@dexterai/vault 0.1.0

package/dist/signers/types.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Signer abstractions.
+ *
+ * Ed25519Signer is shipped with a Node implementation in v0.1.
+ * PasskeySigner is shipped as INTERFACE ONLY in v0.1 — the WebAuthn
+ * implementation is tracked as task #235 ("@dexterai/vault v0.2 —
+ * BrowserPasskeySigner") and must lift from dexter-fe/app/lib/passkey.ts +
+ * dexter-fe/app/lib/passkey-anon.ts. Until v0.2 ships, dexter-fe stays on
+ * its hand-rolled passkey ceremony.
+ */
+interface Ed25519Signer {
+    /** 32-byte public key. */
+    readonly publicKey: Uint8Array;
+    /** Produce a 64-byte detached signature over `message`. */
+    sign(message: Uint8Array): Promise<Uint8Array>;
+}
+interface PasskeySigner {
+    /** Opaque credential ID handed back to the platform authenticator. */
+    readonly credentialId: Uint8Array;
+    /**
+     * Run the WebAuthn assertion ceremony over `challenge` and return the
+     * three things the precompile needs.
+     *
+     * Implementation: TASK #235. dexter-fe currently ships an equivalent
+     * function in app/lib/passkey.ts (`signOperation`) — the lift target.
+     */
+    sign(challenge: Uint8Array): Promise<{
+        signature: Uint8Array;
+        clientDataJSON: Uint8Array;
+        authenticatorData: Uint8Array;
+    }>;
+}
+
+export type { Ed25519Signer, PasskeySigner };

package/dist/types.cjs

@@ -0,0 +1,18 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/types.ts
+var types_exports = {};
+module.exports = __toCommonJS(types_exports);

package/dist/types.d.cts

@@ -0,0 +1,104 @@
+/**
+ * Canonical types for vault state, sessions, and vouchers.
+ *
+ * This file merges three previously-separate type contracts:
+ *  - dexter-api/src/vault/vaultState.types.ts
+ *  - dexter-x402-sdk/src/tab/types.ts (the session/voucher half)
+ *  - dexter-facilitator/src/vault/vaultReader.ts (the ActiveSession shape)
+ *
+ * The on-chain program (dexter-vault v2) is the ultimate referee; these
+ * types describe the off-chain mirror of its state.
+ */
+interface PendingWithdrawal {
+    amount: string;
+    destination: string;
+    requestedAt: number;
+}
+interface ActiveSession {
+    sessionPubkey: Uint8Array;
+    maxAmount: bigint;
+    expiresAt: number;
+    allowedCounterparty: string;
+    nonce: number;
+    spent: bigint;
+}
+interface VaultOnchainState {
+    exists: boolean;
+    pendingVoucherCount: number;
+    pendingWithdrawal: PendingWithdrawal | null;
+}
+interface VaultStateFull {
+    exists: boolean;
+    version: number;
+    swigAddress: string | null;
+    dexterAuthority: string | null;
+    pendingVoucherCount: number;
+    activeSession: ActiveSession | null;
+}
+type VaultStatus = 'not_enrolled' | 'awaiting_ceremony' | 'provisioning' | 'ready';
+type VaultStateKey = {
+    kind: 'account';
+    supabaseUserId: string;
+} | {
+    kind: 'handle';
+    userHandle: Uint8Array;
+} | {
+    kind: 'session';
+    mcpSessionId: string;
+};
+interface VaultStateOnchainExtended {
+    vaultExists: boolean;
+    pendingVoucherCount: number | null;
+    withdrawalBlocked: boolean;
+    pendingWithdrawal: PendingWithdrawal | null;
+    recovery: {
+        available: boolean;
+        availableAt: number | null;
+        reason: string;
+    };
+    usdcAtaExists: boolean;
+    usdcAtomic: string;
+}
+interface VaultState {
+    status: VaultStatus;
+    vault: {
+        vaultPda: string;
+        swigAddress: string;
+        coolingOffSeconds: number;
+        initializedAt: string | Date;
+        faucetDrippedAt: string | Date | null;
+    } | null;
+    credentialId: string | null;
+    deviceLabel: string | null;
+    enrolledAt: string | Date | null;
+    claimedBySupabaseUser: boolean;
+    onchain: VaultStateOnchainExtended | null;
+}
+type TabNetworkId = 'solana:mainnet' | (string & {});
+type AtomicAmount = string;
+type HumanAmount = string;
+interface SessionScope {
+    channelId: string;
+    maxAmountAtomic: AtomicAmount;
+    expiresAtUnix: number;
+    allowedCounterparty: string;
+}
+interface SessionKey {
+    publicKey: Uint8Array;
+    privateKey: Uint8Array;
+    scope: SessionScope;
+    registration: Uint8Array;
+}
+interface VoucherPayload {
+    channelId: string;
+    cumulativeAmount: AtomicAmount;
+    sequenceNumber: number;
+}
+interface SignedVoucher {
+    payload: VoucherPayload;
+    sessionPublicKey: Uint8Array;
+    sessionRegistration: Uint8Array;
+    sessionSignature: Uint8Array;
+}
+
+export type { ActiveSession, AtomicAmount, HumanAmount, PendingWithdrawal, SessionKey, SessionScope, SignedVoucher, TabNetworkId, VaultOnchainState, VaultState, VaultStateFull, VaultStateKey, VaultStateOnchainExtended, VaultStatus, VoucherPayload };

