@dfx.swiss/wallet 0.0.0-stage → 0.1.1-beta.0

package/dist/passkey/platform.js

@@ -0,0 +1,163 @@
+import { RP_IDS } from '../config/environment';
+/** Case-insensitive UA tokens of embedded in-app browsers that cannot run WebAuthn. */
+const IN_APP_UA = /Telegram|Instagram|FBAN|FBAV|FB_IAB|FBIOS|FB4A|Messenger|Orca-Android|WhatsApp|BytedanceWebview|musical_ly|TikTok|TwitterAndroid|\bTwitter\b|LinkedInApp|Snapchat|Pinterest|Reddit|MicroMessenger|\bLine\/|KAKAOTALK|Weibo|NAVER|baiduboxapp|\bGSA\b|Barcelona/i;
+const IOS_UA = /iPhone|iPad|iPod/i;
+const ANDROID_UA = /\bAndroid (\d+)(?:\.(\d+))?(?:\.(\d+))?/;
+function host(win) {
+    if (win !== undefined)
+        return win;
+    return typeof globalThis.window === 'undefined' ? undefined : globalThis.window;
+}
+function isTelegramHost(h) {
+    return (h.TelegramWebviewProxy !== undefined ||
+        h.TelegramWebview !== undefined ||
+        h.Telegram?.WebApp !== undefined ||
+        /Telegram/i.test(h.navigator.userAgent));
+}
+/** True inside an embedded in-app browser (Telegram, Instagram, …). */
+export function isInAppBrowser(win) {
+    const h = host(win);
+    if (!h)
+        return false;
+    return isTelegramHost(h) || IN_APP_UA.test(h.navigator.userAgent);
+}
+/** Installed iOS version from the UA, or null on other platforms / missing token. */
+export function iosInstalledVersion(userAgent) {
+    if (!IOS_UA.test(userAgent))
+        return null;
+    const match = /\bOS (\d+)[_.](\d+)(?:[_.](\d+))?/.exec(userAgent);
+    if (!match)
+        return null;
+    return match[3] === undefined ? `${match[1]}.${match[2]}` : `${match[1]}.${match[2]}.${match[3]}`;
+}
+/** iPadOS desktop mode reports a Macintosh UA. Touch points tell it apart from desktop Safari. */
+export function isIpadDesktopMode(nav) {
+    return nav.platform === 'MacIntel' && (nav.maxTouchPoints ?? 0) > 1;
+}
+/**
+ * Installed iPadOS version in desktop mode. That UA drops the iPad token and puts the OS major in
+ * Safari's `Version/`. A real Mac has no touch points, so its Safari version is not an iPadOS release.
+ * Null when this is not iPad desktop mode or the token is missing — the floor must not guess.
+ */
+export function ipadDesktopInstalledVersion(nav) {
+    if (!isIpadDesktopMode(nav))
+        return null;
+    const match = /\bVersion\/(\d+)(?:\.(\d+))?(?:\.(\d+))?/.exec(nav.userAgent);
+    if (!match)
+        return null;
+    if (match[2] === undefined)
+        return match[1];
+    return match[3] === undefined ? `${match[1]}.${match[2]}` : `${match[1]}.${match[2]}.${match[3]}`;
+}
+function parseAndroid(ua) {
+    const match = ANDROID_UA.exec(ua);
+    if (!match)
+        return null;
+    return {
+        major: Number(match[1]),
+        installed: match[2] === undefined
+            ? match[1]
+            : match[3] === undefined
+                ? `${match[1]}.${match[2]}`
+                : `${match[1]}.${match[2]}.${match[3]}`,
+    };
+}
+/** Installed Android version, preferring `userAgentData` (Chrome freezes the UA at Android 10). */
+export async function androidInstalledVersion(win) {
+    const h = host(win);
+    if (!h)
+        return null;
+    const read = h.navigator.userAgentData?.getHighEntropyValues;
+    if (typeof read === 'function') {
+        try {
+            const values = await read.call(h.navigator.userAgentData, ['platform', 'platformVersion']);
+            const platform = typeof values['platform'] === 'string' ? values['platform'] : '';
+            const platformVersion = typeof values['platformVersion'] === 'string' ? values['platformVersion'].trim() : '';
+            const platformIsAndroid = /android/i.test(platform);
+            // Linux reports an empty platformVersion; macOS and Windows report their own. Neither is an Android release.
+            const platformIsOther = platform !== '' && !platformIsAndroid;
+            const uaIsAndroid = ANDROID_UA.test(h.navigator.userAgent);
+            if (!platformIsOther && platformVersion !== '' && (platformIsAndroid || uaIsAndroid)) {
+                return platformVersion.split('.')[0] || platformVersion;
+            }
+        }
+        catch {
+            // fall through to the UA token
+        }
+    }
+    return parseAndroid(h.navigator.userAgent)?.installed ?? null;
+}
+/**
+ * Checks whether the wallet's passkey ceremonies can run here at all: real top-level page on the
+ * environment's RP host, WebAuthn present, OS new enough, not inside an in-app browser. The PRF soft gate
+ * only hides the tile (`available: false`, `prf: 'no'`); PRF absence in an old browser is `unknown`.
+ */
+export async function checkPasskeyPlatform(env, win) {
+    const h = host(win);
+    const webauthn = !!h &&
+        typeof h.PublicKeyCredential === 'function' &&
+        typeof h.navigator.credentials?.create === 'function' &&
+        typeof h.navigator.credentials?.get === 'function';
+    if (!h || !webauthn)
+        return { available: false, reason: 'no-webauthn', prf: 'unknown' };
+    if (isInAppBrowser(h))
+        return { available: false, reason: 'in-app-browser', prf: 'unknown' };
+    if (h.location.hostname !== RP_IDS[env])
+        return { available: false, reason: 'wrong-origin', prf: 'unknown' };
+    const topKnown = h.top !== undefined || h.self !== undefined || typeof globalThis.window !== 'undefined';
+    try {
+        const top = h.top ??
+            (typeof globalThis.window !== 'undefined' ? globalThis.window.top : undefined);
+        const self = h.self ??
+            (typeof globalThis.window !== 'undefined'
+                ? globalThis.window.self
+                : undefined);
+        if (topKnown && top !== self)
+            return { available: false, reason: 'embedded', prf: 'unknown' };
+    }
+    catch {
+        return { available: false, reason: 'embedded', prf: 'unknown' };
+    }
+    const ua = h.navigator.userAgent;
+    const ios = iosInstalledVersion(ua) ?? ipadDesktopInstalledVersion(h.navigator);
+    if (ios !== null && Number(ios.split('.')[0]) < 18)
+        return { available: false, reason: 'os-too-old', prf: 'unknown', os: ios };
+    const android = await androidInstalledVersion(h);
+    if (android !== null && !IOS_UA.test(ua) && Number(android.split('.')[0]) < 9) {
+        return { available: false, reason: 'os-too-old', prf: 'unknown', os: android };
+    }
+    const Credential = h.PublicKeyCredential;
+    try {
+        const capabilities = await Credential?.getClientCapabilities?.();
+        const prf = capabilities?.['extension:prf'];
+        if (prf === false)
+            return { available: false, reason: 'no-prf', prf: 'no', os: ios ?? android ?? undefined };
+        return { available: true, prf: prf === true ? 'yes' : 'unknown', os: ios ?? android ?? undefined };
+    }
+    catch {
+        return { available: true, prf: 'unknown', os: ios ?? android ?? undefined };
+    }
+}
+/** Best-effort handoff of the login URL to the system browser when stuck in an in-app browser. */
+export function openInSystemBrowser(url, win) {
+    const h = host(win);
+    if (!h)
+        return;
+    const ua = h.navigator.userAgent;
+    if (/Android/i.test(ua)) {
+        const hostAndPath = url.replace(/^https:\/\//u, '');
+        h.location.href = `intent://${hostAndPath}#Intent;scheme=https;package=com.android.chrome;S.browser_fallback_url=${encodeURIComponent(url)};end`;
+        return;
+    }
+    const openLink = h.Telegram?.WebApp?.openLink;
+    if (typeof openLink === 'function') {
+        openLink(url);
+        return;
+    }
+    if (IOS_UA.test(ua) && isTelegramHost(h) && url.startsWith('https://')) {
+        h.location.href = `x-safari-${url}`;
+        return;
+    }
+    h.open?.(url, '_blank', 'noopener,noreferrer');
+}
+//# sourceMappingURL=platform.js.map

