@daski/pay 0.3.0 → 0.4.0

package/dist/signers/contract.d.ts

@@ -0,0 +1,34 @@
+/**
+ * What a contract-account signer must satisfy before it may buy.
+ *
+ * Two facts, both read rather than trusted: the gateway must verify contract
+ * accounts at all (`payerAccounts.types` in its well-known document), and the
+ * wallet must be deployed (`getCode` non-empty), because a counterfactual
+ * signature is refused at the gateway and the facilitator alike and a refusal
+ * there must never be the first signal. An EOA signer passes through here
+ * without a single RPC call (T7).
+ */
+import type { Address } from "viem";
+import type { SignerAdapter } from "@daski/x402-scheme";
+import { type ChainReader } from "../chain/reader.js";
+import { CliError } from "../cli/errors.js";
+import type { GatewayMetadata } from "../gateway/metadata.js";
+export type Deployment = "deployed" | "not-deployed" | "not-applicable";
+export declare const NOT_DEPLOYED_REMEDIATION = "Send a zero-value transfer from the wallet to itself with the circle CLI, then run doctor again.";
+export declare function isContractSigner(signer: SignerAdapter): boolean;
+export declare function signerNotDeployed(address: Address): CliError;
+export declare function gatewayEoaOnly(gatewayUrl: string): CliError;
+/** Whether a signer's wallet is deployed. EOA signers are not applicable and cost no RPC. */
+export declare function checkDeployment(signer: SignerAdapter, chain: ChainReader): Promise<Deployment>;
+/**
+ * Refuses a contract signer the gateway cannot verify or the chain has not
+ * seen deployed. Called before a purchase asks for a challenge, so nothing is
+ * signed for a wallet that cannot pay.
+ */
+export declare function assertContractSignerUsable(args: {
+    signer: SignerAdapter;
+    chain: ChainReader;
+    metadata: () => Promise<GatewayMetadata>;
+    gatewayUrl: string;
+}): Promise<void>;
+//# sourceMappingURL=contract.d.ts.map

package/dist/signers/contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../../src/signers/contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACpC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAAkB,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG,cAAc,GAAG,gBAAgB,CAAC;AAExE,eAAO,MAAM,wBAAwB,qGAC+D,CAAC;AAErG,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAE/D;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,QAAQ,CAQ5D;AAED,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,QAAQ,CAW3D;AAED,6FAA6F;AAC7F,wBAAsB,eAAe,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC,CAIpG;AAED;;;;GAIG;AACH,wBAAsB,0BAA0B,CAAC,IAAI,EAAE;IACrD,MAAM,EAAE,aAAa,CAAC;IACtB,KAAK,EAAE,WAAW,CAAC;IACnB,QAAQ,EAAE,MAAM,OAAO,CAAC,eAAe,CAAC,CAAC;IACzC,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,IAAI,CAAC,CAMhB"}

package/dist/signers/contract.js

@@ -0,0 +1,47 @@
+import { isDeployedCode } from "../chain/reader.js";
+import { CliError } from "../cli/errors.js";
+export const NOT_DEPLOYED_REMEDIATION = "Send a zero-value transfer from the wallet to itself with the circle CLI, then run doctor again.";
+export function isContractSigner(signer) {
+    return signer.describe().accountType === "contract";
+}
+export function signerNotDeployed(address) {
+    return new CliError({
+        code: "DASKI_SIGNER_NOT_DEPLOYED",
+        message: `The contract wallet ${address} has no code on this chain, so its signatures cannot be ` +
+            "verified and its purchases would be refused as counterfactual.",
+        remediation: NOT_DEPLOYED_REMEDIATION,
+    });
+}
+export function gatewayEoaOnly(gatewayUrl) {
+    return new CliError({
+        code: "DASKI_GATEWAY_EOA_ONLY",
+        message: `The gateway at ${gatewayUrl} verifies plain wallets (EOA) only; it does not list ` +
+            "contract accounts under payerAccounts.types, so a contract wallet cannot buy there yet.",
+        remediation: "On a durable machine use a local key (daski wallet create). On an ephemeral host, stop " +
+            "and tell the user that purchasing from this host is not available until the gateway " +
+            "enables contract wallets.",
+    });
+}
+/** Whether a signer's wallet is deployed. EOA signers are not applicable and cost no RPC. */
+export async function checkDeployment(signer, chain) {
+    if (!isContractSigner(signer))
+        return "not-applicable";
+    const code = await chain.getCode(await signer.getAddress());
+    return isDeployedCode(code) ? "deployed" : "not-deployed";
+}
+/**
+ * Refuses a contract signer the gateway cannot verify or the chain has not
+ * seen deployed. Called before a purchase asks for a challenge, so nothing is
+ * signed for a wallet that cannot pay.
+ */
+export async function assertContractSignerUsable(args) {
+    if (!isContractSigner(args.signer))
+        return;
+    const metadata = await args.metadata();
+    if (!metadata.payerAccounts?.types.includes("contract"))
+        throw gatewayEoaOnly(args.gatewayUrl);
+    const address = await args.signer.getAddress();
+    if (!isDeployedCode(await args.chain.getCode(address)))
+        throw signerNotDeployed(address);
+}
+//# sourceMappingURL=contract.js.map

package/dist/signers/contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.js","sourceRoot":"","sources":["../../src/signers/contract.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,cAAc,EAAoB,MAAM,oBAAoB,CAAC;AACtE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAK5C,MAAM,CAAC,MAAM,wBAAwB,GACnC,kGAAkG,CAAC;AAErG,MAAM,UAAU,gBAAgB,CAAC,MAAqB;IACpD,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC,WAAW,KAAK,UAAU,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAgB;IAChD,OAAO,IAAI,QAAQ,CAAC;QAClB,IAAI,EAAE,2BAA2B;QACjC,OAAO,EACL,uBAAuB,OAAO,0DAA0D;YACxF,gEAAgE;QAClE,WAAW,EAAE,wBAAwB;KACtC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,UAAkB;IAC/C,OAAO,IAAI,QAAQ,CAAC;QAClB,IAAI,EAAE,wBAAwB;QAC9B,OAAO,EACL,kBAAkB,UAAU,uDAAuD;YACnF,yFAAyF;QAC3F,WAAW,EACT,yFAAyF;YACzF,sFAAsF;YACtF,2BAA2B;KAC9B,CAAC,CAAC;AACL,CAAC;AAED,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAqB,EAAE,KAAkB;IAC7E,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC;QAAE,OAAO,gBAAgB,CAAC;IACvD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IAC5D,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC;AAC5D,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,IAKhD;IACC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO;IAC3C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;IACvC,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,MAAM,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC/F,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;IAC/C,IAAI,CAAC,cAAc,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAAE,MAAM,iBAAiB,CAAC,OAAO,CAAC,CAAC;AAC3F,CAAC"}