package/dist/types.d.ts

@@ -0,0 +1,104 @@
+/**
+ * Canonical types for vault state, sessions, and vouchers.
+ *
+ * This file merges three previously-separate type contracts:
+ *  - dexter-api/src/vault/vaultState.types.ts
+ *  - dexter-x402-sdk/src/tab/types.ts (the session/voucher half)
+ *  - dexter-facilitator/src/vault/vaultReader.ts (the ActiveSession shape)
+ *
+ * The on-chain program (dexter-vault v2) is the ultimate referee; these
+ * types describe the off-chain mirror of its state.
+ */
+interface PendingWithdrawal {
+    amount: string;
+    destination: string;
+    requestedAt: number;
+}
+interface ActiveSession {
+    sessionPubkey: Uint8Array;
+    maxAmount: bigint;
+    expiresAt: number;
+    allowedCounterparty: string;
+    nonce: number;
+    spent: bigint;
+}
+interface VaultOnchainState {
+    exists: boolean;
+    pendingVoucherCount: number;
+    pendingWithdrawal: PendingWithdrawal | null;
+}
+interface VaultStateFull {
+    exists: boolean;
+    version: number;
+    swigAddress: string | null;
+    dexterAuthority: string | null;
+    pendingVoucherCount: number;
+    activeSession: ActiveSession | null;
+}
+type VaultStatus = 'not_enrolled' | 'awaiting_ceremony' | 'provisioning' | 'ready';
+type VaultStateKey = {
+    kind: 'account';
+    supabaseUserId: string;
+} | {
+    kind: 'handle';
+    userHandle: Uint8Array;
+} | {
+    kind: 'session';
+    mcpSessionId: string;
+};
+interface VaultStateOnchainExtended {
+    vaultExists: boolean;
+    pendingVoucherCount: number | null;
+    withdrawalBlocked: boolean;
+    pendingWithdrawal: PendingWithdrawal | null;
+    recovery: {
+        available: boolean;
+        availableAt: number | null;
+        reason: string;
+    };
+    usdcAtaExists: boolean;
+    usdcAtomic: string;
+}
+interface VaultState {
+    status: VaultStatus;
+    vault: {
+        vaultPda: string;
+        swigAddress: string;
+        coolingOffSeconds: number;
+        initializedAt: string | Date;
+        faucetDrippedAt: string | Date | null;
+    } | null;
+    credentialId: string | null;
+    deviceLabel: string | null;
+    enrolledAt: string | Date | null;
+    claimedBySupabaseUser: boolean;
+    onchain: VaultStateOnchainExtended | null;
+}
+type TabNetworkId = 'solana:mainnet' | (string & {});
+type AtomicAmount = string;
+type HumanAmount = string;
+interface SessionScope {
+    channelId: string;
+    maxAmountAtomic: AtomicAmount;
+    expiresAtUnix: number;
+    allowedCounterparty: string;
+}
+interface SessionKey {
+    publicKey: Uint8Array;
+    privateKey: Uint8Array;
+    scope: SessionScope;
+    registration: Uint8Array;
+}
+interface VoucherPayload {
+    channelId: string;
+    cumulativeAmount: AtomicAmount;
+    sequenceNumber: number;
+}
+interface SignedVoucher {
+    payload: VoucherPayload;
+    sessionPublicKey: Uint8Array;
+    sessionRegistration: Uint8Array;
+    sessionSignature: Uint8Array;
+}
+
+export type { ActiveSession, AtomicAmount, HumanAmount, PendingWithdrawal, SessionKey, SessionScope, SignedVoucher, TabNetworkId, VaultOnchainState, VaultState, VaultStateFull, VaultStateKey, VaultStateOnchainExtended, VaultStatus, VoucherPayload };