package/dist/passkey/platform.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.js","sourceRoot":"","sources":["../../src/passkey/platform.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAoC/C,uFAAuF;AACvF,MAAM,SAAS,GACb,iQAAiQ,CAAC;AAEpQ,MAAM,MAAM,GAAG,mBAAmB,CAAC;AACnC,MAAM,UAAU,GAAG,yCAAyC,CAAC;AAE7D,SAAS,IAAI,CAAC,GAAkB;IAC9B,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC;IAClC,OAAO,OAAO,UAAU,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,UAAU,CAAC,MAAkC,CAAC;AAC/G,CAAC;AAED,SAAS,cAAc,CAAC,CAAe;IACrC,OAAO,CACL,CAAC,CAAC,oBAAoB,KAAK,SAAS;QACpC,CAAC,CAAC,eAAe,KAAK,SAAS;QAC/B,CAAC,CAAC,QAAQ,EAAE,MAAM,KAAK,SAAS;QAChC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CACxC,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,cAAc,CAAC,GAAkB;IAC/C,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACpB,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,OAAO,cAAc,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;AACpE,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,mBAAmB,CAAC,SAAiB;IACnD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,KAAK,GAAG,mCAAmC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAClE,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AACpG,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,iBAAiB,CAAC,GAAmD;IACnF,OAAO,GAAG,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;AACtE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CAAC,GAI3C;IACC,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,MAAM,KAAK,GAAG,0CAA0C,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC7E,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5C,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;AACpG,CAAC;AAED,SAAS,YAAY,CAAC,EAAU;IAC9B,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,SAAS,EACP,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS;YACpB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YACV,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS;gBACtB,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE;gBAC3B,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE;KAC9C,CAAC;AACJ,CAAC;AAED,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,GAAkB;IAC9D,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACpB,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,aAAa,EAAE,oBAAoB,CAAC;IAC7D,IAAI,OAAO,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC,CAAC;YAC3F,MAAM,QAAQ,GAAG,OAAO,MAAM,CAAC,UAAU,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClF,MAAM,eAAe,GAAG,OAAO,MAAM,CAAC,iBAAiB,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9G,MAAM,iBAAiB,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACpD,6GAA6G;YAC7G,MAAM,eAAe,GAAG,QAAQ,KAAK,EAAE,IAAI,CAAC,iBAAiB,CAAC;YAC9D,MAAM,WAAW,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YAC3D,IAAI,CAAC,eAAe,IAAI,eAAe,KAAK,EAAE,IAAI,CAAC,iBAAiB,IAAI,WAAW,CAAC,EAAE,CAAC;gBACrF,OAAO,eAAe,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC;YAC1D,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,+BAA+B;QACjC,CAAC;IACH,CAAC;IACD,OAAO,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,SAAS,IAAI,IAAI,CAAC;AAChE,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAc,EAAE,GAAkB;IAC3E,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACpB,MAAM,QAAQ,GACZ,CAAC,CAAC,CAAC;QACH,OAAO,CAAC,CAAC,mBAAmB,KAAK,UAAU;QAC3C,OAAO,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE,MAAM,KAAK,UAAU;QACrD,OAAO,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE,GAAG,KAAK,UAAU,CAAC;IACrD,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;IACxF,IAAI,cAAc,CAAC,CAAC,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;IAC7F,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,KAAK,MAAM,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;IAE7G,MAAM,QAAQ,GAAG,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,OAAO,UAAU,CAAC,MAAM,KAAK,WAAW,CAAC;IACzG,IAAI,CAAC;QACH,MAAM,GAAG,GACP,CAAC,CAAC,GAAG;YACL,CAAC,OAAO,UAAU,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAE,UAAU,CAAC,MAAuC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACnH,MAAM,IAAI,GACR,CAAC,CAAC,IAAI;YACN,CAAC,OAAO,UAAU,CAAC,MAAM,KAAK,WAAW;gBACvC,CAAC,CAAE,UAAU,CAAC,MAAwC,CAAC,IAAI;gBAC3D,CAAC,CAAC,SAAS,CAAC,CAAC;QACjB,IAAI,QAAQ,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;IAChG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;IAClE,CAAC;IAED,MAAM,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC;IACjC,MAAM,GAAG,GAAG,mBAAmB,CAAC,EAAE,CAAC,IAAI,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAChF,IAAI,GAAG,KAAK,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE;QAChD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC;IAC7E,MAAM,OAAO,GAAG,MAAM,uBAAuB,CAAC,CAAC,CAAC,CAAC;IACjD,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9E,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;IACjF,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,CAAC,mBAAmB,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,MAAM,UAAU,EAAE,qBAAqB,EAAE,EAAE,CAAC;QACjE,MAAM,GAAG,GAAG,YAAY,EAAE,CAAC,eAAe,CAAC,CAAC;QAC5C,IAAI,GAAG,KAAK,KAAK;YAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,GAAG,IAAI,OAAO,IAAI,SAAS,EAAE,CAAC;QAC7G,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,EAAE,GAAG,IAAI,OAAO,IAAI,SAAS,EAAE,CAAC;IACrG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,IAAI,OAAO,IAAI,SAAS,EAAE,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,mBAAmB,CAAC,GAAW,EAAE,GAAkB;IACjE,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACpB,IAAI,CAAC,CAAC;QAAE,OAAO;IACf,MAAM,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC;IACjC,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QACxB,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QACpD,CAAC,CAAC,QAAQ,CAAC,IAAI,GAAG,YAAY,WAAW,0EAA0E,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC;QACjJ,OAAO;IACT,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;IAC9C,IAAI,OAAO,QAAQ,KAAK,UAAU,EAAE,CAAC;QACnC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACd,OAAO;IACT,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QACvE,CAAC,CAAC,QAAQ,CAAC,IAAI,GAAG,YAAY,GAAG,EAAE,CAAC;QACpC,OAAO;IACT,CAAC;IACD,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,EAAE,QAAQ,EAAE,qBAAqB,CAAC,CAAC;AACjD,CAAC"}