package/dist/signers/index.d.ts

@@ -1,23 +1,32 @@
 /**
  * Signer selection.
  *
- * Three adapters behind one interface: `local` (a viem account from the key
- * store, verified by the conformance suite), and `cdp` and `circle`
- * (candidates pending conformance). Whatever the backend, the request it
- * signs has already been through the §4 validator, and `daski doctor` puts
- * every adapter through the same self-test before calling it usable.
+ * Four adapters behind one interface: `local` (a viem account from the key
+ * store, verified by the conformance suite), `circle-agent` (a deployed
+ * contract account operated through the pinned Circle CLI, the default for
+ * agent-hosted runtimes), and `cdp` and `circle` (developer-controlled
+ * candidates). Whatever the backend, the request it signs has already been
+ * through the §4 validator, and `daski doctor` puts every adapter through the
+ * self-test for its account type before calling it usable.
  */
 import type { SignerAdapter } from "@daski/x402-scheme";
-import type { SignerKind } from "../config.js";
+import { type SignerKind } from "../config.js";
+import type { HostEnvironment } from "../host.js";
 import { createCdpSigner } from "./cdp.js";
 import { createCircleSigner } from "./circle.js";
+import { createCircleAgentSigner } from "./circleAgent.js";
 import { createLocalSigner } from "./local.js";
 export interface SignerSelection {
     kind: SignerKind;
     profile: string;
+    /** Where a local key may live on this host. */
+    host: HostEnvironment;
+    /** The profile's chain, which the Circle agent wallet maps to a chain name. */
+    chainId: number;
     cdpAccount?: string | undefined;
+    /** A Circle developer-controlled wallet id, or the agent wallet address to select. */
     circleWallet?: string | undefined;
 }
 export declare function createSigner(selection: SignerSelection): Promise<SignerAdapter>;
-export { createCdpSigner, createCircleSigner, createLocalSigner };
+export { createCdpSigner, createCircleAgentSigner, createCircleSigner, createLocalSigner };
 //# sourceMappingURL=index.d.ts.map

package/dist/signers/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/signers/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC;AAED,wBAAsB,YAAY,CAAC,SAAS,EAAE,eAAe,GAAG,OAAO,CAAC,aAAa,CAAC,CAerF;AAED,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/signers/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD,OAAO,EAAgB,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,UAAU,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,+CAA+C;IAC/C,IAAI,EAAE,eAAe,CAAC;IACtB,+EAA+E;IAC/E,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,sFAAsF;IACtF,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACnC;AAED,wBAAsB,YAAY,CAAC,SAAS,EAAE,eAAe,GAAG,OAAO,CAAC,aAAa,CAAC,CAiBrF;AAED,OAAO,EAAE,eAAe,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,CAAC"}

package/dist/signers/index.js

@@ -1,11 +1,15 @@
 import { CliError } from "../cli/errors.js";
+import { SIGNER_KINDS } from "../config.js";
 import { createCdpSigner } from "./cdp.js";
 import { createCircleSigner } from "./circle.js";
+import { createCircleAgentSigner } from "./circleAgent.js";
 import { createLocalSigner } from "./local.js";
 export async function createSigner(selection) {
     switch (selection.kind) {
         case "local":
-            return createLocalSigner(selection.profile);
+            return createLocalSigner(selection.profile, selection.host);
+        case "circle-agent":
+            return createCircleAgentSigner({ chainId: selection.chainId, address: selection.circleWallet });
         case "cdp":
             return createCdpSigner({ account: selection.cdpAccount });
         case "circle":
@@ -14,9 +18,9 @@ export async function createSigner(selection) {
             throw new CliError({
                 code: "DASKI_SIGNER_UNKNOWN",
                 message: `Unknown signer "${String(selection.kind)}".`,
-                remediation: "Set profiles.<name>.signer to one of: local, cdp, circle.",
+                remediation: `Set profiles.<name>.signer to one of: ${SIGNER_KINDS.join(", ")}.`,
             });
     }
 }
-export { createCdpSigner, createCircleSigner, createLocalSigner };
+export { createCdpSigner, createCircleAgentSigner, createCircleSigner, createLocalSigner };
 //# sourceMappingURL=index.js.map

package/dist/signers/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/signers/index.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAS/C,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,SAA0B;IAC3D,QAAQ,SAAS,CAAC,IAAI,EAAE,CAAC;QACvB,KAAK,OAAO;YACV,OAAO,iBAAiB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC9C,KAAK,KAAK;YACR,OAAO,eAAe,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC;QAC5D,KAAK,QAAQ;YACX,OAAO,kBAAkB,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC;QAChE;YACE,MAAM,IAAI,QAAQ,CAAC;gBACjB,IAAI,EAAE,sBAAsB;gBAC5B,OAAO,EAAE,mBAAmB,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI;gBACtD,WAAW,EAAE,2DAA2D;aACzE,CAAC,CAAC;IACP,CAAC;AACH,CAAC;AAED,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/signers/index.ts"],"names":[],"mappings":"AAYA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAmB,MAAM,cAAc,CAAC;AAE7D,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AACjD,OAAO,EAAE,uBAAuB,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAc/C,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,SAA0B;IAC3D,QAAQ,SAAS,CAAC,IAAI,EAAE,CAAC;QACvB,KAAK,OAAO;YACV,OAAO,iBAAiB,CAAC,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QAC9D,KAAK,cAAc;YACjB,OAAO,uBAAuB,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC;QAClG,KAAK,KAAK;YACR,OAAO,eAAe,CAAC,EAAE,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE,CAAC,CAAC;QAC5D,KAAK,QAAQ;YACX,OAAO,kBAAkB,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,YAAY,EAAE,CAAC,CAAC;QAChE;YACE,MAAM,IAAI,QAAQ,CAAC;gBACjB,IAAI,EAAE,sBAAsB;gBAC5B,OAAO,EAAE,mBAAmB,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI;gBACtD,WAAW,EAAE,yCAAyC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;aACjF,CAAC,CAAC;IACP,CAAC;AACH,CAAC;AAED,OAAO,EAAE,eAAe,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,CAAC"}