package/package.json

@@ -0,0 +1,53 @@
+{
+  "name": "@dexterai/vault",
+  "version": "0.1.0",
+  "description": "Canonical off-chain mirror of the dexter-vault Solana Anchor program — Solana instruction builders, byte-precise message encoders, account decoders, secp256r1/Ed25519 precompile helpers, counterfactual Swig derivation, and signer interfaces. The single source of truth for any TypeScript code that produces bytes the on-chain program will verify.",
+  "author": "Dexter",
+  "license": "MIT",
+  "type": "module",
+  "exports": {
+    ".": { "types": "./dist/index.d.ts", "import": "./dist/index.js", "require": "./dist/index.cjs" },
+    "./types": { "types": "./dist/types.d.ts", "import": "./dist/types.js", "require": "./dist/types.cjs" },
+    "./constants": { "types": "./dist/constants/index.d.ts", "import": "./dist/constants/index.js", "require": "./dist/constants/index.cjs" },
+    "./counterfactual": { "types": "./dist/counterfactual.d.ts", "import": "./dist/counterfactual.js", "require": "./dist/counterfactual.cjs" },
+    "./instructions": { "types": "./dist/instructions/index.d.ts", "import": "./dist/instructions/index.js", "require": "./dist/instructions/index.cjs" },
+    "./messages": { "types": "./dist/messages/index.d.ts", "import": "./dist/messages/index.js", "require": "./dist/messages/index.cjs" },
+    "./reader": { "types": "./dist/reader/index.d.ts", "import": "./dist/reader/index.js", "require": "./dist/reader/index.cjs" },
+    "./precompile": { "types": "./dist/precompile/index.d.ts", "import": "./dist/precompile/index.js", "require": "./dist/precompile/index.cjs" },
+    "./signers": { "types": "./dist/signers/types.d.ts", "import": "./dist/signers/types.js", "require": "./dist/signers/types.cjs" },
+    "./signers/node": { "types": "./dist/signers/node/index.d.ts", "import": "./dist/signers/node/index.js", "require": "./dist/signers/node/index.cjs" }
+  },
+  "files": ["dist", "README.md", "LICENSE"],
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "prepublishOnly": "npm run build && npm test",
+    "release": "npm version patch && npm publish --access public",
+    "release:minor": "npm version minor && npm publish --access public",
+    "release:major": "npm version major && npm publish --access public"
+  },
+  "dependencies": {
+    "@noble/curves": "^1.9.7",
+    "@noble/hashes": "^1.8.0",
+    "@solana/spl-token": "^0.4.9",
+    "@solana/web3.js": "^1.98.0",
+    "@swig-wallet/kit": "^1.9.0",
+    "@swig-wallet/lib": "^1.9.0",
+    "bs58": "^6.0.0",
+    "tweetnacl": "^1.0.3"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.0",
+    "tsup": "^8.3.5",
+    "typescript": "^5.7.2",
+    "vitest": "^2.1.8"
+  },
+  "engines": { "node": ">=18" },
+  "keywords": ["solana", "dexter", "vault", "passkey", "webauthn", "swig", "secp256r1", "ed25519", "ots", "tab", "x402"],
+  "repository": { "type": "git", "url": "https://github.com/Dexter-DAO/dexter-vault-sdk" },
+  "homepage": "https://dexter.cash",
+  "bugs": { "url": "https://github.com/Dexter-DAO/dexter-vault-sdk/issues" }
+}