package/dist/passkey/webauthn-json.d.ts

@@ -0,0 +1,35 @@
+/** Minimal host surface the JSON helpers need (a browser, or a fake in tests). */
+export interface WebAuthnJsonHost {
+    PublicKeyCredential?: unknown;
+    atob?: (data: string) => string;
+    btoa?: (data: string) => string;
+}
+/** PRF client inputs as sent to `create()`/`get()` (not in every lib.dom). */
+export type PrfClientInputs = AuthenticationExtensionsClientInputs & {
+    prf?: {
+        eval?: {
+            first?: Uint8Array;
+        };
+    };
+};
+/** PRF results as returned by `getClientExtensionResults()`. */
+export interface PrfClientResults {
+    prf?: {
+        results?: {
+            first?: BufferSource;
+        };
+    };
+}
+/** Decodes base64url (no padding required) with `atob` semantics. */
+export declare function base64UrlToBytes(value: string): Uint8Array;
+/** Encodes bytes as base64url without padding. */
+export declare function bytesToBase64Url(bytes: Uint8Array): string;
+/** A credential or assertion serialized for the DFX API, PRF results stripped. */
+export type WebAuthnJson = Record<string, unknown>;
+/**
+ * Serializes a `PublicKeyCredential` for the API: WebAuthn Level 3 `toJSON()` when present, otherwise by
+ * hand. Never carries `clientExtensionResults.prf` (the PRF bytes never leave the tab), but adds
+ * `authenticatorAttachment` and attestation `transports`.
+ */
+export declare function credentialToJSON(credential: PublicKeyCredential): WebAuthnJson;
+//# sourceMappingURL=webauthn-json.d.ts.map

package/dist/passkey/webauthn-json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webauthn-json.d.ts","sourceRoot":"","sources":["../../src/passkey/webauthn-json.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAClF,MAAM,WAAW,gBAAgB;IAC/B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;IAChC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;CACjC;AAED,8EAA8E;AAC9E,MAAM,MAAM,eAAe,GAAG,oCAAoC,GAAG;IACnE,GAAG,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE;YAAE,KAAK,CAAC,EAAE,UAAU,CAAA;SAAE,CAAA;KAAE,CAAC;CACzC,CAAC;AAEF,gEAAgE;AAChE,MAAM,WAAW,gBAAgB;IAC/B,GAAG,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE;YAAE,KAAK,CAAC,EAAE,YAAY,CAAA;SAAE,CAAA;KAAE,CAAC;CAC9C;AAMD,qEAAqE;AACrE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,UAAU,CAU1D;AAED,kDAAkD;AAClD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAO1D;AAED,kFAAkF;AAClF,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAUnD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,UAAU,EAAE,mBAAmB,GAAG,YAAY,CA6C9E"}

