@continuumdao/continuum-node-sdk 1.0.0

package/dist/index.d.ts

@@ -0,0 +1,36 @@
+export { nodeSdkConfigSchema, parseNodeSdkConfig, type NodeSdkConfig, } from './config/schema.js';
+export type { SdkResult, SdkPreparedResult, SdkEmptyResult } from './core/result.js';
+export * from './core/types.js';
+export * from './core/schemas.js';
+export { nodeId, version } from './core/general.js';
+export { availableNodeIds, validGroupNodeSets, listGroupRequests, listGroupResults, createGroupRequest, acceptGroupRequest, } from './core/groups.js';
+export { getManagementSigners, getPreferredManagementSigner, getManagementSigner, managementSign, managementSignEd25519, managementSignEIP191, getManagementSigningContext, buildManagementPostBody, setPreferredManagementSigner, hasEd25519ManagementSigner, hasManagementSigner, listManagementSignersDetailed, createManagementSignerKeypair, addManagementSigner, prepareSignedManagementRequest, prepareActionSignedManagementRequest, buildClientSigManagementPostBody, toSelectedSigningKey, DEFAULT_MANAGEMENT_SIGNING, type ManagementKeysResult, type SignedManagementRequest, type ManagementKeyOption, type ManagementSigningMethod, type Ed25519ManagementSigning, type EIP191ManagementSigning, } from './core/management-signer.js';
+export { preparePendingSignRequest, executePendingSignRequest, type PendingSignRequest, type PreparedSignRequest, type ManagementPostVariant, } from './core/signing-flow.js';
+export { buildMultiSignProposal, type BuildMultiSignProposalInput, } from './evm/proposal-builder.js';
+export { resolveGetSigFeeWei, normalizeGetSigFeeSpeedTier, getDefaultGetSigFeeSpeedFromChainDetail, fetchGetSigTierFeePreviewLines, type GetSigFeeSpeedTier, type ResolvedGetSigLegacyFees, type ResolvedGetSigEip1559Fees, } from './evm/get-sig-fee-speed.js';
+export { fetchChainFeeParams, type ChainFeeParams } from './evm/chain-fees.js';
+export { composeFeePayloadToTxParams, gasLimitFromEstimateAndChainConfig, triggerTxParamsFromComposeBody, type ProposalTxParams, } from './evm/tx-params.js';
+export { encodeActionCalldata, type AbiInputArg } from './evm/encode-calldata.js';
+export { generateSignRequestWithFoundryScript, broadcastWithOverrideSender, type FoundryBroadcastJson, type SignRequestPayload, } from './evm/forge-broadcast.js';
+export { registerKeyGenOnLinea, } from './core/mpc/register-keygen.js';
+export { getMpaWalletStatus, createMpaTopUpMultiSignRequest, } from './core/mpc/mpa-top-up.js';
+export { transferNativeGas } from './core/mpc/transfer-native.js';
+export { transferErc20, transferErc721, transferCtmErc20, transferCtmErc20CrossChain, } from './core/mpc/transfer-tokens.js';
+export { createComposeMultiSignRequest } from './core/mpc/compose-request.js';
+export { createForgeMultiSignRequest } from './core/mpc/forge-request.js';
+export { listSignRequestsReady, waitForSignRequestReady, } from './core/mpc/list-ready.js';
+export { triggerSignResult } from './core/mpc/trigger-sign-result.js';
+export { broadcastSignResult } from './core/mpc/broadcast-sign-result.js';
+export { bumpOrCancelSignResult } from './core/mpc/bump-sign-result.js';
+export { signAndSubmitMultiSignRequest } from './core/mpc/sign-request-body.js';
+export { createPublicClientForChain, executorAddressFromKeyGen, } from './core/mpc/context.js';
+export * from './core/mpc/types.js';
+export * from './core/mpc/schemas.js';
+export { createKeyGenRequest, acceptKeyGenRequest, listKeyGenRequests, getKeyGenRequestById, getKeyGenParentGroupId, fetchKeyGenResult, fetchGlobalNonceByKeyGenId, keyGenFilterSchema, type KeyGenFilter, type KeyGenAgreementCheck, } from './core/keygen.js';
+export { getMachineInfo, getSuccessRate, getSubscriptions, getHealth, getConnectivityHealth, getLogs, } from './core/node-info.js';
+export { getAddressBookRegistry, addToAddressBookRegistry, removeFromAddressBookRegistry, } from './core/registry/address-book.js';
+export { getTokenRegistry, addToTokenRegistry, removeFromTokenRegistry, } from './core/registry/tokens.js';
+export { getChainRegistry, resolveChainRegistryEntry, addToChainRegistry, removeFromChainRegistry, } from './core/registry/networks.js';
+export { McpGroupRequestSchema, McpGroupResultSchema, MachineInfoSchema, LogsSchema, HealthSchema, KeyGenRequestSchema, KeyGenResultSchema, GetKnownAddressesDataSchema, GetTokenRegistryDataSchema, GetChainRegistryDataSchema, ChainRegistryEntrySchema, SelectedSigningKeySchema, ManagementSigningMethodSchema, Ed25519ManagementSigningSchema, ConnectivityHealthGroupSchema, SubscriptionSchema, SuccessRateSchema, ADDRESS_BOOK_REGISTRY_API_PATHS, TOKEN_REGISTRY_API_PATHS, CHAIN_REGISTRY_API_PATHS, type McpGroupRequest, type McpGroupResult, type SelectedSigningKey, type GetKnownAddressesData, type GetKnownAddressesQuery, type GetTokenRegistryData, type GetTokenRegistryQuery, type GetChainRegistryData, type GetChainRegistryQuery, type AddChainRegistryInput, type TokenContractInput, type TokenType, type KeyGenId, type Key, type MsgCheck, } from './schemas/extended.js';
+export * from './mcp/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,mBAAmB,EACnB,kBAAkB,EAClB,KAAK,aAAa,GAClB,MAAM,oBAAoB,CAAC;AAE5B,YAAY,EAAC,SAAS,EAAE,iBAAiB,EAAE,cAAc,EAAC,MAAM,kBAAkB,CAAC;AAEnF,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAElC,OAAO,EAAC,MAAM,EAAE,OAAO,EAAC,MAAM,mBAAmB,CAAC;AAClD,OAAO,EACN,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,GAClB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACN,oBAAoB,EACpB,4BAA4B,EAC5B,mBAAmB,EACnB,cAAc,EACd,qBAAqB,EACrB,oBAAoB,EACpB,2BAA2B,EAC3B,uBAAuB,EACvB,4BAA4B,EAC5B,0BAA0B,EAC1B,mBAAmB,EACnB,6BAA6B,EAC7B,6BAA6B,EAC7B,mBAAmB,EACnB,8BAA8B,EAC9B,oCAAoC,EACpC,gCAAgC,EAChC,oBAAoB,EACpB,0BAA0B,EAC1B,KAAK,oBAAoB,EACzB,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,uBAAuB,GAC5B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACN,yBAAyB,EACzB,yBAAyB,EACzB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,GAC1B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACN,sBAAsB,EACtB,KAAK,2BAA2B,GAChC,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACN,mBAAmB,EACnB,2BAA2B,EAC3B,uCAAuC,EACvC,8BAA8B,EAC9B,KAAK,kBAAkB,EACvB,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,GAC9B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAC,mBAAmB,EAAE,KAAK,cAAc,EAAC,MAAM,qBAAqB,CAAC;AAC7E,OAAO,EACN,2BAA2B,EAC3B,kCAAkC,EAClC,8BAA8B,EAC9B,KAAK,gBAAgB,GACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAC,oBAAoB,EAAE,KAAK,WAAW,EAAC,MAAM,0BAA0B,CAAC;AAChF,OAAO,EACN,oCAAoC,EACpC,2BAA2B,EAC3B,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,GACvB,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACN,qBAAqB,GACrB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACN,kBAAkB,EAClB,8BAA8B,GAC9B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAC,iBAAiB,EAAC,MAAM,+BAA+B,CAAC;AAChE,OAAO,EACN,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,0BAA0B,GAC1B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAC,6BAA6B,EAAC,MAAM,+BAA+B,CAAC;AAC5E,OAAO,EAAC,2BAA2B,EAAC,MAAM,6BAA6B,CAAC;AACxE,OAAO,EACN,qBAAqB,EACrB,uBAAuB,GACvB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAC,iBAAiB,EAAC,MAAM,mCAAmC,CAAC;AACpE,OAAO,EAAC,mBAAmB,EAAC,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAC,sBAAsB,EAAC,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAC,6BAA6B,EAAC,MAAM,iCAAiC,CAAC;AAC9E,OAAO,EACN,0BAA0B,EAC1B,yBAAyB,GACzB,MAAM,uBAAuB,CAAC;AAC/B,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AAEtC,OAAO,EACN,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,sBAAsB,EACtB,iBAAiB,EACjB,0BAA0B,EAC1B,kBAAkB,EAClB,KAAK,YAAY,EACjB,KAAK,oBAAoB,GACzB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACN,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,SAAS,EACT,qBAAqB,EACrB,OAAO,GACP,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACN,sBAAsB,EACtB,wBAAwB,EACxB,6BAA6B,GAC7B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACN,gBAAgB,EAChB,kBAAkB,EAClB,uBAAuB,GACvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACN,gBAAgB,EAChB,yBAAyB,EACzB,kBAAkB,EAClB,uBAAuB,GACvB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EACN,qBAAqB,EACrB,oBAAoB,EACpB,iBAAiB,EACjB,UAAU,EACV,YAAY,EACZ,mBAAmB,EACnB,kBAAkB,EAClB,2BAA2B,EAC3B,0BAA0B,EAC1B,0BAA0B,EAC1B,wBAAwB,EACxB,wBAAwB,EACxB,6BAA6B,EAC7B,8BAA8B,EAC9B,6BAA6B,EAC7B,kBAAkB,EAClB,iBAAiB,EACjB,+BAA+B,EAC/B,wBAAwB,EACxB,wBAAwB,EACxB,KAAK,eAAe,EACpB,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,SAAS,EACd,KAAK,QAAQ,EACb,KAAK,GAAG,EACR,KAAK,QAAQ,GACb,MAAM,uBAAuB,CAAC;AAE/B,cAAc,gBAAgB,CAAC"}