package/dist/signers/local.d.ts

@@ -1,3 +1,7 @@
 import type { SignerAdapter } from "@daski/x402-scheme";
-export declare function createLocalSigner(profile: string): Promise<SignerAdapter>;
+import { type HostEnvironment } from "../host.js";
+import { type KeyStoreSelection } from "../store/keystore.js";
+/** The store a profile's local key uses on this host. */
+export declare function localKeyStore(host: HostEnvironment): KeyStoreSelection;
+export declare function createLocalSigner(profile: string, host: HostEnvironment): Promise<SignerAdapter>;
 //# sourceMappingURL=local.d.ts.map

package/dist/signers/local.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"local.d.ts","sourceRoot":"","sources":["../../src/signers/local.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,aAAa,EAAuC,MAAM,oBAAoB,CAAC;AAG7F,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAc/E"}
+{"version":3,"file":"local.d.ts","sourceRoot":"","sources":["../../src/signers/local.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,aAAa,EAAuC,MAAM,oBAAoB,CAAC;AAC7F,OAAO,EACmD,KAAK,eAAe,EAC7E,MAAM,YAAY,CAAC;AACpB,OAAO,EAAsB,KAAK,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAElF,yDAAyD;AACzD,wBAAgB,aAAa,CAAC,IAAI,EAAE,eAAe,GAAG,iBAAiB,CAEtE;AAED,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,aAAa,CAAC,CAgBtG"}

package/dist/signers/local.js

@@ -3,13 +3,26 @@
  *
  * The key is held in this closure and never leaves it. `describe()` reports
  * where it came from so `doctor` can flag the developer environment variable.
+ *
+ * Before the key is loaded, the paid-use gate runs: a Linux host whose
+ * profile key was left in the kernel session keyring by an earlier release
+ * has no durable key, and that key is never used (`DASKI_KEY_NOT_DURABLE`).
+ * Hosted signers hold no local key and are not subject to this gate.
  */
 import { privateKeyToAccount } from "viem/accounts";
 import {} from "viem";
+import { detectLegacyKeyringEntry, keyBackendFor, keyNotDurable, } from "../host.js";
 import { loadKey, locateKey } from "../store/keystore.js";
-export async function createLocalSigner(profile) {
-    const location = await locateKey(profile);
-    const account = privateKeyToAccount(await loadKey(profile));
+/** The store a profile's local key uses on this host. */
+export function localKeyStore(host) {
+    return { host, backend: keyBackendFor(host, "local") };
+}
+export async function createLocalSigner(profile, host) {
+    const store = localKeyStore(host);
+    const location = await locateKey(profile, store);
+    if (!location && detectLegacyKeyringEntry(host, profile))
+        throw keyNotDurable(profile);
+    const account = privateKeyToAccount(await loadKey(profile, store));
     const description = {
         provider: location?.source === "environment" ? "local (env)" : "local",
         accountType: "eoa",

package/dist/signers/local.js.map

@@ -1 +1 @@
-{"version":3,"file":"local.js","sourceRoot":"","sources":["../../src/signers/local.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAA0B,MAAM,MAAM,CAAC;AAE9C,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAE1D,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAe;IACrD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5D,MAAM,WAAW,GAAsB;QACrC,QAAQ,EAAE,QAAQ,EAAE,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO;QACtE,WAAW,EAAE,KAAK;QAClB,WAAW,EAAE,UAAU;KACxB,CAAC;IACF,OAAO;QACL,UAAU,EAAE,KAAK,IAAsB,EAAE,CAAC,OAAO,CAAC,OAAO;QACzD,aAAa,EAAE,CAAC,OAAyB,EAAgB,EAAE,CACzD,OAAO,CAAC,aAAa,CAAC,OAAgB,CAAC;QACzC,QAAQ,EAAE,GAAG,EAAE,CAAC,WAAW;KAC5B,CAAC;AACJ,CAAC"}
+{"version":3,"file":"local.js","sourceRoot":"","sources":["../../src/signers/local.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAA0B,MAAM,MAAM,CAAC;AAE9C,OAAO,EACL,wBAAwB,EAAE,aAAa,EAAE,aAAa,GACvD,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,OAAO,EAAE,SAAS,EAA0B,MAAM,sBAAsB,CAAC;AAElF,yDAAyD;AACzD,MAAM,UAAU,aAAa,CAAC,IAAqB;IACjD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;AACzD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAe,EAAE,IAAqB;IAC5E,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACjD,IAAI,CAAC,QAAQ,IAAI,wBAAwB,CAAC,IAAI,EAAE,OAAO,CAAC;QAAE,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;IACvF,MAAM,OAAO,GAAG,mBAAmB,CAAC,MAAM,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IACnE,MAAM,WAAW,GAAsB;QACrC,QAAQ,EAAE,QAAQ,EAAE,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO;QACtE,WAAW,EAAE,KAAK;QAClB,WAAW,EAAE,UAAU;KACxB,CAAC;IACF,OAAO;QACL,UAAU,EAAE,KAAK,IAAsB,EAAE,CAAC,OAAO,CAAC,OAAO;QACzD,aAAa,EAAE,CAAC,OAAyB,EAAgB,EAAE,CACzD,OAAO,CAAC,aAAa,CAAC,OAAgB,CAAC;QACzC,QAAQ,EAAE,GAAG,EAAE,CAAC,WAAW;KAC5B,CAAC;AACJ,CAAC"}

