@dfx.swiss/wallet 0.0.0-stage → 0.1.1-beta.0

package/dist/session/passkey-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkey-auth.js","sourceRoot":"","sources":["../../src/session/passkey-auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAGrF,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAwB/E,MAAM,OAAO,mBAAoB,SAAQ,WAAW;IAClD,YAAqB,OAAuB;QAC1C,KAAK,CAAC,iBAAiB,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QADvB,YAAO,GAAP,OAAO,CAAgB;IAE5C,CAAC;CACF;AAiBD,SAAS,WAAW,CAAC,SAAqB,EAAE,GAAc;IACxD,OAAO,OAAO,CAAC,YAAY,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,EAAE,cAAc,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAC9G,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,WAAW;IACtB,YAA6B,IAAqB;QAArB,SAAI,GAAJ,IAAI,CAAiB;IAAG,CAAC;IAEtD,0FAA0F;IAC1F,KAAK,CAAC,QAAQ,CAAC,MAAsB;QACnC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QAC9D,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAE/B,MAAM,UAAU,GAAG,CAAC,MAAM,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC;QACpF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC;YAC1D,SAAS,EAAE,eAAe,CAAC,SAAS,CAAC,SAAS,CAAC;YAC/C,oBAAoB,EAAE,UAAU;SACjC,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAEnD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,CAAC,WAAmB,EAAE,SAAkC,EAAE,EAAE,CACzE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC;YACnC,WAAW;YACX,UAAU,EAAE,OAAO,CAAC,WAAW;YAC/B,UAAU,EAAE,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC;YAC/C,iBAAiB,EAAE,IAAI;YACvB,SAAS;YACT,GAAG,KAAK;YACR,GAAG,MAAM;SACV,CAAC,CAAC;QAEL,IAAI,QAAwD,CAAC;QAC7D,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtC,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;gBACtB,MAAM,KAAK,CAAC;YACd,CAAC;YACD,IAAI,CAAC;gBACH,0FAA0F;gBAC1F,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;gBAC1D,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC3B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;oBAClD,SAAS,EAAE,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC;oBAC3C,YAAY,EAAE,OAAO,CAAC,YAAY;oBAClC,gBAAgB,EAAE,IAAI;iBACvB,CAAC,CAAC;gBACH,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;YAClE,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,yEAAyE;gBACzE,IAAI,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC;oBAAE,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;gBACvG,MAAM,UAAU,CAAC;YACnB,CAAC;QACH,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QAC9D,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IACjG,CAAC;IAED;uFACmF;IACnF,KAAK,CAAC,KAAK;QACT,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAClE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAE/B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,eAAe,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACzG,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,SAAS,CAAC,WAAW,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC;QAE7F,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC;YACzB,OAAO,EAAE,GAAG,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QAC1C,CAAC;QAED,MAAM,IAAI,GAAG,WAAW,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAgB,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,gBAAgB,CAAC;YACzF,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,eAAe,CAAC;QACpB,IAAI,KAAK,KAAK,UAAU;YAAE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,YAAY,CAAC,CAAC;QAC1F,OAAO,EAAE,GAAG,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IACtC,CAAC;IAED,yFAAyF;IACzF,KAAK,CAAC,MAAM;QACV,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,SAAS,CAAC,SAAS;YAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QAErD,MAAM,YAAY,GAAG,eAAe,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,YAAY,KAAK,YAAY,CAAC,CAAC;QACnG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,UAAU;YAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;QAExF,MAAM,IAAI,GAAG,WAAW,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7D,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,UAAU,CAAC,gBAAgB,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC;QAChH,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IACrC,CAAC;IAED,0FAA0F;IAC1F,KAAK,CAAC,KAAK,CAAC,eAAuB;QACjC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;QAC1E,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAE/B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC;YAC1D,SAAS,EAAE,eAAe,CAAC,SAAS,CAAC,SAAS,CAAC;SAChD,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAEnD,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,CACb,WAAmB,EACnB,SAAkC,EAClC,UAAyD,EACzD,EAAE,CACF,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,CAC/B;YACE,WAAW;YACX,UAAU,EAAE,OAAO,CAAC,WAAW;YAC/B,UAAU,EAAE,eAAe,CAAC,OAAO,CAAC,UAAU,CAAC;YAC/C,iBAAiB,EAAE,IAAI;YACvB,SAAS;YACT,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,GAAG,UAAU;SACd,EACD,eAAe,CAChB,CAAC;QAEJ,MAAM,kBAAkB,GAAG,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC;QAEhG,6FAA6F;QAC7F,MAAM,qBAAqB,GAAG,KAAK,IAA6D,EAAE;YAChG,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;YACtE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;gBAClD,SAAS,EAAE,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC;gBAC3C,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,gBAAgB,EAAE,IAAI;aACvB,CAAC,CAAC;YACH,MAAM,SAAS,GACb,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;gBAClC,eAAe,CAAC,OAAO;gBACvB,iBAAiB;gBACjB,KAAK,CAAC,SAAS;gBACf,IAAI;gBACJ,KAAK,CAAC,OAAO,CAAC;YAChB,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,UAAU,EAAE,EAAE,CACjF,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,CAClC,CAAC;YACF,OAAO,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,SAAS,CAAC,SAAS,EAAE;gBACpD,SAAS;gBACT,cAAc,EAAE,KAAK,CAAC,cAAc;aACrC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,IAAI,QAAwD,CAAC;QAC7D,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;QACxF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChC,QAAQ,GAAG,MAAM,qBAAqB,EAAE,CAAC;YAC3C,CAAC;iBAAM,IAAI,IAAI,CAAC,qBAAqB,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7C,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;gBACtB,MAAM,KAAK,CAAC;YACd,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC;oBACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;oBACtE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBAC3B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;wBAClD,SAAS,EAAE,eAAe,CAAC,KAAK,CAAC,SAAS,CAAC;wBAC3C,YAAY,EAAE,OAAO,CAAC,YAAY;wBAClC,gBAAgB,EAAE,IAAI;qBACvB,CAAC,CAAC;oBACH,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,WAAW,EAAE,SAAS,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;gBACtF,CAAC;gBAAC,OAAO,UAAU,EAAE,CAAC;oBACpB,IAAI,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,EAAE,CAAC;wBACrC,QAAQ,GAAG,MAAM,qBAAqB,EAAE,CAAC;oBAC3C,CAAC;yBAAM,IAAI,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,EAAE,CAAC;wBAClD,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;wBACtB,MAAM,UAAU,CAAC;oBACnB,CAAC;yBAAM,CAAC;wBACN,MAAM,UAAU,CAAC;oBACnB,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QAC9D,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IACjG,CAAC;IAED,6GAA6G;IAC7G,KAAK,CAAC,IAAI,CACR,MAAyB,EACzB,WAAmB,EACnB,IAAa,EACb,QAAQ,GAAG,CAAC;QAEZ,MAAM,OAAO,GAAG,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;QAClG,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;QAE1F,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAC/C;YACE,OAAO;YACP,SAAS;YACT,MAAM,EAAE,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;YAC5C,IAAI,EAAE,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI;SAClF,EACD,WAAW,CACZ,CAAC;QACF,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;IAC1E,CAAC;IAED,wEAAwE;IACxE,KAAK,CAAC,MAAM,CAAC,MAA8B;QACzC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;QAC5D,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,eAAe,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAEzG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC;YACtD,WAAW,EAAE,SAAS,CAAC,WAAW;YAClC,UAAU,EAAE,SAAS,CAAC,SAAS;YAC/B,MAAM;SACP,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QACvF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,YAAyB;QAC5C,MAAM,MAAM,GAAG,YAAY,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAC7D,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5F,IAAI,CAAC,SAAS,CAAC,SAAS;YAAE,MAAM,IAAI,WAAW,CAAC,iBAAiB,EAAE,oCAAoC,CAAC,CAAC;QACzG,IAAI,MAAM,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,WAAW,CAAC,qBAAqB,EAAE,gDAAgD,CAAC,CAAC;QACjG,CAAC;QAED,MAAM,IAAI,GAAG,WAAW,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7D,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,eAAe,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,YAAY,KAAK,EAAE,CAAC,EAAE,UAAU,EAAE,gBAAgB,CAAC;YAClH,IAAI,QAAQ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAC1D,MAAM,IAAI,WAAW,CAAC,eAAe,EAAE,8CAA8C,CAAC,CAAC;YACzF,CAAC;YACD,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpC,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,CAAC;IACH,CAAC;IAED,mHAAmH;IACnH,qBAAqB,CAAC,MAAqB,EAAE,IAAa;QACxD,MAAM,KAAK,GAAG,IAAI,GAAG,EAA8D,CAAC;QACpF,MAAM,OAAO,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1C,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACpF,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACnC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9E,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,GAAG,EAAE,KAAK,EAAE,EAAE,CAAC;YACzC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAChC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAClF,CAAC;QAED,OAAO,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YACrC,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;YACzD,OAAO;gBACL,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,OAAO,EAAE,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI;aACtG,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,sFAAsF;IAC9E,sBAAsB;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;QACzF,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,WAAW,CAAC,sBAAsB,EAAE,oDAAoD,CAAC,CAAC;QACtG,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAC1C,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IACjD,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAChC,WAAmB,EACnB,SAAkC;QAElC,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;QAChG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,UAAU,KAAK,GAAG,EAAE,CAAC;gBAC9D,MAAM,IAAI,mBAAmB,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAChH,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,wGAAwG;IAChG,SAAS,CAAC,IAAa;QAM7B,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QACpC,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC,OAAO,CAAC;QAClD,OAAO;YACL,OAAO;YACP,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YACjF,YAAY;YACZ,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;SACnG,CAAC;IACJ,CAAC;IAED,kGAAkG;IAC1F,KAAK,CAAC,gBAAgB;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,KAAK,CAAC,SAAS,EAAE,CAAC;QAC9B,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;YAChC,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,CAAC;gBACvD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC;gBAC9F,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;oBAC9B,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;wBAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;gBAClE,CAAC;YACH,CAAC;YACD,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,CAAC;QACb,CAAC;IACH,CAAC;IAEO,SAAS,CAAC,IAAY;QAC5B,IAAI,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,MAAM,IAAI,WAAW,CACnB,cAAc,EACd,4BAA4B,IAAI,sBAAsB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAC9E,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,OAA2B;QACtD,IAAI,CAAC;YACH,OAAO,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;YACtB,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,KAAc;QACpC,OAAO,CACL,KAAK,YAAY,YAAY;YAC7B,KAAK,CAAC,UAAU,KAAK,GAAG;YACxB,CAAC,KAAK,CAAC,IAAI,KAAK,eAAe,IAAI,KAAK,CAAC,OAAO,KAAK,eAAe,CAAC,CACtE,CAAC;IACJ,CAAC;IAEO,qBAAqB,CAAC,KAAc;QAC1C,OAAO,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,UAAU,IAAI,GAAG,IAAI,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC;IAC5F,CAAC;IAEO,WAAW,CAAC,MAAqB,EAAE,IAAa,EAAE,YAAwB;QAChF,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC;YACnB,YAAY,EAAE,eAAe,CAAC,YAAY,CAAC;YAC3C,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;YAC3B,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;YACxD,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,UAAU,EAAE,cAAc,CAAC,IAAI,CAAC;YAChC,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/session/tab-lock.d.ts