package/dist/index.js

@@ -0,0 +1,35 @@
+export { nodeSdkConfigSchema, parseNodeSdkConfig, } from './config/schema.js';
+export * from './core/types.js';
+export * from './core/schemas.js';
+export { nodeId, version } from './core/general.js';
+export { availableNodeIds, validGroupNodeSets, listGroupRequests, listGroupResults, createGroupRequest, acceptGroupRequest, } from './core/groups.js';
+export { getManagementSigners, getPreferredManagementSigner, getManagementSigner, managementSign, managementSignEd25519, managementSignEIP191, getManagementSigningContext, buildManagementPostBody, setPreferredManagementSigner, hasEd25519ManagementSigner, hasManagementSigner, listManagementSignersDetailed, createManagementSignerKeypair, addManagementSigner, prepareSignedManagementRequest, prepareActionSignedManagementRequest, buildClientSigManagementPostBody, toSelectedSigningKey, DEFAULT_MANAGEMENT_SIGNING, } from './core/management-signer.js';
+export { preparePendingSignRequest, executePendingSignRequest, } from './core/signing-flow.js';
+export { buildMultiSignProposal, } from './evm/proposal-builder.js';
+export { resolveGetSigFeeWei, normalizeGetSigFeeSpeedTier, getDefaultGetSigFeeSpeedFromChainDetail, fetchGetSigTierFeePreviewLines, } from './evm/get-sig-fee-speed.js';
+export { fetchChainFeeParams } from './evm/chain-fees.js';
+export { composeFeePayloadToTxParams, gasLimitFromEstimateAndChainConfig, triggerTxParamsFromComposeBody, } from './evm/tx-params.js';
+export { encodeActionCalldata } from './evm/encode-calldata.js';
+export { generateSignRequestWithFoundryScript, broadcastWithOverrideSender, } from './evm/forge-broadcast.js';
+export { registerKeyGenOnLinea, } from './core/mpc/register-keygen.js';
+export { getMpaWalletStatus, createMpaTopUpMultiSignRequest, } from './core/mpc/mpa-top-up.js';
+export { transferNativeGas } from './core/mpc/transfer-native.js';
+export { transferErc20, transferErc721, transferCtmErc20, transferCtmErc20CrossChain, } from './core/mpc/transfer-tokens.js';
+export { createComposeMultiSignRequest } from './core/mpc/compose-request.js';
+export { createForgeMultiSignRequest } from './core/mpc/forge-request.js';
+export { listSignRequestsReady, waitForSignRequestReady, } from './core/mpc/list-ready.js';
+export { triggerSignResult } from './core/mpc/trigger-sign-result.js';
+export { broadcastSignResult } from './core/mpc/broadcast-sign-result.js';
+export { bumpOrCancelSignResult } from './core/mpc/bump-sign-result.js';
+export { signAndSubmitMultiSignRequest } from './core/mpc/sign-request-body.js';
+export { createPublicClientForChain, executorAddressFromKeyGen, } from './core/mpc/context.js';
+export * from './core/mpc/types.js';
+export * from './core/mpc/schemas.js';
+export { createKeyGenRequest, acceptKeyGenRequest, listKeyGenRequests, getKeyGenRequestById, getKeyGenParentGroupId, fetchKeyGenResult, fetchGlobalNonceByKeyGenId, keyGenFilterSchema, } from './core/keygen.js';
+export { getMachineInfo, getSuccessRate, getSubscriptions, getHealth, getConnectivityHealth, getLogs, } from './core/node-info.js';
+export { getAddressBookRegistry, addToAddressBookRegistry, removeFromAddressBookRegistry, } from './core/registry/address-book.js';
+export { getTokenRegistry, addToTokenRegistry, removeFromTokenRegistry, } from './core/registry/tokens.js';
+export { getChainRegistry, resolveChainRegistryEntry, addToChainRegistry, removeFromChainRegistry, } from './core/registry/networks.js';
+export { McpGroupRequestSchema, McpGroupResultSchema, MachineInfoSchema, LogsSchema, HealthSchema, KeyGenRequestSchema, KeyGenResultSchema, GetKnownAddressesDataSchema, GetTokenRegistryDataSchema, GetChainRegistryDataSchema, ChainRegistryEntrySchema, SelectedSigningKeySchema, ManagementSigningMethodSchema, Ed25519ManagementSigningSchema, ConnectivityHealthGroupSchema, SubscriptionSchema, SuccessRateSchema, ADDRESS_BOOK_REGISTRY_API_PATHS, TOKEN_REGISTRY_API_PATHS, CHAIN_REGISTRY_API_PATHS, } from './schemas/extended.js';
+export * from './mcp/index.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,mBAAmB,EACnB,kBAAkB,GAElB,MAAM,oBAAoB,CAAC;AAI5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAElC,OAAO,EAAC,MAAM,EAAE,OAAO,EAAC,MAAM,mBAAmB,CAAC;AAClD,OAAO,EACN,gBAAgB,EAChB,kBAAkB,EAClB,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,GAClB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACN,oBAAoB,EACpB,4BAA4B,EAC5B,mBAAmB,EACnB,cAAc,EACd,qBAAqB,EACrB,oBAAoB,EACpB,2BAA2B,EAC3B,uBAAuB,EACvB,4BAA4B,EAC5B,0BAA0B,EAC1B,mBAAmB,EACnB,6BAA6B,EAC7B,6BAA6B,EAC7B,mBAAmB,EACnB,8BAA8B,EAC9B,oCAAoC,EACpC,gCAAgC,EAChC,oBAAoB,EACpB,0BAA0B,GAO1B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACN,yBAAyB,EACzB,yBAAyB,GAIzB,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACN,sBAAsB,GAEtB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACN,mBAAmB,EACnB,2BAA2B,EAC3B,uCAAuC,EACvC,8BAA8B,GAI9B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAC,mBAAmB,EAAsB,MAAM,qBAAqB,CAAC;AAC7E,OAAO,EACN,2BAA2B,EAC3B,kCAAkC,EAClC,8BAA8B,GAE9B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAC,oBAAoB,EAAmB,MAAM,0BAA0B,CAAC;AAChF,OAAO,EACN,oCAAoC,EACpC,2BAA2B,GAG3B,MAAM,0BAA0B,CAAC;AAElC,OAAO,EACN,qBAAqB,GACrB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACN,kBAAkB,EAClB,8BAA8B,GAC9B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAC,iBAAiB,EAAC,MAAM,+BAA+B,CAAC;AAChE,OAAO,EACN,aAAa,EACb,cAAc,EACd,gBAAgB,EAChB,0BAA0B,GAC1B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAC,6BAA6B,EAAC,MAAM,+BAA+B,CAAC;AAC5E,OAAO,EAAC,2BAA2B,EAAC,MAAM,6BAA6B,CAAC;AACxE,OAAO,EACN,qBAAqB,EACrB,uBAAuB,GACvB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAC,iBAAiB,EAAC,MAAM,mCAAmC,CAAC;AACpE,OAAO,EAAC,mBAAmB,EAAC,MAAM,qCAAqC,CAAC;AACxE,OAAO,EAAC,sBAAsB,EAAC,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAC,6BAA6B,EAAC,MAAM,iCAAiC,CAAC;AAC9E,OAAO,EACN,0BAA0B,EAC1B,yBAAyB,GACzB,MAAM,uBAAuB,CAAC;AAC/B,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AAEtC,OAAO,EACN,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,oBAAoB,EACpB,sBAAsB,EACtB,iBAAiB,EACjB,0BAA0B,EAC1B,kBAAkB,GAGlB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACN,cAAc,EACd,cAAc,EACd,gBAAgB,EAChB,SAAS,EACT,qBAAqB,EACrB,OAAO,GACP,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACN,sBAAsB,EACtB,wBAAwB,EACxB,6BAA6B,GAC7B,MAAM,iCAAiC,CAAC;AACzC,OAAO,EACN,gBAAgB,EAChB,kBAAkB,EAClB,uBAAuB,GACvB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACN,gBAAgB,EAChB,yBAAyB,EACzB,kBAAkB,EAClB,uBAAuB,GACvB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EACN,qBAAqB,EACrB,oBAAoB,EACpB,iBAAiB,EACjB,UAAU,EACV,YAAY,EACZ,mBAAmB,EACnB,kBAAkB,EAClB,2BAA2B,EAC3B,0BAA0B,EAC1B,0BAA0B,EAC1B,wBAAwB,EACxB,wBAAwB,EACxB,6BAA6B,EAC7B,8BAA8B,EAC9B,6BAA6B,EAC7B,kBAAkB,EAClB,iBAAiB,EACjB,+BAA+B,EAC/B,wBAAwB,EACxB,wBAAwB,GAgBxB,MAAM,uBAAuB,CAAC;AAE/B,cAAc,gBAAgB,CAAC"}