package/dist/signers/selfTest.d.ts

@@ -3,11 +3,15 @@
  *
  * `daski doctor` does not take a signer's word for it. Before reporting one as
  * usable it has the signer sign one fixed vector and checks the result the way
- * the gateway will: the address recovered from the typed data must be the
- * address the adapter claims, `s` must be in the low half of the curve order,
- * and the whole thing must be 65 bytes. A signer that rewrites a field, wraps
- * an ERC-1271 blob, emits a malleable twin, or simply throws fails here, on a
- * machine with nothing at stake, instead of at settlement.
+ * the gateway will. For a plain wallet (EOA): the address recovered from the
+ * typed data must be the address the adapter claims, `s` must be in the low
+ * half of the curve order, and the whole thing must be 65 bytes. For a
+ * deployed contract account: the bytes are opaque beyond their size, and the
+ * contract itself must answer `isValidSignature` with the ERC-1271 magic value
+ * for the hash this CLI computed, through one bounded read-only call against
+ * the profile RPC. A signer that rewrites a field, wraps an ERC-6492 blob,
+ * emits a malleable twin, or simply throws fails here, on a machine with
+ * nothing at stake, instead of at settlement.
  *
  * The vector has the *shape* of a purchase — the closed 6-field
  * `TransferWithAuthorization` type set, so an adapter that mishandles that
@@ -18,6 +22,7 @@
  */
 import { type Address, type Hex } from "viem";
 import { type SignerAdapter, type TypedDataRequest } from "@daski/x402-scheme";
+import { type ChainReader } from "../chain/reader.js";
 /** The vector's nonce: a commitment to nothing but its own name. */
 export declare const SELF_TEST_NONCE: Hex;
 export declare const LOW_S_MAX: bigint;
@@ -30,17 +35,32 @@ export declare const LOW_S_MAX: bigint;
 export declare function selfTestVector(signerAddress: Address, chainId: number): TypedDataRequest;
 export interface SignerSelfTestResult {
     passed: boolean;
-    /** The address the signature recovers to, or null when nothing recovers. */
+    /** How the signature verified: `recovery` for a plain wallet, `erc1271` for a contract account. */
+    verifiedVia: "recovery" | "erc1271" | null;
+    /** The address the signature recovers to on the EOA path, or null when nothing recovers. */
     recovered: Address | null;
-    /** True when `s` is at most secp256k1n/2. */
-    lowS: boolean;
+    /** True when `s` is at most secp256k1n/2 on the EOA path; null on the contract path. */
+    lowS: boolean | null;
     /** Why the test failed. Absent on a pass. */
     reason?: string;
 }
 /**
- * Signs the vector with `signer` and checks the signature the way the gateway
- * will. Never throws: a signer that throws has failed the test, and the reason
- * says so.
+ * Runs the self-test that matches the signer's account type. Never throws: a
+ * signer that throws has failed the test, and the reason says so.
  */
-export declare function runSignerSelfTest(signer: SignerAdapter, chainId: number): Promise<SignerSelfTestResult>;
+export declare function runSignerSelfTest(signer: SignerAdapter, chainId: number, chain?: ChainReader): Promise<SignerSelfTestResult>;
+/**
+ * Signs the vector with `signer` and checks the signature the way the
+ * gateway's EOA path will: exactly 65 bytes, low-s, recovering to the claimed
+ * address. No RPC is involved.
+ */
+export declare function runEoaSignerSelfTest(signer: SignerAdapter, chainId: number): Promise<SignerSelfTestResult>;
+/**
+ * Signs the vector and asks the deployed wallet itself whether the signature
+ * is valid for the EIP-712 hash this CLI computed: one `isValidSignature`
+ * `eth_call` with a gas bound and a deadline, accepting only the ERC-1271
+ * magic value. A revert, another value, or a malformed return fails; an RPC
+ * that cannot be reached fails with a reason that says so, never as invalid.
+ */
+export declare function runContractSignerSelfTest(signer: SignerAdapter, chainId: number, chain: ChainReader | undefined): Promise<SignerSelfTestResult>;
 //# sourceMappingURL=selfTest.d.ts.map

package/dist/signers/selfTest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"selfTest.d.ts","sourceRoot":"","sources":["../../src/signers/selfTest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAOL,KAAK,OAAO,EACZ,KAAK,GAAG,EACT,MAAM,MAAM,CAAC;AACd,OAAO,EAGL,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACtB,MAAM,oBAAoB,CAAC;AAI5B,oEAAoE;AACpE,eAAO,MAAM,eAAe,EAAE,GAAsD,CAAC;AAIrF,eAAO,MAAM,SAAS,QAAmB,CAAC;AAE1C;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,gBAAgB,CAmBxF;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,OAAO,CAAC;IAChB,4EAA4E;IAC5E,SAAS,EAAE,OAAO,GAAG,IAAI,CAAC;IAC1B,6CAA6C;IAC7C,IAAI,EAAE,OAAO,CAAC;IACd,6CAA6C;IAC7C,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,oBAAoB,CAAC,CA+C/B"}
+{"version":3,"file":"selfTest.d.ts","sourceRoot":"","sources":["../../src/signers/selfTest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EASL,KAAK,OAAO,EACZ,KAAK,GAAG,EACT,MAAM,MAAM,CAAC;AACd,OAAO,EAGL,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAC0C,KAAK,WAAW,EAChE,MAAM,oBAAoB,CAAC;AAK5B,oEAAoE;AACpE,eAAO,MAAM,eAAe,EAAE,GAAsD,CAAC;AAIrF,eAAO,MAAM,SAAS,QAAmB,CAAC;AAE1C;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,gBAAgB,CAmBxF;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,OAAO,CAAC;IAChB,mGAAmG;IACnG,WAAW,EAAE,UAAU,GAAG,SAAS,GAAG,IAAI,CAAC;IAC3C,4FAA4F;IAC5F,SAAS,EAAE,OAAO,GAAG,IAAI,CAAC;IAC1B,wFAAwF;IACxF,IAAI,EAAE,OAAO,GAAG,IAAI,CAAC;IACrB,6CAA6C;IAC7C,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,MAAM,EACf,KAAK,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,oBAAoB,CAAC,CAK/B;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,oBAAoB,CAAC,CAiD/B;AAED;;;;;;GAMG;AACH,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,WAAW,GAAG,SAAS,GAC7B,OAAO,CAAC,oBAAoB,CAAC,CAyC/B"}

