownerId: ownerIndex,
+    ownerId: parts.ownerIndex,
     kindTag: ED25519_KIND_TAG,
     payload
   });
@@ -1434,12 +1465,17 @@ var ChipiWallets = class {
       }
       const isShhh = walletType === "SHHH";
       const effectiveSignerKind = isShhh ? params.signerKind ?? "STARK" : void 0;
-      const SDK_SHIPPED_SHHH_KINDS = ["STARK", "ED25519"];
+      const SDK_SHIPPED_SHHH_KINDS = [
+        "STARK",
+        "ED25519",
+        "WEBAUTHN_P256",
+        "EIP191_SECP256K1"
+      ];
       if (isShhh && !SDK_SHIPPED_SHHH_KINDS.includes(
         effectiveSignerKind
       )) {
         throw new Error(
-          `SHHH signerKind=${effectiveSignerKind} is not yet shipped from the SDK (Wave B ships STARK + ED25519). Use signerKind="STARK" or "ED25519", or wait for the follow-up PRs that add external-rooted (MetaMask, Phantom, passkey, Apple) deploy support.`
+          `SHHH signerKind=${effectiveSignerKind} is not yet shipped from the SDK (supports STARK, ED25519, WEBAUTHN_P256, EIP191_SECP256K1). JWT_ES256_APPLE_SUB and others remain deferred to their follow-up PRs (OAuth / Apple-Developer context).`
         );
       }
       const rpcUrl = walletType === "READY" ? shared.WALLET_RPC_ENDPOINTS.READY : shared.WALLET_RPC_ENDPOINTS.CHIPI;
@@ -1474,6 +1510,14 @@ var ChipiWallets = class {
             pubkeyFelts = ed25519PubkeyFelts(edPubKey);
             shhhPrivateKeyHex = Buffer.from(edPrivKey).toString("hex");
           }
+        } else if (effectiveSignerKind === "WEBAUTHN_P256" || effectiveSignerKind === "EIP191_SECP256K1") {
+          if (!params.ownerPubkeyFelts || params.ownerPubkeyFelts.length !== 4) {
+            throw new Error(
+              `SHHH ${effectiveSignerKind} ownerPubkeyFelts must be [x_low, x_high, y_low, y_high] (4 felts); got ${params.ownerPubkeyFelts?.length ?? 0}.`
+            );
+          }
+          pubkeyFelts = params.ownerPubkeyFelts.map((s) => BigInt(s));
+          shhhPrivateKeyHex = "";
         } else {
           throw new Error(
             `SHHH signerKind=${effectiveSignerKind} reached the address-derivation block without an implementation.`
@@ -1584,12 +1628,18 @@ var ChipiWallets = class {
           userSignature: userSignaturePayload,
           typedData: typedData2,
           ...encryptedPrivateKey !== void 0 && { encryptedPrivateKey },
-          // SHHH: write the signer kind to the new wallet row. P0.3's
-          // STARK-only path uses a Chipi-held STARK key, so
-          // ownerPublicKey stays unset (encryptedPrivateKey carries
-          // the same key the verifier checks against). External-rooted
-          // wallets will pass ownerPublicKey instead in a follow-up PR.
+          // SHHH: write the signer kind to the new wallet row.
           ...isShhh && { signerKind: effectiveSignerKind },
+          // External-rooted SHHH (passkey / MetaMask / Phantom): no
+          // Chipi-held key, so chipi-back needs the pubkey felts (address
+          // derivation) + `ownerPublicKey` as the credential source it
+          // stores (encryptedPrivateKey stays null). Canonical
+          // ownerPublicKey = comma-joined felts. STARK / Chipi-held kinds
+          // are untouched — encryptedPrivateKey is their credential source.
+          ...isShhh && encryptedPrivateKey === void 0 && shhhOwnerPubkeyFelts && {
+            ownerPubkeyFelts: shhhOwnerPubkeyFelts,
+            ownerPublicKey: shhhOwnerPubkeyFelts.join(",")
+          },
           ...encryptedPrivateKeyBackup && { encryptedPrivateKeyBackup },
           ...params.authMethod && { authMethod: params.authMethod },
           ...params.credentialId && { credentialId: params.credentialId },
@@ -3190,9 +3240,7 @@ var ChipiSDK = class {
    * });
    * ```
    */
-  async signTypedData({
-    params
-  }) {
+  async signTypedData({ params }) {
     return signTypedData({ params });
   }
   /**
@@ -4534,6 +4582,7 @@ exports.buildBootstrapSignedCall = buildBootstrapSignedCall;
 exports.buildCancelPendingOpCall = buildCancelPendingOpCall;
 exports.buildCancelRecoveryCall = buildCancelRecoveryCall;
 exports.buildEd25519Envelope = buildEd25519Envelope;
+exports.buildEd25519EnvelopeFromSignature = buildEd25519EnvelopeFromSignature;
 exports.buildEip191EnvelopeFromPrivateKey = buildEip191EnvelopeFromPrivateKey;
 exports.buildEip191EnvelopeFromSignature = buildEip191EnvelopeFromSignature;
 exports.buildExecuteAddOwnerCall = buildExecuteAddOwnerCall;