@@ -0,0 +1,30 @@
+/** Web Locks surface the wallet needs (browsers and fakes in tests). */
+export interface LockManagerLike {
+    request(name: string, options: {
+        mode?: string;
+        ifAvailable?: boolean;
+        steal?: boolean;
+    }, callback: (lock: unknown) => Promise<void>): Promise<undefined | 'acquired'>;
+}
+/**
+ * Whether this tab owns the wallet (X24): one open wallet per browser, "use here" steals the lock. The
+ * lock is held from inside the request callback; a stolen lock rejects the request and informs the
+ * `onLost` handlers, exactly like the Web Locks API.
+ */
+export declare class TabLock {
+    private readonly locks;
+    private readonly name;
+    private held;
+    private lostHandlers;
+    private releaseResolver?;
+    constructor(locks?: LockManagerLike | undefined, name?: string);
+    get isHeld(): boolean;
+    /** Acquires the lock when free; never waits. */
+    acquire(): Promise<'acquired' | 'busy'>;
+    /** "Use here": takes the lock from the other tab; the loser is informed through `onLost`. */
+    takeOver(): void;
+    onLost(callback: () => void): void;
+    release(): void;
+    private onStolen;
+}
+//# sourceMappingURL=tab-lock.d.ts.map

package/dist/session/tab-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tab-lock.d.ts","sourceRoot":"","sources":["../../src/session/tab-lock.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,MAAM,WAAW,eAAe;IAC9B,OAAO,CACL,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,EAClE,QAAQ,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,CAAC,GACzC,OAAO,CAAC,SAAS,GAAG,UAAU,CAAC,CAAC;CACpC;AAED;;;;GAIG;AACH,qBAAa,OAAO;IAMhB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAGtB,OAAO,CAAC,QAAQ,CAAC,IAAI;IARvB,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,YAAY,CAAsB;IAC1C,OAAO,CAAC,eAAe,CAAC,CAAa;gBAGlB,KAAK,GAAE,eAAe,GAAG,SAElC,EACS,IAAI,SAAe;IAGtC,IAAI,MAAM,IAAI,OAAO,CAEpB;IAED,gDAAgD;IAChD,OAAO,IAAI,OAAO,CAAC,UAAU,GAAG,MAAM,CAAC;IA+BvC,6FAA6F;IAC7F,QAAQ,IAAI,IAAI;IAmBhB,MAAM,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,IAAI;IAIlC,OAAO,IAAI,IAAI;IAMf,OAAO,CAAC,QAAQ;CAIjB"}

package/dist/session/tab-lock.js

@@ -0,0 +1,79 @@
+/**
+ * Whether this tab owns the wallet (X24): one open wallet per browser, "use here" steals the lock. The
+ * lock is held from inside the request callback; a stolen lock rejects the request and informs the
+ * `onLost` handlers, exactly like the Web Locks API.
+ */
+export class TabLock {
+    constructor(locks = globalThis.navigator?.locks, name = 'dfx-wallet') {
+        this.locks = locks;
+        this.name = name;
+        this.held = false;
+        this.lostHandlers = [];
+    }
+    get isHeld() {
+        return this.held;
+    }
+    /** Acquires the lock when free; never waits. */
+    acquire() {
+        const locks = this.locks;
+        if (!locks) {
+            this.held = true;
+            return Promise.resolve('acquired');
+        }
+        return new Promise((resolve) => {
+            let settled = false;
+            const finish = (result) => {
+                if (!settled) {
+                    settled = true;
+                    resolve(result);
+                }
+            };
+            void locks
+                .request(this.name, { ifAvailable: true }, async (lock) => {
+                if (lock == null) {
+                    finish('busy');
+                    return;
+                }
+                this.held = true;
+                finish('acquired');
+                await new Promise((resolveRelease) => (this.releaseResolver = resolveRelease));
+                this.held = false;
+            })
+                .catch(() => this.onStolen())
+                .finally(() => finish(this.held ? 'acquired' : 'busy'));
+        });
+    }
+    /** "Use here": takes the lock from the other tab; the loser is informed through `onLost`. */
+    takeOver() {
+        if (!this.locks) {
+            this.held = true;
+            return;
+        }
+        const locks = this.locks;
+        if (!locks) {
+            this.held = true;
+            return;
+        }
+        void locks
+            .request(this.name, { steal: true }, async () => {
+            this.held = true;
+            await new Promise((resolveRelease) => (this.releaseResolver = resolveRelease));
+            this.held = false;
+        })
+            .catch(() => this.onStolen());
+    }
+    onLost(callback) {
+        this.lostHandlers.push(callback);
+    }
+    release() {
+        this.held = false;
+        this.releaseResolver?.();
+        this.releaseResolver = undefined;
+    }
+    onStolen() {
+        this.held = false;
+        for (const handler of this.lostHandlers)
+            handler();
+    }
+}
+//# sourceMappingURL=tab-lock.js.map

package/dist/session/tab-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tab-lock.js","sourceRoot":"","sources":["../../src/session/tab-lock.ts"],"names":[],"mappings":"AASA;;;;GAIG;AACH,MAAM,OAAO,OAAO;IAKlB,YACmB,QACf,UAAU,CAAC,SACZ,EAAE,KAAK,EACS,OAAO,YAAY;QAHnB,UAAK,GAAL,KAAK,CAEd;QACS,SAAI,GAAJ,IAAI,CAAe;QAR9B,SAAI,GAAG,KAAK,CAAC;QACb,iBAAY,GAAmB,EAAE,CAAC;IAQvC,CAAC;IAEJ,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC;IAED,gDAAgD;IAChD,OAAO;QACL,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,OAAO,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACrC,CAAC;QACD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;YAC7B,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,MAAM,MAAM,GAAG,CAAC,MAA2B,EAAQ,EAAE;gBACnD,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,OAAO,GAAG,IAAI,CAAC;oBACf,OAAO,CAAC,MAAM,CAAC,CAAC;gBAClB,CAAC;YACH,CAAC,CAAC;YAEF,KAAK,KAAK;iBACP,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;gBACxD,IAAI,IAAI,IAAI,IAAI,EAAE,CAAC;oBACjB,MAAM,CAAC,MAAM,CAAC,CAAC;oBACf,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;gBACjB,MAAM,CAAC,UAAU,CAAC,CAAC;gBACnB,MAAM,IAAI,OAAO,CAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,GAAG,cAAc,CAAC,CAAC,CAAC;gBACrF,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;YACpB,CAAC,CAAC;iBACD,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;iBAC5B,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAC5D,CAAC,CAAC,CAAC;IACL,CAAC;IAED,6FAA6F;IAC7F,QAAQ;QACN,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,OAAO;QACT,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACzB,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,OAAO;QACT,CAAC;QACD,KAAK,KAAK;aACP,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,KAAK,IAAI,EAAE;YAC9C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;YACjB,MAAM,IAAI,OAAO,CAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,eAAe,GAAG,cAAc,CAAC,CAAC,CAAC;YACrF,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;QACpB,CAAC,CAAC;aACD,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IAClC,CAAC;IAED,MAAM,CAAC,QAAoB;QACzB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED,OAAO;QACL,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;QAClB,IAAI,CAAC,eAAe,EAAE,EAAE,CAAC;QACzB,IAAI,CAAC,eAAe,GAAG,SAAS,CAAC;IACnC,CAAC;IAEO,QAAQ;QACd,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC;QAClB,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,YAAY;YAAE,OAAO,EAAE,CAAC;IACrD,CAAC;CACF"}