package/dist/passkey/webauthn-json.js

@@ -0,0 +1,79 @@
+function host() {
+    return globalThis;
+}
+/** Decodes base64url (no padding required) with `atob` semantics. */
+export function base64UrlToBytes(value) {
+    const api = host();
+    const atob = typeof api.atob === 'function' ? api.atob.bind(api) : undefined;
+    if (!atob)
+        throw new TypeError('base64url decoding needs atob');
+    const padded = value.replace(/-/g, '+').replace(/_/g, '/');
+    const pad = padded.length % 4 === 0 ? '' : '='.repeat(4 - (padded.length % 4));
+    const binary = atob(`${padded}${pad}`);
+    const bytes = new Uint8Array(binary.length);
+    for (let i = 0; i < binary.length; i++)
+        bytes[i] = binary.charCodeAt(i);
+    return bytes;
+}
+/** Encodes bytes as base64url without padding. */
+export function bytesToBase64Url(bytes) {
+    const api = host();
+    const btoa = typeof api.btoa === 'function' ? api.btoa.bind(api) : undefined;
+    if (!btoa)
+        throw new TypeError('base64url encoding needs btoa');
+    let binary = '';
+    for (const byte of bytes)
+        binary += String.fromCharCode(byte);
+    return btoa(binary).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/u, '');
+}
+function withoutPrfResults(json) {
+    const ext = json['clientExtensionResults'];
+    if (ext === null || typeof ext !== 'object' || Array.isArray(ext))
+        return json;
+    const next = { ...ext };
+    delete next['prf'];
+    return { ...json, clientExtensionResults: next };
+}
+/**
+ * Serializes a `PublicKeyCredential` for the API: WebAuthn Level 3 `toJSON()` when present, otherwise by
+ * hand. Never carries `clientExtensionResults.prf` (the PRF bytes never leave the tab), but adds
+ * `authenticatorAttachment` and attestation `transports`.
+ */
+export function credentialToJSON(credential) {
+    const native = credential;
+    let json;
+    if (typeof native.toJSON === 'function') {
+        json = native.toJSON();
+    }
+    else {
+        const response = credential.response;
+        const base = {
+            id: credential.id,
+            rawId: bytesToBase64Url(new Uint8Array(credential.rawId)),
+            type: credential.type,
+            clientExtensionResults: credential.getClientExtensionResults(),
+            authenticatorAttachment: native.authenticatorAttachment ?? null,
+        };
+        if (response.attestationObject !== undefined) {
+            base['response'] = {
+                clientDataJSON: bytesToBase64Url(new Uint8Array(response.clientDataJSON)),
+                attestationObject: bytesToBase64Url(new Uint8Array(response.attestationObject)),
+                transports: typeof response.getTransports === 'function' ? response.getTransports() : [],
+            };
+        }
+        else {
+            base['response'] = {
+                clientDataJSON: bytesToBase64Url(new Uint8Array(response.clientDataJSON)),
+                authenticatorData: bytesToBase64Url(new Uint8Array(response.authenticatorData ?? new ArrayBuffer(0))),
+                signature: bytesToBase64Url(new Uint8Array(response.signature ?? new ArrayBuffer(0))),
+                userHandle: response.userHandle === null || response.userHandle === undefined
+                    ? null
+                    : bytesToBase64Url(new Uint8Array(response.userHandle)),
+            };
+        }
+        json = base;
+    }
+    json['authenticatorAttachment'] = native.authenticatorAttachment ?? null;
+    return withoutPrfResults(json);
+}
+//# sourceMappingURL=webauthn-json.js.map

package/dist/passkey/webauthn-json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webauthn-json.js","sourceRoot":"","sources":["../../src/passkey/webauthn-json.ts"],"names":[],"mappings":"AAiBA,SAAS,IAAI;IACX,OAAO,UAAyC,CAAC;AACnD,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,MAAM,GAAG,GAAG,IAAI,EAAE,CAAC;IACnB,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,SAAS,CAAC,+BAA+B,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;IAC/E,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,MAAM,GAAG,GAAG,EAAE,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACxE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,gBAAgB,CAAC,KAAiB;IAChD,MAAM,GAAG,GAAG,IAAI,EAAE,CAAC;IACnB,MAAM,IAAI,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,SAAS,CAAC,+BAA+B,CAAC,CAAC;IAChE,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,KAAK;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAC9D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAClF,CAAC;AAKD,SAAS,iBAAiB,CAAC,IAAkB;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC3C,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/E,MAAM,IAAI,GAAG,EAAE,GAAI,GAAoB,EAAE,CAAC;IAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC;IACnB,OAAO,EAAE,GAAG,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC;AACnD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,UAA+B;IAC9D,MAAM,MAAM,GAAG,UAGd,CAAC;IACF,IAAI,IAAkB,CAAC;IACvB,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;QACxC,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;IACzB,CAAC;SAAM,CAAC;QACN,MAAM,QAAQ,GAAG,UAAU,CAAC,QAO3B,CAAC;QACF,MAAM,IAAI,GAAiB;YACzB,EAAE,EAAE,UAAU,CAAC,EAAE;YACjB,KAAK,EAAE,gBAAgB,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACzD,IAAI,EAAE,UAAU,CAAC,IAAI;YACrB,sBAAsB,EAAE,UAAU,CAAC,yBAAyB,EAAE;YAC9D,uBAAuB,EAAE,MAAM,CAAC,uBAAuB,IAAI,IAAI;SAChE,CAAC;QACF,IAAI,QAAQ,CAAC,iBAAiB,KAAK,SAAS,EAAE,CAAC;YAC7C,IAAI,CAAC,UAAU,CAAC,GAAG;gBACjB,cAAc,EAAE,gBAAgB,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;gBACzE,iBAAiB,EAAE,gBAAgB,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;gBAC/E,UAAU,EAAE,OAAO,QAAQ,CAAC,aAAa,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE;aACzF,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,UAAU,CAAC,GAAG;gBACjB,cAAc,EAAE,gBAAgB,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;gBACzE,iBAAiB,EAAE,gBAAgB,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,iBAAiB,IAAI,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrG,SAAS,EAAE,gBAAgB,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,SAAS,IAAI,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;gBACrF,UAAU,EACR,QAAQ,CAAC,UAAU,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,KAAK,SAAS;oBAC/D,CAAC,CAAC,IAAI;oBACN,CAAC,CAAC,gBAAgB,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;aAC5D,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,yBAAyB,CAAC,GAAG,MAAM,CAAC,uBAAuB,IAAI,IAAI,CAAC;IACzE,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC;AACjC,CAAC"}