package/dist/signers/selfTest.js

@@ -3,11 +3,15 @@
  *
  * `daski doctor` does not take a signer's word for it. Before reporting one as
  * usable it has the signer sign one fixed vector and checks the result the way
- * the gateway will: the address recovered from the typed data must be the
- * address the adapter claims, `s` must be in the low half of the curve order,
- * and the whole thing must be 65 bytes. A signer that rewrites a field, wraps
- * an ERC-1271 blob, emits a malleable twin, or simply throws fails here, on a
- * machine with nothing at stake, instead of at settlement.
+ * the gateway will. For a plain wallet (EOA): the address recovered from the
+ * typed data must be the address the adapter claims, `s` must be in the low
+ * half of the curve order, and the whole thing must be 65 bytes. For a
+ * deployed contract account: the bytes are opaque beyond their size, and the
+ * contract itself must answer `isValidSignature` with the ERC-1271 magic value
+ * for the hash this CLI computed, through one bounded read-only call against
+ * the profile RPC. A signer that rewrites a field, wraps an ERC-6492 blob,
+ * emits a malleable twin, or simply throws fails here, on a machine with
+ * nothing at stake, instead of at settlement.
  *
  * The vector has the *shape* of a purchase — the closed 6-field
  * `TransferWithAuthorization` type set, so an adapter that mishandles that
@@ -16,8 +20,10 @@
  * and recipient are zero; the validity window is closed. No contract will
  * ever accept it.
  */
-import { getAddress, hexToBigInt, keccak256, parseSignature, recoverTypedDataAddress, stringToHex, } from "viem";
+import { encodeFunctionData, getAddress, hashTypedData, hexToBigInt, keccak256, parseSignature, recoverTypedDataAddress, stringToHex, } from "viem";
 import { TRANSFER_WITH_AUTHORIZATION_PRIMARY_TYPE, TRANSFER_WITH_AUTHORIZATION_TYPES, } from "@daski/x402-scheme";
+import { ERC1271_ABI, ERC1271_CALL_GAS, isErc1271Magic, } from "../chain/reader.js";
+import { hasErc6492Suffix, isBoundedSignature, MAX_SIGNATURE_BYTES } from "./signature.js";
 const ZERO_ADDRESS = "0x0000000000000000000000000000000000000000";
 /** The vector's nonce: a commitment to nothing but its own name. */
 export const SELF_TEST_NONCE = keccak256(stringToHex("daski-doctor-self-test"));
@@ -51,11 +57,21 @@ export function selfTestVector(signerAddress, chainId) {
     };
 }
 /**
- * Signs the vector with `signer` and checks the signature the way the gateway
- * will. Never throws: a signer that throws has failed the test, and the reason
- * says so.
+ * Runs the self-test that matches the signer's account type. Never throws: a
+ * signer that throws has failed the test, and the reason says so.
  */
-export async function runSignerSelfTest(signer, chainId) {
+export async function runSignerSelfTest(signer, chainId, chain) {
+    if (signer.describe().accountType === "contract") {
+        return runContractSignerSelfTest(signer, chainId, chain);
+    }
+    return runEoaSignerSelfTest(signer, chainId);
+}
+/**
+ * Signs the vector with `signer` and checks the signature the way the
+ * gateway's EOA path will: exactly 65 bytes, low-s, recovering to the claimed
+ * address. No RPC is involved.
+ */
+export async function runEoaSignerSelfTest(signer, chainId) {
     let claimed;
     let vector;
     let signature;
@@ -83,6 +99,7 @@ export async function runSignerSelfTest(signer, chainId) {
     if (recovered !== claimed) {
         return {
             passed: false,
+            verifiedVia: null,
             recovered,
             lowS,
             reason: `recovered-address mismatch: the signature recovers to ${recovered} but the ` +
@@ -93,16 +110,67 @@ export async function runSignerSelfTest(signer, chainId) {
     if (!lowS) {
         return {
             passed: false,
+            verifiedVia: null,
             recovered,
             lowS,
             reason: "high-s signature: s is above secp256k1n/2, which the gateway's low-s ECDSA " +
                 "recovery rejects",
         };
     }
-    return { passed: true, recovered, lowS };
+    return { passed: true, verifiedVia: "recovery", recovered, lowS };
+}
+/**
+ * Signs the vector and asks the deployed wallet itself whether the signature
+ * is valid for the EIP-712 hash this CLI computed: one `isValidSignature`
+ * `eth_call` with a gas bound and a deadline, accepting only the ERC-1271
+ * magic value. A revert, another value, or a malformed return fails; an RPC
+ * that cannot be reached fails with a reason that says so, never as invalid.
+ */
+export async function runContractSignerSelfTest(signer, chainId, chain) {
+    let claimed;
+    let vector;
+    let signature;
+    try {
+        claimed = getAddress(await signer.getAddress());
+        vector = selfTestVector(claimed, chainId);
+        signature = await signer.signTypedData(vector);
+    }
+    catch (error) {
+        return failedContract(`the signer threw: ${errorMessage(error)}`);
+    }
+    if (!isBoundedSignature(signature)) {
+        return failedContract(`malformed signature: expected 0x-prefixed hex of at most ${MAX_SIGNATURE_BYTES} bytes, ` +
+            `got ${describeShape(signature)}`);
+    }
+    if (hasErc6492Suffix(signature)) {
+        return failedContract("counterfactual (ERC-6492) signature: the wallet is not deployed, and Daski refuses " +
+            "ERC-6492 wrappers");
+    }
+    if (!chain)
+        return failedContract("no RPC reader was available to call isValidSignature");
+    const hash = hashTypedData(vector);
+    const data = encodeFunctionData({
+        abi: ERC1271_ABI, functionName: "isValidSignature", args: [hash, signature],
+    });
+    let result;
+    try {
+        result = await chain.call({ to: claimed, data, gas: ERC1271_CALL_GAS });
+    }
+    catch (error) {
+        return failedContract(`isValidSignature could not be called: ${errorMessage(error)}`);
+    }
+    if (result.reverted)
+        return failedContract("isValidSignature reverted for the vector");
+    if (!isErc1271Magic(result.data)) {
+        return failedContract(`isValidSignature returned ${describeReturn(result.data)}, not the ERC-1271 magic value`);
+    }
+    return { passed: true, verifiedVia: "erc1271", recovered: null, lowS: null };
 }
 function failed(reason) {
-    return { passed: false, recovered: null, lowS: false, reason };
+    return { passed: false, verifiedVia: null, recovered: null, lowS: false, reason };
+}
+function failedContract(reason) {
+    return { passed: false, verifiedVia: null, recovered: null, lowS: null, reason };
 }
 function errorMessage(error) {
     return error instanceof Error ? error.message : String(error);
@@ -110,4 +178,9 @@ function errorMessage(error) {
 function describeShape(value) {
     return typeof value === "string" ? `a ${value.length}-character string` : typeof value;
 }
+function describeReturn(data) {
+    if (data === undefined || data === "0x")
+        return "no data";
+    return `${(data.length - 2) / 2} bytes starting ${data.slice(0, 10)}`;
+}
 //# sourceMappingURL=selfTest.js.map

