@chipi-stack/backend 14.6.0 → 14.7.0

package/dist/index.mjs

@@ -400,21 +400,52 @@ async function buildEd25519Envelope(params) {
     );
   }
   const ed = await import('@noble/ed25519');
-  const garaga = await ensureGaragaInit();
   const publicKey = await ed.getPublicKeyAsync(params.privateKey);
   const signedBytes = ed25519SignedBytes(params.messageHash);
   const signature = await ed.signAsync(signedBytes, params.privateKey);
-  const R = signature.slice(0, 32);
-  const s = signature.slice(32, 64);
-  const payload = garaga.eddsaCalldataBuilder(
-    bytesToLeBigInt(R),
-    bytesToLeBigInt(s),
-    bytesToLeBigInt(publicKey),
+  return assembleEd25519Envelope({
+    R: signature.slice(0, 32),
+    s: signature.slice(32, 64),
+    publicKey,
     signedBytes,
+    ownerIndex
+  });
+}
+async function buildEd25519EnvelopeFromSignature(params) {
+  const ownerIndex = params.ownerIndex ?? 0n;
+  if (ownerIndex < 0n || ownerIndex >= 0x100000000n) {
+    throw new Error(
+      `buildEd25519EnvelopeFromSignature: ownerIndex ${ownerIndex} is out of u32 range [0, 2^32). owner_id is the u32 INDEX into the wallet's owner_set (0 for primary); do NOT pass an owner_commitment or pubkey here.`
+    );
+  }
+  if (params.signature.length !== 64) {
+    throw new Error(
+      `Ed25519 signature must be exactly 64 bytes (R\u2016s); got ${params.signature.length}.`
+    );
+  }
+  if (params.publicKey.length !== 32) {
+    throw new Error(`Ed25519 public key must be exactly 32 bytes; got ${params.publicKey.length}.`);
+  }
+  const signedBytes = ed25519SignedBytes(params.messageHash);
+  return assembleEd25519Envelope({
+    R: params.signature.slice(0, 32),
+    s: params.signature.slice(32, 64),
+    publicKey: params.publicKey,
+    signedBytes,
+    ownerIndex
+  });
+}
+async function assembleEd25519Envelope(parts) {
+  const garaga = await ensureGaragaInit();
+  const payload = garaga.eddsaCalldataBuilder(
+    bytesToLeBigInt(parts.R),
+    bytesToLeBigInt(parts.s),
+    bytesToLeBigInt(parts.publicKey),
+    parts.signedBytes,
     false
   );
   return wrapV2Snip12Envelope({
-    ownerId: ownerIndex,
+    ownerId: parts.ownerIndex,
     kindTag: ED25519_KIND_TAG,
     payload
   });
@@ -1429,12 +1460,17 @@ var ChipiWallets = class {
       }
       const isShhh = walletType === "SHHH";
       const effectiveSignerKind = isShhh ? params.signerKind ?? "STARK" : void 0;
-      const SDK_SHIPPED_SHHH_KINDS = ["STARK", "ED25519"];
+      const SDK_SHIPPED_SHHH_KINDS = [
+        "STARK",
+        "ED25519",
+        "WEBAUTHN_P256",
+        "EIP191_SECP256K1"
+      ];
       if (isShhh && !SDK_SHIPPED_SHHH_KINDS.includes(
         effectiveSignerKind
       )) {
         throw new Error(
-          `SHHH signerKind=${effectiveSignerKind} is not yet shipped from the SDK (Wave B ships STARK + ED25519). Use signerKind="STARK" or "ED25519", or wait for the follow-up PRs that add external-rooted (MetaMask, Phantom, passkey, Apple) deploy support.`
+          `SHHH signerKind=${effectiveSignerKind} is not yet shipped from the SDK (supports STARK, ED25519, WEBAUTHN_P256, EIP191_SECP256K1). JWT_ES256_APPLE_SUB and others remain deferred to their follow-up PRs (OAuth / Apple-Developer context).`
         );
       }
       const rpcUrl = walletType === "READY" ? WALLET_RPC_ENDPOINTS.READY : WALLET_RPC_ENDPOINTS.CHIPI;
@@ -1469,6 +1505,14 @@ var ChipiWallets = class {
             pubkeyFelts = ed25519PubkeyFelts(edPubKey);
             shhhPrivateKeyHex = Buffer.from(edPrivKey).toString("hex");
           }
+        } else if (effectiveSignerKind === "WEBAUTHN_P256" || effectiveSignerKind === "EIP191_SECP256K1") {
+          if (!params.ownerPubkeyFelts || params.ownerPubkeyFelts.length !== 4) {
+            throw new Error(
+              `SHHH ${effectiveSignerKind} ownerPubkeyFelts must be [x_low, x_high, y_low, y_high] (4 felts); got ${params.ownerPubkeyFelts?.length ?? 0}.`
+            );
+          }
+          pubkeyFelts = params.ownerPubkeyFelts.map((s) => BigInt(s));
+          shhhPrivateKeyHex = "";
         } else {
           throw new Error(
             `SHHH signerKind=${effectiveSignerKind} reached the address-derivation block without an implementation.`
@@ -1579,12 +1623,18 @@ var ChipiWallets = class {
           userSignature: userSignaturePayload,
           typedData: typedData2,
           ...encryptedPrivateKey !== void 0 && { encryptedPrivateKey },
-          // SHHH: write the signer kind to the new wallet row. P0.3's
-          // STARK-only path uses a Chipi-held STARK key, so
-          // ownerPublicKey stays unset (encryptedPrivateKey carries
-          // the same key the verifier checks against). External-rooted
-          // wallets will pass ownerPublicKey instead in a follow-up PR.