package/dist/signing/auto-signer.d.ts

@@ -0,0 +1,26 @@
+import type { WalletEnv } from '../config/environment';
+import { KeyRing } from '../derivation/keyring';
+import { WalletError } from '../util/errors';
+/** The server message did not exactly match the DFX login text of this address — never signed. */
+export declare class LoginMessageMismatchError extends WalletError {
+    constructor(detail: string);
+}
+/** EIP-191 personal_sign hash of the message. */
+export declare function eip191MessageHash(message: string): Uint8Array;
+/** EIP-191 signature as the DFX API expects it: 0x-prefixed lowercase hex r‖s‖v, v = 27 + recovery id. */
+export declare function signEip191(message: string, privateKey: Uint8Array): string;
+/**
+ * The only silent signer of the wallet (§8.5): signs exactly the DFX login text of one of the wallet's own
+ * addresses — EVM EIP-191, Bitcoin BIP-137 P2WPKH, Spark D31 — and refuses every other message byte-for-byte,
+ * so a malicious server text can never be signed under the login pretext.
+ */
+export declare class LoginAutoSigner {
+    private readonly keys;
+    private readonly env;
+    constructor(keys: KeyRing, env: WalletEnv);
+    sign(family: 'evm' | 'bitcoin' | 'spark', address: string, serverMessage: string): string;
+    private signEvm;
+    private signBitcoin;
+    private signSpark;
+}
+//# sourceMappingURL=auto-signer.d.ts.map

package/dist/signing/auto-signer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-signer.d.ts","sourceRoot":"","sources":["../../src/signing/auto-signer.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,OAAO,EAAkB,MAAM,uBAAuB,CAAC;AAEhE,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAK7C,kGAAkG;AAClG,qBAAa,yBAA0B,SAAQ,WAAW;gBAC5C,MAAM,EAAE,MAAM;CAG3B;AAOD,iDAAiD;AACjD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CAG7D;AAED,0GAA0G;AAC1G,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,MAAM,CAG1E;AAED;;;;GAIG;AACH,qBAAa,eAAe;IAExB,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,GAAG;gBADH,IAAI,EAAE,OAAO,EACb,GAAG,EAAE,SAAS;IAGjC,IAAI,CAAC,MAAM,EAAE,KAAK,GAAG,SAAS,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM;IAoBzF,OAAO,CAAC,OAAO;IASf,OAAO,CAAC,WAAW;IAUnB,OAAO,CAAC,SAAS;CAMlB"}

package/dist/signing/auto-signer.js

@@ -0,0 +1,76 @@
+import { secp256k1 } from '@noble/curves/secp256k1';
+import { keccak_256 } from '@noble/hashes/sha3';
+import { withPrivateKey } from '../derivation/keyring';
+import { bytesToHex, concatBytes, utf8ToBytes } from '../util/bytes';
+import { WalletError } from '../util/errors';
+import { buildLoginMessage } from './login-messages';
+import { signBitcoinMessageBip137 } from './bitcoin-message';
+import { signSparkLogin } from './spark-login';
+/** The server message did not exactly match the DFX login text of this address — never signed. */
+export class LoginMessageMismatchError extends WalletError {
+    constructor(detail) {
+        super('login-message-mismatch', `Refusing to sign: ${detail}`);
+    }
+}
+/** How many EVM accounts are scanned when matching a login address (the wallet uses index 0 by default). */
+const EVM_ADDRESS_SCAN = 100;
+const EIP_191_PREFIX = 'Ethereum Signed Message:\n';
+/** EIP-191 personal_sign hash of the message. */
+export function eip191MessageHash(message) {
+    const content = utf8ToBytes(message);
+    return keccak_256(concatBytes(utf8ToBytes(`\x19${EIP_191_PREFIX}${content.length}`), content));
+}
+/** EIP-191 signature as the DFX API expects it: 0x-prefixed lowercase hex r‖s‖v, v = 27 + recovery id. */
+export function signEip191(message, privateKey) {
+    const signature = secp256k1.sign(eip191MessageHash(message), privateKey);
+    return `0x${bytesToHex(concatBytes(signature.toBytes('compact'), new Uint8Array([27 + signature.recovery])))}`;
+}
+/**
+ * The only silent signer of the wallet (§8.5): signs exactly the DFX login text of one of the wallet's own
+ * addresses — EVM EIP-191, Bitcoin BIP-137 P2WPKH, Spark D31 — and refuses every other message byte-for-byte,
+ * so a malicious server text can never be signed under the login pretext.
+ */
+export class LoginAutoSigner {
+    constructor(keys, env) {
+        this.keys = keys;
+        this.env = env;
+    }
+    sign(family, address, serverMessage) {
+        const expected = buildLoginMessage(this.env, address);
+        if (serverMessage !== expected) {
+            throw new LoginMessageMismatchError(`the server message is not the ${this.env} login text of ${address} (expected ${JSON.stringify(expected)})`);
+        }
+        switch (family) {
+            case 'evm':
+                return this.signEvm(address, serverMessage);
+            case 'bitcoin':
+                return this.signBitcoin(address, serverMessage);
+            case 'spark':
+                return this.signSpark(address, serverMessage);
+            default:
+                throw new LoginMessageMismatchError(`unknown login family ${String(family)}`);
+        }
+    }
+    signEvm(address, message) {
+        for (let index = 0; index < EVM_ADDRESS_SCAN; index++) {
+            if (this.keys.evm(index).address.toLowerCase() === address.toLowerCase()) {
+                return withPrivateKey(this.keys, { family: 'evm', index }, (privateKey) => signEip191(message, privateKey));
+            }
+        }
+        throw new LoginMessageMismatchError(`${address} is not an EVM address of this wallet`);
+    }
+    signBitcoin(address, message) {
+        // The Bitcoin login address is receive chain 0, index 0 of the wallet's network.
+        if (this.keys.bitcoinAddress(0, 0).address !== address) {
+            throw new LoginMessageMismatchError(`${address} is not the Bitcoin login address of this wallet`);
+        }
+        return withPrivateKey(this.keys, { family: 'bitcoin', chain: 0, index: 0 }, (privateKey) => signBitcoinMessageBip137(message, privateKey));
+    }
+    signSpark(address, message) {
+        if (this.keys.sparkIdentity().address !== address) {
+            throw new LoginMessageMismatchError(`${address} is not the Spark address of this wallet`);
+        }
+        return withPrivateKey(this.keys, { family: 'spark' }, (privateKey) => signSparkLogin(message, privateKey));
+    }
+}
+//# sourceMappingURL=auto-signer.js.map