package/dist/providers/blocklist.d.ts

@@ -0,0 +1,22 @@
+import type { WalletDataApi } from '@dfx.swiss/core';
+import type { SnapshotBlocklists } from './snapshot';
+/**
+ * Local blocklist matching over the bundled snapshot, refreshed through the DFX list capability (§9.2).
+ * Matching is local and synchronous; a failed refresh keeps the last state.
+ */
+export declare class Blocklists {
+    private phishingDomains;
+    private scamAddresses;
+    refreshedAt?: Date;
+    constructor(snapshot: SnapshotBlocklists);
+    /** Listed host, or a subdomain of one. A trailing DNS dot does not bypass the list. */
+    isPhishingDomain(hostname: string): boolean;
+    isScamAddress(address: string): boolean;
+    get sizes(): {
+        phishingDomains: number;
+        scamAddresses: number;
+    };
+    /** Best-effort refresh through the DFX API; never throws. */
+    refresh(walletData: WalletDataApi, now?: Date): Promise<void>;
+}
+//# sourceMappingURL=blocklist.d.ts.map

package/dist/providers/blocklist.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blocklist.d.ts","sourceRoot":"","sources":["../../src/providers/blocklist.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD;;;GAGG;AACH,qBAAa,UAAU;IACrB,OAAO,CAAC,eAAe,CAAc;IACrC,OAAO,CAAC,aAAa,CAAc;IACnC,WAAW,CAAC,EAAE,IAAI,CAAC;gBAEP,QAAQ,EAAE,kBAAkB;IAKxC,uFAAuF;IACvF,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAS3C,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAIvC,IAAI,KAAK,IAAI;QAAE,eAAe,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAA;KAAE,CAE9D;IAED,6DAA6D;IACvD,OAAO,CAAC,UAAU,EAAE,aAAa,EAAE,GAAG,OAAa,GAAG,OAAO,CAAC,IAAI,CAAC;CAa1E"}

package/dist/providers/blocklist.js

@@ -0,0 +1,51 @@
+/**
+ * Local blocklist matching over the bundled snapshot, refreshed through the DFX list capability (§9.2).
+ * Matching is local and synchronous; a failed refresh keeps the last state.
+ */
+export class Blocklists {
+    constructor(snapshot) {
+        this.phishingDomains = new Set(snapshot.phishingDomains.map(canonicalHost));
+        this.scamAddresses = new Set(snapshot.scamAddresses.map((a) => a.toLowerCase()));
+    }
+    /** Listed host, or a subdomain of one. A trailing DNS dot does not bypass the list. */
+    isPhishingDomain(hostname) {
+        let host = canonicalHost(hostname);
+        while (host.includes('.')) {
+            if (this.phishingDomains.has(host))
+                return true;
+            host = host.slice(host.indexOf('.') + 1);
+        }
+        return false;
+    }
+    isScamAddress(address) {
+        return this.scamAddresses.has(address.toLowerCase());
+    }
+    get sizes() {
+        return { phishingDomains: this.phishingDomains.size, scamAddresses: this.scamAddresses.size };
+    }
+    /** Best-effort refresh through the DFX API; never throws. */
+    async refresh(walletData, now = new Date()) {
+        try {
+            const [domains, addresses] = await Promise.all([
+                walletData.list('PhishingDomains'),
+                walletData.list('ScamAddresses'),
+            ]);
+            if (isStringArray(domains))
+                this.phishingDomains = new Set(domains.map(canonicalHost));
+            if (isStringArray(addresses))
+                this.scamAddresses = new Set(addresses.map((a) => a.toLowerCase()));
+            this.refreshedAt = now;
+        }
+        catch {
+            // keep the bundled state; the next refresh retries
+        }
+    }
+}
+function isStringArray(value) {
+    return Array.isArray(value) && value.every((entry) => typeof entry === 'string');
+}
+/** Lower case, trailing dots removed. The matcher never consults a single label such as `com`. */
+function canonicalHost(value) {
+    return value.trim().toLowerCase().replace(/\.+$/, '');
+}
+//# sourceMappingURL=blocklist.js.map