package/dist/signers/selfTest.js.map

@@ -1 +1 @@
-{"version":3,"file":"selfTest.js","sourceRoot":"","sources":["../../src/signers/selfTest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EACL,UAAU,EACV,WAAW,EACX,SAAS,EACT,cAAc,EACd,uBAAuB,EACvB,WAAW,GAGZ,MAAM,MAAM,CAAC;AACd,OAAO,EACL,wCAAwC,EACxC,iCAAiC,GAGlC,MAAM,oBAAoB,CAAC;AAE5B,MAAM,YAAY,GAAG,4CAAuD,CAAC;AAE7E,oEAAoE;AACpE,MAAM,CAAC,MAAM,eAAe,GAAQ,SAAS,CAAC,WAAW,CAAC,wBAAwB,CAAC,CAAC,CAAC;AAErF,qFAAqF;AACrF,MAAM,WAAW,GAAG,mEAAmE,CAAC;AACxF,MAAM,CAAC,MAAM,SAAS,GAAG,WAAW,GAAG,EAAE,CAAC;AAE1C;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,aAAsB,EAAE,OAAe;IACpE,OAAO;QACL,MAAM,EAAE;YACN,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,GAAG;YACZ,OAAO;YACP,iBAAiB,EAAE,YAAY;SAChC;QACD,KAAK,EAAE,iCAAiC;QACxC,WAAW,EAAE,wCAAwC;QACrD,OAAO,EAAE;YACP,IAAI,EAAE,aAAa;YACnB,EAAE,EAAE,YAAY;YAChB,KAAK,EAAE,EAAE;YACT,UAAU,EAAE,EAAE;YACd,WAAW,EAAE,EAAE;YACf,KAAK,EAAE,eAAe;SACvB;KACF,CAAC;AACJ,CAAC;AAYD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAqB,EACrB,OAAe;IAEf,IAAI,OAAgB,CAAC;IACrB,IAAI,MAAwB,CAAC;IAC7B,IAAI,SAAkB,CAAC;IACvB,IAAI,CAAC;QACH,OAAO,GAAG,UAAU,CAAC,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;QAChD,MAAM,GAAG,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1C,SAAS,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,MAAM,CAAC,qBAAqB,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7E,OAAO,MAAM,CACX,kEAAkE,aAAa,CAAC,SAAS,CAAC,EAAE,CAC7F,CAAC;IACJ,CAAC;IACD,IAAI,SAAkB,CAAC;IACvB,IAAI,CAAS,CAAC;IACd,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,uBAAuB,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAW,CAAC,CAAC;QAC7E,CAAC,GAAG,WAAW,CAAC,cAAc,CAAC,SAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,MAAM,CAAC,mCAAmC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,IAAI,SAAS,CAAC;IAC5B,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QAC1B,OAAO;YACL,MAAM,EAAE,KAAK;YACb,SAAS;YACT,IAAI;YACJ,MAAM,EACJ,yDAAyD,SAAS,WAAW;gBAC7E,kBAAkB,OAAO,kDAAkD;gBAC3E,oCAAoC;SACvC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;YACL,MAAM,EAAE,KAAK;YACb,SAAS;YACT,IAAI;YACJ,MAAM,EACJ,6EAA6E;gBAC7E,kBAAkB;SACrB,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,MAAM,CAAC,MAAc;IAC5B,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,MAAM,mBAAmB,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC;AACzF,CAAC"}
+{"version":3,"file":"selfTest.js","sourceRoot":"","sources":["../../src/signers/selfTest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EACL,kBAAkB,EAClB,UAAU,EACV,aAAa,EACb,WAAW,EACX,SAAS,EACT,cAAc,EACd,uBAAuB,EACvB,WAAW,GAGZ,MAAM,MAAM,CAAC;AACd,OAAO,EACL,wCAAwC,EACxC,iCAAiC,GAGlC,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,WAAW,EAAE,gBAAgB,EAAE,cAAc,GAC9C,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAE3F,MAAM,YAAY,GAAG,4CAAuD,CAAC;AAE7E,oEAAoE;AACpE,MAAM,CAAC,MAAM,eAAe,GAAQ,SAAS,CAAC,WAAW,CAAC,wBAAwB,CAAC,CAAC,CAAC;AAErF,qFAAqF;AACrF,MAAM,WAAW,GAAG,mEAAmE,CAAC;AACxF,MAAM,CAAC,MAAM,SAAS,GAAG,WAAW,GAAG,EAAE,CAAC;AAE1C;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,aAAsB,EAAE,OAAe;IACpE,OAAO;QACL,MAAM,EAAE;YACN,IAAI,EAAE,aAAa;YACnB,OAAO,EAAE,GAAG;YACZ,OAAO;YACP,iBAAiB,EAAE,YAAY;SAChC;QACD,KAAK,EAAE,iCAAiC;QACxC,WAAW,EAAE,wCAAwC;QACrD,OAAO,EAAE;YACP,IAAI,EAAE,aAAa;YACnB,EAAE,EAAE,YAAY;YAChB,KAAK,EAAE,EAAE;YACT,UAAU,EAAE,EAAE;YACd,WAAW,EAAE,EAAE;YACf,KAAK,EAAE,eAAe;SACvB;KACF,CAAC;AACJ,CAAC;AAcD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAqB,EACrB,OAAe,EACf,KAAmB;IAEnB,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC,WAAW,KAAK,UAAU,EAAE,CAAC;QACjD,OAAO,yBAAyB,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,oBAAoB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAqB,EACrB,OAAe;IAEf,IAAI,OAAgB,CAAC;IACrB,IAAI,MAAwB,CAAC;IAC7B,IAAI,SAAkB,CAAC;IACvB,IAAI,CAAC;QACH,OAAO,GAAG,UAAU,CAAC,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;QAChD,MAAM,GAAG,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1C,SAAS,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,MAAM,CAAC,qBAAqB,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC5D,CAAC;IACD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7E,OAAO,MAAM,CACX,kEAAkE,aAAa,CAAC,SAAS,CAAC,EAAE,CAC7F,CAAC;IACJ,CAAC;IACD,IAAI,SAAkB,CAAC;IACvB,IAAI,CAAS,CAAC;IACd,IAAI,CAAC;QACH,SAAS,GAAG,MAAM,uBAAuB,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAW,CAAC,CAAC;QAC7E,CAAC,GAAG,WAAW,CAAC,cAAc,CAAC,SAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,MAAM,CAAC,mCAAmC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,IAAI,SAAS,CAAC;IAC5B,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;QAC1B,OAAO;YACL,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,IAAI;YACjB,SAAS;YACT,IAAI;YACJ,MAAM,EACJ,yDAAyD,SAAS,WAAW;gBAC7E,kBAAkB,OAAO,kDAAkD;gBAC3E,oCAAoC;SACvC,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;YACL,MAAM,EAAE,KAAK;YACb,WAAW,EAAE,IAAI;YACjB,SAAS;YACT,IAAI;YACJ,MAAM,EACJ,6EAA6E;gBAC7E,kBAAkB;SACrB,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;AACpE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,MAAqB,EACrB,OAAe,EACf,KAA8B;IAE9B,IAAI,OAAgB,CAAC;IACrB,IAAI,MAAwB,CAAC;IAC7B,IAAI,SAAkB,CAAC;IACvB,IAAI,CAAC;QACH,OAAO,GAAG,UAAU,CAAC,MAAM,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;QAChD,MAAM,GAAG,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC1C,SAAS,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,cAAc,CAAC,qBAAqB,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,CAAC,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAC;QACnC,OAAO,cAAc,CACnB,4DAA4D,mBAAmB,UAAU;YACzF,OAAO,aAAa,CAAC,SAAS,CAAC,EAAE,CAClC,CAAC;IACJ,CAAC;IACD,IAAI,gBAAgB,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,OAAO,cAAc,CACnB,qFAAqF;YACrF,mBAAmB,CACpB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK;QAAE,OAAO,cAAc,CAAC,sDAAsD,CAAC,CAAC;IAC1F,MAAM,IAAI,GAAG,aAAa,CAAC,MAAe,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,kBAAkB,CAAC;QAC9B,GAAG,EAAE,WAAW,EAAE,YAAY,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC;KAC5E,CAAC,CAAC;IACH,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,cAAc,CAAC,yCAAyC,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ;QAAE,OAAO,cAAc,CAAC,0CAA0C,CAAC,CAAC;IACvF,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,OAAO,cAAc,CACnB,6BAA6B,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,gCAAgC,CACzF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC/E,CAAC;AAED,SAAS,MAAM,CAAC,MAAc;IAC5B,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AACpF,CAAC;AAED,SAAS,cAAc,CAAC,MAAc;IACpC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACnF,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,MAAM,mBAAmB,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC;AACzF,CAAC;AAED,SAAS,cAAc,CAAC,IAAqB;IAC3C,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC1D,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,mBAAmB,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACxE,CAAC"}