package/dist/signing/auto-signer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-signer.js","sourceRoot":"","sources":["../../src/signing/auto-signer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEhD,OAAO,EAAW,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAE/C,kGAAkG;AAClG,MAAM,OAAO,yBAA0B,SAAQ,WAAW;IACxD,YAAY,MAAc;QACxB,KAAK,CAAC,wBAAwB,EAAE,qBAAqB,MAAM,EAAE,CAAC,CAAC;IACjE,CAAC;CACF;AAED,4GAA4G;AAC5G,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAE7B,MAAM,cAAc,GAAG,4BAA4B,CAAC;AAEpD,iDAAiD;AACjD,MAAM,UAAU,iBAAiB,CAAC,OAAe;IAC/C,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IACrC,OAAO,UAAU,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,cAAc,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;AACjG,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,UAAU,CAAC,OAAe,EAAE,UAAsB;IAChE,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC,CAAC;IACzE,OAAO,KAAK,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,IAAI,UAAU,CAAC,CAAC,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACjH,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,eAAe;IAC1B,YACmB,IAAa,EACb,GAAc;QADd,SAAI,GAAJ,IAAI,CAAS;QACb,QAAG,GAAH,GAAG,CAAW;IAC9B,CAAC;IAEJ,IAAI,CAAC,MAAmC,EAAE,OAAe,EAAE,aAAqB;QAC9E,MAAM,QAAQ,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACtD,IAAI,aAAa,KAAK,QAAQ,EAAE,CAAC;YAC/B,MAAM,IAAI,yBAAyB,CACjC,iCAAiC,IAAI,CAAC,GAAG,kBAAkB,OAAO,cAAc,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAC5G,CAAC;QACJ,CAAC;QAED,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,KAAK;gBACR,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YAC9C,KAAK,SAAS;gBACZ,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YAClD,KAAK,OAAO;gBACV,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;YAChD;gBACE,MAAM,IAAI,yBAAyB,CAAC,wBAAwB,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IAEO,OAAO,CAAC,OAAe,EAAE,OAAe;QAC9C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,gBAAgB,EAAE,KAAK,EAAE,EAAE,CAAC;YACtD,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;gBACzE,OAAO,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;YAC9G,CAAC;QACH,CAAC;QACD,MAAM,IAAI,yBAAyB,CAAC,GAAG,OAAO,uCAAuC,CAAC,CAAC;IACzF,CAAC;IAEO,WAAW,CAAC,OAAe,EAAE,OAAe;QAClD,iFAAiF;QACjF,IAAI,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YACvD,MAAM,IAAI,yBAAyB,CAAC,GAAG,OAAO,kDAAkD,CAAC,CAAC;QACpG,CAAC;QACD,OAAO,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC,UAAU,EAAE,EAAE,CACzF,wBAAwB,CAAC,OAAO,EAAE,UAAU,CAAC,CAC9C,CAAC;IACJ,CAAC;IAEO,SAAS,CAAC,OAAe,EAAE,OAAe;QAChD,IAAI,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YAClD,MAAM,IAAI,yBAAyB,CAAC,GAAG,OAAO,0CAA0C,CAAC,CAAC;QAC5F,CAAC;QACD,OAAO,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;IAC7G,CAAC;CACF"}

package/dist/signing/bitcoin-message.d.ts

@@ -0,0 +1,11 @@
+import type { BitcoinNetwork } from '../config/environment';
+/** BIP-137 magic hash: double SHA-256 over varint-length prefix and message. */
+export declare function bitcoinMessageMagicHash(message: string): Uint8Array;
+/** Signs the message with a private key (called through `withPrivateKey`); base64, header 39..42. */
+export declare function signBitcoinMessageBip137(message: string, privateKey: Uint8Array): string;
+/**
+ * Verifies a BIP-137 P2WPKH signature (header 39..42) of the given message against the given native segwit
+ * address. Everything else — other headers, malformed base64, wrong length, failed recovery — is `false`.
+ */
+export declare function verifyBitcoinMessage(network: BitcoinNetwork, address: string, message: string, signature: string): boolean;
+//# sourceMappingURL=bitcoin-message.d.ts.map

package/dist/signing/bitcoin-message.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bitcoin-message.d.ts","sourceRoot":"","sources":["../../src/signing/bitcoin-message.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AA6B5D,gFAAgF;AAChF,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CASnE;AAED,qGAAqG;AACrG,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,MAAM,CAKxF;AAED;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,GAChB,OAAO,CAYT"}

package/dist/signing/bitcoin-message.js

@@ -0,0 +1,62 @@
+import { secp256k1 } from '@noble/curves/secp256k1';
+import { sha256 } from '@noble/hashes/sha2';
+import { base64 } from '@scure/base';
+import { p2wpkhAddress } from '../derivation/bitcoin-keys';
+import { concatBytes, utf8ToBytes } from '../util/bytes';
+/**
+ * BIP-137 message signatures for the wallet's P2WPKH login address: Electrum-style compact signature with
+ * header 39..42 (27 + 12 + recovery id), base64, over the double-SHA-256 magic hash — exactly what the DFX
+ * API verifies with bitcoinjs-message. Header values of other script types are not produced by this wallet.
+ */
+const MAGIC_PREFIX = 'Bitcoin Signed Message:\n';
+const P2WPKH_HEADER_BASE = 39;
+function varInt(length) {
+    if (length < 0xfd)
+        return new Uint8Array([length]);
+    if (length <= 0xffff)
+        return new Uint8Array([0xfd, length & 0xff, (length >>> 8) & 0xff]);
+    if (length <= 0xffffffff)
+        return new Uint8Array([0xfe, length & 0xff, (length >>> 8) & 0xff, (length >>> 16) & 0xff, length >>> 24]);
+    return new Uint8Array([
+        0xff,
+        length & 0xff,
+        (length >>> 8) & 0xff,
+        (length >>> 16) & 0xff,
+        (length >>> 24) & 0xff,
+        0,
+        0,
+        0,
+    ]);
+}
+/** BIP-137 magic hash: double SHA-256 over varint-length prefix and message. */
+export function bitcoinMessageMagicHash(message) {
+    const messageBytes = utf8ToBytes(message);
+    const preimage = concatBytes(varInt(MAGIC_PREFIX.length), utf8ToBytes(MAGIC_PREFIX), varInt(messageBytes.length), messageBytes);
+    return sha256(sha256(preimage));
+}
+/** Signs the message with a private key (called through `withPrivateKey`); base64, header 39..42. */
+export function signBitcoinMessageBip137(message, privateKey) {
+    const signature = secp256k1.sign(bitcoinMessageMagicHash(message), privateKey);
+    return base64.encode(concatBytes(new Uint8Array([P2WPKH_HEADER_BASE + signature.recovery]), signature.toBytes('compact')));
+}
+/**
+ * Verifies a BIP-137 P2WPKH signature (header 39..42) of the given message against the given native segwit
+ * address. Everything else — other headers, malformed base64, wrong length, failed recovery — is `false`.
+ */
+export function verifyBitcoinMessage(network, address, message, signature) {
+    try {
+        const decoded = base64.decode(signature);
+        if (decoded.length !== 65)
+            return false;
+        const header = decoded[0];
+        if (header < P2WPKH_HEADER_BASE || header > P2WPKH_HEADER_BASE + 3)
+            return false;
+        const compact = secp256k1.Signature.fromCompact(decoded.subarray(1)).addRecoveryBit(header - P2WPKH_HEADER_BASE);
+        const publicKey = compact.recoverPublicKey(bitcoinMessageMagicHash(message)).toRawBytes(true);
+        return p2wpkhAddress(publicKey, network) === address;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=bitcoin-message.js.map