package/dist/providers/blocklist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blocklist.js","sourceRoot":"","sources":["../../src/providers/blocklist.ts"],"names":[],"mappings":"AAGA;;;GAGG;AACH,MAAM,OAAO,UAAU;IAKrB,YAAY,QAA4B;QACtC,IAAI,CAAC,eAAe,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;QAC5E,IAAI,CAAC,aAAa,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IACnF,CAAC;IAED,uFAAuF;IACvF,gBAAgB,CAAC,QAAgB;QAC/B,IAAI,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACnC,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;YAChD,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,aAAa,CAAC,OAAe;QAC3B,OAAO,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,KAAK;QACP,OAAO,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;IAChG,CAAC;IAED,6DAA6D;IAC7D,KAAK,CAAC,OAAO,CAAC,UAAyB,EAAE,GAAG,GAAG,IAAI,IAAI,EAAE;QACvD,IAAI,CAAC;YACH,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBAC7C,UAAU,CAAC,IAAI,CAAC,iBAAiB,CAAC;gBAClC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC;aACjC,CAAC,CAAC;YACH,IAAI,aAAa,CAAC,OAAO,CAAC;gBAAE,IAAI,CAAC,eAAe,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;YACvF,IAAI,aAAa,CAAC,SAAS,CAAC;gBAAE,IAAI,CAAC,aAAa,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;YAClG,IAAI,CAAC,WAAW,GAAG,GAAG,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,mDAAmD;QACrD,CAAC;IACH,CAAC;CACF;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;AACnF,CAAC;AAED,kGAAkG;AAClG,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACxD,CAAC"}

package/dist/providers/chain-registry.d.ts

@@ -0,0 +1,26 @@
+import type { ChainInfo } from '@dfx.swiss/core';
+import type { WalletEnv } from '../config/environment';
+import type { WalletSnapshot } from './snapshot';
+/**
+ * The chains the wallet may use, from the DFX chain classification (D23) with a release-pinned snapshot as
+ * the offline fallback. `walletSupported` already encodes the environment rule server-side (PRD: mainnets;
+ * DEV/LOC: testnets + Spark); the registry additionally ties Bitcoin to the compiled network of the
+ * environment and only ever exposes EVM chains with a numeric chain id.
+ */
+export declare class ChainRegistry {
+    private readonly chains;
+    private readonly source;
+    private constructor();
+    static fromApi(chains: ChainInfo[]): ChainRegistry;
+    static fromSnapshot(snapshot: WalletSnapshot): ChainRegistry;
+    get isLive(): boolean;
+    all(): ChainInfo[];
+    /** Bitcoin of this environment (PRD mainnet, DEV/LOC testnet4), `walletSupported` checked. */
+    bitcoin(env: WalletEnv): ChainInfo;
+    /** Every wallet-supported EVM chain of the environment kind; Haqq (no chain id) is never included. */
+    evmChains(env: WalletEnv): ChainInfo[];
+    evmChain(chainId: number): ChainInfo;
+    /** Spark runs on mainnet in every environment (D28). */
+    spark(): ChainInfo;
+}
+//# sourceMappingURL=chain-registry.d.ts.map

package/dist/providers/chain-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain-registry.d.ts","sourceRoot":"","sources":["../../src/providers/chain-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAc,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC7D,OAAO,KAAK,EAAkB,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAEvE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAOjD;;;;;GAKG;AACH,qBAAa,aAAa;IAEtB,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,MAAM;IAFzB,OAAO;IAKP,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,aAAa;IAIlD,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,cAAc,GAAG,aAAa;IAI5D,IAAI,MAAM,IAAI,OAAO,CAEpB;IAED,GAAG,IAAI,SAAS,EAAE;IAIlB,8FAA8F;IAC9F,OAAO,CAAC,GAAG,EAAE,SAAS,GAAG,SAAS;IAOlC,sGAAsG;IACtG,SAAS,CAAC,GAAG,EAAE,SAAS,GAAG,SAAS,EAAE;IAWtC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS;IAMpC,wDAAwD;IACxD,KAAK,IAAI,SAAS;CAKnB"}

package/dist/providers/chain-registry.js

@@ -0,0 +1,59 @@
+import { WALLET_NETWORKS } from '../config/environment';
+import { WalletError } from '../util/errors';
+function bitcoinBlockchain(network) {
+    return network === 'mainnet' ? 'Bitcoin' : 'BitcoinTestnet4';
+}
+/**
+ * The chains the wallet may use, from the DFX chain classification (D23) with a release-pinned snapshot as
+ * the offline fallback. `walletSupported` already encodes the environment rule server-side (PRD: mainnets;
+ * DEV/LOC: testnets + Spark); the registry additionally ties Bitcoin to the compiled network of the
+ * environment and only ever exposes EVM chains with a numeric chain id.
+ */
+export class ChainRegistry {
+    constructor(chains, source) {
+        this.chains = chains;
+        this.source = source;
+    }
+    static fromApi(chains) {
+        return new ChainRegistry(chains, 'api');
+    }
+    static fromSnapshot(snapshot) {
+        return new ChainRegistry(snapshot.chains, 'snapshot');
+    }
+    get isLive() {
+        return this.source === 'api';
+    }
+    all() {
+        return this.chains;
+    }
+    /** Bitcoin of this environment (PRD mainnet, DEV/LOC testnet4), `walletSupported` checked. */
+    bitcoin(env) {
+        const network = WALLET_NETWORKS[env].bitcoin;
+        const chain = this.chains.find((c) => c.blockchain === bitcoinBlockchain(network) && c.walletSupported);
+        if (!chain)
+            throw new WalletError('chain-unavailable', `Bitcoin (${network}) is not available in this environment`);
+        return chain;
+    }
+    /** Every wallet-supported EVM chain of the environment kind; Haqq (no chain id) is never included. */
+    evmChains(env) {
+        const kind = WALLET_NETWORKS[env].evm;
+        return this.chains.filter((chain) => chain.family === 'Evm' &&
+            chain.chainId !== undefined &&
+            chain.walletSupported &&
+            (kind === 'mainnet' ? !chain.isTestnet : chain.isTestnet));
+    }
+    evmChain(chainId) {
+        const chain = this.chains.find((c) => c.family === 'Evm' && c.chainId === chainId && c.walletSupported);
+        if (!chain)
+            throw new WalletError('chain-unavailable', `Chain ${chainId} is not wallet-supported`);
+        return chain;
+    }
+    /** Spark runs on mainnet in every environment (D28). */
+    spark() {
+        const chain = this.chains.find((c) => c.family === 'Spark' && c.walletSupported);
+        if (!chain)
+            throw new WalletError('chain-unavailable', 'Spark is not available in this environment');
+        return chain;
+    }
+}
+//# sourceMappingURL=chain-registry.js.map