+          // SHHH: write the signer kind to the new wallet row.
           ...isShhh && { signerKind: effectiveSignerKind },
+          // External-rooted SHHH (passkey / MetaMask / Phantom): no
+          // Chipi-held key, so chipi-back needs the pubkey felts (address
+          // derivation) + `ownerPublicKey` as the credential source it
+          // stores (encryptedPrivateKey stays null). Canonical
+          // ownerPublicKey = comma-joined felts. STARK / Chipi-held kinds
+          // are untouched — encryptedPrivateKey is their credential source.
+          ...isShhh && encryptedPrivateKey === void 0 && shhhOwnerPubkeyFelts && {
+            ownerPubkeyFelts: shhhOwnerPubkeyFelts,
+            ownerPublicKey: shhhOwnerPubkeyFelts.join(",")
+          },
           ...encryptedPrivateKeyBackup && { encryptedPrivateKeyBackup },
           ...params.authMethod && { authMethod: params.authMethod },
           ...params.credentialId && { credentialId: params.credentialId },
@@ -3185,9 +3235,7 @@ var ChipiSDK = class {
    * });
    * ```
    */
-  async signTypedData({
-    params
-  }) {
+  async signTypedData({ params }) {
     return signTypedData({ params });
   }
   /**
@@ -4489,6 +4537,6 @@ function secondsUntilExecutable(validAfterSecs, nowSecs) {
 init_threshold();
 init_execute_paymaster_raw();
 
-export { ANY_CALLER_FELT, APPLE_ISSUER, BOOTSTRAP_DOMAIN_SEPARATOR, ChipiBrowserSDK, ChipiClient, ChipiPaymasterAdapter, ChipiSDK, ChipiServerSDK, ChipiSessions, ChipiSkuPurchases, ChipiSkus, ChipiTransactions, ChipiWallets, DEFAULT_OP_EXPIRY_SECONDS, ISIGNER_CANONICAL_LABEL, ISIGNER_ID, ISRC9_V2_ID, MAX_OE_VALIDITY_WINDOW_SECONDS, MIN_THRESHOLD_OWNERS, OE_DOMAIN_NAME, OE_DOMAIN_REVISION, OE_DOMAIN_VERSION, OP_ADD_OWNER, OP_REMOVE_OWNER, OP_ROTATE_OWNER, OP_SET_THRESHOLD, ROLE_GUARDIAN, ROLE_OWNER, SIG_VERSION_V1_HEX_ASCII, SIG_VERSION_V2_SNIP12, SIG_VERSION_V2_THRESHOLD, STARKNET_MESSAGE_PREFIX, TIMELOCK_SECONDS, VIEW_SELECTORS, X402Facilitator, X402ShhhClient, assertValidV2Snip12Envelope, buildBootstrapSignedCall, buildCancelPendingOpCall, buildCancelRecoveryCall, buildEd25519Envelope, buildEip191EnvelopeFromPrivateKey, buildEip191EnvelopeFromSignature, buildExecuteAddOwnerCall, buildExecuteRemoveOwnerCall, buildExecuteRotateOwnerCall, buildExecuteSetThresholdCall, buildFinalizeRecoveryCall, buildInitiateRecoveryCall, buildJwtAppleSubEnvelopeFromTestKey, buildJwtAppleSubEnvelopeFromTokenResponse, buildMigrationCalls, buildOutsideExecution, buildProposeAddOwnerCall, buildProposeRemoveOwnerCall, buildProposeRotateOwnerCall, buildProposeSetThresholdCall, buildStarkEnvelope, buildThresholdEnvelope, buildWebAuthnEnvelopeFromAssertion, buildWebAuthnEnvelopeFromPrivateKey, byteArrayToFelts, computeAddressSalt, computeBootstrapMessage, computeISignerId, computeOeHash, computeShhhAddress, computeSnip12Hash, decryptPrivateKey, ed25519OwnerId, ed25519PubkeyFelts, ed25519SignedBytes, eip191OwnerId, eip191PubkeyFelts, encryptPrivateKey, estimateThresholdGasOverhead, executeShhhSponsoredRaw, hashCall, hashCalls, hashOutsideExecutionStruct, hashStarknetDomain, isReadyToExecute, jwtAppleSubHash, jwtAppleSubOwnerId, jwtAppleSubPubkeyFelts, labelToFelt, locateSubClaim, messageHashToNonceB64url, migrateChipiWalletToShhh, ownerCommitment, parseAppleIdToken, parseDerEcdsaSignature, parseEip191Signature, parseThresholdEnvelope, resolveShhhChainId, secondsUntilExecutable, serializeExecuteFromOutsideV2Calldata, signBootstrapMessage, signTypedData, snip12HashToHexAsciiBytes, starkOwnerId, starkPubkeyFelts, webauthnOwnerId, webauthnPubkeyFelts, wrapV2Snip12Envelope, wrapV2ThresholdEnvelope, x402Middleware };
+export { ANY_CALLER_FELT, APPLE_ISSUER, BOOTSTRAP_DOMAIN_SEPARATOR, ChipiBrowserSDK, ChipiClient, ChipiPaymasterAdapter, ChipiSDK, ChipiServerSDK, ChipiSessions, ChipiSkuPurchases, ChipiSkus, ChipiTransactions, ChipiWallets, DEFAULT_OP_EXPIRY_SECONDS, ISIGNER_CANONICAL_LABEL, ISIGNER_ID, ISRC9_V2_ID, MAX_OE_VALIDITY_WINDOW_SECONDS, MIN_THRESHOLD_OWNERS, OE_DOMAIN_NAME, OE_DOMAIN_REVISION, OE_DOMAIN_VERSION, OP_ADD_OWNER, OP_REMOVE_OWNER, OP_ROTATE_OWNER, OP_SET_THRESHOLD, ROLE_GUARDIAN, ROLE_OWNER, SIG_VERSION_V1_HEX_ASCII, SIG_VERSION_V2_SNIP12, SIG_VERSION_V2_THRESHOLD, STARKNET_MESSAGE_PREFIX, TIMELOCK_SECONDS, VIEW_SELECTORS, X402Facilitator, X402ShhhClient, assertValidV2Snip12Envelope, buildBootstrapSignedCall, buildCancelPendingOpCall, buildCancelRecoveryCall, buildEd25519Envelope, buildEd25519EnvelopeFromSignature, buildEip191EnvelopeFromPrivateKey, buildEip191EnvelopeFromSignature, buildExecuteAddOwnerCall, buildExecuteRemoveOwnerCall, buildExecuteRotateOwnerCall, buildExecuteSetThresholdCall, buildFinalizeRecoveryCall, buildInitiateRecoveryCall, buildJwtAppleSubEnvelopeFromTestKey, buildJwtAppleSubEnvelopeFromTokenResponse, buildMigrationCalls, buildOutsideExecution, buildProposeAddOwnerCall, buildProposeRemoveOwnerCall, buildProposeRotateOwnerCall, buildProposeSetThresholdCall, buildStarkEnvelope, buildThresholdEnvelope, buildWebAuthnEnvelopeFromAssertion, buildWebAuthnEnvelopeFromPrivateKey, byteArrayToFelts, computeAddressSalt, computeBootstrapMessage, computeISignerId, computeOeHash, computeShhhAddress, computeSnip12Hash, decryptPrivateKey, ed25519OwnerId, ed25519PubkeyFelts, ed25519SignedBytes, eip191OwnerId, eip191PubkeyFelts, encryptPrivateKey, estimateThresholdGasOverhead, executeShhhSponsoredRaw, hashCall, hashCalls, hashOutsideExecutionStruct, hashStarknetDomain, isReadyToExecute, jwtAppleSubHash, jwtAppleSubOwnerId, jwtAppleSubPubkeyFelts, labelToFelt, locateSubClaim, messageHashToNonceB64url, migrateChipiWalletToShhh, ownerCommitment, parseAppleIdToken, parseDerEcdsaSignature, parseEip191Signature, parseThresholdEnvelope, resolveShhhChainId, secondsUntilExecutable, serializeExecuteFromOutsideV2Calldata, signBootstrapMessage, signTypedData, snip12HashToHexAsciiBytes, starkOwnerId, starkPubkeyFelts, webauthnOwnerId, webauthnPubkeyFelts, wrapV2Snip12Envelope, wrapV2ThresholdEnvelope, x402Middleware };
 //# sourceMappingURL=index.mjs.map
 //# sourceMappingURL=index.mjs.map