package/dist/signing/bitcoin-message.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bitcoin-message.js","sourceRoot":"","sources":["../../src/signing/bitcoin-message.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEzD;;;;GAIG;AACH,MAAM,YAAY,GAAG,2BAA2B,CAAC;AACjD,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAE9B,SAAS,MAAM,CAAC,MAAc;IAC5B,IAAI,MAAM,GAAG,IAAI;QAAE,OAAO,IAAI,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IACnD,IAAI,MAAM,IAAI,MAAM;QAAE,OAAO,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IAC1F,IAAI,MAAM,IAAI,UAAU;QACtB,OAAO,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,GAAG,IAAI,EAAE,CAAC,MAAM,KAAK,EAAE,CAAC,GAAG,IAAI,EAAE,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC;IAC7G,OAAO,IAAI,UAAU,CAAC;QACpB,IAAI;QACJ,MAAM,GAAG,IAAI;QACb,CAAC,MAAM,KAAK,CAAC,CAAC,GAAG,IAAI;QACrB,CAAC,MAAM,KAAK,EAAE,CAAC,GAAG,IAAI;QACtB,CAAC,MAAM,KAAK,EAAE,CAAC,GAAG,IAAI;QACtB,CAAC;QACD,CAAC;QACD,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,MAAM,YAAY,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,WAAW,CAC1B,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,EAC3B,WAAW,CAAC,YAAY,CAAC,EACzB,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,EAC3B,YAAY,CACb,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;AAClC,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,wBAAwB,CAAC,OAAe,EAAE,UAAsB;IAC9E,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC,CAAC;IAC/E,OAAO,MAAM,CAAC,MAAM,CAClB,WAAW,CAAC,IAAI,UAAU,CAAC,CAAC,kBAAkB,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CACrG,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAuB,EACvB,OAAe,EACf,OAAe,EACf,SAAiB;IAEjB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,OAAO,CAAC,MAAM,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;QACxC,MAAM,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QAC1B,IAAI,MAAM,GAAG,kBAAkB,IAAI,MAAM,GAAG,kBAAkB,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACjF,MAAM,OAAO,GAAG,SAAS,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,GAAG,kBAAkB,CAAC,CAAC;QACjH,MAAM,SAAS,GAAG,OAAO,CAAC,gBAAgB,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC9F,OAAO,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/signing/login-messages.d.ts

@@ -0,0 +1,15 @@
+import type { WalletEnv } from '../config/environment';
+/**
+ * The two login texts of the DFX API, byte-for-byte. `general` is the wallet login text for every blockchain
+ * (`Config.auth.signMessageGeneral`, config.ts:443-445); `fallback` is the historical DeFiChain text
+ * (`Config.auth.signMessage`). The API puts the environment prefix in front of both (config.ts:410), the
+ * address behind. Changing any byte invalidates every future login signature.
+ */
+export declare const LOGIN_TEMPLATES: Readonly<{
+    readonly general: "By_signing_this_message,_you_confirm_that_you_are_the_sole_owner_of_the_provided_Blockchain_address._Your_ID:_";
+    readonly fallback: "By_signing_this_message,_you_confirm_that_you_are_the_sole_owner_of_the_provided_DeFiChain_address_and_are_in_possession_of_its_private_key._Your_ID:_";
+}>;
+export type LoginTemplate = keyof typeof LOGIN_TEMPLATES;
+/** The exact text the DFX API asks a wallet address to sign: prefix + template + address. */
+export declare function buildLoginMessage(env: WalletEnv, address: string, template?: LoginTemplate): string;
+//# sourceMappingURL=login-messages.d.ts.map

package/dist/signing/login-messages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-messages.d.ts","sourceRoot":"","sources":["../../src/signing/login-messages.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAGvD;;;;;GAKG;AACH,eAAO,MAAM,eAAe;;;EAKjB,CAAC;AAEZ,MAAM,MAAM,aAAa,GAAG,MAAM,OAAO,eAAe,CAAC;AAEzD,6FAA6F;AAC7F,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,GAAE,aAAyB,GAAG,MAAM,CAE9G"}

package/dist/signing/login-messages.js

@@ -0,0 +1,16 @@
+import { SIGN_MESSAGE_PREFIX } from '../config/environment';
+/**
+ * The two login texts of the DFX API, byte-for-byte. `general` is the wallet login text for every blockchain
+ * (`Config.auth.signMessageGeneral`, config.ts:443-445); `fallback` is the historical DeFiChain text
+ * (`Config.auth.signMessage`). The API puts the environment prefix in front of both (config.ts:410), the
+ * address behind. Changing any byte invalidates every future login signature.
+ */
+export const LOGIN_TEMPLATES = Object.freeze({
+    general: 'By_signing_this_message,_you_confirm_that_you_are_the_sole_owner_of_the_provided_Blockchain_address._Your_ID:_',
+    fallback: 'By_signing_this_message,_you_confirm_that_you_are_the_sole_owner_of_the_provided_DeFiChain_address_and_are_in_possession_of_its_private_key._Your_ID:_',
+});
+/** The exact text the DFX API asks a wallet address to sign: prefix + template + address. */
+export function buildLoginMessage(env, address, template = 'general') {
+    return SIGN_MESSAGE_PREFIX[env] + LOGIN_TEMPLATES[template] + address;
+}
+//# sourceMappingURL=login-messages.js.map

package/dist/signing/login-messages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-messages.js","sourceRoot":"","sources":["../../src/signing/login-messages.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC;IAC3C,OAAO,EACL,gHAAgH;IAClH,QAAQ,EACN,wJAAwJ;CAClJ,CAAC,CAAC;AAIZ,6FAA6F;AAC7F,MAAM,UAAU,iBAAiB,CAAC,GAAc,EAAE,OAAe,EAAE,WAA0B,SAAS;IACpG,OAAO,mBAAmB,CAAC,GAAG,CAAC,GAAG,eAAe,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC;AACxE,CAAC"}