package/dist/signers/signature.d.ts

@@ -0,0 +1,10 @@
+/**
+ * The shape rule for any signature this CLI validates: `0x` plus an even
+ * number of hex characters, at most 4,096 bytes. The 65-byte low-s rule is
+ * the EOA path's alone; a contract account's bytes are opaque beyond size.
+ */
+import type { Hex } from "viem";
+export declare const MAX_SIGNATURE_BYTES = 4096;
+export declare function isBoundedSignature(value: unknown): value is Hex;
+export declare function hasErc6492Suffix(signature: Hex): boolean;
+//# sourceMappingURL=signature.d.ts.map

package/dist/signers/signature.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.d.ts","sourceRoot":"","sources":["../../src/signers/signature.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAEhC,eAAO,MAAM,mBAAmB,OAAQ,CAAC;AAKzC,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,GAAG,CAG/D;AAED,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,GAAG,GAAG,OAAO,CAExD"}

package/dist/signers/signature.js

@@ -0,0 +1,11 @@
+export const MAX_SIGNATURE_BYTES = 4_096;
+/** The 32-byte suffix an ERC-6492 wrapper ends with. Daski never accepts one. */
+const ERC6492_SUFFIX = "6492".repeat(16);
+export function isBoundedSignature(value) {
+    return typeof value === "string" && /^0x(?:[0-9a-fA-F]{2})+$/.test(value) &&
+        (value.length - 2) / 2 <= MAX_SIGNATURE_BYTES;
+}
+export function hasErc6492Suffix(signature) {
+    return signature.length > 66 && signature.toLowerCase().endsWith(ERC6492_SUFFIX);
+}
+//# sourceMappingURL=signature.js.map

package/dist/signers/signature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.js","sourceRoot":"","sources":["../../src/signers/signature.ts"],"names":[],"mappings":"AAOA,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAEzC,iFAAiF;AACjF,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAEzC,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC;QACvE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,mBAAmB,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,SAAc;IAC7C,OAAO,SAAS,CAAC,MAAM,GAAG,EAAE,IAAI,SAAS,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;AACnF,CAAC"}