package/dist/internal/ed25519/management-signing.d.ts

@@ -0,0 +1,51 @@
+import type { NodeSdkConfig } from '../../config/schema.js';
+import { MPA_HOME_DIR, MANAGEMENT_KEYS_DIR } from '../../config/paths.js';
+import type { ManagementKeyOption } from '../../schemas/extended.js';
+export type { ManagementKeyOption } from '../../schemas/extended.js';
+export type LocalManagementKeyEntry = {
+    fileName: string;
+    publicKeyRaw: string;
+    publicKeyHex?: string;
+};
+type ToMcpApiError = (message: string, data?: unknown) => Error;
+type MgtGet = <T>(route: string, params?: Record<string, string>) => Promise<T>;
+export declare function normalizeEd25519PublicKeyToHex(value: string, toMcpApiError: ToMcpApiError): string;
+export declare function buildManagementSigningMessage(bodyWithEmptySig: Record<string, unknown>): string;
+export declare function getPreferredSignerPublicKeyHex(deps: {
+    mgtGET: MgtGet;
+    toMcpApiError: ToMcpApiError;
+}): Promise<string | undefined>;
+export declare function listLocalManagementPublicKeys(keyRoot: string, toMcpApiError: ToMcpApiError): Promise<LocalManagementKeyEntry[]>;
+export declare function ensureLocalKeyPairForPublicKey(publicKey: string, deps: {
+    keyRoot: string;
+    toMcpApiError: ToMcpApiError;
+}): Promise<{
+    fileName: string;
+    publicKeyPath: string;
+    privateKeyPath: string;
+}>;
+export declare function resolvePreferredManagementKeyOption(keyOptions: ManagementKeyOption[], deps: {
+    keyRoot: string;
+    toMcpApiError: ToMcpApiError;
+    mgtGET: MgtGet;
+}): Promise<ManagementKeyOption>;
+export declare function getPrivateKeyStatus(option: ManagementKeyOption, deps: {
+    keyRoot: string;
+    toMcpApiError: ToMcpApiError;
+}): Promise<{
+    available: boolean;
+    reason?: string;
+}>;
+export declare function assertAgentCanSignManagementRequests(deps: {
+    keyRoot: string;
+    mgtGET: MgtGet;
+    toMcpApiError: ToMcpApiError;
+}): Promise<void>;
+export declare function signManagementMessage(option: ManagementKeyOption, message: string, deps: {
+    keyRoot: string;
+    toMcpApiError: ToMcpApiError;
+    assertAgentCanSignManagementRequests: () => Promise<void>;
+    config?: NodeSdkConfig;
+}): Promise<string>;
+export { MANAGEMENT_KEYS_DIR, MPA_HOME_DIR };
+//# sourceMappingURL=management-signing.d.ts.map