package/dist/signing/login-text-guard.d.ts

@@ -0,0 +1,3 @@
+/** Whether the text (or its UTF-8 bytes) is a DFX login text, whatever the prefix and address. */
+export declare function isDfxLoginText(text: string | Uint8Array): boolean;
+//# sourceMappingURL=login-text-guard.d.ts.map

package/dist/signing/login-text-guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-text-guard.d.ts","sourceRoot":"","sources":["../../src/signing/login-text-guard.ts"],"names":[],"mappings":"AAUA,kGAAkG;AAClG,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,GAAG,OAAO,CAGjE"}

package/dist/signing/login-text-guard.js

@@ -0,0 +1,13 @@
+import { bytesToUtf8 } from '../util/bytes';
+/**
+ * Shape of every DFX login text: optional lower-case environment prefix `[<env>]_`, then one of the two
+ * login templates. Used to refuse exactly these texts in every signing path that is not the login auto-signer
+ * (§9.3): message signing, dApp requests and the Spark signer proxy must never produce a DFX login proof.
+ */
+const DFX_LOGIN_TEXT = /^(\[[a-z]{1,16}\]_)?By_signing_this_message,_you_confirm_that_you_are_the_sole_owner_of_the_provided_(Blockchain|DeFiChain)_address/;
+/** Whether the text (or its UTF-8 bytes) is a DFX login text, whatever the prefix and address. */
+export function isDfxLoginText(text) {
+    const value = typeof text === 'string' ? text : bytesToUtf8(text);
+    return DFX_LOGIN_TEXT.test(value);
+}
+//# sourceMappingURL=login-text-guard.js.map

package/dist/signing/login-text-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-text-guard.js","sourceRoot":"","sources":["../../src/signing/login-text-guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C;;;;GAIG;AACH,MAAM,cAAc,GAClB,qIAAqI,CAAC;AAExI,kGAAkG;AAClG,MAAM,UAAU,cAAc,CAAC,IAAyB;IACtD,MAAM,KAAK,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAClE,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC"}

package/dist/signing/spark-login.d.ts

@@ -0,0 +1,17 @@
+/**
+ * D31 Spark login for passkey Spark addresses: ECDSA secp256k1 over
+ * Keccak-256(0x18 ‖ UTF-8 tag ‖ UTF-8 message) with the Spark identity key, RFC 6979, low-S, 64-byte
+ * compact r‖s as lowercase hex. The tag length 0x18 = 24 is the length of the tag itself. Pinned by the
+ * DFX API test vectors in the derivation fixture (private key 32 × 0x11) and by every login vector.
+ */
+export declare const SPARK_LOGIN_TAG = "dfx.swiss/spark-login/v1";
+/** D31 digest of the login message. */
+export declare function sparkLoginDigestV1(message: string): Uint8Array;
+/** Signs the D31 digest with a private key (called through `withPrivateKey`); compact r‖s lowercase hex. */
+export declare function signSparkLogin(message: string, privateKey: Uint8Array): string;
+/**
+ * Verifies a D31 signature against the expected identity public key by recovering it from the digest and the
+ * compact signature (recovery ids 0..3). Malformed input never throws, it just does not verify.
+ */
+export declare function verifySparkLogin(message: string, signature: string, publicKey: Uint8Array): boolean;
+//# sourceMappingURL=spark-login.d.ts.map

package/dist/signing/spark-login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spark-login.d.ts","sourceRoot":"","sources":["../../src/signing/spark-login.ts"],"names":[],"mappings":"AAIA;;;;;GAKG;AACH,eAAO,MAAM,eAAe,6BAA6B,CAAC;AAE1D,uCAAuC;AACvC,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CAG9D;AAED,4GAA4G;AAC5G,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,GAAG,MAAM,CAG9E;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAsBnG"}

package/dist/signing/spark-login.js

@@ -0,0 +1,51 @@
+import { secp256k1 } from '@noble/curves/secp256k1';
+import { keccak_256 } from '@noble/hashes/sha3';
+import { bytesToHex, concatBytes, hexToBytes, utf8ToBytes } from '../util/bytes';
+/**
+ * D31 Spark login for passkey Spark addresses: ECDSA secp256k1 over
+ * Keccak-256(0x18 ‖ UTF-8 tag ‖ UTF-8 message) with the Spark identity key, RFC 6979, low-S, 64-byte
+ * compact r‖s as lowercase hex. The tag length 0x18 = 24 is the length of the tag itself. Pinned by the
+ * DFX API test vectors in the derivation fixture (private key 32 × 0x11) and by every login vector.
+ */
+export const SPARK_LOGIN_TAG = 'dfx.swiss/spark-login/v1';
+/** D31 digest of the login message. */
+export function sparkLoginDigestV1(message) {
+    const tag = utf8ToBytes(SPARK_LOGIN_TAG);
+    return keccak_256(concatBytes(new Uint8Array([tag.length]), tag, utf8ToBytes(message)));
+}
+/** Signs the D31 digest with a private key (called through `withPrivateKey`); compact r‖s lowercase hex. */
+export function signSparkLogin(message, privateKey) {
+    const signature = secp256k1.sign(sparkLoginDigestV1(message), privateKey);
+    return bytesToHex(signature.toBytes('compact'));
+}
+/**
+ * Verifies a D31 signature against the expected identity public key by recovering it from the digest and the
+ * compact signature (recovery ids 0..3). Malformed input never throws, it just does not verify.
+ */
+export function verifySparkLogin(message, signature, publicKey) {
+    try {
+        const compact = typeof signature === 'string' && /^[0-9a-f]{128}$/.test(signature) ? hexToBytes(signature) : null;
+        if (!compact)
+            return false;
+        const digest = sparkLoginDigestV1(message);
+        for (let recoveryId = 0; recoveryId < 4; recoveryId++) {
+            try {
+                const recovered = secp256k1.Signature.fromCompact(compact)
+                    .addRecoveryBit(recoveryId)
+                    .recoverPublicKey(digest)
+                    .toRawBytes(true);
+                if (recovered.length === publicKey.length && recovered.every((byte, i) => byte === publicKey[i])) {
+                    return true;
+                }
+            }
+            catch {
+                // try the next recovery id
+            }
+        }
+        return false;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=spark-login.js.map