package/dist/store/keystore.d.ts

@@ -1,19 +1,61 @@
-import type { Hex } from "viem";
+import { type Hex } from "viem";
+import { CliError } from "../cli/errors.js";
+import { type HostEnvironment, type KeyBackend, type KeyDurability } from "../host.js";
 export type KeySource = "keychain" | "encrypted-file" | "environment";
 export interface KeyLocation {
     source: KeySource;
     /** Human-readable, never the key. */
     description: string;
+    /** What the store guarantees by construction. */
+    durability: KeyDurability;
 }
+/** Which store a profile's local key lives in on this host. */
+export interface KeyStoreSelection {
+    host: HostEnvironment;
+    backend: KeyBackend;
+}
+interface KeyringEntry {
+    getPassword(): string | null;
+    setPassword(password: string): void;
+    deletePassword(): boolean;
+}
+export declare function keychainUnsupportedOnLinux(profile: string): CliError;
+/**
+ * Reads the passphrase from the file `DASKI_KEYSTORE_PASSPHRASE_FILE` names.
+ * The file must be a regular file with owner-only permissions; a passphrase
+ * never travels on a command line.
+ */
+export declare function readPassphraseFile(path: string, platform: NodeJS.Platform): string;
+/**
+ * The passphrase for the file store: from `DASKI_KEYSTORE_PASSPHRASE_FILE`
+ * when set, otherwise from the terminal. With neither, the command refuses.
+ */
+export declare function keystorePassphrase(host: HostEnvironment, purpose: "create" | "unlock", profile: string): Promise<string>;
+/** The refusal for a host whose backend holds no local key. */
+export declare function localKeyRefusedOnHost(profile: string, backend: KeyBackend): CliError;
 /** Where a key for this profile lives, without loading it. */
-export declare function locateKey(profile: string): Promise<KeyLocation | undefined>;
+export declare function locateKey(profile: string, store: KeyStoreSelection): Promise<KeyLocation | undefined>;
 /** Loads the private key for a profile, prompting for a passphrase if needed. */
-export declare function loadKey(profile: string): Promise<Hex>;
+export declare function loadKey(profile: string, store: KeyStoreSelection): Promise<Hex>;
+/** Hooks a test uses to interrupt an update between its steps. Production passes none. */
+export interface StoreKeyHooks {
+    /** Runs after the file has been replaced and before it is read back. */
+    afterWrite?: (() => void) | undefined;
+    /** Substitutes the native keychain entry, so the keychain path runs against a double. */
+    keyring?: ((profile: string) => KeyringEntry) | undefined;
+    /** Runs after the keychain existence check and before the write. */
+    beforeKeychainWrite?: (() => Promise<void> | void) | undefined;
+    /** Where the keychain lock lives; defaults to a per-user temporary directory. */
+    lockDirectory?: string | undefined;
+}
 /**
  * Stores a key for a profile. Returns where it landed so the caller can tell
- * the operator — the caller prints the location, never the key.
+ * the operator — the caller prints the location, never the key. The store is
+ * re-read under the lock, so two creations for the same profile serialize to
+ * one key: the second finds the first and refuses.
  */
-export declare function storeKey(profile: string, privateKey: Hex): Promise<KeyLocation>;
+export declare function storeKey(profile: string, privateKey: Hex, store: KeyStoreSelection, hooks?: StoreKeyHooks): Promise<KeyLocation>;
 /** True when a key already exists for this profile. */
-export declare function hasKey(profile: string): Promise<boolean>;
+export declare function hasKey(profile: string, store: KeyStoreSelection): Promise<boolean>;
+export {};
 //# sourceMappingURL=keystore.d.ts.map

package/dist/store/keystore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"keystore.d.ts","sourceRoot":"","sources":["../../src/store/keystore.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,MAAM,CAAC;AAehC,MAAM,MAAM,SAAS,GAAG,UAAU,GAAG,gBAAgB,GAAG,aAAa,CAAC;AAEtE,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,SAAS,CAAC;IAClB,qCAAqC;IACrC,WAAW,EAAE,MAAM,CAAC;CACrB;AAkID,8DAA8D;AAC9D,wBAAsB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAqBjF;AAED,iFAAiF;AACjF,wBAAsB,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAiC3D;AAED;;;GAGG;AACH,wBAAsB,QAAQ,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,GAAG,OAAO,CAAC,WAAW,CAAC,CAgCrF;AAED,uDAAuD;AACvD,wBAAsB,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAE9D"}
+{"version":3,"file":"keystore.d.ts","sourceRoot":"","sources":["../../src/store/keystore.ts"],"names":[],"mappings":"AAoCA,OAAO,EAA4B,KAAK,GAAG,EAAE,MAAM,MAAM,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAE5C,OAAO,EACY,KAAK,eAAe,EAAE,KAAK,UAAU,EAAE,KAAK,aAAa,EAC3E,MAAM,YAAY,CAAC;AA2BpB,MAAM,MAAM,SAAS,GAAG,UAAU,GAAG,gBAAgB,GAAG,aAAa,CAAC;AAEtE,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,SAAS,CAAC;IAClB,qCAAqC;IACrC,WAAW,EAAE,MAAM,CAAC;IACpB,iDAAiD;IACjD,UAAU,EAAE,aAAa,CAAC;CAC3B;AAED,+DAA+D;AAC/D,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,eAAe,CAAC;IACtB,OAAO,EAAE,UAAU,CAAC;CACrB;AAwED,UAAU,YAAY;IACpB,WAAW,IAAI,MAAM,GAAG,IAAI,CAAC;IAC7B,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,cAAc,IAAI,OAAO,CAAC;CAC3B;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,QAAQ,CAUpE;AA2LD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,GAAG,MAAM,CA4BlF;AAUD;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,QAAQ,GAAG,QAAQ,EAC5B,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,CAAC,CA4BjB;AAID,+DAA+D;AAC/D,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,GAAG,QAAQ,CAYpF;AAED,8DAA8D;AAC9D,wBAAsB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,CAY3G;AAED,iFAAiF;AACjF,wBAAsB,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,CAwBrF;AAUD,0FAA0F;AAC1F,MAAM,WAAW,aAAa;IAC5B,wEAAwE;IACxE,UAAU,CAAC,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,CAAC;IACtC,yFAAyF;IACzF,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,YAAY,CAAC,GAAG,SAAS,CAAC;IAC1D,oEAAoE;IACpE,mBAAmB,CAAC,EAAE,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC;IAC/D,iFAAiF;IACjF,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC;AA2BD;;;;;GAKG;AACH,wBAAsB,QAAQ,CAC5B,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,GAAG,EACf,KAAK,EAAE,iBAAiB,EACxB,KAAK,GAAE,aAAkB,GACxB,OAAO,CAAC,WAAW,CAAC,CA0CtB;AAsBD,uDAAuD;AACvD,wBAAsB,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,OAAO,CAAC,CAExF"}