package/dist/internal/ed25519/management-signing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"management-signing.d.ts","sourceRoot":"","sources":["../../../src/internal/ed25519/management-signing.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAC,YAAY,EAAE,mBAAmB,EAAC,MAAM,uBAAuB,CAAC;AAGxE,OAAO,KAAK,EAAC,mBAAmB,EAAC,MAAM,2BAA2B,CAAC;AAEnE,YAAY,EAAC,mBAAmB,EAAC,MAAM,2BAA2B,CAAC;AAEnE,MAAM,MAAM,uBAAuB,GAAG;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,KAAK,aAAa,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,KAAK,KAAK,CAAC;AAChE,KAAK,MAAM,GAAG,CAAC,CAAC,EACf,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAC3B,OAAO,CAAC,CAAC,CAAC,CAAC;AAEhB,wBAAgB,8BAA8B,CAC7C,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,aAAa,GAC1B,MAAM,CASR;AAED,wBAAgB,6BAA6B,CAC5C,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACvC,MAAM,CAER;AAED,wBAAsB,8BAA8B,CAAC,IAAI,EAAE;IAC1D,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,aAAa,CAAC;CAC7B,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAsB9B;AAED,wBAAsB,6BAA6B,CAClD,OAAO,EAAE,MAAM,EACf,aAAa,EAAE,aAAa,GAC1B,OAAO,CAAC,uBAAuB,EAAE,CAAC,CA4BpC;AAkDD,wBAAsB,8BAA8B,CACnD,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,aAAa,CAAA;CAAC,GACnD,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAA;CAAC,CAAC,CA6B5E;AAED,wBAAsB,mCAAmC,CACxD,UAAU,EAAE,mBAAmB,EAAE,EACjC,IAAI,EAAE;IACL,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,aAAa,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;CACf,GACC,OAAO,CAAC,mBAAmB,CAAC,CAyD9B;AAED,wBAAsB,mBAAmB,CACxC,MAAM,EAAE,mBAAmB,EAC3B,IAAI,EAAE;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,aAAa,CAAA;CAAC,GACnD,OAAO,CAAC;IAAC,SAAS,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAC,CAAC,CAUhD;AAED,wBAAsB,oCAAoC,CAAC,IAAI,EAAE;IAChE,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,aAAa,CAAC;CAC7B,GAAG,OAAO,CAAC,IAAI,CAAC,CAkBhB;AAED,wBAAsB,qBAAqB,CAC1C,MAAM,EAAE,mBAAmB,EAC3B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE;IACL,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,aAAa,CAAC;IAC7B,oCAAoC,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1D,MAAM,CAAC,EAAE,aAAa,CAAC;CACvB,GACC,OAAO,CAAC,MAAM,CAAC,CASjB;AAED,OAAO,EAAC,mBAAmB,EAAE,YAAY,EAAC,CAAC"}

package/dist/internal/ed25519/management-signing.js

@@ -0,0 +1,198 @@
+import { promises as fs } from 'node:fs';
+import path from 'node:path';
+import { MPA_HOME_DIR, MANAGEMENT_KEYS_DIR } from '../../config/paths.js';
+import { discoverKeys, resolveKeyPath } from '../../config/keys.js';
+import { signUtf8Message, readPublicKeyHex } from '../../api/management-key.js';
+export function normalizeEd25519PublicKeyToHex(value, toMcpApiError) {
+    const trimmed = value.trim();
+    const normalizedHex = trimmed.toLowerCase().replace(/^0x/, '');
+    if (/^[a-f0-9]{64}$/.test(normalizedHex)) {
+        return normalizedHex;
+    }
+    throw toMcpApiError('Unsupported public key format; expected 64-character hex Ed25519 key');
+}
+export function buildManagementSigningMessage(bodyWithEmptySig) {
+    return JSON.stringify(bodyWithEmptySig);
+}
+export async function getPreferredSignerPublicKeyHex(deps) {
+    const { mgtGET, toMcpApiError } = deps;
+    try {
+        const raw = await mgtGET('/getPreferredSigner');
+        if (typeof raw === 'string') {
+            const s = raw.trim();
+            return s ? normalizeEd25519PublicKeyToHex(s, toMcpApiError) : undefined;
+        }
+        if (raw && typeof raw === 'object') {
+            const obj = raw;
+            const candidate = [obj.publicKeyHex, obj.publicKey, obj.key].find(v => typeof v === 'string');
+            if (!candidate || candidate.trim().length === 0) {
+                return undefined;
+            }
+            return normalizeEd25519PublicKeyToHex(candidate, toMcpApiError);
+        }
+        return undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+export async function listLocalManagementPublicKeys(keyRoot, toMcpApiError) {
+    const keyDir = path.join(keyRoot, 'management_keys');
+    let entries = [];
+    try {
+        entries = await fs.readdir(keyDir);
+    }
+    catch {
+        return [];
+    }
+    const pubFiles = entries.filter(entry => entry.endsWith('.pub'));
+    const results = [];
+    for (const pubFile of pubFiles) {
+        const fileName = pubFile.slice(0, -4);
+        const pubPath = path.join(keyDir, pubFile);
+        try {
+            const raw = (await fs.readFile(pubPath, 'utf8')).trim();
+            let publicKeyHex;
+            try {
+                publicKeyHex = normalizeEd25519PublicKeyToHex(raw, toMcpApiError);
+            }
+            catch {
+                publicKeyHex = undefined;
+            }
+            results.push({ fileName, publicKeyRaw: raw, publicKeyHex });
+        }
+        catch {
+            // ignore unreadable keys
+        }
+    }
+    return results;
+}
+async function resolvePrivateKeyPathForPublicKey(publicKey, keyRoot, config, toMcpApiError) {
+    const normalized = publicKey.replace(/^0x/i, '').toLowerCase();
+    const managementDir = path.join(keyRoot, 'management_keys');
+    if (toMcpApiError) {
+        const localKeys = await listLocalManagementPublicKeys(keyRoot, toMcpApiError);
+        for (const entry of localKeys) {
+            if (entry.publicKeyHex?.toLowerCase() === normalized) {
+                return path.join(managementDir, entry.fileName);
+            }
+        }
+    }
+    if (config) {
+        const keys = discoverKeys(config.node.mpcConfigPath);
+        for (const key of keys) {
+            const pub = readPublicKeyHex(key.path)?.toLowerCase();
+            if (pub === normalized) {
+                return key.path;
+            }
+        }
+        const defaultPath = resolveKeyPath(config.signer.defaultKey, config.signer.defaultKeyPath, config.node.mpcConfigPath);
+        if (defaultPath) {
+            const defaultPub = readPublicKeyHex(defaultPath)?.toLowerCase();
+            if (defaultPub === normalized) {
+                return defaultPath;
+            }
+        }
+    }
+    throw new Error(`No local private key found for management public key ${publicKey}`);
+}
+export async function ensureLocalKeyPairForPublicKey(publicKey, deps) {
+    const { keyRoot, toMcpApiError } = deps;
+    const keyDir = path.join(keyRoot, 'management_keys');
+    const normalizedTarget = normalizeEd25519PublicKeyToHex(publicKey, toMcpApiError);
+    const localKeys = await listLocalManagementPublicKeys(keyRoot, toMcpApiError);
+    const match = localKeys.find(k => k.publicKeyHex === normalizedTarget);
+    if (!match) {
+        throw toMcpApiError('Preferred signer key does not exist locally in management_keys', { preferredKey: normalizedTarget, keyDirectory: keyDir });
+    }
+    const privateKeyPath = path.join(keyDir, match.fileName);
+    try {
+        await fs.access(privateKeyPath);
+    }
+    catch {
+        throw toMcpApiError('Preferred signer key does not have a corresponding private key', { preferredKey: normalizedTarget, expectedPrivateKeyPath: privateKeyPath });
+    }
+    return {
+        fileName: match.fileName,
+        publicKeyPath: path.join(keyDir, `${match.fileName}.pub`),
+        privateKeyPath,
+    };
+}
+export async function resolvePreferredManagementKeyOption(keyOptions, deps) {
+    const { keyRoot, toMcpApiError, mgtGET } = deps;
+    const preferred = await getPreferredSignerPublicKeyHex({ mgtGET, toMcpApiError });
+    const failures = [];
+    if (preferred) {
+        try {
+            const normalizedPreferred = normalizeEd25519PublicKeyToHex(preferred, toMcpApiError);
+            const selected = keyOptions.find(opt => normalizeEd25519PublicKeyToHex(opt.value, toMcpApiError) ===
+                normalizedPreferred);
+            if (!selected) {
+                throw toMcpApiError('Preferred signer is not in allowed management keys', {
+                    preferredSigner: normalizedPreferred,
+                    allowedKeys: keyOptions.map(k => k.value),
+                });
+            }
+            await ensureLocalKeyPairForPublicKey(normalizedPreferred, {
+                keyRoot,
+                toMcpApiError,
+            });
+            return selected;
+        }
+        catch (error) {
+            failures.push({
+                key: preferred,
+                reason: error instanceof Error ? error.message : String(error),
+            });
+        }
+    }
+    for (const opt of keyOptions) {
+        try {
+            await ensureLocalKeyPairForPublicKey(opt.value, {
+                keyRoot,
+                toMcpApiError,
+            });
+            return opt;
+        }
+        catch (error) {
+            failures.push({
+                key: opt.value,
+                reason: error instanceof Error ? error.message : String(error),
+            });
+        }
+    }
+    throw toMcpApiError('No preferred signer is set, and no allowed management key has a usable local private key', { failures });
+}
+export async function getPrivateKeyStatus(option, deps) {
+    try {
+        await ensureLocalKeyPairForPublicKey(option.value, deps);
+        return { available: true };
+    }
+    catch (error) {
+        return {
+            available: false,
+            reason: error instanceof Error ? error.message : String(error),
+        };
+    }
+}
+export async function assertAgentCanSignManagementRequests(deps) {
+    const { keyRoot, mgtGET, toMcpApiError } = deps;
+    const configuredKeys = await mgtGET('/getAllowedEd25519MgtKeys');
+    if (configuredKeys.length === 0) {
+        throw toMcpApiError('No EdDSA management keys are configured. Configure a bootstrap Ed25519 key before agent-signed management requests.');
+    }
+    if (configuredKeys.length === 1) {
+        const bootstrap = configuredKeys[0];
+        await ensureLocalKeyPairForPublicKey(bootstrap.publicKey, {
+            keyRoot,
+            toMcpApiError,
+        });
+    }
+}
+export async function signManagementMessage(option, message, deps) {
+    await deps.assertAgentCanSignManagementRequests();
+    const keyPath = await resolvePrivateKeyPathForPublicKey(option.value, deps.keyRoot, deps.config, deps.toMcpApiError);
+    return signUtf8Message(keyPath, message);
+}
+export { MANAGEMENT_KEYS_DIR, MPA_HOME_DIR };
+//# sourceMappingURL=management-signing.js.map