package/dist/signing/spark-login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spark-login.js","sourceRoot":"","sources":["../../src/signing/spark-login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAEjF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,0BAA0B,CAAC;AAE1D,uCAAuC;AACvC,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,GAAG,GAAG,WAAW,CAAC,eAAe,CAAC,CAAC;IACzC,OAAO,UAAU,CAAC,WAAW,CAAC,IAAI,UAAU,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAC1F,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,UAAsB;IACpE,MAAM,SAAS,GAAG,SAAS,CAAC,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,EAAE,UAAU,CAAC,CAAC;IAC1E,OAAO,UAAU,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;AAClD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,SAAiB,EAAE,SAAqB;IACxF,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,OAAO,SAAS,KAAK,QAAQ,IAAI,iBAAiB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAClH,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QAC3B,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAC3C,KAAK,IAAI,UAAU,GAAG,CAAC,EAAE,UAAU,GAAG,CAAC,EAAE,UAAU,EAAE,EAAE,CAAC;YACtD,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC,WAAW,CAAC,OAAO,CAAC;qBACvD,cAAc,CAAC,UAAU,CAAC;qBAC1B,gBAAgB,CAAC,MAAM,CAAC;qBACxB,UAAU,CAAC,IAAI,CAAC,CAAC;gBACpB,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBACjG,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,2BAA2B;YAC7B,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/util/bytes.d.ts

@@ -0,0 +1,11 @@
+import { bytesToHex, bytesToUtf8, concatBytes, hexToBytes, isBytes, utf8ToBytes } from '@noble/hashes/utils';
+export { bytesToHex, bytesToUtf8, concatBytes, hexToBytes, isBytes, utf8ToBytes };
+/** Base64url without padding, as used by WebAuthn JSON and JWT. */
+export declare function base64UrlEncode(bytes: Uint8Array): string;
+/** Decodes base64url; trailing `=` padding is accepted and ignored. */
+export declare function base64UrlDecode(text: string): Uint8Array;
+/** Compares two byte arrays in time independent of the position of the first difference. */
+export declare function equalBytes(a: Uint8Array, b: Uint8Array): boolean;
+/** Overwrites the given buffers with zeros, e.g. key material that is no longer needed. */
+export declare function wipeBytes(...arrays: (Uint8Array | undefined)[]): void;
+//# sourceMappingURL=bytes.d.ts.map

package/dist/util/bytes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bytes.d.ts","sourceRoot":"","sources":["../../src/util/bytes.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAE7G,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AAElF,mEAAmE;AACnE,wBAAgB,eAAe,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAEzD;AAED,uEAAuE;AACvE,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAExD;AAED,4FAA4F;AAC5F,wBAAgB,UAAU,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,GAAG,OAAO,CAKhE;AAED,2FAA2F;AAC3F,wBAAgB,SAAS,CAAC,GAAG,MAAM,EAAE,CAAC,UAAU,GAAG,SAAS,CAAC,EAAE,GAAG,IAAI,CAErE"}

package/dist/util/bytes.js

@@ -0,0 +1,26 @@
+import { base64urlnopad } from '@scure/base';
+import { bytesToHex, bytesToUtf8, concatBytes, hexToBytes, isBytes, utf8ToBytes } from '@noble/hashes/utils';
+export { bytesToHex, bytesToUtf8, concatBytes, hexToBytes, isBytes, utf8ToBytes };
+/** Base64url without padding, as used by WebAuthn JSON and JWT. */
+export function base64UrlEncode(bytes) {
+    return base64urlnopad.encode(bytes);
+}
+/** Decodes base64url; trailing `=` padding is accepted and ignored. */
+export function base64UrlDecode(text) {
+    return base64urlnopad.decode(text.replace(/=+$/, ''));
+}
+/** Compares two byte arrays in time independent of the position of the first difference. */
+export function equalBytes(a, b) {
+    if (a.length !== b.length)
+        return false;
+    let diff = 0;
+    for (let i = 0; i < a.length; i++)
+        diff |= a[i] ^ b[i];
+    return diff === 0;
+}
+/** Overwrites the given buffers with zeros, e.g. key material that is no longer needed. */
+export function wipeBytes(...arrays) {
+    for (const array of arrays)
+        array?.fill(0);
+}
+//# sourceMappingURL=bytes.js.map

package/dist/util/bytes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bytes.js","sourceRoot":"","sources":["../../src/util/bytes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAE7G,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;AAElF,mEAAmE;AACnE,MAAM,UAAU,eAAe,CAAC,KAAiB;IAC/C,OAAO,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,eAAe,CAAC,IAAY;IAC1C,OAAO,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,UAAU,CAAC,CAAa,EAAE,CAAa;IACrD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,OAAO,IAAI,KAAK,CAAC,CAAC;AACpB,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,SAAS,CAAC,GAAG,MAAkC;IAC7D,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC"}

package/dist/util/emitter.d.ts

@@ -0,0 +1,17 @@
+export type Listener<T> = (payload: T) => void;
+/**
+ * Minimal typed event emitter. A throwing listener neither stops the other listeners nor the emitting code;
+ * its error goes to `onListenerError`, by default rethrown asynchronously so that it still surfaces.
+ */
+export declare class Emitter<Events extends object> {
+    private readonly onListenerError;
+    private readonly listeners;
+    constructor(onListenerError?: (error: unknown) => void);
+    /** Registers a listener and returns a function that removes it. */
+    on<E extends keyof Events>(event: E, listener: Listener<Events[E]>): () => void;
+    off<E extends keyof Events>(event: E, listener: Listener<Events[E]>): void;
+    emit<E extends keyof Events>(event: E, payload: Events[E]): void;
+    listenerCount(event: keyof Events): number;
+    removeAllListeners(): void;
+}
+//# sourceMappingURL=emitter.d.ts.map

package/dist/util/emitter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"emitter.d.ts","sourceRoot":"","sources":["../../src/util/emitter.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,QAAQ,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,IAAI,CAAC;AAE/C;;;GAGG;AACH,qBAAa,OAAO,CAAC,MAAM,SAAS,MAAM;IAG5B,OAAO,CAAC,QAAQ,CAAC,eAAe;IAF5C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA+C;gBAE5C,eAAe,GAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAmB;IAErF,mEAAmE;IACnE,EAAE,CAAC,CAAC,SAAS,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI;IAU/E,GAAG,CAAC,CAAC,SAAS,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI;IAO1E,IAAI,CAAC,CAAC,SAAS,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI;IAYhE,aAAa,CAAC,KAAK,EAAE,MAAM,MAAM,GAAG,MAAM;IAI1C,kBAAkB,IAAI,IAAI;CAG3B"}