package/dist/providers/chain-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain-registry.js","sourceRoot":"","sources":["../../src/providers/chain-registry.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAExD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,SAAS,iBAAiB,CAAC,OAAuB;IAChD,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAE,SAAwB,CAAC,CAAC,CAAE,iBAAgC,CAAC;AAC/F,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,aAAa;IACxB,YACmB,MAAmB,EACnB,MAA0B;QAD1B,WAAM,GAAN,MAAM,CAAa;QACnB,WAAM,GAAN,MAAM,CAAoB;IAC1C,CAAC;IAEJ,MAAM,CAAC,OAAO,CAAC,MAAmB;QAChC,OAAO,IAAI,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,CAAC,YAAY,CAAC,QAAwB;QAC1C,OAAO,IAAI,aAAa,CAAC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC;IAC/B,CAAC;IAED,GAAG;QACD,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,8FAA8F;IAC9F,OAAO,CAAC,GAAc;QACpB,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,CAAC;QACxG,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,WAAW,CAAC,mBAAmB,EAAE,YAAY,OAAO,wCAAwC,CAAC,CAAC;QACpH,OAAO,KAAK,CAAC;IACf,CAAC;IAED,sGAAsG;IACtG,SAAS,CAAC,GAAc;QACtB,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC;QACtC,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CACvB,CAAC,KAAK,EAAE,EAAE,CACR,KAAK,CAAC,MAAM,KAAK,KAAK;YACtB,KAAK,CAAC,OAAO,KAAK,SAAS;YAC3B,KAAK,CAAC,eAAe;YACrB,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAC5D,CAAC;IACJ,CAAC;IAED,QAAQ,CAAC,OAAe;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,IAAI,CAAC,CAAC,eAAe,CAAC,CAAC;QACxG,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,WAAW,CAAC,mBAAmB,EAAE,SAAS,OAAO,0BAA0B,CAAC,CAAC;QACnG,OAAO,KAAK,CAAC;IACf,CAAC;IAED,wDAAwD;IACxD,KAAK;QACH,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,IAAI,CAAC,CAAC,eAAe,CAAC,CAAC;QACjF,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,WAAW,CAAC,mBAAmB,EAAE,4CAA4C,CAAC,CAAC;QACrG,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/providers/dfx-data.d.ts

@@ -0,0 +1,25 @@
+import type { ChainApi, WalletDataApi } from '@dfx.swiss/core';
+import { WalletError } from '../util/errors';
+/** The DFX data capability is unreachable (rate-limited out, network, or paused server-side). */
+export declare class ProviderUnavailableError extends WalletError {
+    constructor(cause?: unknown);
+}
+export interface DfxDataOptions {
+    /** Retries on 429/5xx with linear backoff (default 2). */
+    retries?: number;
+    backoffMs?: (attempt: number) => number;
+}
+/**
+ * Every wallet data call goes through the DFX API (D8): two retries with backoff on 429/5xx, everything
+ * else fails fast; after the last attempt the wallet shows "unavailable" instead of guessing.
+ */
+export declare class DfxData {
+    private readonly walletData;
+    private readonly chain;
+    private readonly options;
+    constructor(walletData: WalletDataApi, chain: ChainApi, options?: DfxDataOptions);
+    chains<T>(run: (chain: ChainApi) => Promise<T>): Promise<T>;
+    query<T>(run: (walletData: WalletDataApi) => Promise<T>): Promise<T>;
+    private run;
+}
+//# sourceMappingURL=dfx-data.d.ts.map

package/dist/providers/dfx-data.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dfx-data.d.ts","sourceRoot":"","sources":["../../src/providers/dfx-data.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAE/D,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,iGAAiG;AACjG,qBAAa,wBAAyB,SAAQ,WAAW;gBAC3C,KAAK,CAAC,EAAE,OAAO;CAG5B;AAED,MAAM,WAAW,cAAc;IAC7B,0DAA0D;IAC1D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC;CACzC;AAED;;;GAGG;AACH,qBAAa,OAAO;IAEhB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAFP,UAAU,EAAE,aAAa,EACzB,KAAK,EAAE,QAAQ,EACf,OAAO,GAAE,cAAmB;IAGzC,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAI3D,KAAK,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,UAAU,EAAE,aAAa,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;YAI5D,GAAG;CAiBlB"}