package/dist/internal/ed25519/management-signing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"management-signing.js","sourceRoot":"","sources":["../../../src/internal/ed25519/management-signing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,QAAQ,IAAI,EAAE,EAAC,MAAM,SAAS,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAC,YAAY,EAAE,mBAAmB,EAAC,MAAM,uBAAuB,CAAC;AACxE,OAAO,EAAC,YAAY,EAAE,cAAc,EAAC,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAC,eAAe,EAAE,gBAAgB,EAAC,MAAM,6BAA6B,CAAC;AAiB9E,MAAM,UAAU,8BAA8B,CAC7C,KAAa,EACb,aAA4B;IAE5B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,MAAM,aAAa,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC/D,IAAI,gBAAgB,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;QAC1C,OAAO,aAAa,CAAC;IACtB,CAAC;IACD,MAAM,aAAa,CAClB,sEAAsE,CACtE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC5C,gBAAyC;IAEzC,OAAO,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAAC,IAGpD;IACA,MAAM,EAAC,MAAM,EAAE,aAAa,EAAC,GAAG,IAAI,CAAC;IACrC,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,MAAM,MAAM,CAAU,qBAAqB,CAAC,CAAC;QACzD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;YACrB,OAAO,CAAC,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACzE,CAAC;QACD,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,GAAG,GAAG,GAA8B,CAAC;YAC3C,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,CAChE,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CACJ,CAAC;YACxB,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjD,OAAO,SAAS,CAAC;YAClB,CAAC;YACD,OAAO,8BAA8B,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QACjE,CAAC;QACD,OAAO,SAAS,CAAC;IAClB,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAClD,OAAe,EACf,aAA4B;IAE5B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IACrD,IAAI,OAAO,GAAa,EAAE,CAAC;IAC3B,IAAI,CAAC;QACJ,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,CAAC;IACX,CAAC;IAED,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IACjE,MAAM,OAAO,GAA8B,EAAE,CAAC;IAC9C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAChC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YACxD,IAAI,YAAgC,CAAC;YACrC,IAAI,CAAC;gBACJ,YAAY,GAAG,8BAA8B,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;YACnE,CAAC;YAAC,MAAM,CAAC;gBACR,YAAY,GAAG,SAAS,CAAC;YAC1B,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,EAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,EAAE,YAAY,EAAC,CAAC,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACR,yBAAyB;QAC1B,CAAC;IACF,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,KAAK,UAAU,iCAAiC,CAC/C,SAAiB,EACjB,OAAe,EACf,MAAsB,EACtB,aAA6B;IAE7B,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC/D,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IAE5D,IAAI,aAAa,EAAE,CAAC;QACnB,MAAM,SAAS,GAAG,MAAM,6BAA6B,CACpD,OAAO,EACP,aAAa,CACb,CAAC;QACF,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;YAC/B,IAAI,KAAK,CAAC,YAAY,EAAE,WAAW,EAAE,KAAK,UAAU,EAAE,CAAC;gBACtD,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YACjD,CAAC;QACF,CAAC;IACF,CAAC;IAED,IAAI,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,GAAG,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACrD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,CAAC;YACtD,IAAI,GAAG,KAAK,UAAU,EAAE,CAAC;gBACxB,OAAO,GAAG,CAAC,IAAI,CAAC;YACjB,CAAC;QACF,CAAC;QAED,MAAM,WAAW,GAAG,cAAc,CACjC,MAAM,CAAC,MAAM,CAAC,UAAU,EACxB,MAAM,CAAC,MAAM,CAAC,cAAc,EAC5B,MAAM,CAAC,IAAI,CAAC,aAAa,CACzB,CAAC;QACF,IAAI,WAAW,EAAE,CAAC;YACjB,MAAM,UAAU,GAAG,gBAAgB,CAAC,WAAW,CAAC,EAAE,WAAW,EAAE,CAAC;YAChE,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;gBAC/B,OAAO,WAAW,CAAC;YACpB,CAAC;QACF,CAAC;IACF,CAAC;IAED,MAAM,IAAI,KAAK,CACd,wDAAwD,SAAS,EAAE,CACnE,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,8BAA8B,CACnD,SAAiB,EACjB,IAAqD;IAErD,MAAM,EAAC,OAAO,EAAE,aAAa,EAAC,GAAG,IAAI,CAAC;IACtC,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IACrD,MAAM,gBAAgB,GAAG,8BAA8B,CACtD,SAAS,EACT,aAAa,CACb,CAAC;IACF,MAAM,SAAS,GAAG,MAAM,6BAA6B,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IAC9E,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,gBAAgB,CAAC,CAAC;IACvE,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,aAAa,CAClB,gEAAgE,EAChE,EAAC,YAAY,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,EAAC,CACtD,CAAC;IACH,CAAC;IACD,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IACzD,IAAI,CAAC;QACJ,MAAM,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,aAAa,CAClB,gEAAgE,EAChE,EAAC,YAAY,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,cAAc,EAAC,CACxE,CAAC;IACH,CAAC;IACD,OAAO;QACN,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,QAAQ,MAAM,CAAC;QACzD,cAAc;KACd,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACxD,UAAiC,EACjC,IAIC;IAED,MAAM,EAAC,OAAO,EAAE,aAAa,EAAE,MAAM,EAAC,GAAG,IAAI,CAAC;IAC9C,MAAM,SAAS,GAAG,MAAM,8BAA8B,CAAC,EAAC,MAAM,EAAE,aAAa,EAAC,CAAC,CAAC;IAChF,MAAM,QAAQ,GAAyC,EAAE,CAAC;IAE1D,IAAI,SAAS,EAAE,CAAC;QACf,IAAI,CAAC;YACJ,MAAM,mBAAmB,GAAG,8BAA8B,CACzD,SAAS,EACT,aAAa,CACb,CAAC;YACF,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAC/B,GAAG,CAAC,EAAE,CACL,8BAA8B,CAAC,GAAG,CAAC,KAAK,EAAE,aAAa,CAAC;gBACxD,mBAAmB,CACpB,CAAC;YACF,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACf,MAAM,aAAa,CAClB,oDAAoD,EACpD;oBACC,eAAe,EAAE,mBAAmB;oBACpC,WAAW,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;iBACzC,CACD,CAAC;YACH,CAAC;YACD,MAAM,8BAA8B,CAAC,mBAAmB,EAAE;gBACzD,OAAO;gBACP,aAAa;aACb,CAAC,CAAC;YACH,OAAO,QAAQ,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,QAAQ,CAAC,IAAI,CAAC;gBACb,GAAG,EAAE,SAAS;gBACd,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,CAAC;YACJ,MAAM,8BAA8B,CAAC,GAAG,CAAC,KAAK,EAAE;gBAC/C,OAAO;gBACP,aAAa;aACb,CAAC,CAAC;YACH,OAAO,GAAG,CAAC;QACZ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,QAAQ,CAAC,IAAI,CAAC;gBACb,GAAG,EAAE,GAAG,CAAC,KAAK;gBACd,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC9D,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,MAAM,aAAa,CAClB,0FAA0F,EAC1F,EAAC,QAAQ,EAAC,CACV,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACxC,MAA2B,EAC3B,IAAqD;IAErD,IAAI,CAAC;QACJ,MAAM,8BAA8B,CAAC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACzD,OAAO,EAAC,SAAS,EAAE,IAAI,EAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,OAAO;YACN,SAAS,EAAE,KAAK;YAChB,MAAM,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC;IACH,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oCAAoC,CAAC,IAI1D;IACA,MAAM,EAAC,OAAO,EAAE,MAAM,EAAE,aAAa,EAAC,GAAG,IAAI,CAAC;IAC9C,MAAM,cAAc,GAAG,MAAM,MAAM,CAClC,2BAA2B,CAC3B,CAAC;IACF,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,aAAa,CAClB,qHAAqH,CACrH,CAAC;IACH,CAAC;IAED,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,SAAS,GAAG,cAAc,CAAC,CAAC,CAAE,CAAC;QACrC,MAAM,8BAA8B,CAAC,SAAS,CAAC,SAAS,EAAE;YACzD,OAAO;YACP,aAAa;SACb,CAAC,CAAC;IACJ,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAC1C,MAA2B,EAC3B,OAAe,EACf,IAKC;IAED,MAAM,IAAI,CAAC,oCAAoC,EAAE,CAAC;IAClD,MAAM,OAAO,GAAG,MAAM,iCAAiC,CACtD,MAAM,CAAC,KAAK,EACZ,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,aAAa,CAClB,CAAC;IACF,OAAO,eAAe,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AAC1C,CAAC;AAED,OAAO,EAAC,mBAAmB,EAAE,YAAY,EAAC,CAAC"}

