@chipi-stack/backend 14.6.0 → 14.8.0

package/dist/wallets.mjs

@@ -242,21 +242,28 @@ async function buildEd25519Envelope(params) {
     );
   }
   const ed = await import('@noble/ed25519');
-  const garaga = await ensureGaragaInit();
   const publicKey = await ed.getPublicKeyAsync(params.privateKey);
   const signedBytes = ed25519SignedBytes(params.messageHash);
   const signature = await ed.signAsync(signedBytes, params.privateKey);
-  const R = signature.slice(0, 32);
-  const s = signature.slice(32, 64);
-  const payload = garaga.eddsaCalldataBuilder(
-    bytesToLeBigInt(R),
-    bytesToLeBigInt(s),
-    bytesToLeBigInt(publicKey),
+  return assembleEd25519Envelope({
+    R: signature.slice(0, 32),
+    s: signature.slice(32, 64),
+    publicKey,
     signedBytes,
+    ownerIndex
+  });
+}
+async function assembleEd25519Envelope(parts) {
+  const garaga = await ensureGaragaInit();
+  const payload = garaga.eddsaCalldataBuilder(
+    bytesToLeBigInt(parts.R),
+    bytesToLeBigInt(parts.s),
+    bytesToLeBigInt(parts.publicKey),
+    parts.signedBytes,
     false
   );
   return wrapV2Snip12Envelope({
-    ownerId: ownerIndex,
+    ownerId: parts.ownerIndex,
     kindTag: ED25519_KIND_TAG,
     payload
   });
@@ -784,12 +791,17 @@ var ChipiWallets = class {
       }
       const isShhh = walletType === "SHHH";
       const effectiveSignerKind = isShhh ? params.signerKind ?? "STARK" : void 0;
-      const SDK_SHIPPED_SHHH_KINDS = ["STARK", "ED25519"];
+      const SDK_SHIPPED_SHHH_KINDS = [
+        "STARK",
+        "ED25519",
+        "WEBAUTHN_P256",
+        "EIP191_SECP256K1"
+      ];
       if (isShhh && !SDK_SHIPPED_SHHH_KINDS.includes(
         effectiveSignerKind
       )) {
         throw new Error(
-          `SHHH signerKind=${effectiveSignerKind} is not yet shipped from the SDK (Wave B ships STARK + ED25519). Use signerKind="STARK" or "ED25519", or wait for the follow-up PRs that add external-rooted (MetaMask, Phantom, passkey, Apple) deploy support.`
+          `SHHH signerKind=${effectiveSignerKind} is not yet shipped from the SDK (supports STARK, ED25519, WEBAUTHN_P256, EIP191_SECP256K1). JWT_ES256_APPLE_SUB and others remain deferred to their follow-up PRs (OAuth / Apple-Developer context).`
         );
       }
       const rpcUrl = walletType === "READY" ? WALLET_RPC_ENDPOINTS.READY : WALLET_RPC_ENDPOINTS.CHIPI;
@@ -824,6 +836,14 @@ var ChipiWallets = class {
             pubkeyFelts = ed25519PubkeyFelts(edPubKey);
             shhhPrivateKeyHex = Buffer.from(edPrivKey).toString("hex");
           }
+        } else if (effectiveSignerKind === "WEBAUTHN_P256" || effectiveSignerKind === "EIP191_SECP256K1") {
+          if (!params.ownerPubkeyFelts || params.ownerPubkeyFelts.length !== 4) {
+            throw new Error(
+              `SHHH ${effectiveSignerKind} ownerPubkeyFelts must be [x_low, x_high, y_low, y_high] (4 felts); got ${params.ownerPubkeyFelts?.length ?? 0}.`
+            );
+          }
+          pubkeyFelts = params.ownerPubkeyFelts.map((s) => BigInt(s));
+          shhhPrivateKeyHex = "";
         } else {
           throw new Error(
             `SHHH signerKind=${effectiveSignerKind} reached the address-derivation block without an implementation.`
@@ -934,12 +954,18 @@ var ChipiWallets = class {
           userSignature: userSignaturePayload,
           typedData: typedData2,
           ...encryptedPrivateKey !== void 0 && { encryptedPrivateKey },
-          // SHHH: write the signer kind to the new wallet row. P0.3's
-          // STARK-only path uses a Chipi-held STARK key, so
-          // ownerPublicKey stays unset (encryptedPrivateKey carries
-          // the same key the verifier checks against). External-rooted
-          // wallets will pass ownerPublicKey instead in a follow-up PR.
+          // SHHH: write the signer kind to the new wallet row.
           ...isShhh && { signerKind: effectiveSignerKind },
+          // External-rooted SHHH (passkey / MetaMask / Phantom): no
+          // Chipi-held key, so chipi-back needs the pubkey felts (address
+          // derivation) + `ownerPublicKey` as the credential source it
+          // stores (encryptedPrivateKey stays null). Canonical
+          // ownerPublicKey = comma-joined felts. STARK / Chipi-held kinds
+          // are untouched — encryptedPrivateKey is their credential source.
+          ...isShhh && encryptedPrivateKey === void 0 && shhhOwnerPubkeyFelts && {
+            ownerPubkeyFelts: shhhOwnerPubkeyFelts,
+            ownerPublicKey: shhhOwnerPubkeyFelts.join(",")
+          },
           ...encryptedPrivateKeyBackup && { encryptedPrivateKeyBackup },
           ...params.authMethod && { authMethod: params.authMethod },
           ...params.credentialId && { credentialId: params.credentialId },