package/dist/providers/dfx-data.js

@@ -0,0 +1,44 @@
+import { ApiException } from '@dfx.swiss/core';
+import { WalletError } from '../util/errors';
+/** The DFX data capability is unreachable (rate-limited out, network, or paused server-side). */
+export class ProviderUnavailableError extends WalletError {
+    constructor(cause) {
+        super('provider-unavailable', 'The DFX wallet data capability is currently unavailable', { cause });
+    }
+}
+/**
+ * Every wallet data call goes through the DFX API (D8): two retries with backoff on 429/5xx, everything
+ * else fails fast; after the last attempt the wallet shows "unavailable" instead of guessing.
+ */
+export class DfxData {
+    constructor(walletData, chain, options = {}) {
+        this.walletData = walletData;
+        this.chain = chain;
+        this.options = options;
+    }
+    async chains(run) {
+        return this.run(() => run(this.chain));
+    }
+    async query(run) {
+        return this.run(() => run(this.walletData));
+    }
+    async run(call) {
+        const retries = this.options.retries ?? 2;
+        const backoff = this.options.backoffMs ?? ((attempt) => 250 * (attempt + 1));
+        for (let attempt = 0;; attempt++) {
+            try {
+                return await call();
+            }
+            catch (error) {
+                const retryable = error instanceof ApiException && (error.statusCode === 429 || error.statusCode >= 500);
+                if (!retryable || attempt >= retries) {
+                    if (error instanceof WalletError)
+                        throw error;
+                    throw new ProviderUnavailableError(error);
+                }
+                await new Promise((resolve) => setTimeout(resolve, backoff(attempt)));
+            }
+        }
+    }
+}
+//# sourceMappingURL=dfx-data.js.map

package/dist/providers/dfx-data.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dfx-data.js","sourceRoot":"","sources":["../../src/providers/dfx-data.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,iGAAiG;AACjG,MAAM,OAAO,wBAAyB,SAAQ,WAAW;IACvD,YAAY,KAAe;QACzB,KAAK,CAAC,sBAAsB,EAAE,yDAAyD,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACtG,CAAC;CACF;AAQD;;;GAGG;AACH,MAAM,OAAO,OAAO;IAClB,YACmB,UAAyB,EACzB,KAAe,EACf,UAA0B,EAAE;QAF5B,eAAU,GAAV,UAAU,CAAe;QACzB,UAAK,GAAL,KAAK,CAAU;QACf,YAAO,GAAP,OAAO,CAAqB;IAC5C,CAAC;IAEJ,KAAK,CAAC,MAAM,CAAI,GAAoC;QAClD,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,KAAK,CAAI,GAA8C;QAC3D,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IAC9C,CAAC;IAEO,KAAK,CAAC,GAAG,CAAI,IAAsB;QACzC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,OAAe,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;QAErF,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,OAAO,MAAM,IAAI,EAAE,CAAC;YACtB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,SAAS,GAAG,KAAK,YAAY,YAAY,IAAI,CAAC,KAAK,CAAC,UAAU,KAAK,GAAG,IAAI,KAAK,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC;gBACzG,IAAI,CAAC,SAAS,IAAI,OAAO,IAAI,OAAO,EAAE,CAAC;oBACrC,IAAI,KAAK,YAAY,WAAW;wBAAE,MAAM,KAAK,CAAC;oBAC9C,MAAM,IAAI,wBAAwB,CAAC,KAAK,CAAC,CAAC;gBAC5C,CAAC;gBACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;IACH,CAAC;CACF"}

package/dist/providers/price.d.ts

@@ -0,0 +1,34 @@
+import type { WalletDataApi } from '@dfx.swiss/core';
+/** A price older than this is stale; a stale price must not enter a fiat amount (§9.6). */
+export declare const PRICE_STALE_MS: number;
+export type PricedAsset = {
+    assetId: number;
+    price?: number;
+    stale?: boolean;
+};
+export interface PricePolicyOptions {
+    now?: () => number;
+}
+/**
+ * Fiat prices of public assets, always by asset id — never by symbol (D32). A missing asset is simply
+ * unpriced ("–"); a stale price is returned as stale so callers can refuse fiat entry (§9.6). Prices never
+ * feed fee caps.
+ */
+export declare class PricePolicy {
+    private readonly walletData;
+    private readonly options;
+    constructor(walletData: WalletDataApi, options?: PricePolicyOptions);
+    prices(assetIds: number[], currency: string, now?: () => number): Promise<Map<number, {
+        price: number;
+        stale: boolean;
+    }>>;
+    /** Convenience: price with staleness, or `undefined` when the asset has none. */
+    priceOf(prices: Map<number, {
+        price: number;
+        stale: boolean;
+    }>, assetId: number): {
+        price: number;
+        stale: boolean;
+    } | undefined;
+}
+//# sourceMappingURL=price.d.ts.map

package/dist/providers/price.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"price.d.ts","sourceRoot":"","sources":["../../src/providers/price.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAe,MAAM,iBAAiB,CAAC;AAIlE,2FAA2F;AAC3F,eAAO,MAAM,cAAc,QAAgB,CAAC;AAE5C,MAAM,MAAM,WAAW,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AAE/E,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,qBAAa,WAAW;IAEpB,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,OAAO;gBADP,UAAU,EAAE,aAAa,EACzB,OAAO,GAAE,kBAAuB;IAG7C,MAAM,CACV,QAAQ,EAAE,MAAM,EAAE,EAClB,QAAQ,EAAE,MAAM,EAChB,GAAG,SAjBO,MAiBwB,GACjC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAwB1D,iFAAiF;IACjF,OAAO,CACL,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,CAAC,EACtD,OAAO,EAAE,MAAM,GACd;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAA;KAAE,GAAG,SAAS;CAGjD"}