package/dist/internal/ed25519/openssh-ed25519.d.ts

@@ -0,0 +1,20 @@
+/**
+ * OpenSSH "openssh-key-v1" unencrypted Ed25519 PEM ("BEGIN OPENSSH PRIVATE KEY") import.
+ * Node.js + OpenSSL 3.6+ commonly reject this envelope via createPrivateKey(); we decode wire
+ * format per OpenSSH PROTOCOL.key and import via JWK.
+ */
+import { KeyObject } from "crypto";
+export declare const OPENSSH_V1_MAGIC: Buffer<ArrayBuffer>;
+export declare function readSshString(buf: Buffer, offset: number): {
+    value: Buffer;
+    next: number;
+};
+/** @returns first 32-byte seed and 32-byte public key (from private pair string). */
+export declare function parseUnencryptedOpenSshEd25519FromV1Blob(blob: Buffer): {
+    seed32: Buffer;
+    pub32: Buffer;
+    comment: string;
+};
+/** Import unencrypted ssh-keygen/OpenSSH PEM into a native KeyObject (Ed25519 only). */
+export declare function importUnencryptedOpenSshEd25519PrivateKeyFromPem(pemArmored: string): KeyObject;
+//# sourceMappingURL=openssh-ed25519.d.ts.map

package/dist/internal/ed25519/openssh-ed25519.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openssh-ed25519.d.ts","sourceRoot":"","sources":["../../../src/internal/ed25519/openssh-ed25519.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAoB,SAAS,EAAE,MAAM,QAAQ,CAAA;AAEpD,eAAO,MAAM,gBAAgB,qBAAkC,CAAA;AAE/D,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAU1F;AAoBD,qFAAqF;AACrF,wBAAgB,wCAAwC,CAAC,IAAI,EAAE,MAAM,GAAG;IACtE,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;CAChB,CA4FA;AAMD,wFAAwF;AACxF,wBAAgB,gDAAgD,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAY9F"}

package/dist/internal/ed25519/openssh-ed25519.js

@@ -0,0 +1,129 @@
+/**
+ * OpenSSH "openssh-key-v1" unencrypted Ed25519 PEM ("BEGIN OPENSSH PRIVATE KEY") import.
+ * Node.js + OpenSSL 3.6+ commonly reject this envelope via createPrivateKey(); we decode wire
+ * format per OpenSSH PROTOCOL.key and import via JWK.
+ */
+import { createPrivateKey } from "crypto";
+export const OPENSSH_V1_MAGIC = Buffer.from("openssh-key-v1\0");
+export function readSshString(buf, offset) {
+    if (offset + 4 > buf.length) {
+        throw new Error(`SSH string header EOF at offset ${offset}`);
+    }
+    const len = buf.readUInt32BE(offset);
+    const next = offset + 4 + len;
+    if (next > buf.length || len < 0) {
+        throw new Error(`SSH string length ${len} out of range at offset ${offset}`);
+    }
+    return { value: buf.subarray(offset + 4, next), next };
+}
+function pemBase64BodyForOpenSshBlock(pemArmored) {
+    const m = pemArmored.match(/-----BEGIN OPENSSH PRIVATE KEY-----([\s\S]*?)-----END OPENSSH PRIVATE KEY-----/i);
+    if (!m) {
+        throw new Error("missing -----BEGIN/END OPENSSH PRIVATE KEY----- PEM block");
+    }
+    const compact = m[1].replace(/\s+/g, "");
+    return Buffer.from(compact, "base64");
+}
+function assertOpenSshPadding(privList, offsetAfterComment) {
+    for (let pad = 1, o = offsetAfterComment; o < privList.length; pad++, o++) {
+        const expected = pad & 0xff;
+        if (privList[o] !== expected) {
+            throw new Error("invalid OpenSSH private key padding (file may be truncated or encrypted incorrectly)");
+        }
+    }
+}
+/** @returns first 32-byte seed and 32-byte public key (from private pair string). */
+export function parseUnencryptedOpenSshEd25519FromV1Blob(blob) {
+    if (blob.length < OPENSSH_V1_MAGIC.length || !blob.subarray(0, OPENSSH_V1_MAGIC.length).equals(OPENSSH_V1_MAGIC)) {
+        throw new Error("not an openssh-key-v1 blob");
+    }
+    let offset = OPENSSH_V1_MAGIC.length;
+    const cipherName = readSshString(blob, offset);
+    offset = cipherName.next;
+    const kdfName = readSshString(blob, offset);
+    offset = kdfName.next;
+    const kdfOptions = readSshString(blob, offset);
+    offset = kdfOptions.next;
+    if (cipherName.value.toString("utf8") !== "none" || kdfName.value.toString("utf8") !== "none") {
+        throw new Error("OpenSSH private key is encrypted; use `ssh-keygen -p -N '' -m PKCS8 -f <keyfile>` to write an importable PKCS#8 PEM, or provide an unencrypted key");
+    }
+    const nKeys = blob.readUInt32BE(offset);
+    offset += 4;
+    if (nKeys !== 1) {
+        throw new Error(`OpenSSH file has ${nKeys} keys; only single-key Ed25519 files are supported`);
+    }
+    /** Public ssh wire blobs (validated against private material). */
+    const pubBlob = readSshString(blob, offset);
+    offset = pubBlob.next;
+    const encryptedPrivateListMaybe = readSshString(blob, offset);
+    offset = encryptedPrivateListMaybe.next;
+    const privList = encryptedPrivateListMaybe.value;
+    if (privList.length < 16) {
+        throw new Error("OpenSSH private key list too short");
+    }
+    const check1 = privList.readUInt32BE(0);
+    const check2 = privList.readUInt32BE(4);
+    if (check1 !== check2) {
+        throw new Error("OpenSSH private key checkints mismatch (wrong passphrase or corrupted file)");
+    }
+    let inner = 8;
+    const algo = readSshString(privList, inner);
+    inner = algo.next;
+    const ak = algo.value.toString("utf8");
+    if (ak !== "ssh-ed25519") {
+        throw new Error(`OpenSSH private key algorithm is ${JSON.stringify(ak)}, expected "ssh-ed25519"`);
+    }
+    const pubFromPrivate = readSshString(privList, inner);
+    inner = pubFromPrivate.next;
+    if (pubFromPrivate.value.length !== 32) {
+        throw new Error(`invalid Ed25519 public key length ${pubFromPrivate.value.length}`);
+    }
+    const pair = readSshString(privList, inner);
+    inner = pair.next;
+    if (pair.value.length !== 64) {
+        throw new Error(`invalid Ed25519 secret+public concat length ${pair.value.length}`);
+    }
+    const seed32 = Buffer.from(pair.value.subarray(0, 32));
+    const duplicatePub32 = Buffer.from(pair.value.subarray(32, 64));
+    if (!duplicatePub32.equals(pubFromPrivate.value)) {
+        throw new Error("OpenSSH Ed25519 public key mismatch inside private pair (corrupted key)");
+    }
+    const cm = readSshString(privList, inner);
+    inner = cm.next;
+    /** Wire-format public blob should match pubkey from private serialization. */
+    const pubOuter = pubBlob.value;
+    let po = 0;
+    const pubAlgo = readSshString(pubOuter, po);
+    po = pubAlgo.next;
+    if (pubAlgo.value.toString("utf8") !== "ssh-ed25519") {
+        throw new Error("OpenSSH outer public blob algorithm mismatch");
+    }
+    const pubOuterKeyBytes = readSshString(pubOuter, po).value;
+    if (!pubOuterKeyBytes.equals(pubFromPrivate.value)) {
+        throw new Error("OpenSSH outer public blob does not match embedded private pubkey (corrupted key)");
+    }
+    assertOpenSshPadding(privList, inner);
+    return {
+        seed32,
+        pub32: pubFromPrivate.value,
+        comment: cm.value.toString("utf8"),
+    };
+}
+function b64Url(buf) {
+    return buf.toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
+}
+/** Import unencrypted ssh-keygen/OpenSSH PEM into a native KeyObject (Ed25519 only). */
+export function importUnencryptedOpenSshEd25519PrivateKeyFromPem(pemArmored) {
+    const blob = pemBase64BodyForOpenSshBlock(pemArmored.trim());
+    const { seed32, pub32 } = parseUnencryptedOpenSshEd25519FromV1Blob(blob);
+    return createPrivateKey({
+        format: "jwk",
+        key: {
+            kty: "OKP",
+            crv: "Ed25519",
+            d: b64Url(seed32),
+            x: b64Url(pub32),
+        },
+    });
+}
+//# sourceMappingURL=openssh-ed25519.js.map

package/dist/internal/ed25519/openssh-ed25519.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openssh-ed25519.js","sourceRoot":"","sources":["../../../src/internal/ed25519/openssh-ed25519.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,gBAAgB,EAAa,MAAM,QAAQ,CAAA;AAEpD,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;AAE/D,MAAM,UAAU,aAAa,CAAC,GAAW,EAAE,MAAc;IACvD,IAAI,MAAM,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,mCAAmC,MAAM,EAAE,CAAC,CAAA;IAC9D,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;IACpC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,GAAG,GAAG,CAAA;IAC7B,IAAI,IAAI,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,qBAAqB,GAAG,2BAA2B,MAAM,EAAE,CAAC,CAAA;IAC9E,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,EAAE,IAAI,EAAE,CAAA;AACxD,CAAC;AAED,SAAS,4BAA4B,CAAC,UAAkB;IACtD,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,iFAAiF,CAAC,CAAA;IAC7G,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAA;IAC9E,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACxC,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;AACvC,CAAC;AAED,SAAS,oBAAoB,CAAC,QAAgB,EAAE,kBAA0B;IACxE,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC,GAAG,kBAAkB,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1E,MAAM,QAAQ,GAAG,GAAG,GAAG,IAAI,CAAA;QAC3B,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,sFAAsF,CAAC,CAAA;QACzG,CAAC;IACH,CAAC;AACH,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,wCAAwC,CAAC,IAAY;IAKnE,IAAI,IAAI,CAAC,MAAM,GAAG,gBAAgB,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACjH,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;IAC/C,CAAC;IAED,IAAI,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAA;IACpC,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC9C,MAAM,GAAG,UAAU,CAAC,IAAI,CAAA;IACxB,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC3C,MAAM,GAAG,OAAO,CAAC,IAAI,CAAA;IACrB,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC9C,MAAM,GAAG,UAAU,CAAC,IAAI,CAAA;IAExB,IAAI,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,MAAM,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,MAAM,EAAE,CAAC;QAC9F,MAAM,IAAI,KAAK,CACb,oJAAoJ,CACrJ,CAAA;IACH,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAA;IACvC,MAAM,IAAI,CAAC,CAAA;IACX,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CAAC,oBAAoB,KAAK,oDAAoD,CAAC,CAAA;IAChG,CAAC;IAED,kEAAkE;IAClE,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC3C,MAAM,GAAG,OAAO,CAAC,IAAI,CAAA;IAErB,MAAM,yBAAyB,GAAG,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC7D,MAAM,GAAG,yBAAyB,CAAC,IAAI,CAAA;IAEvC,MAAM,QAAQ,GAAG,yBAAyB,CAAC,KAAK,CAAA;IAChD,IAAI,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAA;IACvD,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACvC,MAAM,MAAM,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAA;IACvC,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAA;IAChG,CAAC;IAED,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IAC3C,KAAK,GAAG,IAAI,CAAC,IAAI,CAAA;IACjB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IACtC,IAAI,EAAE,KAAK,aAAa,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,oCAAoC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,0BAA0B,CAAC,CAAA;IACnG,CAAC;IAED,MAAM,cAAc,GAAG,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IACrD,KAAK,GAAG,cAAc,CAAC,IAAI,CAAA;IAC3B,IAAI,cAAc,CAAC,KAAK,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,qCAAqC,cAAc,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAA;IACrF,CAAC;IAED,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IAC3C,KAAK,GAAG,IAAI,CAAC,IAAI,CAAA;IACjB,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,+CAA+C,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAA;IACrF,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;IACtD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAA;IAC/D,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAA;IAC5F,CAAC;IAED,MAAM,EAAE,GAAG,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IACzC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAA;IAEf,8EAA8E;IAC9E,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAA;IAC9B,IAAI,EAAE,GAAG,CAAC,CAAA;IACV,MAAM,OAAO,GAAG,aAAa,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAA;IAC3C,EAAE,GAAG,OAAO,CAAC,IAAI,CAAA;IACjB,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,aAAa,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;IACjE,CAAC;IACD,MAAM,gBAAgB,GAAG,aAAa,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,KAAK,CAAA;IAC1D,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,kFAAkF,CAAC,CAAA;IACrG,CAAC;IAED,oBAAoB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAA;IAErC,OAAO;QACL,MAAM;QACN,KAAK,EAAE,cAAc,CAAC,KAAK;QAC3B,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;KACnC,CAAA;AACH,CAAC;AAED,SAAS,MAAM,CAAC,GAAW;IACzB,OAAO,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAA;AACzF,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,gDAAgD,CAAC,UAAkB;IACjF,MAAM,IAAI,GAAG,4BAA4B,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAA;IAC5D,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,wCAAwC,CAAC,IAAI,CAAC,CAAA;IACxE,OAAO,gBAAgB,CAAC;QACtB,MAAM,EAAE,KAAK;QACb,GAAG,EAAE;YACH,GAAG,EAAE,KAAK;YACV,GAAG,EAAE,SAAS;YACd,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC;YACjB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC;SACjB;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/internal/management-request-signing.d.ts

@@ -0,0 +1,32 @@
+import type { NodeSdkConfig } from '../config/schema.js';
+import type { SdkResult } from '../detops/result.js';
+import { type ManagementKeyOption } from './ed25519/management-signing.js';
+import type { SelectedSigningKey } from '../schemas/extended.js';
+export type { ManagementKeyOption } from './ed25519/management-signing.js';
+export declare function fetchManagementKeyOptions(config: NodeSdkConfig): Promise<SdkResult<ManagementKeyOption[]>>;
+export declare function resolveManagementSigningKeyOption(config: NodeSdkConfig, keyOptions: ManagementKeyOption[]): Promise<SdkResult<ManagementKeyOption>>;
+export declare function getPreferredManagementKeyHex(config: NodeSdkConfig): Promise<SdkResult<{
+    publicKeyHex?: string;
+}>>;
+export type SignedManagementRequest = {
+    selectedSigningKey: ManagementKeyOption;
+    unsignedBody: Record<string, unknown>;
+    signingMessage: string;
+    signature: string;
+    body: Record<string, unknown>;
+};
+export declare function prepareSignedManagementRequest(config: NodeSdkConfig, buildUnsignedBody: (ctx: {
+    selectedSigningKey: ManagementKeyOption;
+}) => Record<string, unknown> | Promise<Record<string, unknown>>): Promise<SdkResult<SignedManagementRequest>>;
+export declare function buildClientSigManagementPostBody(unsignedBody: Record<string, unknown>, signedMessage: string, clientSig: string): Record<string, unknown>;
+export declare function buildTokenRegistrySigningMessage(payload: Record<string, unknown>): string;
+export declare function prepareActionSignedManagementRequest(config: NodeSdkConfig, buildSigningPayload: (ctx: {
+    selectedSigningKey: ManagementKeyOption;
+}) => Record<string, unknown> | Promise<Record<string, unknown>>): Promise<SdkResult<{
+    selectedSigningKey: ManagementKeyOption;
+    signingMessage: string;
+    signature: string;
+}>>;
+export declare function toSelectedSigningKey(option: ManagementKeyOption): SelectedSigningKey;
+export declare function postSignedManagementRequest(config: NodeSdkConfig, path: string, body: Record<string, unknown>): Promise<SdkResult<unknown>>;
+//# sourceMappingURL=management-request-signing.d.ts.map

package/dist/internal/management-request-signing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"management-request-signing.d.ts","sourceRoot":"","sources":["../../src/internal/management-request-signing.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,qBAAqB,CAAC;AAOvD,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAMN,KAAK,mBAAmB,EACxB,MAAM,iCAAiC,CAAC;AACzC,OAAO,KAAK,EAAC,kBAAkB,EAAC,MAAM,wBAAwB,CAAC;AAE/D,YAAY,EAAC,mBAAmB,EAAC,MAAM,iCAAiC,CAAC;AAiDzE,wBAAsB,yBAAyB,CAC9C,MAAM,EAAE,aAAa,GACnB,OAAO,CAAC,SAAS,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAwB3C;AAED,wBAAsB,iCAAiC,CACtD,MAAM,EAAE,aAAa,EACrB,UAAU,EAAE,mBAAmB,EAAE,GAC/B,OAAO,CAAC,SAAS,CAAC,mBAAmB,CAAC,CAAC,CAezC;AAED,wBAAsB,4BAA4B,CACjD,MAAM,EAAE,aAAa,GACnB,OAAO,CAAC,SAAS,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAC,CAAC,CAAC,CAe7C;AAED,MAAM,MAAM,uBAAuB,GAAG;IACrC,kBAAkB,EAAE,mBAAmB,CAAC;IACxC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9B,CAAC;AAEF,wBAAsB,8BAA8B,CACnD,MAAM,EAAE,aAAa,EACrB,iBAAiB,EAAE,CAAC,GAAG,EAAE;IACxB,kBAAkB,EAAE,mBAAmB,CAAC;CACxC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAC9D,OAAO,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC,CA+C7C;AAED,wBAAgB,gCAAgC,CAC/C,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACrC,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,GACf,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAIzB;AAED,wBAAgB,gCAAgC,CAC/C,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,CAER;AAED,wBAAsB,oCAAoC,CACzD,MAAM,EAAE,aAAa,EACrB,mBAAmB,EAAE,CAAC,GAAG,EAAE;IAC1B,kBAAkB,EAAE,mBAAmB,CAAC;CACxC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAC9D,OAAO,CACT,SAAS,CAAC;IACT,kBAAkB,EAAE,mBAAmB,CAAC;IACxC,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CAClB,CAAC,CACF,CAyCA;AAED,wBAAgB,oBAAoB,CACnC,MAAM,EAAE,mBAAmB,GACzB,kBAAkB,CAQpB;AAED,wBAAsB,2BAA2B,CAChD,MAAM,EAAE,aAAa,EACrB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC3B,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAE7B"}